ZyXEL Communications GS-3012F/3012 manual

www .zyxel.com GS-3012F/3012 Layer 2+ Gigabit Switch User ’ s Guide V ersion 3.80 7/2007 Edition 1 DEFAULT LOGIN IP Address http://1 92 .168.1.1 User Name admin Password 1234[...]

[...]

About This User's Guide GS-3012/GS- 3012F User’s Guid e 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the Switch using the web configurator . Y ou should have at leas t a basic knowledge of TCP/IP networking concepts and topology . Related Document ation • Quick Start Guide The Qu[...]

Document Conventions GS-3012/GS-3012F User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other important informati on (for example, other things you may need to configure or helpful [...]

Document Conventions GS-3012/GS- 3012F User’s Guid e 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The Switch icon is n ot an exact representation of your device. The Switch Computer Notebook computer Server DSLAM Firewall T ele phone Router[...]

Safety Warnings GS-3012/GS-3012F User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the[...]

Safety Warnings GS-3012/GS- 3012F User’s Guid e 7[...]

Safety Warnings GS-3012/GS-3012F User’s Guide 8[...]

Contents Overview GS-3012/GS- 3012F User’s Guid e 9 Contents Overview Introduction and Hardware ................................................ ................................................... 29 Getting to Know Y our Switch .............. ................ ................ ................ ................ ................ ..... .. 31 Basic C[...]

Contents Overview GS-3012/GS-3012F User’s Guide 10 Access Control ............... ................. ................ ................ ................ ............. ................ ... ........ 233 Diagnostic .............. ................ ................ ................ ............. ................ ................ ......... ............ 2[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 11 Table of Contents About This User's Guide ...................... .................................................................................. .. 3 Document Conventions.................................................................. ......................................... .4 Safet[...]

Table of Contents GS-3012/GS-3012F User’s Guide 12 Chapter 3 Hardware Overview.................................................... .......................................................... ... 41 3.1 Front Panel ........ ................ ............. ................ ................ ................ ................. ........ ........... 41 3.[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 13 7.4 Introduction to VLANs . ................ ................ ................ ................ ................ ................ .. ..... 73 7.5 Switch Setup Screen .............. ................ ................ ................ ................ ................ ...... .... 73 7.6 IP Setup .[...]

Table of Contents GS-3012/GS-3012F User’s Guide 14 1 1.1.3 STP Port S tates ......... ................ ................. ................ ................ ................ ........... 10 1 1 1.1.4 Multiple RSTP .................... ................ ................ ................ ................. ................ . 1 0 1 1 1.1.5 Multiple STP .[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 15 16.2.2 Activate MAC Authentica tion ..... ............. ................. ................ ............. ................ . 134 Chapter 17 Port Security............................................................... ................................................... .. ...... 137 17.1 About Po[...]

Table of Contents GS-3012/GS-3012F User’s Guide 16 21.6.2 MVR Modes ............................ ................ ................. ................ ................ ............. . 162 21.6.3 How MVR Works ............... ............. ................ ................ ................ ................ ........ 162 21.7 General MVR Configuration[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 17 Chapter 25 T wo Rate Three Color Marker ........................................................................................ ...... 207 25.1 DiffServ Overview ...... ................ ......... .... ................ ................ ................ ............. ....... .... 207 25.1.1 DSCP[...]

Table of Contents GS-3012/GS-3012F User’s Guide 18 28.6 Restore a Configuration File ....... ............. ................ ................ ................ ............. ........ 2 30 28.7 Backup a Configuration File ....... ................ ............. ................ ................ ................ ..... 23 0 28.8 FTP Command Line ......[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 19 32.1 Cluster Management S tatus Overview ................... ................ ................ ................ ........ 257 32.2 Cluster Management S tatus ... ................ ................ ............. ................ ................ ........... 258 32.2.1 Cluster Member Switch Managem[...]

Table of Contents GS-3012/GS-3012F User’s Guide 20[...]

List of Figures GS-3012/GS- 3012F User’s Guid e 21 List of Figures Figure 1 Backbone Application ....................... ................ ................ ................ .................... ..... .............. 32 Figure 2 Bridging Application ......... ......... .... ................ ................ ............. ................ ...........[...]

List of Figure s GS-3012/GS-3012F User’s Guide 22 Figure 39 Advanced Application > VL AN > VLAN Port Setting ... ................ ................ ................ .......... 89 Figure 40 Subnet Based VLAN App lication Example .................. ................ ................ ................ .......... 90 Figure 41 Advanced Application [...]

List of Figures GS-3012/GS- 3012F User’s Guid e 23 Figure 82 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN ............ ..... 159 Figure 83 Advanced Application > Mu lticast > Multicast Setting > IGMP Filt ering Profile ........ ........... 160 Figure 84 MVR Network Example ........... ...............[...]

List of Figure s GS-3012/GS-3012F User’s Guide 24 Figure 125 Global DHCP Relay Net work Example ........................ ................ ................ .................... . 222 Figure 126 DHCP Relay Configuration Example .. ............. ................ ................ ............. ................ ..... 2 22 Figure 127 IP Application >[...]

List of Tables GS-3012/GS- 3012F User’s Guid e 25 List of Tables T able 1 Front Panel Connec tions ............................ ................. ................ ................ ................ . ............ 42 T able 2 LED Des criptions ..... ................ ................ ................ ................. ................ ..............[...]

List of Tables GS-3012/GS-3012F User’s Guide 26 T able 39 Advanced Applicati on > Port Authent ication > 802.1x .. ................ ................ ................... ..... 134 T able 40 Advanced Applicat ion > Port Authenticati on > MAC Authentication ............................. ........ 135 T able 41 Advanced Application > Po[...]

List of Tables GS-3012/GS- 3012F User’s Guid e 27 T able 82 IP Application > DHCP > Global ... ................ ................... ................ ................ ................ .... . 221 T able 83 IP Application > DHCP > VLAN .......... ................ ................ ................ .................... .......... .... 223 [...]

List of Tables GS-3012/GS-3012F User’s Guide 28[...]

29 P ART I Introduction and Hardware Getting to Know Y our Switch (31) Hardware Installation and Connectio n (37) Hardware Overview (41)[...]

30[...]

GS-3012/GS- 3012F User’s Guid e 31 C HAPTER 1 Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction The GS-3012 and GS-3012F are laye r 2 stand-alone Gigabit Ethe rnet switches. The GS-3012 has 12 100/1000 Mbps RJ-45 ports and four mini-GBIC slots for optical uplinking. There are tw[...]

Chapter 1 Getting to Know Your Switch GS-3012/GS-3012F User’s Guide 32 Figure 1 Backbone Application 1.1.2 Bridging Example In this example application the Switch co nnects dif ferent company de partments ( RD and Sales ) to the corpora te backbone. It can al levi ate bandwidth contention and eliminate server and network bottlenecks. All users th[...]

Chapter 1 Getting to Kn ow Your Switch GS-3012/GS- 3012F User’s Guid e 33 Switching to higher-speed LANs such as A T M (Async hronous T ransmission Mode ) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring y our network and complex maintenance. The Switch can prov ide the [...]

Chapter 1 Getting to Know Your Switch GS-3012/GS-3012F User’s Guide 34 Figure 4 Shared Server Using VLAN Example 1.2 W ays to Manage the Switch Use any of the following meth ods to manage the Switch. • W eb Configurator . This is recommended for everyday management of the Switch using a (supported) web browser . See Chapter 4 on pa ge 49 . • [...]

35 P ART II Basic Configuration The W eb Configurator (49) Initial Setup Example (59) System Status and Port S tatistics (63) Basic Setting (69)[...]

36[...]

GS-3012/GS- 3012F User’s Guid e 37 C HAPTER 2 Hardware Installation and Connection This chapter shows you how to install and connect the Switch. 2.1 Inst allation Scenarios The Switch can be placed on a desktop or r ack-mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the brackets in a rack-mounted installation. &[...]

Chapter 2 Hardware Installation and Connection GS-3012/GS-3012F User’s Guide 38 Figure 5 Attaching Rubber Feet " Do NOT block the ventilation holes. Leave space between devices when stacking. 2.3 Mounting the Switch on a Rack The Switch can be mount ed on an EIA standard si ze, 19-inch rack or in a wiring closet with other equipment. Follow [...]

Chapter 2 Hard ware Installation an d Connection GS-3012/GS- 3012F User’s Guid e 39 Figure 6 Attaching the Mounting Brackets 2 Using a #2 Philips screwdriver , install the M3 flat head screws through the mounting bracket holes into the Switch. 3 Repeat steps 1 and 2 to install the second mounting br acket on the other side of the Switch. 4 Y ou m[...]

Chapter 2 Hardware Installation and Connection GS-3012/GS-3012F User’s Guide 40[...]

GS-3012/GS- 3012F User’s Guid e 41 C HAPTER 3 Hardware Overview This chapter describes the front panel and rear panel of the Switc h and shows you how to make the hardware conn ections. 3.1 Front Panel The following figure shows the front panel of the GS-301 2. The front panel contains the Switch LEDs, 8 RJ-45 gigabit ports, four dual personality[...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 42 The following table describes the po rt labels on the front panel. 3.1.1 Console Port For local management, you can use a computer w ith terminal emulation software configured to the following parameters: •V T 1 0 0 • T erminal emulation • 9600 bps • No parity , 8 data bits, 1 [...]

Chapter 3 Hardware Overview GS-3012/GS- 3012F User’s Guid e 43 Four of the 10 00Base-T Ethernet ports are p a ired with a m ini-GBIC slot to create a dual personality interface. The Switch uses up to one connection for each mini-GBIC and 1000Base-T Ethernet pair . The mini-GBIC slots hav e priority over the Gigabit ports. This means that if a min[...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 44 3.1.3.1 T ransceiver Install ation Use the following steps to install a mini-GBIC transceiver (SFP module). 1 Insert the transceiver into the slot with the exposed section of PCB board facing down. 2 Press the transceiver firmly until it clicks into place. 3 The Switch automatically de[...]

