ZyXEL Communications GS2210 manual

Quick Start Guide www .zyxel.com GS2210 Series Intelligent Lay er 2 GbE Switch V e rsion 4.10 Edition 3, 05/2014 Copyright © 2014 Z yXEL Communications Corpor ation User’s Guide Default Login Details LAN IP Address http://192.168.1.1 User Name admin P assword 1234[...]

GS2210 Series User’s Guide 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Gu ide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ sl ightly from your product due to differences in your product firmware o r your computer op[...]

Contents Overview GS2210 Series User’s Guide 3 Contents Overview User ’ s Guide .................................................................... .......... ........... ......................... ..................... 17 Getting to Know Y our Sw itch ........... ................ ................ ................. ................... .........[...]

Contents Overview GS2210 Series User’s Guide 4 ARP Setup ................... ................ ................... ................ ................. ................ .............. .................. ..... 297 Maintenance ............. ................. ................ ................ ................... ................ ................. . ...[...]

Table of Co ntents GS2210 Series User’s Guide 5 Table of Contents Contents Overview .......................................................... .................................................... ................. 3 Table of Contents ................................................. ..................................................... ..........[...]

Table of Contents GS2210 Series User’s Guide 6 Chapter 4 The Web Configurator ..................................................... ..................................................... .............. 32 4.1 Overview ................ ................ ................ ................ ................ ................ ................. . .........[...]

Table of Co ntents GS2210 Series User’s Guide 7 8.2 System Inf ormation ................... ................ ................. ................ ................ ................. ..... .............. 6 0 8.3 General Setup .......... ................ ................ .................... ................ ................ ........... ..............[...]

Table of Contents GS2210 Series User’s Guide 8 10.1 Overview ....... .................... ................ ................ ................ ................ ................ ...... ...................... 107 10.1.1 What Y ou Can Do ....... ................ .......... ...... ................ ................ ................. ................ ...[...]

Table of Co ntents GS2210 Series User’s Guide 9 Chapter 15 Broadcast St orm Control ..................................................................... ................................... ......... 135 15.1 Broadcast S torm Control O verview ..................... ................ .................... ................ ............... .... .. 135[...]

Table of Contents GS2210 Series User’s Guide 10 20.2 Configuring the Classifier ....... ................ ................ ................. ................ ................ ...... ............... 156 20.2.1 Viewing and Editin g Classifier Configuration .... ................... ................ ................ ............... 158 20.3 Classifier[...]

Table of Co ntents GS2210 Series User’s Guide 11 24.1.2 What Y ou Need to Know ....... ................ ................ ................ ................ ................ ........... .... 192 24.2 AAA Screens ........... ................... ................ ................. ................ ................... ............ .............. ..... [...]

Table of Contents GS2210 Series User’s Guide 12 27.1.2 What Y ou Need to Know ....... ................ ................ ................ ................ ................ ........... .... 230 27.2 Configuring Layer 2 Protocol Tunneling ..... ................. ................ ................ ................ ............. ..... 231 Chapter 28 PP[...]

Table of Co ntents GS2210 Series User’s Guide 13 32.6.1 LLDP Configuration Basic TL V Setting ................ ................ ................... ................ ............ 268 32.6.2 LLDP Configuration Basic Org-spec ific TL V Setting ............... .................... ................ ........ 269 32.7 LLDP-MED Configuration ............[...]

Table of Contents GS2210 Series User’s Guide 14 36.1.1 What Y ou Can Do ....... ................ .......... ...... ................ ................ ................. ................ ...... .. 297 36.1.2 What Y ou Need to Know ....... ................ ................ ................ ................ ................ ........... .... 297 36.2 A[...]

Table of Co ntents GS2210 Series User’s Guide 15 39.1 Overview ....... .................... ................ ................ ................ ................ ................ ...... ...................... 333 39.2 Diagnostic ....... .................... ................ ................ ................ ................ ................... ....[...]

Table of Contents GS2210 Series User’s Guide 16 Chapter 46 Neighbor T able ....................... ............................................................... ........................... ................. 353 46.1 IPv6 Neighbor T able Overv iew ............ ................ .................... ................ ................... ......... .[...]

17 P ART I User ’ s Guide[...]

GS2210 Series User’s Guide 18 C HAPTER 1 Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS2210 Seri es consist of the four following models: • GS2210-24 • GS2210-24HP • GS2210-48 • GS2210-48HP Referring to P oE model(s) in this User's Guide only applies for G[...]

Chapter 1 Getting to Know Your Switch GS2210 Series User’s Guide 19 The following table describes the P oE features of the Switch by model. This section shows a few examples of using the Switch in v arious network environments. 1.1.1 Backbone Application The Switch is an ideal solution for small networks where rapid growth can be expected in the [...]

Chapter 1 Getting to Know Your Switch GS2210 Series User’s Guide 20 Figure 2 Bridging Application 1.1.3 High Performa nce Switching Example The Switch is ideal for connecting two networks that need high bandwidth. In th e following example, use trunking to connect these two networks. Switching to higher-speed LANs such as A TM (A sy nchronous T r[...]

Chapter 1 Getting to Know Your Switch GS2210 Series User’s Guide 21 1.1.4.1 T ag-based VLAN Example Po rts in the same VLAN group share the same frame broadcast domain thus increase network performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re-cabling. Shared reso[...]

Chapter 1 Getting to Know Your Switch GS2210 Series User’s Guide 22 • Write down the password and put it in a safe place. • Back up the configur ation (and make sure y ou know how to restore it). R estoring an earlier working configur ation may be useful if the devi ce becomes unstable or even crashes. If y ou forget your password, y ou will [...]

GS2210 Series User’s Guide 23 C HAPTER 2 Hardware Installation and Connection 2.1 Inst allation Scenarios This chapter shows you how to install and connect the Sw itch. The Switch can be placed on a desktop or r ack -mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the br ackets in a rack -mounted installation. No[...]

Chapter 2 Hardware Installation and Connection GS2210 Series User’s Guide 24 • Make sure the position of the S witch does not make the r ack unstable or top-heavy . T ake all necessary precautions to anchor the rack securely before installing the unit. 2.3.2 Att aching the Mounti ng Brackets to the Switch 1 Po sition a mounting bracket on one s[...]

Chapter 2 Hardware Instal lation and Connection GS2210 Series User’s Guide 25 Figure 6 Mounting the Switch on a Rack 2 Using a #2 Philips screwdriver , install the M5 flat head screws through the mounting br acket holes into the rack. 3 R epeat steps 1 and 2 to attach the second mounting brack et on the other side of the r ack.[...]

GS2210 Series User’s Guide 26 C HAPTER 3 Hardware Panels This chapter describes the front panel and rear pa nel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel The following figures show the front panels of the S witch. Figure 7 Front Panel: GS2210-24 Figure 8 Front Panel: GS2210-24HP Figure 9 Front Panel: GS2210[...]

Chapter 3 Hardware Panels GS2210 Series User’s Guide 27 Note: The dual personality ports change to fi ber mode directly when in serting t he fiber module. When auto-negotiation is turned on, an Ethernet port negotiates with the peer automatically to determine th e con nection spee d and d upl ex mod e. If the peer Ethernet port does not support a[...]

Chapter 3 Hardware Pan els GS2210 Series User’s Guide 28 3 The Switch automatically detects the installed transceiver . Check the LEDs to verify that it is functioning properly . 4 Close the transceiver’s latch (latch styles v ary). 5 Connect the fiber optic cables to the transceiv er . Figure 1 1 T ransceiver Installation Example Figure 12 Con[...]

Chapter 3 Hardware Panels GS2210 Series User’s Guide 29 3.1.3 LED Mode (only available for GS2210-48HP) After you push this button (see Section Figure 10 on page 26 ) to active PoE on the Switch, view the LEDs to ensure proper functioning of the S witch and as an aid in troubleshooting (see Section 3.3 on page 30 ). 3.2 Rear Panel The following f[...]

