ZyXEL Communications GS2200-24 Bedienungsanleitung

www .zyxel.com GS2200-24 Series Intelligent Layer 2 GbE Switch Copyright © 2010 ZyXEL Communications Corporation Firmware V ersi on 3.90 Edition 1, 2/2010 Default Login Details IP Address http://192.168.1.1 User Name admin Pa ss wo rd 12 34[...]

[...]

About This User's Guide GS2200-24 User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Sw itch using the web configurator . Related Document ation • Command Line Interfa ce (CLI) Reference Guide The Command R eference Guide explai ns how to use the Command-Line Interfac[...]

About This User's Guide GS2200-24 User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link. R ead the T ech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Int erface Reference Guide i n order to better understand how to use your product . [...]

Document Conventions GS2200-24 User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for example, other things you ma y need to configure or help ful tips) or[...]

Document Conventions GS2200-24 User’s Guide 6 Icons Used in Figures Figures in this User’ s Guide may use the following generic icons. The Sw itch icon is not an exact representation of y our device. The Switch Computer Notebook computer Server DSLAM Firewa ll Te l e p h o n e Ro u t e r[...]

Safety Warnings GS2200-24 User’s Guide 7 Safety Warnings • Do NO T use this product near water , for exam ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There is a[...]

Safety Warnings GS2200-24 User’s Guide 8[...]

Contents Overview GS2200-24 User’s Guide 9 Contents Overview Introduction and Hardware ................................................ ........................................... ........ 21 Getting to Know Y our Switch .............. ............. ................ ................ ............. ................ ........... .. 23 Hardware Instal[...]

Contents Overview GS2200-24 User’s Guide 10 DHCP ................... ............. ................ ............. ................ ............. ................ ............. .. ........... . 265 Management ................................................... ........................................... ...................... ..... 273 Maintenance[...]

Table of Contents GS2200-24 User’s Guide 11 Table of Contents About This User's Guide ...................... .......................................... ........................................ .. 3 Document Conventions.................................................................. ......................................... .5 Safety Warnin[...]

Table of Contents GS2200-24 User’s Guide 12 3.2.4 Power Connector ............. ... ... ... ... .... ............. ... ... ... .... ... ... ... ... .... ... ............. ... ... ... .... ... 38 3.3 LEDs .................... ... .... ............. ... ... ... ... ............. .... ... ... ... ............. ... .... ... ... ............ ....... .[...]

Table of Contents GS2200-24 User’s Guide 13 Chapter 8 Basic Setting ............................................................. .......................................... .......... ......... 73 8.1 Overview ... ... .... ... ... ... ............. .... ... ... ... ... ............. .... ... ... ... .... ... ............. ... ... ... .... ... ...[...]

Table of Contents GS2200-24 User’s Guide 14 1 1.1 Overview ........ ............. ................ ............. ................ ............. ................ ............. ..... ..........1 17 1 1.1.1 What Y ou Can Do ................. ................ ................ ............. ................ ................ ......1 17 1 1.1.2 What Y o[...]

Table of Contents GS2200-24 User’s Guide 15 16.1 Overview .......... ................ ............. ................ ................ ............. ................ ............ ......... 153 16.1.1 What Y ou Can Do .......... ............ .......... ... ................. ............ ................. ............ ..... 153 16.2 Port Mirroring S[...]

Table of Contents GS2200-24 User’s Guide 16 21.2.1 Viewing and Edit ing Policy Configuration ... ................ ............. ................ .............. 184 21.3 Policy Example .... ................ ................ ................. ............. ................ ............. ............ ..... 1 85 Chapter 22 Queuing Method.............[...]

Table of Contents GS2200-24 User’s Guide 17 25.2 IP Source Guard ........ ... ............. ................ ............. ................ ............. ................ ....... .... 222 25.3 IP Source Guard S tatic Binding .......... ....... ................ ............. ................ ............. ........... 2 23 25.4 DHCP Snooping .... .[...]

Table of Contents GS2200-24 User’s Guide 18 29.1.1 What Y ou Can Do .......... ............ .......... ... ................. ............ ................. ............ ..... 261 29.1.2 What Y ou Need to Know ......... ................ ............. ................ ............. ................ ..... 261 29.2 Activating DiffServ . .............[...]

Table of Contents GS2200-24 User’s Guide 19 32.2 The Access Contro l Main Screen ..................... ................. ................ ............. ................ . 284 32.3 Configuring SNMP ................ ................ ............. ................ ................ ............. ............ .. 284 32.4 Configuring SNMP Trap Grou p .[...]

Table of Contents GS2200-24 User’s Guide 20 37.1.2 What Y ou Need to Know ......... ................ ............. ................ ............. ................ ..... 323 37.2 Viewing the ARP T able ........... ................ ................ ................ ................ ................ ........ 324 Chapter 38 Configure Clone ..........[...]

21 P ART I Introduction and Hardware Getting to Know Y our Swit ch (23) Hardware Installation and Connecti on (29) Hardware P anels (33)[...]

22[...]

GS2200-24 User’s Guide 23 C HAPTER 1 Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The Switch is a layer-2 sta ndalone Etherne t switch with addi tional lay er-2, la yer-3, and layer -4 features suitable for Ethernets. The Switch has twenty -four 10/100/ 1000 Mbps Ethernet p[...]

Chapter 1 Getting to Know Your Switch GS2200-24 User’s Guide 24 In this example, all computers can share hi gh-speed applications on the server . T o expand the network, simply add more networking devi ces such as switches, routers, computers, print servers etc. Figure 1 Backbone Application 1.1.2 Bridging Example In this example, the Switch conn[...]

Chapter 1 Getting to Kn ow Your Switch GS2200-24 User’s Guide 25 1.1.3 High Performance Switching Example The Switch is ideal for connecting two netw orks that need high b andwidth. In the following example, use trunking to connect these two networks. Switching to higher -speed LANs such as A T M (Async hronous T ransmission Mode) is not feasible[...]

Chapter 1 Getting to Know Your Switch GS2200-24 User’s Guide 26 Shared resources such as a serv er can be used by all ports in the same VLAN as the server . In the following figure only po rts that need access to the serv er need to be part of VLAN 1. P orts can belong to ot her VLAN groups too. Figure 4 Shared Serve r Using VLAN Example 1.2 W ay[...]

Chapter 1 Getting to Kn ow Your Switch GS2200-24 User’s Guide 27 • W rite down the password and p ut it in a safe pl ace. • Back up the configur ation (and make sure you know how to restore it). Restoring an e arlier wo rking conf iguratio n may be usef ul if the device becomes unstable or even cr ashes. If you forget your password, you will [...]

Chapter 1 Getting to Know Your Switch GS2200-24 User’s Guide 28[...]

GS2200-24 User’s Guide 29 C HAPTER 2 Hardware Installation and Connection 2.1 Inst allation Scenarios This chapter shows you how t o install and connect t he Switch. The Switch can be placed on a desktop or r ack -mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the br ackets in a r ack -m ounted installation. Not[...]

Chapter 2 Hardware Installation and Connection GS2200-24 User’s Guide 30 2.3.1 Rack-mounted Inst allation Requirement s • T wo mounting brack e ts. • Eight M3 flat head screws and a #2 Philips screwdriver . • Four M5 fl at head screws and a #2 Philips screwdriv er . Failure to use the proper sc rews may da mage the unit. 2.3.1.1 Precautions[...]

Chapter 2 Har d war e In sta lla tion an d Conn ec tion GS2200-24 User’s Guide 31 2.3.3 Mounting the Switch on a Rack 1 P osition a mounting br acket (that is already att ached to the Switch) on one s ide of the rack, lini ng up th e two screw holes on the br ack et with the screw holes on the side of the rack. Figure 6 Mounting the Switch on a R[...]

Chapter 2 Hardware Installation and Connection GS2200-24 User’s Guide 32[...]

GS2200-24 User’s Guide 33 C HAPTER 3 Hardware Panels 3.1 Overview This chapter describes the front panel and rear p anel of the S w itch and shows you how to make the hardware connections. 3.2 Front Panels The following figure shows th e front panel of the Switch. Figure 7 Front Panel (GS200-24) Ethernet Po rts Dual Personalit y Interfaces Consol[...]

Chapter 3 Har d war e Pane ls GS2200-24 User’s Guide 34 The following table describes the port labels on the front panel. Figure 8 Front Panel (GS200-24P) The following table describes the port labels on the front panel. T able 1 Front Panel Connections (GS200-24) LABEL DESCRIPTION 24 10/100/ 1000 RJ-45 Ethernet Po r t s Connect these ports to a [...]

Chapter 3 Hardware Pane ls GS2200-24 User’s Guide 35 3.2.1 Console Port For local management, you can use a computer with terminal emulation software configured to the following par ameters: • VT100 • T erminal emulation • 9600 bps • No parity , 8 data bits, 1 stop bit • No flow co ntrol Connect the male 9-pin end of the console cable t[...]

Chapter 3 Har d war e Pane ls GS2200-24 User’s Guide 36 Four 1000Base- T Ethernet ports are paired with a mini-GBIC slot to create a dual personality interface. The Switch uses up to one connection for each mini-GBIC and 1000Base- T Ethernet pair . The mini-GBIC slots hav e priority o ver the Gigabi t ports. This means that if a mini-GBIC slot an[...]

Chapter 3 Hardware Pane ls GS2200-24 User’s Guide 37 T o avoid possible eye injury , do not look into an operating fiber- optic module’ s connectors. • T ype: SFP connection interface • Connection speed: 1 Gi gabit per second (Gbps) 3.2.3.1 T ransceiver Inst allation Use the following steps to install a mini-GBIC transceiver (SFP module). 1[...]

Chapter 3 Har d war e Pane ls GS2200-24 User’s Guide 38 3 Pull the transceiver out of the slot. Figure 1 1 Removing the Fib er Optic Cables Figure 12 Opening the T ransceiver ’s Latch Example Figure 13 T ransceiver Removal Example 3.2.4 Power Connector Note: Make sure you are usin g the correct power source as shown on the pa nel. T o connect p[...]

Chapter 3 Hardware Pane ls GS2200-24 User’s Guide 39 SYS Green On The system is on and functioning properly . Blinking The system is rebooting and perform ing self -diagnostic tests. Off The power is off or the system is not ready/ malfunctioning. PPS (GS2200-24P only) Green On External power supply is turned on. Off External power supply is turn[...]

Chapter 3 Har d war e Pane ls GS2200-24 User’s Guide 40[...]

41 P ART II Basic Configuration The W eb Configurator ( 43) Initial Setup Example (53) System Status and P ort Statistics (67) Basic Setting (73)[...]

42[...]

GS2200-24 User’s Guide 43 C HAPTER 4 The Web Configurator 4.1 Overview This section introduces the config urati o n and functions of the web configur ator . The web configurator is an HTML -based management interface that allows easy Switch setup an d m an agement v ia Inter net browser . Use Int ernet Explorer 6 .0 and later , Netscape Navi gato[...]

Chapter 4 The Web Con figurator GS2200-24 User’s Guide 44 3 The login screen appears. The defa ult username is admin and associated default password is 1234 . The date and time displ ay as sh own if y ou have not configured a time server nor manually entered a time and date in the General Setup screen. Figure 14 W eb Configurator: Login 4 Click O[...]

Chapter 4 T he Web Configurator GS2200-24 User’s Guide 45 Figure 16 W eb Configurator Home Screen for GS2200-24P (S t atus) A - Click the menu items to open submenu li nks, and then click on a submenu link to open the screen in the main w in d ow. B , C , D , E - These are quick links which allo w you to perform certain tasks no matter which s cr[...]

Chapter 4 The Web Con figurator GS2200-24 User’s Guide 46 In the navigation panel, clic k a main link to rev eal a list of submenu links. The following table descri bes the links in the na vigation panel. T able 4 Navigation Panel Sub-links Overview (GS2200-24) BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT GS2200-24 GS2200-24 P T a[...]

Chapter 4 T he Web Configurator GS2200-24 User’s Guide 47 Advanced Application VLAN This link takes yo u to screens where you can configure port -based or 802.1Q VLAN (depending on what you configured in the Switch Setup menu). Y ou can also configure a protocol based VLAN or a subnet based VLAN in these screens. Static MAC For w a r d i n g This[...]

Chapter 4 The Web Con figurator GS2200-24 User’s Guide 48 IP Application Static R outing This link takes you to a screen where yo u can configure static routes. A static route defines how the Switch should forward traffic by configuring the TCP/IP par ameters manually . DiffServ This link takes you to screens where you can enable DiffServ , confi[...]