Chapter 3 Hardware Overview GS-3012/GS- 3012F User’s Guid e 45 Figure 14 T ransceiver Removal Example 3.1.4 Manage ment Port The MGMT (management) port is used for local mana gement. Connect directly to this port using an Ethernet cable. Y ou can configure the Switch via T eln et or the web configurator . The default IP address of the management [...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 46 T o connect the power to the AC power model, insert the female end of power cord to the power receptacle on the rear panel. Connect th e other end of the supplied power cord to a 100~240V AC/1.5A power outlet . Make sure that no objects obstruct the airflow of the fans (located on the [...]

Chapter 3 Hardware Overview GS-3012/GS- 3012F User’s Guid e 47 3.4 Configuring the Switch Y ou may use the embedded web configurator or co mmand line interface to configure the Switch. If you’re using the web configurator , you need Internet Explorer 5 .5 and later or Netscape Navigator 6 and later . Y ou can access the command line interface u[...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 48[...]

GS-3012/GS- 3012F User’s Guid e 49 C HAPTER 4 The Web Configurator This section introduces the con figuration and functions of the web config urator . 4.1 Introduction The web configurator is an HTML-based mana ge ment interface that a llows easy Switch setup and management via Interne t browser . Use In ternet Explorer 6.0 and later or Netscape [...]

Chapter 4 The Web Configurator GS-3012/GS-3012F User’s Guide 50 Figure 19 Web Configura t or: Login 4 Click OK to view the first w eb configurator screen. 4.3 The St atus Screen The St a t u s screen is the first screen that displa ys when you access the web co nfigurator . The following figure shows the navigat ing co mponents of a web configura[...]

Chapter 4 The Web Configurator GS-3012/GS- 3012F User’s Guid e 51 E - Click this link to display web help pages. Th e help pages provide d escriptions for all of the configuration screens. In the navigation panel, click a main l ink to reveal a list of submenu links. T able 3 Navigation Panel Sub-links Overvi ew BASIC SETTING ADVANCED APPLICATION[...]

Chapter 4 The Web Configurator GS-3012/GS-3012F User’s Guide 52 The following table lists the various web configurator screens within the sub-links. T able 4 Web Configurator Screen Sub-lin ks Details BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT System Info General Setup Switch Setup IP Setup Port Setup VLAN VLAN Port Setting Subn[...]

Chapter 4 The Web Configurator GS-3012/GS- 3012F User’s Guid e 53 The following table describes the links in the navigation panel. T able 5 Navigation Panel Links LINK DESCRIPTION Basic Settings System Info This link takes you to a scr een that displays general system and hardware monitoring information. General Setup Th is link takes you to a sc[...]

Chapter 4 The Web Configurator GS-3012/GS-3012F User’s Guide 54 4.3.1 Change Y our Password After you log in for the first time, it is reco mmended y ou change the default administrator password. Click Management > Access Control > Logins to display the next screen. IP Source Guard This link takes you to screens wh ere you can configure fil[...]

Chapter 4 The Web Configurator GS-3012/GS- 3012F User’s Guid e 55 Figure 21 Change Administr ator Login Password 4.4 Saving Y our Configuration When you are done mo difying the settings in a screen, click Apply to save your changes back to the run-time memory . Settings in the run-time memory are lost when the Switch’ s power is turned off. Cli[...]

Chapter 4 The Web Configurator GS-3012/GS-3012F User’s Guide 56 " Be careful not to lock y ourself and others out of the Switch. If you do lock yourself out, try using out-of-band management (via the manage ment port) to configure the Switch. 4.6 Resetting the Switch If you lock yourself (and others) from the Switc h or for get the administ [...]

Chapter 4 The Web Configurator GS-3012/GS- 3012F User’s Guid e 57 Figure 22 Resetting the Switch: V ia the Console Port The Switch is now reinitialized wi th a defau lt configuration file including the default password of “1234”. 4.7 Logging Out of the W eb Configurator Click Logout in a screen to exit the web configurator . Y ou have to log [...]

Chapter 4 The Web Configurator GS-3012/GS-3012F User’s Guide 58[...]

GS-3012/GS- 3012F User’s Guid e 59 C HAPTER 5 Initial Setup Example This chapter shows how to set up the Switch for an example network. 5.1 Overview The following lists the configuration steps for the initial setup: • Create a V LAN • Set port VLAN ID • Configure the Switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast[...]

Chapter 5 Initial Set up Example GS-3012/GS-3012F User’s Guide 60 1 Click Advanced App lication > VLAN in the navigation panel and click the St a t i c VLAN link. 2 In the S tatic VLAN screen, select ACTIVE , enter a descriptive name in the Na me field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field [...]

Chapter 5 Initial Set up Example GS-3012/GS- 3012F User’s Guid e 61 Figure 25 Initial Setup Network Example: Port VID 1 Click Advanced Applications > VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 1 and click Apply to save your changes back to the run- time memory . Settings in the run[...]

Chapter 5 Initial Set up Example GS-3012/GS-3012F User’s Guide 62 1 Connect your computer to any Ethernet port on the Switch. Make su re your computer is in the same subnet as the Switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurat or . Se e Section 4.2 on page 49 for more[...]

GS-3012/GS- 3012F User’s Guid e 63 C HAPTER 6 System Status and Port Statistics This chapter describes the system status (web configurator ho me page) and port details screens. 6.1 Overview The home screen of the web configurato r displays a port statistical summary with links to each port showing statistical details. 6.2 Port S t atus Summary T [...]

Chapter 6 S ystem Status and Port Statist ics GS-3012/GS-3012F User’s Guide 64 6.2.1 St atus: Port Details Click a number in the Port column in the St a t u s screen to display indivi dual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. Link This field displays the speed (eith[...]

Chapter 6 System Status and Port Statistics GS-3012/GS- 3012F User’s Guid e 65 Figure 28 S tatus > Port Det ails The following table describes the labels in this screen. T able 7 Status: Port Details LABEL DESCRIPTION Port Info Port NO. This field displays the port number you a re viewing. Name T his field displays the name of the port. Link T[...]

Chapter 6 S ystem Status and Port Statist ics GS-3012/GS-3012F User’s Guide 66 Up T ime This field shows the total amount of time the connection has been up. Tx Packet The following fields display detailed information about packets transmitted. TX Packet This field shows the number of good packet s (uni cast, multicast and broadcast) transmitted.[...]

Chapter 6 System Status and Port Statistics GS-3012/GS- 3012F User’s Guid e 67 512-1023 This field shows th e number of packets (incl uding bad packets) received that were between 512 and 1023 octets in length . 1024- 1518 This field shows the number of packets (including bad packet s) received tha t were between 1024 and 1518 octe ts in length. [...]

Chapter 6 S ystem Status and Port Statist ics GS-3012/GS-3012F User’s Guide 68[...]

GS-3012/GS- 3012F User’s Guid e 69 C HAPTER 7 Basic Setting This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. 7.1 Overview The System Info screen displays general Switch inform ation (such as firmware version number) and hardware polling inform ation (such as fan speeds). The [...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 70 Figure 29 Basic Setting > System Info The following table describes the labels in this screen. T able 8 Basic Setting > System Info LABEL DESCRIPTION System Name This field displ ays th e descriptive name of the Switch for identificati on purposes. ZyNOS F/W Ve r s i o n This field di[...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 71 7.3 General Setup Use this screen to configure general settings such as the system name and time. Cl ick Basic Setting > General Setup in the navigation panel to di splay the screen as shown. Figure 30 Basic Setting > General Setup Current This field displays this fan's current[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 72 The following table describes the labels in this screen. T able 9 Basic Setting > General S etup LABEL DESCRIPTION System Name Choose a descriptive name fo r identifi cati on purposes. This name consists of up to 64 printable characters; spaces are allowed. Location Enter the geographic [...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 73 7.4 Introduction to VLANs A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Device s on a logical network belong to one group. A device can belong to more than one group. W ith VLAN, a device cannot directly talk to or hear fr[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 74 Figure 31 Basic Setting > Switch Setup The following table describes the labels in this screen. T able 10 Basic Setting > Switch Setup LABEL DESCRIPTION VLAN T ype Choose 802.1Q or Por t Based . The VLAN Setup screen changes depending on whether you choose 802.1Q VLAN type or Port Bas[...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 75 7.6 IP Setup Use the IP Setup screen to configure the Switch IP ad dress, default gateway devic e, the default domain name serv er and the manageme nt VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic. 7.6.1 Manage ment IP Address[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 76 Figure 32 Basic Setting > IP Setup The following table describes the labels in this screen. Ta b l e 11 Basic Setting > IP Setup LABEL DESCRIPTION Domain Name Serve r DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. Enter a domain n[...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 77 IP Address Enter the IP address of your Sw itch in dotted decimal notation for exa mple 192.168.1.1. IP Subnet Mask Enter the IP subnet mask of your Switch in dotted de cimal notation for example 255.255.255.0. Default Ga teway Enter the IP addres s of the default outgoing g atewa y in do[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 78 7.7 Port Setup Use this screen to configure Switch port settings.Click Basic Setting > Port Setup in the navigation panel to di splay the configuration screen. Figure 33 Basic Setting > Port Setup The following table describes the labels in this screen. Delete Check the management IP [...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 79 S peed/Duplex Sel ect the speed and the duplex mode of the Ethernet connec tion on this port. Choices are Auto , 10M/Half Duplex , 10M/Full Duplex , 1 00M/Half Duplex , 100 M/ Full Duplex and 1000M/Full Duplex . Selecting Auto (auto-negotiation) allows one port to negotiate with a peer po[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 80[...]

81 P ART III Advanced VLAN (83) Stat ic MAC Forward Setup (95) Filtering (97) Spanning T ree Protocol (99) Bandwidth Control (1 17) Broadcast Storm Con trol (119 ) Mirroring (121) Link Aggregation (123) Port Authentication (131) Port Security (137) Classifier (141) Policy Rule (147) Queuing Method (153) Multicast (155) Authentication & Ac count[...]

82[...]