Chapter 3 Hardware Pan els GS2210 Series User’s Guide 30 T o connec t power to the Switch, insert the female end of the power cord to the AC power receptacle on the rear panel. Connect the other end of the supplied power cord to a power outlet. Mak e sure that no objects obstruct the airflow of the fans (located on the side of th e unit). See Cha[...]

31 P ART II T echnical Reference[...]

GS2210 Series User’s Guide 32 C HAPTER 4 The Web Configurator 4.1 Overview This section introduces the configur ation and functions of the web configur ator . The web configurator is an HTML -based management interface that allows easy Switch setup and management via Intern et browser . Use Internet Ex plorer 6.0 and later , Netscape Navigator 7.[...]

Chapter 4 The Web Configurator GS2210 Series User’s Guide 33 Figure 20 W eb Configur ator: Login 4 Click OK to view the first web configurator screen. 4.3 The S t atus Screen The Status screen is the first screen that displays when y ou access the web configur ator . This guide uses PoE model(s) screens as an example. The screens may very slightl[...]

Chapter 4 The Web Configurator GS2210 Series User’s Guide 34 D - Click this link to logout of the web configur ator . E - Click this link to display web help pages. Th e help pages provide descriptions for all of the configuration screens. F - Click this link to go to the Z ON Neighbor Management screen where you can see and manage neighbor devic[...]

Chapter 4 The Web Configurator GS2210 Series User’s Guide 35 Port Setup This link takes you to a screen where you can configure se ttings for individual Switch ports. PoE Setup For P o E m odel(s) This link takes you to a screen where you can se t priorities so that the S witch is able to reserve and allocate power to certain PDs. Interface Setup[...]

Chapter 4 The Web Configurator GS2210 Series User’s Guide 36 4.3.1 Change Y our Password After you log in for the first time, it is recommended y ou change the default adm inistrator password. Click Management > Access Control > Logins to display the next screen. PPPoE This link takes you to a screen where you can configure intermediate age[...]

Chapter 4 The Web Configurator GS2210 Series User’s Guide 37 Figure 22 Change Administrator Login P assword 4.4 Saving Y our Configuration When you are done modifying the settings in a screen, click Apply to save y our changes back to the run-time memory . Settings in the run-time memo ry are lost w hen th e S wi tch’ s power is turned off . Cl[...]

Chapter 4 The Web Configurator GS2210 Series User’s Guide 38 5 Misconfigure the text configuration file. 6 F orge t the passw ord and/o r IP address. 7 Prevent all services from accessing the Switch. 8 Change a service port number but forget it. Note: Be careful not to lock y ourse lf and other s out of the Swit ch. 4.6 Resetting the Switch If yo[...]

Chapter 4 The Web Configurator GS2210 Series User’s Guide 39 Figure 23 W eb Configur ator: Logout Screen 4.8 Help The web configurator’s online help has description s of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen.[...]

GS2210 Series User’s Guide 40 C HAPTER 5 Initial Setup Example 5.1 Overview This chapter shows how to set up th e Switch for an example network. The following lists the configuration steps fo r the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast fr [...]

Chapter 5 Initial Setup Example GS2210 Series User’s Guide 41 2 In the Static VLAN screen, select ACTIVE , enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID. 3 Since the VLAN2 netwo[...]

Chapter 5 Initia l Setup Example GS2210 Series User’s Guide 42 Figure 25 Initial Setup Network Example: Port VID 1 Click Advanced Applications > VLAN > VLAN Configuration in the navigation panel. Then click the VLAN Port Setup link. 2 Enter 2 in the PVID field for port 2 and click Apply to save your changes back to the run- time memory . Se[...]

Chapter 5 Initial Setup Example GS2210 Series User’s Guide 43 3 Click Basic Setting > IP Setup in the navigation panel. 4 Configure the related fields in the IP Setup screen. 5 For t h e VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255. 0 as the subnet mask. 6 In the VID field, enter the ID of the VLAN group to which you want[...]

GS2210 Series User’s Guide 44 C HAPTER 6 Tutorials 6.1 Overview This chapter provides some examples of using th e web configur ator to set up and use the Switch. The tutorials include: • How to Use DHCP Snooping on the S witch • How to Use DHCP R elay on the Switch 6.2 How to Use DHCP Snooping on the Switch Y ou only want DHCP serv er A conne[...]

Chapter 6 Tutorials GS2210 Series User’s Guide 45 2 Go to Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup , and create a VLAN with ID of 100. Add ports 5, 6 and 7 in the VLAN by select ing Fixed in the Control field as shown. Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN tag. Clic[...]

Chapter 6 Tutorials GS2210 Series User’s Guide 46 Figure 29 T utorial: T ag Untagged Frames 4 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure , activate and specify VLAN 100 as the DHCP VLAN as shown. C lick Apply . Figure 30 T utorial: Specify DHCP VL AN 5 Click the Port link at the top right corner .[...]

Chapter 6 Tutorials GS2210 Series User’s Guide 47 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5. Keep ports 6 and 7 Untrusted because they are conne cted to DHCP clie nts. Click Apply . Figure 31 T utorial: Set the DHCP Server Port to T[...]

Chapter 6 Tutorials GS2210 Series User’s Guide 48 Figure 33 T utorial: Check the Binding If DHCP Snooping W orks Y ou can also telnet or log into the Switch’ s console. Use the command “ show dhcp snooping binding ” to see the DHCP snooping bi nding table as shown next. 6.3 How to Use DHCP Relay on the Switch This tutorial describes how to [...]

Chapter 6 Tutorials GS2210 Series User’s Guide 49 2 Go to Basic Setting > Switch Setup and set the VLAN t ype to 802.1Q . Click Apply to save the settings to the run-time memory . Figure 35 T utorial: Set VLAN T ype to 802.1Q 3 Click Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup . 4 In the Static VLAN screen, se[...]

Chapter 6 Tutorials GS2210 Series User’s Guide 50 Figure 36 T utorial: Create a Static VLAN 8 Click the VLAN Configuration link in the Static VLAN Setup screen and then the VLAN Port Setup link in the VLAN Configuration screen. Figure 37 T utorial: Click the VLAN Port Setting Link 9 Enter 102 in the PVID field for port 2 to add a tag to incoming [...]

Chapter 6 Tutorials GS2210 Series User’s Guide 51 11 Click the Save link in the upper right corner of the web configurator to save your conf iguration permanently . 6.3.3 Configuring DHCP Relay Follow the steps below to enable DHCP relay on th e Switch and allow the Switch to add relay agent information (such as the VL AN ID) to DHCP requests. 1 [...]

GS2210 Series User’s Guide 52 C HAPTER 7 ZON Utility, ZON Neighbor Management and Port Status 7.1 Overview This chapter describes the screens for ZON Utility , ZON Neighbor Management, Port Status, P ort Details, and PoE status. The home screen of the web configurator displays a port statistical summary with links to each port showing statistical[...]

Chapter 7 ZON Utility, ZON Nei ghbor Ma nagement and Port Status GS2210 Series User’s Guide 53 Figure 40 ZON Utility Screen 7.3 ZON Neighbor Management Screen The ZON Neighbor Management screen allows y ou to view and m anage the Switch’ s neighboring devices more conveniently . It uses Layer Link Discovery Protocol (LLDP) to disco ver all neig[...]

Chapter 7 ZON Utili ty, ZON Neig hbor Management and Port Status GS2210 Series User’s Guide 54 Figure 41 Status > Neighbor The following table describes the fields in the above screen. T a ble 7 Status > Neighbor LABEL DESCRIPTION Local Port This shows the port number of the local device in the network. Name This shows the name of the local[...]

