Zyxel XGS-4728F [15/491] Chapter 14 bandwidth control 69

Содержание

• Default login details 1
• Firmware version 4 0 edition 1 12 2010 1
• Intelligent layer 3 switch 1
• Www zyxel com 1
• Xgs 4526 4528f 4728f 1
• About this user s guide 3
• Documentation feedback 3
• Intended audience 3
• Need more help 3
• Note it is recommended you use the web configurator to configure the switch 3
• Related documentation 3
• Customer support 4
• Document conventions 5
• Note notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 5
• Syntax conventions 5
• Warnings and notes 5
• Warnings tell you about things that could harm you or your device 5
• Document conventions 6
• Figures in this user s guide may use the following generic icons the switch icon is not an exact representation of your device 6
• Icons used in figures 6
• Xgs 4526 4528f 4728f user s guide 6
• Safety warnings 7
• Xgs 4526 4528f 4728f user s guide 7
• Contents overview 9
• Technical reference 3 9
• User s guide 5 9
• About this user s guide 11
• Chapter 1 getting to know your switch 7 11
• Chapter 2 hardware installation and connection 3 11
• Chapter 3 hardware overview 7 11
• Contents overview 11
• Document conventions 11
• Part i user s guide 25 11
• Safety warnings 11
• Table of contents 11
• Table of contents 1 11
• Chapter 4 the web configurator 7 12
• Chapter 5 initial setup example 7 12
• Chapter 6 tutorials 3 12
• Chapter 7 system status and port statistics 5 13
• Chapter 8 basic setting 01 13
• Chapter 9 vlan 117 13
• Part ii technical reference 93 13
• Chapter 10 static mac forward setup 37 14
• Chapter 11 static multicast forward setup 41 14
• Chapter 12 filtering 45 14
• Chapter 13 spanning tree protocol 47 14
• Chapter 14 bandwidth control 69 15
• Chapter 15 broadcast storm control 73 15
• Chapter 16 mirroring 75 15
• Chapter 17 link aggregation 77 15
• Chapter 18 port authentication 87 15
• Chapter 19 port security 97 15
• Chapter 20 classifier 01 15
• Chapter 21 policy rule 07 16
• Chapter 22 queuing method 15 16
• Chapter 23 vlan stacking 19 16
• Chapter 24 multicast 27 16
• Chapter 25 aaa 43 17
• Chapter 26 ip source guard 59 17
• Chapter 27 loop guard 83 17
• Chapter 28 vlan mapping 87 18
• Chapter 29 layer 2 protocol tunneling 91 18
• Chapter 30 sflow 95 18
• Chapter 31 pppoe 99 18
• Chapter 32 error disable 09 18
• Chapter 33 private vlan 15 19
• Chapter 34 static route 19 19
• Chapter 35 policy routing 23 19
• Chapter 36 rip 27 19
• Chapter 37 ospf 31 19
• Chapter 38 igmp 45 19
• Chapter 39 dvmrp 49 20
• Chapter 40 differentiated services 53 20
• Chapter 41 dhcp 61 20
• Chapter 42 vrrp 71 20
• Chapter 43 arp learning 81 21
• Chapter 44 load sharing 87 21
• Chapter 45 maintenance 89 21
• Chapter 46 access control 97 21
• Chapter 47 diagnostic 23 22
• Chapter 48 syslog 25 22
• Chapter 49 cluster management 35 22
• Chapter 50 mac table 43 22
• Chapter 51 ip table 47 22
• User s guide 25
• Bridging example 27
• Getting to know your switch 27
• Hapter 27
• Introduction 27
• Figure 1 bridging application 28
• Figure 2 high performance switching 28
• High performance switching example 28
• Figure 3 gigabit to the desktop 29
• Gigabit ethernet to the desktop 29
• Ieee 802 q vlan application example 29
• Tag based vlan example 29
• Figure 4 shared server using vlan example 30
• Ipv6 support 30
• Ways to manage the switch 30
• Good habits for managing the switch 31
• Freestanding installation 33
• Hapter 33
• Hardware installation and connection 33
• Attaching the mounting brackets to the switch 34
• Failure to use the proper screws may damage the unit 34
• Mounting the switch on a rack 34
• Precautions 34
• Rack mounted installation requirements 34
• Figure 7 mounting the switch on a rack 35
• Mounting the switch on a rack 35
• Front panel connections 37
• Hapter 37
• Hardware overview 37
• An auto crossover auto mdi mdi x port automatically works with a straight through or crossover ethernet cable 38
• An auto negotiating port can detect and adjust to the optimum ethernet speed 100 1000 mbps and duplex mode full duplex or half duplex of the connected device 38
• Base t ports 38
• Chapter 3 hardware overview 38
• Connecto r description 38
• Dual personality interfaces 38
• Table 1 panel connections 38
• The following table describes the ports 38
• The switch has 24 1000base t auto negotiating auto crossover ethernet ports in 100 1000 mbps gigabit ethernet the speed can be 100 mbps or 1000 mbps the duplex mode can be both half or full duplex at 100 mbps and full duplex only at 1000 mbps 38
• There are 4 or 24 dual personality interfaces comprising 4 or 24 1000base t mini gbic combo ports for each interface you can connect either to the 1000base t port or the mini gbic port the mini gbic ports have priority over the 1000base t ports this means that if a mini gbic port and the corresponding 1000base t port are connected at the same time the 1000base t port will be disabled 38
• Xgs 4526 4528f 4728f user s guide 38
• Default ethernet settings 39
• Figure 11 transceiver installation example 39
• Mini gbic slots 39
• To avoid possible eye injury do not look into an operating fiber optic module s connectors 39
• Transceiver installation 39
• Figure 12 installed transceiver 40
• Figure 13 opening the transceiver s latch example 40
• Figure 14 transceiver removal example 40
• Transceiver removal 40
• B d e a c 41
• B d e f a c 41
• Figure 15 rear panel 41
• Figure 16 rear panel ac model 41
• Rear panel 41
• Xgs 4526 41
• Xgs 4528f or xgs 4728f 41
• Chapter 3 hardware overview 42
• Connecto r description 42
• Em 412 em 422 42
• Figure 17 rear panel dc model 42
• Figure 18 the front panel of the em 422 and em 412 modules 42
• Rear panel connections 42
• Table 2 panel connections 42
• The following figure shows the front panel of the em 422 and em 412 modules 42
• The following table describes the ports on the rear panel 42
• Uplink module 42
• Xgs 4526 4528f 4728f user s guide 42
• Ac power connection 43
• Dc power connection 43
• Exposed power wire is dangerous use extreme care when connecting a dc power source to the device 43
• Keep the power supply switch and the switch s power switch in the off position until you come to the procedure for turning on the power 43
• Note check the power supply requirements in chapter 56 on page 463 and make sure you are using an appropriate power source 43
• Note the current rating of the power wires must be greater than 20 amps the power supply to which the switch connects must have a built in circuit breaker or switch to toggle the power 43
• Note this is only for the ac model of the switch 43
• Note this is only for the dc model of the switch 43
• Note when installing the power wire push it wire firmly into the terminal as deep as possible and make sure that no exposed bare wire can be seen or touched 43
• Power connector 43
• Console port 44
• External backup power supply connector 44
• Chapter 3 hardware overview 45
• Led colo r status description 45
• Table 3 leds 45
• The following table describes the leds 45
• Xgs 4526 4528f 4728f user s guide 45
• Chapter 3 hardware overview 46
• Led colo r status description 46
• Table 3 leds continued 46
• Xgs 4526 4528f 4728f user s guide 46
• Hapter 47
• Introduction 47
• System login 47
• The web configurator 47
• Figure 19 web configurator login 48
• The web configurator layout 48
• B d c e 49
• Figure 20 the web configurator layout 49
• Basic setting advanced application ip application management 50
• Chapter 4 the web configurator 50
• In the navigation panel click a main link to reveal a list of submenu links 50
• Link description 50
• Table 4 navigation panel sub links overview 50
• Table 5 navigation panel links 50
• The following table describes the links in the navigation panel 50
• Xgs 4526 4528f 4728f user s guide 50
• Chapter 4 the web configurator 51
• Link description 51
• Table 5 navigation panel links continued 51
• Xgs 4526 4528f 4728f user s guide 51
• Chapter 4 the web configurator 52
• Link description 52
• Table 5 navigation panel links continued 52
• Xgs 4526 4528f 4728f user s guide 52
• Change your password 53
• Chapter 4 the web configurator 53
• Figure 21 change administrator login password 53
• Link description 53
• Logins to display the next screen 53
• Table 5 navigation panel links continued 53
• Xgs 4526 4528f 4728f user s guide 53
• Note be careful not to lock yourself and others out of the switch if you do lock yourself out try using out of band management via the management port to configure the switch 54
• Note use the save link when you are done with a configuration session 54
• Resetting the switch 54
• Saving your configuration 54
• Switch lockout 54
• Figure 22 resetting the switch via the console port 55
• Reload the configuration file 55
• Figure 23 web configurator logout screen 56
• Logging out of the web configurator 56
• Configuring an ip interface 57
• Hapter 57
• Initial setup example 57
• Overview 57
• Example 58
• Figure 24 initial setup network example ip interface 58
• Configuring dhcp server settings 59
• Creating a vlan 59
• Example 59
• Example 60
• Figure 25 initial setup network example vlan 60
• Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id 60
• Example 61
• Figure 26 initial setup network example port vid 61
• Setting port vid 61
• Enabling rip 62
• Example 62
• Hapter 63
• How to use dhcp snooping on the switch 63
• Tutorials 63
• Table 6 settings in this tutorial 64
• Dhcp relay tutorial introduction 67
• How to use dhcp relay on the switch 67
• Creating a vlan 68
• Figure 28 tutorial dhcp relay scenario 68
• Vlan 102 68
• Configuring dhcp relay 71
• Troubleshooting 71
• Figure 29 tutorial pppoe intermediate agentt tutorial overview 72
• How to use pppoe ia on the switch 72
• Note for related information about pppoe ia see section 31 on page 302 72
• Port 11 trusted 72
• Port 12 trusted 72
• Port 5 untrusted port 12 trusted 72
• Table 7 settings in this tutorial 72
• Configuring switch a 73
• Configuring switch b 75
• How to use error disable and recovery on the switch 77
• Note refer to section 27 on page 285 and section 32 on page 310 for more information about loop guard and errdiable 78
• How to set up a guest vlan 80
• Internet 80
• Creating a guest vlan 81
• Enabling ieee 802 x port authentication 83
• Enabling guest vlan 84
• How to do port isolation in a vlan 85
• Creating a vlan 86
• Internet 86
• Creating a private vlan rule 89
• Create a layer 3 classifier 90
• How to configure routing policy 90
• Create a policy routing rule 91
• Technical reference 93
• Hapter 95
• Overview 95
• Port status summary 95
• System status and port statistics 95
• Chapter 7 system status and port statistics 96
• Label description 96
• Table 8 status 96
• The following table describes the labels in this screen 96
• Xgs 4526 4528f 4728f user s guide 96
• Chapter 7 system status and port statistics 97
• Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch 97
• Figure 31 status port details 97
• Label description 97
• Port details 97