GS-3012/GS- 3012F User’s Guid e 83 C HAPTER 8 VLAN The type of screen you see here depends o n the VLAN T y pe you selected in the Switch Setup screen. This chapter shows you how to conf igure 802.1Q tagge d and port-based VLANs. 8.1 Introduction to IEEE 802.1Q T agged VLANs A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identi[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 84 8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to auto matically register VLAN membership acros s switches. 8.2.1 GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de- register attribute values with other GARP par ticipants within a bri[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 85 8.3 Port VLAN T runking Enable VLAN T runking on a port to allow frames b elonging to unknown VLAN groups to pass through that port. This is useful if yo u want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices. Refer to the following fig[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 86 8.5.1 St atic VLAN St atus See Section 8.1 on page 8 3 for more information on Stat ic VLAN. Click Advanced Application > VLAN from the navigation panel to display the VLAN S tatus screen as shown next. Figure 36 Advanced Application > VLAN: VLAN S tatus The following table describes the label[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 87 The following table describes the labels in this screen. 8.5.3 Configure a St atic VLAN Use this screen to configure and view 80 2.1Q VLAN parameters for the Switch. See Section 8.1 on page 83 for more information on static VLAN. T o configure a st atic VLAN, click St a t i c VLAN in the VLA N S t[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 88 The following table describes the rela ted labels in this screen. 8.5.4 Configure VLAN Port Settings Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q) settings on a port. See Section 8.1 on page 83 for more information on static VLAN. Click the VLAN Port Setting link in the[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 89 Figure 39 Advanced Application > VL AN > VLAN Port Setting The following table describes the labels in this screen. T able 17 Advanced Application > VL AN > VLAN Port Setting LABEL DESCRIPTION GVRP GVRP (GARP VLAN Registra tion Protocol) is a registra tion protocol tha t defines a way [...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 90 8.6 Subnet Based VLANs Subnet based VLANs allow yo u to group traffi c into logical VLANs based on the source IP subnet you specify . When a frame is received on a port , the Switch checks if a tag is added already and the IP subnet it came from. The unta gged packets from the same IP subnet ar e th[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 91 8.7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. " Subnet based VLAN applie s to un-tagged p ackets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 41 Advanced Application > VLAN >[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 92 8.8 Port-based VLAN Setup Port-based VLANs are VLANs where the packet forwarding de cision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each port. Therefore, if you wish to allow two subscriber ports to talk to eac[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 93 " In screens (such as IP Setup and Filtering ) that require a VID, you must enter 1 as the VID. The port-based VLAN setup sc reen is shown next. The CPU management port forms a VLAN with all Ethernet ports. 8.8.1 Configure a Port-based VLAN Select Port Based as the VLAN T ype in the Basic Set[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 94 Figure 43 Port Based VLAN Setu p (Port Isolation) The following table describes the labels in this screen. T able 19 Port Based VLAN Setup label Description Setting Wizard Choo se All connected or Po rt isolation . All connected means all p orts can communicate with each other , that is, there are n[...]

GS-3012/GS- 3012F User’s Guid e 95 C HAPTER 9 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 9.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of device s on your network. 9.2 Configuring S t atic MAC Forwarding A static MAC address is an address that has been ma n[...]

Chapter 9 Static MAC Forward Setup GS-3012/GS-3012F User’s Guide 96 The following table describes the labels in this screen. T able 20 Advanced Application > S tatic MAC Forwar ding LABEL DESCRIPTION Active Select this check box to activate your rule. Y ou may temporarily deactivate a rule without deleting it by clearing this check box. Name E[...]

GS-3012/GS- 3012F User’s Guid e 97 C HAPTER 10 Filtering This chapter discusses MAC address port filtering. 10.1 Configure a Filtering Rule Filtering means sifting traffic going through the Switch based on the sour ce and/or destination MAC addresses and VLAN group (ID). Click Advanced App lication > Filtering in the navigation panel to displa[...]

Chapter 10 Filtering GS-3012/GS-3012F User’s Guide 98 Action Select Discard source to drop the frames from the source MAC address (specified in the MAC field). The Switch can still s end frames to the MAC add ress. Select Discard destination to drop the frames to the destination MAC address (specified in the MAC address). The Switch can still re [...]

GS-3012/GS- 3012F User’s Guid e 99 C HAPTER 11 Spanning Tree Protocol The Switch supports Spanning T ree Protocol (STP), Rapid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protocol (MSTP) as defined in the followi ng standards. • IEEE 802.1D Span ning Tree P rotocol • IEEE 802.1w Rap id Spanning T ree Protocol • IEEE 802.1s Mu[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 100 Path cost is the cost of tr ansmitting a frame onto a LAN thro ugh that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost. On each bridge, the root port is the port thro ugh which thi[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 101 1 1.1.3 STP Port S tates STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding st ate so as to eliminate transient loops. 1 1.1.4 Multiple RSTP MRSTP (Multiple RSTP) is ZyXEL ’ s proprietary f[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 102 1 1.1.5 Multiple STP Multiple Spanning T ree Protocol (IEEE 802.1s ) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (S TP and RSTP) in networks to include the following features: • One Common and Internal S panning Tree [...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 103 Figure 48 MSTP Network Example 1 1.1.5.2 MST Region An MST region is a logical grouping of multiple network devices that appears as a single device to the rest of the network. Each MS TP-enabled device can only belong to one MST region. When BPDUs enter an MST region, externa[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 104 Figure 49 MSTIs in Different Regions 1 1.1.5.4 Common and Internal Sp anning T ree (CIST) A CIST represents the connectivity of the entire ne twork and it is equivalent to a spanning tree in an STP/RSTP . The CIST is the default MS T instance (MSTID 0). Any VLANs that are not m[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 105 Figure 51 Advanced Application > S panning T ree Protocol This screen differs depending on which STP mode (RSTP , MR STP or MSTP) you configure on the Switch. This screen is described in detail in the sectio n that follows the configuration section for each STP mode. Click[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 106 1 1.4 Configure Rapid S pa nning T ree Protocol Use this screen to conf igure RSTP settings, see Section 1 1.1 on pag e 99 for more information on RSTP . Click RSTP in the Advanced Application > Spanning T ree Pr otocol screen. Figure 53 Advanced Application > S pann ing [...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 107 1 1.5 Rapid S p anning T ree Protocol St atus Click Advanced App lication > Spanning T ree Protocol in the navigation panel t o display the status screen as shown next. See Section 1 1.1 on page 99 for more information on RSTP . Hello T i me This is the time interval in se[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 108 " This screen is only available afte r you activate RS TP on the Switch. Figure 54 Advanced Application > S pann ing Tree Protocol > S tatus: RSTP The following table describes the labels in this screen. T able 26 Advanced Application > Sp annin g T ree Pr otocol [...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 109 1 1.6 Configure Multiple Rapid S panning T ree Protocol T o configure MRSTP , click MRSTP in the Advanced Application > Spanning T r ee Pro tocol screen. Se e Section 1 1.1 on page 99 for more information on MRSTP . Figure 55 Advanced Application > S pan n ing Tree Prot[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 11 0 1 1.7 Multiple Rapid S p anning T ree Protocol St atus Click Advanced App lication > Spanning T ree Protocol in the navigation panel to display the status screen as shown next. See Section 11 .1 on page 99 for more information on MRSTP . " This screen is only available[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 111 Figure 56 Advanced Application > S panning T ree Protocol > S tatus: MRSTP The following table describes the labels in this screen. 1 1.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Spanning T ree Pr otoc[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 11 2 Figure 57 Advanced Application > S pann ing Tree Protocol > MSTP[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 11 3 The following table describes the labels in this screen. T able 29 Advanced Application > S panning T ree Protocol > M STP LABEL DESCRIPTION S tatus Click St a tu s to display the MSTP St atus screen (see Figure 58 on page 1 15 ). Active Select this check box to activa[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 11 4 1 1.9 Multiple S panning T ree Protocol St atus Click Advanced App lication > Spanning T ree Protocol in the navigation panel to display the status screen as shown next. See Section 1 1.1.5 on pa ge 102 for more information on MSTP . VLAN Range Enter the start of the VLAN I[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 11 5 " This screen is only available afte r you activate MSTP on the Switch. Figure 58 Advanced Application > S panning T ree Protocol > S tatus: MSTP The following table describes the labels in this screen. T able 30 Advanced Application > S panning T r ee Protocol[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 11 6 Forwarding Delay (secon d) This is the time (in seconds) the root swit ch will wait before changing states (that is, listening to learning to forwarding ). Cost to Bridge This is the p ath cost from the root port on this Switch to the root switch. Port ID This is the priority [...]

GS-3012/GS- 3012F User’s Guid e 11 7 C HAPTER 12 Bandwidth Control This chapter shows you h ow you can cap the maximum bandwi dth using the Bandwidth Control screen. 12.1 Bandwid th Control Overview Bandwidth control mean s defining a maximum allowable bandwidth for incoming and/or out- going traf fic flows on a port. 12.1.1 CIR and PIR The Commi[...]

Chapter 12 Bandwidth Control GS-3012/GS-3012F User’s Guide 11 8 Figure 59 Advanced Application > Bandwidth Control The following table describes the re lated labels in this screen. T able 31 Advanced Application > Bandwidth Control LABEL DESCRIPTION Active Select this check box to enable bandwidth control on th e Switch. Port This field dis[...]

GS-3012/GS- 3012F User’s Guid e 11 9 C HAPTER 13 Broadcast Storm Control This chapter introduces and sh ows you how to configure the broadcast storm co ntrol feature. 13.1 Broadcast S torm Control Setup Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Swit ch receives per second on[...]

Chapter 13 Broadcast Storm Control GS-3012/GS-3012F User’s Guide 120 The following table describes the labels in this screen. T able 32 Advanced Application > Broadcast S t orm Contro l LABEL DESCRIPTION Active Select this check box to enable traf fic storm control on the Switch. Clear this check box to disable this feature. Port This field di[...]

GS-3012/GS- 3012F User’s Guid e 121 C HAPTER 14 Mirroring This chapter discusses port mirroring setup screens. 14.1 Port Mirroring Setup Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffi c to) in order that you can examine the traffi c from the monitor port without interference. Click Advanced App li[...]