Chapter 7 ZON Utility, ZON Nei ghbor Ma nagement and Port Status GS2210 Series User’s Guide 55 7.4 Port S t atus Summary T o view the port statistics, click Status in all web configurator screens to displa y the Status screen as shown next. Figure 42 Status (for PoE model(s)) PWR Cycle Click the Cycle button to turn OFF the power of the neighbor [...]

Chapter 7 ZON Utili ty, ZON Neig hbor Management and Port Status GS2210 Series User’s Guide 56 The following table describes the labels in this screen. 7.4.1 St atus: Port Det ails Click a number in the Port column in the Status screen to displa y individual port statistics. Use this screen to check status and detailed performance data about an i[...]

Chapter 7 ZON Utility, ZON Nei ghbor Ma nagement and Port Status GS2210 Series User’s Guide 57 Figure 43 Status > Port Details The following table describes the labels in this screen. T a ble 9 Status: Port Details LABEL DESCRIPTION Port Info Por t NO. This field displays the port number yo u are viewing. Name This field displays the name of t[...]

Chapter 7 ZON Utili ty, ZON Neig hbor Management and Port Status GS2210 Series User’s Guide 58 Errors This field shows the number of received errors on this por t. Tx KB/s This fie ld shows the number of kilobytes per se cond transmitted on this port. Rx KB/s This field shows the number of kilo bytes per second received on this port. Up Time This[...]

Chapter 7 ZON Utility, ZON Nei ghbor Ma nagement and Port Status GS2210 Series User’s Guide 59 1024- 1518 This field shows the num ber of packets (includi ng bad packets) receiv ed that were between 1024 and 1518 octets i n length. Giant This field shows t he n umber of packets (inclu ding bad packets) receiv ed that were between 1519 octets and [...]

GS2210 Series User’s Guide 60 C HAPTER 8 Basic Setting 8.1 Overview This chapter describes how to configure the System Info, Ge neral Setup , Switch Setup , IP Setup , Port Setup , PoE, Inte rface Setu p and IPv6 screens. 8.1.1 What Y ou Can D o •U s e t h e System Info screen ( Section 8.8 on page 70 ) to check the firmware version number . ?[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 61 Figure 44 Basic Setting > System Info (for PoE mo del(s) only) The following table describes the labels in this screen. T a ble 10 Basic Setting > System Info LABEL DESCRIPTION System Name This fiel d displays the descriptive name of the Swit ch for identification purposes. Product Model[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 62 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Bas ic Setting > General Se tup in the navigation panel to display the screen as shown. Figure 45 Basic Setting > General Setup Fa n S p e e d (RPM) A properly function ing fan is an e[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 63 The following table describes the labels in this screen. Ta b l e 1 1 Basic Setting > General Setup LABEL DESCRIPTION System Name Choose a descript ive name for i dentification purposes. This name consists of up to 64 printable characters; spaces are allowed. Location Enter the geogr aphic [...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 64 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a ph ysic al network to be partitioned into multiple logical networks. Devices on a logical network belong to on e gr ou p. A d ev ic e c an be lo ng to mo re th an on e group. With VLAN, a device cannot directly talk to or h[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 65 Figure 46 Basic Setting > Switch Setup The following table describes the labels in this screen. T a ble 12 Basic Setting > Switch Setup LABEL DESCRIPTI ON VLAN T ype Choose 802.1Q or Port Based . The VLAN Set up screen changes depending on whether you choose 802.1Q VLAN type or Port Base[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 66 8.6 IP Setup Use the IP Setup screen to configure the Switch IP addres s, default gateway device, the default domain name server and the management VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic. 8.6.1 Manage ment IP Addresses The S[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 67 Figure 47 Basic Setting > IP Setup The following table describes the labels in this screen. T a ble 13 Basic Setting > IP Setup LABEL DESCRIPTION Domain Nam e Serve r DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. Enter a domain name[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 68 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to displa y the configuration screen. Default Gateway Enter the IP address of th e default outgoing gateway in dott ed deci mal notation, for example 192.168. 1.254. VI[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 69 Figure 48 Basic Setting > Port Setup The following table describes the labels in this screen. T a ble 14 Basic Setting > Port Setup LABEL DESCRIPTION Port This is the port index number . * Settings in this row apply to all ports. Us e t h is ro w o n ly if yo u w an t t o ma ke so me s e[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 70 8.8 PoE S t atus Note: The following screens are available for the P oE model(s) only . Some features are only av ailable for the Ethernet port s (1 to 24 for GS2210-24HP and 1 to 48 for GS2210-48HP). The PoE model(s) supports the IEEE 802.3at High P ower over Ethernet (P oE) standard. A power[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 71 T o view the current amount of power that PDs are receiving from the Switch, click Basic Setting > PoE Setup . Figure 50 Basic Setting > PoE Status The following table describes the labels in this screen. T a ble 15 Basic Setting > PoE Status LABEL DESCRIPTION PoE Sta tu s PoE Mode Th[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 72 8.8.1 PoE Setup Use this screen to set the priority levels for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 51 Basic Setting > PoE Setup Class This shows th e power classificati on of the PD[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 73 The following table describes the labels in this screen. 8.9 Interface Setup An IPv6 address is configured on a per-interface basis. The interface can support virtual interface (for example, a VLAN). The Switch supports the VLAN interface type for IPv6 at the time of writing. Use this screen t[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 74 Figure 52 Basic Setting > Interface Setup The following table describes the labels in this screen. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’ s management IPv6 addresses. Click Basic Setting > IPv6 in the navigation panel to display the IPv6 statu[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 75 Figure 53 Basic Setting > IPv6 The following table describes the labels in this screen. 8.10.1 IPv6 Interface St atus Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following scree[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 76 Figure 54 Basic Setting > IPv6 > IPv6 Interface Status The following table describes the labels in this screen. T a ble 19 Basic Setting > IPv6 > IPv6 Interface Status LABEL DESCRIPTION IPv6 Active This field displ ays whether the IPv6 interface is activated or not. MTU Size This f[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 77 Global Unicast Address(es) This field displays the Swit ch’ s global unicast address to identify this interface. Joined Group Address(es) This field displays the IPv6 multicast addresses of groups the Switch ’ s interfa ce joins. ND DAD Active This field displays whether Neighbor Discovery[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 78 8.10.2 IPv6 Configuration Use this screen to configure IPv6 settings on the Switch. Click the IPv6 Configuration link in the Basic Setting > IPv6 screen. The following screen opens. Figure 55 Basic Setting > IPv6 > IPv6 Configuration The following table describes the labels in this sc[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 79 Figure 56 Basic Setting > IPv6 > IPv6 Conf iguration > IPv6 Global Setup The following table describes the labels in this screen. 8.10.4 IPv6 Interface Setup U s e t h i s s c r e e n t o t u r n o n o r o f f a n I P v 6 i n t e r f a c e and enable stateless auto configuration on it[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 80 The following table describes the labels in this screen. 8.10.5 IPv6 Link-Local Address Setup A link -local address uniquely identifies a device on the local network (the LAN). It is similar to a “private IP address” in IPv4. Y ou can have the sa me link -local address on multiple interfac[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 81 8.10.6 IPv6 Global Address Setup Use this screen to configure the interface’ s IP v6 global address. Click the link next to IPv6 Global Address Setup in the IPv6 Conf iguration screen to display the screen as shown next. Figure 59 Basic Setting > IPv6 > IPv6 Configur ation > IPv6 Gl[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 82 8.10.7 IPv6 Neighbor Discovery Setup Use this screen to configure neighbor discovery settings for each interface. Click the link next to IPv6 Neighbor Discovery Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 60 Basic Setting > IPv6 > IPv6 Configurat io[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 83 8.10.8 IPv6 Neighbor Setup Use this screen to create a static IPv6 neighbor en try in the Switch’ s IPv6 neighbor table to store the neighbor information permanently . Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown n ext. Figure 61 [...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 84 8.10.9 DHCPv6 Client Setup Use this screen to configure the Switch’ s DHCP setti ngs when it is acting as a DHCPv6 client. Click the link next to IPv6 Neig hbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 62 Basic Setting > IPv6 > IPv6 Conf igurat[...]

