Zyxel XGS4700-48F [146/485] Static multicast forwarding continued

Содержание

• Default login details 1
• Firmware version 4 0 edition 1 04 2011 1
• Layer 3 managed stackable gigabit ethernet switch 1
• Www zyxel com 1
• Xgs4700 48f 1
• About this user s guide 3
• Documentation feedback 3
• Intended audience 3
• Need more help 3
• Note it is recommended you use the web configurator to configure the switch 3
• Related documentation 3
• Customer support 4
• Document conventions 5
• Note notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 5
• Syntax conventions 5
• Warnings and notes 5
• Warnings tell you about things that could harm you or your device 5
• Document conventions 6
• Figures in this user s guide may use the following generic icons the switch icon is not an exact representation of your device 6
• Icons used in figures 6
• Xgs4700 48f user s guide 6
• Safety warnings 7
• Xgs4700 48f user s guide 7
• Contents overview 9
• Technical reference 7 9
• User s guide 5 9
• About this user s guide 11
• Chapter 1 getting to know your switch 7 11
• Chapter 2 hardware installation and connection 3 11
• Chapter 3 hardware overview 1 11
• Contents overview 11
• Document conventions 11
• Part i user s guide 25 11
• Safety warnings 11
• Table of contents 11
• Table of contents 1 11
• Chapter 4 the web configurator 5 12
• Chapter 5 initial setup example 5 12
• Chapter 6 tutorials 1 12
• Chapter 7 system status and port statistics 9 13
• Chapter 8 basic setting 05 13
• Chapter 9 vlan 119 13
• Part ii technical reference 97 13
• Chapter 10 static mac forward setup 39 14
• Chapter 11 static multicast forward setup 43 14
• Chapter 12 filtering 47 14
• Chapter 13 spanning tree protocol 49 14
• Chapter 14 bandwidth control 71 15
• Chapter 15 broadcast storm control 75 15
• Chapter 16 mirroring 77 15
• Chapter 17 link aggregation 79 15
• Chapter 18 port authentication 89 15
• Chapter 19 port security 99 15
• Chapter 20 classifier 03 16
• Chapter 21 policy rule 09 16
• Chapter 22 queuing method 17 16
• Chapter 23 vlan stacking 21 16
• Chapter 24 multicast 29 16
• Chapter 25 aaa 45 17
• Chapter 26 ip source guard 61 17
• Chapter 27 loop guard 85 18
• Chapter 28 vlan mapping 89 18
• Chapter 29 layer 2 protocol tunneling 93 18
• Chapter 30 sflow 97 18
• Chapter 31 pppoe 01 18
• Chapter 32 error disable 311 18
• Chapter 33 static route 17 19
• Chapter 34 policy routing 21 19
• Chapter 35 rip 25 19
• Chapter 36 ospf 29 19
• Chapter 37 igmp 43 19
• Chapter 38 dvmrp 47 20
• Chapter 39 differentiated services 51 20
• Chapter 40 dhcp 59 20
• Chapter 41 vrrp 69 20
• Chapter 42 arp learning 79 21
• Chapter 43 load sharing 85 21
• Chapter 44 maintenance 87 21
• Chapter 45 access control 95 21
• Chapter 46 diagnostic 21 22
• Chapter 47 syslog 23 22
• Chapter 48 cluster management 27 22
• Chapter 49 mac table 35 22
• Chapter 50 ip table 39 22
• Chapter 51 arp table 43 22
• Appendix a common services 65 23
• Appendix b legal information 69 23
• Chapter 52 routing table 45 23
• Chapter 53 configure clone 47 23
• Chapter 54 troubleshooting 49 23
• Chapter 55 product specifications 55 23
• Index 75 23
• User s guide 25
• Bridging example 27
• Getting to know your switch 27
• Hapter 27
• Introduction 27
• Figure 1 bridging application 28
• Figure 2 high performance switching 28
• High performance switching example 28
• Figure 3 gigabit to the desktop 29
• Gigabit ethernet to the desktop 29
• Ieee 802 q vlan application example 29
• Tag based vlan example 29
• Figure 4 shared server using vlan example 30
• Ipv6 support 30
• Ways to manage the switch 30
• Good habits for managing the switch 31
• Freestanding installation 33
• Hapter 33
• Hardware installation and connection 33
• Attaching the mounting brackets to the switch 34
• Failure to use the proper screws may damage the unit 34
• Mounting the switch on a rack 34
• Precautions 34
• Rack mounted installation requirements 34
• Connecting the frame ground 35
• Figure 7 mounting the switch on a rack 35
• Mounting the switch on a rack 35
• Note see chapter 55 on page 455 for the ground wire gauge 35
• Ac power module acp4700 48f 36
• Installing a power module 36
• Power module installation 36
• Warning connect the frame ground before you connect any other cables or wiring 36
• Ac power module 38
• Dc power module dcp4700 48f 38
• Removing a power module 38
• Dc power module 39
• Front panel connections 41
• Hapter 41
• Hardware overview 41
• Mini gbic slots 41
• Figure 10 transceiver installation example 42
• Figure 11 installed transceiver 42
• To avoid possible eye injury do not look into an operating fiber optic module s connectors 42
• Transceiver installation 42
• Transceiver removal 42
• Console port 43
• Figure 12 opening the transceiver s latch example 43
• Figure 13 transceiver removal example 43
• Signal slot 43
• Connecting a sensor to the signal slot 44
• 2 3 11 10 4 5 6 9 8 7 10 45
• Door open sensor spring clip 45
• Dry contact 45
• Figure 14 connecting a sensor to the signal slot 45
• Normal open only 45
• Output pins 45
• Signal connector 45
• Signal input pins signal 45
• 2 3 11 10 46
• B d e f a c 46
• Pin assignments 46
• Rear panel 46
• Figure 18 fan module thumbscrews 47
• Figure 19 removing the fan module 47
• Figure 20 fan module removed 47
• Removing and installing the fan module 47
• Chapter 3 hardware overview 48
• Connector description 48
• Em 412 em 422 48
• Figure 21 installing the fan module 48
• Figure 22 the front panel of the em 422 and em 412 modules 48
• Rear panel connections 48
• Slide the fan module into the fan module slot 48
• Table 2 panel connections 48
• The following figure shows the front panel of the em 422 and em 412 modules 48
• The following table describes the ports on the rear panel 48
• Tighten the thumbscrew 48
• Uplink module 48
• Xgs4700 48f user s guide 48
• Management port 49
• Note check the power supply requirements in chapter 55 on page 455 and make sure you are using an appropriate power source 49
• Power connection 49
• Power connector 49
• Table 2 panel connections continued 49
• Ac power connections 50
• Dc power connections 50
• Exposed power wire is dangerous use extreme care when connecting a dc power source to the device 50
• Note the current rating of the power wires must be greater than 20 amps the power supply to which the switch connects must have a built in circuit breaker or switch to toggle the power 50
• Note use only power wires of the required diameter for connecting the switch dc power input to a power supply see chapter 55 on page 455 for the required wire diameter 50
• Note use the included power cord for the ac power connection 50
• Note when installing the switch power wire push the wire firmly into the terminal as deep as possible and make sure that no exposed bare wire can be seen or touched 50
• Ac power disconnection 51
• Dc power disconnection 51
• Disconnecting the power 51
• Figure 23 connecting the power wires to the dc power terminals 51
• Procedure to turn on the switch power 51
• Chapter 3 hardware overview 52
• Led colo r status description 52
• Table 3 leds 52
• The following table describes the leds 52
• Xgs4700 48f user s guide 52
• Chapter 3 hardware overview 53
• Led colo r status description 53
• Table 3 leds continued 53
• Xgs4700 48f user s guide 53
• Hapter 55
• Introduction 55
• System login 55
• The web configurator 55
• Figure 24 web configurator login 56
• The web configurator layout 56
• B d c e 57
• Figure 25 the web configurator layout 57
• Basic setting advanced application ip application management 58
• Chapter 4 the web configurator 58
• In the navigation panel click a main link to reveal a list of submenu links 58
• Link description 58
• Table 4 navigation panel sub links overview 58
• Table 5 navigation panel links 58
• The following table describes the links in the navigation panel 58
• Xgs4700 48f user s guide 58
• Chapter 4 the web configurator 59
• Link description 59
• Table 5 navigation panel links continued 59
• Xgs4700 48f user s guide 59
• Chapter 4 the web configurator 60
• Link description 60
• Table 5 navigation panel links continued 60
• Xgs4700 48f user s guide 60
• Change your password 61
• Chapter 4 the web configurator 61
• Figure 26 change administrator login password 61
• Link description 61
• Logins to display the next screen 61
• Table 5 navigation panel links continued 61
• Xgs4700 48f user s guide 61
• Note be careful not to lock yourself and others out of the switch if you do lock yourself out try using out of band management via the management port to configure the switch 62
• Note use the save link when you are done with a configuration session 62
• Resetting the switch 62
• Saving your configuration 62
• Switch lockout 62
• Figure 27 resetting the switch via the console port 63
• Reload the configuration file 63
• Figure 28 web configurator logout screen 64
• Logging out of the web configurator 64
• Configuring an ip interface 65
• Hapter 65
• Initial setup example 65
• Overview 65
• Example 66
• Figure 29 initial setup network example ip interface 66
• Configuring dhcp server settings 67
• Creating a vlan 67
• Example 67
• Example 68
• Figure 30 initial setup network example vlan 68
• Note the vlan group id field in this screen and the vid field in the ip setup screen refer to the same vlan id 68
• Example 69
• Figure 31 initial setup network example port vid 69
• Setting port vid 69
• Enabling rip 70
• Example 70
• Hapter 71
• How to use dhcp snooping on the switch 71
• Tutorials 71
• Table 6 settings in this tutorial 72
• Dhcp relay tutorial introduction 75
• How to use dhcp relay on the switch 75
• Creating a vlan 76
• Figure 33 tutorial dhcp relay scenario 76
• Vlan 102 76
• Configuring dhcp relay 79
• Troubleshooting 79
• Figure 34 tutorial pppoe intermediate agentt tutorial overview 80
• How to use pppoe ia on the switch 80
• Note for related information about pppoe ia see section 31 on page 304 80
• Port 11 trusted 80
• Port 12 trusted 80
• Port 5 untrusted port 12 trusted 80
• Table 7 settings in this tutorial 80
• Configuring switch a 81
• Configuring switch b 83
• How to use error disable and recovery on the switch 85
• Note refer to section 27 on page 287 and section 32 on page 312 for more information about loop guard and errdiable 86
• How to set up a guest vlan 88
• Internet 88
• Creating a guest vlan 89
• Enabling ieee 802 x port authentication 91
• Enabling guest vlan 92
• How to configure routing policy 93
• Create a layer 3 classifier 94
• Create a policy routing rule 95
• Technical reference 97
• Hapter 99
• Overview 99
• Port status summary 99
• System status and port statistics 99
• Chapter 7 system status and port statistics 100
• Label description 100
• Table 8 status 100
• The following table describes the labels in this screen 100
• Xgs4700 48f user s guide 100