Chapter 14 Mirr oring GS-3012/GS-3012F User’s Guide 122 The following table describes the labels in this screen. T able 33 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this chec k box to activate port mirroring on the Switch. Clear this check box to disable the featu re. Monitor Port The monitor port is the port you copy th[...]

GS-3012/GS- 3012F User’s Guid e 123 C HAPTER 15 Link Aggregation This chapter shows you how to logically aggreg ate physical links to form one logical, high er- bandwidth link. 15.1 Link Aggregation Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher -c apacity link. Y ou may want to trunk ports if for e[...]

Chapter 15 Link Aggregation GS-3012/GS-3012F User’s Guide 124 • Y ou must connect all ports point-to-point to the same Ethernet sw itch and configure the ports for LACP trunking. • LACP only works on full-duplex links. • All ports in the same trunk group must have the same media type, speed, duplex mode and flow control settings. Configure [...]

Chapter 15 Link Aggregation GS-3012/GS- 3012F User’s Guid e 125 15.4 Link Aggregation Setting Click Advanced App lication > Link Aggregation > Link Aggr egation Setting to display the screen shown next. See Section 15.1 on p age 123 for more information on link aggregation. Figure 63 Advanced Application > Link Aggre gation > Link Agg[...]

Chapter 15 Link Aggregation GS-3012/GS-3012F User’s Guide 126 The following table describes the labels in this screen. 15.5 Link Aggregation Control Protocol Click Advanced App lication > Link Aggregation > Link Aggr egation Setting > LACP to display the screen shown next. See Section 15.2 on pa ge 123 for more information on dynamic lin[...]

Chapter 15 Link Aggregation GS-3012/GS- 3012F User’s Guid e 127 Figure 64 Advanced Application > Link Aggregatio n > Link Aggre gation Setting > LACP The following table describes the labels in this screen. T able 38 Advanced Application > Link Aggregation > Link Aggrega tion Setting > LACP LABEL DESCRIPTION Link Aggregation Con[...]

Chapter 15 Link Aggregation GS-3012/GS-3012F User’s Guide 128 15.6 S t atic T runking Example This example shows you how to create a static port trunk group for ports 2-5. 1 Make your physi cal conn ections - make sure that the ports that you want to belong to the trunk group are connected to the same de stination. The followi ng figure shows por[...]

Chapter 15 Link Aggregation GS-3012/GS- 3012F User’s Guid e 129 Figure 66 T runking Example - Configuration Screen Y our trunk group 1 ( T1 ) configuration is now complete; you do not need to go to any additional screens.[...]

Chapter 15 Link Aggregation GS-3012/GS-3012F User’s Guide 130[...]

GS-3012/GS- 3012F User’s Guid e 131 C HAPTER 16 Port Authentication This chapter describes the IEEE 802. 1x and MAC authentication methods. 16.1 Port Authentication Overview Port authentication is a way to validate access to ports on the Switch to clients based on an external server (authentication server). The Switch supports the followi ng meth[...]

Chapter 16 Port Authentication GS-3012/GS-3012F User’s Guide 132 Figure 67 IEEE 802.1x Authentic ation Process 16.1.2 MAC Authentication MAC authentication works in a very similar wa y to IEEE 802.1x authentication. The main difference is that the Switch does not prompt the client for login credentials. The login credentials are based on the sour[...]

Chapter 16 Port Au thentication GS-3012/GS- 3012F User’s Guid e 133 16.2 Port Authentication Configuration T o enable port authentication, first activate the port authentica tion method(s) you want to use (both on the Switch and the port(s)) then co nfigure the RADIUS server settings in the Auth and Acct > Radius Server Setup screen. Click Adv[...]

Chapter 16 Port Authentication GS-3012/GS-3012F User’s Guide 134 The following table describes the labels in this screen. 16.2.2 Activate MAC Authentication Use this screen to activate MAC authentication. In the Port Authentication screen click MAC Authentication to display the configuratio n screen as shown. T able 39 Advanced Application > P[...]

Chapter 16 Port Au thentication GS-3012/GS- 3012F User’s Guid e 135 Figure 71 Advanced Application > Port Au thentication > MAC Authentication The following table describes the labels in this screen. T able 40 Advanced Application > Port Au thentication > MAC Authentication LABEL DESCRIPTION Active Select this check box to perm it MAC[...]

Chapter 16 Port Authentication GS-3012/GS-3012F User’s Guide 136 * Use this row to make the setting the same for al l ports. Use this row first a nd then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the port s as soon as you make them. Active Select this checkbox to permit MAC aut hen tication on this port[...]

GS-3012/GS- 3012F User’s Guid e 137 C HAPTER 17 Port Security This chapter shows you how to set up port security . 17.1 About Port Security Port security allows only packets w ith dynami cally learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. The Switch can learn up to 16K MAC addresses in total wi[...]

Chapter 17 Port Secu rity GS-3012/GS-3012F User’s Guide 138 Figure 72 Advanced Application > Port Security The following table describes the labels in this screen. T able 41 Advanced Application > Port Security LABEL DESCRIPTION Active Select this option to enable port security on the Switch. Port Thi s field displays the port number . * Se[...]

Chapter 17 Port Security GS-3012/GS- 3012F User’s Guid e 139 Apply Click Apply to save your changes to the Switch’s run-time memory . The Switch loses these changes if it i s turned off or loses powe r , so use the Save link on th e top navigation panel to save your changes to the non-volatile memory whe n you are done configuring. Cancel Click[...]

Chapter 17 Port Secu rity GS-3012/GS-3012F User’s Guide 140[...]

GS-3012/GS- 3012F User’s Guid e 141 C HAPTER 18 Classifier This chapter introduces and shows you how to configure the packet cl assifier on the Switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a networ k's ability to deliver data with minimum delay , and the networking methods used to control the us e of band[...]

Chapter 18 Classifier GS-3012/GS-3012F User’s Guide 142 Figure 73 Advanced Application > Classifier The following table describes the labels in this screen. T able 42 Advanced Applicat ion > Classifier LABEL DESCRIPTION Active Select this optio n to enable this rule. Name Enter a descriptive name for th is rule for identifying purposes. Pac[...]

Chapter 18 Classifier GS-3012/GS- 3012F User’s Guid e 143 Ethernet Ty p e Select an Ethernet type or select Other and enter the Ethernet type number in hexadecimal value. Refer to T able 44 on page 144 for information. Source MAC Address Select Any to apply the rule to all MAC addresses. T o specify a source, select the second choi ce and type a [...]

Chapter 18 Classifier GS-3012/GS-3012F User’s Guide 144 18.3 V iewing and Editing Classifier Configuration T o view a summary of the classifier configuration, scroll down to th e summa ry table at the bottom of the Clas sifier screen. T o change the settings of a rule , click a number in the Index field. " When two rules conflict with eac h [...]

Chapter 18 Classifier GS-3012/GS- 3012F User’s Guid e 145 In the Internet Protocol there is a field, called “Protocol”, to identify the next level protocol. The following table shows some common prot ocol types and the corresponding protocol number . Refer to http://www .iana.or g/assignments/protocol-numbers for a complete list. Some of the [...]

Chapter 18 Classifier GS-3012/GS-3012F User’s Guide 146 Figure 75 Classifier: Example[...]

GS-3012/GS- 3012F User’s Guid e 147 C HAPTER 19 Policy Rule This chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 18 on page 141 for more information). A policy rule ensures that a traffic flow gets the requested treatment i[...]

Chapter 19 Policy Rule GS-3012/GS-3012F User’s Guide 148 19.2 Configuring Policy Rules Y ou must first configure a classifier in the Classifier screen. Refer to Section 18.2 on page 141 for more information. Click Advanced App lications > Policy Rule in the navigation panel to display the screen as shown. Figure 76 Advanced Application > Po[...]

Chapter 19 Policy Rule GS-3012/GS- 3012F User’s Guid e 149 The following table describes the labels in this screen. T able 47 Advanced Applicat ion > Policy R ule LABEL DESCRIPTION Active Select this option to enable the policy . Name Enter a descriptive name for identification purposes. Classifier(s) This field di splays the acti ve classifie[...]

Chapter 19 Policy Rule GS-3012/GS-3012F User’s Guide 150 19.3 V iewing and Editing Policy Configuration T o view a summary of the classifier configuration, scroll down to th e summa ry table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field. Figure 77 Advanced Application > Policy Rule: Su[...]

Chapter 19 Policy Rule GS-3012/GS- 3012F User’s Guid e 151 19.4 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-profile traffi c on a traf fic flow cla ssified using the Example classifier (refer to Section 18.4 on page 145 ). Figure 78 Policy Example[...]

Chapter 19 Policy Rule GS-3012/GS-3012F User’s Guide 152[...]

GS-3012/GS- 3012F User’s Guid e 153 C HAPTER 20 Queuing Method This chapter introduces th e queuing methods sup ported. 20.1 Queuing Method Overview Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traf fic. See also Priority Queu e A[...]

Chapter 20 Que uing Method GS-3012/GS-3012F User’s Guide 154 20.2 Configuring Queuing Click Advanced App lication > Queuing Method in the navigati on panel. Figure 79 Advanced Application > Queuing Method The following table describes the labels in this screen. T able 49 Advanced Application > Queuing Method LABEL DESCRIPTION Port This l[...]