• Status port details 97
• The following table describes the labels in this screen 97
• Xgs 4526 4528f 4728f user s guide 97
• Chapter 7 system status and port statistics 98
• Label description 98
• Port details continued 98
• Xgs 4526 4528f 4728f user s guide 98
• Chapter 7 system status and port statistics 99
• Label description 99
• Port details continued 99
• Xgs 4526 4528f 4728f user s guide 99
• Basic setting 101
• Hapter 101
• Overview 101
• Chapter 8 basic setting 102
• Label description 102
• System info 102
• System info to display the screen as shown you can check the firmware version number and monitor the switch temperature fan speeds and voltage in this screen 102
• System information 102
• The following table describes the labels in this screen 102
• Xgs 4526 4528f 4728f user s guide 102
• Chapter 8 basic setting 103
• Label description 103
• System info continued 103
• Xgs 4526 4528f 4728f user s guide 103
• General setup 104
• Chapter 8 basic setting 105
• General setup continued 105
• Label description 105
• Xgs 4526 4528f 4728f user s guide 105
• A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 106
• Chapter 8 basic setting 106
• General setup continued 106
• In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user on the same network 106
• Introduction to vlans 106
• Label description 106
• Note vlan is unidirectional it only governs outgoing traffic 106
• See chapter 9 on page 117 for information on port based and 802 q tagged vlans 106
• Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain 106
• Xgs 4526 4528f 4728f user s guide 106
• Smart isolation 107
• Chapter 8 basic setting 108
• Click basic setting and then switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to the chapter on vlan 108
• Label description 108
• Note the uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet 108
• Switch setup 108
• Switch setup screen 108
• The following table describes the labels in this screen 108
• Xgs 4526 4528f 4728f user s guide 108
• Chapter 8 basic setting 109
• Label description 109
• Note to use smart isolation you should have configured 802 q vlan port isolation or private vlan and m rstp on the switch smart isolation does not work with mstp and or port based vlan 109
• Switch setup continued 109
• Xgs 4526 4528f 4728f user s guide 109
• Chapter 8 basic setting 110
• Ip interfaces 110
• Ip setup 110
• Label description 110
• On the switch as a layer 3 device an ip address is not bound to any physical ports since each ip address on the switch must be in a separate subnet the configured ip address is also known as ip interface or routing domain in addition this allows routing between subnets based on the ip address without additional routers 110
• Switch setup continued 110
• The switch needs an ip address for it to be managed over the network the factory default ip address is 192 68 the subnet mask specifies the network number portion of an ip address the factory default subnet mask is 255 55 55 110
• Use the ip setup screen to configure the default gateway device the default domain name server and add ip domains 110
• Xgs 4526 4528f 4728f user s guide 110
• You can configure multiple routing domains on the same vlan as long as the ip address ranges for the domains do not overlap to change the ip address of the 110
• Chapter 8 basic setting 111
• Ip setup 111
• Label description 111
• Switch in a routing domain simply add a new routing domain entry with a different ip address in the same subnet 111
• The following table describes the labels in this screen 111
• Xgs 4526 4528f 4728f user s guide 111
• Chapter 8 basic setting 112
• Ip setup continued 112
• Label description 112
• Note deleting all ip subnets locks you out of the switch 112
• Xgs 4526 4528f 4728f user s guide 112
• Chapter 8 basic setting 113
• Label description 113
• Note changes in this row are copied to all the ports as soon as you make them 113
• Note due to space limitations the port name may be truncated in some web configurator screens 113
• Port setup 113
• Port setup in the navigation panel to display the configuration screen 113
• The following table describes the labels in this screen 113
• Xgs 4526 4528f 4728f user s guide 113
• Chapter 8 basic setting 114
• Label description 114
• Port setup continued 114
• Xgs 4526 4528f 4728f user s guide 114
• Chapter 8 basic setting 115
• Label description 115
• Port setup continued 115
• Xgs 4526 4528f 4728f user s guide 115
• Forwarding tagged and untagged frames 117
• Hapter 117
• Introduction to ieee 802 q tagged vlans 117
• Automatic vlan registration 118
• Garp timers 118
• Table 15 ieee 802 q vlan terminology 118
• Chapter 9 vlan 119
• Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 119
• Port vlan trunking 119
• Table 15 ieee 802 q vlan terminology continued 119
• The following figure describes vlan trunking suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically 119
• Vlan parameter term description 119
• Xgs 4526 4528f 4728f user s guide 119
• Figure 37 port vlan trunking 120
• Figure 38 switch setup select vlan type 120
• Select the vlan type 120
• Static vlan 120
• Chapter 9 vlan 121
• Label description 121
• The following table describes the labels in this screen 121
• Vlan from the navigation panel to display the vlan status screen as shown next 121
• Vlan status 121
• Vlan vlan status 121
• Xgs 4526 4528f 4728f user s guide 121
• Chapter 9 vlan 122
• Configure a static vlan 122
• Label description 122
• The following table describes the labels in this screen 122
• Use this screen to configure and view 802 q vlan parameters for the switch see section 9 on page 117 for more information on static vlan to configure a 122
• Use this screen to view detailed port settings and status of the vlan group see section 9 on page 117 for more information on static vlan click on an index number in the vlan status screen to display vlan details 122
• Vlan detail 122
• Vlan details 122
• Xgs 4526 4528f 4728f user s guide 122
• Chapter 9 vlan 123
• Label description 123
• Note changes in this row are copied to all the ports as soon as you make them 123
• Static vlan 123
• Static vlan click static vlan in the vlan status screen to display the screen as shown next 123
• The following table describes the related labels in this screen 123
• Xgs 4526 4528f 4728f user s guide 123
• Chapter 9 vlan 124
• Configure vlan port settings 124
• Label description 124
• Static vlan continued 124
• Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port see section 9 on page 117 for more information on static vlan click the vlan port setting link in the vlan status screen 124
• Vlan port setting 124
• Xgs 4526 4528f 4728f user s guide 124
• Chapter 9 vlan 125
• Label description 125
• Note changes in this row are copied to all the ports as soon as you make them 125
• The following table describes the labels in this screen 125
• Vlan port setting 125
• Xgs 4526 4528f 4728f user s guide 125
• Figure 43 subnet based vlan application example 126
• Subnet based vlans 126
• Chapter 9 vlan 127
• Click subnet based vlan in the vlan port setting screen to display the configuration screen as shown 127
• Configuring subnet based vlan 127
• Label description 127
• Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 127
• Subnet based vlan 127
• Subnet based vlan setup 127
• The following table describes the labels in this screen 127
• Xgs 4526 4528f 4728f user s guide 127
• Chapter 9 vlan 128
• Label description 128
• Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 128
• Protocol based vlans 128
• Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol 128
• Subnet based vlan setup continued 128
• Xgs 4526 4528f 4728f user s guide 128
• Configuring protocol based vlan 129
• Figure 45 protocol based vlan application example 129
• Protocol based vlan 129
• Chapter 9 vlan 130
• Label description 130
• Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 130
• Protocol based vlan setup 130
• The following table describes the labels in this screen 130
• Xgs 4526 4528f 4728f user s guide 130
• Create an ip based vlan example 131
• Example 131
• Figure 47 protocol based vlan configuration example 131
• Configure a port based vlan 132
• Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 132
• Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 132
• Port based vlan setup 132
• Port based vlan setup all connected 133
• Vlan port based vlan setup port isolation 134
• Chapter 9 vlan 135
• Label description 135
• The following table describes the labels in this screen 135
• Vlan port based vlan setup 135
• Xgs 4526 4528f 4728f user s guide 135
• Configuring static mac forwarding 137
• Hapter 137
• Overview 137
• Static mac forward setup 137
• Chapter 10 static mac forward setup 138
• Label description 138
• Note static mac addresses do not age out 138
• Static mac forwarding 138
• Static mac forwarding in the navigation panel to display the configuration screen as shown 138
• The following table describes the labels in this screen 138
• Xgs 4526 4528f 4728f user s guide 138
• Chapter 10 static mac forward setup 139
• Label description 139
• Static mac forwarding continued 139
• Xgs 4526 4528f 4728f user s guide 139
• Hapter 141
• Static multicast forward setup 141
• Static multicast forwarding overview 141
• Configuring static multicast forwarding 142
• Figure 51 no static multicast forwarding 142
• Figure 52 static multicast forwarding to a single port 142
• Figure 53 static multicast forwarding to multiple ports 142
• Chapter 11 static multicast forward setup 143
• Label description 143
• Static multicast forwarding 143
• Static multicast forwarding to display the configuration screen as shown 143
• The following table describes the labels in this screen 143
• Xgs 4526 4528f 4728f user s guide 143
• Chapter 11 static multicast forward setup 144
• Label description 144
• Static multicast forwarding continued 144
• Xgs 4526 4528f 4728f user s guide 144
• Configure a filtering rule 145
• Filtering 145
• Hapter 145
• Chapter 12 filtering 146
• Filtering continued 146
• Label description 146
• Xgs 4526 4528f 4728f user s guide 146
• Hapter 147
• Spanning tree protocol 147
• Stp rstp overview 147
• Stp terminology 147
• How stp works 148
• Table 26 stp path costs 148
• Figure 56 mrstp network example 149
• Multiple rstp 149
• Note the listening state does not exist in rstp 149
• Stp port states 149
• Table 27 stp port states 149
• Figure 57 stp rstp network example 150
• Mstp network example 150
• Multiple stp 150
• Note each port can belong to one stp tree only 150
• Vlan 1 vlan 2 150
• Figure 58 mstp network example 151
• Mst instance 151
• Mst region 151
• Vlan 1 vlan 2 151
• Common and internal spanning tree cist 152
• Figure 59 mstis in different regions 152
• Figure 60 mstp and legacy rstp network example 152
• Configuration 153
• Spanning tree configuration 153
• Spanning tree protocol 153
• Spanning tree protocol status screen 153
• Chapter 13 spanning tree protocol 154
• Configuration 154