• Chapter 7 system status and port statistics 101
• Click a number in the port column in the status screen to display individual port statistics use this screen to check status and detailed performance data about an individual port on the switch 101
• Figure 36 status port details 101
• Label description 101
• Port details 101
• Status port details 101
• The following table describes the labels in this screen 101
• Xgs4700 48f user s guide 101
• Chapter 7 system status and port statistics 102
• Label description 102
• Port details continued 102
• Xgs4700 48f user s guide 102
• Chapter 7 system status and port statistics 103
• Label description 103
• Port details continued 103
• Xgs4700 48f user s guide 103
• Basic setting 105
• Hapter 105
• Overview 105
• System info 106
• System information 106
• Chapter 8 basic setting 107
• Label description 107
• System info continued 107
• Xgs4700 48f user s guide 107
• General setup 108
• Chapter 8 basic setting 109
• General setup continued 109
• Label description 109
• Xgs4700 48f user s guide 109
• A vlan virtual local area network allows a physical network to be partitioned into multiple logical networks devices on a logical network belong to one group a device can belong to more than one group with vlan a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router 110
• Chapter 8 basic setting 110
• General setup continued 110
• In mtu multi tenant unit applications vlan is vital in providing isolation and security among the subscribers when properly configured vlan prevents one subscriber from accessing the network resources of another on the same lan thus a user will not see the printers and hard disks of another user on the same network 110
• Introduction to vlans 110
• Label description 110
• Note vlan is unidirectional it only governs outgoing traffic 110
• See chapter 9 on page 119 for information on port based and 802 q tagged vlans 110
• Vlan also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain in traditional switched environments all broadcast packets go to each and every individual port with vlan all broadcasts are confined to a specific broadcast domain 110
• Xgs4700 48f user s guide 110
• Chapter 8 basic setting 111
• Click basic setting and then switch setup in the navigation panel to display the screen as shown the vlan setup screens change depending on whether you choose 802 q or port based in the vlan type field in this screen refer to the chapter on vlan 111
• Label description 111
• Switch setup 111
• Switch setup screen 111
• The following table describes the labels in this screen 111
• Xgs4700 48f user s guide 111
• Chapter 8 basic setting 112
• Label description 112
• Switch setup continued 112
• Xgs4700 48f user s guide 112
• Ip interfaces 113
• Ip setup 113
• Chapter 8 basic setting 114
• Ip setup 114
• Label description 114
• The following table describes the labels in this screen 114
• Xgs4700 48f user s guide 114
• Chapter 8 basic setting 115
• Ip setup continued 115
• Label description 115
• Note deleting all ip subnets locks you out of the switch 115
• Port setup 115
• Port setup in the navigation panel to display the configuration screen 115
• Xgs4700 48f user s guide 115
• Chapter 8 basic setting 116
• Label description 116
• Note changes in this row are copied to all the ports as soon as you make them 116
• Note due to space limitations the port name may be truncated in some web configurator screens 116
• Port setup 116
• The following table describes the labels in this screen 116
• Xgs4700 48f user s guide 116
• Chapter 8 basic setting 117
• Label description 117
• Port setup continued 117
• Xgs4700 48f user s guide 117
• Forwarding tagged and untagged frames 119
• Hapter 119
• Introduction to ieee 802 q tagged vlans 119
• Automatic vlan registration 120
• Garp timers 120
• Table 15 ieee 802 q vlan terminology 120
• Chapter 9 vlan 121
• Enable vlan trunking on a port to allow frames belonging to unknown vlan groups to pass through that port this is useful if you want to set up vlan groups on end devices without having to configure the same vlan groups on intermediary devices 121
• Port vlan trunking 121
• Table 15 ieee 802 q vlan terminology continued 121
• The following figure describes vlan trunking suppose you want to create vlan groups 1 and 2 v1 and v2 on devices a and b without vlan trunking you must configure vlan groups 1 and 2 on all intermediary switches c d and e otherwise they will drop frames with unknown vlan group tags however with vlan trunking enabled on a port s in each intermediary switch you only need to create vlan groups in the end devices a and b c d and e automatically 121
• Vlan parameter term description 121
• Xgs4700 48f user s guide 121
• Figure 42 port vlan trunking 122
• Figure 43 switch setup select vlan type 122
• Select the vlan type 122
• Static vlan 122
• Chapter 9 vlan 123
• Label description 123
• The following table describes the labels in this screen 123
• Vlan from the navigation panel to display the vlan status screen as shown next 123
• Vlan status 123
• Vlan vlan status 123
• Xgs4700 48f user s guide 123
• Chapter 9 vlan 124
• Configure a static vlan 124
• Label description 124
• The following table describes the labels in this screen 124
• Use this screen to configure and view 802 q vlan parameters for the switch see section 9 on page 119 for more information on static vlan to configure a 124
• Use this screen to view detailed port settings and status of the vlan group see section 9 on page 119 for more information on static vlan click on an index number in the vlan status screen to display vlan details 124
• Vlan detail 124
• Vlan details 124
• Xgs4700 48f user s guide 124
• Chapter 9 vlan 125
• Label description 125
• Note changes in this row are copied to all the ports as soon as you make them 125
• Static vlan 125
• Static vlan click static vlan in the vlan status screen to display the screen as shown next 125
• The following table describes the related labels in this screen 125
• Xgs4700 48f user s guide 125
• Chapter 9 vlan 126
• Configure vlan port settings 126
• Label description 126
• Static vlan continued 126
• Use the vlan port setting screen to configure the static vlan ieee 802 q settings on a port see section 9 on page 119 for more information on static vlan click the vlan port setting link in the vlan status screen 126
• Vlan port setting 126
• Xgs4700 48f user s guide 126
• Chapter 9 vlan 127
• Label description 127
• Note changes in this row are copied to all the ports as soon as you make them 127
• The following table describes the labels in this screen 127
• Vlan port setting 127
• Xgs4700 48f user s guide 127
• Figure 48 subnet based vlan application example 128
• Note subnet based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 128
• Subnet based vlans 128
• Chapter 9 vlan 129
• Click subnet based vlan in the vlan port setting screen to display the configuration screen as shown 129
• Configuring subnet based vlan 129
• Label description 129
• Subnet based vlan 129
• Subnet based vlan setup 129
• The following table describes the labels in this screen 129
• Xgs4700 48f user s guide 129
• Chapter 9 vlan 130
• For example ports 1 2 3 and 4 belong to static vlan 100 and ports 4 5 6 7 belong to static vlan 120 you can configure a protocol based vlan a with priority 130
• Label description 130
• Note protocol based vlan applies to un tagged packets and is applicable only when you use ieee 802 q tagged vlan 130
• Protocol based vlans 130
• Protocol based vlans allow you to group traffic into logical vlans based on the protocol you specify when an upstream frame is received on a port configured for a protocol based vlan the switch checks if a tag is added already and its protocol the untagged packets of the same protocol are then placed in the same protocol based vlan one advantage of using protocol based vlans is that priority can be assigned to traffic of the same protocol 130
• Subnet based vlan setup continued 130
• Xgs4700 48f user s guide 130
• Configuring protocol based vlan 131
• Figure 50 protocol based vlan application example 131
• Protocol based vlan 131
• Chapter 9 vlan 132
• Label description 132
• Note protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based vlans 132
• Protocol based vlan setup 132
• The following table describes the labels in this screen 132
• Xgs4700 48f user s guide 132
• Create an ip based vlan example 133
• Example 133
• Figure 52 protocol based vlan configuration example 133
• Configure a port based vlan 134
• Note in screens such as ip setup and filtering that require a vid you must enter 1 as the vid 134
• Note when you activate port based vlan the switch uses a default vlan id of 1 you cannot change it 134
• Port based vlan setup 134
• Port based vlan setup all connected 135
• Vlan port based vlan setup port isolation 136
• Chapter 9 vlan 137
• Label description 137
• The following table describes the labels in this screen 137
• Vlan port based vlan setup 137
• Xgs4700 48f user s guide 137
• Configuring static mac forwarding 139
• Hapter 139
• Overview 139
• Static mac forward setup 139
• Chapter 10 static mac forward setup 140
• Label description 140
• Note static mac addresses do not age out 140
• Static mac forwarding 140
• Static mac forwarding in the navigation panel to display the configuration screen as shown 140
• The following table describes the labels in this screen 140
• Xgs4700 48f user s guide 140
• Chapter 10 static mac forward setup 141
• Label description 141
• Static mac forwarding continued 141
• Xgs4700 48f user s guide 141
• Hapter 143
• Static multicast forward setup 143
• Static multicast forwarding overview 143
• Configuring static multicast forwarding 144
• Figure 56 no static multicast forwarding 144
• Figure 57 static multicast forwarding to a single port 144
• Figure 58 static multicast forwarding to multiple ports 144
• Chapter 11 static multicast forward setup 145
• Label description 145
• Static multicast forwarding 145
• Static multicast forwarding to display the configuration screen as shown 145
• The following table describes the labels in this screen 145
• Xgs4700 48f user s guide 145
• Chapter 11 static multicast forward setup 146
• Label description 146
• Static multicast forwarding continued 146
• Xgs4700 48f user s guide 146
• Configure a filtering rule 147
• Filtering 147
• Hapter 147
• Chapter 12 filtering 148
• Filtering continued 148
• Label description 148
• Xgs4700 48f user s guide 148
• Hapter 149
• Spanning tree protocol 149
• Stp rstp overview 149
• Stp terminology 149
• How stp works 150
• Table 26 stp path costs 150
• Figure 61 mrstp network example 151
• Multiple rstp 151
• Note the listening state does not exist in rstp 151
• Stp port states 151
• Table 27 stp port states 151
• Figure 62 stp rstp network example 152