GS-3012/GS- 3012F User’s Guid e 155 C HAPTER 21 Multicast This chapter shows you how to conf igure various multicast features. 21.1 Multicast Overview T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybod y on the network). Multicast delivers IP packets to just[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 156 The Switch forwards multicast tr affic destined for multicast gr oups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group. IGMP snooping generates no additional ne twork traf fic, allowing you to significantly reduce multicast [...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 157 Figure 81 Advanced Application > Mult icast > Multicast Setting The following table describes the labels in this screen. T able 51 Advanced Application > Mult icast > Multicast Setting LABEL DESCRIPTION IGMP Snooping Use these settings to configure IGMP Snooping. Active Select A[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 158 21.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the screen as shown. See Section 21.1.4 on page 1 5 6 for more information on IGMP Snooping VLAN. Reserved Multicast Gro[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 159 Figure 82 Advanced Application > Multicast > Mult icast Setting > IGMP Snooping VLAN The following table describes the labels in this screen. T able 52 Advanced Application > Multicast > Mu lticast Setting > IG MP Snooping VLAN LABEL DESCRIPTION Mode Select auto to have th[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 160 21.5 IGMP Filtering Profile An IGMP filtering profile specif ies a range of multicas t groups that clients connected to the Switch are able to join. A profile contains a range of multicast IP addresses which you want clients to be able to join. Prof iles are assigned to ports (in the Multicas[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 161 21.6 MVR Overview Multicast VLAN Registration (MVR) is designed for applications (such as M e dia-on-Demand (MoD)) that use multicast traffi c across an Ethe rnet ring-based servic e provider network. MVR allows one single multicast VLAN to be shared among dif ferent subscriber VLANs on the[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 162 21.6.2 MVR Modes Y ou can set your Switch to operate in either dynamic or compatible mode. In dynamic mo de, the Switch send s IGMP leave and join reports to the other multicas t devices (such as multicast routers or servers) in the mu lticast VLAN. This allows the multicast devic es to updat[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 163 " Y our Switch automatically creates a static VLAN (wit h the same VID) when you create a multicast VLAN in this screen. Figure 86 Advanced Application > Multic ast > Multicast Setting > MVR The following table describes the re lated labels in this screen. T able 54 Advanced A[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 164 21.8 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Configure MVR IP multicast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. " A port c[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 165 Figure 87 Advanced Application > Multicast > Multic ast Setting > MVR: Group Configuration The following table describes the labels in this screen. 21.8.1 MVR Conf iguration Example The following figure shows a n e twork example where ports 1, 2 and 3 on the Switch belong to VLAN 1[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 166 Figure 88 MVR Configuration Example T o configure the MVR settings on the Switch, create a multic ast group in the MVR screen and set the receiver and source ports. Figure 89 MVR Configuration Example T o set the Switch to forward the multicast group traffic to the subscriber s, configure mul[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 167 Figure 91 MVR Group Configuration Exampl e[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 168[...]

GS-3012/GS- 3012F User’s Guid e 169 C HAPTER 22 Authentication & Accounting This chapter describes how to configure authen tication and accounting settings on the Switch. 22.1 Authentication, Auth orization and Accounting Authentication is the process of determining who a user is and validating access to the Switch. The Switch can authenticat[...]

Chapter 22 Authen tication & Accounting GS-3012/GS-3012F User’s Guide 170 22.1.2 RADIUS and T ACACS+ RADIUS and T ACACS+ are security protocols used to authenticate users by means of an external server instead of (or in addition to) an internal device user data base that is limited to the memory capacity of the device. In es sence, RADIUS and[...]

Chapter 22 Authentication & Accounting GS-3012/GS- 3012F User’s Guid e 171 Figure 94 Advanced Application > Auth an d Acct > RADIUS Server Setup The following table describes the labels in this screen. T able 57 Advanced Application > Au th a nd Acct > RADIUS Server Setup LABEL DESCRIPTION Authentication Serve r Use this section t[...]

Chapter 22 Authen tication & Accounting GS-3012/GS-3012F User’s Guide 172 22.2.2 T ACACS+ Server Setup Use this screen to configure your T ACACS+ server settings. See Section 22.1.2 on page 170 for more information on T ACACS+ servers. Click on the T ACACS+ Ser ver Setup link in the Authentication and Accounting screen to view the screen as s[...]

Chapter 22 Authentication & Accounting GS-3012/GS- 3012F User’s Guid e 173 Figure 95 Advanced Application > Auth an d Acct > T ACACS+ Server Setup The following table describes the labels in this screen. T able 58 Advanced Application > Au th a nd Acct > T ACACS+ Server Setup LABEL DESCRIPTION Authentication Serve r Use this secti[...]

Chapter 22 Authen tication & Accounting GS-3012/GS-3012F User’s Guide 174 22.2.3 Authentication an d Accounting Setup Use this screen to configure authentication a nd accounting settings on th e Switch. Click on the Auth and Acct Setup link in the Authentication and Accounting screen to view the screen as shown. Shared Secret Specify a passwo[...]

Chapter 22 Authentication & Accounting GS-3012/GS- 3012F User’s Guid e 175 Figure 96 Advanced Application > Auth and Acct > Auth and Acct Setup The following table describes the labels in this screen. T able 59 Advanced Application > Au th a nd Acct > Auth and Acct Setup LABEL DESCRIPTION Authentication Use thi s section to specif[...]

Chapter 22 Authen tication & Accounting GS-3012/GS-3012F User’s Guide 176 Login The se fields specify which database the S witch sho uld use (first, second and th ird) to authenticate administrator accounts (users for Switch management). Configure the local user accounts in the Access Control > Logins screen . The T ACACS+ an d RADIUS are [...]

Chapter 22 Authentication & Accounting GS-3012/GS- 3012F User’s Guid e 177 22.2.4 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor -sp ecific information between a RADIUS server and a network acce ss device (for example, the Switch). A company can create V endor Specific Attributes (VSAs) to expa nd the fu nc[...]

Chapter 22 Authen tication & Accounting GS-3012/GS-3012F User’s Guide 178 22.2.4.1 T unnel Protocol Attribute Y ou can configure tunnel protocol attributes on th e RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN settings are fixed and untagge[...]

Chapter 22 Authentication & Accounting GS-3012/GS- 3012F User’s Guid e 179 22.3.1 Attributes U sed for Authentication The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 22.3.1.1 Attributes Used for Authe nticating Privilege Access User-Name - the format of the User-Name attribu[...]

Chapter 22 Authen tication & Accounting GS-3012/GS-3012F User’s Guide 180 22.3.2.2 Attributes Used for Acc ounting Exec Events The attributes are listed in th e following table along with the time that they are sent (the difference between Console and T elnet/SSH Exec events is that the T elnet/SSH events utilize the Calling-Station -Id attri[...]

Chapter 22 Authentication & Accounting GS-3012/GS- 3012F User’s Guid e 181 NAS-Port-T ype Y Y Y Acct-S tatus-T ype Y Y Y Acct-Delay-T ime Y Y Y Acct-Session-Id Y Y Y Acct-Authentic Y Y Y Acct-Input-Octets Y Y Acct-Output -Octets Y Y Acct-Session-T ime Y Y Acct-Input-Packets Y Y Acct-Output -Packets Y Y Acct-T erminate-Ca use Y Acct-Input-Giga[...]

Chapter 22 Authen tication & Accounting GS-3012/GS-3012F User’s Guide 182[...]

GS-3012/GS- 3012F User’s Guid e 183 C HAPTER 23 IP Source Guard Use IP source guard to filter unauthorized DHCP and ARP packets in your network. 23.1 IP Source Guard Overview IP source guard u s es a binding tabl e to distinguish between authorized and unauthorized DHCP and ARP packets in your network. A b inding contains these ke y attributes: ?[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 184 T rusted ports are connected to DHCP servers or other switches. The Switch discards DHCP packets from trusted ports only if the rate at which DHCP packets arrive is too high. The Switch learns dynamic bindings from trusted ports. " The Switch will drop al l DHCP requests if you en[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 185 23.1.1.3 DHCP Relay Option 82 Informa tion The Switch can add information to DHCP requests that it does not discard. This provides the DHCP server more information about the source of the requests. The Switc h can add the following information: • Slot ID (1 byte), port ID (1 by te),[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 186 23.1.2.1 ARP Inspection and MAC Address Filters When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. Y ou can configure ho w long the MAC addr[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 187 23.2 IP Source Guard Use this screen to look at the current bi ndings for DHCP snooping and ARP inspection. Bindings are used by DHCP snoo ping and ARP inspection to distinguis h between authorized and unauthorized packets in the network. The Switch learns th e bindings by snooping DH[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 188 Figure 100 IP Source Guard S tatic Binding The following table describes the labels in this screen. T able 66 IP Source Guard Static Binding LABEL DESCRIPTION MAC Address Enter the source MAC add ress in the binding. IP Address Enter the IP address assigned to the MAC add ress in the b[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 189 23.4 DHCP Snooping Use this screen to look at various statistics ab ou t the DHCP snooping da tabase. T o open this screen, click Advanced Application > IP Sour ce Guard > DHCP Snooping . Figure 101 DHCP Snooping[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 190 The following table describes the labels in this screen. T able 67 DHCP Snooping LABEL DESCRIPTION Dat abase S tatus This section displays the current settings for the DHCP snoo ping database. Y ou can configure them in the DHCP Snooping Configure screen. See Secti on 23.5 on page 192 [...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 191 Successful writes Thi s field displays the nu mber of times the Switch updated the bindings in the DHCP snooping da tabase successfully . Failed writes This field displays the numb er of times the Sw itch was unable to update the bindings in the DHCP snooping database. Database detail[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 192 23.5 DHCP Snooping Configure Use this scr een to enable DHCP snoo ping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and configure the DHCP snooping database. The DHCP snooping database stores the current bi ndings on a secure, externa[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 193 23.5.1 DHCP Snoopi ng Port Configure Use this screen to specify whether ports are tr usted or untrusted ports for DHCP snoopin g . " The Switch will drop al l DHCP requests if you enable DHCP sn ooping and there are no trusted ports. Y ou can also specify the maximum number for D[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 194 Figure 103 DHCP Snooping Port Configure The following table describes the labels in this screen. T able 69 DHCP Snooping Port Configure LABEL DESCRIPTION Port This field displays the port number . If you configure the * port, the settings are applied to all of the ports. Server Trusted[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 195 23.5.2 DHCP Snoo ping VLAN Configure Use this scr een to enable DHCP snoo ping on each VLAN and to specify whether or not the Switch adds DHCP relay agen t option 82 informat ion ( Chap ter 27 on page 219 ) to DHCP requests that the Switch relays to a DHCP serve r for each VLAN. T o o[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 196 23.6 ARP Inspection St atus Use this screen to look at the current list of MAC address f ilters that were cr eated because the Switch identified an unauthoriz ed A RP packet. When the Switc h identifies an unauthorized ARP packet, it automatically creates a MAC ad dress filter to block[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 197 Figure 106 ARP Inspection VLAN S tatus The following table describes the labels in this screen. 23.6.2 ARP Inspection Log St atus Use this screen to look at log messages that we re generated by ARP packets and th at have not been sent to the syslog server ye t. T o open this screen, c[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 198 Figure 107 ARP Inspection Log S tatus The following table describes the labels in this screen. T able 73 ARP Inspection Log Status LABEL DESCRIPTION Clearing log status table Click Apply to remove all the log messages that were generated by ARP packets and that have not been sent to th[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 199 23.7 ARP Inspection Configure Use this screen to enable ARP in spection on the Switch. Y ou can also configure the length of time the Switch stores records of discarded AR P packets and global settings for the ARP inspection log. T o open this screen, click Advanced Application > I[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 200 23.7.1 ARP Inspection Port Configure Use this screen to specify whether ports are trus ted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at whic h the Switch receives ARP packets on each untrusted port. T o open this screen, click Advanced Application &g[...]

