Manuale d’uso / di manutenzione del prodotto GS1920 del fabbricante ZyXEL Communications
Vai alla pagina of 368
Quick Start Guide www .zyxel.com GS1920 Series Intelligent Lay er 2 GbE Switch V e rsion 4.10 Edition 2, 03/2014 Copyright © 2013 Z yXEL Communications Corpor ation User’s Guide Default Login Details IP Address https://192.
GS1920 Series User’s Gui de 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Gu ide for a series of products.
Contents Overview GS1920 Series User’ s Guide 3 Contents Overview User ’ s Guide .................................................................... .......... ........... ........... .............. ....... .............. 17 Getting to Know Y our Sw itch .
Contents Overview GS1920 Series User’s Gui de 4 Maintenance ............. ................. ................ ................ ................ ................ ................ ..... ....................... 284 Access Control ... ................ ..
Table of Contents GS1920 Series User’ s Guide 5 Table of Contents Contents Overview .......................................................... .................................................... ................. 3 Table of Contents ...............
Table of Contents GS1920 Series User’s Gui de 6 Part II: T echnical Reference . ............................................................ ............... 33 Chapter 4 The Web Configurator ..................................................... ....
Table of Contents GS1920 Series User’ s Guide 7 8.3 General Setup ................. ................ ................ ................ ................ ................ ........ ..................... . 61 8.4 Introduction to VLANs .............. ...
Table of Contents GS1920 Series User’s Gui de 8 Chapter 1 1 St atic Multicast Forward Setup ...................................... ........................................................... ...... 103 1 1.1 S tatic Multicast Forward Setup Overview .
Table of Contents GS1920 Series User’ s Guide 9 15.2 Broadcast S torm Control Setup .. ................ .... ................ ............. ................ ................ ......... ......... 129 Chapter 16 Mirroring ........... ..................
Table of Contents GS1920 Series User’s Gui de 10 Chapter 21 Policy Rule ................................................. ..................................................... ............. .................... 154 21.1 Policy Rules Overview . .... .
Table of Contents GS1920 Series User’ s Guide 11 Chapter 25 IP Source Guard .................................................... ..................................................... ........... ............ 187 25.1 Overview ....... ...............
Table of Contents GS1920 Series User’s Gui de 12 28.3.1 PPPoE IA Per-Port . ................ ................ ................ ............. ................ ................ ....... ........ 222 28.3.2 PPPoE IA Per-Port Per-V LAN ... ..............
Table of Contents GS1920 Series User’ s Guide 13 33.1 Differentiated Services Overview .............. ................. ................ ................ ................ ......... ......... 262 33.1.1 What Y ou Can Do ....... ................ .....
Table of Contents GS1920 Series User’s Gui de 14 36.5 Backup a Configuration File .............. ............. ................ ................ ................ ................ .......... .. 288 36.6 T ech-Support ... ................. ...........
Table of Contents GS1920 Series User’ s Guide 15 40.4 T echnical Referenc e ................... ................ ................. ............. ................ ................ ..... ................ 320 40.4.1 Cluster Member Switch Ma nagement ..
Table of Contents GS1920 Series User’s Gui de 16 Index ................................................ .............................................
17 P ART I User ’ s Guide.
18.
GS1920 Series User’ s Guide 19 C HAPTER 1 Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch.
Chapter 1 Getting to Know Your Switch GS1920 Series User’s Gui de 20 The following table describes the P oE features of the Switch by model. This section shows a few examples of using the S witch in various network en vironments.
Chapter 1 Getting to Know Your Switch GS1920 Series User’ s Guide 21 Figure 2 Bridging Application 1.1.3 High Performa nce Switching Example The Switch is ideal for connecting two networks that need high bandwidth. In th e following example, use trunking to connect these two networks.
Chapter 1 Getting to Know Your Switch GS1920 Series User’s Gui de 22 1.1.4.1 T ag-based VLAN Example Po rts in the same VLAN group share the same frame broadcast domain thus increase network performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re-cabling.
Chapter 1 Getting to Know Your Switch GS1920 Series User’ s Guide 23 • Back up the configur ation (and make sure y ou know how to restore it). R estoring an earlier working configur ation may be useful if the devi ce becomes unstable or even crashes.
GS1920 Series User’ s Guide 24 C HAPTER 2 Hardware Installation and Connection 2.1 Inst allation Scenarios This chapter shows you how to install and connect the Sw itch. The Switch can be placed on a desktop or r ack -mounted on a standard EIA rack.
Chapter 2 Hardware Installation and Conne ction GS1920 Series User’ s Guide 25 • Make sure the position of the S witch does not make the r ack unstable or top-heav y . T ake all necessary precautions to anchor the rack securely before installing the unit.
Chapter 2 Hardware Installation and Connection GS1920 Series User’s Gui de 26 Figure 6 Mounting the Switch on a Rack 2 Using a #2 Philips screwdriver , install the M5 flat head screws through the mounting bracket holes into the rack. 3 R epeat steps 1 and 2 to attach the second mounting brack et on the other side of the r ack.
GS1920 Series User’ s Guide 27 C HAPTER 3 Hardware Panels This chapter describes the front panel and rear pa nel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel The following figures show the front panels of the S witch.
Chapter 3 Hardware Panels GS1920 Series User’s Gui de 28 Four 1000Base- T Ethernet ports are paired with a mini-GBIC slot to create a dual personality interface. The Switch uses up to one connection for each mini-GBIC and 1000 Base- T Ethernet pair .
Chapter 3 Hardwa re Panels GS1920 Series User’ s Guide 29 1 Insert the transceiv er into the slot with the exposed section of PCB board facing down. 2 Press the transceiver firmly until it clicks into place. 3 The Switch automatically detects the installed transceiver .
Chapter 3 Hardware Panels GS1920 Series User’s Gui de 30 Figure 15 T ransceiver R emov al Example 3.1.3 LED Mode (only available for GS1920-48HP) After you push this button (see Section Figure 10 on page 27 ) to active PoE on the Switch, view the LEDs to ensure proper functioning of the S witch and as an aid in troubleshooting (see Section 3.
Chapter 3 Hardwa re Panels GS1920 Series User’ s Guide 31 3.3 LEDs After you connect the power to the Switch, view the LEDs to ensure proper functioning of the Switch and as an aid in troubleshooting.
Chapter 3 Hardware Panels GS1920 Series User’s Gui de 32 If you backed up an earlier co nfigur ation file as advised in Section 1.3 on page 22 , you will not have to totally re-configure the Switch after resetting . Y ou can simply restore your last configur ation.
33 P ART II T echnical Reference.
34.
GS1920 Series User’ s Guide 35 C HAPTER 4 The Web Configurator 4.1 Overview This section introduces the configur ation and functions of the web configur ator . The web configurator is an HTML -based management interface that allows easy Switch setup and management via Intern et browser .
Chapter 4 The Web Configurator GS1920 Series User’s Gui de 36 Figure 22 W eb Configur ator: Login 4 Click OK to view the first web configurator screen. 4.3 The S t atus Screen The Status screen is the first screen that displays when y ou access the web configur ator .
Chapter 4 The Web Configurator GS1920 Series User’ s Guide 37 B - Click this link to sav e your configuration into the S witch’ s nonvolatile memory . Nonv olatile memory is the configur ation of your Switch that st ays the same even if the S witch’s power is turned off .
Chapter 4 The Web Configurator GS1920 Series User’s Gui de 38 IP Setup This link takes you to a screen where you can configure the IP addre ss, subnet mask (necessary for Switch manage ment) and DNS (domain name se rv er) and set up to 64 IP routing domains.
Chapter 4 The Web Configurator GS1920 Series User’ s Guide 39 4.3.1 Change Y our Password After you log in for the first time, it is recommended y ou change the default adm inistrator password. Click Management > Access Control > Logins to display the next screen.
Chapter 4 The Web Configurator GS1920 Series User’s Gui de 40 Figure 24 Change Administrator Login P assword 4.4 Saving Y our Configuration When you are done modifying the settings in a screen, click Apply to save y our changes back to the run-time memory .
Chapter 4 The Web Configurator GS1920 Series User’ s Guide 41 5 Misconfigure the text configuration file. 6 F orge t the passw ord and/o r IP address. 7 Prevent all services from accessing the Switch. 8 Change a service port number but forget it. Note: Be careful not to lock y ourse lf and other s out of the Swit ch.
GS1920 Series User’ s Guide 42 C HAPTER 5 Initial Setup Example 5.1 Overview This chapter shows how to set up th e Switch for an example network. The following lists the configuration steps fo r the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Switch IP management address 5.
Chapter 5 Initial Setup Example GS1920 Series User’ s Guide 43 2 In the Static VLAN screen, select ACTIVE , enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID.
Chapter 5 In itial Setup Exam ple GS1920 Series User’s Gui de 44 Figure 27 Initial Setup Network Example: Port VID 1 Click Advanced Applications > VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 2 and click Apply to save your changes back to the run- time memory .
Chapter 5 Initial Setup Example GS1920 Series User’ s Guide 45 3 Click Basic Setting > IP Setup in the navigation panel. 4 Configure the related fields in the IP Setup screen. 5 For t h e VLAN2 network, enter 192.168.2.1 as the IP address and 255.
GS1920 Series User’ s Guide 46 C HAPTER 6 Tutorials 6.1 Overview This chapter provides some examples of using th e web configur ator to set up and use the S witch. The tutorials include: • How to Use DHCP Snooping on the S witch • How to Use DHCP R elay on the Switch 6.
Chapter 6 Tutorials GS1920 Series User’ s Guide 47 2 Go to Advanced Application > VLAN > Static VLAN , and create a VL AN with ID of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as show n. Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN tag.
Chapter 6 Tutorials GS1920 Series User’s Gui de 48 4 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure , activate and specify VLAN 100 as the DHCP VLAN as shown. C lick Apply . Figure 32 T utorial: Specify DHCP VL AN 5 Click the Port link at the top right corner .