• Configure rapid spanning tree protocol 154
• Label description 154
• Spanning tree protocol screen 154
• The following table describes the labels in this screen 154
• Xgs 4526 4528f 4728f user s guide 154
• 2 hello time 1 155
• Chapter 13 spanning tree protocol 155
• Configuration screen to enable rstp on the switch 155
• Label description 155
• Note changes in this row are copied to all the ports as soon as you make them 155
• The following table describes the labels in this screen 155
• Xgs 4526 4528f 4728f user s guide 155
• Chapter 13 spanning tree protocol 156
• Label description 156
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 156
• Rapid spanning tree protocol status 156
• Rstp continued 156
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 147 for more information on rstp 156
• Xgs 4526 4528f 4728f user s guide 156
• Chapter 13 spanning tree protocol 157
• Label description 157
• Note the listening state does not exist in rstp 157
• Note this screen is only available after you activate rstp on the switch 157
• Status rstp 157
• The following table describes the labels in this screen 157
• Xgs 4526 4528f 4728f user s guide 157
• Configuration screen to enable mrstp on the switch 158
• Configure multiple rapid spanning tree protocol 158
• 2 hello time 1 159
• Chapter 13 spanning tree protocol 159
• Label description 159
• Mrstp continued 159
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 159
• Note changes in this row are copied to all the ports as soon as you make them 159
• Xgs 4526 4528f 4728f user s guide 159
• Chapter 13 spanning tree protocol 160
• Label description 160
• Mrstp continued 160
• Multiple rapid spanning tree protocol status 160
• Note this screen is only available after you activate mrstp on the switch 160
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 147 for more information on mrstp 160
• Status mrstp 160
• Xgs 4526 4528f 4728f user s guide 160
• Chapter 13 spanning tree protocol 161
• Label description 161
• Note the listening state does not exist in rstp 161
• Status mrstp 161
• The following table describes the labels in this screen 161
• Xgs 4526 4528f 4728f user s guide 161
• Configure multiple spanning tree protocol 162
• 2 hello time 1 163
• Chapter 13 spanning tree protocol 163
• Configuration screen to enable mstp on the switch 163
• Label description 163
• The following table describes the labels in this screen 163
• Xgs 4526 4528f 4728f user s guide 163
• Chapter 13 spanning tree protocol 164
• Label description 164
• Mstp continued 164
• Note changes in this row are copied to all the ports as soon as you make them 164
• Xgs 4526 4528f 4728f user s guide 164
• Chapter 13 spanning tree protocol 165
• Label description 165
• Mstp continued 165
• Mstp screen 165
• Multiple spanning tree protocol port configuration 165
• Note changes in this row are copied to all the ports as soon as you make them 165
• The following table describes the labels in this screen 165
• Xgs 4526 4528f 4728f user s guide 165
• Chapter 13 spanning tree protocol 166
• Label description 166
• Multiple spanning tree protocol status 166
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 166
• Note this screen is only available after you activate mstp on the switch 166
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 150 for more information on mstp 166
• Status mstp 166
• Xgs 4526 4528f 4728f user s guide 166
• Chapter 13 spanning tree protocol 167
• Label description 167
• Status mstp 167
• The following table describes the labels in this screen 167
• Xgs 4526 4528f 4728f user s guide 167
• Chapter 13 spanning tree protocol 168
• Label description 168
• Status mstp 168
• Xgs 4526 4528f 4728f user s guide 168
• Bandwidth control 169
• Bandwidth control overview 169
• Cir and pir 169
• Hapter 169
• Bandwidth control 170
• Bandwidth control in the navigation panel to bring up the screen as shown next 170
• Bandwidth control setup 170
• Chapter 14 bandwidth control 170
• Label description 170
• Note changes in this row are copied to all the ports as soon as you make them 170
• The following table describes the related labels in this screen 170
• Xgs 4526 4528f 4728f user s guide 170
• Bandwidth control continued 171
• Chapter 14 bandwidth control 171
• Label description 171
• Xgs 4526 4528f 4728f user s guide 171
• Broadcast storm control 173
• Broadcast storm control setup 173
• Hapter 173
• Broadcast storm control 174
• Chapter 15 broadcast storm control 174
• Label description 174
• Note changes in this row are copied to all the ports as soon as you make them 174
• The following table describes the labels in this screen 174
• Xgs 4526 4528f 4728f user s guide 174
• Hapter 175
• Mirroring 175
• Port mirroring setup 175
• Chapter 16 mirroring 176
• Label description 176
• Mirroring 176
• Note changes in this row are copied to all the ports as soon as you make them 176
• The following table describes the labels in this screen 176
• Xgs 4526 4528f 4728f user s guide 176
• Dynamic link aggregation 177
• Hapter 177
• Link aggregation 177
• Link aggregation overview 177
• Link aggregation id 178
• Table 39 link aggregation id local switch 178
• Table 40 link aggregation id peer switch 178
• Chapter 17 link aggregation 179
• Label description 179
• Link aggregation in the navigation panel the link aggregation status screen displays by default see section 17 on page 177 for more information 179
• Link aggregation status 179
• The following table describes the labels in this screen 179
• Xgs 4526 4528f 4728f user s guide 179
• Chapter 17 link aggregation 180
• Label description 180
• Link aggregation status continued 180
• Xgs 4526 4528f 4728f user s guide 180
• Link aggregation setting 181
• Chapter 17 link aggregation 182
• Label description 182
• Link aggregation setting 182
• Note when you enable the port security feature on the switch and configure port security settings for a port you cannot include the port in an active trunk group 182
• Xgs 4526 4528f 4728f user s guide 182
• Link aggregation control protocol 183
• Chapter 17 link aggregation 184
• Label description 184
• Note changes in this row are copied to all the ports as soon as you make them 184
• Note do not configure this screen unless you want to enable dynamic link aggregation 184
• Static trunking example 184
• The following table describes the labels in this screen 184
• This example shows you how to create a static port trunk group for ports 2 5 184
• Xgs 4526 4528f 4728f user s guide 184
• Example 185
• Figure 76 trunking example physical connections 185
• Figure 77 trunking example configuration screen 185
• Hapter 187
• Ieee 802 x authentication 187
• Port authentication 187
• Port authentication overview 187
• Mac authentication 188
• Authentication reply 189
• Authentication request authentication request 189
• Figure 79 mac authentication process 189
• New connection 189
• Port authentication 189
• Port authentication configuration 189
• Session granted denied 189
• Activate ieee 802 x security 190
• Chapter 18 port authentication 190
• Label description 190
• Note changes in this row are copied to all the ports as soon as you make them 190
• Note you must first enable 802 x authentication on the switch before configuring it on each port 190
• The following table describes the labels in this screen 190
• Use this screen to activate ieee 802 x security in the port authentication screen click 802 x to display the configuration screen as shown 190
• Xgs 4526 4528f 4728f user s guide 190
• Chapter 18 port authentication 191
• Guest vlan 191
• Label description 191
• When 802 x port authentication is enabled on the switch and its ports clients that do not have the correct credentials are blocked from using the port s you can configure your switch to have one vlan that acts as a guest vlan if you enable the guest vlan 102 in the example on a port 2 in the example the user a in the example that is not ieee 802 x capable or fails to enter the correct username and password can still access the port but traffic from the user is forwarded to the guest vlan that is unauthenticated users can have access to limited network resources in the same guest vlan such as the internet the 191
• X continued 191
• Xgs 4526 4528f 4728f user s guide 191
• Figure 82 guest vlan example 192
• Guest vlan 192
• Internet 192
• Chapter 18 port authentication 193
• Guest vlan 193
• Label description 193
• Note changes in this row are copied to all the ports as soon as you make them 193
• The following table describes the labels in this screen 193
• Xgs 4526 4528f 4728f user s guide 193
• Activate mac authentication 194
• Chapter 18 port authentication 194
• Label description 194
• Mac authentication 194
• Note you must first enable mac authentication on the switch before configuring it on each port 194
• The following table describes the labels in this screen 194
• Use this screen to activate mac authentication in the port authentication screen click mac authentication to display the configuration screen as shown 194
• Xgs 4526 4528f 4728f user s guide 194
• Chapter 18 port authentication 195
• Label description 195
• Mac authentication 195
• Note changes in this row are copied to all the ports as soon as you make them 195
• Note if the aging time in the switch setup screen is set to a lower value then it supersedes this setting see section 8 on page 108 195
• Xgs 4526 4528f 4728f user s guide 195
• About port security 197
• Hapter 197
• Port security 197
• Chapter 19 port security 198
• Label description 198
• Note changes in this row are copied to all the ports as soon as you make them 198
• Port security 198
• Port security in the navigation panel to display the screen as shown 198
• Port security setup 198
• The following table describes the labels in this screen 198
• Xgs 4526 4528f 4728f user s guide 198
• Chapter 19 port security 199
• Label description 199
• Port security continued 199
• Port security screen to display the screen as shown 199
• Vlan mac address limit 199
• Xgs 4526 4528f 4728f user s guide 199
• Chapter 19 port security 200
• Label description 200
• The following table describes the labels in this screen 200
• Vlan mac address limit 200
• Xgs 4526 4528f 4728f user s guide 200
• About the classifier and qos 201
• Classifier 201
• Configuring the classifier 201
• Hapter 201
• Chapter 20 classifier 202
• Classifier 202
• Classifier in the navigation panel to display the configuration screen as shown 202
• Label description 202
• The following table describes the labels in this screen 202
• Xgs 4526 4528f 4728f user s guide 202
• Chapter 20 classifier 203
• Classifier continued 203
• Label description 203
• Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 203
• Xgs 4526 4528f 4728f user s guide 203
• Chapter 20 classifier 204
• Classifier continued 204
• Classifier summary table 204
• Label description 204
• Note when two rules conflict with each other a higher layer rule has priority over a lower layer rule 204
• Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 204
• Table 50 classifier summary table 204
• The following table describes the labels in this screen 204
• To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier screen to change the settings of a rule click a number in the index field 204
• Viewing and editing classifier configuration 204
• Xgs 4526 4528f 4728f user s guide 204
• Chapter 20 classifier 205
• Ethernet type protocol number 205
• Label description 205
• Port number port name 205
• Some of the most common ip ports are 205
• Table 50 classifier summary table 205
• Table 51 common ethernet types and protocol number 205
• Table 52 common ip ports 205
• The following table shows some other common ethernet types and the corresponding protocol number 205
• Xgs 4526 4528f 4728f user s guide 205
• Classifier example 206
• Example 206
• Figure 89 classifier example 206
• Diffserv 207
• Dscp and per hop behavior 207
• Hapter 207
• Policy rule 207
• Policy rules overview 207
• Configuring policy rules 208
• Policy rule 209
• Chapter 21 policy rule 210
• Label description 210
• Policy rule continued 210
• Xgs 4526 4528f 4728f user s guide 210
• Chapter 21 policy rule 211
• Label description 211
• Policy rule continued 211
• Policy rule summary table 211
• To view a summary of the classifier configuration scroll down to the summary table at the bottom of the policy screen to change the settings of a rule click a number in the index field 211
• Viewing and editing policy configuration 211
• Xgs 4526 4528f 4728f user s guide 211
• Chapter 21 policy rule 212
• Label description 212
• Table 54 policy summary table 212
• The following table describes the labels in this screen 212
• Xgs 4526 4528f 4728f user s guide 212
• Example 213
• Figure 92 policy example 213
• Policy example 213
• Hapter 215
• Queuing method 215
• Queuing method overview 215
• Strictly priority 215
• Weighted fair queuing 215
• Weighted round robin scheduling wrr 216
• Configuring queuing 217
• Note changes in this row are copied to all the ports as soon as you make them 217
• Queuing method 217
• Chapter 22 queuing method 218
• Label description 218
• Queuing method continued 218
• Xgs 4526 4528f 4728f user s guide 218
• Hapter 219
• Vlan stacking 219
• Vlan stacking example 219
• Vlan stacking overview 219
• Figure 94 vlan stacking example 220
• Note static vlan tx tagging must be disabled on a port where you choose normal or access port 220
• Note static vlan tx tagging must be enabled on a port where you choose tunnel port 220
• Vlan stacking port roles 220
• Frame format 221
• Table 56 vlan tag format 221
• Vlan tag format 221
• Chapter 23 vlan stacking 222
• Configure the fields as highlighted in the switch vlan stacking screen 222
• Configuring vlan stacking 222
• Table 57 single and double tagged 802 1q frame format 222
• Table 58 802 q frame 222
• Vlan stacking 222
• Vlan stacking to display the screen as shown 222
• Xgs 4526 4528f 4728f user s guide 222
• Chapter 23 vlan stacking 223
• Label description 223
• Note changes in this row are copied to all the ports as soon as you make them 223
• Note you can define up to four different tunnel tpids including 8100 in this screen at a time 223
• Port based q in q 223
• Port based q in q lets the switch treat all frames received on the same port as the same vlan flows and add the same outer vlan tag to them even they have different customer vlan ids 223
• The following table describes the labels in this screen 223
• Vlan stacking 223
• Xgs 4526 4528f 4728f user s guide 223
• Chapter 23 vlan stacking 224
• Label description 224
• Port based qinq 224
• Selective q in q 224
• Selective q in q is vlan based it allows the switch to add different outer vlan tags to the incoming frames received on one port according to their inner vlan tags 224
• The following table describes the labels in this screen 224
• Vlan stacking screen to display the screen as shown 224
• Xgs 4526 4528f 4728f user s guide 224
• Chapter 23 vlan stacking 225
• Label description 225
• Note selective q in q rules are only applied to single tagged frames received on the access ports if the incoming frames are untagged or single tagged but received on a tunnel port or cannot match any selective q in q rules the switch applies the port based q in q rules to them 225
• Selective qinq 225
• The following table describes the labels in this screen 225
• Vlan stacking screen to display the screen as shown 225
• Xgs 4526 4528f 4728f user s guide 225
• Chapter 23 vlan stacking 226
• Label description 226
• Selective qinq continued 226
• Xgs 4526 4528f 4728f user s guide 226
• Hapter 227
• Igmp filtering 227
• Ip multicast addresses 227
• Multicast 227
• Multicast overview 227
• Igmp snooping 228
• Igmp snooping and vlans 228
• Multicast 228
• Multicast status 228
• Table 62 multicast status 228
• Multicast setting 229
• Chapter 24 multicast 230
• Label description 230
• Multicast setting continued 230
• Note changes in this row are copied to all the ports as soon as you make them 230
• Note if you enable igmp filtering you must create and assign igmp filtering profiles for the ports that you want to allow to join multicast groups 230
• Xgs 4526 4528f 4728f user s guide 230
• Chapter 24 multicast 231
• Label description 231
• Multicast setting continued 231
• Xgs 4526 4528f 4728f user s guide 231
• Chapter 24 multicast 232
• Igmp snooping vlan 232
• Label description 232
• Multicast in the navigation panel click the multicast setting link and then the igmp snooping vlan link to display the screen as shown see section 24 on page 228 for more information on igmp snooping vlan 232
• Note you must also enable igmp snooping in the multicast setting screen first 232
• The following table describes the labels in this screen 232
• Xgs 4526 4528f 4728f user s guide 232
• An igmp filtering profile specifies a range of multicast groups that clients connected to the switch are able to join a profile contains a range of multicast ip addresses which you want clients to be able to join profiles are assigned to ports in the multicast setting screen clients connected to those ports are then able to join the multicast groups specified in the profile each port can be assigned a single profile a profile can be assigned to multiple ports 233
• Chapter 24 multicast 233
• Igmp filtering profile 233
• Igmp snooping vlan continued 233
• Label description 233
• Note you cannot configure the same vlan id as in the mvr screen 233
• Xgs 4526 4528f 4728f user s guide 233
• Chapter 24 multicast 234
• Igmp filtering profile 234
• Igmp filtering profile link to display the screen as shown 234
• Label description 234
• The following table describes the labels in this screen 234
• Xgs 4526 4528f 4728f user s guide 234
• Figure 102 mvr network example 235
• Igmp filtering profile continued 235
• Mvr overview 235
• Types of mvr ports 235
• Figure 103 mvr multicast television example 236
• How mvr works 236
• Mvr modes 236
• General mvr configuration 237
• Note you can create up to five multicast vlans and up to 256 multicast rules on the switch 237
• Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 237
• Chapter 24 multicast 238
• Label description 238
• Mvr continued 238
• Note changes in this row are copied to all the ports as soon as you make them 238
• Xgs 4526 4528f 4728f user s guide 238
• All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 239
• Chapter 24 multicast 239
• Configure mvr ip multicast group address es in the group configuration screen click group configuration in the mvr screen 239
• Label description 239
• Mvr group configuration 239
• Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 239
• The following table describes the labels in this screen 239
• Xgs 4526 4528f 4728f user s guide 239
• Chapter 24 multicast 240
• Figure 106 mvr configuration example 240
• Label description 240
• Multicast vid 200 vlan 1 240
• Mvr configuration example 240
• Mvr group configuration 240
• The following figure shows a network example where ports 1 2 and 3 on the switch belong to vlan 1 in addition port 7 belongs to the multicast group with vid 200 to receive multicast traffic the news and movie channels from the remote streaming media server s computers a b and c in vlan 1 are able to receive the traffic 240
• Xgs 4526 4528f 4728f user s guide 240
• Example 241
• Figure 107 mvr configuration example 241
• Example 242
• Figure 108 mvr group configuration example 242
• Figure 109 mvr group configuration example 242
• Authentication authorization and accounting aaa 243
• Hapter 243
• Aaa screens 244
• Client aaa server 244
• Figure 110 aaa server 244
• Local user accounts 244
• Radius and tacacs 244
• Table 68 radius vs tacacs 244
• Radius server setup 245
• Chapter 25 aaa 246
• Label description 246
• Radius server setup 246
• The following table describes the labels in this screen 246
• Xgs 4526 4528f 4728f user s guide 246
• Chapter 25 aaa 247
• Label description 247
• Radius server setup continued 247
• Tacacs server setup 247
• Use this screen to configure your tacacs server settings see section 25 on page 244 for more information on tacacs servers click on the tacacs server setup link in the authentication and accounting screen to view the screen as shown 247
• Xgs 4526 4528f 4728f user s guide 247
• Chapter 25 aaa 248
• Label description 248
• Tacacs server setup 248
• The following table describes the labels in this screen 248
• Xgs 4526 4528f 4728f user s guide 248
• Aaa setup 249
• Chapter 25 aaa 249
• Label description 249
• Tacacs server setup continued 249
• Use this screen to configure authentication authorization and accounting settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown 249
• Xgs 4526 4528f 4728f user s guide 249
• Aaa setup 250
• Chapter 25 aaa 250
• Label description 250
• The following table describes the labels in this screen 250
• Xgs 4526 4528f 4728f user s guide 250
• Aaa setup continued 251
• Chapter 25 aaa 251
• Label description 251
• Xgs 4526 4528f 4728f user s guide 251
• Aaa setup continued 252
• Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 252
• Table 72 supported vsas 252
• Vendor specific attribute 252
• Chapter 25 aaa 253
• Function attribute 253
• Note if you set the privilege level of a login account differently on the radius server s and the switch the user is assigned a privilege level from the database radius or local the switch uses first for user authentication 253
• Note the bolded values in this table are fixed values as defined in rfc 3580 253
• Note you must also create a vlan with the specified vid on the switch 253
• Table 72 supported vsas 253
• Table 73 supported tunnel protocol attribute 253
• Tunnel protocol attribute 253
• Xgs 4526 4528f 4728f user s guide 253
• You can configure tunnel protocol attributes on the radius server refer to your radius server documentation to assign a port on the switch to a vlan based on ieee 802 x authentication the port vlan settings are fixed and untagged this will also set the port s vid the following table describes the values you need to configure note that these attributes only work when you enable authorization see section 25 on page 249 253