Chapter 4 T he Web Configurator GS2200-24 User’s Guide 49 4.3.1 Change Y our Password After you log i n for the first time, it is recommended you change t he default administr ator password. Click Management > Access Control > Lo gins to display the next screen. Figure 17 Change Administrator Login Password 4.4 Saving Y our Configuration Wh[...]

Chapter 4 The Web Con figurator GS2200-24 User’s Guide 50 4.5 Switch Lockout Y ou could block yourself (and all others) from managing the Switch if y ou do one of the following: 1 Delete the management VLAN (def ault is VLAN 1). 2 Delete all port -based VLANs with the CPU port as a member . The “CPU port” is the management port of the Swit ch[...]

Chapter 4 T he Web Configurator GS2200-24 User’s Guide 51 2 Disconnect and reconnect the S witch’ s power to begin a sessi on. When you reconnect the Switch’ s power , you will see the initial screen. 3 When you see the message “ Press any key to enter Debug Mode within 3 seconds ... ” press any key to enter debug mode. 4 Ty p e atlc afte[...]

Chapter 4 The Web Con figurator GS2200-24 User’s Guide 52[...]

GS2200-24 User’s Guide 53 C HAPTER 5 Initial Setup Example 5.1 Overview This chapter shows how to set up the S witch for an example network. The following lists the configur ation steps for the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Swi tch IP management address 5.1.1 Creating a VLAN VLANs confine broad cast frame[...]

Chapter 5 Initi al Set up Ex amp l e GS2200-24 User’s Guide 54 1 Click A dvanced Application > VLAN in the na vigation panel and cli ck the Static VLAN link. 2 In the Static VLAN screen, select ACTIVE , enter a descriptiv e name in the Name field and enter 2 in the VLAN Group ID field fo r the VLAN2 network. Note: The VLAN Group ID field in th[...]

Chapter 5 Initi al Set up Ex amp le GS2200-24 User’s Guide 55 5.1.2 Setting Port VID Use PVID to add a tag t o incoming untagged fr am es received on that port so t hat the frames are f orwarded to the VLAN group that the tag defines. In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port g[...]

Chapter 5 Initi al Set up Ex amp l e GS2200-24 User’s Guide 56 5.2 Configuring Switch Management IP Address The default management IP address of the Switch is 192.168.1.1. Y ou can configure another IP address in a differ ent subnet for management purposes. The following figure shows an exa mple. Figure 21 Initia l Setup Example: Management IP Ad[...]

GS2200-24 User’s Guide 57 C HAPTER 6 Tutorials 6.1 Overview This chapter provides some examples of using the web configur ator to set up and use the Switch. The tutorials include: • How to Use DHCP Snooping on the Switch • How to Use DHCP Rela y on the Switch 6.2 How to Use DHCP Snooping on the Switch Yo u o n l y w a n t D H C P s e r v e r [...]

Chapter 6 Tutorials GS2200-24 User’s Guide 58 1 Access th e Switch throug h http://192.168.1.1 by default. Log into the Switch by entering the username (default: admin ) and password (default: 1234 ). 2 Go to Advanced Application > VLAN > Static VLAN , and create a VLAN with ID of 100. Add ports 5, 6 and 7 in the VLAN by selecti ng Fixed in[...]

Chapter 6 Tutorials GS2200-24 User’s Guide 59 3 Go to Advanced Application > VLAN > VLAN Port Setting , and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Figure 24 T utorial: T ag Untagged Frames 4 Go to Advanced Application > IP Source Guard > DHCP snooping > [...]

Chapter 6 Tutorials GS2200-24 User’s Guide 60 5 Click the Port link at the top righ t corn er . 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5. K eep ports 6 and 7 Untrusted because they are connected to DHCP clients. Click Apply . Figur[...]

Chapter 6 Tutorials GS2200-24 User’s Guide 61 8 Click Save at the top right corner of the web configurator to sa ve the configur ation permanently . 9 Connect your DHCP server to p ort 5 and a computer (as DHCP client) to either port 6 or 7. The computer should be ab le to get an IP address from the DHCP server . If you put the DHCP server on por[...]

Chapter 6 Tutorials GS2200-24 User’s Guide 62 the system name, VLAN ID and port nu mber in the DHC P reque st. Client A connects to the S witch’ s port 2 in VLAN 102. Figure 29 T utorial: DHCP Relay Scenario 6.3.2 Creating a VLAN Fol low the steps below to configure port 2 as a member of VLAN 102. 1 Access th e web c onf ig u rator throug h the[...]

Chapter 6 Tutorials GS2200-24 User’s Guide 63 3 Click Advanced Application > VLAN > Static VLAN . 4 In the Static VLAN screen, select ACTIVE , enter a descripti ve name (VLAN 102 for example) in the Name field and enter 102 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN. 6 Clear the TX T[...]

Chapter 6 Tutorials GS2200-24 User’s Guide 64 8 Click the VLAN St atus link in the Static VLAN screen a nd then the VLAN Port Setting link in the VLAN Status sc reen. Figure 32 T utorial: Click the VLAN Port Setting Link 9 Enter 102 in the PVID f ield for port 2 to add a tag to incoming untagged fr ames received on that port s o that the frames a[...]

Chapter 6 Tutorials GS2200-24 User’s Guide 65 11 Click the Save link in the upper right c orner of the web conf igurat or to sav e your configu ration permane ntly . 6.3.3 Configuring DHCP Relay Fol low the steps below to enable DHCP relay on the Switch and allow the Switch to add relay agent information (such as the VLAN ID) t o DHCP requests. 1[...]

Chapter 6 Tutorials GS2200-24 User’s Guide 66 1 Client A is connected to the Switch’ s port 2 in VLAN 102. 2 Y ou configured the correct VL AN ID, port number and system name for DHCP rela y on both the DHCP server and the Switc h. 3 Yo u c l i c k e d t h e Save link on the Switch t o have your settings take effect.[...]

GS2200-24 User’s Guide 67 C HAPTER 7 System Status and Port Statistics 7.1 Overview This chapter describes the screens f or system status (web configur ator home page), port details and P oE status. The home screen of the web configur ator displays a port statistical summary with links to each port showing s tatistical details. 7.1.1 What Y ou Ca[...]

Chapter 7 S ystem Status and Port Sta tistics GS2200-24 User’s Guide 68 7.2 Port S t atus Summary T o view the port statistics, click Status in all web configur ator screens to display the Status screen as sho wn next. Figure 35 S t atus (GS2200-24) Figure 36 S t atus (GS2200-24P)[...]

Chapter 7 System Status and Port Statistics GS2200-24 User’s Guide 69 The following table describes t he labels in this screen. T able 7 Status LABEL DESCRIPTION P ort This identifies the Ethernet port. Click a port number to display the Port Details screen (refer to Figure 37 on page 70 ). Name This is the name you assigned to this port in the B[...]

Chapter 7 S ystem Status and Port Sta tistics GS2200-24 User’s Guide 70 7.2.1 S t atus: Port Det ails Click a number in the Port column in the Status screen to display individual p ort statistics. Use t his screen to check status and detailed perf ormance data about an individual port on the S witch. Figure 37 S t atus > Port Details The follo[...]

Chapter 7 System Status and Port Statistics GS2200-24 User’s Guide 71 Status If STP (Spanning T re e Protocol) is enabled, this field displays the STP state of the port (see Section 13.1 on page 123 for more information). If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP . LACP This field shows if L[...]

Chapter 7 S ystem Status and Port Sta tistics GS2200-24 User’s Guide 72 Runt This field shows the number of packets received that were too short (shorter than 64 octets), including th e ones with CRC errors. Distribution 64 This field shows th e number of packets (including bad packets) receiv ed that were 64 octets in length. 65-127 This field s[...]

GS2200-24 User’s Guide 73 C HAPTER 8 Basic Setting 8.1 Overview This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. The System Info screen displays gener al Switch information (such as firmware version number). The General Setup screen allows you to configu r e ge neral Switch i[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 74 8.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. Y ou can check the firmware version number . Figure 38 Basic Setting > System Info (GS2200-24) Figure 39 Basic Setting > System Info (GS2200-24P)[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 75 The following table describes t he labels in this screen. T able 9 Basic Setting > System Info LABEL DESCRIPTION Syst e m Name This field displays the descriptive name of the Sw itch for identification purposes. Product Model This field displays the product model of the Switch. Use this informa[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 76 8.3 General Setup Use this screen to configure genera l set t ings such as the system name and time. Click Basic Setting > Gener al Setup in the navigation panel to display the screen as shown. Figure 40 Basic Setting > General Setup The following table describes t he labels in this screen. [...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 77 Use Time Server when Bootup Enter the time service pro tocol that y our timeserver uses. Not all time servers support all protocols, so you may have to use trial and error to find a protocol that works. The ma in differences between them are the time format. When you select the Daytime (RFC 867) f[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 78 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allo ws a ph ysical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one grou p. With VLAN, a device cannot directly talk to or hear from device[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 79 8.5 Switch Setup Screen Click Basic Setting > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens chan ge depending on whether you choose 802.1Q or Port Based in the VLAN T ype field in this screen. R efer to Chapter 9 on page 93 for more information on V[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 80 8.6 IP Setup Use the IP Setup screen to configure the Switch IP address, default gatew ay device, the default d omain name serv er and the management VLAN ID . The default gateway specifies the IP address of the default gateway (next hop) f or outgoing traffi c. Leave All Timer Leave All Timer set[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 81 8.6.1 Management IP Addresses The Switch needs an IP address for it to be managed ov er the network. The factory default IP address is 192.168. 1.1. The subnet mask specifies the network number portion of an IP address. The factory default subnet mask is 255.255.255.0. Y ou can config ure up to 64[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 82 The following table describes t he labels in this screen. T able 12 Basic Setting > IP Setup LABEL DESCRIPTION Domain Name Server DNS (Domain Name System) is for mappin g a domain name to its corresponding IP address and vice ve rsa. Enter a domain name server IP address in order to be able to [...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 83 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the conf iguration screen. Figure 43 Basic Setting > Port Setup Default Gateway This field displays the IP address of the default gateway . Delete Check the m[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 84 The following table describes t he labels in this screen. T able 13 Basic Setting > Port Setup LABEL DESCRIPTION P ort This is the port index number . * Settings in this row apply to all ports. Use this row only if y ou want to make some settings the same for all ports. Use this row first to se[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 85 8.8 PoE S t atus Note: The following screens are availabl e for t he GS2200-24P model only . Some features are only available for the Fast Ethernet port s (1 to 24). Y our Switch supports IEEE 8 02.3a f P ower over Ethernet (P oE). A powered device (PD) is a device such as an access point or a swi[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 86 Note: The RPS connector port at the b ack panel of the GS2200 -24P should only be used with the PPS250. Do not insert other connector cables to the RSP connector port of the GS 2200-24P or the PPS250. T o view the current amount of power that PDs are receiving from the Swi tch, click Basic Setting[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 87 8.8.1 PoE Setup Use this screen to set t he priority lev els for the Switch i n distributing power t o PDs. State This field shows which po rts can receive power from the Switch. Y ou can set this in Sectio n 8.8.1 on p age 87 . • Disable - The PD connected to this port cannot get power supply .[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 88 Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 46 Basic Setting > PoE Setup The following table describes t he labels in this screen. T able 15 Basic Setting > PoE Setup LABEL DESCRIPTION Po E Mo d e Select the power management mode y[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 89 PD Priority This field is only available on the PWR model but not a vailable for the Gigabit or mini-GBIC ports. When the total power requested by the PDs exceeds the total PoE power budget on the Switch, you can set the PD priority to allow the S witch to provide power to ports with higher priori[...]

Chapter 8 Basic Setting GS2200-24 User’s Guide 90[...]

91 P ART III Advanced VLAN (93) Static MAC F orward Setup (113) Filtering (121) Spanning T ree Protocol (123) Bandwidth Control (145) Broadcast Storm Control (149) Mirroring (153) Link Aggregation (157) P ort Authentication (167) P ort Security (171) Classifier (175) P olicy Rule (181) Queuing Method (187) (190) AAA (209) IP Source Guard (221) Loop[...]

92[...]

GS2200-24 User’s Guide 93 C HAPTER 9 VLAN 9.1 Overview This chapter shows you how t o configure 802.1Q tagged and port-based VLANs. The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. 9.1.1 What Y ou Can Do •U s e t h e VLAN Status screen ( Section 9.2 on page 97 ) to view all VLAN groups. •U s e [...]