Chapter 6 Tutorials GS1920 Series User’ s Guide 49 7 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure > VLAN , show VLAN 100 by entering 100 in the St art VID and End VID fie lds an d click Apply . Then select Yes in the Enabl ed field of the VLAN 100 entry shown at the bottom section of the screen.
Chapter 6 Tutorials GS1920 Series User’s Gui de 50 Figure 36 T utorial: DHCP Rela y Scenario 6.3.2 Creating a VLAN Follow the steps below to configure port 2 as a member of VLAN 10 2. 1 Access the web configurator through the Switch’ s management port.
Chapter 6 Tutorials GS1920 Series User’ s Guide 51 4 In the Static VLAN screen, select ACTIVE , enter a descriptiv e na me (VLAN 10 2 for examp l e) in the Name field and enter 1 02 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN.
Chapter 6 Tutorials GS1920 Series User’s Gui de 52 9 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are fo rwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory .
Chapter 6 Tutorials GS1920 Series User’ s Guide 53 Figure 41 T utorial: Set DHCP Server and R elay Information 6 Click the Save link in the upper right corner of the web configurator to save your conf iguration permanently . 7 The DHCP server can then assign a specif ic IP address based on the DHCP request.
GS1920 Series User’ s Guide 54 C HAPTER 7 System Status and Port Status 7.1 Overview This chapter describes the screens for system status (web configurator home page), port details and P oE status. The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details.
Chapter 7 System St atus and Port Status GS1920 Series User’ s Guide 55 The following table describes the labels in this screen. 7.2.1 St atus: Port Det ails Click a number in the Port column in the Status screen to display individual port statistics.
Chapter 7 System Stat us and Port Status GS1920 Series User’s Gui de 56 Figure 43 Status > Port Details The following table describes the labels in this screen. T a ble 8 Status: Port Details LABEL DESCRIPTION Port Info Por t NO. This field displays the port number you are viewing.
Chapter 7 System St atus and Port Status GS1920 Series User’ s Guide 57 Up Time Thi s field shows the tot al amount of time the connection has been up. Tx P acke t The following fields displ ay detailed informatio n about packets transmitted. TX Pac ke t s This field shows the number of good packets (unicast, multicast and broadcast) transmitted.
Chapter 7 System Stat us and Port Status GS1920 Series User’s Gui de 58 1024- 1518 This field shows the num ber of packets (includi ng bad packets) receiv ed that were between 1024 and 1518 octets i n length.
GS1920 Series User’ s Guide 59 C HAPTER 8 Basic Setting 8.1 Overview This chapter describes how to configure the System Info, Ge neral Setup , Switch Setup , IP Setup , Port Setup , PoE, Inte rface Setu p and IPv6 screens. 8.1.1 What Y ou Can Do •U s e t h e System Info screen ( Section 8.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 60 Figure 44 Basic Setting > System Info (for PoE model(s) only) The following table describes the labels in this screen. T a ble 9 Basic Setting > System Info LABEL DESCRIPTION System Name This fiel d displays the descriptive name of the Swit ch for identification purposes.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 61 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Bas ic Setting > General Se tup in the navigation panel to display the screen as shown.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 62 Figure 45 Basic Setting > General Setup The following table describes the labels in this screen. T a ble 10 Basic Setting > General Setup LABEL DESCRIPTION System Name Choose a descript ive name for i dentification purposes.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 63 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a ph ysic al network to be partitioned into multiple logical networks. Devices on a logical network belong to on e gr ou p. A d ev ic e c an be lo ng to mo re th a n o ne group.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 64 See Chapter 9 on page 85 for information on port-based and 802.1Q tagged VLANs. 8.5 Switch Setup Screen Click Basic Setti ng > Switch Setup in the navigation panel to display the screen as shown.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 65 8.6 IP Setup Use the IP Setup screen to configure the Switch IP addres s, default gateway device, the default domain name server and the management VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 66 Note: Y ou must configure a VLAN first. Figure 47 Basic Setting > IP Setup The following table describes the labels in this screen.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 67 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to displa y the configuration screen. IP Subnet Mask Enter the IP sub net mask of your Sw itch in dotted decimal notation for example 255.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 68 Figure 48 Basic Setting > Port Setup The following table describes the labels in this screen. T a ble 13 Basic Setting > Port Setup LABEL DESCRIPTION Port This is the port index number . * Settings in this row apply to all ports.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 69 8.8 PoE S t atus Note: The following screens are available for the P oE model(s) only . Some features are only av ailable for the Ethernet port s (1 to 24 for GS1920-24HP and 1 to 48 for GS1920-48HP).
Chapter 8 Basic Setting GS1920 Series User’s Gui de 70 T o view the current amount of power that PDs are receiving from the Switch, click Basic Setting > PoE Setup . Figure 50 Basic Setting > PoE Status The following table describes the labels in this screen.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 71 8.8.1 PoE Setup Use this screen to set the priority levels for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 72 The following table describes the labels in this screen. 8.9 Interface Setup An IPv6 address is configured on a per-interface basis. The interface can support virtual interface (for example, a VLAN).
Chapter 8 Basic Setting GS1920 Series User’ s Guide 73 Figure 52 Basic Setting > Interface Setup The following table describes the labels in this screen. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’ s management IPv6 addresses.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 74 Figure 53 Basic Setting > IPv6 The following table describes the labels in this screen. 8.10.1 IPv6 Interface St atus Use this screen to view a specific IPv6 interface status and detailed information.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 75 Figure 54 Basic Setting > IPv6 > IPv6 Interface Status The following table describes the labels in this screen. T a ble 18 Basic Setting > IPv6 > IPv6 Interface Status LABEL DESCRIPTION IPv6 Active This field displ ays whether the IPv6 interface is activated or not.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 76 Global Unicast Address(es) This field displays the Swit ch’ s global unicast address to identify this interface. Joined Group Address(es) This field displays the IPv6 multicast addresses of groups the Swit ch ’ s interfa ce joins.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 77 8.10.2 IPv6 Configuration Use this screen to configure IPv6 settings on the Switch. Click the IPv6 Configuration link in the Basic Setting > IPv6 screen.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 78 Figure 56 Basic Setting > IPv6 > IPv6 Conf iguration > IPv6 Global Setup The following table describes the labels in this screen.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 79 The following table describes the labels in this screen. 8.10.5 IPv6 Link-Local Address Setup A link -local address uniquely identifies a device on the local network (the LAN). It is similar to a “private IP address” in IPv4.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 80 8.10.6 IPv6 Global Address Setup Use this screen to configure the interface’ s IP v6 global address. Click the link next to IPv6 Global Address Setup in the IPv6 Conf iguration screen to display the screen as shown next.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 81 8.10.7 IPv6 Neighbor Discovery Setup Use this screen to configure neighbor discovery settings for each interface. Click the link next to IPv6 Neighbor Discovery Setup in the IPv6 Configuration screen to display the screen as shown next.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 82 8.10.8 IPv6 Neighbor Setup Use this screen to create a static IPv6 neighbor en try in the Switch’ s IPv6 neighbor table to store the neighbor information permanently . Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown n ext.
Chapter 8 Basic Setting GS1920 Series User’ s Guide 83 8.10.9 DHCPv6 Client Setup Use this screen to configure the Switch’ s DHCP setti ngs when it is acting as a DHCPv6 client. Click the link next to IPv6 Neig hbor Setup in the IPv6 Configuration screen to display the screen as shown next.
Chapter 8 Basic Setting GS1920 Series User’s Gui de 84 The following table describes the labels in this screen. T a ble 26 Bas ic Setting > I Pv6 > IPv6 Conf iguration > D HCPv6 Client Setup LABEL DESCRIPTION Interface Select the IPv6 inte rface you want to configure.
GS1920 Series User’ s Guide 85 C HAPTER 9 VLAN 9.1 Overview This chapter shows you how to configure 802.1Q ta gged and port-based VLANs. The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. 9.1.1 What Y ou Can Do •U s e t h e VLAN Status screen ( Section 9.
Chapter 9 VLAN GS1920 Series User’s Gui de 86 level is significant and the default VID of the ingre ss port is giv en as the VID of the fr ame. Of the 4096 possible VIDs, a VID of 0 is used to identify priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN configur ations are 4,094.
Chapter 9 VLAN GS1920 Series User’ s Guide 87 9.1.2.2 Port VLAN T runking Enable VLAN Trunking on a port to allow fr ames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without ha ving to configure the same VLAN grou ps on intermediary devices.
Chapter 9 VLAN GS1920 Series User’s Gui de 88 St atic VLAN Use a static VLAN to decide whether an incoming fr ame on a port should be • sent to a VLAN grou p as normal depending on its VLA N tag. • sent to a group whether it has a VLAN tag or not.
Chapter 9 VLAN GS1920 Series User’ s Guide 89 9.2.1 VLAN Det ails Use this screen to view detailed port settings and status of the VLAN group . Click on an index number in the VLAN Status screen to display VLAN details. Figure 66 Advanced Application > VLAN > VLAN Detail The following table describes the labels in this screen.
Chapter 9 VLAN GS1920 Series User’s Gui de 90 Figure 67 Advanced Application > VLAN > Static VLAN The following table describes the related labels in this screen. T a ble 30 Advanced Application > VL AN > Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings.
Chapter 9 VLAN GS1920 Series User’ s Guide 91 9.4 Configure VLAN Port Settings Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.
Chapter 9 VLAN GS1920 Series User’s Gui de 92 9.5 Subnet Based VLANs Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP subnet you specify . When a frame is received on a port, the S w itch checks if a tag is added already and the IP subnet it c ame from.
Chapter 9 VLAN GS1920 Series User’ s Guide 93 untagged incoming frames will be classified based on their source IP subnet and prioritized accordingly . That is video services receiv e the highest priority and data the lowest. Figure 69 Subnet Based VLAN Application Example 9.