• Mstp network example 152
• Multiple stp 152
• Note each port can belong to one stp tree only 152
• Vlan 1 vlan 2 152
• Figure 63 mstp network example 153
• Mst instance 153
• Mst region 153
• Vlan 1 vlan 2 153
• Common and internal spanning tree cist 154
• Figure 64 mstis in different regions 154
• Figure 65 mstp and legacy rstp network example 154
• Configuration 155
• Spanning tree configuration 155
• Spanning tree protocol 155
• Spanning tree protocol status screen 155
• Chapter 13 spanning tree protocol 156
• Configuration 156
• Configure rapid spanning tree protocol 156
• Label description 156
• Spanning tree protocol screen 156
• The following table describes the labels in this screen 156
• Xgs4700 48f user s guide 156
• 2 hello time 1 157
• Chapter 13 spanning tree protocol 157
• Configuration screen to enable rstp on the switch 157
• Label description 157
• Note changes in this row are copied to all the ports as soon as you make them 157
• The following table describes the labels in this screen 157
• Xgs4700 48f user s guide 157
• Chapter 13 spanning tree protocol 158
• Label description 158
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 158
• Rapid spanning tree protocol status 158
• Rstp continued 158
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 149 for more information on rstp 158
• Xgs4700 48f user s guide 158
• Chapter 13 spanning tree protocol 159
• Label description 159
• Note the listening state does not exist in rstp 159
• Note this screen is only available after you activate rstp on the switch 159
• Status rstp 159
• The following table describes the labels in this screen 159
• Xgs4700 48f user s guide 159
• Configuration screen to enable mrstp on the switch 160
• Configure multiple rapid spanning tree protocol 160
• 2 hello time 1 161
• Chapter 13 spanning tree protocol 161
• Label description 161
• Mrstp continued 161
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 161
• Note changes in this row are copied to all the ports as soon as you make them 161
• Xgs4700 48f user s guide 161
• Chapter 13 spanning tree protocol 162
• Label description 162
• Mrstp continued 162
• Multiple rapid spanning tree protocol status 162
• Note this screen is only available after you activate mrstp on the switch 162
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 149 for more information on mrstp 162
• Status mrstp 162
• Xgs4700 48f user s guide 162
• Chapter 13 spanning tree protocol 163
• Label description 163
• Note the listening state does not exist in rstp 163
• Status mrstp 163
• The following table describes the labels in this screen 163
• Xgs4700 48f user s guide 163
• Configure multiple spanning tree protocol 164
• 2 hello time 1 165
• Chapter 13 spanning tree protocol 165
• Configuration screen to enable mstp on the switch 165
• Label description 165
• The following table describes the labels in this screen 165
• Xgs4700 48f user s guide 165
• Chapter 13 spanning tree protocol 166
• Label description 166
• Mstp continued 166
• Note changes in this row are copied to all the ports as soon as you make them 166
• Xgs4700 48f user s guide 166
• Chapter 13 spanning tree protocol 167
• Label description 167
• Mstp continued 167
• Mstp screen 167
• Multiple spanning tree protocol port configuration 167
• Note changes in this row are copied to all the ports as soon as you make them 167
• The following table describes the labels in this screen 167
• Xgs4700 48f user s guide 167
• Chapter 13 spanning tree protocol 168
• Label description 168
• Multiple spanning tree protocol status 168
• Note an edge port becomes a non edge port as soon as it receives a bridge protocol data unit bpdu 168
• Note this screen is only available after you activate mstp on the switch 168
• Spanning tree protocol in the navigation panel to display the status screen as shown next see section 13 on page 152 for more information on mstp 168
• Status mstp 168
• Xgs4700 48f user s guide 168
• Chapter 13 spanning tree protocol 169
• Label description 169
• Status mstp 169
• The following table describes the labels in this screen 169
• Xgs4700 48f user s guide 169
• Chapter 13 spanning tree protocol 170
• Label description 170
• Status mstp 170
• Xgs4700 48f user s guide 170
• Bandwidth control 171
• Bandwidth control overview 171
• Cir and pir 171
• Hapter 171
• Bandwidth control 172
• Bandwidth control in the navigation panel to bring up the screen as shown next 172
• Bandwidth control setup 172
• Chapter 14 bandwidth control 172
• Label description 172
• Note changes in this row are copied to all the ports as soon as you make them 172
• The following table describes the related labels in this screen 172
• Xgs4700 48f user s guide 172
• Bandwidth control continued 173
• Chapter 14 bandwidth control 173
• Label description 173
• Xgs4700 48f user s guide 173
• Broadcast storm control 175
• Broadcast storm control setup 175
• Hapter 175
• Broadcast storm control 176
• Chapter 15 broadcast storm control 176
• Label description 176
• Note changes in this row are copied to all the ports as soon as you make them 176
• The following table describes the labels in this screen 176
• Xgs4700 48f user s guide 176
• Hapter 177
• Mirroring 177
• Port mirroring setup 177
• Chapter 16 mirroring 178
• Label description 178
• Mirroring 178
• Note changes in this row are copied to all the ports as soon as you make them 178
• The following table describes the labels in this screen 178
• Xgs4700 48f user s guide 178
• Dynamic link aggregation 179
• Hapter 179
• Link aggregation 179
• Link aggregation overview 179
• Link aggregation id 180
• Table 39 link aggregation id local switch 180
• Table 40 link aggregation id peer switch 180
• Chapter 17 link aggregation 181
• Label description 181
• Link aggregation in the navigation panel the link aggregation status screen displays by default see section 17 on page 179 for more information 181
• Link aggregation status 181
• The following table describes the labels in this screen 181
• Xgs4700 48f user s guide 181
• Chapter 17 link aggregation 182
• Label description 182
• Link aggregation status continued 182
• Xgs4700 48f user s guide 182
• Link aggregation setting 183
• Chapter 17 link aggregation 184
• Label description 184
• Link aggregation setting 184
• Note when you enable the port security feature on the switch and configure port security settings for a port you cannot include the port in an active trunk group 184
• Xgs4700 48f user s guide 184
• Link aggregation control protocol 185
• Chapter 17 link aggregation 186
• Label description 186
• Note changes in this row are copied to all the ports as soon as you make them 186
• Note do not configure this screen unless you want to enable dynamic link aggregation 186
• Static trunking example 186
• The following table describes the labels in this screen 186
• This example shows you how to create a static port trunk group for ports 2 5 186
• Xgs4700 48f user s guide 186
• Example 187
• Figure 81 trunking example physical connections 187
• Figure 82 trunking example configuration screen 187
• Hapter 189
• Ieee 802 x authentication 189
• Port authentication 189
• Port authentication overview 189
• Mac authentication 190
• Authentication reply 191
• Authentication request authentication request 191
• Figure 84 mac authentication process 191
• New connection 191
• Port authentication 191
• Port authentication configuration 191
• Session granted denied 191
• Activate ieee 802 x security 192
• Chapter 18 port authentication 192
• Label description 192
• Note changes in this row are copied to all the ports as soon as you make them 192
• Note you must first enable 802 x authentication on the switch before configuring it on each port 192
• The following table describes the labels in this screen 192
• Use this screen to activate ieee 802 x security in the port authentication screen click 802 x to display the configuration screen as shown 192
• Xgs4700 48f user s guide 192
• Chapter 18 port authentication 193
• Guest vlan 193
• Label description 193
• When 802 x port authentication is enabled on the switch and its ports clients that do not have the correct credentials are blocked from using the port s you can configure your switch to have one vlan that acts as a guest vlan if you enable the guest vlan 102 in the example on a port 2 in the example the user a in the example that is not ieee 802 x capable or fails to enter the correct username and password can still access the port but traffic from the user is forwarded to the guest vlan that is unauthenticated users can have access to limited network resources in the same guest vlan such as the internet the 193
• X continued 193
• Xgs4700 48f user s guide 193
• Figure 87 guest vlan example 194
• Guest vlan 194
• Internet 194
• Chapter 18 port authentication 195
• Guest vlan 195
• Label description 195
• Note changes in this row are copied to all the ports as soon as you make them 195
• The following table describes the labels in this screen 195
• Xgs4700 48f user s guide 195
• Activate mac authentication 196
• Chapter 18 port authentication 196
• Label description 196
• Mac authentication 196
• Note you must first enable mac authentication on the switch before configuring it on each port 196
• The following table describes the labels in this screen 196
• Use this screen to activate mac authentication in the port authentication screen click mac authentication to display the configuration screen as shown 196
• Xgs4700 48f user s guide 196
• Chapter 18 port authentication 197
• Label description 197
• Mac authentication 197
• Note changes in this row are copied to all the ports as soon as you make them 197
• Note if the aging time in the switch setup screen is set to a lower value then it supersedes this setting see section 8 on page 111 197
• Xgs4700 48f user s guide 197
• About port security 199
• Hapter 199
• Port security 199
• Chapter 19 port security 200
• Label description 200
• Note changes in this row are copied to all the ports as soon as you make them 200
• Port security 200
• Port security in the navigation panel to display the screen as shown 200
• Port security setup 200
• The following table describes the labels in this screen 200
• Xgs4700 48f user s guide 200
• Chapter 19 port security 201
• Label description 201
• Port security continued 201
• Port security screen to display the screen as shown 201
• Vlan mac address limit 201
• Xgs4700 48f user s guide 201
• Chapter 19 port security 202
• Label description 202
• The following table describes the labels in this screen 202
• Vlan mac address limit 202
• Xgs4700 48f user s guide 202
• About the classifier and qos 203
• Classifier 203
• Hapter 203
• Classifier 204
• Configuring the classifier 204
• Chapter 20 classifier 205
• Classifier continued 205
• Label description 205