Chapter 8 Basic Setting GS2210 Series User’s Guide 85 The following table describes the labels in this screen. T a ble 27 Bas ic Setting > I P v 6 > IPv6 Config uration > D HC Pv6 Client Set up LABEL DESCRIPTION Interface Select the IPv6 inte rface you want to configure. IA T ype Select IA-NA to set the Switch to get a n o n-tempor ary I[...]

GS2210 Series User’s Guide 86 C HAPTER 9 VLAN 9.1 Overview This chapter shows you how to configure 802.1Q ta gged and port-based VLANs. The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. 9.1.1 What Y ou Can D o •U s e t h e VLAN Status screen ( Section 9.2 on page 89 ) to view and search all VLAN g[...]

Chapter 9 VLAN GS2210 Series User’s Guide 87 and two bytes of TCI (T ag Control Information, star ts after the source address field of th e Ethernet frame). The CFI (Canonical Form at Indicator) is a single-bit flag, always set to zero for Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then that fr ame should not b[...]

Chapter 9 VLAN GS2210 Series User’s Guide 88 Please refer to the following table for common IEEE 802.1Q VLAN terminology . 9.1.2.2 Port VLAN T runking Enable VLAN Trunking on a port to allow fr ames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without ha ving to config[...]

Chapter 9 VLAN GS2210 Series User’s Guide 89 Figure 64 Switch Setup > Select VLAN T ype St atic VLAN Use a static VLAN to decide whether an incoming fr ame on a port should be • sent to a VLAN grou p as normal depending on its VLA N tag. • sent to a group whether it has a VLAN tag or not. • blocked from a VLAN group regardless of its VLA[...]

Chapter 9 VLAN GS2210 Series User’s Guide 90 9.2.1 VLAN Det ails Use this screen to view detailed port settings and status of the VLAN group . Click on an index number in the VLAN Status screen to display VLAN details. Figure 66 Advanced Application > VLAN > VLAN Detail The following table describes the labels in this screen. Status This fi[...]

Chapter 9 VLAN GS2210 Series User’s Guide 91 9.3 VLAN Configuration Use this screen to view IEEE 802.1Q VLAN parameters for the S witch. Click Advanced Application > VLAN > VLAN Configuration to see the following screen. Figure 67 Advanced Application > VLAN > VLAN Configuration The following table describes the labels in the above sc[...]

Chapter 9 VLAN GS2210 Series User’s Guide 92 Figure 68 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup The following table describes the related labels in this screen. T a ble 32 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup LABEL DESCRIPTION ACTIVE Select this check box to activate th[...]

Chapter 9 VLAN GS2210 Series User’s Guide 93 9.5 Configure VLAN Port Settings Use the VLAN Port Setup screen to configure the st atic VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setup link in the VLAN Configuration screen. Figure 69 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup Cancel C lick Cancel to [...]

Chapter 9 VLAN GS2210 Series User’s Guide 94 The following table describes the labels in this screen. 9.6 Subnet Based VLANs Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP subnet you specify . When a frame is received on a port, the S w itch checks if a tag is added already and the IP subnet it c ame from.[...]

Chapter 9 VLAN GS2210 Series User’s Guide 95 172.16.1.0/24, video for 192.168.1. 0/24 and data for 10.1.1.0/24. The Switch can then be configured to group incoming tr affic based on th e source IP subnet of incoming frames. Y ou configure a subnet based VLAN with priority 6 and VID of 100 for traffic received from IP subnet 172.16.1.0/24 (voice s[...]

Chapter 9 VLAN GS2210 Series User’s Guide 96 Figure 71 Advanced Application > VLAN > VLAN Configuration > Subnet Based VLAN Setup The following table describes the labels in this screen. T a ble 34 Advanced Application > VLAN > VL AN Configuration > Subne t Based VLAN Setup LABEL DESCRIPTION Active Check this box to acti vate th[...]

Chapter 9 VLAN GS2210 Series User’s Guide 97 9.7 Protocol Based VLANs Protocol based VLANs allow you to grou p traffic into logical VLANs based on the protocol y ou specify . When an upstream frame is received on a port (configured for a protocol based VLAN), the Switch checks if a tag is added already and its protocol. The untagged packets of th[...]

Chapter 9 VLAN GS2210 Series User’s Guide 98 Note: Protocol-based VLAN applies to un-tagged packets and is applic able only when you use IEEE 802.1Q tagged VLAN. Figure 73 Advanced Application > VLAN > VLAN Configuration > Protocol Based VLAN Setup The following table describes the labels in this screen. T a ble 35 Advanc ed Application [...]

Chapter 9 VLAN GS2210 Series User’s Guide 99 9.8 Port-based VLAN Setup Port -based VLANs are VLANs where the packet forwar ding decision is based on the destination MAC address and its associated port. Port -based VLANs require allowed outgoing p orts to be defined for each port. Therefore, if you wish to allow two subscriber ports to talk to eac[...]

Chapter 9 VLAN GS2210 Series User’s Guide 100 Figure 74 Port Based VLAN Se tup (All Connecte d )[...]

Chapter 9 VLAN GS2210 Series User’s Guide 101 Figure 75 Port Based VLAN Setup (P ort Isolation)[...]

Chapter 9 VLAN GS2210 Series User’s Guide 102 The following table describes the labels in this screen. 9.9 V oice VLAN V oice VLAN ensures that the sound qualit y of an IP phone is preserved from deterior ating when the data traffic on the S witch ports is high. It groups the voice tr affic with defined priority into an assigned VLAN which enable[...]

Chapter 9 VLAN GS2210 Series User’s Guide 103 Figure 76 Advanced Application > VLAN > VLAN Configuration > V oice VLAN Setup The following table describes the fields in the above screen. T a ble 37 Adva nc ed Application > VLAN > VLAN Confi guration > Vo ice VL AN Setup LABEL DESCRIPTION V oice VLAN Global Setup V oice VLAN Clic[...]

Chapter 9 VLAN GS2210 Series User’s Guide 104 9.10 MAC-based VLAN The MAC-based VLAN feature assigns incoming untagged packets to a VLAN and classifies the traffic based on the source MAC address of the packet. When untagged pack ets arrive at the switch, the source MAC address of th e packet is looked up in a MAC to VLAN mapping table. If an ent[...]

Chapter 9 VLAN GS2210 Series User’s Guide 105 9.1 1 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 9.1 1.1 Create an IP -based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. F ollow these steps: 1 Activate this protocol based VLAN[...]

Chapter 9 VLAN GS2210 Series User’s Guide 106 Figure 78 Protocol Based VLAN Configuration Example T o add more ports to this protocol based VLAN. 1 Click the index number of the protocol based VLAN entry . Click 1 2 Change the value in the Port field to the next port you want to add. 3 Click Add .[...]

GS2210 Series User’s Guide 107 C HAPTER 10 Static MAC Forward Setup 10.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your net wor k. Use these screens to configure static MAC address forwarding. 10.1.1 What Y ou Can Do Use the Static MAC Forwarding screen ( Section 10.2 on page 107 ) to a[...]

Chapter 10 Static MAC Forward Setup GS2210 Series User’s Guide 108 The following table describes the labels in this screen. T a ble 39 Advanced Application > Static MAC Forwarding LABEL DESCRIPTION Active Select this che ck box to activ ate your rule. Y ou may temporarily deac tivate a rul e without deleting it by cleari ng this check box. Nam[...]