Chapter 9 VLAN GS1920 Series User’s Gui de 94 The following table describes the labels in this screen. 9.6 Protocol Based VLANs Protocol based VLANs allow you to grou p traffic into logical VLANs based on the protocol y ou specify .
Chapter 9 VLAN GS1920 Series User’ s Guide 95 For example, port 1, 2, 3 and 4 belong to static VLAN 100, and p ort 4, 5, 6, 7 be long to static VLAN 120. Y ou configure a protocol b ased VLAN A with priority 3 for ARP traffic received on port 1, 2 and 3 .
Chapter 9 VLAN GS1920 Series User’s Gui de 96 The following table describes the labels in this screen. 9.7 Port-based VLAN Setup Port -based VLANs are VLANs where the packet forwar ding decision is based on the destination MAC address and its associated port.
Chapter 9 VLAN GS1920 Series User’ s Guide 97 Note: In screens ( s uc h as IP Setup and Filtering ) that require a VID, y ou must enter 1 as the VID. The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN with all Ethernet ports.
Chapter 9 VLAN GS1920 Series User’s Gui de 98 Figure 74 Port Based VLAN Setup (P ort Isolation).
Chapter 9 VLAN GS1920 Series User’ s Guide 99 The following table describes the labels in this screen. 9.8 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 9.8.1 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8.
Chapter 9 VLAN GS1920 Series User’s Gui de 100 Figure 75 Protocol Based VLAN Configuration Example T o add more ports to this protocol based VLAN. 1 Click the index number of the protocol based VLAN entry . Click 1 2 Change the value in the Port field to the next port you want to add.
GS1920 Series User’ s Guide 101 C HAPTER 10 Static MAC Forward Setup 10.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your net wor k. Use these screens to configure static MAC address forwarding.
Chapter 10 Static MAC Forward Setup GS1920 Series User’s Gui de 102 The following table describes the labels in this screen. T a ble 35 Advanced Application > Static MAC Forwarding LABEL DESCRIPTION Active Select this che ck box to activ ate your rule.
GS1920 Series User’ s Guide 103 C HAPTER 11 Static Multicast Forward Setup 1 1.1 S t atic Multicast Forward Setup Overview This chapter discusses how to configure forwarding rules based on multicast MAC addresses of devices on your network. Use these screens to configure static multicast address forwarding.
Chapter 11 Static Multicast Forward Setup GS1920 Series User’s Gui de 104 Figure 78 Static Multicast Forwarding to A Single P ort Figure 79 Static Multicast Forwarding to Multiple P orts 1 1.
Chapter 11 Static Multicast Forward Setup GS1920 Series User’ s Guide 105 The following table describes the labels in this screen. T a ble 36 Advanced Application > Static Multicast Forwarding LABEL DESCRIPTION Active Select this che ck box to activ ate your rule.
GS1920 Series User’ s Guide 106 C HAPTER 12 Filtering 12.1 Filtering Overview This chapter discusses MAC address port filtering. Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID).
Chapter 12 Filtering GS1920 Series User’ s Guide 107 The following table describes the related labels in this screen. T a ble 37 Advanced Application > Filtering LABEL DESCRIPTION Active Make sure to select this ch eck box t o activ ate y our rule .
GS1920 Series User’ s Guide 108 C HAPTER 13 Spanning Tree Protocol 13.1 S p anning T ree Protocol Overview The Switch supports Spanning T ree Protocol (S TP), Rapid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protocol (MSTP) as defined in the following standards.
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 109 The Switch uses IEEE 802.1w RSTP (Rapid Spanning T ree Protocol) that allows faster convergence of the spanning tree than STP (while also be ing backwards compatible with STP-only aware bridges).
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 0 STP Port S t ates STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate tr ansient loops.
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 111 • One Common and Internal Spanning T ree (CIST) that represents the entire network’ s connectivity . • Grouping of multiple bridges (or switching devices) into regions th at appear as one single bridge on the network.
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 2 The following table describes the labels in this screen. 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 108 for more information on RSTP .
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 3 The following table describes the labels in this screen. T a ble 41 Advanced Application > Spanning T ree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 86 on page 114 ).
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 4 13.5 Rapid S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 5 13.6 Configure Multiple Ra pid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanc ed Application > Spanning Tree Protocol screen. See Section 13.1 on page 108 for more information on MRSTP .
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 6 Active Select this check box to activate an STP tree. Clea r t his checkbox to disable an STP tree. Note: Y ou must also activate Multiple Rapid Spanning T ree in the Advanced Application > Sp anning T ree Pro tocol > Conf iguration screen to enable MRST P on the Switch.
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 7 13.7 Multiple Rapid S p anning T r ee Protocol St atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 8 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Sp anning Tree Pr otocol screen. See Section on page 110 for more information on MSTP .
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 9 Figure 89 Advanced Application > Spanning T ree Protocol > MSTP The following table describes the labels in this screen.
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 120 Hello Time This is the time interval i n seco nds between BPDU (Bridge Protocol Data Units) configur ation me ssage gener ations by t he root switch. T he allowed range is 1 to 10 seconds.
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 121 13.9 Multiple S p anning T ree Port Configuration Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next.
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 122 The following table describes the labels in this screen. 13.10 Multiple S p anning T r ee Protocol S t atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next.
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 123 Figure 91 Advanced Application > Spanning T ree Protocol > Status: MSTP The following table describes the labels in this screen.
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 124 13.1 1 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 13.1 1.1 MSTP N etwork Example The following figure shows a network example where two VLANs are configured on the two switches.
Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 125 Figure 92 STP/RSTP Network Example With MSTP , VLANs 1 and 2 are mappe d to different sp anning trees in the network. Thus tr affic from the two VLANs trav el on different paths. The fo llowing figure sh ows the network ex ample using MSTP .
Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 126 • VLAN-to-MST Instance mapping 13.1 1.3 MST Inst ance An MST Instance (MSTI) is a spanning tree instance . VLANs can be co nfigured to run on a specific MSTI. Each created MSTI is identi fied by a unique number (known as an MST ID) known internally to a region.
GS1920 Series User’ s Guide 127 C HAPTER 14 Bandwidth Control 14.1 Overview This chapter shows you how y ou can cap the maximum bandwidth using th e Ban dwidth Control screen. Bandwidth c o ntrol mean s defining a ma x imum allowable band width for inco ming and/or o ut-going traffic flows on a port.
Chapter 14 Bandwidth Control GS1920 Series User’s Gui de 128 The following table describes the related labels in this screen. T a ble 48 Advanced Application > Bandwidth Control LABEL DESCRIPTION Active Select th is check box t o enable bandwidt h control on the Switch.
GS1920 Series User’ s Guide 129 C HAPTER 15 Broadcast Storm Control 15.1 Broadcast S torm Control Overview This chapter introduces and shows you how to configure the broadcast storm control feature.
Chapter 15 Broadcast Storm Control GS1920 Series User’s Gui de 130 Figure 97 Advanced Application > Broadcast Storm Control The following table describes the labels in this screen. T a ble 49 Advanced Application > Broadcast Storm Control LABEL DESCRIPTION Active Select th is check bo x to enable traffic sto rm control on the Swi tch.
GS1920 Series User’ s Guide 131 C HAPTER 16 Mirroring 16.1 Mirroring Overview This chapter discusses port mirroring setup screens. Po rt mirroring allows you to copy a tr affic flow to a monitor port (the port y ou copy the tr affic to) in order that you can examine the tr affic from the monitor port without interference.
Chapter 16 Mirroring GS1920 Series User’s Gui de 132 The following table describes the labels in this screen. T a ble 50 Advanced Application > Mirroring LABEL DESCRIPTION Active Sele ct this c heck box t o activ ate port mirroring on the S witch.
GS1920 Series User’ s Guide 133 C HAPTER 17 Link Aggregation 17.1 Overview This chapter shows you how to logically aggregate ph ysical links to form one logical, higher- bandwidth link. Link aggregation (trunking) is the groupin g of ph ysical ports into one logical higher-capacit y link.
Chapter 17 Link Aggre gation GS1920 Series User’s Gui de 134 is, if an operational port fails, then one of th e “standby” ports become oper ational without user intervention. Please note that: • Y ou must connect all ports point-to-point to the same Ethernet switch an d configure the ports for LACP trunking.
Chapter 17 Link Ag gregation GS1920 Series User’ s Guide 135 The following table describes the labels in this screen. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next.
Chapter 17 Link Aggre gation GS1920 Series User’s Gui de 136 Figure 100 Advanced Application > Link Aggreg ation > Link Aggregation Setting The following table describes the labels in this screen.
Chapter 17 Link Ag gregation GS1920 Series User’ s Guide 137 17.4 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section on page 133 for more information on dynamic link aggregation.
Chapter 17 Link Aggre gation GS1920 Series User’s Gui de 138 The following table describes the labels in this screen. 17.5 T echnical Reference This section provides technical background information on the topics discussed in this chapter .
Chapter 17 Link Ag gregation GS1920 Series User’ s Guide 139 Figure 102 T runking Example - Physical Connections 2 Configure static trunking - Click Advanced Application > Link Aggregation > Link Aggregation Setting .
GS1920 Series User’ s Guide 140 C HAPTER 18 Port Authentication 18.1 Port Authentication Overview This chapter describes the IEEE 802.1x authentication method. Port authentication is a way to v alidate access to po rts on the Switch to clients based on an external server (authentication server).
Chapter 18 Port Authenticati on GS1920 Series User’ s Guide 141 Figure 104 IEEE 802.1x Authentication Process 18.2 Port Authentication Configuration T o enable port authentication, first activ ate t.
Chapter 18 Port Authentication GS1920 Series User’s Gui de 142 Figure 106 Advanced Application > Po rt Authentication > 802.1x The following table describes the labels in this screen. T a ble 56 Advanced Application > Port Authentication > 802.