• Xgs4700 48f user s guide 205
• Chapter 20 classifier 206
• Classifier continued 206
• Classifier summary table 206
• Label description 206
• Note when two rules conflict with each other a higher layer rule has priority over a lower layer rule 206
• Note you must select either udp or tcp in the ip protocol field before you configure the socket numbers 206
• To view a summary of the classifier configuration scroll down to the summary table at the bottom of the classifier screen to change the settings of a rule click a number in the index field 206
• Viewing and editing classifier configuration 206
• Xgs4700 48f user s guide 206
• Chapter 20 classifier 207
• Ethernet type protocol number 207
• Label description 207
• Port number port name 207
• Some of the most common ip ports are 207
• Table 50 classifier summary table 207
• Table 51 common ethernet types and protocol number 207
• Table 52 common ip ports 207
• The following table describes the labels in this screen 207
• The following table shows some other common ethernet types and the corresponding protocol number 207
• Xgs4700 48f user s guide 207
• Classifier example 208
• Example 208
• Figure 94 classifier example 208
• Diffserv 209
• Dscp and per hop behavior 209
• Hapter 209
• Policy rule 209
• Policy rules overview 209
• Configuring policy rules 210
• Policy rule 211
• Chapter 21 policy rule 212
• Label description 212
• Policy rule continued 212
• Xgs4700 48f user s guide 212
• Chapter 21 policy rule 213
• Label description 213
• Policy rule continued 213
• Policy rule summary table 213
• To view a summary of the classifier configuration scroll down to the summary table at the bottom of the policy screen to change the settings of a rule click a number in the index field 213
• Viewing and editing policy configuration 213
• Xgs4700 48f user s guide 213
• Chapter 21 policy rule 214
• Label description 214
• Table 54 policy summary table 214
• The following table describes the labels in this screen 214
• Xgs4700 48f user s guide 214
• Example 215
• Figure 97 policy example 215
• Policy example 215
• Hapter 217
• Queuing method 217
• Queuing method overview 217
• Strictly priority 217
• Weighted fair queuing 217
• Weighted round robin scheduling wrr 218
• Configuring queuing 219
• Note changes in this row are copied to all the ports as soon as you make them 219
• Queuing method 219
• Chapter 22 queuing method 220
• Label description 220
• Queuing method continued 220
• Xgs4700 48f user s guide 220
• Hapter 221
• Vlan stacking 221
• Vlan stacking example 221
• Vlan stacking overview 221
• Figure 99 vlan stacking example 222
• Note static vlan tx tagging must be disabled on a port where you choose normal or access port 222
• Note static vlan tx tagging must be enabled on a port where you choose tunnel port 222
• Vlan stacking port roles 222
• Frame format 223
• Table 56 vlan tag format 223
• Vlan tag format 223
• Chapter 23 vlan stacking 224
• Configure the fields as highlighted in the switch vlan stacking screen 224
• Configuring vlan stacking 224
• Table 57 single and double tagged 802 1q frame format 224
• Table 58 802 q frame 224
• Vlan stacking 224
• Vlan stacking to display the screen as shown 224
• Xgs4700 48f user s guide 224
• Chapter 23 vlan stacking 225
• Label description 225
• Note changes in this row are copied to all the ports as soon as you make them 225
• Note you can define up to four different tunnel tpids including 8100 in this screen at a time 225
• Port based q in q 225
• Port based q in q lets the switch treat all frames received on the same port as the same vlan flows and add the same outer vlan tag to them even they have different customer vlan ids 225
• The following table describes the labels in this screen 225
• Vlan stacking 225
• Xgs4700 48f user s guide 225
• Chapter 23 vlan stacking 226
• Label description 226
• Port based qinq 226
• Selective q in q 226
• Selective q in q is vlan based it allows the switch to add different outer vlan tags to the incoming frames received on one port according to their inner vlan tags 226
• The following table describes the labels in this screen 226
• Vlan stacking screen to display the screen as shown 226
• Xgs4700 48f user s guide 226
• Chapter 23 vlan stacking 227
• Label description 227
• Note selective q in q rules are only applied to single tagged frames received on the access ports if the incoming frames are untagged or single tagged but received on a tunnel port or cannot match any selective q in q rules the switch applies the port based q in q rules to them 227
• Selective qinq 227
• The following table describes the labels in this screen 227
• Vlan stacking screen to display the screen as shown 227
• Xgs4700 48f user s guide 227
• Chapter 23 vlan stacking 228
• Label description 228
• Selective qinq continued 228
• Xgs4700 48f user s guide 228
• Hapter 229
• Igmp filtering 229
• Ip multicast addresses 229
• Multicast 229
• Multicast overview 229
• Igmp snooping 230
• Igmp snooping and vlans 230
• Multicast 230
• Multicast status 230
• Table 62 multicast status 230
• Multicast setting 231
• Chapter 24 multicast 232
• Label description 232
• Multicast setting continued 232
• Note changes in this row are copied to all the ports as soon as you make them 232
• Note if you enable igmp filtering you must create and assign igmp filtering profiles for the ports that you want to allow to join multicast groups 232
• Xgs4700 48f user s guide 232
• Chapter 24 multicast 233
• Label description 233
• Multicast setting continued 233
• Xgs4700 48f user s guide 233
• Chapter 24 multicast 234
• Igmp snooping vlan 234
• Label description 234
• Multicast in the navigation panel click the multicast setting link and then the igmp snooping vlan link to display the screen as shown see section 24 on page 230 for more information on igmp snooping vlan 234
• Note you must also enable igmp snooping in the multicast setting screen first 234
• The following table describes the labels in this screen 234
• Xgs4700 48f user s guide 234
• An igmp filtering profile specifies a range of multicast groups that clients connected to the switch are able to join a profile contains a range of multicast ip addresses which you want clients to be able to join profiles are assigned to ports in the multicast setting screen clients connected to those ports are then able to join the multicast groups specified in the profile each port can be assigned a single profile a profile can be assigned to multiple ports 235
• Chapter 24 multicast 235
• Igmp filtering profile 235
• Igmp snooping vlan continued 235
• Label description 235
• Note you cannot configure the same vlan id as in the mvr screen 235
• Xgs4700 48f user s guide 235
• Chapter 24 multicast 236
• Igmp filtering profile 236
• Igmp filtering profile link to display the screen as shown 236
• Label description 236
• The following table describes the labels in this screen 236
• Xgs4700 48f user s guide 236
• Figure 107 mvr network example 237
• Igmp filtering profile continued 237
• Mvr overview 237
• Types of mvr ports 237
• Figure 108 mvr multicast television example 238
• How mvr works 238
• Mvr modes 238
• General mvr configuration 239
• Note you can create up to five multicast vlans and up to 256 multicast rules on the switch 239
• Note your switch automatically creates a static vlan with the same vid when you create a multicast vlan in this screen 239
• Chapter 24 multicast 240
• Label description 240
• Mvr continued 240
• Note changes in this row are copied to all the ports as soon as you make them 240
• Xgs4700 48f user s guide 240
• All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group 241
• Chapter 24 multicast 241
• Configure mvr ip multicast group address es in the group configuration screen click group configuration in the mvr screen 241
• Label description 241
• Mvr group configuration 241
• Note a port can belong to more than one multicast vlan however ip multicast group addresses in different multicast vlans cannot overlap 241
• The following table describes the labels in this screen 241
• Xgs4700 48f user s guide 241
• Chapter 24 multicast 242
• Figure 111 mvr configuration example 242
• Label description 242
• Multicast vid 200 vlan 1 242
• Mvr configuration example 242
• Mvr group configuration 242
• The following figure shows a network example where ports 1 2 and 3 on the switch belong to vlan 1 in addition port 7 belongs to the multicast group with vid 200 to receive multicast traffic the news and movie channels from the remote streaming media server s computers a b and c in vlan 1 are able to receive the traffic 242
• Xgs4700 48f user s guide 242
• Example 243
• Figure 112 mvr configuration example 243
• Example 244
• Figure 113 mvr group configuration example 244
• Figure 114 mvr group configuration example 244
• Authentication authorization and accounting aaa 245
• Hapter 245
• Aaa screens 246
• Client aaa server 246
• Figure 115 aaa server 246
• Local user accounts 246
• Radius and tacacs 246
• Table 68 radius vs tacacs 246
• Radius server setup 247
• Chapter 25 aaa 248
• Label description 248
• Radius server setup 248
• The following table describes the labels in this screen 248
• Xgs4700 48f user s guide 248
• Chapter 25 aaa 249
• Label description 249
• Radius server setup continued 249
• Tacacs server setup 249
• Use this screen to configure your tacacs server settings see section 25 on page 246 for more information on tacacs servers click on the tacacs server setup link in the authentication and accounting screen to view the screen as shown 249
• Xgs4700 48f user s guide 249
• Chapter 25 aaa 250
• Label description 250
• Tacacs server setup 250
• The following table describes the labels in this screen 250
• Xgs4700 48f user s guide 250
• Aaa setup 251
• Chapter 25 aaa 251
• Label description 251
• Tacacs server setup continued 251
• Use this screen to configure authentication authorization and accounting settings on the switch click on the aaa setup link in the aaa screen to view the screen as shown 251
• Xgs4700 48f user s guide 251
• Aaa setup 252
• Chapter 25 aaa 252
• Label description 252
• The following table describes the labels in this screen 252
• Xgs4700 48f user s guide 252
• Aaa setup continued 253
• Chapter 25 aaa 253
• Label description 253
• Xgs4700 48f user s guide 253
• Aaa setup continued 254
• Note refer to the documentation that comes with your radius server on how to configure vsas for users authenticating via the radius server 254
• Table 72 supported vsas 254
• Vendor specific attribute 254
• Chapter 25 aaa 255
• Function attribute 255
• Note if you set the privilege level of a login account differently on the radius server s and the switch the user is assigned a privilege level from the database radius or local the switch uses first for user authentication 255