• Attributes used by the ieee 802 x authentication 254
• Attributes used for authenticating privilege access 254
• Attributes used for authentication 254
• Attributes used to login users 254
• Supported radius attributes 254
• Attributes used for accounting 255
• Attributes used for accounting exec events 255
• Attributes used for accounting system events 255
• Table 74 radius attributes exec events via console 255
• Attributes used for accounting ieee 802 x events 256
• Table 75 radius attributes exec events via telnet ssh 256
• Table 76 radius attributes exec events via console 256
• Table 76 radius attributes exec events via console 257
• Hapter 259
• Ip source guard 259
• Ip source guard overview 259
• Dhcp snooping database 260
• Dhcp snooping overview 260
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 260
• Trusted vs untrusted ports 260
• Configuring dhcp snooping 261
• Dhcp relay option 82 information 261
• Figure 115 dhcp snooping database file format 261
• Arp inspection and mac address filters 262
• Arp inspection overview 262
• Figure 116 example man in the middle attack 262
• Configuring arp inspection 263
• Ip source guard 263
• Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 263
• Syslog 263
• Trusted vs untrusted ports 263
• Chapter 26 ip source guard 264
• Figure 117 ip source guard 264
• Ip source guard 264
• Ip source guard static binding 264
• Label description 264
• Table 77 ip source guard 264
• The following table describes the labels in this screen 264
• Use this screen to manage static bindings for dhcp snooping and arp inspection static bindings are uniquely identified by the mac address and vlan id each mac address and vlan id can only be in one static binding if you try to create a static binding with the same mac address and vlan id as an existing static binding the 264
• Xgs 4526 4528f 4728f user s guide 264
• Chapter 26 ip source guard 265
• Figure 118 ip source guard static binding 265
• Label description 265
• Static binding 265
• Table 78 ip source guard static binding 265
• The following table describes the labels in this screen 265
• Xgs 4526 4528f 4728f user s guide 265
• Dhcp snooping 266
• Figure 119 dhcp snooping 266
• Table 78 ip source guard static binding continued 266
• Chapter 26 ip source guard 267
• Label description 267
• Table 79 dhcp snooping 267
• The following table describes the labels in this screen 267
• Xgs 4526 4528f 4728f user s guide 267
• Chapter 26 ip source guard 268
• Label description 268
• Table 79 dhcp snooping continued 268
• Xgs 4526 4528f 4728f user s guide 268
• Dhcp snooping configure 269
• Figure 120 dhcp snooping configure 269
• Table 79 dhcp snooping continued 269
• Chapter 26 ip source guard 270
• Label description 270
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 270
• Note you have to enable dhcp snooping on the dhcp vlan too 270
• Table 80 dhcp snooping configure 270
• The following table describes the labels in this screen 270
• Xgs 4526 4528f 4728f user s guide 270
• Dhcp snooping port configure 271
• Figure 121 dhcp snooping port configure 271
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 271
• Chapter 26 ip source guard 272
• Dhcp snooping vlan configure 272
• Label description 272
• Table 81 dhcp snooping port configure 272
• The following table describes the labels in this screen 272
• Use this screen to enable dhcp snooping on each vlan and to specify whether or not the switch adds dhcp relay agent option 82 information chapter 41 on page 361 to dhcp requests that the switch relays to a dhcp server for each vlan to 272
• Xgs 4526 4528f 4728f user s guide 272
• Chapter 26 ip source guard 273
• Figure 122 dhcp snooping vlan configure 273
• Label description 273
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 273
• Table 82 dhcp snooping vlan configure 273
• The following table describes the labels in this screen 273
• Xgs 4526 4528f 4728f user s guide 273
• Arp inspection 274
• Arp inspection status 274
• Chapter 26 ip source guard 274
• Figure 123 arp inspection status 274
• Label description 274
• Table 83 arp inspection status 274
• The following table describes the labels in this screen 274
• Xgs 4526 4528f 4728f user s guide 274
• Arp inspection vlan status 275
• Chapter 26 ip source guard 275
• Figure 124 arp inspection vlan status 275
• Label description 275
• Table 84 arp inspection vlan status 275
• The following table describes the labels in this screen 275
• Vlan status 275
• Xgs 4526 4528f 4728f user s guide 275
• Arp inspection log status 276
• Chapter 26 ip source guard 276
• Figure 125 arp inspection log status 276
• Label description 276
• Log status 276
• Table 85 arp inspection log status 276
• The following table describes the labels in this screen 276
• Xgs 4526 4528f 4728f user s guide 276
• Arp inspection configure 277
• Chapter 26 ip source guard 277
• Configure 277
• Figure 126 arp inspection configure 277
• Label description 277
• Table 85 arp inspection log status continued 277
• Xgs 4526 4528f 4728f user s guide 277
• Chapter 26 ip source guard 278
• Label description 278
• Table 86 arp inspection configure 278
• The following table describes the labels in this screen 278
• Xgs 4526 4528f 4728f user s guide 278
• Arp inspection port configure 279
• Chapter 26 ip source guard 279
• Figure 127 arp inspection port configure 279
• Label description 279
• Table 87 arp inspection port configure 279
• The following table describes the labels in this screen 279
• Xgs 4526 4528f 4728f user s guide 279
• Arp inspection vlan configure 280
• Chapter 26 ip source guard 280
• Figure 128 arp inspection vlan configure 280
• Label description 280
• Table 87 arp inspection port configure continued 280
• Table 88 arp inspection vlan configure 280
• The following table describes the labels in this screen 280
• Xgs 4526 4528f 4728f user s guide 280
• Chapter 26 ip source guard 281
• Label description 281
• Table 88 arp inspection vlan configure continued 281
• Xgs 4526 4528f 4728f user s guide 281
• Hapter 283
• Loop guard 283
• Loop guard overview 283
• Figure 130 switch in loop state 284
• Figure 131 loop guard probe packet 284
• Loop guard setup 285
• Chapter 27 loop guard 286
• Label description 286
• Loop guard 286
• Note changes in this row are copied to all the ports as soon as you make them 286
• The following table describes the labels in this screen 286
• Xgs 4526 4528f 4728f user s guide 286
• Hapter 287
• Vlan mapping 287
• Vlan mapping example 287
• Vlan mapping overview 287
• Chapter 28 vlan mapping 288
• Click advanced application and then vlan mapping in the navigation panel to display the screen as shown 288
• Enabling vlan mapping 288
• Figure 135 vlan mapping 288
• Label description 288
• Table 90 vlan mapping 288
• The following table describes the labels in this screen 288
• Xgs 4526 4528f 4728f user s guide 288
• Chapter 28 vlan mapping 289
• Click the vlan mapping configure link in the vlan mapping screen to display the screen as shown use this screen to enable and edit the vlan mapping rule s 289
• Configuring vlan mapping 289
• Figure 136 vlan mapping configuration 289
• Label description 289
• Table 91 vlan mapping configuration 289
• The following table describes the labels in this screen 289
• Xgs 4526 4528f 4728f user s guide 289
• Chapter 28 vlan mapping 290
• Label description 290
• Table 91 vlan mapping configuration continued 290
• Xgs 4526 4528f 4728f user s guide 290
• Hapter 291
• Layer 2 protocol tunneling 291
• Layer 2 protocol tunneling overview 291
• Figure 138 l2pt network example 292
• Layer 2 protocol tunneling mode 292
• Configuring layer 2 protocol tunneling 293
• Layer 2 protocol tunneling 293
• Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation 293
• Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network 293
• Chapter 29 layer 2 protocol tunneling 294
• Label description 294
• Layer 2 protocol tunneling continued 294
• Note changes in this row are copied to all the ports as soon as you make them 294
• Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only 294
• Xgs 4526 4528f 4728f user s guide 294
• Hapter 295
• Sflow overview 295
• Chapter 30 sflow 296
• Label description 296
• Note changes in this row are copied to all the ports as soon as you make them 296
• Sflow in the navigation panel to display the screen as shown 296
• Sflow port configuration 296
• The following table describes the labels in this screen 296
• Xgs 4526 4528f 4728f user s guide 296
• Chapter 30 sflow 297
• Click the collector link in the sflow screen to display the screen as shown you can configure up to four sflow collectors in this screen you may want to configure more than one collector if the traffic load to be monitored is more than one collector can manage 297
• Collector 297
• Collector screen the sflow collector does not need to be in the same subnet as the switch but it must be accessible from the switch 297
• Label description 297
• Note configure udp port 6343 the default on a nat router to allow port forwarding if the collector is behind a nat router configure a firewall rule for udp port 6343 the default to allow incoming traffic if the collector is behind a firewall 297
• Sflow collector configuration 297
• Sflow continued 297
• Xgs 4526 4528f 4728f user s guide 297
• Chapter 30 sflow 298
• Collector 298
• Label description 298
• The following table describes the labels in this screen 298
• Xgs 4526 4528f 4728f user s guide 298
• Hapter 299
• Pppoe intermediate agent overview 299
• Pppoe intermediate agent tag format 299
• Flexible circuit id syntax with identifier string and variables 300
• Sub option format 300
• Table 96 pppoe ia circuit id sub option format user defined string 300
• Table 97 pppoe ia remote id sub option format 300
• Table 98 pppoe ia circuit id sub option format using identifier string and variables 300
• Chapter 31 pppoe 301
• Every port is either a trusted port or an untrusted port for the pppoe intermediate agent this setting is independent of the trusted untrusted setting for dhcp snooping or arp inspection you can also specify the agent sub options circuit id and remote id that the switch adds to padi and padr packets from pppoe clients 301
• If a padi or padr packet is sent from a pppoe client but received on a trusted port the switch forwards it to other trusted port s 301
• If a padi padr or padt packet is sent from a pppoe client and received on an untrusted port the switch adds a vendor specific tag to the packet and then forwards it to the trusted port s 301
• If a pado pppoe active discovery offer pads pppoe active discovery session confirmation or padt pppoe active discovery terminate packet is sent from a pppoe server and received on a trusted port the switch forwards it to all other ports 301
• Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is defined in the dsl forum working text wt 101 the default access node identifier is the host name of the pppoe intermediate agent and the eth indicates ethernet 301
• Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports 301
• Port state 301
• Table 99 pppoe ia circuit id sub option format defined in wt 101 301
• The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 301
• Trusted ports are connected to pppoe servers 301
• Untrusted ports are connected to subscribers 301
• Wt 101 default circuit id syntax 301
• Xgs 4526 4528f 4728f user s guide 301
• Intermediate agent 302
• Pppoe intermediate agent 302
• The pppoe screen 302
• Chapter 31 pppoe 303
• Intermediate agent 303
• Label description 303
• Pppoe ia per port 303
• The following table describes the labels in this screen 303
• Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis 303
• Xgs 4526 4528f 4728f user s guide 303
• Note changes in this row are copied to all the ports as soon as you make them 304
• Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports 304
• Chapter 31 pppoe 305
• Label description 305
• Port continued 305
• Pppoe ia per port per vlan 305
• Use this screen to configure pppoe ia settings that apply to a specific vlan on a port 305
• Xgs 4526 4528f 4728f user s guide 305
• Chapter 31 pppoe 306
• Label description 306
• Note changes in this row are copied to all the vlans as soon as you make them 306
• Port screen to display the screen as shown 306
• The following table describes the labels in this screen 306
• Xgs 4526 4528f 4728f user s guide 306
• Chapter 31 pppoe 307
• Click the vlan link in the intermediate agent screen to display the screen as shown 307
• Label description 307
• Pppoe ia for vlan 307
• Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan 307
• Xgs 4526 4528f 4728f user s guide 307
• Chapter 31 pppoe 308
• Label description 308
• Note changes in this row are copied to all the vlans as soon as you make them 308
• The following table describes the labels in this screen 308
• Xgs 4526 4528f 4728f user s guide 308
• Cpu protection overview 309
• Error disable 309
• Error disable recovery overview 309
• Hapter 309
• Cpu protection 310
• Cpu protection configuration 310
• Errdisable 310
• Errdisable detect screen 310
• The error disable screen 310
• Chapter 32 error disable 311
• Cpu protection 311
• Errdisable detect 311
• Errdisable screen to display the screen as shown 311
• Error disable detect configuration 311
• Label description 311
• Note changes in this row are copied to all the ports as soon as you make them 311
• The following table describes the labels in this screen 311
• Xgs 4526 4528f 4728f user s guide 311
• Chapter 32 error disable 312
• Errdisable detect 312
• Label description 312
• Note changes in this row are copied to all the entries as soon as you make them 312
• The following table describes the labels in this screen 312
• Xgs 4526 4528f 4728f user s guide 312
• Chapter 32 error disable 313
• Errdisable recovery 313
• Errdisable screen to display the screen as shown 313
• Error disable recovery configuration 313
• Label description 313
• Note changes in this row are copied to all the entries as soon as you make them 313
• The following table describes the labels in this screen 313
• Xgs 4526 4528f 4728f user s guide 313
• Hapter 315
• Private vlan 315
• Private vlan overview 315
• Chapter 33 private vlan 316
• Configuring private vlan 316
• Label description 316
• Private vlan 316
• Private vlan in the navigation panel to display the screen as shown 316
• The following table describes the labels in this screen 316
• Xgs 4526 4528f 4728f user s guide 316
• Chapter 33 private vlan 317
• Label description 317
• Private vlan continued 317
• Xgs 4526 4528f 4728f user s guide 317
• Hapter 319
• Static route 319
• Static routing overview 319
• Chapter 34 static route 320
• Configuring static routing 320
• Label description 320
• Static routing 320
• Static routing in the navigation panel to display the screen as shown 320
• The following table describes the related labels you use to create a static route 320
• Xgs 4526 4528f 4728f user s guide 320
• Chapter 34 static route 321
• Label description 321
• Static routing continued 321
• Xgs 4526 4528f 4728f user s guide 321
• Benefits 323
• Hapter 323
• Policy route overview 323
• Policy routing 323
• Chapter 35 policy routing 324
• Configuring policy routing profile 324
• Label description 324
• Policy routing 324
• Policy routing in the navigation panel to display the screen as shown use this screen to configure a policy routing profile which can consist of multiple policy routing rules 324
• The following table describes the labels in this screen 324
• Xgs 4526 4528f 4728f user s guide 324
• Policy routing rule configuration 325
• Rule configuration 325
• Chapter 35 policy routing 326
• Label description 326
• Rule configuration 326
• The following table describes the labels in this screen 326
• Xgs 4526 4528f 4728f user s guide 326
• Administrative distance 327
• Hapter 327
• Rip overview 327
• Configuring rip 328
• Note you cannot set two routing protocols to have the same administrative distance 328
• Table 111 default distance value 328
• Chapter 36 rip 329
• Label description 329
• Rip continued 329
• Xgs 4526 4528f 4728f user s guide 329
• Hapter 331
• Ospf autonomous systems and areas 331
• Ospf overview 331
• Figure 159 ospf network example 332
• How ospf works 332
• Interfaces and virtual links 332
• Table 114 ospf router types 332
• Configuring ospf 333
• Figure 160 ospf router election example 333
• Ospf and router elections 333
• Ospf status 334
• Chapter 37 ospf 335
• Field description 335
• Label description 335
• Ospf status continued 335
• Table 116 ospf status common output fields 335
• The following table describes some common output fields 335
• Xgs 4526 4528f 4728f user s guide 335
• Ospf configuration 336
• Ospf configuration activating and general settings 336
• Table 116 ospf status common output fields continued 336
• Chapter 37 ospf 337
• Configure ospf areas 337
• Label description 337
• Md5 authenticate link state updates using a 16 printable ascii character password 337
• None no authentication is used 337
• Note you cannot set two routing protocols to have the same administrative distance 337
• Ospf configuration activating and general settings 337
• Simple authenticate link state updates using an 8 printable ascii character password 337
• To ensure that the switch receives only routing information from a trusted layer 3 devices activate authentication the ospf supports three levels of authentication 337
• Xgs 4526 4528f 4728f user s guide 337
• Chapter 37 ospf 338
• Label description 338
• Ospf configuration area setup 338
• The following table describes the related labels in this screen 338
• To configure an area set the related fields in the ospf configuration screen 338
• Xgs 4526 4528f 4728f user s guide 338
• Chapter 37 ospf 339
• Configuring ospf redistribution 339
• Label description 339
• Ospf configuration area setup continued 339
• Ospf configuration summary table 339
• The bottom of the ospf configuration screen displays a summary table of all the ospf areas you have configured 339
• The following table describes the related labels in this screen 339
• Use this screen to configure route redistribution and summary addresses route redistribution is used when other routers which use rip routing protocol and or static routes need to exchange routing information with the switch using ospf routing protocol a summary address is used to cover more than one routing entries in order to reduce the routing table size 339
• View ospf area information table 339
• Xgs 4526 4528f 4728f user s guide 339
• Chapter 37 ospf 340
• In the ospf configuration screen click redistribute to display the ospf redistribution screen 340
• Label description 340
• Redistribute 340
• The following table describes the labels in this screen 340
• Xgs 4526 4528f 4728f user s guide 340
• Chapter 37 ospf 341
• Configuring ospf interfaces 341
• In the ospf configuration screen click interface to display the ospf interface screen 341
• Label description 341
• Ospf interface 341
• Redistribute continued 341
• To configure an ospf interface first create an ip routing domain in the ip setup screen see section 8 on page 110 for more information once you create an ip routing domain an ospf interface entry is automatically created see section 37 on page 331 for more information on ospf 341
• Xgs 4526 4528f 4728f user s guide 341
• Chapter 37 ospf 342
• Label description 342
• Note ospf interface s must use the same authentication method within the same area 342
• Ospf interface 342
• The following table describes the labels in this screen 342
• Xgs 4526 4528f 4728f user s guide 342
• Chapter 37 ospf 343
• Configure and view virtual link settings in this screen see section 37 on page 331 for more information on ospf 343
• In the ospf configuration screen click virtual link to display the screen as shown next 343
• Label description 343
• Ospf interface continued 343
• Ospf virtual link 343
• Ospf virtual links 343
• The following table describes the related labels in this screen 343
• Xgs 4526 4528f 4728f user s guide 343
• Chapter 37 ospf 344
• Label description 344
• Note virtual interface s must use the same authentication method within the same area 344
• Ospf virtual link continued 344
• Xgs 4526 4528f 4728f user s guide 344
• Hapter 345
• Igmp overview 345
• Figure 169 igmp version 1 example 346
• How igmp works 346
• Figure 170 igmp version 2 example 347
• Figure 171 igmp version 3 example 347
• Port based igmp 347
• Chapter 38 igmp 348
• Configuring igmp 348
• Igmp in the navigation panel to display the screen as shown next each entry in the table is automatically created when you configure a new ip domain in the ip setup screen refer to section 8 on page 110 348
• Label description 348
• Note you cannot enable both igmp snooping and igmp at the same time refer to section 24 on page 232 for more information on igmp snooping 348
• The following table describes the labels in this screen 348
• Xgs 4526 4528f 4728f user s guide 348
• Dvmrp overview 349
• Hapter 349
• How dvmrp works 349
• Configuring dvmrp 350
• Dvmrp terminology 350
• Figure 173 how dvmrp works 350
• Chapter 39 dvmrp 351
• Dvmrp configuration error messages 351
• Figure 175 dvmrp igmp not set error 351
• Figure 176 dvmrp unable to disable igmp error 351
• Label description 351
• The following table describes the labels in this screen 351
• When you disable igmp but dvmrp is still active you also see another warning screen 351
• Xgs 4526 4528f 4728f user s guide 351
• You must have igmp enabled when you enable dvmrp otherwise you see the screen as in the next figure 351
• Chapter 39 dvmrp 352
• Default dvmrp timer values 352
• Dvmrp field default value 352
• Each ip routing domain dvmrp configuration must be in a different vlan group otherwise you see the following screen 352
• Figure 177 dvmrp duplicate vid error message 352