Chapter 18 Port Authenticati on GS1920 Series User’ s Guide 143 18.3.1 Guest VLAN When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the correct credentials are blocked from using the port(s). Y ou can configure your Switch to ha ve one VLAN that acts as a guest VLAN.
Chapter 18 Port Authentication GS1920 Series User’s Gui de 144 Figure 108 Advanced Application > Po rt Authentication > 802.1x > Guest VLAN The following table describes the labels in this screen. T a ble 57 Advanc ed Ap plication > Port Authentication > 802.
Chapter 18 Port Authenticati on GS1920 Series User’ s Guide 145 Host-mode Specify how the Switch authenticates u sers when more than one use r connect to the port (using a hub). Select Multi-Hos t to authenticate only the first user that connects to this port.
GS1920 Series User’ s Guide 146 C HAPTER 19 Port Security 19.1 Port Security Overview This chapter shows you how to set up port security . Po rt security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the S witch.
Chapter 19 Port Security GS1920 Series User’ s Guide 147 Figure 109 Advanced Application > P ort Security The following table describes the labels in this screen.
Chapter 19 Port Security GS1920 Series User’s Gui de 148 Limited Numbe r of Learned MAC Address Use this field to l imit the number o f (dynam ic) MAC addresses that may be learned on a port.
GS1920 Series User’ s Guide 149 C HAPTER 20 Classifier 20.1 Overview This chapter introduces and shows you how to config ure the packet classifie r on the Switch. It also discusses Quality of Service (QoS) and classifier concepts as employ ed by the Switch.
Chapter 20 Cl assifier GS1920 Series User’s Gui de 150 Figure 1 10 Advanced Application > Classifier The following table describes the labels in this screen. T a ble 59 Advanced Application > Classifier LABEL DESCRIPTION Active Select this option to enable th is rule.
Chapter 20 Classifier GS1920 Series User’ s Guide 151 20.2.1 V iewing and Editin g Classifier Configuration T o view a summary of the classifier configur ation, scroll down to the summary table at the bottom of the Classifier screen. T o change the settings of a rule, click a number in the Index field.
Chapter 20 Cl assifier GS1920 Series User’s Gui de 152 F i g u r e 111 Advanced Application > Classifier: Summary T able The following table describes the labels in this screen. The following table shows some other common Ethernet types and the corresponding protocol number .
Chapter 20 Classifier GS1920 Series User’ s Guide 153 Some of the most common T CP and UDP port numbers are: See Appendix B on page 346 for information on commonly used port numbers.
GS1920 Series User’ s Guide 154 C HAPTER 21 Policy Rule 21.1 Policy Rules Overview This chapter shows you how to configure policy rules. A classifier distinguishes traffic into flows based on the con figured criteria (refer to Chapter 20 on page 149 for more information).
Chapter 21 Policy Ru le GS1920 Series User’ s Guide 155 Figure 1 13 Advanced Application > Policy R ule The following table describes the labels in this screen. T a ble 64 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy .
Chapter 21 Policy Rule GS1920 Series User’s Gui de 156 Bandwidth Specify the bandwidth in kilobit per second (Kbps). Enter a number between 64 and 1000000. Action Specify the action(s) the S witch takes on the associate d classified tr affic flow. Note: Y ou can specify only one action (pair) in a policy rule.
Chapter 21 Policy Ru le GS1920 Series User’ s Guide 157 21.2.1 V iewing and Edit ing Policy Configuration T o view a summary of the classifier configur ation, scroll down to the summary table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field.
GS1920 Series User’ s Guide 158 C HAPTER 22 Queuing Method 22.1 Queuing Method Overview This chapter introduces the queuing methods supported. Queuing is used to help solve performance degr ad ation when there is network conge stion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic.
Chapter 22 Queuing Meth od GS1920 Series User’ s Guide 159 an equal amount of bandwidth, and then mov es to the end of the list; and so on, depending on the number of queues being used.
Chapter 22 Qu euing Method GS1920 Series User’s Gui de 160 The following table describes the labels in this screen. T a ble 65 Advanced Application > Queuing Method LABEL DESCRIPTION Port This label shows the port you are configuring. * Settings in this row apply to all ports.
GS1920 Series User’ s Guide 161 C HAPTER 23 Multicast 23.1 Multicast Overview This chapter shows you how to configure v arious multicast features. T raditionally , IP packets are transmitted in one of either two wa ys - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to ev erybody on the networ k).
Chapter 23 Mul ticast GS1920 Series User’s Gui de 162 The Switch forw ards multicast traf fic destined for multicast groups (that it has learned from IGMP snooping or that you ha ve manually configured) to ports that are members of that group .
Chapter 23 Multicast GS1920 Series User’ s Guide 163 In dynamic mode, the Switch sends IGMP leave an d join reports to the other multicast devices (such as multicast routers or servers) in the multicast VLAN.
Chapter 23 Mul ticast GS1920 Series User’s Gui de 164 The following table describes the labels in this screen. 23.3 IPv4 Multicast S t atus Click Advanced Appl ication > Multicast > IPv4 Multicast to display the screen as shown. This screen shows the IPv4 multicast group information.
Chapter 23 Multicast GS1920 Series User’ s Guide 165 Figure 121 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping The following table describes the labels in this screen.
Chapter 23 Mul ticast GS1920 Series User’s Gui de 166 Port This field displays the port number . * Settings in this row apply to all ports. Use this row only if y ou want to make some se ttings the same for all ports. Use this row first to set the common settings and then ma ke adjustments on a port -by-port basis.
Chapter 23 Multicast GS1920 Series User’ s Guide 167 23.4 IGMP Snooping VLAN Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown.
Chapter 23 Mul ticast GS1920 Series User’s Gui de 168 The following table describes the labels in this screen. 23.4.1 IGMP Filtering Profile An IGMP filtering profile specifie s a range of multicast groups that clients connected to the S witch are able to join.
Chapter 23 Multicast GS1920 Series User’ s Guide 169 Figure 123 Advanced Application > Multicast > IPv4 Mu lticast > IGMP Snooping > IGMP Filtering Profile The following table describes the labels in this screen.
Chapter 23 Mul ticast GS1920 Series User’s Gui de 170 23.5 General MVR Configuration Use the MVR screen to create multicast VLANs and select the receiver port(s) and a source port for each multicast VLAN. Click Advanced Application > Multicast > Multica st Setup > MVR to display the screen as shown next.
Chapter 23 Multicast GS1920 Series User’ s Guide 171 23.5.1 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Use this screen to configure MVR IP mu lticast group address(es).
Chapter 23 Mul ticast GS1920 Series User’s Gui de 172 Figure 125 Advanced Application > Multicast > Multicast Setup > MVR > Group Configur ation The following table describes the labels in this screen.
Chapter 23 Multicast GS1920 Series User’ s Guide 173 23.5.2 MVR Conf iguration Example The following fig ure shows a network example where ports 1, 2 and 3 on the Sw itch belong to VLAN 1.
Chapter 23 Mul ticast GS1920 Series User’s Gui de 174 T o set the Switch to forw ard the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an exam ple where two IPv4 multicast groups ( News and Movi e ) are configured for the multicast VLAN 200.
GS1920 Series User’ s Guide 175 C HAPTER 24 AAA 24.1 AAA Overview This chapter describes how to configure authenti cation and authorization settings on the Switch. The external servers that perform authen tication and authorization functions are known as AAA servers.
Chapter 24 AAA GS1920 Series User’s Gui de 176 Local User Account s By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users without interacting with a network AAA serv er . However , the re is a limit on the number of users you may authenticate in this way (See Chapter 36 on page 284 ).
Chapter 24 AAA GS1920 Series User’ s Guide 177 Figure 132 Advanced Application > AAA > RADIUS Server Setup The following table describes the labels in this screen. T a ble 74 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentica tion Serve r Use this section to configure your RADIUS authent ication settings .
Chapter 24 AAA GS1920 Series User’s Gui de 178 24.4 T ACACS+ Server Setup Use this screen to configure your T ACACS+ server settings. See Section on page 176 for more information on T ACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown.
Chapter 24 AAA GS1920 Series User’ s Guide 179 Figure 133 Advanced Application > AAA > T AC ACS+ Server Setup The following table describes the labels in this screen.
Chapter 24 AAA GS1920 Series User’s Gui de 180 24.5 AAA Setup Use this screen to configure authentication and authorization settings on the Sw itch. Click on the AAA Setup link in the AAA scre en to view the screen as shown. Delete Check this box if you want to remo ve an existing T ACACS+ server entry from the Switch.
Chapter 24 AAA GS1920 Series User’ s Guide 181 Figure 134 Advanced Application > AAA > AAA Setup The following table describes the labels in this screen. T a ble 76 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authenticatio n Use this section to spe cify the methods us ed to authenticat e users accessing th e Switch.
Chapter 24 AAA GS1920 Series User’s Gui de 182 24.6 T echnical Reference This section provides technical background information on the topics discussed in this chapter .
Chapter 24 AAA GS1920 Series User’ s Guide 183 • Limit bandwidth on incoming or outgoing traffic for the port the user connects to . • Assign account privilege levels for the authenticated user .
Chapter 24 AAA GS1920 Series User’s Gui de 184 describes the values yo u need to configure. Note th at the bolded values in the table are fixed values as defined in RFC 3580.
Chapter 24 AAA GS1920 Series User’ s Guide 185 - This value is set to Ethernet(15) on the S witch. Calling-Station- Id Frame-MTU EAP-Message State Message-Authenticator.
Chapter 24 AAA GS1920 Series User’s Gui de 186.