GS2210 Series User’s Guide 109 C HAPTER 11 Static Multicast Forward Setup 1 1.1 St atic Multicast Forward Setup Overview This chapter discusses how to configure forwarding rules based on multicast MAC addresses of devices on your network. Use these screens to configure static multicast address forwarding. 1 1.1.1 What Y ou Can Do Use the Static M[...]

Chapter 11 Static Multicast Forward Setup GS2210 Series User’s Guide 11 0 Figure 81 Static Multicast Forwarding to A Single P ort Figure 82 Static Multicast Forwarding to Multiple P orts 1 1.2 Configuring St atic Multicast Forwarding Use this screen to configure rules to forward specif ic multicast fr ames, such as streaming or control frames, to[...]

Chapter 11 Static Multicast Forward Setup GS2210 Series User’s Guide 111 The following table describes the labels in this screen. T a ble 40 Advanced Application > Static Multicast Forwarding LABEL DESCRIPTION Active Select this che ck box to activ ate your rule. Y ou may temporarily deac tivate a rul e without deleting it by cleari ng this ch[...]

GS2210 Series User’s Guide 11 2 C HAPTER 12 Filtering 12.1 Filtering Overview This chapter discusses MAC address port filtering. Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). 12.1.1 What Y ou Can Do Use the Filtering screen ( Section 12.2 on page 112 ) to create [...]

Chapter 12 Filtering GS2210 Series User’s Guide 11 3 The following table describes the related labels in this screen. T a ble 41 Advanced Application > Filtering LABEL DESCRIPTION Active Make sure to select this ch eck box to activ ate y our rule . Y ou may temporarily deacti v ate a rule without deleting i t by deselecting this chec k box. Na[...]

GS2210 Series User’s Guide 11 4 C HAPTER 13 Spanning Tree Protocol 13.1 S p anning T ree Protocol Overview The Switch supports Spanning T ree Protocol (S TP), Rapid Spanning T ree Protocol (RSTP) and Multiple Spanning T re e Protocol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning T ree Protocol • IEEE 802.1w Rapid Spanni[...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 11 5 The Switch uses IEEE 802.1w RSTP (Rapid Spanning T ree Protocol) that allows faster convergence of the spanning tree than STP (while also be ing backwards compatible with STP-only aware bridges). In RSTP , topology change information is directly propagated throughout the network f[...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 11 6 STP Port S t ates STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate tr ansient loops. Multiple RSTP MRSTP (Multiple RSTP) is Z yXEL ’ s proprietary featur e that is comp[...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 11 7 • One Common and Internal Spanning T ree (CIST) that represents the entire network’ s connectivity . • Grouping of multiple bridges (or switching devices) into regions th at appear as one single bridge on the network. • A VLAN can be mapped to a specific Multiple Spanning [...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 11 8 The following table describes the labels in this screen. 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 114 for more information on RSTP . Click RSTP in the Advanced Application > Spanning Tree Protocol screen.[...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 11 9 The following table describes the labels in this screen. T a ble 45 Advanced Application > Spanning T ree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 89 on page 120 ). Active Select this check bo x to activate RSTP . Cl[...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 120 13.5 Rapid S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 114 for more information on RSTP . Note: This screen is only av ailable after y ou activ a[...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 121 13.6 Configure Multiple Ra pid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1 on page 114 for more information on MRSTP . Figure 90 Advanced Application > Spanning T ree Protocol > M[...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 122 The following table describes the labels in this screen. T a ble 47 Advanced Application > Spanning T ree Protocol > MRSTP LABEL DESCRIPTION Status Click Status to display the MRSTP Status screen (see Figure 89 on page 120 ). T ree This is a read only in dex number of the STP [...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 123 13.7 Multiple Rapid S p anning T r ee Protocol St atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 114 for more information on MRSTP . Note: This screen is only av ailable after [...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 124 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Spanning Tree P rotocol screen. See Section on page 116 for more information on MSTP . Max Age (second) This is the m aximum time (in sec onds) the Swit ch can wait wit[...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 125 Figure 92 Advanced Application > Spanning T ree Protocol > MSTP The following table describes the labels in this screen. T a ble 49 Advanced Application > Spanning T ree Protocol > MSTP LABEL DESCRIPTION Port Cl ic k Port to display the MSTP Port screen (see Figure 93 o[...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 126 Hello Time This is the time interval i n seco nds between BPDU (Bridge Protocol Data Units) configur ation me ssage gener ations by t he root switch. T he allowed range is 1 to 10 seconds. MaxAge This is th e maximum time (in seconds) the Switch can wait withou t receiving a BPDU be[...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 127 13.9 Multiple S p anning T ree Port Configuration Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. See Section on page 116 for more information on MSTP . Figure 93 Advanced Application >[...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 128 The following table describes the labels in this screen. 13.10 Multiple S p anning T r ee Protocol S t atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section on page 116 for more information on MSTP[...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 129 Figure 94 Advanced Application > Spanning T ree Protocol > Status: MSTP The following table describes the labels in this screen. T a ble 51 Advanced Application > Spanning Tree Protocol > Status: MSTP LABEL DESCRIPTION Configur ation Click Configuration to specify which[...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 130 13.1 1 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 13.1 1.1 MSTP N etwork Example The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP [...]

Chapter 13 Spanning Tre e Protocol GS2210 Series User’s Guide 131 Figure 95 STP/RSTP Network Example With MSTP , VLANs 1 and 2 are mapped to different sp anning trees in the network. Thus tr affic from the two VLANs trav el on different paths. The fo llowing figure sh ows the network ex ample using MSTP . Figure 96 MSTP Network Example 13.1 1.2 M[...]

Chapter 13 Spanning Tree Protocol GS2210 Series User’s Guide 132 • VLAN-to-MST Instance mapping 13.1 1.3 MST Inst ance An MST Instance (MSTI) is a spanning tree instance . VLANs can be co nfigured to run on a specific MSTI. Each created MSTI is identi fied by a unique number (known as an MST ID) known internally to a region. Thus an MSTI does n[...]

GS2210 Series User’s Guide 133 C HAPTER 14 Bandwidth Control 14.1 Overview This chapter shows you how y ou can cap the maximum bandwidth using th e Ban dwidth Control screen. Bandwidth c o ntrol mean s defining a max imum allowable band width for inco m ing and/or o u t-going traffic flows on a port. 14.1.1 What Y ou Can Do Use the Band w id th C[...]

Chapter 14 Bandwi dth Control GS2210 Series User’s Guide 134 Figure 99 Advanced Application > Bandwidth Control The following table describes the related labels in this screen. T a ble 52 Advanced Application > Bandwidth Control LABEL DESCRIPTION Active Select th is check box t o enable bandwidt h c ontrol on th e Switch. Port This field di[...]

GS2210 Series User’s Guide 135 C HAPTER 15 Broadcast Storm Control 15.1 Broadcast S torm Control Overview This chapter introduces and shows you how to configure the broadcast storm control feature. Broadcast storm control limits the number of broadc ast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the [...]

Chapter 15 Broa dcast Storm Control GS2210 Series User’s Guide 136 Figure 100 Advanced Application > Broadcast Storm Control The following table describes the labels in this screen. T a ble 53 Advanced Application > Broadcast Storm Control LABEL DESCRIPTION Active Select th is check bo x to enable traffic sto rm control on the Swi tch. Clea[...]

GS2210 Series User’s Guide 137 C HAPTER 16 Mirroring 16.1 Mirroring Overview This chapter discusses port mirroring setup screens. Po rt mirroring allows you to copy a tr affic flow to a monitor port (the port y ou copy the tr affic to) in order that you can examine the tr affic from the monitor port without interference. 16.1.1 What Y ou Can Do U[...]