Chapter 23 IP Source Guard GS-3012/GS- 3012F User’s Guid e 201 The following table describes the labels in this screen. 23.7.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packet s from each VLAN. T o open this screen, click Advanced App[...]

Chapter 23 IP Source G uard GS-3012/GS-3012F User’s Guide 202 The following table describes the labels in this screen. T able 76 ARP Inspection V LAN Configure LABEL DESCRIPTION VLAN Use this section to specify the VLANs you want to manage in the section below . S tart VID Enter the lowest VLAN ID you want to manag e in the section below . End VI[...]

GS-3012/GS- 3012F User’s Guid e 203 C HAPTER 24 Loop Guard This chapter shows you how to configure the Switch to guard against loops on the edge of your network. 24.1 Loop Guard Overview Loop guard allows you to config ure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch. W hile you can use S[...]

Chapter 24 Lo op Guard GS-3012/GS-3012F User’s Guide 204 The following figure shows port N on switch A connected to switch B . Switch B is in loop state. When broadcast or multicast packets leave port N and reach switch B , they are sent back to port N on A as they are rebroadcast from B. Figure 1 12 Switch in Loop S tate The loop guard feature c[...]

Chapter 24 Loop Guar d GS-3012/GS- 3012F User’s Guid e 205 " After resolving the loop problem on your network you can re-activate the disabled port via the w eb configurator (see Section 7.7 on page 78 ) or via commands (See the CLI Reference Guide). 24.2 Loop Guard Setup Click Advanced App lication > Loop Guard in the navigation panel to[...]

Chapter 24 Lo op Guard GS-3012/GS-3012F User’s Guide 206 Active Select this check box to enable the loop guard feature on this port. The Switch sends probe packets from this port to check if the sw itch it is conn ected to is in loop state. If the switch that th is port is connected is in loop state the Switch will shut down this port. Clear this[...]

GS-3012/GS- 3012F User’s Guid e 207 C HAPTER 25 Two Rate Three Color Marker This chapter describes how Differentiated Services (Dif fServ) fits into a quality of service strategy and shows yo u how to configure T wo Rate Three Color Marker traffic policing on the Switch. 25.1 DiffServ Overview Quality of Service (QoS) is used to prioritize so urc[...]

Chapter 25 Two Rate Three Color Marker GS-3012/GS-3012F User’s Guide 208 25.1.2 DiffServ Network Example The following figure depicts a DiffServ networ k consisting of a group of directly connected DiffServ-compliant network devices. The boundary node ( A in Figure 1 17 ) in a DiffServ network classifies (marks with a DSCP value) th e incoming pa[...]

Chapter 25 Two Rate Three Color Marker GS-3012/GS- 3012F User’s Guid e 209 • Green (low loss priority level) packets are forwarded. trTCM operates in one of two modes: color-blin d or color -aware . In color-blind mode, packets are marked based on evaluating against the PIR an d CIR regardless of if they have previously been marked or not. In t[...]

Chapter 25 Two Rate Three Color Marker GS-3012/GS-3012F User’s Guide 210 25.2.3 Configuring T wo Rate Three Color Marker Settings Use this screen to configure trTCM settings. Click the Advanced Application > trTCM to display the screen as shown next. " Y ou cannot enable both trTC M and Bandwidth Contro l at the same time. Figure 120 Adva[...]

Chapter 25 Two Rate Three Color Marker GS-3012/GS- 3012F User’s Guid e 21 1 Active Select this to activate trTCM on the port. Commit Rate S pecify the Commit Information Ra te (CIR) for this port. Peak Rate S pecify the Peak Info rmation Rate (PIR) for this port. DSCP Use this section to specify the DSCP values that you want to assign to packets [...]

Chapter 25 Two Rate Three Color Marker GS-3012/GS-3012F User’s Guide 212[...]

213 P ART IV IP Application S tatic Route (215) DHCP (219)[...]

214[...]

GS-3012/GS- 3012F User’s Guid e 215 C HAPTER 26 Static Route This chapter shows you how to configure static routes. 26.1 S tatic Routing Overview The Switch uses IP for communication with m anagement computers , for example using HTTP , telnet, SSH, or SNMP . Use IP static ro utes to have the Switch respond to remote management stations that are [...]

Chapter 26 Static Rou te GS-3012/GS-3012F User’s Guide 216 Figure 122 IP Application > S tatic Routing The following table describes the related labe ls you use to create a static route. T able 79 IP Application > Static Routing LABEL DESCRIPTION Active This field allows you to acti vate/deactivate this static route. Name Enter a descriptiv[...]

Chapter 26 Static Route GS-3012/GS- 3012F User’s Guid e 217 Gateway Address This field displays the IP address of t he gateway . The gateway is an immediate neighbor of your Switch that will fo rward the packet to the destination . Metric This field displays the cost of transmission for routing purposes. Delete Click Delete to remove the selected[...]

Chapter 26 Static Rou te GS-3012/GS-3012F User’s Guide 218[...]

GS-3012/GS- 3012F User’s Guid e 219 C HAPTER 27 DHCP This chapter shows you how to configure the DHCP feature. 27.1 DHCP Overview DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server . Y ou can configure the Switch as a DHCP server or a DHCP relay age[...]

Chapter 27 DHCP GS-3012/GS-3012F User’s Guide 220 Figure 123 IP Application > DHCP S tatus The following table describes the labels in this screen. 27.3 DHCP Relay Configure DHCP relay on the Switch if the DH CP clients and the DHCP server are not in the same broadcast domain. During the initial IP address leasing, the Switch helps to relay ne[...]

Chapter 27 DHCP GS-3012/GS- 3012F User’s Guid e 221 27.3.2 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP Relay screen. Click IP Application > DHCP in the navigation panel and click the Global link to display the screen as shown. Figure 124 IP Application > DHCP > Global The following table describes the labels in [...]

Chapter 27 DHCP GS-3012/GS-3012F User’s Guide 222 27.3.3 Global DHCP Re lay Configuration Example The follow figure shows a network exam ple where the Switch is us ed to relay DHCP reque sts for the VLAN1 and VLAN2 domains. There is only one DHCP server that s ervices the DHCP clients in both domains. Figure 125 Global DHCP Relay Network Exam ple[...]

Chapter 27 DHCP GS-3012/GS- 3012F User’s Guid e 223 " Y ou must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. See Section 7.6 on page 7 5 for information on how to set up management IP addresses for VLANs. Figure 127 IP Application > DHCP > VLAN The following table describes th[...]

Chapter 27 DHCP GS-3012/GS-3012F User’s Guide 224 27.4.1 Example: DHCP Relay for T wo VLANs The following examp le displays two VLANs (VIDs 1 and 2) for a campus network . T wo DHCP servers are installed to serve each VLAN. The system is set up to forward DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192[...]

225 P ART V Management Maintenance (227) Access Control (233) Diagnostic (251) Syslog (253) Cluster Managemen t (257) MAC T able (263) ARP T able (265) Configure Clone (267)[...]

226[...]

GS-3012/GS- 3012F User’s Guid e 227 C HAPTER 28 Maintenance This chapter explains how to configure the sc reens that let you maintain the firmware and configuration files. 28.1 The Maintenance Screen Use this screen to manage firmware and you r configuration files. Click Management > Maintenance in the navigation panel to open the followi ng s[...]

Chapter 28 Maintenance GS-3012/GS-3012F User’s Guide 228 28.2 Load Factory Default Follow the steps below to reset the Switch back to the factory defaults. 1 In the Maintenance screen, click the Click Here button next to Load Fact ory Default to clear all Switch configuration informatio n y ou configured and return t o the factory defaults. 2 Cli[...]

Chapter 28 Maintenance GS-3012/GS- 3012F User’s Guid e 229 28.4 Reboot System Reboot System allows you to restart the Switch withou t physically turning the power off. It also allows you to lo ad configuration o ne ( Config 1 ) or configuration two ( Config 2 ) when you reboot. Follow the steps be low to reboot the Switch. 1 In the Maintenance sc[...]

Chapter 28 Maintenance GS-3012/GS-3012F User’s Guide 230 28.6 Restore a Configuration File Restore a previously saved configuration fro m your computer to the Switc h using the Restore Configuration screen. Figure 134 Management > Maintena nce > Restore Configuration T ype the path and file name of the config uration file you wish to restor[...]

Chapter 28 Maintenance GS-3012/GS- 3012F User’s Guid e 231 28.8 FTP Command Line This section shows some examples of uploadin g to or downloading files from the Switch using FTP commands. First, understan d the filename conventions. 28.8.1 Filename Conventions The configuration file (also known as the romf ile or ROM) contains t he factory defaul[...]

Chapter 28 Maintenance GS-3012/GS-3012F User’s Guide 232 5 Enter bin to set transfer mode to binary . 6 Use put to transfer files from the comput er to the Switch, for example, put firmware.bin ras transfers the firmware on your computer (firmware.bin) to the Switch and renames it to “ras”. Similarly , put config.cfg config transfers the conf[...]