GS1920 Series User’ s Guide 187 C HAPTER 25 IP Source Guard 25.1 Overview Use IP source guard to filter unauthoriz ed DHCP and ARP packets in y our network. IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in y our network.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 188 •U s e t h e ARP Inspection Configure screen ( Section 25.9 on page 202 ) to enable ARP inspection on the Switch. Y ou can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 189 25.3 IP Source Guard S t atic Binding Use this screen to manage static bindings for DHCP snooping and ARP inspection. Static bindings are uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only be in one static binding.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 190 The following table describes the labels in this screen. 25.4 DHCP Snooping Use this screen to look at various statistics abou t the DHCP snooping database. T o open this screen, click Advanced Application > IP So urce Guard > DHCP Snooping .
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 191 Figure 137 Advanced Application > IP Source Guard > DHCP Snooping The following table describes the labels in this screen.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 192 Agent runnin g This field displays the status of th e current update or acce ss of the DHCP snooping database. none : The Switch is not accessin g the DHCP snooping database. read : The Switch is loading dynamic bindings from the DHCP snooping database.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 193 25.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Sw itch (not on specific VLAN), specify the V LAN where the defau lt DH CP server is loca ted , and configure the DHCP snooping database.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 194 Figure 138 Advanced Application > IP Source Guard > DHCP Snooping > Configure The following table describes the labels in this screen.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 195 25.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are tr usted or untrusted ports for DHCP snooping. Note: If DHCP snooping is enabl ed but there are no t rusted ports, DHCP requests cannot reach the DHCP server .
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 196 The following table describes the labels in this screen. 25.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on eac.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 197 The following table describes the labels in this screen. 25.5.3 DHCP Snooping VLAN Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 198 The following table describes the labels in this screen. 25.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unautho rized ARP packet.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 199 Figure 142 Advanced Application > IP Source Guard > ARP Inspection The following table describes the labels in this screen. 25.7 ARP Inspection VLAN S t atus Use this screen to look at various statistics about ARP packets in each VLAN.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 200 Figure 143 Advan ced Application > IP Source Guard > ARP Inspection > VLAN Status The following table describes the labels in this screen.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 201 Figure 144 Advanced Application > IP Source Guard > ARP Inspection > Log Status The following table describes the labels in this screen.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 202 25.9 ARP Inspection Configure Use this screen to enable ARP inspection on the Sw itch. Y ou can also configure the length of time the Switch stores records of discarded ARP pack ets and global settings for the ARP inspection log.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 203 25.9.1 ARP Inspection Port Configure Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 204 Figure 146 Advanced Application > IP Source Guard > ARP Inspection > Configure > P ort The following table describes the labels in this screen.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 205 25.9.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from each VLAN.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 206 25.10 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 25.10.1 DHCP Snooping Overv iew Use DHCP snooping to filter un au thorized DHCP packets on the ne twork and to build the binding table dynamically .
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 207 25.10.1.2 DHCP Snooping Dat abase The Switch stores the binding table in volatile memor y . If the Switch restarts, it loads static bindings from permanent memory but loses the dynamic bindings, in which case the devi ces in the network have to send DHCP reques ts again.
Chapter 25 IP Source Guard GS1920 Series User’s Gui de 208 1 Enable DHCP snooping on the Switch. 2 Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. 3 Configure trusted and untrusted ports, and specify th e maximum number of DHCP packets that each port can receive per second.
Chapter 25 IP Source Guard GS1920 Series User’ s Guide 209 25.10.2.2 T ru sted vs. Untrusted Port s Every port is either a trusted port or an untrusted port for ARP inspection. This setting is independent of the trusted/untrusted setting for DHCP snooping.
GS1920 Series User’ s Guide 210 C HAPTER 26 Loop Guard 26.1 Loop Guard Overview This chapter shows you how to configure the Switch to guard against loops on th e edge of your network. Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch.
Chapter 26 Loop Guard GS1920 Series User’ s Guide 21 1 • It will receive broadcast messages sent out from the switch in loop state. • It will receive its own broadcast messages that it sends out as they loop back. It will then re- broadcast those messages again.
Chapter 26 Loop Guard GS1920 Series User’s Gui de 212 Figure 153 Loop Guard - Network Loop Note: After resolving the loop problem on yo ur network y ou can re-activ ate the disabled port via the web configur ator (see Section 8.
Chapter 26 Loop Guard GS1920 Series User’ s Guide 213 The following table describes the labels in this screen. T a ble 92 Advanced Application > Loop Guard LABEL DESCRIPTION Active Select th is option to e n able loop guard on the S witch.
GS1920 Series User’ s Guide 214 C HAPTER 27 Layer 2 Protocol Tunneling 27.1 Layer 2 Protocol T unneling Overview This chapter shows you how to configure la yer 2 protocol tunneling on the Switch. Layer 2 protocol tunneling (L2PT) is used on the service provider's edge devices.
Chapter 27 Layer 2 Protocol Tunneling GS1920 Series User’ s Guide 215 Figure 156 L2PT Network Example 27.1.2.1 Layer 2 Prot ocol T unnelin g Mode Each port can have two lay er 2 protocol tunneling modes, Access and Tunnel .
Chapter 27 Layer 2 Protocol Tunnel ing GS1920 Series User’s Gui de 216 Figure 157 Advanced Application > Lay er 2 Protocol T unneling The following table describes the labels in this screen.
Chapter 27 Layer 2 Protocol Tunneling GS1920 Series User’ s Guide 217 VTP Select this o ption to have the Swit ch tunnel VTP (VLAN T runking P rotocol) packets so tha t all customer swi tches can use co nsistent VLAN configuration through the service provider ’s network.
GS1920 Series User’ s Guide 218 C HAPTER 28 PPPoE 28.1 PPPoE Intermediate Agent Overview This chapter describes how the Switch give s a PPP oE termination server additional information that the server can use to identify and authenticate a PPP oE client.
Chapter 28 PPPoE GS1920 Series User’ s Guide 219 28.1.2.1 PPPoE Intermed iate Agent T ag Format If the PPP oE Intermediate Agent is enabled, the Switch adds a vendor-specific tag to P ADI (PPPoE Active Discovery Initialization) and P ADR (PPPoE Active Disco very Request) packets from PPP oE clients.
Chapter 28 PPPoE GS1920 Series User’s Gui de 220 option example is “Switch/07/0123” and indicates the PPPoE pack ets come from a PPPoE client which is connected to the Switch’ s port 7 and belong to VLAN 123.
Chapter 28 PPPoE GS1920 Series User’ s Guide 221 28.2 The PPPoE Screen Use this screen to configure the PPP oE Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click He re to go to the Intermediate Agent screen.
Chapter 28 PPPoE GS1920 Series User’s Gui de 222 28.3.1 PPPoE IA Per-Port Use this screen to specify whether individual ports are trusted or untrusted ports and have the Switch add extr a information to PPP oE discovery pack ets from PPPoE clients on a per-port basis.
Chapter 28 PPPoE GS1920 Series User’ s Guide 223 Figure 161 Advanced Application > PPP oE > Intermediate Agent > Port The following table describes the labels in this screen. T a ble 100 Advanced Application > PPPoE > Intermediate Agent > Port LABEL DESCRIPTION Port This field displays the port number .
Chapter 28 PPPoE GS1920 Series User’s Gui de 224 28.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPP oE IA settings that apply to a specific VLAN on a port. Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown.
Chapter 28 PPPoE GS1920 Series User’ s Guide 225 28.3.3 PPPoE IA for VLAN Use this screen to set whether the PPPoE Intermedia te Agent is enabled on a VLAN and whether the Switch appends the Circuit ID and/or R emote ID to PPP oE discovery packets from a specific VLAN.
Chapter 28 PPPoE GS1920 Series User’s Gui de 226 Remote-id Sel ect this optio n to make the Remote ID settings for a specific VLAN take effect. Apply Click Apply to sav e your change s t o the S witch’ s run-time memory .
GS1920 Series User’ s Guide 227 C HAPTER 29 Error Disable 29.1 Error Disable Overview This chapter shows you how to configure the r ate limit for control packets on a port, and set the Switch to take an action (such as to shut down a port or stop sending packets) on a port when the Switch detects a pre-configured error .
Chapter 29 Error Disable GS1920 Series User’s Gui de 228 Figure 165 Advanced Application > Errdisable > Errdisable Status The following table describes the labels in this screen.
Chapter 29 Error Disable GS1920 Series User’ s Guide 229 29.4 CPU Protection Configuration Switches exchange protocol con trol packets in a network to get the latest networking information.
Chapter 29 Error Disable GS1920 Series User’s Gui de 230 The following table describes the labels in this screen. 29.5 Error-Disable Detect Configuration Use this screen to have the Switch detect whether the control packets exceed the r ate limit configured for a port and configu re the action to tak e once the limit is exceeded.
Chapter 29 Error Disable GS1920 Series User’ s Guide 231 29.6 Error-Disable R ecovery Configuration Some features, such as loop guard or CPU protec tion, allow the Switch to shut down a port or discard specific packets on a port when an error is detected on the port.
Chapter 29 Error Disable GS1920 Series User’s Gui de 232 The following table describes the labels in this screen. T a ble 106 Advanced Application > Errdisable > Errdisable R ecovery LABEL DESCRIPTION Active Select th is option to turn on the error-disable reco very functi on on the Switch.
GS1920 Series User’ s Guide 233 C HAPTER 30 Green Ethernet This chapter shows you how to configure the Switch to reduce the power consumed by switch ports. 30.1 Green Ethernet Overview Green Ethernet reduces switch port power consumption in the following w ays.
Chapter 30 Green Ethe rnet GS1920 Series User’s Gui de 234 Figure 169 Advanced Application > Green Ethernet The following table describes the labels in this screen. T a ble 107 Adv anced Application > Green Ethernet LABEL DESCRIPTION EEE Select this to activate Energy Efficient Et hernet globally .