Chapter 9 VLAN GS2200-24 User’s Guide 94 field of the Ethernet frame) and two bytes of TCI (T ag Control Information, starts after the source address field o f the Ethernet frame). The CFI (Canonical F ormat In dicator) is a single-bit flag, alwa ys set to zero for Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, the[...]

Chapter 9 VLAN GS2200-24 User’s Guide 95 GARP Timers Switches join VLANs by making a declar at ion. A declaration is made by issuing a Join message using GARP . Declarations are withdra wn by issuing a Leav e message. A Leave Al l message terminates all registr at ions. GA RP timers set declaration ti meout values. GVRP GVRP (GARP VLAN R egistrat[...]

Chapter 9 VLAN GS2200-24 User’s Guide 96 Refer t o the following figure. Suppose y o u wa nt to create VLAN groups 1 and 2 (V1 and V2) on devic es A and B. Without VLAN Trunking , you must configure VLAN groups 1 and 2 on all intermediary switches C, D and E; otherwise they will drop fr ames with unknown VLAN group t ags. However , with VLAN Trun[...]

Chapter 9 VLAN GS2200-24 User’s Guide 97 9.2 VLAN S t atus Click Advanced Application > VLAN from t he navigation panel to di splay the VLAN Status screen as shown next. Figure 49 Advanced Application > VLAN: VLAN S tatus The following table describes t he labels in this screen. T able 17 Advanced Application > VLAN: VLAN S t atus LABEL [...]

Chapter 9 VLAN GS2200-24 User’s Guide 98 9.2.1 VLAN Det ails Use this screen to view detai led port sett ings and s tatus of the VLAN group. Click on an index number in the VLAN Status screen to display VLAN details. Figure 50 Advanced Application > VLAN > VLAN Detail The following table describes t he labels in this screen. T able 18 Advan[...]

Chapter 9 VLAN GS2200-24 User’s Guide 99 9.3 Configure a S t atic VLAN Use this screen to configure and view 802. 1Q VLAN par ameters for the Switch. T o configure a static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. Figure 51 Advanced Application > VLAN > S tatic VLAN The following table describes[...]

Chapter 9 VLAN GS2200-24 User’s Guide 100 * Settings in this row apply to all ports. Use this row only if y ou want to mak e some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port -by -port basis. Note: Changes in this row are copied to all t he ports as soon as you make them. Contr[...]

Chapter 9 VLAN GS2200-24 User’s Guide 101 9.4 Configure VLAN Port Settings Use the VLAN Port Set ti ng screen to co nfigure the static VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setting link in th e VLAN Statu s screen. Figure 52 Advanced Application > VLAN > VLAN Port Setting The following table describes t he labels in thi[...]

Chapter 9 VLAN GS2200-24 User’s Guide 102 9.5 Subnet Based VLANs Subnet based VLANs allow y ou to group tr affic into logical VLANs based on the source IP subnet you s pecify . When a fr ame is received on a port, the Switch checks if a tag is added already and the IP subnet it came from. The untag ged packets fr om the same IP su bnet are then p[...]

Chapter 9 VLAN GS2200-24 User’s Guide 103 For example, an ISP (Internet Services Provider) may divide different types of services it provides to customers into different IP subnets . T raffic fo r voice services is designated for IP subnet 172.16.1.0/24, video for 192.168.1.0/24 and data for 10.1.1.0/24. The S witch can then be configured to grou[...]

Chapter 9 VLAN GS2200-24 User’s Guide 104 Note: Subnet based VLAN applies to un-t agged packet s and is applicable only when you use IEEE 802.1Q t agged VLAN. Figure 54 Advanced Application > VLAN > VLAN Port Setting > Subnet Base d VLAN The following table describes t he labels in this screen. T able 21 Advanced Application > VLAN &g[...]

Chapter 9 VLAN GS2200-24 User’s Guide 105 9.6 Protocol Based VLANs Protocol based VLANs allow y ou to group t raffi c into logical VLANs based on the protocol you s pecify . When an u pstream f rame is received on a port (confi gured for a protocol based VLAN), t he Switch checks i f a tag is added already and its protocol. The untagged packets o[...]

Chapter 9 VLAN GS2200-24 User’s Guide 106 traffic from port 6 and 7 will be in another group and have higher priority than ARP traffic, when they go t hrou gh the up link port to a backbone switch C. Figure 55 Protocol Based VLAN Application Example 9.6.1 Configuring Protocol Based VLAN Click Protocol B ased VLAN in the VLAN Port Setting screen t[...]

Chapter 9 VLAN GS2200-24 User’s Guide 107 The following table describes t he labels in this screen. T able 22 Advanced Application > VLAN > VL AN Port Setting > Protocol Based VLAN Setup LABEL DESCRIPTION Active Check this box to activ ate this protocol based VLAN. P ort T ype a port to be included in this protocol based VLAN. This port [...]

Chapter 9 VLAN GS2200-24 User’s Guide 108 9.7 Port-based VLAN Setup P or t-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. P ort- based VLANs require allowed outgoing ports to be defined for each port. Therefore, if y ou wish to al low two subscr ib er po rts to talk to e[...]

Chapter 9 VLAN GS2200-24 User’s Guide 109 9.7.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigati on panel to display the next screen. Figure 57 Port Ba sed VLAN Setup (All Co nnected)[...]

Chapter 9 VLAN GS2200-24 User’s Guide 11 0 Figure 58 Port Ba sed VLAN Setup (Port Isolation)[...]

Chapter 9 VLAN GS2200-24 User’s Guide 111 The following table describes t he labels in this screen. 9.8 T echnical Reference This section provi des technical background information on the topics discussed in this chapter . 9.8.1 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. Fo llo[...]

Chapter 9 VLAN GS2200-24 User’s Guide 11 2 1 Activ ate this protocol based VLAN. 2 T ype the port number you w a nt to include in this protocol based VLAN. T ype 1 . 3 Give this protocol-based VLAN a descriptiv e name. T ype IP-VLAN . 4 Select the protocol. Leave the default value IP . 5 T yp e t h e V L AN I D o f a n e x i s t in g V L A N . I [...]

GS2200-24 User’s Guide 11 3 C HAPTER 10 Static MAC Forward Setup 10.1 Overview This chapter discusses how to configure forw arding rules based on MAC addresses of devices on your network. Use these screens to configure static MAC address forwarding. 10.1.1 What Y ou Can Do Use the Static MAC Forwarding screen ( Section 10.2 on page 113 ) to assig[...]

Chapter 10 St at ic MAC Fo rw ard Setup GS2200-24 User’s Guide 11 4 Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configur ation screen as shown. Figure 60 Advanced Application > S t atic MAC Forwarding The following table describes t he labels in this screen. T able 24 Advanced Application > S[...]

Chapter 10 Static MAC Fo rward Setup GS2200-24 User’s Guide 11 5 P ort This field displays the port where the MAC add ress shown in the next field will be forwarded. Delete Click De lete to remove the selected entr y from the summary table. Cancel Click Cancel to clear the Delete check boxes. T able 24 Advanced Application > S tatic MAC Forwar[...]

Chapter 10 St at ic MAC Fo rw ard Setup GS2200-24 User’s Guide 11 6[...]

GS2200-24 User’s Guide 11 7 C HAPTER 11 Static Multicast Forward Setup 1 1.1 Overview This chapter discusses how to configure fo rwardi ng rules based on multicast MAC addresses of devices on your net work. Use these screens to configure stat ic multicast add ress forward ing. 1 1.1.1 What Y ou Can Do Use the Static Multicast Forward Setup screen[...]

Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up GS2200-24 User’s Guide 11 8 connected to port 3. Fi gure 63 shows fr ames being forwarded to ports 2 and 3 within VLAN group 4. Figure 61 No S t atic Multicast Forwarding Figure 62 S t atic Multicast Forwarding to A Single Por t Figure 63 S t atic Multicast Forwarding to Multiple Ports 1 1.2 Con[...]

Chapter 11 Static Mu lticast Forward Setup GS2200-24 User’s Guide 11 9 Click Advanced Application > Static Multicast Forwarding to display the configurati on screen as shown. Figure 64 Advanced Application > S t at ic Multicast Forwarding The following table describes t he labels in this screen. T able 25 Advanced Application > S tatic M[...]

Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up GS2200-24 User’s Guide 120 Active This field dis plays whether a static multicast MAC address forwardin g rule is active ( Yes ) or not ( No ). Y ou may temporarily deactivate a rule without deleting it. Name This field displays the descriptive name for identification purposes for a static multi[...]

GS2200-24 User’s Guide 121 C HAPTER 12 Filtering 12.1 Overview This chapter discusses MAC address port fil tering. Filtering means sifting tr affic going throug h the Switch based on the source and/or destination MAC addresse s and VLAN group (ID) . 12.1.1 What Y ou Can Do Use the Filtering screen ( Section 12.2 on page 121 ) to create rules for [...]

Chapter 12 Filtering GS2200-24 User’s Guide 122 The following table describes t he related labels in this screen. T able 26 Advanced Application > Filtering LABEL DESCRIPTION Active Make sure to select this check box to activate your rule. Y ou may temporarily deactiv ate a rule without de leting it by deselecting this check box. Name T ype a [...]

GS2200-24 User’s Guide 123 C HAPTER 13 Spanning Tree Protocol 13.1 Overview The Switch suppor ts Spanning T ree Protocol (STP), R apid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protoc ol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning T ree Protocol • IEEE 802.1w Rapid Spanning T ree Protocol • IEEE 802[...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 124 13.1.2 What Y ou Need to Know (R)STP detects and breaks network l oops and provides backup l inks between switches, bridges or routers. It allows a swi tch to inter act with other (R)STP - compliant switches in y our network to en sure that only one path exists between any two station[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 125 For each LAN segment, a designated bridge is selected. This bridge has the lowest cost to the root among the br idges connect ed to the LAN. How STP Works After a bridge determines the lowest cost -spanning tree with STP , it enables the root port and the ports that are the designated [...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 126 In the following example, th ere are two RSTP instances ( MRSTP 1 and MRSTP2 ) on switch A . T o set up MRSTP , activate MRSTP on the S witch and specify which port( s) belong to which spanning tree. Note: Each port can belong to one STP tree only . Figure 66 MRST P Network Example Mu[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 127 13.2 S p anning T ree Protocol St atus Screen The Spanning T ree Protocol status scree n changes depending on what standard you choose to implement on your network. Click Advanced Application > Spanning Tree Protocol to see the screen as shown. Figure 67 Advanced Application > S [...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 128 The following table describes t he labels in this screen. 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 123 for more informat ion on RS TP . Click RS TP in the Advanced Application > Spanning Tree Proto col scree[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 129 The following table describes t he labels in this screen. T able 30 Advanced Application > S panning T ree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 70 on page 130 ). Active Select this check box to activ ate RSTP . Clear [...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 130 13.5 Rapid S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 123 for more information on RSTP . Note: This screen is only available af ter you activate R[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 131 The following table describes t he labels in this screen. T able 31 Advanced Application > S panning T ree Protocol > S tatus: RST P LABEL DESCRIPTION Configuration C lick Configuration to specify which STP mode you w ant to activate. Click RSTP to edit RSTP settings on the Switc[...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 132 13.6 Configure Multiple Rapid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanced Application > Spanning Tree Proto col screen. See Section 13.1 on page 123 for more information on MRSTP . Figure 71 Advanced Application > S p anning T ree Protocol > MR[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 133 Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch. If all switches have the same priority , the switch with the lowest MAC address will the n bec[...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 134 13.7 Multiple Rapid S p anning T ree Protocol S t atus Click Advanced Application > Spanning Tree Pr otocol in the navigat ion panel to display the status screen as shown next. See Section 13.1 on page 123 for more information on MRSTP . Note: This screen is only available af ter y[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 135 Hello Time (second) This is the time interval (in seconds) at wh ich the root switch tr ansmits a configuration message. The root br idge determines Hello Time, Max Age and Forw arding Delay . Max Age (second) This is the maximum time (in seconds) the Switch can w ait without receiving[...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 136 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section on page 126 for more information on MSTP . Figure 73 Advanced Application > S p anni ng T ree Protocol > MSTP[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 137 The following table describes t he labels in this screen. T able 34 Advanced Application > S panning T ree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 74 on page 139 ). Active Select this to activate MSTP on the Switch. Clea[...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 138 Bridge Priority Set the priority of the Switch for the specific spanning tree instance. The lower the number , the more li kely the Switch will be chosen as the root bridge within the spanning tree instance. Enter priority values between 0 and 61440 in increments of 4096 (thus valid v[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 139 13.9 Multiple S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Pr otocol in the navigat ion panel to display the status screen as shown next. See Section on page 126 for more informat ion on MST P . Note: This screen is only available af ter you activate [...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 140 The following table describes t he labels in this screen. T able 35 Advanced Application > S panning T ree Protocol > S tatus: MSTP LABEL DESCRIPTION Configuration C lick Configuration to specify which STP mode you w ant to activate. Click MSTP to edit MSTP settings on the S wit[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 141 13.10 T echnical Reference This section provi des technical background information on the topics discussed in this chapter . 13.10.1 MSTP Network Example The following figure shows a network exam ple where two VLANs are configured on the two sw itches. If the switches are using STP or [...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 142 With MSTP , VLANs 1 and 2 are mapped to di fferent spanning t rees in the network. Thus traf fic from the two VLANs tr avel on different paths. The following figure shows the network example using MSTP . Figure 76 MSTP Network Example 13.10.2 MST Region An MST region is a logic al gro[...]