Chapter 16 Mirroring GS2210 Series User’s Guide 138 The following table describes the labels in this screen. T a ble 54 Advanced Application > Mirroring LABEL DESCRIPTION Active Sele ct this c heck box t o activ ate port mirroring on the S witch. Cl ear this ch eck box t o disabl e the feature. Monitor Port T he monitor port is the port you co[...]

GS2210 Series User’s Guide 139 C HAPTER 17 Link Aggregation 17.1 Overview This chapter shows you how to logically aggregate ph ysical links to form one logical, higher- bandwidth link. Link aggregation (trunking) is the groupin g of ph ysical ports into one logical higher-capacit y link. Y ou may want to trunk ports if for example, it is cheaper [...]

Chapter 17 Link Aggregation GS2210 Series User’s Guide 140 is, if an operational port fails, then one of th e “standby” ports become oper ational without user intervention. Please note that: • Y ou must connect all ports point-to-point to the same Ethernet switch and configure the ports for LACP trunking. • LACP only works on full-duplex [...]

Chapter 17 Link Ag gregation GS2210 Series User’s Guide 141 The following table describes the labels in this screen. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 139 for more information on link aggregation. T a ble 57 Advanc[...]

Chapter 17 Link Aggregation GS2210 Series User’s Guide 142 Figure 103 Advanced Application > Link Aggreg ation > Link Aggregation Setting The following table describes the labels in this screen. T a ble 58 Advanced Application > Link Aggr egation > Link Ag gregation Setting LABEL DESCRIPTION Link Aggregation Setting This is the only s[...]

Chapter 17 Link Ag gregation GS2210 Series User’s Guide 143 17.4 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section on page 139 for more information on dynamic link aggregation. Criteria Sel ect the outgoing traffic distribution t[...]

Chapter 17 Link Aggregation GS2210 Series User’s Guide 144 Figure 104 Advanced Application > Link Aggregatio n > Link Aggregation Setting > LAC P The following table describes the labels in this screen. T a ble 59 Advanced Application > Link Aggregatio n > Link Ag gregation S etting > LACP LABEL DESCRIPTION Link Aggregation Cont[...]

Chapter 17 Link Ag gregation GS2210 Series User’s Guide 145 17.5 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 17.5.1 S t atic T runking Example This example shows you how to create a static port trunk group for ports 2-5. 1 Make your physical connections - make sure that the[...]

Chapter 17 Link Aggregation GS2210 Series User’s Guide 146 Figure 106 T runking E xample - Configuration S creen Y our trunk group 1 ( T1 ) configur ation is now complete.[...]

GS2210 Series User’s Guide 147 C HAPTER 18 Port Authentication 18.1 Port Authentication Overview This chapter describes the IEEE 802.1x authentication method. Port authentication is a way to v alidate access to po rts on the Switch to clients based on an external server (authentication server). The Switch supports the following method for port au[...]

Chapter 18 Port Authentication GS2210 Series User’s Guide 148 Figure 107 IEEE 802.1x Authentication Process 18.2 Port Authentication Configuration T o enable port authentication, first activate the po rt authentication method (both on the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct > Radius Server Set[...]

Chapter 18 Port Authentication GS2210 Series User’s Guide 149 Figure 109 Advanced Application > Po rt Authentication > 802.1x The following table describes the labels in this screen. T a ble 60 Advanced Application > Port Authentication > 802.1 x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the Swi[...]

Chapter 18 Port Authentication GS2210 Series User’s Guide 150 18.3.1 Guest VLAN When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the correct credentials are blocked from using the port(s). Y ou can configure your Switch to h ave one VLAN that acts as a guest VLAN. If you enable the guest VLAN ( 102 [...]

Chapter 18 Port Authentication GS2210 Series User’s Guide 151 F i g u r e 111 Advanced Application > Port Authentication > 802.1x > Guest VLAN The following table describes the labels in this screen. T a ble 61 Advanc ed Ap plication > Port Authentication > 802.1x > Guest VLAN LABEL DESCRIPTION Port This field displays a port nu[...]

Chapter 18 Port Authentication GS2210 Series User’s Guide 152 Host-mode Specify how the Switch authenticates u sers when more than one use r connect to the port (using a hub). Select Multi-Hos t to authenticate only the first user that connects to this port. If the fi rst user enters the corre ct creden tial, any other users are allowe d to acces[...]

GS2210 Series User’s Guide 153 C HAPTER 19 Port Security 19.1 Port Security Overview This chapter shows you how to set up port security . Po rt security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the S witch. The Switch can learn up to 16K MAC addresses in total with[...]

Chapter 19 Port Security GS2210 Series User’s Guide 154 Figure 1 12 Advanced Application > Port Security The following table describes the labels in this screen. T a ble 62 Advanced Application > Port Security LABEL DESCRIPTION Port List Enter the numbe r of the port(s) (s eparated by a comma) o n which you wa nt to enab le port security an[...]

Chapter 19 Port Security GS2210 Series User’s Guide 155 Limited Numbe r of Learned MAC Address Use this field to l imit the number o f (dynam ic) MAC addresses that may be learned on a port. For example, if you set this field to "5" on port 2, the n only the de vices with th ese five learned MAC addresses ma y access port 2 at an y one [...]

GS2210 Series User’s Guide 156 C HAPTER 20 Classifier 20.1 Overview This chapter introduces and shows you how to config ure the packet classifie r on the Switch. It also discusses Quality of Service (QoS) and classifier concepts as employ ed by the Switch. 20.1.1 What Y ou Can Do Use the Classifier scree n ( Section 20.2 on page 156 ) to define t[...]

Chapter 20 Classifier GS2210 Series User’s Guide 157 Figure 1 13 Advanced Application > Classifier The following table describes the labels in this screen. T a ble 63 Advanced Application > Classifier LABEL DESCRIPTION Active Select this option to en able this rule. Name Enter a descriptive name for this rule fo r identifying purposes. Lay [...]

Chapter 20 Classifier GS2210 Series User’s Guide 158 20.2.1 V iewing and Editin g Classifier Configuration T o view a summary of the classifier configuration, scroll down to the summary table at the bottom of the Classifier screen. T o change the settings of a rule, click a number in the Index field. Note: When two rules confl ict wi th each othe[...]

Chapter 20 Classifier GS2210 Series User’s Guide 159 Figure 1 14 Advanced Application > Classifier: Summary T able The following table describes the labels in this screen. The following table shows some other common Ethernet types and the corresponding protocol number . In the Internet Protoc ol there is a field, called “P rotocol” , to id[...]

Chapter 20 Classifier GS2210 Series User’s Guide 160 Some of the most common T CP and UDP port numbers are: See Appendix B on page 365 for information on commonly used port numbers. 20.3 Classifier Example The following screen shows an example where you conf igure a classifier that identifies all tr affic from MAC address 00:50:ba:ad:4f: 81 on po[...]

GS2210 Series User’s Guide 161 C HAPTER 21 Policy Rule 21.1 Policy Rules Overview This chapter shows you how to configure policy rules. A classifier distinguishes traffic into flows based on the con figured criteria (refer to Chapter 20 on page 156 for more information). A policy rule ensure s that a traffic flow gets the requested treatment in t[...]

Chapter 21 Policy Rule GS2210 Series User’s Guide 162 Figure 1 16 Advanced Application > Policy R ule The following table describes the labels in this screen. T a ble 68 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy . Name Enter a descriptive name for identification purposes. Classifier([...]

Chapter 21 Policy Rule GS2210 Series User’s Guide 163 Bandwidth Specify the bandwidth in kilobit per second (Kbps). Enter a number between 64 and 1000000. Action Specify the action(s) the S witch takes on the associate d classified tr affic flow. Note: Y ou can specify only one action (pair) in a policy rule. T o ha ve the Switch take multiple ac[...]