GS-3012/GS- 3012F User’s Guid e 233 C HAPTER 29 Access Control This chapter describes how to control access to the Switch. 29.1 Access Control Overview A console port and FTP are allowe d one session each, T elnet a nd SSH share nine sessions, up to five W eb sessions (five di fferent usernames and passwords ) and/or limitless SNMP access control[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 234 29.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol us ed to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between th e network manageme nt system (NMS) and a network element (NE). A manager station can m a[...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 235 29.3.1 SNMP v3 and Security SNMP v3 enhances security for SNMP manage ment. SNMP managers can be required to authenticate with agents before co nducting SNMP mana gement sessions. Security can be further enhanced by encryp ting the SNMP mes sages sent from the managers. Encryption prot[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 236 temperature T emperatureEventOn GS-3012F: 1.3.6.1.4.1.890. 1.5.8.1 1.25.2.1 GS-3012: 1.3.6.1.4.1.890. 1.5.8.10.25.2.1 This trap is sent when the temperature goes above or below the normal operating rang e. T empe ratureEventClear GS-3012F: 1.3.6.1.4.1.890. 1.5.8.1 1.25.2.2 GS-3012: 1.3.6[...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 237 T able 89 SNMP InterfaceTraps OPTION OBJECT LABEL OBJECT ID DESCRIPTION linkup linkUp 1.3.6.1.6.3.1.1.5.4 This trap is sent when the Ethernet link is up. LinkDownEventClear GS-3012F: 1.3.6.1.4.1.890.1 .5.8. 1 1 .25.2.2 GS-3012: 1.3.6.1.4.1.890.1.5.8.10.25.2.2 This trap is sent when the[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 238 accounting RADIUSAccountingNo tReach ableEventOn GS-3012F: 1.3.6.1.4.1. 890.1.5.8. 1 1 .25.2.1 GS-3012: 1.3.6.1.4.1. 890.1.5.8. 10.25.2.1 This trap is sent when there is no response message from the RADIUS accounting server . RADIUSAccountingNotReach ableEventClear GS-3012F: 1.3.6.1.4.1.[...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 239 29.3.4 Configuring SNMP Click Management > Access Control > SNMP to view the screen as shown. Use this screen to configure your SNMP settings. T able 92 SNMP Switch Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION stp STPNewRoot 1.3.6.1.2 .1.17.0.1 This trap is sent when the STP r[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 240 Figure 138 Management > Acce ss Control > SNMP The following table describes the labels in this screen. T able 93 Management > Access Control > SNMP LABEL DESCRIPTION General Setting Use this section to specify the SNMP version and commun ity (password) values. V ersion Selec[...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 241 29.3.5 Configuring SNMP T rap Group Click Management > Access Contr ol > SNMP > T rap Group to view the screen as shown. Use the Tr a p Group s creen to specify the types of SNMP traps that should be sent to each SNMP manager . Port Enter the port number upon which the manager[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 242 Figure 139 Management > Acce ss Control > SNMP > Trap Grou p The following table describes the labels in this screen. 29.3.6 Setting Up Login Account s Up to five people (one ad ministrator and four non-administrators) may access the Switch via web configurator at any one time. [...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 243 • A non-administrato r (username is something o ther than admin ) is some one who can view but not configure Switch settings. Click Management > Access Control > Logins to view the screen as shown next. Figure 140 Management > Acce ss Control > Logins The following table [...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 244 29.4 SSH Overview Unlike T elnet or FTP , which transmit data in clear text, SSH (Secure Shell) is a secure communication protoc ol that combines authenticatio n and data encryption to provide secure encrypted communication bet w een two hosts over an un secured network. Figure 141 SSH C[...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 245 2 Encryption Method Once the identification is verified, both the c lient and server must agree on the type of encryption method to use. 3 Authentication and Data T ransmission After the identification is verified and data encryption activated, a secure tunnel is established between th[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 246 Figure 143 HTTPS Implement ation " If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts. 29.8 HTTPS Example If you haven’t changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address[...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 247 29.8.2 Net scape Navigator W arning Messages When you attempt to access the Switch HTTPS server , a W ebsite Certified by an Unknown Authority screen pops up asking if you trus t the server certificate. Click Examine Certificate if you want to verify that th e certificate is from the S[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 248 Figure 147 Example: Lock Denotin g a Secure Connectio n 29.9 Service Port Access Control Service Access Control allows you to decide wh at service s you may use to access the Switch. Y ou may also change the default service po rt an d configure “t rusted co mputer(s)” for each servic[...]

Chapter 29 Access Control GS-3012/GS- 3012F User’s Guid e 249 The following table describes th e fields in this screen. 29.10 Remote Management Click Management > Access Control > Remote Management to view the screen a s shown next. Y ou can specify a group of one or more “trust ed computers” from which an administrator may use a servic[...]

Chapter 29 Access Control GS-3012/GS-3012F User’s Guide 250 S tart Address End Address Configure the IP address range of trusted computers from which you can manage this Switch. The Switch checks if the client IP address of a co mputer requesting a service or protocol matches the range set here. T he Switch immediately disconnects the session if [...]

GS-3012/GS- 3012F User’s Guid e 251 C HAPTER 30 Diagnostic This chapter explains the Diagnostic screen. 30.1 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 150 Management > Diagn ostic The following table describes th[...]

Chapter 30 Diagnostic GS-3012/GS-3012F User’s Guide 252[...]

GS-3012/GS- 3012F User’s Guid e 253 C HAPTER 31 Syslog This chapter explains the syslog screens. 31.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event mes sages. A syslog-enabled device can generate a syslog message and send it to a syslog server .[...]

Chapter 31 Syslog GS-3012/GS-3012F User’s Guide 254 Figure 151 Management > Syslo g The following table describes the labels in this screen. 31.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. T able 100 Management > [...]

Chapter 31 Sy slog GS-3012/GS- 3012F User’s Guid e 255 Figure 152 Management > Syslog > Sysl og Server Setu p The following table describes the labels in this screen. T able 101 Management > Syslog > Syslog Server Setup LABEL DESCRIPTION Active Select this check box to have the devic e send logs to this syslog server . Clear the check[...]

Chapter 31 Syslog GS-3012/GS-3012F User’s Guide 256[...]

GS-3012/GS- 3012F User’s Guid e 257 C HAPTER 32 Cluster Management This chapter introduces cluster management. 32.1 Cluster Management S tatus Overview Cluster Managemen t allows you to manage s w itches through one Switch, called the cluster manager . The switches must be directly connec ted and be in the same VLAN group so as to be able to comm[...]

Chapter 32 Cluster Management GS-3012/GS-3012F User’s Guide 258 Figure 153 Clustering Application Example 32.2 Cluster Management S tatus Click Management > Cluster Manage ment in the navigation panel to display the following screen. " A cluster can only have one manager . Figure 154 Management > Cluster Ma nagement: S tatus[...]

Chapter 32 Cluster Management GS-3012/GS- 3012F User’s Guid e 259 The following table describes the labels in this screen. 32.2.1 Cluster Member Switch Management Go to the Clustering Management S tatus screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web c[...]

Chapter 32 Cluster Management GS-3012/GS-3012F User’s Guide 260 32.2.1.1 Uploading Firm ware to a Cluster Member Switch Y ou can use FTP to upload firmwa re to a cluster member switch thr ough the cluster manager switch as shown in the following example. Figure 156 Example: Uploading Firmware to a Cluster Mem ber Switch The following table explai[...]

Chapter 32 Cluster Management GS-3012/GS- 3012F User’s Guid e 261 Figure 157 Management > Cluster Ma nagement > Configuration The following table describes the labels in this screen. T able 105 Management > Cluster Managem ent > Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this Switch b ecome the clu[...]

Chapter 32 Cluster Management GS-3012/GS-3012F User’s Guide 262 Apply Click Apply to save your changes to the Switch’s run-ti m e memory . The Swi tch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Cli[...]

GS-3012/GS- 3012F User’s Guid e 263 C HAPTER 33 MAC Table This chapter introduces the MAC T able screen. 33.1 MAC T able Overview The MAC T able screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered ac ross the Switch’ s ports. It sh ows what device MAC address, belonging to what VLAN group (if an[...]

Chapter 33 MAC Ta ble GS-3012/GS-3012F User’s Guide 264 33.2 V iewing the MAC T able Click Management > MAC T able in the navigation panel to display the following screen. Figure 159 Management > MAC T able The following table describes the labels in this screen. T able 106 Management > MAC Table LABEL DESCRIPTION Sort by Click o ne of t[...]

GS-3012/GS- 3012F User’s Guid e 265 C HAPTER 34 ARP Table This chapter introduces ARP T able. 34.1 ARP T able Overview Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on the local area network. An IP (version[...]

Chapter 34 ARP Table GS-3012/GS-3012F User’s Guide 266 Figure 160 Management > ARP T able The following table describes the labels in this screen. T able 107 Management > ARP Table LABEL DESCRIPTION Index This is the ARP T able entry number . IP Address This is the learned IP address of a device connected to a Switch port with corresponding[...]

GS-3012/GS- 3012F User’s Guid e 267 C HAPTER 35 Configure Clone This chapter shows you how you can copy the settings of one port onto other ports. 35.1 Configure Clone Cloning allows you to co py the basic and advanced settings fro m a sour ce port to a destination port or ports. Click Management > Configure Clone to open the fo llowing screen[...]

Chapter 35 Config ure Clone GS-3012/GS-3012F User’s Guide 268 The following table describes the labels in this screen. T able 108 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Port Enter the source port under the Source label. This port’s attributes are copied. Enter the destination port or ports under the Destination la[...]

269 P ART VI T roubleshooting & Product S pecifications T roubleshooting (271) Product Specification s (275)[...]

270[...]

GS-3012/GS- 3012F User’s Guid e 271 C HAPTER 36 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • Switch Access and Login 36.1 Power , Hardware Connections, and LEDs V The Switch does not tur[...]

Chapter 36 Trou bleshooting GS-3012/GS-3012F User’s Guide 272 36.2 Switch Access and Login V I forgot the IP addr ess for the Switch. 1 The default IP address is 192.168.1.1 . 2 Use the console port to log in to the Switch. 3 Use the MGMT port to log in to the Switch, the default IP address of the MGMT port is 192.168.0. 1. 4 If this does not wor[...]