Chapter 13 Spanning Tr ee Protocol GS2200-24 User’s Guide 143 The following figure shows an example wh ere there are two MST regions. R egions 1 and 2 hav e 2 spanning tree instances. Figure 77 MSTIs in Dif ferent Regions 13.10.4 Common and Internal S p anning T ree (CIST) A CIST represents the connecti vit y of the entire netw ork and it is equi[...]

Chapter 13 Spanning Tr ee Protoc ol GS2200-24 User’s Guide 144[...]

GS2200-24 User’s Guide 145 C HAPTER 14 Bandwidth Control 14.1 Overview This chapter shows you how y ou can cap the maximum bandwidth using the Bandwidth Control screen. Bandwidth control means defining a maxi mum allowable bandwidth for incoming and/or out-going tr affic flows on a port. 14.1.1 What Y ou Can Do Use the Bandwidth Co ntro l screen [...]

Chapter 14 Bandwidth Control GS2200-24 User’s Guide 146 14.2 Bandwid th Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 79 Advanced Application > Bandwid th Control The following table describes t he related labels in this screen. T able 36 Advanced Applicatio[...]

Chapter 14 Band wid th Contr ol GS2200-24 User’s Guide 147 Apply Click Apply to save your changes to the S witch’ s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation pan el to save your changes to the non - volatile memory when you are done configuring. Cancel Click [...]

Chapter 14 Bandwidth Control GS2200-24 User’s Guide 148[...]

GS2200-24 User’s Guide 149 C HAPTER 15 Broadcast Storm Control 15.1 Overview This chapter introduces and shows you how to configure the broadcast storm control feature. Broadcast storm control limits the number of broadcast, multicast and destinat ion lookup failure (DLF ) packets t he Switch re c eives per second on the ports. When the maximum n[...]

Chapter 15 Broadcast Storm Control GS2200-24 User’s Guide 150 15.2 Broadcast S torm Control Setup Click Advanced Application > Broadcast Storm Control in the na vigation panel to display the screen as shown next. Figure 80 Advanced Application > Broadcast S torm Control The following table describes t he labels in this screen. T able 37 Adv[...]

Chapter 15 Broadcast Storm Control GS2200-24 User’s Guide 151 Apply Click Ap ply to save your changes to the Switch’ s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save yo ur changes to the non- volatile memory when y ou are done configuring. Cancel Cli[...]

Chapter 15 Broadcast Storm Control GS2200-24 User’s Guide 152[...]

GS2200-24 User’s Guide 153 C HAPTER 16 Mirroring 16.1 Overview This chapter discusses port mirroring s etup screens. P o r t m i r r o r i n g a l l o w s y o u t o c o p y a t r a f f i c f l o w t o a m o n i t o r p o r t ( t h e p o r t y o u c o p y the traffic to) in order th at you ca n examine th e traffic f r om th e m o ni t or po rt wi[...]

Chapter 16 M irr or in g GS2200-24 User’s Guide 154 16.2 Port Mirroring Setup Click Advanced Application > Mirroring in the navigation panel t o display the Mirroring screen. U se this screen to select a moni tor port and specify the tr affic flow to be copied to the monitor port. Figure 81 Advanced Application > Mirroring The following tab[...]

Chapter 16 M irr or ing GS2200-24 User’s Guide 155 Mirrored S elect this option to mirror the traffic on a port. Direction Specify the direction of the traffi c to mirror by selecting from the drop-down list box. Choices are Egress (outgoing), Ing ress (incoming) and Both . Apply Click Apply to save your changes to the Switch’ s run-time memory[...]

Chapter 16 M irr or in g GS2200-24 User’s Guide 156[...]

GS2200-24 User’s Guide 157 C HAPTER 17 Link Aggregation 17.1 Overview This chapter shows you how t o logically agg regate ph ysical links to form o ne logical, higher-bandwid th link. Link aggregation (trunking) is the groupi ng of physical por ts in to on e logical higher-capacity link. Y ou may w ant to trunk ports i f for example, it is cheape[...]

Chapter 17 Li nk Aggr eg a tion GS2200-24 User’s Guide 158 Dynamic Link Aggregation The Switch adheres to the IEEE 802.3ad st andard for static and dynamic (LACP) port trunking. The IEEE 802.3ad standard describes t h e Link Aggregation Control Protocol (LACP) for dynamically creating and managing trun k groups. When you enable LACP link aggregat[...]

Chapter 17 L ink Aggr eg a tion GS2200-24 User’s Guide 159 17.2 Link Aggregation S t atus Click Advanced Application > Link Aggregation in the navigation panel. The Link Aggregation Status screen d isplays by default. See Section 17.1 on page 157 for more information. Figure 82 Advanced Application > Link Aggregation S tatus The following t[...]

Chapter 17 Li nk Aggr eg a tion GS2200-24 User’s Guide 160 Criteria This shows the outgoing traffic distribution algorithm used in this trunk group. P ackets from the same source and/or to the same destination are sent over the same link within the trun k. src-mac means the Switch distributes traffic based on the packet’ s source MAC address. d[...]

Chapter 17 L ink Aggr eg a tion GS2200-24 User’s Guide 161 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 157 for more informat ion on link aggre gation. Figure 83 Advanced Application > Link Aggreg ation > Link Aggregati[...]

Chapter 17 Li nk Aggr eg a tion GS2200-24 User’s Guide 162 Criteria Select the outgoing tr affic distribution type. Pack ets from the same source and/or to the same destination are sent ov er the same link within the trunk. By default, the Switch uses the src-dst-mac distribution type. If the Switch is behind a router , the packet’s destination[...]

Chapter 17 L ink Aggr eg a tion GS2200-24 User’s Guide 163 17.4 Link Aggregation Control Protocol Click Adv anced Application > Link A ggregation > Link Aggrega tion Setting > LACP to display the screen shown next. See Sect ion on page 158 for more information on d ynamic link agg regation. Figure 84 Advanced Application > Link Aggreg[...]

Chapter 17 Li nk Aggr eg a tion GS2200-24 User’s Guide 164 17.5 T echnical Reference This section provi des technical background information on the topics discussed in this chapter . 17.5.1 S t atic T runking Example This example shows you how to create a static port trunk group for ports 2-5. Syst e m Priority LACP system priority is a number be[...]

Chapter 17 L ink Aggr eg a tion GS2200-24 User’s Guide 165 1 Make your physical connections - make sure that the ports that you w ant to belong to the trunk group are connected to the same destina tion. The followin g figure shows ports 2-5 on swit ch A connected to switch B . Figure 85 T runking Example - Physical Connections 2 Configure static [...]

Chapter 17 Li nk Aggr eg a tion GS2200-24 User’s Guide 166[...]

GS2200-24 User’s Guide 167 C HAPTER 18 Port Authentication 18.1 Overview This chapter describes the IEEE 802.1x aut hentication method. P ort authentication is a w ay to validate access to ports on the Switch to cl ients based on an external server (authentic ation server). The Switch supports the following method for port authenticati on: • IE[...]

Chapter 18 Port Authentication GS2200-24 User’s Guide 168 request to a RADIUS server . The RADIUS se rver v alidates whether this client is allowed access to the port. Figure 87 IEEE 802.1x Authentication Process 18.2 Port Authentication Configuration T o enable port authentic ation, first activ a te the port authentication method (both on the Sw[...]

Chapter 18 Port Authentication GS2200-24 User’s Guide 169 18.3 Activate IEEE 802.1x Security Use this screen to activ ate IEEE 802.1x security . In the Port Authentication screen click 802.1x to display the configur ation screen as shown. Figure 89 Advanced Application > Port Authentication > 802.1x The following table describes t he labels[...]

Chapter 18 Port Authentication GS2200-24 User’s Guide 170 Active Select this to permit 802.1x auth entication on this port. Y ou must first allow 802.1x authentication on the Sw itch before configuring it on each port. R eauthenticati on Specify if a subscriber has to periodically re-enter his or her username and password to stay connected to the[...]

GS2200-24 User’s Guide 171 C HAPTER 19 Port Security 19.1 Overview This chapter shows you how t o set up port sec urity . P ort security all ows only pack ets with dynamically learned MAC addresses and/or configured static MAC ad dresses to pass throug h a port on the S witch. Th e Switch can learn up to 16K MAC addresses in total with no limit o[...]

Chapter 19 Port Secu rity GS2200-24 User’s Guide 172 19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. Figure 90 Advanced Application > Port Security The following table describes t he labels in this screen. T able 45 Advanced Application > Port Security LABEL DESC[...]

Chapter 19 Port Security GS2200-24 User’s Guide 173 * Settings in this row apply to all ports. Use this row only if you w ant to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port -by -port basis. Note: Changes in this row are copied to all the port s as soon as you make th[...]

Chapter 19 Port Secu rity GS2200-24 User’s Guide 174[...]

GS2200-24 User’s Guide 175 C HAPTER 20 Classifier 20.1 Overview This chapter introduces and shows you how to configure the packet cl assifier on the Switch. It also discusses Quality of Service (QoS) and class ifier concepts as employed by the S w itch. 20.1.1 What Y ou Can Do Use the Classifier screen ( Section 20.2 on page 176 ) to define the c[...]

Chapter 20 Classifier GS2200-24 User’s Guide 176 20.2 Configuring the Classifier Use the Classifier screen to define the c lassifiers. After you define the classifier , you can specif y actions (or policy) to act upon the traffic that matches the rules. T o configure policy rules, refer to Chapter 21 on p age 181 . Click Advanced Application >[...]

Chapter 20 Classifier GS2200-24 User’s Guide 177 Ethernet Ty p e Select an Ethernet type or select Other and en ter the Ethernet type number in hexadecimal value. R efer to T able 48 on page 178 for information. Source MAC Address Select Any to apply the rule to all MAC addresses. T o specify a source, select the second choice and type a MAC addr[...]

Chapter 20 Classifier GS2200-24 User’s Guide 178 20.2.1 V iewing and Editing Classifier Configuration T o view a summary of t he classifier configur ation, scroll down to the summary table at the bottom of the Classifier screen. T o change the settings of a rule, click a number in the Index field. Note: When two rules conflict with each other , a[...]

Chapter 20 Classifier GS2200-24 User’s Guide 179 In the Internet Protocol there is a field, called “Protocol” , to identify the next level protocol. The foll owi ng table shows so me common protocol types and the corresponding protocol number . R efer to http://www .iana.org/assignments/ protocol -numbers for a complete list. Some of the most[...]

Chapter 20 Classifier GS2200-24 User’s Guide 180 20.3 Classifier Example The following screen shows an example where you configure a classif ier that identifies all traffic from M AC ad dress 00:50:ba:ad:4f:81 on port 2. After you hav e configured a classifier , you can configure a poli cy (in the Policy screen) to def i ne ac tion (s) on the cla[...]

GS2200-24 User’s Guide 181 C HAPTER 21 Policy Rule 21.1 Policy Rules Overview This chapter shows you how t o configure policy rules. A classifier dist inguishes traffic into flows based on the configured criteria (refer to Chapter 20 on page 175 for more information). A policy rule ensures that a tr affic flow gets the requested treatment in the [...]

Chapter 21 Policy Rule GS2200-24 User’s Guide 182 Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. Figure 94 Advanced Application > Policy Rule The following table describes t he labels in this screen. T able 51 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option[...]

Chapter 21 Policy Rule GS2200-24 User’s Guide 183 Egress Po r t T ype the number of an outgoing port. Priority Specify a priority level. Rate Limit Y ou can configure the desired band width av ailable to a traffic flow . T r af fic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. Bandwidth Specify[...]

Chapter 21 Policy Rule GS2200-24 User’s Guide 184 21.2.1 V iewing and Editing Policy Configuration T o view a summary of t he classifier configur ation, scroll down to the summary table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field. Figure 95 Advanced Application > Policy Rule: Summary[...]