• Note the bolded values in this table are fixed values as defined in rfc 3580 255
• Note you must also create a vlan with the specified vid on the switch 255
• Table 72 supported vsas 255
• Table 73 supported tunnel protocol attribute 255
• Tunnel protocol attribute 255
• Xgs4700 48f user s guide 255
• You can configure tunnel protocol attributes on the radius server refer to your radius server documentation to assign a port on the switch to a vlan based on ieee 802 x authentication the port vlan settings are fixed and untagged this will also set the port s vid the following table describes the values you need to configure note that these attributes only work when you enable authorization see section 25 on page 251 255
• Attributes used by the ieee 802 x authentication 256
• Attributes used for authenticating privilege access 256
• Attributes used for authentication 256
• Attributes used to login users 256
• Supported radius attributes 256
• Attributes used for accounting 257
• Attributes used for accounting exec events 257
• Attributes used for accounting system events 257
• Table 74 radius attributes exec events via console 257
• Attributes used for accounting ieee 802 x events 258
• Table 75 radius attributes exec events via telnet ssh 258
• Table 76 radius attributes exec events via console 258
• Table 76 radius attributes exec events via console 259
• Hapter 261
• Ip source guard 261
• Ip source guard overview 261
• Dhcp snooping database 262
• Dhcp snooping overview 262
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 262
• Trusted vs untrusted ports 262
• Configuring dhcp snooping 263
• Dhcp relay option 82 information 263
• Figure 120 dhcp snooping database file format 263
• Arp inspection and mac address filters 264
• Arp inspection overview 264
• Figure 121 example man in the middle attack 264
• Configuring arp inspection 265
• Ip source guard 265
• Note it is recommended you enable dhcp snooping at least one day before you enable arp inspection so that the switch has enough time to build the binding table 265
• Syslog 265
• Trusted vs untrusted ports 265
• Chapter 26 ip source guard 266
• Figure 122 ip source guard 266
• Ip source guard 266
• Ip source guard static binding 266
• Label description 266
• Table 77 ip source guard 266
• The following table describes the labels in this screen 266
• Use this screen to manage static bindings for dhcp snooping and arp inspection static bindings are uniquely identified by the mac address and vlan id each mac address and vlan id can only be in one static binding if you try to create a static binding with the same mac address and vlan id as an existing static binding the 266
• Xgs4700 48f user s guide 266
• Chapter 26 ip source guard 267
• Figure 123 ip source guard static binding 267
• Label description 267
• Static binding 267
• Table 78 ip source guard static binding 267
• The following table describes the labels in this screen 267
• Xgs4700 48f user s guide 267
• Dhcp snooping 268
• Figure 124 dhcp snooping 268
• Table 78 ip source guard static binding continued 268
• Chapter 26 ip source guard 269
• Label description 269
• Table 79 dhcp snooping 269
• The following table describes the labels in this screen 269
• Xgs4700 48f user s guide 269
• Chapter 26 ip source guard 270
• Label description 270
• Table 79 dhcp snooping continued 270
• Xgs4700 48f user s guide 270
• Dhcp snooping configure 271
• Figure 125 dhcp snooping configure 271
• Table 79 dhcp snooping continued 271
• Chapter 26 ip source guard 272
• Label description 272
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 272
• Note you have to enable dhcp snooping on the dhcp vlan too 272
• Table 80 dhcp snooping configure 272
• The following table describes the labels in this screen 272
• Xgs4700 48f user s guide 272
• Dhcp snooping port configure 273
• Figure 126 dhcp snooping port configure 273
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 273
• Chapter 26 ip source guard 274
• Dhcp snooping vlan configure 274
• Label description 274
• Table 81 dhcp snooping port configure 274
• The following table describes the labels in this screen 274
• Use this screen to enable dhcp snooping on each vlan and to specify whether or not the switch adds dhcp relay agent option 82 information chapter 40 on page 359 to dhcp requests that the switch relays to a dhcp server for each vlan to 274
• Xgs4700 48f user s guide 274
• Chapter 26 ip source guard 275
• Figure 127 dhcp snooping vlan configure 275
• Label description 275
• Note the switch will drop all dhcp requests if you enable dhcp snooping and there are no trusted ports 275
• Table 82 dhcp snooping vlan configure 275
• The following table describes the labels in this screen 275
• Xgs4700 48f user s guide 275
• Arp inspection 276
• Arp inspection status 276
• Chapter 26 ip source guard 276
• Figure 128 arp inspection status 276
• Label description 276
• Table 83 arp inspection status 276
• The following table describes the labels in this screen 276
• Xgs4700 48f user s guide 276
• Arp inspection vlan status 277
• Chapter 26 ip source guard 277
• Figure 129 arp inspection vlan status 277
• Label description 277
• Table 84 arp inspection vlan status 277
• The following table describes the labels in this screen 277
• Vlan status 277
• Xgs4700 48f user s guide 277
• Arp inspection log status 278
• Chapter 26 ip source guard 278
• Figure 130 arp inspection log status 278
• Label description 278
• Log status 278
• Table 85 arp inspection log status 278
• The following table describes the labels in this screen 278
• Xgs4700 48f user s guide 278
• Arp inspection configure 279
• Chapter 26 ip source guard 279
• Configure 279
• Figure 131 arp inspection configure 279
• Label description 279
• Table 85 arp inspection log status continued 279
• Xgs4700 48f user s guide 279
• Chapter 26 ip source guard 280
• Label description 280
• Table 86 arp inspection configure 280
• The following table describes the labels in this screen 280
• Xgs4700 48f user s guide 280
• Arp inspection port configure 281
• Chapter 26 ip source guard 281
• Figure 132 arp inspection port configure 281
• Label description 281
• Table 87 arp inspection port configure 281
• The following table describes the labels in this screen 281
• Xgs4700 48f user s guide 281
• Arp inspection vlan configure 282
• Chapter 26 ip source guard 282
• Figure 133 arp inspection vlan configure 282
• Label description 282
• Table 87 arp inspection port configure continued 282
• Table 88 arp inspection vlan configure 282
• The following table describes the labels in this screen 282
• Xgs4700 48f user s guide 282
• Chapter 26 ip source guard 283
• Label description 283
• Table 88 arp inspection vlan configure continued 283
• Xgs4700 48f user s guide 283
• Hapter 285
• Loop guard 285
• Loop guard overview 285
• Figure 135 switch in loop state 286
• Figure 136 loop guard probe packet 286
• Loop guard setup 287
• Chapter 27 loop guard 288
• Label description 288
• Loop guard 288
• Note changes in this row are copied to all the ports as soon as you make them 288
• The following table describes the labels in this screen 288
• Xgs4700 48f user s guide 288
• Hapter 289
• Vlan mapping 289
• Vlan mapping example 289
• Vlan mapping overview 289
• Chapter 28 vlan mapping 290
• Click advanced application and then vlan mapping in the navigation panel to display the screen as shown 290
• Enabling vlan mapping 290
• Figure 140 vlan mapping 290
• Label description 290
• Table 90 vlan mapping 290
• The following table describes the labels in this screen 290
• Xgs4700 48f user s guide 290
• Chapter 28 vlan mapping 291
• Click the vlan mapping configure link in the vlan mapping screen to display the screen as shown use this screen to enable and edit the vlan mapping rule s 291
• Configuring vlan mapping 291
• Figure 141 vlan mapping configuration 291
• Label description 291
• Table 91 vlan mapping configuration 291
• The following table describes the labels in this screen 291
• Xgs4700 48f user s guide 291
• Chapter 28 vlan mapping 292
• Label description 292
• Table 91 vlan mapping configuration continued 292
• Xgs4700 48f user s guide 292
• Hapter 293
• Layer 2 protocol tunneling 293
• Layer 2 protocol tunneling overview 293
• Figure 143 l2pt network example 294
• Layer 2 protocol tunneling mode 294
• Configuring layer 2 protocol tunneling 295
• Layer 2 protocol tunneling 295
• Note all the edge switches in the service provider s network should be set to use the same mac address for encapsulation 295
• Note the mac address can be either a unicast mac address or multicast mac address if you use a unicast mac address make sure the mac address does not exist in the address table of a switch on the service provider s network 295
• Chapter 29 layer 2 protocol tunneling 296
• Label description 296
• Layer 2 protocol tunneling continued 296
• Note changes in this row are copied to all the ports as soon as you make them 296
• Note you can enable l2pt services for stp lacp vtp cdp udld and pagp on the access port s only 296
• Xgs4700 48f user s guide 296
• Hapter 297
• Sflow overview 297
• Chapter 30 sflow 298
• Label description 298
• Note changes in this row are copied to all the ports as soon as you make them 298
• Sflow in the navigation panel to display the screen as shown 298
• Sflow port configuration 298
• The following table describes the labels in this screen 298
• Xgs4700 48f user s guide 298
• Chapter 30 sflow 299
• Click the collector link in the sflow screen to display the screen as shown you can configure up to four sflow collectors in this screen you may want to configure 299
• Collector screen the sflow collector does not need to be in the same subnet as the switch but it must be accessible from the switch 299
• Label description 299
• Note configure udp port 6343 the default on a nat router to allow port forwarding if the collector is behind a nat router configure a firewall rule for udp port 6343 the default to allow incoming traffic if the collector is behind a firewall 299
• Sflow collector configuration 299
• Sflow continued 299
• Xgs4700 48f user s guide 299
• Chapter 30 sflow 300
• Collector 300
• Label description 300
• More than one collector if the traffic load to be monitored is more than one collector can manage 300
• The following table describes the labels in this screen 300
• Xgs4700 48f user s guide 300
• Hapter 301
• Pppoe intermediate agent overview 301
• Pppoe intermediate agent tag format 301
• Flexible circuit id syntax with identifier string and variables 302
• Sub option format 302
• Table 96 pppoe ia circuit id sub option format user defined string 302
• Table 97 pppoe ia remote id sub option format 302
• Table 98 pppoe ia circuit id sub option format using identifier string and variables 302
• Chapter 31 pppoe 303