Chapter 21 Policy Rule GS2210 Series User’s Guide 164 21.2.1 V iewing and Edit ing Policy Configuration T o view a summary of the classifier configuration, scroll down to the summary table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Ind ex field. Figure 1 17 Advanced Application > Policy R ule: [...]

GS2210 Series User’s Guide 165 C HAPTER 22 Queuing Method 22.1 Queuing Method Overview This chapter introduces the queuing methods supported. Queuing is used to help solve performance degr ad ation when there is network conge stion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignm[...]

Chapter 22 Q ueuing Method GS2210 Series User’s Guide 166 an equal amount of bandwidth, and then mov es to the end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty . W eighted Round R obin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services qu[...]

Chapter 22 Queui ng Method GS2210 Series User’s Guide 167 The following table describes the labels in this screen. T a ble 69 Advanced Application > Queuing Method LABEL DESCRIPTION Port This label shows the port you are configuring. * Settings in this row apply to all ports. Use this row only if y ou want to make some se ttings the same for a[...]

GS2210 Series User’s Guide 168 C HAPTER 23 Multicast 23.1 Multicast Overview This chapter shows you how to configure v arious multicast features. T raditionally , IP packets are tr ansmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to ev erybody on the networ k). Multicast delivers IP pack ets to just a[...]

Chapter 23 Multicast GS2210 Series User’s Guide 169 through it, picks out the group registration inform ation, and configures multicasting accordingly . IGMP snooping allows the Switch to learn multicast groups without you having to manually configure them . The Switch forw ards multicast traf fic destined for multicast groups (that it has learne[...]

Chapter 23 Multicast GS2210 Series User’s Guide 170 one query from a router ( X ) or MLD D one or Report message from any upstream port, it will be broadcast to all connected upstream ports. MLD Messages A multicast router or switch periodically sends ge neral queries to MLD hosts to u pdate the multicast forwarding table. When an MLD host wants [...]

Chapter 23 Multicast GS2210 Series User’s Guide 171 Figure 120 MVR Network Example T ypes of MVR Ports In MVR, a source port is a port on the S witch that can send and receive multicast tr affic in a multicast VLAN while a receiver port can only receive multicast traffic. Once configured, the Switch maintains a forwarding table that matches the m[...]

Chapter 23 Multicast GS2210 Series User’s Guide 172 Figure 121 MVR Multicast T elevision Example 23.2 Multicast Setup Use this screen to configure IGMP for IPv4 or MLD for IPv6 and set up multicast VLANs. Click Advanced Application > Multicast in the navigation panel. Figure 122 Advanced Application > Multicast Setup The following table des[...]

Chapter 23 Multicast GS2210 Series User’s Guide 173 The following table describes the labels in this screen. 23.3.1 IGMP Snooping Click the IGMP Snooping link in the Advanced Applicati on > Multicast > IPv4 Multi cast screen to display the screen as shown. See Section 23.1 on page 168 for more information on multicasting. Figure 124 Advance[...]

Chapter 23 Multicast GS2210 Series User’s Guide 174 IGMP Fi ltering Select Ac tive to enable IGMP fi ltering to control which IGMP groups a subscriber on a port can join. If you enable IGMP filtering, you must create and assign IGMP filt ering profiles for the ports that you want to allo w to join multicast grou ps. Unknown Multicast Fr ame Speci[...]

Chapter 23 Multicast GS2210 Series User’s Guide 175 23.4 IGMP Snooping VLAN Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown. See Section on page 169 for more information on IGMP Snooping VLAN. Throttling IGMP thr[...]

Chapter 23 Multicast GS2210 Series User’s Guide 176 Figure 125 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Snooping VLAN The following table describes the labels in this screen. T a ble 73 Advanced Application > Multicast > IPv4 Mu lticast > IGMP Snooping > IGMP Snooping VLAN LABEL DESCRIPTION [...]

Chapter 23 Multicast GS2210 Series User’s Guide 177 23.4.1 IGMP Filtering Profile An IGMP filtering profile specifie s a range of multicast groups that clients connected to the S witch are able to join. A profile contains a r ange of mu lticast IP addresses which you want clients to be able to join. Profiles are assigned to ports (in the IGMP Sno[...]

Chapter 23 Multicast GS2210 Series User’s Guide 178 23.5 IPv6 Multicast S t atus Click Advanced Appl ication > Multicast > IPv6 Multicast to display the screen as shown. This screen shows the IPv6 multicast group information. See Section 23.1 on page 168 for more information on multicasting. Figure 127 Advanced Application > Mu lticast &[...]

Chapter 23 Multicast GS2210 Series User’s Guide 179 23.5.1 MLD Snooping-proxy Click the MLD Snooping-proxy link in the Advanced Application > Multicast > IPv6 Multicast screen to display the screen as shown. See Section 23.1 on page 168 for more information on multicasting. Figure 128 Advanced Application > Multicast > IPv6Multicast &[...]

Chapter 23 Multicast GS2210 Series User’s Guide 180 Figure 129 Advanced Application > Mu lticast > IPv6 Multicast > MLD Snooping-proxy > VLAN The following table describes the fields in the above screen. T a ble 76 Advanced Application > Multicast > IPv6 Multi cast > MLD Snooping-proxy > VLAN LABEL DESCRIPTION VID Enter th[...]

Chapter 23 Multicast GS2210 Series User’s Guide 181 23.5.3 MLD Snooping-pro xy VLAN Port Role Setting Click the Port Role Setting link in the Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > VLAN screen to displa y the screen as shown. See Section 23.1 on pag e 168 for more information on multicasting. Robustne[...]

Chapter 23 Multicast GS2210 Series User’s Guide 182 Figure 130 Advanced Application > Multicast > IPv6 Mu lticast > MLD Snooping-pro xy > Port R ole Setting The following table describes the fields in the above screen. T a ble 77 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Port Role Setting LAB[...]

Chapter 23 Multicast GS2210 Series User’s Guide 183 23.5.4 MLD Snooping-proxy VLAN Filtering Use this screen to configure the Switch ’ s MLD filtering settings. Click the Filter ing link in the Advanced Application > Multicast > IPv6 Multic ast > MLD Snooping-proxy screen to display the screen as shown. Leav e Mod e Select the leave mo[...]

Chapter 23 Multicast GS2210 Series User’s Guide 184 Figure 131 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-pro xy > Filtering The following table describes the fields in the above screen. T a ble 78 Advanced Application > Multicast > IPv6 Multicast > MLD Snooping-proxy > Filtering LABEL DESCRIPTION Act[...]

Chapter 23 Multicast GS2210 Series User’s Guide 185 23.5.5 MLD Snooping-pro xy VLAN Filtering Profile Use this screen to create an MLD filtering profile and set the range of th e multicast address(es). Click the Filtering Profile link in the Advanced Application > Multi cast > IPv6 Multicast > MLD Snooping-proxy > Filtering screen to [...]

Chapter 23 Multicast GS2210 Series User’s Guide 186 23.6 General MVR Configuration Use the MVR screen to create multicast VLANs and select the receiver port(s) and a source port for each multicast VLAN. Click Advanced Application > Multicast > Multica st Setup > MVR to display the screen as shown next. Note: Y ou can create up to five mu[...]

Chapter 23 Multicast GS2210 Series User’s Guide 187 Figure 133 Advanced Application > Multic ast > Multicast Setup > MVR The following table describes the related labels in this screen. T a ble 80 Advanced Application > Multicast > Multicast Setting > MVR LABEL DESCRIPTION Active Select this check bo x to enable MVR to all ow on[...]

Chapter 23 Multicast GS2210 Series User’s Guide 188 23.6.1 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Use this screen to configure MVR IP mu lticast group address(es). Click the Group Configuration link in the MVR screen. Note: A port can belo[...]