Chapter 21 Policy Rule GS2200-24 User’s Guide 185 21.3 Policy Example The figure below shows an example Policy screen where y ou configure a policy to limit bandwidth on a tr affic flow classified using the Example classifier (refer to Section 20.3 on page 180 ). Figure 96 Policy Example[...]

Chapter 21 Policy Rule GS2200-24 User’s Guide 186[...]

GS2200-24 User’s Guide 187 C HAPTER 22 Queuing Method 22.1 Overview This chapter introduces the queuing methods supported. Queuing is us ed to help solve performa nce degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffi c. See al so Priority Queue Assignment in Switch Setu[...]

Chapter 22 Q ue u ing Me tho d GS2200-24 User’s Guide 188 bandwidth than queues with smaller weig hts. This queuing mechanism is highly efficient in that i t divides any a vail able bandwidth across the d ifferent tr affic queues. By default, th e weight for Q0 is 1, for Q1 is 2, for Q2 is 3, and so on. Guaranteed quantum is calculated as Queue W[...]

Chapter 22 Queuing Me thod GS2200-24 User’s Guide 189 Click Advanced Application > Queuing Method in the na vigation panel. Figure 97 Advanced Application > Que uing Method The following table describes t he labels in this screen. T able 52 Advanced Application > Queuing Method LABEL DESCRIPTION P ort This label shows the port you are co[...]

Chapter 22 GS2200-24 User’s Guide 190 Method Select SPQ (Strictly Priority Queuing), WFQ (W eighted F air Queuing) or WRR (W eighted Round R obin). Strictly Priority Queuing services queu es based on priority only . When the highest priority queue empties, traffic on the next highest -priority queue begins. Q7 has the highest priority and Q0 the [...]

GS2200-24 User’s Guide 191 C HAPTER 23 Multicast 23.1 Overview This chapter shows you how t o configure v arious multicast feat ures. T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast deliv ers IP packets to just a group of hosts[...]

Chapter 23 Multicast GS2200-24 User’s Guide 192 IP Multicast Addresses In IPv4, a multicast address allows a device to send packet s to a specific group of hosts (multicast group) in a different subnetwork. A multicast IP address represents a traf fic recei ving group , not in dividual receiving devi ces. IP addresses in the Class D range (224. 0[...]

Chapter 23 Multicast GS2200-24 User’s Guide 193 MVR only responds to IGMP join and leave control mes sages from multicast groups that are configured under MVR. Jo in and leave reports from other multicast groups are managed by IGMP snooping. The following figure shows a networ k example. The subscriber VLAN ( 1 , 2 and 3 ) information is hidden f[...]

Chapter 23 Multicast GS2200-24 User’s Guide 194 matches one of the configured M VR multic ast group addresses on the Switch, an entry is created in the forw arding table on the Switch. This maps the subscriber VLAN to the list of forw arding destinat ions for the specified multicast tr affic. When the subscriber changes the channe l or turns off [...]

Chapter 23 Multicast GS2200-24 User’s Guide 195 23.3 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to display the screen as shown. See Section 23.1 on page 191 for more i nformation on multicasting. Figure 101 Advanced App lication > Multicast > Multicast Se tting The following table describes t he[...]

Chapter 23 Multicast GS2200-24 User’s Guide 196 802.1p Priority Select a priority lev el (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority . IGMP Filtering Select Active to enable IGMP filtering to control w hich IGMP gr o ups a subscriber on a port can join. N[...]

Chapter 23 Multicast GS2200-24 User’s Guide 197 F ast Leave Enter an IGMP fast leave timeout value (from 200 to 6,348,800) in miliseconds. Select this option to ha ve the Switch use this timeout to update the forwarding table for the port. This defines how many seconds the Switch w aits for an IGMP report before removing an IGMP snooping membersh[...]

Chapter 23 Multicast GS2200-24 User’s Guide 198 23.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the screen as shown. See Section on page 192 for more information on IGMP Snooping VLAN. Figure 102 Advanced App lication > [...]

Chapter 23 Multicast GS2200-24 User’s Guide 199 23.5 IGMP Filtering Profile An IGMP filter in g profile sp ec if ies a range of multic as t groups th at cl ie nts connected to the Switch are able to join. A profile contains a r ange of multicast IP addresses which you w ant cli ents to be able to join. Profiles are assigned to ports (in the Multi[...]

Chapter 23 Multicast GS2200-24 User’s Guide 200 Click Advanced Applications > Multicast > Multicast Setting > IGMP Filtering Profile link to display th e sc re en as shown. Figure 103 Advanced App lication > Multicast > Multicast Se tting > IGMP Filtering Profile The following table describes t he labels in this screen. T able 5[...]

Chapter 23 Multicast GS2200-24 User’s Guide 201 23.6 The MVR Screen Use the MVR screen to create multicast VL ANs and select the receiv er port(s) and a source port for each multicast VLAN. Click Advanced Applications > Multicast > Multicast Setting > MVR link to disp l ay th e sc reen as shown next. Note: Y ou can create up to three mul[...]

Chapter 23 Multicast GS2200-24 User’s Guide 202 Note: Y our Switch automatically creates a stat ic VLAN (with the same VID) wh en you create a multicast VLAN in this screen. Figure 104 Advanced App lication > Multicast > Multicast Setting > MVR The following table describes t he related labels in this screen. T able 57 Advanced Applicati[...]

Chapter 23 Multicast GS2200-24 User’s Guide 203 23.6.1 MVR Group Configuration All source ports and receiv er ports belo ng ing to a multicast group can receive multicast data sent to thi s multicast group. Configure MVR IP mul ticast group addres s(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. * Settings in [...]

Chapter 23 Multicast GS2200-24 User’s Guide 204 Note: A port can belong to more than one multicast VLAN. However , IP multicast group addresses in dif ferent multicast VLANs cannot overlap. Figure 105 Advanced App lication > Multicast > Multicast Setting > MVR: Group Configuration The following table describes t he labels in this screen.[...]

Chapter 23 Multicast GS2200-24 User’s Guide 205 23.6.2 MVR Configuration Example The following figure shows a network ex ample where ports 1, 2 and 3 on the Switch bel ong to VLAN 1. In addition, port 7 belong s to the multicast gr oup with VID 200 to receive multi cast traffi c (the News an d Movie channels) from the remote streaming media serve[...]

Chapter 23 Multicast GS2200-24 User’s Guide 206 T o configure the MVR settings on the S w itch, create a mul ticast group in the MVR screen and set the receiv er and source ports. Figure 107 MVR Configuration Example T o set the Switc h to forward the multi cast group tr affic to the subscribers, configure multicast group sett ings in the Group C[...]

Chapter 23 Multicast GS2200-24 User’s Guide 207 following figure shows an exa mpl e where two multicast groups ( News and Movie ) are configured for the multicast VLAN 200. Figure 108 MVR Group Configuration Example Figure 109 MVR Group Configuration Example[...]

Chapter 23 Multicast GS2200-24 User’s Guide 208[...]

GS2200-24 User’s Guide 209 C HAPTER 24 AAA 24.1 Overview This chapter describes how to configure au thentication and auth orization settings on the Switch. The external servers that perform authentication and authorizati on functions are known as AAA servers. The Switch supports RADIUS (R emote Authentication Dial- In User Service, see Section on[...]

Chapter 24 AAA GS2200-24 User’s Guide 210 accounts configured on the Switch it sel f . The Switch can also use an external authentication server to authenticate a large number of users Authorization i s the process of determining what a user is allowed to do . Diff erent user accounts may have higher or lower pr ivilege levels associated with the[...]

Chapter 24 AAA GS2200-24 User’s Guide 21 1 Click Advanced Application > AAA in the navigation panel to display the screen as shown. Figure 1 1 1 Advanced Application > AAA 24.3 RADIUS Server Setup Use this screen to configure yo ur RADIUS server settings. See S e ction on pa ge 210 for more information on RADIUS servers and Section 24.6.2 o[...]

Chapter 24 AAA GS2200-24 User’s Guide 212 The following table describes t he labels in this screen. T able 60 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure your RADIUS authentication settings. Mode This field is only v alid if you configure multiple RADIUS servers. Sel[...]

Chapter 24 AAA GS2200-24 User’s Guide 213 24.4 T ACACS+ Server Setup Use this screen to configure your T ACACS+ server settings. See Section on page 210 for more information on T ACACS+ servers. Click on the TACACS+ Server Setup link in th e AAA screen to view the screen as shown. Figure 1 13 Advanced Application > AAA > T ACACS+ Server Set[...]

Chapter 24 AAA GS2200-24 User’s Guide 214 Timeout Specify the amount of time in seconds that the S witch waits for an authentication request respon se from the T ACACS+ server . If you are using index-priority for your authentication and you are using two T ACACS+ servers then the timeout value is divided between the two T ACACS+ servers. For exa[...]

Chapter 24 AAA GS2200-24 User’s Guide 215 24.5 AAA Setup Use this screen to config ure authenticati on and auth orization setting s on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 1 14 Advanced Application > AAA > AAA Setup[...]

Chapter 24 AAA GS2200-24 User’s Guide 216 The following table describes t he labels in this screen. T able 62 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authentication Use this section to specify the methods used to authenticate users accessing the Switch. Privilege Enable These fields specify which database the Switch should [...]

Chapter 24 AAA GS2200-24 User’s Guide 217 24.6 T echnical Reference This section provi des technical background information on the topics discussed in this chapter . 24.6.1 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access d evice (for example, the [...]

Chapter 24 AAA GS2200-24 User’s Guide 218 The following table describes t he VSAs supported on the S witch. 24.6.1.1 T unnel Protocol Attribute Y ou can configure tunnel protocol attribu tes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN [...]

Chapter 24 AAA GS2200-24 User’s Guide 219 24.6.2 Supported RADIUS Attributes Remote A uthentication Dial- In User Servic e (RADIUS) attributes are data used to define specific authenticati on elements in a user profile, which is stored on the RADIUS server . This appendix lists th e RADIUS attributes supported by the Swit ch . Refer t o RFC 2865 [...]

Chapter 24 AAA GS2200-24 User’s Guide 220 - This value is se t t o Ethernet(15) on the Switch. Calling-Stati on-Id Frame-MTU EAP-Message State Message-Authenticator[...]