• Table 125 dvmrp default timer values 352
• The following are some default dvmrp timer values 352
• Xgs 4526 4528f 4728f user s guide 352
• Differentiated services 353
• Diffserv overview 353
• Dscp and per hop behavior 353
• Hapter 353
• Diffserv network example 354
• Figure 179 diffserv network 354
• Two rate three color marker traffic policing 354
• Figure 180 trtcm color blind mode 355
• Trtcm color aware mode 355
• Trtcm color blind mode 355
• Activating diffserv 356
• Diffserv 356
• Figure 181 trtcm color aware mode 356
• Chapter 40 differentiated services 357
• Configuring 2 rate 3 color marker settings 357
• Diffserv 357
• Label description 357
• Note changes in this row are copied to all the ports as soon as you make them 357
• The following table describes the labels in this screen 357
• Use this screen to configure trtcm settings click the 2 rate 3 color marker link in the diffserv screen to display the screen as shown next 357
• Xgs 4526 4528f 4728f user s guide 357
• Chapter 40 differentiated services 358
• Label description 358
• Note changes in this row are copied to all the ports as soon as you make them 358
• Note you cannot enable both trtcm and bandwidth control at the same time 358
• Note you must also activate diffserv on the switch and the individual ports for the switch to drop red high loss priority colored packets 358
• Rate 3 color marker 358
• The following table describes the labels in this screen 358
• Xgs 4526 4528f 4728f user s guide 358
• Dscp to ieee 802 p priority settings 359
• Rate 3 color marker continued 359
• Table 128 default dscp ieee 802 p mapping 359
• Chapter 40 differentiated services 360
• Configuring dscp settings 360
• Dscp setting 360
• Label description 360
• The following table describes the labels in this screen 360
• To change the dscp ieee 802 p mapping click the dscp setting link in the diffserv screen to display the screen as shown next 360
• Xgs 4526 4528f 4728f user s guide 360
• Dhcp configuration options 361
• Dhcp modes 361
• Dhcp overview 361
• Hapter 361
• Chapter 41 dhcp 362
• Dhcp in the navigation panel and then click an existing index number of a dhcp server configuration to view the screen as shown use 362
• Dhcp in the navigation panel the dhcp status screen displays 362
• Dhcp server status detail 362
• Dhcp status 362
• Label description 362
• The following table describes the labels in this screen 362
• Vlan the switch is configured on a vlan by vlan basis the switch can be configured as a dhcp server for one vlan and at the same time the switch can be configured to relay dhcp requests for clients in another vlan 362
• Xgs 4526 4528f 4728f user s guide 362
• Chapter 41 dhcp 363
• Dhcp server status detail 363
• Label description 363
• The following table describes the labels in this screen 363
• This screen to view details regarding dhcp server settings configured on the switch 363
• Xgs 4526 4528f 4728f user s guide 363
• Dhcp relay 364
• Dhcp relay agent information 364
• Table 132 relay agent information 364
• Chapter 41 dhcp 365
• Configuring dhcp global relay 365
• Dhcp in the navigation panel and click the global link to display the screen as shown 365
• Global 365
• Label description 365
• The following table describes the labels in this screen 365
• Xgs 4526 4528f 4728f user s guide 365
• Example 366
• Figure 188 global dhcp relay network example 366
• Figure 189 dhcp relay configuration example 366
• Global dhcp relay configuration example 366
• Configuring dhcp vlan settings 367
• Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch see section 8 on page 110 for information on how to do this 367
• Chapter 41 dhcp 368
• Label description 368
• Vlan continued 368
• Xgs 4526 4528f 4728f user s guide 368
• Example dhcp relay for two vlans 369
• Figure 191 dhcp relay for two vlans 369
• Example 370
• Figure 192 dhcp relay for two vlans configuration example 370
• Hapter 371
• Vrrp overview 371
• Figure 193 vrrp example 1 372
• Vrrp status 372
• Before configuring vrrp first create an ip interface or routing domain in the ip setup screen see the section 8 on page 110 for more information 373
• Chapter 42 vrrp 373
• Click ip application vrrp and click the configuration link to display the vrrp configuration screen as shown next 373
• Ip interface setup 373
• Label description 373
• Note you can only configure vrrp on interfaces with unique vlan ids 373
• The following sections describe the different parts of the vrrp configuration screen 373
• Vrrp configuration 373
• Vrrp status continued 373
• Xgs 4526 4528f 4728f user s guide 373
• Chapter 42 vrrp 374
• Ip interface 374
• Label description 374
• Note routing domains with the same vlan id are not displayed in the table indicated 374
• The following table describes the labels in this screen 374
• Xgs 4526 4528f 4728f user s guide 374
• Advertisement interval 375
• Note all routers participating in the virtual router must use the same advertisement interval 375
• Preempt mode 375
• Priority 375
• Vrrp parameters 375
• After you set up an ip interface configure the vrrp parameters in the vrrp configuration screen 376
• Chapter 42 vrrp 376
• Configuring vrrp parameters 376
• Label description 376
• The following table describes the labels in this screen 376
• Vrrp parameters 376
• Xgs 4526 4528f 4728f user s guide 376
• Chapter 42 vrrp 377
• Configuring vrrp parameters 377
• Figure 197 vrrp configuration summary 377
• Label description 377
• Table 138 vrrp configuring vrrp parameters 377
• The following sections show two vrrp configuration examples on the switch 377
• The following table describes the labels in this screen 377
• View the vrrp configuration summary at the bottom of the screen 377
• Vrrp configuration examples 377
• Vrrp parameters continued 377
• Xgs 4526 4528f 4728f user s guide 377
• Example 378
• Figure 198 vrrp configuration example one virtual router network 378
• Figure 199 vrrp example 1 vrrp parameter settings on switch a 378
• Figure 200 vrrp example 1 vrrp parameter settings on switch b 378
• One subnet network example 378
• Example 379
• Figure 201 vrrp example 1 vrrp status on switch a 379
• Figure 202 vrrp example 1 vrrp status on switch b 379
• Figure 203 vrrp configuration example two virtual router network 379
• Two subnets example 379
• Example 380
• Figure 204 vrrp example 2 vrrp parameter settings for vr2 on switch a 380
• Figure 205 vrrp example 2 vrrp parameter settings for vr2 on switch b 380
• Figure 206 vrrp example 2 vrrp status on switch a 380
• Figure 207 vrrp example 2 vrrp status on switch b 380
• Arp learning 381
• Arp learning mode 381
• Arp overview 381
• Hapter 381
• How arp works 381
• Arp reply 382
• Gratuitous arp 382
• Arp request 383
• Arp learning 384
• Arp learning in the navigation panel to display the screen as shown next 384
• Chapter 43 arp learning 384
• Configuring arp learning 384
• Label description 384
• Note changes in this row are copied to all the ports as soon as you make them 384
• The following table describes the labels in this screen 384
• Xgs 4526 4528f 4728f user s guide 384
• Arp learning continued 385
• Chapter 43 arp learning 385
• Label description 385
• Xgs 4526 4528f 4728f user s guide 385
• Configuring load sharing 387
• Hapter 387
• Load sharing 387
• Load sharing overview 387
• Chapter 44 load sharing 388
• Label description 388
• Load sharing 388
• The following table describes the labels in this screen 388
• Xgs 4526 4528f 4728f user s guide 388
• Hapter 389
• Maintenance 389
• The maintenance screen 389
• Figure 211 load factory default start 390
• Load factory default 390
• Maintenance continued 390
• Note make sure to click the save button in any screen to save your settings to the current configuration on the switch 390
• Save configuration 390
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 391
• Figure 212 reboot system confirmation 391
• Firmware upgrade 391
• Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 391
• Reboot system 391
• Firmware upgrade 392
• Restore a configuration file 392
• Restore configuration 392
• Backup a configuration file 393
• Backup configuration 393
• Filename conventions 393
• Ftp command line 393
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 394
• Example ftp commands 394
• Ftp command line procedure 394
• Table 142 filename conventions 394
• Ftp restrictions 395
• Gui based ftp clients 395
• Table 143 general commands for gui based ftp clients 395
• Access control 397
• Access control overview 397
• Hapter 397
• The access control main screen 397
• About snmp 398
• Figure 217 snmp management model 398
• Snmp v3 and security 399
• Supported mibs 399
• Table 145 snmp commands 399
• An oid object id that begins with 1 90 is defined in private mibs otherwise it is a standard mib oid 400
• Chapter 46 access control 400
• Option object label object id description 400
• Snmp traps 400
• Table 146 snmp system traps 400
• The oids beginning with 1 90 39 are specific to the xgs 4528f switch 400
• The oids beginning with 1 90 46 are specific to the xgs 4728f switch 400
• The oids beginning with 1 90 52 are specific to the xgs 4526 switch 400
• The switch sends traps to an snmp manager when an event occurs the following tables outline the snmp traps by category 400
• Xgs 4526 4528f 4728f user s guide 400
• Chapter 46 access control 401
• Option object label object id description 401
• Table 146 snmp system traps continued 401
• Xgs 4526 4528f 4728f user s guide 401
• Chapter 46 access control 402
• Option object label object id description 402
• Table 146 snmp system traps continued 402
• Xgs 4526 4528f 4728f user s guide 402
• Chapter 46 access control 403
• Option object label object id description 403
• Table 147 snmp interfacetraps 403
• Xgs 4526 4528f 4728f user s guide 403
• Chapter 46 access control 404
• Option object label object id description 404
• Table 147 snmp interfacetraps continued 404
• Table 148 aaa traps 404
• Xgs 4526 4528f 4728f user s guide 404
• Chapter 46 access control 405
• Option object label object id description 405
• Table 148 aaa traps continued 405
• Table 149 snmp ip traps 405
• Xgs 4526 4528f 4728f user s guide 405
• Chapter 46 access control 406
• Option object label object id description 406
• Table 150 snmp switch traps 406
• Xgs 4526 4528f 4728f user s guide 406
• Chapter 46 access control 407
• Configuring snmp 407
• From the access control screen display the snmp screen you can click access control to go back to the access control screen 407
• Label description 407
• Note snmp version 2c is backwards compatible with snmp version 1 407
• Option object label object id description 407
• Table 150 snmp switch traps continued 407
• The following table describes the labels in this screen 407
• Xgs 4526 4528f 4728f user s guide 407
• Chapter 46 access control 408
• Label description 408
• Snmp continued 408
• User screen 408
• Xgs 4526 4528f 4728f user s guide 408
• Chapter 46 access control 409
• Configuring snmp trap group 409