GS1920 Series User’ s Guide 235 C HAPTER 31 Link Layer Discovery Protocol (LLDP) 31.1 LLDP Overview The LLDP (Link Layer Discov ery Protocol) is a la yer 2 protocol. It allows a network device to advertise its identity and capabilities on the local ne twork.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 236 Figure 170 LLDP Overview 31.2 LLDP-MED Overview LLDP-MED (Link Lay er Discovery Protocol for Media Endpoint Devices) is an extension to the standard LLDP developed by the T elecommuni cations Industry Association (TIA) TR -41.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 237 Figure 171 LLDP-MED Overview 31.3 LLDP Screens Click Advanced Application > LL DP in the navigation panel to display the screen as shown next. Figure 172 Advanced Application > LLDP The following table describes the labels in this screen.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 238 31.4 LLDP Local S t atus This screen displays a summary of LL DP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) to display the screen as shown next.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 239 The following table describes the labels in this screen. 31.4.1 LLDP Local Port S t atus Det ail This screen displays detailed LLDP status for each port on this Switch.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 240 Figure 174 Advanced Application > LLDP > LLDP Local Stat us > LLDP Local Port Status Detail (Basic TL V).
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 241 Figure 175 Advanced Application > LLDP > LLDP Local Stat us > LLDP Local Port Status Detail (MED TL V).
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 242 The following table describes the labels in this screen. T a ble 110 Advanced Application > LLDP > LLDP Local S.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 243 31.5 LLDP Remote S t atus This screen displays a summary of LLDP status fo r each LLDP connection to a neighboring Sw itch. Click Advanced Application > LLDP > LLDP Remote Status (Click H ere) to display the screen as shown next.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 244 31.5.1 LLDP Remote Port S t atus Det ail This screen displays detaile d LLDP status received from remote device.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 245 The following table describes the labels in Basic TL V part of the screen.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 246 Figure 178 A d v a n c e d A p p l i c a t i o n > L L D P > L L D P R e m o t e S t a t u s > L L D P R e m o t e P o r t S t a t u s D e t a i l > (Dot 1 and Dot3 TL V) The following table describes the labels in the Dot1 and Dot3 parts of the screen.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 247 Protocol Identity TL V The Protocol Identity TL V allows the Switch to advertise the particular protocols that are accessible through its port.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 248 Figure 179 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote P ort Status Detail (MED TL V).
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 249 The following table describes the labels in the MED TL V part of the screen.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 250 31.6 LLDP Configuration Use this creen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Config uration (Click Here) to display the screen as shown next.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 251 Figure 180 Advanced Application > LLDP > LLDP Configur ation The following table describes the labels in this screen. T a ble 115 Advanced Application > LL DP > LLDP Configuration LABEL DESCRIPTION Active Select to enable LLDP on the Switch.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 252 31.6.1 LLDP Configuration Basic TL V Setting Use this screen to configure Basic TL V settings. Click Advanced Application > LL DP > LLDP Configuration (Click Here) > Basic TLV Setting to display the screen as shown next.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 253 31.6.2 LLDP Configuraion Ba sic Org-specific TL V Setting Use this screen to configure organization-specific TL V settings. Click Advanced Application > LLDP > LLDP Configuration (Click Her e) > Org-specific TLV Setting to display the screen as shown next.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 254 31.7 LLDP-MED Configuration Click Advanced Application > LL DP > LLDP-MED Conf iguration (Click Here) to display the screen as shown next.
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 255 31.8 LLDP-MED Network Policy Click Advanced Application > LLDP > LLDP-MED Network Policy (Click Here) to display the screen as shown next.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 256 31.9 LLDP-MED Location Click Advanced Application > LL DP > LLDP-MED Location (Click Here) to display the screen as shown next. Figure 185 Advanced Application > LLDP > LLDP-MED Location Ta g This field disp lays the T ag St atus of the network poli cy .
Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 257 The following table describes the labels in this screen. T a ble 120 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTION Port Enter the port number you want to se t up the location wit hi n the LLPD-MED network.
Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 258 ELIN Number Enter a numerical digit string, corresponding to the ELIN identi fier which is used during emergency ca ll setup to a traditional CAM A o r ISDN trunk-based PSAP .
GS1920 Series User’ s Guide 259 C HAPTER 32 Static Route 32.1 S t atic Route Overview This chapter shows you how to configure static routes. The Switch uses IP for communication with management computers, for example using HT TP , or SNMP .
Chapter 32 Static Route GS1920 Series User’s Gui de 260 Figure 187 IP Application > Static Routing > IPv4 Static Route The following table describes the related labels you use to create a static route.
Chapter 32 Static Route GS1920 Series User’ s Guide 261 Gatew ay Address This field displays the IP address of the gate way . The gateway is an immediate neighbor of your Switch that will forw ard the packet to the dest in ation. Metric This fi eld displays the cost of transmission for routing purposes.
GS1920 Series User’ s Guide 262 C HAPTER 33 Differentiated Services 33.1 Differentiated Services Overview This chapter shows you how to configure Differ entiated Services (DiffS erv) on the Switch. Quality of Service (QoS) is used to prioritize sour ce-to-destination traffic flows.
Chapter 33 Differenti ated Services GS1920 Series User’ s Guide 263 The DSCP value determines the PHB (P er-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking ru le different kinds of traffic can be mark ed for different priorities of forwarding.
Chapter 33 Differentiated Services GS1920 Series User’s Gui de 264 Figure 190 IP Application > DiffServ The following table describes the labels in this screen.
Chapter 33 Differenti ated Services GS1920 Series User’ s Guide 265 33.3.1 Configuring DSCP Settings T o change the DSCP-IEEE 802.1p mapping click the DSCP S etting link in the DiffServ screen to display the screen as shown next. Figure 191 IP Application > DiffServ > DSCP Setting The following table describes the labels in this screen.
GS1920 Series User’ s Guide 266 C HAPTER 34 DHCP 34.1 DHCP Overview This chapter shows you how to configure the DHCP feature. DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configur ation at start-up from a server .
Chapter 34 DHCP GS1920 Series User’ s Guide 267 DHCP Relay Configure DHCP relay on th e Switch if the DHCP clients and the DHCP server are not in the same broadcast domain. During the initial IP addre ss leasing, the Switch helps to relay network information (such as the IP address and subnet mask) between a DHCP client and a DHCP server .
Chapter 34 DHCP GS1920 Series User’s Gui de 268 34.3 DHCPv4 S t atus Click IP Applicati on > DHCP > DHCPv4 in the navigation panel. The DHCP Status screen displays. Figure 193 IP Application > DHCP > DHCPv4 The following table describes the labels in this screen.
Chapter 34 DHCP GS1920 Series User’ s Guide 269 34.4.1.1 DHCPv4 Relay Ag ent Information Format A DHCP R elay Agent Information option has the following format. i1, i2 and iN are DHCP relay agent sub-options, which contain additional information about the DHCP client.
Chapter 34 DHCP GS1920 Series User’s Gui de 270 Figure 194 IP Application > DHCP > DHCPv4 > Option 82 Profile The following table describes the labels in this screen. T a ble 130 IP Application > DHCP > DH CPv4 > Option 82 Prof ile LABEL DESCRIPTION Name Enter a descriptive name for the profile for identification purposes.
Chapter 34 DHCP GS1920 Series User’ s Guide 271 34.4.3 Configuring DHCPv4 Global Relay Use this screen to configure global DHCPv4 relay . Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to displa y the screen as shown.
Chapter 34 DHCP GS1920 Series User’s Gui de 272 The following table describes the labels in this screen. 34.4.4 DHCPv4 Global Relay Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports on the Switch. T o ope n this screen, click IP Application > DHCP > DHCPv4 > Global > Port .
Chapter 34 DHCP GS1920 Series User’ s Guide 273 34.4.5 Global DHCP Re lay Configuration Example The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that service s the DHCP clients in both domains.
Chapter 34 DHCP GS1920 Series User’s Gui de 274 Figure 198 DHCP Re lay Configuration Example 34.5 Configuring DHCPv4 VLAN Settings Use this screen to configure your DHCP settings ba sed on the VLAN domain of the DHCP clients.
Chapter 34 DHCP GS1920 Series User’ s Guide 275 Figure 199 IP Application > DHCP > DHCPv4 > V LAN The following table describes the labels in this screen. T a ble 133 IP Application > DHCP > DHCPv4 > VLAN LABEL DESCRIPTION VID Enter the I D number of the VLAN to which th ese DHCP settings appl y .
Chapter 34 DHCP GS1920 Series User’s Gui de 276 34.5.1 DHCPv4 VLAN Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. T o open this screen, click IP Application > DHCP > DHCPv4 > VLAN > Port .
Chapter 34 DHCP GS1920 Series User’ s Guide 277 34.5.2 Example: DHCP Relay for T wo VLANs The following example displays two VLANs (VIDs 1 and 2) for a campus network. T wo DHCP serv ers are installed to serve each VLAN. The system is set up to forw ard DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.
Chapter 34 DHCP GS1920 Series User’s Gui de 278 Figure 202 DHCP Re lay for T wo VLANs Configuration Example 34.6 DHCPv6 Relay A DHCPv6 relay agent is on the same network as the DHCPv6 cl ients and helps forward messages between the DHCPv6 server and clients.
Chapter 34 DHCP GS1920 Series User’ s Guide 279 Figure 203 IP Application > DHCP > DHCPv6 The following table describes the labels in this screen. T a ble 135 IP Application > DHCP > DHCPv6 LABEL DESCRIPTION VID Enter the I D n um ber of the VL AN you w ant to conf igure here.
GS1920 Series User’ s Guide 280 C HAPTER 35 ARP Setup 35.1 ARP Overview Address Resolution Protocol (ARP) is a protocol for mapping an Intern et Protocol address (IP address) to a physical machine address, also kn own as a Media Access Control or MAC address, on the local area network.
Chapter 35 ARP Setup GS1920 Series User’ s Guide 281 ARP request to the S witch and then sends an IC MP request after getting the ARP reply from the Switch. The Sw itch finds no matched entry for host B in the ARP table and broadcasts the ARP request to all the devices on the LAN.