GS2200-24 User’s Guide 221 C HAPTER 25 IP Source Guard 25.1 Overview Us e I P s o ur ce g ua r d t o f i lt er unauthorized DHC P and AR P packets in your network. IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in yo ur network. A binding contains these key attribut es: • MAC address[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 222 •U s e t h e ARP Inspection Status screen ( Section 25.6 on page 233 ) to look at the current list of MAC address filters that were created because the S witch identified an unauthorized ARP packet. •U s e t h e ARP Inspection VLAN Status scre en ( Section 25.7 on page 234 ) to look at va[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 223 provided manually by administr ators (static bindings). T o open this screen, click Advanced Application > IP Source Guard . Figure 1 15 IP Source Guard The following table describes t he labels in this screen. 25.3 IP Source Guard S t atic Binding Use this screen to manage static bindi ngs[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 224 new static binding replaces the origin al one. T o open this screen, click Advanced Application > IP Source Guard > Static Binding . Figure 1 16 IP Source Guard S tatic Binding The following table describes t he labels in this screen. T able 66 IP Source Guard Static Binding LABEL DESCR[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 225 25.4 DHCP Snooping Use this scre en to look at various statis tics about the DHCP snooping database. T o open this screen, click Advanced Application > IP Source Guard > DHCP Snooping . Figure 1 17 DHCP Snoop ing P ort This field displays the port number in the binding. If this field is [...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 226 The following table describes t he labels in this screen. T able 67 DHCP Snooping LABEL DESCRIPTION Database Status This section displays the current settings for the DHCP snooping database. Y ou can configure them in the DH CP Snoopi ng Configure screen. See Section 25.5 on page 228 . Agent [...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 227 Successful transfers This field displays the number of times the Switch read bindings from or updated the bindings in the D HCP snooping databa se successfully . F ailed transfers This field displays the number of times the Switch was unable to read bindings from or update th e bindings in the[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 228 25.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VL AN), specify the VLAN where the default DHCP server is located, and configure the DHCP snooping database. Th e DHCP snooping databa se stores the current bindings on a secure, external TFTP [...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 229 The following table describes t he labels in this screen. T able 68 DHCP Snooping Configure LABEL DESCRIPTION Active Select this to enable DHCP snooping on the Switch. Y ou still have to enable DHCP snooping on spec ific VLAN and specify trusted ports. Note: If DHCP is enabled and there are no[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 230 25.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are trusted or untrusted ports f or DHCP snooping. Note: If DHCP snooping is enabled but there are no trusted ports, DHCP request s cannot reach the DHCP server . Y ou can also specify t he maximum number for DHCP pa[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 231 The following table describes t he labels in this screen. 25.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Switch adds DHCP rela y agent option 82 informati on ( Chapt er 30 on page 265 ) to DHCP requ ests that the Switc[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 232 open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN . Figure 120 DHCP Snooping VLAN Configure The following table describes t he labels in this screen. T able 70 DHCP Snooping VLAN Configure LABEL DESCRIPTION Show VLAN Use this section[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 233 25.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were c reated because the Switch identified an unau thorized ARP pack et. When the Switch identifies an unauthorized ARP packet, it automati cally cr eates a MAC ad dress filter to block tr aff[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 234 25.7 ARP Inspection VLAN S t atus Use this screen to look at va rious statistics about ARP packet s in each VLAN. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status . Figure 122 ARP Inspection VL AN S tatus The following table describes [...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 235 25.8 ARP Inspection Log S t atus Use this scre en t o look at lo g m es s a g e s th at we re generated by ARP pac kets and that have not been sent to the syslog server ye t. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status . Figure 123 [...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 236 25.9 ARP Inspection Configure Use this screen to enable ARP inspection on the Swit ch. Y ou can also configure the length of time the Switch stores reco rds of discarded ARP packets and global Num Pkts This field displays the numb er of ARP packets that were consolidated into this log message[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 237 settings for the ARP inspection log. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure . Figure 124 ARP Inspection Co nfigure The following table describes t he labels in this screen. T able 74 ARP Inspection Configure LABEL DESCRIPTION Ac[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 238 25.9.1 ARP Inspection Port Configure Use this screen to specify whether port s are trusted or untrusted ports f or ARP inspection. Y ou can also specify the maximum r ate at which the Switch receives Syslog rate Enter the maximum number of syslog messages the Switch can send to the syslog ser[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 239 ARP packets on each untrusted po rt. T o open this screen, click Advan ced Application > IP Source Guard > ARP Inspection > Configure > Port . Figure 125 ARP Inspection Po rt Configure The following table describes t he labels in this screen. T able 75 ARP Inspection Port Configure[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 240 25.9.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specif y when the Switch gener ates log messages for receiv ing ARP pack ets from each VLAN. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configu[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 241 25.10 T echnical Reference This section provi des technical background information on the topics discussed in this chapter . 25.10.1 DHCP Snooping Overview Use DHCP s nooping t o filter u nau th orized DHCP packets on the netwo rk and to build the binding tab le dynamically . This can prevent [...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 242 T rusted ports are connected to DHCP servers or ot her switches. The Switc h discards DHCP pack ets from trusted ports only i f the rat e at which DHCP packets arrive is too hig h. The Switch learns dynamic bi ndings from trusted port s. Note: If DHCP is enabled and there are no trusted ports[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 243 read. If the calculated checksum is not equal to the checksum in the f ile, th at binding and all ot her s after it are igno red. 25.10.1.3 DHCP Relay Option 82 Information The Switch c an add informatio n to DHCP reques ts that it does not disc ard. This provides the DHCP server more informat[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 244 25.10.2 ARP Inspection Overview Use ARP inspection to filter unauthorized ARP packets on the network. This can prevent many kinds of man-in- the-middle at tacks, such as the one in the following example. Figure 128 Example: Man-in-the-middle Att ack In this example, computer B tries to establ[...]

Chapter 25 IP Source Guard GS2200-24 User’s Guide 245 25.10.2.2 T rusted vs. Untrusted Port s Every port is either a trusted port or an untrusted p o rt for A R P inspecti on. Th is setting is independent of the t rusted/untrusted setting for DHCP snooping. Y ou can also specify the maximum rate at wh ich t he Switch receiv es ARP packets on untr[...]

Chapter 25 IP Source Gua rd GS2200-24 User’s Guide 246[...]

GS2200-24 User’s Guide 247 C HAPTER 26 Loop Guard 26.1 Overview This chapter shows you how to config ure the Swit ch to guard against loops on the edge of your network. Loop guard allows you to configure the S w itch to shut down a port if it detects that packets sent out on that port loop back to the Swit ch. While you can use Spanning T ree Pro[...]

Chapter 26 Loop Guard GS2200-24 User’s Guide 248 connected wi t h the same cab l e. When a switch in loop st ate sends out broadcast messages the messages loop back to the switch and are re-broadcast again and again causing a broadcast storm. If a switch (not in loop state) connects to a swi tch in loop state, then it wil l be affected by the s w[...]

Chapter 26 Loop Guar d GS2200-24 User’s Guide 249 of the loop guard probe packet is also show n. In this example, the probe packet is sent from port N and returns on another port. As lo ng as loop guard is enabl ed on port N . The Switch will shut down port N if it detects that the probe packet has returned to the Switch. Figure 132 Loop Guard - [...]

Chapter 26 Loop Guard GS2200-24 User’s Guide 250 The following table describes t he labels in this screen. T able 77 Advanced Application > Loop Guard LABEL DESCRIPTION Active Select this option to enable loop guard on the Switch. The Switch generates syslog, internal log messages as well as SNMP traps when it shuts down a port via the loop gu[...]

GS2200-24 User’s Guide 251 C HAPTER 27 Layer 2 Protocol Tunneling 27.1 Overview This chapter shows y ou how to configure la yer 2 protocol tunne ling on the Switch. Layer 2 protocol tunneling (L2PT) is used on the service prov ider's edge devices. 27.1.1 What Y ou Can Do Use the Layer 2 Protocol Tunnel screen ( Section 27.2 on page 253 ) to [...]

Chapter 27 Layer 2 Prot ocol Tunne ling GS2200-24 User’s Guide 252 In th e fo llo wing exa mpl e, if you enab le L 2PT for STP , yo u ca n have swi tch es A , B , C and D in the same spanning tree, ev en though switch A is not directly connected to switches B , C and D . T opology change information can be propagated throughout the service pro vi[...]

Chapter 27 Layer 2 Protocol Tunneling GS2200-24 User’s Guide 253 27.2 Configuring Layer 2 Protocol T unneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. Figure 136 Advanced Applicatio n > Lay er 2 Protocol T unneling The following table describes t he labels in this screen[...]

Chapter 27 Layer 2 Prot ocol Tunne ling GS2200-24 User’s Guide 254 P ort This field displays the port number . * Use this row to make the setting th e same for all po rts. Use this row first and then make adjustments on a port-by -port basis. Note: Changes in this row are copied to all the port s as soon as you make them. CDP Select this option t[...]

255 P ART IV IP Application Static R oute (257) Differentiated Services ( 261) DHCP (265)[...]

256[...]

GS2200-24 User’s Guide 257 C HAPTER 28 Static Route 28.1 Overview This chapter shows you how t o configure static routes. The Switch uses IP for co mmunicat ion with management computers, for example using HTTP , T elnet, SSH , or SNMP . Use IP st atic routes to have the Switch res pond to remote management stations that are not reachable through[...]

Chapter 28 Stat ic Route GS2200-24 User’s Guide 258 28.2 Configuring S t atic Routing Click IP Application > Static Routing in the navigati on panel to displa y the screen as shown. Figure 138 IP Ap plication > S tatic Routin g The following table describes t he related la bels yo u use to create a static rout e. T able 79 IP Application &g[...]

Chapter 28 Static Route GS2200-24 User’s Guide 259 Cancel Click Cancel to reset the abo ve fields to your previous configuration. Clear Click Clear to set the above fields back to the factory defaults. Index This field displa ys the index number of the route. Click a number to edit the static route entry . Active This field displays Yes when the [...]

Chapter 28 Stat ic Route GS2200-24 User’s Guide 260[...]

GS2200-24 User’s Guide 261 C HAPTER 29 Differentiated Services 29.1 Overview This chapter shows you how to conf igure Di fferentiated Services (DiffServ) on the Swit ch . Quality of Service (QoS) is used to prioriti ze source-to-destination tr affic flows. All packets in t he flow are g ive n the same priori ty . Y ou can use CoS (class of servic[...]

Chapter 29 Differe ntiated Services GS2200-24 User’s Guide 262 can define up to 64 service levels and the remaining 2 bits are defined as currently unused (CU). The following figure illustr ates the DS field. Figure 139 Dif fServ: Differentiated Service Fie ld DSCP is backward compatible with the three precedence bits in th e T oS oc te t so that[...]

Chapter 29 Differentiated Services GS2200-24 User’s Guide 263 29.2 Activating DiffServ Activ ate DiffServ to apply marki ng rules or IEEE 80 2.1p priority mapping on the Swit ch . Click IP Application > DiffServ in the navigation panel to displa y the screen as shown. Figure 141 IP Ap plication > DiffServ The following table describes t he [...]

Chapter 29 Differe ntiated Services GS2200-24 User’s Guide 264 29.3.1 Configuring DSCP Settings T o change the DSCP-IEEE 802. 1p mapping click the DSCP Setting link in the DiffServ screen to display the screen as shown next. Figure 142 IP Ap plication > DiffServ > DSCP Setting The following table describes t he labels in this screen. T able[...]

GS2200-24 User’s Guide 265 C HAPTER 30 DHCP 30.1 DHCP Overview This chapter shows you how t o configure the DHCP feature. DHCP (Dynamic Host Configur ation Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP conf iguration at start-up from a server . Y ou can configure the Switch as a DHCP se rver or a DHCP rela y agent. [...]

Chapter 30 DHCP GS2200-24 User’s Guide 266 DHCP Configuration Options The DHCP configuration on the Swit ch is divided into Global and VLAN screens. The screen you should use for configurat ion depends on the DHCP services you want to offer th e DHCP clients on y our network. Choose the config urati on screen based on the following criteria: • [...]

Chapter 30 DHCP GS2200-24 User’s Guide 267 The following describes the DHCP rela y information that the S witch sends to the DHCP server: 30.2 DHCP S t atus Click IP Application > DHCP in the na vigation panel. The DHCP Sta tus screen displays. Figure 143 IP Application > DHCP S tatus The following table describes t he labels in this screen[...]

Chapter 30 DHCP GS2200-24 User’s Guide 268 30.3 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP Relay screen. Click IP Application > DHCP in the navigation panel and click the Global link to d is p lay th e sc re en as shown. Figure 144 IP Application > DHCP > Global The following table describes t he labels in this[...]

Chapter 30 DHCP GS2200-24 User’s Guide 269 30.3.1 Global DHCP Relay Configuration Example The following figure shows a network exam ple where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. Figure 145 Global DHCP Relay Network Example Configur[...]

Chapter 30 DHCP GS2200-24 User’s Guide 270 Note: Y ou must set up a management IP address for each VLAN th at you want to configure DHCP settings for on the Switch. See Section 8.6 on page 80 for information on how to set up management IP addresses for VLANs. Figure 147 IP Application > DHCP > VLAN The following table describes t he labels [...]

Chapter 30 DHCP GS2200-24 User’s Guide 271 30.4.1 Example: DHCP Relay for T wo VLANs The following example dis plays two VLANs (VIDs 1 and 2) for a campus network. T wo DHCP servers are installed to serve each VLAN. The system is set up to forward DHCP request s from the dormitor y rooms (VL AN 1) to the DHCP serv er with an IP address of 192.168[...]

Chapter 30 DHCP GS2200-24 User’s Guide 272 For the example netw ork, configure the VLAN Setting screen as shown. Figure 149 DHCP Relay for T wo VL ANs Configuration Example[...]

273 P ART V Management Maintenance (275) Access Control (283) Diagnostic (305) Syslog (307) Cluster Management (311) MAC T able (319) ARP T able (323) Configure Clone (325)[...]

274[...]

GS2200-24 User’s Guide 275 C HAPTER 31 Maintenance 31.1 Overview This chapter explains how to confi gure the screens that let you maintain the firmware and configur ation files. 31.1.1 What Y ou Can Do •U s e t h e Mainte nance screen ( Section 31.2 on page 275 ) to upload the latest firmware. •U s e t h e Firmware Upgrade screen ( Section 31[...]

Chapter 31 Maintenance GS2200-24 User’s Guide 276 The following table describes t he labels in this screen. 31.2.1 Load Factory Default Follow the steps below to rese t the Switch bac k to th e fa ctory defau lts. 1 In the Maintenance screen, click the Click Here button next to Load Factory Default to clear all Switch c onfigur ation i nformation[...]