• From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 409
• Label description 409
• The following table describes the labels in this screen 409
• Trap group 409
• Xgs 4526 4528f 4728f user s guide 409
• Chapter 46 access control 410
• Configuring snmp user 410
• From the snmp screen click user to view the screen as shown use the user screen to create snmp users for authentication with managers using snmp v3 and associate them to snmp groups an snmp user is an snmp manager 410
• Label description 410
• Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 410
• Note use the username and password of the login accounts you specify in this screen to create accounts on the snmp v3 manager 410
• The following table describes the labels in this screen 410
• Xgs 4526 4528f 4728f user s guide 410
• Chapter 46 access control 411
• Label description 411
• User continued 411
• Xgs 4526 4528f 4728f user s guide 411
• Logins 412
• Note it is highly recommended that you change the default administrator password 1234 412
• Setting up login accounts 412
• Chapter 46 access control 413
• Figure 222 ssh communication example 413
• Label description 413
• Logins continued 413
• Ssh overview 413
• Unlike telnet or ftp which transmit data in clear text ssh secure shell is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network 413
• Xgs 4526 4528f 4728f user s guide 413
• Figure 223 how ssh works 414
• How ssh works 414
• Introduction to https 415
• Requirements for using ssh 415
• Ssh implementation on the switch 415
• Figure 224 https implementation 416
• Https example 416
• Internet explorer warning messages 416
• Note if you disable http in the service access control screen then the switch blocks all http connection attempts 416
• Figure 225 security alert dialog box internet explorer 417
• Netscape navigator warning messages 417
• Example 418
• Figure 226 security certificate 1 netscape 418
• Figure 227 security certificate 2 netscape 418
• Figure 228 example lock denoting a secure connection 419
• Service port access control 419
• The main screen 419
• Chapter 46 access control 420
• Computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen 420
• From the access control screen display the remote management screen as shown next 420
• Label description 420
• Remote management 420
• Service access control 420
• The following table describes the fields in this screen 420
• Xgs 4526 4528f 4728f user s guide 420
• Chapter 46 access control 421
• Label description 421
• Remote management 421
• The following table describes the labels in this screen 421
• Xgs 4526 4528f 4728f user s guide 421
• You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen 421
• Chapter 46 access control 422
• Label description 422
• Remote management continued 422
• Xgs 4526 4528f 4728f user s guide 422
• Diagnostic 423
• Hapter 423
• Chapter 47 diagnostic 424
• Diagnostic continued 424
• Label description 424
• Xgs 4526 4528f 4728f user s guide 424
• Hapter 425
• Syslog 425
• Syslog overview 425
• Chapter 48 syslog 426
• Label description 426
• Syslog 426
• Syslog in the navigation panel to display this screen the syslog feature sends logs to an external syslog server use this screen to configure the device s system logging settings 426
• Syslog setup 426
• The following table describes the labels in this screen 426
• Xgs 4526 4528f 4728f user s guide 426
• Chapter 48 syslog 427
• Label description 427
• Server setup 427
• Syslog server setup 427
• Syslog server setup to open the following screen use this screen to configure a list of external syslog servers 427
• The following table describes the labels in this screen 427
• Xgs 4526 4528f 4728f user s guide 427
• Chapter 48 syslog 428
• Log type severity message 428
• Syslog messages 428
• Table 161 syslog messages 428
• The following table shows log messages the switch may generate 428
• Xgs 4526 4528f 4728f user s guide 428
• Chapter 48 syslog 429
• Log type severity message 429
• Table 161 syslog messages 429
• Xgs 4526 4528f 4728f user s guide 429
• Chapter 48 syslog 430
• Log type severity message 430
• Table 161 syslog messages 430
• Xgs 4526 4528f 4728f user s guide 430
• Chapter 48 syslog 431
• Log type severity message 431
• Table 161 syslog messages 431
• Xgs 4526 4528f 4728f user s guide 431
• Chapter 48 syslog 432
• Log type severity message 432
• Table 161 syslog messages 432
• Xgs 4526 4528f 4728f user s guide 432
• Chapter 48 syslog 433
• Log type severity message 433
• Table 161 syslog messages 433
• Xgs 4526 4528f 4728f user s guide 433
• Chapter 48 syslog 434
• Log type severity message 434
• Table 161 syslog messages 434
• Xgs 4526 4528f 4728f user s guide 434
• Cluster management 435
• Clustering management status overview 435
• Hapter 435
• Cluster management 436
• Cluster management status 436
• Figure 234 clustering application example 436
• Note a cluster can only have one manager 436
• Chapter 49 cluster management 437
• Cluster management 437
• Cluster member switch management 437
• Go to the clustering management status screen of the cluster manager switch and then select an index hyperlink from the list of members to go to that cluster member switch s web configurator home page this cluster member web 437
• Label description 437
• The following table describes the labels in this screen 437
• Xgs 4526 4528f 4728f user s guide 437
• Figure 236 cluster management cluster member web configurator screen 438
• Chapter 49 cluster management 439
• Figure 237 example uploading firmware to a cluster member switch 439
• Ftp parameter description 439
• Table 164 ftp upload to cluster member example 439
• The following table explains some of the ftp parameters 439
• Uploading firmware to a cluster member switch 439
• Xgs 4526 4528f 4728f user s guide 439
• You can use ftp to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example 439
• Chapter 49 cluster management 440
• Clustering management configuration 440
• Configuration 440
• Label description 440
• The following table describes the labels in this screen 440
• Use this screen to configure clustering management click configuration from the cluster management screen to display the next screen 440
• Xgs 4526 4528f 4728f user s guide 440
• Chapter 49 cluster management 441
• Configuration continued 441
• Label description 441
• Xgs 4526 4528f 4728f user s guide 441
• Hapter 443
• Mac table 443
• Mac table overview 443
• Figure 239 mac table flowchart 444
• Mac table 444
• Viewing the mac table 444
• Chapter 50 mac table 445
• Label description 445
• Mac table 445
• The following table describes the labels in this screen 445
• Xgs 4526 4528f 4728f user s guide 445
• Hapter 447
• Ip table 447
• Ip table overview 447
• Figure 241 ip table flowchart 448
• Ip table 448
• Viewing the ip table 448
• Chapter 51 ip table 449
• Ip table continued 449
• Label description 449
• Xgs 4526 4528f 4728f user s guide 449
• Arp table 451
• Arp table overview 451
• Hapter 451
• How arp works 451
• Arp table 452
• Arp table in the navigation panel to open the following screen use the arp table to view ip to mac address mapping s and remove specific dynamic arp entries 452
• Chapter 52 arp table 452
• Label description 452
• The arp table screen 452
• The following table describes the labels in this screen 452
• Xgs 4526 4528f 4728f user s guide 452
• Hapter 453
• Overview 453
• Routing table 453
• Viewing the routing table status 453
• Configure clone 455
• Hapter 455
• Chapter 54 configure clone 456
• Configure clone 456
• Label description 456
• The following table describes the labels in this screen 456
• Xgs 4526 4528f 4728f user s guide 456
• Hapter 457
• Power hardware connections and leds 457
• Troubleshooting 457
• I forgot the ip address for the switch 458
• One of the leds does not behave as expected 458
• Switch access and login 458
• I can see the login screen but i cannot log in to the switch 459
• I cannot see or access the login screen in the web configurator 459
• I forgot the username and or password 459
• I cannot see some of advanced application submenus at the bottom of the navigation panel 460
• Pop up windows javascripts and java permissions 460
• There is unauthorized access to my switch via telnet http and ssh 460
• I lost my configuration settings after i restart the switch 461
• Switch configuration 461
• Hapter 463
• Product specifications 463
• Chapter 56 product specifications 464
• Feature description 464
• Table 171 hardware specifications 464
• Table 172 firmware specifications 464
• Xgs 4526 4528f 4728f user s guide 464
• Chapter 56 product specifications 465
• Feature description 465
• Table 172 firmware specifications 465
• Xgs 4526 4528f 4728f user s guide 465
• Chapter 56 product specifications 466
• Feature description 466
• Table 172 firmware specifications 466
• Xgs 4526 4528f 4728f user s guide 466
• Chapter 56 product specifications 467
• Feature description 467
• Note only upload firmware for your specific model 467
• Table 172 firmware specifications 467
• Xgs 4526 4528f 4728f user s guide 467
• Chapter 56 product specifications 468
• Table 173 switching specifications 468
• Xgs 4526 4528f 4728f user s guide 468
• Chapter 56 product specifications 469
• Table 173 switching specifications continued 469
• Xgs 4526 4528f 4728f user s guide 469
• Chapter 56 product specifications 470
• Standard description 470
• Table 173 switching specifications continued 470
• Table 174 standards supported 470
• The following list which is not exhaustive illustrates the standards supported in the switch 470
• Xgs 4526 4528f 4728f user s guide 470
• Chapter 56 product specifications 471
• Standard description 471
• Table 174 standards supported continued 471
• Xgs 4526 4528f 4728f user s guide 471
• Common services 473
• Ppendix 473
• Appendix a common services 474
• Name protocol port s description 474
• Table 175 commonly used services continued 474
• Xgs 4526 4528f 4728f user s guide 474
• Appendix a common services 475
• Name protocol port s description 475
• Table 175 commonly used services continued 475
• Xgs 4526 4528f 4728f user s guide 475
• Appendix a common services 476
• Name protocol port s description 476
• Table 175 commonly used services continued 476
• Xgs 4526 4528f 4728f user s guide 476
• Certifications 477
• Copyright 477
• Legal information 477
• Ppendix 477
• Ce mark warning 478
• Fcc warning 478
• Notices 478
• Taiwanese bsmi bureau of standards metrology and inspection a warning 478
• Registration 479
• Viewing certifications 479
• Zyxel limited warranty 479
• Numerics 481
• Xgs 4526 4528f 4728f user s guide 481
• Xgs 4526 4528f 4728f user s guide 482
• Xgs 4526 4528f 4728f user s guide 483
• Xgs 4526 4528f 4728f user s guide 484
• Xgs 4526 4528f 4728f user s guide 485
• Xgs 4526 4528f 4728f user s guide 486
• Xgs 4526 4528f 4728f user s guide 487
• Xgs 4526 4528f 4728f user s guide 488
• Xgs 4526 4528f 4728f user s guide 489
• Xgs 4526 4528f 4728f user s guide 490
• Xgs 4526 4528f 4728f user s guide 491