• Every port is either a trusted port or an untrusted port for the pppoe intermediate agent this setting is independent of the trusted untrusted setting for dhcp snooping or arp inspection you can also specify the agent sub options circuit id and remote id that the switch adds to padi and padr packets from pppoe clients 303
• If a padi or padr packet is sent from a pppoe client but received on a trusted port the switch forwards it to other trusted port s 303
• If a padi padr or padt packet is sent from a pppoe client and received on an untrusted port the switch adds a vendor specific tag to the packet and then forwards it to the trusted port s 303
• If a pado pppoe active discovery offer pads pppoe active discovery session confirmation or padt pppoe active discovery terminate packet is sent from a pppoe server and received on a trusted port the switch forwards it to all other ports 303
• Intermediate agent screen the switch automatically generates a circuit id string according to the default circuit id syntax which is defined in the dsl forum working text wt 101 the default access node identifier is the host name of the pppoe intermediate agent and the eth indicates ethernet 303
• Note the switch will drop all pppoe discovery packets if you enable the pppoe intermediate agent and there are no trusted ports 303
• Port state 303
• Table 99 pppoe ia circuit id sub option format defined in wt 101 303
• The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 303
• Trusted ports are connected to pppoe servers 303
• Untrusted ports are connected to subscribers 303
• Wt 101 default circuit id syntax 303
• Xgs4700 48f user s guide 303
• Intermediate agent 304
• Pppoe intermediate agent 304
• The pppoe screen 304
• Chapter 31 pppoe 305
• Intermediate agent 305
• Label description 305
• Pppoe ia per port 305
• The following table describes the labels in this screen 305
• Use this screen to specify whether individual ports are trusted or untrusted ports and have the switch add extra information to pppoe discovery packets from pppoe clients on a per port basis 305
• Xgs4700 48f user s guide 305
• Note changes in this row are copied to all the ports as soon as you make them 306
• Note the switch will drop all pppoe packets if you enable the pppoe intermediate agent on the switch and there are no trusted ports 306
• Chapter 31 pppoe 307
• Label description 307
• Port continued 307
• Pppoe ia per port per vlan 307
• Use this screen to configure pppoe ia settings that apply to a specific vlan on a port 307
• Xgs4700 48f user s guide 307
• Chapter 31 pppoe 308
• Label description 308
• Note changes in this row are copied to all the vlans as soon as you make them 308
• Port screen to display the screen as shown 308
• The following table describes the labels in this screen 308
• Xgs4700 48f user s guide 308
• Chapter 31 pppoe 309
• Click the vlan link in the intermediate agent screen to display the screen as shown 309
• Label description 309
• Pppoe ia for vlan 309
• Use this screen to set whether the pppoe intermediate agent is enabled on a vlan and whether the switch appends the circuit id and or remote id to pppoe discovery packets from a specific vlan 309
• Xgs4700 48f user s guide 309
• Chapter 31 pppoe 310
• Label description 310
• Note changes in this row are copied to all the vlans as soon as you make them 310
• The following table describes the labels in this screen 310
• Xgs4700 48f user s guide 310
• Cpu protection overview 311
• Error disable 311
• Error disable recovery overview 311
• Hapter 311
• Cpu protection 312
• Cpu protection configuration 312
• Errdisable 312
• Errdisable detect screen 312
• The error disable screen 312
• Chapter 32 error disable 313
• Cpu protection 313
• Errdisable detect 313
• Errdisable screen to display the screen as shown 313
• Error disable detect configuration 313
• Label description 313
• Note changes in this row are copied to all the ports as soon as you make them 313
• The following table describes the labels in this screen 313
• Xgs4700 48f user s guide 313
• Chapter 32 error disable 314
• Errdisable detect 314
• Label description 314
• Note changes in this row are copied to all the entries as soon as you make them 314
• The following table describes the labels in this screen 314
• Xgs4700 48f user s guide 314
• Chapter 32 error disable 315
• Errdisable recovery 315
• Errdisable screen to display the screen as shown 315
• Error disable recovery configuration 315
• Label description 315
• Note changes in this row are copied to all the entries as soon as you make them 315
• The following table describes the labels in this screen 315
• Xgs4700 48f user s guide 315
• Hapter 317
• Static route 317
• Static routing overview 317
• Chapter 33 static route 318
• Configuring static routing 318
• Label description 318
• Static routing 318
• Static routing in the navigation panel to display the screen as shown 318
• The following table describes the related labels you use to create a static route 318
• Xgs4700 48f user s guide 318
• Chapter 33 static route 319
• Label description 319
• Static routing continued 319
• Xgs4700 48f user s guide 319
• Benefits 321
• Hapter 321
• Policy route overview 321
• Policy routing 321
• Chapter 34 policy routing 322
• Configuring policy routing profile 322
• Label description 322
• Policy routing 322
• Policy routing in the navigation panel to display the screen as shown use this screen to configure a policy routing profile which can consist of multiple policy routing rules 322
• The following table describes the labels in this screen 322
• Xgs4700 48f user s guide 322
• Policy routing rule configuration 323
• Rule configuration 323
• Chapter 34 policy routing 324
• Label description 324
• Rule configuration 324
• The following table describes the labels in this screen 324
• Xgs4700 48f user s guide 324
• Administrative distance 325
• Hapter 325
• Rip overview 325
• Configuring rip 326
• Note you cannot set two routing protocols to have the same administrative distance 326
• Table 110 default distance value 326
• Chapter 35 rip 327
• Label description 327
• Rip continued 327
• Xgs4700 48f user s guide 327
• Hapter 329
• Ospf autonomous systems and areas 329
• Ospf overview 329
• Figure 162 ospf network example 330
• How ospf works 330
• Interfaces and virtual links 330
• Table 113 ospf router types 330
• Configuring ospf 331
• Figure 163 ospf router election example 331
• Ospf and router elections 331
• Ospf status 332
• Chapter 36 ospf 333
• Field description 333
• Label description 333
• Ospf status continued 333
• Table 115 ospf status common output fields 333
• The following table describes some common output fields 333
• Xgs4700 48f user s guide 333
• Ospf configuration 334
• Ospf configuration activating and general settings 334
• Table 115 ospf status common output fields continued 334
• Chapter 36 ospf 335
• Configure ospf areas 335
• Label description 335
• Md5 authenticate link state updates using a 16 printable ascii character password 335
• None no authentication is used 335
• Note you cannot set two routing protocols to have the same administrative distance 335
• Ospf configuration activating and general settings 335
• Simple authenticate link state updates using an 8 printable ascii character password 335
• To ensure that the switch receives only routing information from a trusted layer 3 devices activate authentication the ospf supports three levels of authentication 335
• Xgs4700 48f user s guide 335
• Chapter 36 ospf 336
• Label description 336
• Ospf configuration area setup 336
• The following table describes the related labels in this screen 336
• To configure an area set the related fields in the ospf configuration screen 336
• Xgs4700 48f user s guide 336
• Chapter 36 ospf 337
• Configuring ospf redistribution 337
• Label description 337
• Ospf configuration area setup continued 337
• Ospf configuration summary table 337
• The bottom of the ospf configuration screen displays a summary table of all the ospf areas you have configured 337
• The following table describes the related labels in this screen 337
• Use this screen to configure route redistribution and summary addresses route redistribution is used when other routers which use rip routing protocol and or static routes need to exchange routing information with the switch using ospf routing protocol a summary address is used to cover more than one routing entries in order to reduce the routing table size 337
• View ospf area information table 337
• Xgs4700 48f user s guide 337
• Chapter 36 ospf 338
• In the ospf configuration screen click redistribute to display the ospf redistribution screen 338
• Label description 338
• Redistribute 338
• The following table describes the labels in this screen 338
• Xgs4700 48f user s guide 338
• Chapter 36 ospf 339
• Configuring ospf interfaces 339
• In the ospf configuration screen click interface to display the ospf interface screen 339
• Label description 339
• Ospf interface 339
• Redistribute continued 339
• To configure an ospf interface first create an ip routing domain in the ip setup screen see section 8 on page 113 for more information once you create an ip routing domain an ospf interface entry is automatically created see section 36 on page 329 for more information on ospf 339
• Xgs4700 48f user s guide 339
• Chapter 36 ospf 340
• Label description 340
• Note ospf interface s must use the same authentication method within the same area 340
• Ospf interface 340
• The following table describes the labels in this screen 340
• Xgs4700 48f user s guide 340
• Chapter 36 ospf 341
• Configure and view virtual link settings in this screen see section 36 on page 329 for more information on ospf 341
• In the ospf configuration screen click virtual link to display the screen as shown next 341
• Label description 341
• Ospf interface continued 341
• Ospf virtual link 341
• Ospf virtual links 341
• The following table describes the related labels in this screen 341
• Xgs4700 48f user s guide 341
• Chapter 36 ospf 342
• Label description 342
• Note virtual interface s must use the same authentication method within the same area 342
• Ospf virtual link continued 342
• Xgs4700 48f user s guide 342
• Hapter 343
• Igmp overview 343
• Figure 172 igmp version 1 example 344
• How igmp works 344
• Figure 173 igmp version 2 example 345
• Figure 174 igmp version 3 example 345
• Port based igmp 345
• Chapter 37 igmp 346
• Configuring igmp 346
• Igmp in the navigation panel to display the screen as shown next each entry in the table is automatically created when you configure a new ip domain in the ip setup screen refer to section 8 on page 113 346
• Label description 346
• Note you cannot enable both igmp snooping and igmp at the same time refer to section 24 on page 234 for more information on igmp snooping 346