Chapter 31 Maintenance GS2200-24 User’s Guide 277 3 In the web configurator , click the Save button in the top of the screen to make the changes take effect. If y ou want to acce ss the S witch web configur ator again, yo u may need to change the IP address of your c om p ut er t o b e in th e s a me su b ne t a s that of the default S witch IP a[...]

Chapter 31 Maintenance GS2200-24 User’s Guide 278 31.3 Firmware Upgrade Use the following screen to upgrade yo ur Switch to t he latest firmware. Make sure you have downloaded (and unzipped) the correct model firmware and version to y our computer before uploading to the device. Be sure to upload the correct m odel firmware as uploading the wrong[...]

Chapter 31 Maintenance GS2200-24 User’s Guide 279 T ype the path and file name of t he config uration fil e you wish to restore in the File Path text box or click Browse to locate it. After you hav e specified the fil e , click Restore . "config" is the name of the c onfiguration file on the S w itch, so your backup configur ation file [...]

Chapter 31 Maintenance GS2200-24 User’s Guide 280 31.6 T echnical Reference This section provi des technical background information on the topics discussed in this chapter . 31.6.1 FTP Command Line This section shows some examples of uplo ading to or downloading files from t he Switch using FTP commands. First, understand the filename conv ention[...]

Chapter 31 Maintenance GS2200-24 User’s Guide 281 Be sure to upload the correct m odel firmware as uploading the wrong model firmware m ay damage your device. 31.6.3 FTP Command Line Procedure 1 Launch the F TP client on your computer . 2 Enter open , followed by a space and the IP address of your Sw it ch. 3 Press [ENTER] when prompted for a use[...]

Chapter 31 Maintenance GS2200-24 User’s Guide 282 31.6.5 FTP Restrictions FTP will no t work wh en: • FTP service is disabled in the Service Access Control screen. • The IP address(es) i n the Re mote Management screen does not match the client IP address. If it do es not match, the S witch will disconnect the FTP session immediat ely . Initi[...]

GS2200-24 User’s Guide 283 C HAPTER 32 Access Control 32.1 Overview This chapter describes how to c ontrol access to the S witch. A console port and FTP are allowed one se ssion ea ch , T elnet and SSH share nine sessions, up to fiv e W eb sessions (fiv e different user names and password s) and/ or limitless SNMP access control sessions are allo[...]

Chapter 32 Access Control GS2200-24 User’s Guide 284 32.2 The Access Control Main Screen Use this screen to display the main screen. Click Management > Access Control in the na vigation panel to display the main screen as shown. Figure 156 Management > Access Contro l 32.3 Configuring SNMP Use this screen to config ure your SNMP settings. C[...]

Chapter 32 Access Control GS2200-24 User’s Guide 285 The following table describes t he labels in this screen. T able 90 Management > Access Control > SNMP LABEL DESCRIPTION General Setting Use this section to specify the SNMP version and community (password) val ue s . V ersion Select the SNMP version for the Switch. The SNMP version on th[...]

Chapter 32 Access Control GS2200-24 User’s Guide 286 Security Level Select whether you w ant to implemen t authentication and/or encryption for SNMP communication from this user . Choose: • noauth -to use the username as the password string to send to the SNMP manager . This is equivale nt to the Get, Set and T rap Community in SNMP v2c. This i[...]

Chapter 32 Access Control GS2200-24 User’s Guide 287 32.4 Configuring SNMP T rap Group Use the Trap Group scre en to specify th e types of SNMP traps that should be sent to each SNMP manager . Click Management > Access Control > SNMP > Tr ap Group to view the screen as shown. Figure 158 Manageme nt > Access Control > SNMP > T ra[...]

Chapter 32 Access Control GS2200-24 User’s Guide 288 32.5 Setting Up Login Account s Use this screen to assig n which users can access the Switch via web configur ator at any one time. Up t o f i ve p eo p l e (o n e a d m in i s t ra to r a n d four non-administr ators) may access the Switch via web configur ator at any one ti me. • An adminis[...]

Chapter 32 Access Control GS2200-24 User’s Guide 289 The following table describes t he labels in this screen. 32.6 Service Port Acce ss Control Use this screen to decide what s ervices you may use to acc ess the Switch. Service Access Control allows you to decide what services you may use to access the Switch. Y ou may also change the defa ult s[...]

Chapter 32 Access Control GS2200-24 User’s Guide 290 later). Cl ick Management > Access Control > Service Access Control to view the screen as shown. Figure 160 Manageme nt > Access Control > Service Access Control The following table describes t he fields in this screen. 32.7 Remote Management Use this screen to specify a group of on[...]

Chapter 32 Access Control GS2200-24 User’s Guide 291 Y ou can specify a group of one or more “trus ted computers” from which an administr ator may use a service to manage the S witch. Click Access Contr ol to return to the Access Control screen. Figure 161 Management > Access Contro l > Remote Management The following table describes t [...]

Chapter 32 Access Control GS2200-24 User’s Guide 292 32.8.1 About SNMP Simple Network Manageme nt Protocol (SNM P) is an application layer protocol used to manage and monitor T CP/IP-based devices. SNMP is used to exchange management information between the network manage ment system (NMS) and a network element (NE). A manager station can manage [...]

Chapter 32 Access Control GS2200-24 User’s Guide 293 SNMP itself is a simple request /respon se protocol based on the manager/agent model. The manager issues a request an d the agent returns responses using the following protocol operations: SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authe[...]

Chapter 32 Access Control GS2200-24 User’s Guide 294 An OID (Object ID) that begins with “ 1.3.6.1.4.1.890.1.5.8 ” is de fined in pri vate MIBs. Otherwis e, it is a st and a rd MIB OID. T able 96 SNMP System Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION coldstart coldStart 1.3.6.1.6.3.1.1.5.1 This trap is sent when the Switch is turned on. [...]

Chapter 32 Access Control GS2200-24 User’s Guide 295 poe PwrPortF ailedEventOn 1.3.6.1.4.1.890.1.5.8.5 6.2 7.2.1 This trap is sent when the port is turned off to supply power due to over loading, over system buget, or short circuit. PwrPortF ailedEventClear 1.3.6.1.4.1.890.1.5.8.56.2 7.2.2 This trap is sent when the port returns to the normal sta[...]

Chapter 32 Access Control GS2200-24 User’s Guide 296 transceiver- ddmi transceiverddmiEventOn 1.3.6.1.4.1.890.1.5.8.55 .27 .2.1 This trap is sent when one of the device operating parameters (such as transceiv er temperature, laser bias current, transmitted optical power , received optical power and transceiver supply voltage) is above or below a [...]

Chapter 32 Access Control GS2200-24 User’s Guide 297 T able 99 SNMP IP Traps OPTION OBJEC T LA BEL OBJECT ID DESCRIPTION ping pingProbeF ailed 1.3.6.1.2.1.80.0.1 Th i s trap is sent when a single ping probe fails. pingT estF ailed 1.3.6.1.2.1.80.0.2 This trap is sent when a ping test (consisting of a series of ping probes) fails. pingT estComplet[...]

Chapter 32 Access Control GS2200-24 User’s Guide 298 32.8.2 SSH Overview Unlike T elnet or F TP , which transmit data in clear text, S S H (Secure Shell) is a secure communication protocol that combin es authentication and data encryption to provide secure encrypted communication bet ween two hosts over an unsecured network. Figure 163 SSH Commun[...]

Chapter 32 Access Control GS2200-24 User’s Guide 299 32.8.2.1 How SSH works The following table summarizes how a secure connection is established between two remot e hosts. Figure 164 How SSH W orks 1 Host Identificat io n The SSH client send s a connection request to the SSH server . The server identifies itself with a host k ey . The client enc[...]

Chapter 32 Access Control GS2200-24 User’s Guide 300 32.8.2.2 SSH Implement ation on the Switch Y our Switch supports S SH version 2 using RSA authenti cation and three encryption methods (DES , 3DES and Blowfi sh). The SSH server is implemented on the Switch for remote management and fi le tr ansfer on port 22. Only one SSH connection is allowed[...]

Chapter 32 Access Control GS2200-24 User’s Guide 301 2 HT TP connection requests from a web brow ser go to port 80 (by default) on the Switch’ s WS (w eb server). Figure 165 HTTPS Implement ation Note: If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempt s. 32.8.3.1 HTTPS Example If you ha[...]

Chapter 32 Access Control GS2200-24 User’s Guide 302 Net scape Navigator Warning Messages When you attempt to access the Switch HT TPS server , a Website Certified by an Unknown Authority screen pops up asking if you trust the server certificat e. Click Examine Certificate if you w ant to verify that the certificate is from the Swit ch . If Accep[...]

Chapter 32 Access Control GS2200-24 User’s Guide 303 32.8.3.2 The Main Screen After you accept the certifi cate and ente r the login username and password, the Switch main screen appears. The l ock displayed in t he bottom right of the browser status bar denotes a secure connection. Figure 169 Example: Lock Denoting a Secure Conn ection example[...]

Chapter 32 Access Control GS2200-24 User’s Guide 304[...]

GS2200-24 User’s Guide 305 C HAPTER 33 Diagnostic 33.1 Overview This chapter explains the Diagnostic screen. Use the Diagnostic screen ( Section 33.2 on page 305 ) to check system logs, ping IP addresses or perform port tests. 33.2 Diagnostic Click Management > Diagnostic in the navigation pan el to open t his screen. U se this screen to check[...]

Chapter 33 Diagnostic GS2200-24 User’s Guide 306 The following table describes t he labels in this screen. T able 101 Management > Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of ev ents in the multi-line text box. Click Cl ear to empty the text box and reset the syslog entry . IP Ping T ype the IP address of a device[...]

GS2200-24 User’s Guide 307 C HAPTER 34 Syslog 34.1 Overview This chapter explains the syslog screens. The syslog protocol allows devices to send event notification messages across an IP network to sy s lo g servers that col l e ct the event messages. A sys log-enabled device can generate a syslog message and send it to a syslog server . Syslog is[...]

Chapter 34 Sy slog GS2200-24 User’s Guide 308 34.2 Syslog Setup Use this screen to configure the device’ s system logging settings. Click Management > Syslog in the navigation panel to displa y this screen. The syslog feature sends logs to an external sysl og server . Figure 171 Manageme nt > Syslog The following table describes t he labe[...]

Chapter 34 Syslog GS2200-24 User’s Guide 309 34.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to vie w the screen as shown next. Use this screen to configure a list of ext ernal syslog servers. Figure 172 Management > Syslog > Syslog Server Setup The following table describes t he labels in this screen. T able [...]

Chapter 34 Sy slog GS2200-24 User’s Guide 310[...]

GS2200-24 User’s Guide 31 1 C HAPTER 35 Cluster Management 35.1 Overview This chapter introduces cluster management. Cluster Management allows you to manage switches through one Sw itch, called the cluster manager . The switches must be directly connected and be in the same VLAN group so as to be able to co mmunicate with one another . T able 105[...]

Chapter 35 Clust er Managem en t GS2200-24 User’s Guide 312 In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are clust er members. Figure 173 Clustering App lication Example 35.1.1 What Y ou Can Do •U s e t h e Cluster Management screen ( Section 35.2 on page 31[...]

Chapter 35 Clust er Managem en t GS2200-24 User’s Guide 313 Note: A cluster can only have one manager . Figure 174 Manageme nt > Cluster Management: S tatu s The following table describes t he labels in this screen. T able 106 Management > Cluster Management: Status LABEL DESCRIPTION Status This field displays the role of this Switch within[...]

Chapter 35 Clust er Managem en t GS2200-24 User’s Guide 314 35.3 Clustering Management Configuration Use this screen to configure clustering management. Click Management > Cluster Management > Configuration to display the next screen. Figure 175 Management > Cluster Manag ement > Configuration The following table describes t he labels[...]

Chapter 35 Clust er Managem en t GS2200-24 User’s Guide 315 VID This is the VLAN ID and is only applicable if the Switch is set to 802.1Q VLAN. All switches must be directly connected and in the same VLAN group to belong to the same cluster . Switches that are not in the same VLAN group are not visible in the Clustering Cand idates list. This fie[...]

Chapter 35 Clust er Managem en t GS2200-24 User’s Guide 316 35.4 T echnical Reference This section provi des technical background information on the topics discussed in this chapter . 35.4.1 Cluster Member Switch Management Go to the Clustering Management St atus screen of the cluster manager switch and then select an Index hyperlink from the lis[...]