Chapter 35 ARP Setup GS1920 Series User’s Gui de 282 Therefore in the following example, the Switch can learn host A ’s MAC address from the ARP request sent by host A . The Switch then forwards host B ’ s ICMP reply to host A right after getting host B ’ s MAC address and ICMP reply .
Chapter 35 ARP Setup GS1920 Series User’ s Guide 283 Figure 205 IP Application > ARP Setup > ARP Learning The following table describes the labels in this screen. T a ble 136 IP Application > ARP Setup > ARP Learning LABEL DESCRIPTION Port This field displays the port number .
GS1920 Series User’ s Guide 284 C HAPTER 36 Maintenance 36.1 Overview This chapter explains how to configure the screens that let y ou maintain the firmware and configuration files. 36.1.1 What Y ou Can Do •U s e t h e Maintenance screen ( Section 36.
Chapter 36 Maintenance GS1920 Series User’ s Guide 285 36.2.1 Load Factory Default Follow th e steps below to reset the Switch back to the factory defaults. 1 In the Maintenance screen, click the Click Here button next to Load Factory Default to clear all Switch configur ation information you configured and return to the factory defaults.
Chapter 36 Maintenance GS1920 Series User’s Gui de 286 Alternatively , click Save on the top right -hand corner in any screen to save the configuration changes to the current configur ation. Note: Clicking the Apply or Add button does NO T sav e the changes permanently .
Chapter 36 Maintenance GS1920 Series User’ s Guide 287 Figure 209 Management > Maintenance > Firmw are Upgrade The following table describes the labels in this screen. 36.4 Restore a Configuration File Use this screen to restore a previously sa ved configur ation fr om your com puter to the Switch using the Restore Configuration screen.
Chapter 36 Maintenance GS1920 Series User’s Gui de 288 Figure 210 Management > Maintenance > R estore Configuration T ype the path and file name of the configur ation file you wish to restore in the File Path text box or click Browse to locate it.
Chapter 36 Maintenance GS1920 Series User’ s Guide 289 effort in obtaining reports and it is also av aila ble in CLI command by t yping “Show tech-support” command. Click Menu > Manage ment > Maintenance > Tech-Support to see the following screen.
Chapter 36 Maintenance GS1920 Series User’s Gui de 290 36.7 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 36.7.1 FTP Command Line This section shows some examples of uploading to or downloading files from the Switch using FTP commands.
Chapter 36 Maintenance GS1920 Series User’ s Guide 291 This is a sample FTP session saving the current co nfigur ation to a file called “config.cfg” on your computer .
Chapter 36 Maintenance GS1920 Series User’s Gui de 292 36.7.5 FTP Restrictions FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address.
GS1920 Series User’ s Guide 293 C HAPTER 37 Access Control 37.1 Access Control Overview This chapter describes how to control access to the Switch. One FTP session, up to five W eb sessions (five different user names and passwords) and/or limitless SNMP access control sessions are allowed.
Chapter 37 Access Control GS1920 Series User’s Gui de 294 Figure 213 Management > Access Control 37.3 Configuring SNMP Use this screen to configure your SNMP settings.
Chapter 37 Access Control GS1920 Series User’ s Guide 295 37.3.1 Configuring SNMP T rap Group From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP tr aps that should be sent to each SNMP manager .
Chapter 37 Access Control GS1920 Series User’s Gui de 296 The following table describes the labels in this screen. 37.3.2 Enabling/Disabling Send ing of SNMP T rap s on a Port From the SNMP > Trap Group screen, click Port to view the screen as shown.
Chapter 37 Access Control GS1920 Series User’ s Guide 297 The following table describes the labels in this screen. 37.3.3 Configuring SNMP User From the SNMP screen, click User to view the screen as shown. Use the User screen to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups.
Chapter 37 Access Control GS1920 Series User’s Gui de 298 Security Level Select whet her you want to implem ent authentic ation and/or encryption f or SNMP communication from this user . Choose: • noauth -t o use the userna me as the passwor d string to se nd to the SNMP manager .
Chapter 37 Access Control GS1920 Series User’ s Guide 299 37.4 Setting Up Login Account s Up to five people (one administr ator and four non-administr ators) may access the Switch via web configurator at any one time. • An administrator is someone who can both view and configure Switch changes.
Chapter 37 Access Control GS1920 Series User’s Gui de 300 37.5 Service Port Access Control Service Access Control allows you to decide what services you ma y use to access the Switch. Y ou may also change the default service port and conf igure “trusted computer(s)” for each service in the Remote Management screen (discussed later).
Chapter 37 Access Control GS1920 Series User’ s Guide 301 37.6 Remote Manage ment Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Management > Access Control > Remote Management to view the screen as shown next.
Chapter 37 Access Control GS1920 Series User’s Gui de 302 Figure 220 Management > Access Control > Remote Management The following table describes the labels in this screen. T a ble 148 Management > Access Control > Remote Management LABEL DESCRIPTION Entry This is the client set inde x number .
Chapter 37 Access Control GS1920 Series User’ s Guide 303 37.7 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 37.7.1 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor T CP/IP-based devices.
Chapter 37 Access Control GS1920 Series User’s Gui de 304 SNMP v3 and Security SNMP v3 enhances security for SNMP manage ment. SNMP managers can be required to authenticate with agents before co ndu cting SNMP management sessions. Security can be further enhanced by encrypti ng the SNMP messages sent from the managers.
Chapter 37 Access Control GS1920 Series User’ s Guide 305 37.7.2 Introduction to HTTPS HT TPS (HyperT ext T ransfer Protocol o ver Secure Sock et Lay er , or HT TP ov er S SL) is a web protocol that encrypts and decrypts web pages.
Chapter 37 Access Control GS1920 Series User’s Gui de 306 It relies upon certificates, public keys, and priv ate keys. HT TPS on the Switch is used so that y ou may securely access the Switch using the web configurator .
Chapter 37 Access Control GS1920 Series User’ s Guide 307 Figure 223 Security Alert Dialog Box (Internet Explorer 6) Internet Explorer 7 or 8 When you attempt to access the Switch HT TPS server , a screen with the me ssage "There is a problem with this websi te's security certificate.
Chapter 37 Access Control GS1920 Series User’s Gui de 308 Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser .
Chapter 37 Access Control GS1920 Series User’ s Guide 309 Figure 227 Security Alert (Mozilla Firefox) Confirm the HT TPS serv er URL matches. Click Confirm Security Exception to proceed to the web configurator login screen. Figure 228 Security Alert (Mozilla Firefox) 37.
Chapter 37 Access Control GS1920 Series User’s Gui de 310 Mozilla Firefox) or next to the address bar (in Internet Explorer 7 or 8) denotes a secure connection.
Chapter 38 Diagnostic GS1920 Series User’ s Guide 31 1 C HAPTER 38 Diagnostic 38.1 Overview This chapter explains the Diagnostic screen. Use the Diagnostic screen ( Section 38.2 on pa ge 311 ) to check system logs, ping IP addresses or perform port tests.
Chapter 38 Diagnostic GS1920 Series User’s Gui de 312 The following table describes the labels in this screen. T a ble 151 Management > Diagnostic LABEL DESCRIPTION System Log Click Di splay to display a log of events in the multi-line text bo x.
Chapter 39 Syslog GS1920 Series User’ s Guide 313 C HAPTER 39 Syslog 39.1 Syslog Overview This chapter explains the syslog screens. The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages.
Chapter 39 Syslog GS1920 Series User’s Gui de 314 Figure 231 Management > Syslog The following table describes the labels in this screen. 39.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next.
GS1920 Series User’ s Guide 315 Figure 232 Management > Syslog > S yslog Server Setup The following table describes the labels in this screen. T a ble 154 Management > Syslog > Syslog Server Setup LABEL DESCRIPTION Active Sele ct this che ck box to have the de vice se nd logs to this syslog server .
Chapter 40 Cluster Management GS1920 Series User’s Gui de 316 C HAPTER 40 Cluster Management 40.1 Cluster Management Overview This chapter introduces cluster management. Cluster Management allows y ou to manage switches through one S witch, called the cluster manager .
GS1920 Series User’ s Guide 317 40.1.1 What Y ou Can Do •U s e t h e Cluster Management screen ( Section 40.2 on page 317 ) to view the role of the Switch within the cluster and to access a cluster member switch’ s web configurator . •U s e t h e Clustering Management Configuratio n screen ( Section 40.
Chapter 40 Cluster Management GS1920 Series User’s Gui de 318 40.3 Clustering Management Configuration Use this screen to configure clustering management.
Chapter 40 Cluster Management GS1920 Series User’ s Guide 319 The following table describes the labels in this screen. T a ble 157 Management > Cluster Management > Configu ration LABEL DESCRIPTION Clustering M anager Active Select Activ e to have this S witch become the c l uster manager swit ch.
GS1920 Series User’ s Guide 320 40.4 T echnical Reference This section provides technical background information on the topics discussed in this chapter .
Chapter 40 Cluster Management GS1920 Series User’ s Guide 321 The following table explains so me of the FTP par ameters. T a ble 158 FTP Upload to Cluster Member Example FTP PARAMETER DESCRIPTION User Enter “admin” . Password The web configur ator password default is 1234.
Chapter 41 MAC Tab le GS1920 Series User’s Gui de 322 C HAPTER 41 MAC Table 41.1 MAC T able Overview This chapter introduces the MAC Table screen. The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’ s ports.
Chapter 41 MAC Table GS1920 Series User’ s Guide 323 Figure 238 MAC T able Flowchart 41.2 V iewing the MAC T able Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen.
Chapter 41 MAC Tab le GS1920 Series User’s Gui de 324 The following table describes the labels in this screen. T a ble 159 Management > MAC Table LABEL DESCRIPTION Condition Select on e of the button s an d click Search to only display th e data which matches t he criteria you specif ied.