• The following table describes the labels in this screen 346
• Xgs4700 48f user s guide 346
• Dvmrp overview 347
• Hapter 347
• How dvmrp works 347
• Configuring dvmrp 348
• Dvmrp terminology 348
• Figure 176 how dvmrp works 348
• Chapter 38 dvmrp 349
• Dvmrp configuration error messages 349
• Figure 178 dvmrp igmp not set error 349
• Figure 179 dvmrp unable to disable igmp error 349
• Label description 349
• The following table describes the labels in this screen 349
• When you disable igmp but dvmrp is still active you also see another warning screen 349
• Xgs4700 48f user s guide 349
• You must have igmp enabled when you enable dvmrp otherwise you see the screen as in the next figure 349
• Chapter 38 dvmrp 350
• Default dvmrp timer values 350
• Dvmrp field default value 350
• Each ip routing domain dvmrp configuration must be in a different vlan group otherwise you see the following screen 350
• Figure 180 dvmrp duplicate vid error message 350
• Table 124 dvmrp default timer values 350
• The following are some default dvmrp timer values 350
• Xgs4700 48f user s guide 350
• Differentiated services 351
• Diffserv overview 351
• Dscp and per hop behavior 351
• Hapter 351
• Diffserv network example 352
• Figure 182 diffserv network 352
• Two rate three color marker traffic policing 352
• Figure 183 trtcm color blind mode 353
• Trtcm color aware mode 353
• Trtcm color blind mode 353
• Activating diffserv 354
• Diffserv 354
• Figure 184 trtcm color aware mode 354
• Chapter 39 differentiated services 355
• Configuring 2 rate 3 color marker settings 355
• Diffserv 355
• Label description 355
• Note changes in this row are copied to all the ports as soon as you make them 355
• The following table describes the labels in this screen 355
• Use this screen to configure trtcm settings click the 2 rate 3 color marker link in the diffserv screen to display the screen as shown next 355
• Xgs4700 48f user s guide 355
• Chapter 39 differentiated services 356
• Label description 356
• Note changes in this row are copied to all the ports as soon as you make them 356
• Note you cannot enable both trtcm and bandwidth control at the same time 356
• Note you must also activate diffserv on the switch and the individual ports for the switch to drop red high loss priority colored packets 356
• Rate 3 color marker 356
• The following table describes the labels in this screen 356
• Xgs4700 48f user s guide 356
• Dscp to ieee 802 p priority settings 357
• Rate 3 color marker continued 357
• Table 127 default dscp ieee 802 p mapping 357
• Chapter 39 differentiated services 358
• Configuring dscp settings 358
• Dscp setting 358
• Label description 358
• The following table describes the labels in this screen 358
• To change the dscp ieee 802 p mapping click the dscp setting link in the diffserv screen to display the screen as shown next 358
• Xgs4700 48f user s guide 358
• Dhcp configuration options 359
• Dhcp modes 359
• Dhcp overview 359
• Hapter 359
• Chapter 40 dhcp 360
• Dhcp in the navigation panel and then click an existing index number of a dhcp server configuration to view the screen as shown use 360
• Dhcp in the navigation panel the dhcp status screen displays 360
• Dhcp server status detail 360
• Dhcp status 360
• Label description 360
• The following table describes the labels in this screen 360
• Vlan the switch is configured on a vlan by vlan basis the switch can be configured as a dhcp server for one vlan and at the same time the switch can be configured to relay dhcp requests for clients in another vlan 360
• Xgs4700 48f user s guide 360
• Chapter 40 dhcp 361
• Dhcp server status detail 361
• Label description 361
• The following table describes the labels in this screen 361
• This screen to view details regarding dhcp server settings configured on the switch 361
• Xgs4700 48f user s guide 361
• Dhcp relay 362
• Dhcp relay agent information 362
• Table 131 relay agent information 362
• Chapter 40 dhcp 363
• Configuring dhcp global relay 363
• Dhcp in the navigation panel and click the global link to display the screen as shown 363
• Global 363
• Label description 363
• The following table describes the labels in this screen 363
• Xgs4700 48f user s guide 363
• Example 364
• Figure 191 global dhcp relay network example 364
• Figure 192 dhcp relay configuration example 364
• Global dhcp relay configuration example 364
• Configuring dhcp vlan settings 365
• Note you must set up a management ip address for each vlan that you want to configure dhcp settings for on the switch see section 8 on page 113 for information on how to do this 365
• Chapter 40 dhcp 366
• Label description 366
• Vlan continued 366
• Xgs4700 48f user s guide 366
• Example dhcp relay for two vlans 367
• Figure 194 dhcp relay for two vlans 367
• Example 368
• Figure 195 dhcp relay for two vlans configuration example 368
• Hapter 369
• Vrrp overview 369
• Figure 196 vrrp example 1 370
• Vrrp status 370
• Before configuring vrrp first create an ip interface or routing domain in the ip setup screen see the section 8 on page 113 for more information 371
• Chapter 41 vrrp 371
• Click ip application vrrp and click the configuration link to display the vrrp configuration screen as shown next 371
• Ip interface setup 371
• Label description 371
• Note you can only configure vrrp on interfaces with unique vlan ids 371
• The following sections describe the different parts of the vrrp configuration screen 371
• Vrrp configuration 371
• Vrrp status continued 371
• Xgs4700 48f user s guide 371
• Chapter 41 vrrp 372
• Ip interface 372
• Label description 372
• Note routing domains with the same vlan id are not displayed in the table indicated 372
• The following table describes the labels in this screen 372
• Xgs4700 48f user s guide 372
• Advertisement interval 373
• Note all routers participating in the virtual router must use the same advertisement interval 373
• Preempt mode 373
• Priority 373
• Vrrp parameters 373
• After you set up an ip interface configure the vrrp parameters in the vrrp configuration screen 374
• Chapter 41 vrrp 374
• Configuring vrrp parameters 374
• Label description 374
• The following table describes the labels in this screen 374
• Vrrp parameters 374
• Xgs4700 48f user s guide 374
• Chapter 41 vrrp 375
• Configuring vrrp parameters 375
• Figure 200 vrrp configuration summary 375
• Label description 375
• Table 137 vrrp configuring vrrp parameters 375
• The following sections show two vrrp configuration examples on the switch 375
• The following table describes the labels in this screen 375
• View the vrrp configuration summary at the bottom of the screen 375
• Vrrp configuration examples 375
• Vrrp parameters continued 375
• Xgs4700 48f user s guide 375
• Example 376
• Figure 201 vrrp configuration example one virtual router network 376
• Figure 202 vrrp example 1 vrrp parameter settings on switch a 376
• Figure 203 vrrp example 1 vrrp parameter settings on switch b 376
• One subnet network example 376
• Example 377
• Figure 204 vrrp example 1 vrrp status on switch a 377
• Figure 205 vrrp example 1 vrrp status on switch b 377
• Figure 206 vrrp configuration example two virtual router network 377
• Two subnets example 377
• Example 378
• Figure 207 vrrp example 2 vrrp parameter settings for vr2 on switch a 378
• Figure 208 vrrp example 2 vrrp parameter settings for vr2 on switch b 378
• Figure 209 vrrp example 2 vrrp status on switch a 378
• Figure 210 vrrp example 2 vrrp status on switch b 378
• Arp learning 379
• Arp learning mode 379
• Arp overview 379
• Hapter 379
• How arp works 379
• Arp reply 380
• Gratuitous arp 380
• Arp request 381
• Arp learning 382
• Arp learning in the navigation panel to display the screen as shown next 382
• Chapter 42 arp learning 382
• Configuring arp learning 382
• Label description 382
• Note changes in this row are copied to all the ports as soon as you make them 382
• The following table describes the labels in this screen 382
• Xgs4700 48f user s guide 382
• Arp learning continued 383
• Chapter 42 arp learning 383
• Label description 383
• Xgs4700 48f user s guide 383
• Configuring load sharing 385
• Hapter 385
• Load sharing 385
• Load sharing overview 385
• Chapter 43 load sharing 386
• Label description 386
• Load sharing 386
• The following table describes the labels in this screen 386
• Xgs4700 48f user s guide 386
• Hapter 387
• Maintenance 387
• The maintenance screen 387
• Figure 214 load factory default start 388
• Load factory default 388
• Maintenance continued 388
• Note make sure to click the save button in any screen to save your settings to the current configuration on the switch 388
• Save configuration 388
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 389
• Figure 215 reboot system confirmation 389
• Firmware upgrade 389
• Note clicking the apply or add button does not save the changes permanently all unsaved changes are erased after you reboot the switch 389
• Reboot system 389
• Firmware upgrade 390
• Restore a configuration file 390
• Restore configuration 390
• Backup a configuration file 391
• Backup configuration 391
• Filename conventions 391
• Ftp command line 391
• Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device 392
• Example ftp commands 392
• Table 141 filename conventions 392
• Ftp command line procedure 393
• Gui based ftp clients 393
• Table 142 general commands for gui based ftp clients 393
• Ftp restrictions 394
• Access control 395
• Access control overview 395
• Hapter 395
• The access control main screen 395
• About snmp 396
• Figure 220 snmp management model 396
• Snmp v3 and security 397
• Supported mibs 397
• Table 144 snmp commands 397
• An oid object id that begins with 1 90 is defined in private mibs otherwise it is a standard mib oid 398
• Chapter 45 access control 398
• Option object label object id description 398
• Snmp traps 398
• Table 145 snmp system traps 398
• The oids beginning with 1 90 54 are specific to the xgs 4700 48f switch 398
• The switch sends traps to an snmp manager when an event occurs the following tables outline the snmp traps by category 398
• Xgs4700 48f user s guide 398
• Chapter 45 access control 399
• Option object label object id description 399
• Table 145 snmp system traps continued 399
• Table 146 snmp interfacetraps 399
• Xgs4700 48f user s guide 399
• Chapter 45 access control 400
• Option object label object id description 400
• Table 146 snmp interfacetraps continued 400
• Table 147 aaa traps 400
• Xgs4700 48f user s guide 400
• Chapter 45 access control 401
• Option object label object id description 401
• Table 147 aaa traps continued 401
• Table 148 snmp ip traps 401
• Table 149 snmp switch traps 401
• Xgs4700 48f user s guide 401
• Chapter 45 access control 402
• Configuring snmp 402