Chapter 35 Clust er Managem en t GS2200-24 User’s Guide 317 35.4.1.1 Uploading Firmware to a Cluster Member Switch Y ou can use FTP to upload firmware to a cluster member switch through the cluster manager swi tch as sh own in the following exampl e. Figure 177 Example: Uploading Firmware to a Cluster Memb er Switch The following table explains s[...]

Chapter 35 Clust er Managem en t GS2200-24 User’s Guide 318[...]

GS2200-24 User’s Guide 319 C HAPTER 36 MAC Table 36.1 Overview This chapter introduces the MAC Table sc reen. The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forw arded or fil tered ac ross the Switch’ s ports. It shows what device MAC address, belonging to what VL AN group (if any) is forw arded t [...]

Chapter 36 M AC Ta b le GS2200-24 User’s Guide 320 • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the fr ame. Figure 178 MAC T able Flowchart 36.2 V iewing the MAC T able Use this screen to check whether the MAC add re ss is dynamic or static . C[...]

Chapter 36 MAC Table GS2200-24 User’s Guide 321 The following table describes t he labels in this screen. T able 109 Management > MAC Table LABEL DESCRIPTION Condition Select one of the buttons and click Search to only display the data which matches the criteria you specified. Select All to display any entry in the MAC table of the Switch. Sel[...]

Chapter 36 M AC Ta b le GS2200-24 User’s Guide 322[...]

GS2200-24 User’s Guide 323 C HAPTER 37 ARP Table 37.1 Overview This chapter introduces ARP T able. Address Resolution Protocol (ARP) is a pr otocol for mapping an Internet Protocol address (IP address) to a physi c al machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 b[...]

Chapter 37 ARP Tab le GS2200-24 User’s Guide 324 37.2 V iewing the ARP T able Use the ARP table to view IP-to-MAC address mapping(s). Click Management > ARP Table in t he navigation panel to open the following screen. Figure 180 Management > ARP T able The following table describes t he labels in this screen. T able 1 10 Management > ARP[...]

GS2200-24 User’s Guide 325 C HAPTER 38 Configure Clone 38.1 Overview This chapter shows you how y ou can copy the settings of one port onto other ports. Use the Configure Clone screen ( Section 38.2 on page 325 ) to copy the basic and advanc ed settings from a sourc e port to a destination port or ports . 38.2 Configure Clone Cloning allows yo u [...]

Chapter 38 Con fig ur e Clo ne GS2200-24 User’s Guide 326 The following table describes t he labels in this screen. T able 1 1 1 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Po r t Enter the source port under the Sourc e label. This port’s attributes are copied. Enter the destination port or ports under the Destination [...]

327 P ART VI T roubleshooting & Product S p ecifications T roubleshooting (329) Product Specifications (333)[...]

328[...]

GS2200-24 User’s Guide 329 C HAPTER 39 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • Switch Access and L ogin • Switch Configur ation 39.1 Power , Hardware Connections, and LEDs The[...]

Chapter 39 Tro u blesh oo tin g GS2200-24 User’s Guide 330 1 Make sure you understand the n ormal behavior of the LED. See Section 3.3 on page 38 . 2 Check the hardware connections. See Section 3 9.1 on page 329 . 3 Inspect your cables for damage. Cont act the vendor to replace an y damaged cables. 4 Disconnect and re-connect the powe r adaptor o[...]

Chapter 39 Troubleshooting GS2200-24 User’s Guide 331 • If you c hanged the IP address and hav e forgotten it, see the troubl eshooting suggestions for I forgot the IP address for the Swit ch. 2 Check the hardware connections, and ma k e sure the LEDs are beha v ing as expected. See Section 3.3 on page 38 . 3 Make s u r e you r I nter net br ow[...]

Chapter 39 Tro u blesh oo tin g GS2200-24 User’s Guide 332 In order to use the web configurator you need to allow: • W eb browser pop-up wind ows from your device. • Jav aScripts (enabled by default). • Jav a permissions (enabled by default). I cannot see some of Advanced Application submenus at the bottom of the navigation panel. The recom[...]

GS2200-24 User’s Guide 333 C HAPTER 40 Product Specifications The following tables summarize the Swit ch ’ s hardware and firm ware f eature s. T able 1 12 Hardware Specifications SPECIFICATION DESCRIPTION Dimensions 1U and standard 19” r ack mountable GS2200-24: 173 mm GS2200-24P: 310 depth W eight GS2200-24 : 2.5 Kg GS2200-24P : 4.75 Kg P o[...]

Chapter 40 Product Specifications GS2200-24 User’s Guide 334 LEDs Per switch: PWR, SYS, ALM GS2200-24: Per GE Ethernet RJ-45 100/1000 port: LNK/ACT , FDX GS2200-24P: Per GE P oE Ethernet RJ-4 5 100/1000 port: LNK/ ACT , PoE Per m ini-GBIC slot: LNK, ACT Per 1000BASE- T RJ-45 port (in dual personality interface): LNK/ ACT , FDX Operating Environme[...]

Chapter 40 Product Specifications GS2200-24 User’s Guide 335 Differentiated Services (DiffServ) With DiffServ , the Switch marks packets so that they receive specific per-hop treatment at DiffServ-compliant network devices along the route based on the application types and traffic flow . Classifier and Policy Y ou can create a policy to define ac[...]

Chapter 40 Product Specifications GS2200-24 User’s Guide 336 P ort Cloning Use the port cloning feature to copy the settings you configure on one port to another port or ports. Syslog The S witch can generate syslog messages an d send it to a syslog server . Firmware Upgr ade Download new firmware (when av ailable) from the Z yXEL web site and us[...]

Chapter 40 Product Specifications GS2200-24 User’s Guide 337 QoS IEEE 802.1p with 8 CoS per port 802.3x flow control SPQ,WFQ, or SPQ/WFQ combination capable Rule-based bandwidth control (ingress tr affic metering/dropping 64Kb stepping) Rule-based traffic mirroring IGMP snooping (IGMP v1/v2/v3 , 16 VLAN maximum - use r configurable) DSCP to 802.1[...]

Chapter 40 Product Specifications GS2200-24 User’s Guide 338 The following list, which is not exhaust ive , ill ustrat es the standards supported in the Switch. Security Static MAC address filtering Static MAC address forwarding MAC Freeze IEEE 802.1x port-based authentication Limiting number of dynamic MAC addresses per port SSH v 1/v 2 SSL Mult[...]

Chapter 40 Product Specifications GS2200-24 User’s Guide 339 RFC 2674 P-BRIDGE-MIB, Q-BRIDGE-MIB RFC 2865 RADIUS - V endor Specific Attribute RFC 2925 PING-MIB fand TRACEROUTE-MIB RFC 3046 DHCP Relay RFC 3164 Syslog RFC 3376 Internet Group Management Protocol, V ersion 3 RFC 3414 User-based Security Model (USM) for version 3 of the Simple Network[...]

Chapter 40 Product Specifications GS2200-24 User’s Guide 340[...]

341 P ART VII Appendices and Index Changing a Fuse (343) Common Services (345) Legal Information (349) Index (353)[...]

342[...]

GS2200-24 User’s Guide 343 A PPENDIX A Changing a Fuse This appendix shows you how to remo v e and install fuses for the Switch. If you use a fuse other than an included fuse, make sure it matches the fuse specifications in the chapter on produ ct specifications. Removing a Fuse Disconnect all power from the Sw itch before you begin this procedur[...]

Appendix A Changing a Fuse GS2200-24 User’s Guide 344[...]

GS2200-24 User’s Guide 345 A PPENDIX B Common Services The following table lists some commonl y -used services and their ass ociated protocols and port numbers. F or a comprehe nsiv e list of p ort numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, descrip tive[...]

Appendix B Com mon Servic es GS2200-24 User’s Guide 346 ESP (IPSEC_TUNNEL) User-Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finge r is a UNIX or Internet related command that can be used to find out if a user is logged on. FTP TCP TCP 20 21 File T ransfer Program, a progr am to en[...]

Appendix B Common Services GS2200-24 User’s Guide 347 POP3 TCP 11 0 Post Office Protocol v ersion 3 lets a client computer get e-mail from a POP3 server through a tempor ary connection (TCP/IP or other). PPTP TC P 1723 Point -to-P oint T unneling Protocol enables secure transfer of data ov er public networks. This is the control channel. PPTP_TUN[...]

Appendix B Com mon Servic es GS2200-24 User’s Guide 348 TELNET TCP 23 T elnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over T CP/IP networks. Its primary function is to allow users to log into remote host systems. TFTP UDP 69 T rivial File T ransfer Protocol is an Internet file tran[...]

GS2200-24 User’s Guide 349 A PPENDIX C Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corporation. The contents of this publication ma y not be reproduced in any p art or as a whole, transcrib ed, stored in a retri eval syst em, t ran slated into an y language, or transmitted in an y form or by any me ans, electronic, mech[...]

Appendix C Lega l Inform a tio n GS2200-24 User’s Guide 350 • This dev ic e m u st accept any in terference received, including interference that may cause undesired operations. FCC W arning This device has been tested and found to comply with the limits for a Cl ass A digital switch, pursuant to Pa rt 15 of the FCC R u les. These limits are de[...]

Appendix C Legal Information GS2200-24 User’s Guide 351 Viewing Certifications 1 Go to http://www .zyxel.com . 2 Select your prod uct on the Z yXEL home page to go to that product's page. 3 Select the certification y ou wish to view from this page. ZyXEL Limited W arranty Z yXEL warr ants to the original end user ( p urchaser) that this pr o[...]

Appendix C Lega l Inform a tio n GS2200-24 User’s Guide 352[...]

Index GS2200-24 User’s Guide 353 Index Numerics 802.1P priority 85 A AAA 209 AAA (Authentication and Authorization) 209 access control limitations 283 login account 288 remote management 290 service port 289 SNMP 292 address learning, MAC 103 , 106 Address R esolution Protocol (ARP) 323 , 325 , 326 administrator password 289 age 137 aggregator ID[...]

Index GS2200-24 User’s Guide 354 cluster management 31 1 and switch passwords 315 cluster manager 31 1 , 314 cluster member 31 1 , 315 cluster member firmware upgr ade 317 network example 312 setup 314 specification 31 1 status 312 switch models 31 1 VID 315 web config urator 316 cluster manager 31 1 cluster member 31 1 Common and Internal Spanni[...]

Index GS2200-24 User’s Guide 355 filename convention, configur ation configuration file names 280 filtering 121 rules 121 filtering database, MAC table 319 firmware 75 upgrade 278 , 317 flow control 84 back pressure 84 IEEE802.3x 84 forwarding delay 137 frames tagged 102 untagged 102 front panel 33 FTP 280 file transfer procedure 281 restrictions[...]

Index GS2200-24 User’s Guide 356 IP source guard 221 , 222 ARP inspection 222 , 244 DHCP snooping 222 , 24 1 static bindings 222 IP subnet mask 82 L L2PT 251 access port 252 CDP 251 configuration 253 encapsulation 251 LACP 252 MAC address 251 mode 252 overview 251 PAg P 252 point to point 252 STP 251 tunnel port 252 UDLD 252 VTP 251 LACP 158 , 25[...]

Index GS2200-24 User’s Guide 357 MDIX (Media Dependent Interface Crossover) 36 MIB and SNMP 292 supported MIBs 293 MIB (Management Information Base) 292 mirroring ports 153 monitor port 154 mounting brackets 30 MRSTP status 134 MST ID 142 MST Instance, See MSTI 142 MST region 142 MSTI 142 MSTP 123 , 126 bridge ID 140 configuration 136 configurati[...]

Index GS2200-24 User’s Guide 358 port setup 83 port status 68 port VLAN ID, see PVID 102 port VLAN trunking 95 port-based VLAN 108 all connected 111 port isolation 111 settings wizard 111 ports diagnostics 306 mirroring 153 speed/duplex 84 standby 158 power volt age 75 power connector 38 power consumption 333 power specification 333 power status [...]

Index GS2200-24 User’s Guide 359 and security 293 authentication 286 communities 285 management model 292 manager 292 MIB 293 network components 292 object variables 292 protocol operations 293 security 286 setup 284 , 287 vers ion 3 293 versi ons supp orte d 292 SNMP traps 293 , 294 , 295 , 29 7 setup 287 supported 295 Spanning T ree Protocol, S[...]

Index GS2200-24 User’s Guide 360 time zone 77 Time (RFC-868) 77 time server 77 time service protocol 77 format 77 trademar ks 349 transceiver MultiSource Agreement (MSA) 36 transceivers 36 installation 37 remov al 37 traps destination 285 trunk group 157 trunking 157 example 164 trusted ports ARP inspection 245 DHCP snooping 242 tunnel protocol a[...]