Chapter 42 ARP Table GS1920 Series User’ s Guide 325 C HAPTER 42 ARP Table 42.1 Overview This chapter introduces ARP T able. Address Resolution Protocol (ARP) is a protocol for mapping an Intern et Protocol address (IP address) to a physical machine address, also kn own as a Media Access Control or MAC address, on the local area network.
GS1920 Series User’ s Guide 326 Figure 240 Management > ARP T able The following table describes the labels in this screen. T a ble 160 Management > ARP Table LABEL DESCRIPTION Condition Specify how you want the Switch to remove AR P entries when y ou click Flush .
Chapter 43 Path MTU Ta ble GS1920 Series User’ s Guide 327 C HAPTER 43 Path MTU Table This chapter introduces the IPv6 Path MTU table. 43.1 Path MTU Overview The largest size (in bytes) of a packet that can be tr ansferred over a data link is called the maximum transmission unit (MTU).
Chapter 44 Configu re Clone GS1920 Series User’s Gui de 328 C HAPTER 44 Configure Clone 44.1 Overview This chapter shows you how you can copy the settings of one port onto other ports. 44.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports.
GS1920 Series User’ s Guide 329 Figure 242 Management > Configure Clone The following table describes the labels in this screen. T a ble 162 Management > Configure Clone LABEL DESCRIPTION Sourc e/ Destinat ion Port Enter the source port under the Source label .
Chapter 45 Neighbor Tabl e GS1920 Series User’s Gui de 330 C HAPTER 45 Neighbor Table This chapter introduces the IPv6 neighbor table. 45.1 IPv6 Neighbor T able Overview An IPv6 host is required to ha ve a neighbor table. If there is an address to be resolved or v erified, the Switch sends out a neighbor solicitation me ssage.
GS1920 Series User’ s Guide 331 MAC This field displays the MAC address of the IPv6 interface on whic h the IPv6 address is configure or the MAC address of the neighboring device. Status This field dis p lays whet her the neighbor IP v6 interface is reachabl e.
GS1920 Series User’ s Guide 332.
Chapter 45 Neighb or Table GS1920 Series User’ s Guide 333.
Chapter 45 Neighbor Tabl e GS1920 Series User’s Gui de 334.
GS1920 Series User’ s Guide 335.
GS1920 Series User’ s Guide 336 C HAPTER 46 Troubleshooting This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LEDs • Switch Access and Login • Switch Configur ation 46.
Chapter 46 Troubl eshooting GS1920 Series User’ s Guide 337 4 Disconnect and re-connect the power adaptor or cord to the Switch. 5 If the problem continues, contact the v endor . 46.2 Switch Access and Login I forgot the IP address for the Switch. 1 The default IP address is 192.
Chapter 46 Tro ubleshooting GS1920 Series User’s Gui de 338 Advanced Suggestions • T ry to access the Switch using another service, such as FTP . If you can access the Switch, check the remote management settings to find out why the S witch does not respond to HT TP .
Chapter 46 Troubl eshooting GS1920 Series User’ s Guide 339 46.3 Switch Configuration I lost my config uration settings after I restart the Switc h. Make sure you sa ve your configur ation into the Switch’ s nonvolatile memory each time you mak e changes.
GS1920 Series User’ s Guide 340 A PPENDIX A Customer Support In the event of problems th at cannot be solved by using this manual, you should contact your vendor . If you cann ot contact your vendor , then contact a Z yXEL office for the region in which you bought the device.
Appendix A Customer Suppo rt GS1920 Series User’ s Guide 341 Korea • Z yXEL K orea Corp. • http://www.zyx el.kr Malaysia • Z yXEL Malaysia Sdn Bhd. • http://www.zyx el.com.my Pakist an • ZyXEL P akistan (Pvt.) Ltd. • http://www .zyxel.com.
Appendix A Customer Support GS1920 Series User’s Gui de 342 Belgium • Z yXEL Communications B.V . • http://www .zyxel.com/be/nl/ Bulgaria •Z y X E L България • http://www.zyx el.com/bg/bg/ Czech • Z yXEL Communications Czech s.r .o • http://www.
Appendix A Customer Suppo rt GS1920 Series User’ s Guide 343 Lithuania • Z yXEL Lithuania • http://www .zyxel.com/lt/lt/homepage.shtml Netherlands •Z y X E L B e n e l u x • http://www.zyx el.nl Norway • Z yXEL Communications • http://www.
Appendix A Customer Support GS1920 Series User’s Gui de 344 T urkey •Z y X E L T u r k e y A . S . • http://www.zyx el.com.tr UK • Z yXEL Communications UK Ltd. • http://www.zyx el.co.uk Ukraine •Z y X E L U k r a i n e • http://www .ua.
Appendix A Customer Suppo rt GS1920 Series User’ s Guide 345 Oceania Australia • Z yXEL Communications Corporation • http://www .zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd.
GS1920 Series User’ s Guide 346 A PPENDIX B Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port number s, ICMP t ype/code numbers and services, visit the IANA (I nternet Assigned Number Authority) web site.
Appendix B Common Services GS1920 Series User’ s Guide 347 HT TPS TC P 443 HT TPS is a secured http session often u sed in e- commerce. ICMP User- Defined 1 Internet Control Message Pr otocol is often used for diagnostic or routing purposes. ICQ UDP 4000 This is a popular In ternet chat progr am.
Appendix B Common Services GS1920 Series User’s Gui de 348 SQL -NET TC P 1521 Structured Query Language is an inte rface to access data on many different ty pes of database systems, including mainfr ames, midr ange systems, UNIX systems and network se rvers.
GS1920 Series User’ s Guide 349 A PPENDIX C IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 38 IP addresses.
Appendix C IPv6 GS1920 Series User’s Gui de 350 Global Address A global address uniquely iden tifies a device on the Internet. It is similar to a “public IP address” in IPv4.
Appendix C IPv6 GS1920 Series User’ s Guide 351 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F).
Appendix C IPv6 GS1920 Series User’s Gui de 352 combines its interface ID and global and subnet in formation advertised from the router . This is a routable global IP address.
Appendix C IPv6 GS1920 Series User’ s Guide 353 such as the system name. The interface-ID option provides slot number , port information and the VLAN ID to the DHCPv6 server . The rem ote- ID option (if any) is stripped from the Rela y-R e ply messages before the relay agent sends the packets to the clients.
Appendix C IPv6 GS1920 Series User’s Gui de 354 determine whether the destination address is on- link and can be reached directly without passing through a router . If the address is onlink, the addre ss is considered as the next hop . Otherwise, the Switch determines the next-hop from the default ro uter list or routing table.
Appendix C IPv6 GS1920 Series User’ s Guide 355 4 Double click Di bbler - a DHCPv6 client . 5 Click Start and then OK . 6 Now your computer can obtain an IP v6 address from a DH CPv6 server . Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default.
Appendix C IPv6 GS1920 Series User’s Gui de 356 4 Click Close to exit the Local Area Connectio n Status screen. 5 Select Start > All Programs > Accessories > Command Prompt . 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obta ined from a DHCP server .
GS1920 Series User’ s Guide 357 A PPENDIX D Legal Information Copyright Copyright © 2014 b y ZyXEL Communi cations Corpor ation. Th e c o nt e nt s o f th is p ub l ic at i on ma y n o t b e re p r.
Appendix D Legal Informa tion GS1920 Series User’s Gui de 358 ZyXEL Limited W arranty Z yXEL warrants to the original end user (pu rchaser) that this pr oduct is free from any defects in material or workmanship for a spe cific period (the Warranty P eriod) from the date o f purchase.
Appendix D Legal Informa tion GS1920 Series User’ s Guide 359 Environment al Product Declaration.
Index GS1920 Series User’s Gui de 360 Index Numerics 802.1P priority 69 802.3az 233 A AAA 175 AAA (Authentication and Authorization) 175 access control limitations 293 login account 299 remote manag.
Index GS1920 Series User’ s Guide 361 cluster management 316 and switch passwords 319 cluster manager 316 , 319 cluster member 316 , 319 cluster member firmware upgr ade 320 network example 316 setu.
Index GS1920 Series User’s Gui de 362 configuration file names 290 filtering 106 rules 106 filtering database, MAC table 322 firmware 60 upgrade 286 , 320 flow control 69 back pressure 69 IEEE802.
Index GS1920 Series User’ s Guide 363 ping 349 prefix 349 prefix length 349 stateless autoconfiguration 351 unspecified address 350 L L2PT 214 access port 215 CDP 214 configuration 215 encapsulation.
Index GS1920 Series User’s Gui de 364 age 120 hops 120 maximum transm ission unit 327 MDIX (Media Dependent Interface Crossover) 28 MIB and SNMP 303 supported MIBs 304 MIB (Management Information Ba.
Index GS1920 Series User’ s Guide 365 overview 146 setup 146 , 212 , 215 port setup 67 port status 54 port VLAN ID, see PVID 92 port VLAN trunking 87 port-based VLAN 96 all connected 99 port isolati.
Index GS1920 Series User’s Gui de 366 protocol operations 303 security 298 setup 294 traps 295 users 297 version 3 and security 304 versions supported 303 SNMP traps 304 supported 304 , 305 Spanning T ree Protocol, See STP .
Index GS1920 Series User’ s Guide 367 trunking 133 example 138 trusted ports ARP inspection 209 DHCP snooping 206 PPPoE IA 220 tunnel protocol attribute, and RADIUS 183 tutorials 46 DHCP snooping 46.
Index GS1920 Series User’s Gui de 368.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il ZyXEL Communications GS1920 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del ZyXEL Communications GS1920 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso ZyXEL Communications GS1920 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul ZyXEL Communications GS1920 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il ZyXEL Communications GS1920, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del ZyXEL Communications GS1920.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il ZyXEL Communications GS1920. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo ZyXEL Communications GS1920 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