• From the access control screen display the snmp screen you can click access control to go back to the access control screen 402
• Option object label object id description 402
• Table 149 snmp switch traps continued 402
• Xgs4700 48f user s guide 402
• Chapter 45 access control 403
• Label description 403
• Note snmp version 2c is backwards compatible with snmp version 1 403
• The following table describes the labels in this screen 403
• User screen 403
• Xgs4700 48f user s guide 403
• Chapter 45 access control 404
• Configuring snmp trap group 404
• From the snmp screen click trap group to view the screen as shown use the trap group screen to specify the types of snmp traps that should be sent to each snmp manager 404
• Label description 404
• The following table describes the labels in this screen 404
• Trap group 404
• Xgs4700 48f user s guide 404
• Chapter 45 access control 405
• Configuring snmp user 405
• From the snmp screen click user to view the screen as shown use the user screen to create snmp users for authentication with managers using snmp v3 and associate them to snmp groups an snmp user is an snmp manager 405
• Label description 405
• Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 405
• Note use the username and password of the login accounts you specify in this screen to create accounts on the snmp v3 manager 405
• The following table describes the labels in this screen 405
• Xgs4700 48f user s guide 405
• Chapter 45 access control 406
• Label description 406
• User continued 406
• Xgs4700 48f user s guide 406
• Logins 407
• Note it is highly recommended that you change the default administrator password 1234 407
• Setting up login accounts 407
• Chapter 45 access control 408
• Figure 225 ssh communication example 408
• Label description 408
• Logins continued 408
• Ssh overview 408
• Unlike telnet or ftp which transmit data in clear text ssh secure shell is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network 408
• Xgs4700 48f user s guide 408
• Figure 226 how ssh works 409
• How ssh works 409
• Introduction to https 410
• Requirements for using ssh 410
• Ssh implementation on the switch 410
• Figure 227 https implementation 411
• Https example 411
• Internet explorer 6 411
• Internet explorer warning messages 411
• Note if you disable http in the service access control screen then the switch blocks all http connection attempts 411
• Figure 228 security alert dialog box internet explorer 6 412
• Figure 229 security certificate warning internet explorer 7 or 8 412
• Internet explorer 7 or 8 412
• Example 413
• Figure 230 certificate error internet explorer 7 or 8 413
• Figure 231 certificate internet explorer 7 or 8 413
• Figure 232 security alert mozilla firefox 414
• Mozilla firefox warning messages 414
• Example 415
• Figure 233 security alert mozilla firefox 415
• The main screen 415
• Example 416
• Figure 234 example lock denoting a secure connection 416
• Internet explore 416
• Service port access control 416
• Chapter 45 access control 417
• Computer s for each service in the remote management screen discussed later click access control to go back to the main access control screen 417
• From the access control screen display the remote management screen as shown next 417
• Label description 417
• Remote management 417
• Service access control 417
• The following table describes the fields in this screen 417
• Xgs4700 48f user s guide 417
• Chapter 45 access control 418
• Label description 418
• Remote management 418
• The following table describes the labels in this screen 418
• Xgs4700 48f user s guide 418
• You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch click access control to return to the access control screen 418
• Chapter 45 access control 419
• Label description 419
• Remote management continued 419
• Xgs4700 48f user s guide 419
• Diagnostic 421
• Hapter 421
• Chapter 46 diagnostic 422
• Diagnostic continued 422
• Label description 422
• Xgs4700 48f user s guide 422
• Hapter 423
• Syslog 423
• Syslog overview 423
• Chapter 47 syslog 424
• Label description 424
• Syslog 424
• Syslog in the navigation panel to display this screen the syslog feature sends logs to an external syslog server use this screen to configure the device s system logging settings 424
• Syslog setup 424
• The following table describes the labels in this screen 424
• Xgs4700 48f user s guide 424
• Chapter 47 syslog 425
• Label description 425
• Server setup 425
• Syslog server setup 425
• Syslog server setup to open the following screen use this screen to configure a list of external syslog servers 425
• The following table describes the labels in this screen 425
• Xgs4700 48f user s guide 425
• Cluster management 427
• Clustering management status overview 427
• Hapter 427
• Cluster management 428
• Cluster management status 428
• Figure 240 clustering application example 428
• Note a cluster can only have one manager 428
• Chapter 48 cluster management 429
• Cluster management 429
• Cluster member switch management 429
• Go to the clustering management status screen of the cluster manager switch and then select an index hyperlink from the list of members to go to that cluster member switch s web configurator home page this cluster member web 429
• Label description 429
• The following table describes the labels in this screen 429
• Xgs4700 48f user s guide 429
• Example 430
• Figure 242 cluster management cluster member web configurator screen 430
• Chapter 48 cluster management 431
• Figure 243 example uploading firmware to a cluster member switch 431
• Ftp parameter description 431
• Table 162 ftp upload to cluster member example 431
• The following table explains some of the ftp parameters 431
• Uploading firmware to a cluster member switch 431
• Xgs4700 48f user s guide 431
• You can use ftp to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example 431
• Clustering management configuration 432
• Configuration 432
• Example 432
• Chapter 48 cluster management 433
• Configuration continued 433
• Label description 433
• Xgs4700 48f user s guide 433
• Hapter 435
• Mac table 435
• Mac table overview 435
• Figure 245 mac table flowchart 436
• Mac table 436
• Viewing the mac table 436
• Chapter 49 mac table 437
• Label description 437
• Mac table 437
• The following table describes the labels in this screen 437
• Xgs4700 48f user s guide 437
• Hapter 439
• Ip table 439
• Ip table overview 439
• Figure 247 ip table flowchart 440
• Ip table 440
• Viewing the ip table 440
• Chapter 50 ip table 441
• Ip table continued 441
• Label description 441
• Xgs4700 48f user s guide 441
• Arp table 443
• Arp table overview 443
• Hapter 443
• How arp works 443
• Arp table 444
• Arp table in the navigation panel to open the following screen use the arp table to view ip to mac address mapping s and remove specific dynamic arp entries 444
• Chapter 51 arp table 444
• Label description 444
• The arp table screen 444
• The following table describes the labels in this screen 444
• Xgs4700 48f user s guide 444
• Hapter 445
• Overview 445
• Routing table 445
• Viewing the routing table status 445
• Configure clone 447
• Hapter 447
• Chapter 53 configure clone 448
• Configure clone 448
• Label description 448
• The following table describes the labels in this screen 448
• Xgs4700 48f user s guide 448
• Hapter 449
• Power hardware connections and leds 449
• Troubleshooting 449
• I forgot the ip address for the switch 450
• One of the leds does not behave as expected 450
• Switch access and login 450
• I can see the login screen but i cannot log in to the switch 451
• I cannot see or access the login screen in the web configurator 451
• I forgot the username and or password 451
• I cannot see some of advanced application submenus at the bottom of the navigation panel 452
• Pop up windows javascripts and java permissions 452
• There is unauthorized access to my switch via telnet http and ssh 452
• I lost my configuration settings after i restart the switch 453
• Switch configuration 453
• Hapter 455
• Product specifications 455
• Chapter 55 product specifications 456
• Feature description 456
• Table 169 hardware specifications continued 456
• Table 170 firmware specifications 456
• Xgs4700 48f user s guide 456
• Chapter 55 product specifications 457
• Feature description 457
• Table 170 firmware specifications continued 457
• Xgs4700 48f user s guide 457
• Chapter 55 product specifications 458
• Feature description 458
• Note only upload firmware for your specific model 458
• Table 170 firmware specifications continued 458
• Xgs4700 48f user s guide 458
• Chapter 55 product specifications 459
• Feature description 459
• Table 170 firmware specifications continued 459
• Xgs4700 48f user s guide 459
• Chapter 55 product specifications 460
• Table 171 switching specifications 460
• Xgs4700 48f user s guide 460
• Chapter 55 product specifications 461
• Table 171 switching specifications continued 461
• Xgs4700 48f user s guide 461
• Chapter 55 product specifications 462
• Standard description 462
• Table 171 switching specifications continued 462
• Table 172 standards supported 462
• The following list which is not exhaustive illustrates the standards supported in the switch 462
• Xgs4700 48f user s guide 462
• Chapter 55 product specifications 463
• Standard description 463
• Table 172 standards supported continued 463
• Xgs4700 48f user s guide 463
• Common services 465
• Ppendix 465
• Appendix a common services 466
• Name protocol port s description 466
• Table 173 commonly used services continued 466
• Xgs4700 48f user s guide 466
• Appendix a common services 467
• Name protocol port s description 467
• Table 173 commonly used services continued 467
• Xgs4700 48f user s guide 467
• Appendix a common services 468
• Name protocol port s description 468
• Table 173 commonly used services continued 468
• Xgs4700 48f user s guide 468
• Certifications 469
• Copyright 469
• Legal information 469
• Ppendix 469
• Ce mark warning 470
• Fcc warning 470
• Notices 470
• Taiwanese bsmi bureau of standards metrology and inspection a warning 470
• Registration 471
• Viewing certifications 471
• Zyxel limited warranty 471
• Appendix b legal information 472
• Declaración de producto ecológico 472
• Dichiarazione green product 472
• Déclaration de produit green 472
• English deutsch español 472
• Français italiano nederlands 472
• Green product declaration 472
• Miljödeklaration 472
• Productmilieuverklaring 472
• Svenska 472
• Xgs4700 48f user s guide 472
• Numerics 475
• Xgs4700 48f user s guide 475
• Xgs4700 48f user s guide 476
• Xgs4700 48f user s guide 477
• Xgs4700 48f user s guide 478
• Xgs4700 48f user s guide 479
• Xgs4700 48f user s guide 480
• Xgs4700 48f user s guide 481
• Xgs4700 48f user s guide 482
• Xgs4700 48f user s guide 483
• Xgs4700 48f user s guide 484
• Xgs4700 48f user s guide 485