Chapter 36 Trou bleshooting GS-3012/GS- 3012F User’s Guid e 273 V I can see the Login screen, but I cannot lo g in to the Switch. 1 Make sure you have entered the user name and password correctly . The default user name is admin , and the default passwo rd is 12 34 . These fields are case-sensitive, so make sure [Caps Lock] is not on. 2 Y ou may [...]

Chapter 36 Trou bleshooting GS-3012/GS-3012F User’s Guide 274[...]

GS-3012/GS- 3012F User’s Guid e 275 C HAPTER 37 Product Specifications The following tables summarize the Switc h’ s hardware and firmware features. T able 109 Hardware Specifications SPECIFICATIO N DESCRIPTION Dimensions S tandard 19” rack moun table GS-3012F : 438 mm (W) x 225 mm (D) x 45 mm (H) GS-3012 : 438 mm (W) x 300 mm (D) x 45 mm (H)[...]

Chapter 37 Product Specifications GS-3012/GS-3012F User’s Guide 276 S torage Environmen t T empe rature: -25º C ~ 70º C (-13º F ~ 158º F) Humidity: 10 ~ 90% (non-conden sing) Ground Wire Gauge 18 AWG or larger Power Wire Gauge 18 AWG or larger Fuse S pecification 250 V AC, T2A T able 1 10 Firmware Specifications FEATURE DESCRIPTION Default IP[...]

Chapter 37 Product Specifications GS-3012/GS- 3012F User’s Guid e 277 S tatic Route St atic ro utes allow the Switch to commun ic ate with management stations not reachable via the default gateway . Multicast VLAN Registration (MVR) Multicast VLAN Registration (MVR) is designed fo r applications (such as Media-on-Demand (MoD)) using multicast tra[...]

Chapter 37 Product Specifications GS-3012/GS-3012F User’s Guide 278 The following list, which is not exhaustive, i llustrates the standards su pported in the Switch. Ta b l e 11 1 Feature Specif ications Layer 2 Features Bridging 16K MAC addresse s S tatic MAC address filtering by sou rce/destination Broadcast storm control S tatic MAC address fo[...]

Chapter 37 Product Specifications GS-3012/GS- 3012F User’s Guid e 279 RFC 1 1 12 IGMP v1 RFC 1 155 SMI RFC 1 157 SNMPv1: Simple Network Management Protocol version 1 RFC 1213 SNMP MIB II RFC 1305 Network Time Protocol (NTP version 3) RFC 1441 SNMPv2 Simple Network Management Protocol version 2 RFC 1493 Bridge MIBs RFC 1643 Ethernet MIBs RFC 1757 [...]

Chapter 37 Product Specifications GS-3012/GS-3012F User’s Guide 280[...]

281 P ART VII Appendices and Index IP Addresses and Subnetting (283) Common Services (293) Legal Information (297) Customer Support (301) Index (307)[...]

282[...]

GS-3012/GS- 3012F User’s Guid e 283 A PPENDIX A IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking devic[...]

Appendix A IP Addre sses and Subnetting GS-3012/GS-3012F User’s Guide 284 Figure 162 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are part of [...]

Appendix A IP Addresses and Subnetting GS-3012/GS- 3012F User’s Guid e 285 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the maximum number of pos[...]

Appendix A IP Addre sses and Subnetting GS-3012/GS-3012F User’s Guide 286 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the comp[...]

Appendix A IP Addresses and Subnetting GS-3012/GS- 3012F User’s Guid e 287 Figure 164 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). 192[...]

Appendix A IP Addre sses and Subnetting GS-3012/GS-3012F User’s Guide 288 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 1 18 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VA L U E[...]

Appendix A IP Addresses and Subnetting GS-3012/GS- 3012F User’s Guid e 289 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 2[...]

Appendix A IP Addre sses and Subnetting GS-3012/GS-3012F User’s Guide 290 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If t[...]

Appendix A IP Addresses and Subnetting GS-3012/GS- 3012F User’s Guid e 291 IP Address Conflict s Each device on a network must have a unique IP address. Devices with duplicate IP addresses on the same network will not be ab le to access the Internet or ot her resources. The devices may also be unreachable through the network. Conflicting Computer[...]

Appendix A IP Addre sses and Subnetting GS-3012/GS-3012F User’s Guide 292 Conflicting Computer and R outer IP Addresses Example More than one device can not use the same IP addr ess. In the following example, the computer and the router ’ s LAN port both use 192.168.1.1 as the IP ad dress. The computer cannot access the Internet. This problem c[...]

GS-3012/GS- 3012F User’s Guid e 293 A PPENDIX B Common Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, descrip ti[...]

Appendix B Common Services GS-3012/GS-3012F User’s Guide 294 FTP TCP TCP 20 21 File Tr a nsfer Program, a program to enable fast transfer of files, including large fil es that may not be possible by e-mail. H.323 TCP 1720 NetMeeting uses this protocol. HTTP TCP 80 Hyper T ext T ransfer Protoco l - a client/ server protocol for the world wide web.[...]

Appendix B Common Services GS-3012/GS- 3012F User’s Guid e 295 RTE L NE T TCP 10 7 Remote T el net. RTS P TCP/UDP 554 The Real T i me S treaming (med ia control) Protocol (RTSP) is a remote control for multimedia on the Internet. SFTP TCP 11 5 Simple File Transfer Protocol. SMTP TCP 25 Simple Mail Transfer Protocol is the message-exchange standar[...]

Appendix B Common Services GS-3012/GS-3012F User’s Guide 296[...]

GS-3012/GS- 3012F User’s Guid e 297 A PPENDIX C Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mec[...]

Appendix C Legal Info rmation GS-3012/GS-3012F User’s Guide 298 FCC W arning This device has been tested and foun d to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. Thes e limits are designed to provide reasonable protection against harmful interference in a co mmercial environment. Thi s device genera[...]

Appendix C Legal Infor mation GS-3012/GS- 3012F User’s Guid e 299 condition. Any replacement will consist of a ne w or re-manufactured f unctionally equivalent product of equal or higher value, and will be so lely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tamp ered with, damaged by an act[...]

Appendix C Legal Info rmation GS-3012/GS-3012F User’s Guide 300[...]

[Document Title] 301 A PPENDIX D W EB : Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps you took to solv e it. “+” is t[...]

Appendix D Custo mer Support [Document Title] 302 • Re g u la r M ai l : ZyXEL Communications, Czech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb: www .zyxel.dk • Re g u la r Ma [...]

Appendix D Customer Support [Document Title] 303 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91 -11-308 88153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .zyxel.in • Re g u l ar M ai l : India - ZyXEL T echnology Indi a Pvt Ltd. , I I - Fl o o r, F2/9 Okhla[...]

Appendix D Custo mer Support [Document Title] 304 • Re g ul a r Ma i l: ZyXEL Communications Inc., 1 130 N. Miller St., Anaheim, CA 92 806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • W eb: www .zyxel.no • Re g u la r Ma i l : ZyXEL Commun[...]

Appendix D Customer Support [Document Title] 305 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .zyxel.se • Re g ul a r M a i l: ZyXEL Communications A/S, Sjöporten 4, 41764 Götebor g, Sweden Thailand • Support E-mail: support@zyxel.co.th • [...]

Appendix D Custo mer Support [Document Title] 306[...]

Index GS-3012/GS- 3012F User’s Guid e 307 Index Numerics 802.1P priority 79 A AAA 169 AAA (Authentication, Author ization and Accounting) 169 access control limitations 233 login account 242 remote management 249 service port 248 SNMP 234 accounting 169 setup 174 address learning, MAC 91 Address Resolution Protocol (ARP) 265 , 267 , 268 administr[...]

Index GS-3012/GS-3012F User’s Guide 308 and switch passwords 262 cluster manager 257 , 261 cluster me mber 257 , 262 cluster member firmware upgrade 260 network example 257 setup 260 specification 257 status 258 switch models 257 VID 261 web configurator 259 cluster manager 257 cluster me mber 257 Committed Informati on Rate (CIR) 11 7 Common and[...]

Index GS-3012/GS- 3012F User’s Guid e 309 front panel 41 FTP 231 file transfer procedure 231 restrictions over W AN 232 G GARP 84 GARP (Generic Attribute Registration Protocol) 84 GARP terminology 84 GARP timer 74 , 84 general features 278 general setup 71 getting help 57 Gigabit ports 42 GMT (Greenwich Mean Time) 72 GS-3012 models 31 GS-3012F mo[...]

Index GS-3012/GS-3012F User’s Guide 310 login 49 passwor d 54 login account Administrator 242 non-administrator 243 login accounts 242 configuring via web configura tor 242 multiple 242 number of 242 login p assword 243 loop guard 203 examples 204 port shut down 205 setup 205 vs STP 203 M MAC (Media Access Contro l) 70 MAC address 70 , 265 maximu[...]

Index GS-3012/GS- 3012F User’s Guid e 31 1 network management system (NMS) 234 NTP (RFC-1305) 72 P passwor d 54 administrator 243 Peak Information Rate (PIR) 11 7 PHB (Per-Hop Behavior) 207 ping, test connection 251 PIR (Peak Information Rate) 11 7 policy 149 , 150 and classifier 149 and DiffServ 147 configuration 149 example 151 overview 147 rul[...]

Index GS-3012/GS-3012F User’s Guide 312 service 250 trusted comp uters 250 resetting 56 , 228 to factory default settings 228 restoring configuration 56 , 230 RFC 3164 253 Round Robin Scheduling 153 routing protocols 278 RSTP 99 rubber feet 37 S safety certifications 279 safety warnings 6 save configuration 55 , 228 screen summary 52 Secure Shell[...]

Index GS-3012/GS- 3012F User’s Guid e 313 system log 251 system reboot 229 T T ACACS+ 169 , 170 setup 172 T ACACS+ (T erminal Access Controller Access- Control System Pl us) 169 tagged VLAN 83 temperature 275 temperature indicator 70 terminal emulation 42 time current 72 time zone 72 T ime (RFC-868) 72 time se rver 72 time servi ce protocol 72 fo[...]

Index GS-3012/GS-3012F User’s Guide 314 WRR (Weighted Round Robin Scheduling) 153 Z ZyNOS (ZyXEL Network Operating System) 231[...]