Chapter 23 Multicast GS2210 Series User’s Guide 189 Figure 134 Advanced Application > Multicast > Multicast Setup > MVR > Group Configur ation The following table describes the labels in this screen. T a ble 81 Advanced Application > Multicast > Multic ast Setting > MVR > Group Configuration LABEL DESCRIPTION Multicast VLA[...]

Chapter 23 Multicast GS2210 Series User’s Guide 190 23.6.2 MVR Conf iguration Example The following fig ure shows a network example where ports 1, 2 and 3 on the Sw itch belong to VLAN 1. In addition, port 7 belongs to the multicast group with VID 200 to receive multicast traffic (the News and Movie channels) from the remote streaming media serve[...]

Chapter 23 Multicast GS2210 Series User’s Guide 191 T o set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an exam ple where two IPv4 multicast groups ( News and Movi e ) are configured for the multicast VLAN 200. Figure 137 MVR[...]

GS2210 Series User’s Guide 192 C HAPTER 24 AAA 24.1 AAA Overview This chapter describes how to configure authenti cation and authorization settings on the Switch. The external servers that perform authen tication and authorization functions are known as AAA servers. The Switch supports RADIUS (R emote Authentication Dial- In User Service, see Sec[...]

Chapter 24 AAA GS2210 Series User’s Guide 193 Local User Account s By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users without interacting with a network AAA serv er . However , the re is a limit on the number of users you may authenticate in this way (See Chapter 37 on page 301 ). RADIUS and T [...]

Chapter 24 AAA GS2210 Series User’s Guide 194 Figure 141 Advanced Application > AAA > RADIUS Server Setup The following table describes the labels in this screen. T a ble 83 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentica tion Serve r Use this section to configure your RADIUS authent ication settings . Mo[...]

Chapter 24 AAA GS2210 Series User’s Guide 195 24.4 T ACACS+ Server Setup Use this screen to configure your T ACACS+ server settings. See Section on page 193 for more information on T ACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. Delete Check this box if you want to remo ve an existing RADIUS[...]

Chapter 24 AAA GS2210 Series User’s Guide 196 Figure 142 Advanced Application > AAA > T AC AC S+ Server Setup The following table describes the labels in this screen. T a ble 84 Advanced Application > AA A > T ACACS+ Server Setup LABEL DESCRIPTION Authentica tion Serve r Use this section t o configure your T ACACS+ aut hentication set[...]

Chapter 24 AAA GS2210 Series User’s Guide 197 24.5 AAA Setup Use this screen to configure authentication and authorization settings on the Sw itch. Click on the AAA Setup link in the AAA scre en to view the screen as shown. Delete Check this box if you want to remo ve an existing T ACACS+ server entry from the Swi tch. This entry is deleted whe n[...]

Chapter 24 AAA GS2210 Series User’s Guide 198 Figure 143 Advanced Application > AAA > AAA Setup The following table describes the labels in this screen. T a ble 85 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authenticatio n Use this section to spe cify the methods us ed to authenticat e users accessing th e Switch. Privil[...]

Chapter 24 AAA GS2210 Series User’s Guide 199 Login These fields specif y which database the S witch should use (first, second and third) to authenticat e administrator accounts (users for Switch management). Configure t he local us er account s in the Access Control > Logins screen. The T ACACS+ and RADIUS are external servers. Before you spe[...]

Chapter 24 AAA GS2210 Series User’s Guide 200 24.6 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 24.6.1 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access device (for exampl e, t[...]

Chapter 24 AAA GS2210 Series User’s Guide 201 The following table describes the VS As supported on the Switch. 24.6.1.1 T unnel Pr otocol Attribute Y ou can configure tunnel protocol attributes on th e RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port V[...]

Chapter 24 AAA GS2210 Series User’s Guide 202 24.6.3 Attributes Used for Authentication The following sections list the attributes sent from the Switch to the RADIUS serv er when performing authentication. 24.6.3.1 Attributes Used for Authenticating Privilege Access User-Name - The format of the User-Name attribute is $enab # $ , where # is the p[...]

GS2210 Series User’s Guide 203 C HAPTER 25 IP Source Guard 25.1 Overview Use IP source guard to filter unauthoriz ed DHCP and ARP packets in y our network. IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in y our network. A binding contains these key attributes: •M A C a d d r e s s ?[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 204 •U s e t h e ARP Inspection Configure screen ( Section 25.9 on page 218 ) to enable ARP inspection on the Switch. Y ou can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log. •U s e t h e ARP Inspection Po[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 205 25.3 IP Source Guard S t atic Binding Use this screen to manage static bindings for DHCP snooping and ARP inspection. Static bindings are uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only be in one static binding. If you try to create a static bindin[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 206 The following table describes the labels in this screen. 25.4 DHCP Snooping Use this screen to look at various statistics abou t the DHCP snooping database. T o open this screen, click Advanced Application > IP So urce Guard > DHCP Snooping . T a ble 89 Advanced Application > IP S[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 207 Figure 146 Advanced Application > IP Source Guard > DHCP Snooping The following table describes the labels in this screen. T a ble 90 Advanced Application > IP So urce Guard > DHCP Snooping LABEL DESCRIPTION Database Status This sect ion displays the current settings for the DH[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 208 Agent runnin g This field displays the status of th e current update or acce ss of the DHCP snooping database. none : The Switch is not accessin g the DHCP snooping database. read : The Switch is loading dynamic bindings from the DHCP snooping database. write : The Switch is updating the D[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 209 25.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Sw itch (not on specific VLAN), specify the V LAN where the defau lt DH CP server is loca ted , and configure the DHCP snooping database. The DHCP snooping database stores the current bindings on a secure, external[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 210 Figure 147 Advanced Application > IP Source Guard > DHCP Snooping > Configure The following table describes the labels in this screen. T a ble 91 Advanced Application > IP Source Guard > DHCP Sn ooping > Configure LABEL DESCRIPTION Active Select this to enable DHCP snoopi[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 21 1 25.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are tr usted or untrusted ports for DHCP snooping. Note: If DHCP snooping is enabl ed but there are no t rusted ports, DHCP requests cannot reach the DHCP server . Y ou can also specify the maximum number for DHC[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 212 The following table describes the labels in this screen. 25.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Sw itch adds DHCP relay agent option 82 information ( Chapter 35 on page 283 ) to DHCP requests that the Sw it[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 213 The following table describes the labels in this screen. 25.5.3 DHCP Snooping VLAN Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. T o open this screen, click Advanced Application > IP Source Guard > DHCP Snoop ing > Configure[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 214 The following table describes the labels in this screen. 25.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unautho rized ARP packet. Wh en the Switch identifies an unauthorized ARP packet, it a[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 215 Figure 151 Advanced Application > IP Source Guard > ARP Inspection The following table describes the labels in this screen. 25.7 ARP Inspection VLAN S t atus Use this screen to look at various statistics about ARP packets in each VLAN. T o open this screen, click Advanced Applicati o[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 216 Figure 152 Advan ced Application > IP Source Guard > ARP Inspection > VLAN Status The following table describes the labels in this screen. 25.8 ARP Inspection Log S t atus Use this screen to look at log messages that were gener ated by ARP packets and that ha ve not been sent to t[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 217 Figure 153 Advanced Application > IP Source Guard > ARP Inspection > Log Status The following table describes the labels in this screen. T a ble 97 Advanc ed Ap plication > IP Source Guard > ARP Inspection > Log Status LABEL DESCRIPTION Clearing log status table Click App[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 218 25.9 ARP Inspection Configure Use this screen to enable ARP inspection on the Sw itch. Y ou can also configure the length of time the Switch stores records of discarded ARP pack ets and global settings for the ARP inspection log. T o open this screen, click Advanced Application > IP Sou[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 219 25.9.1 ARP Inspection Port Configure Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port. T o open this screen, click Advanced Application > IP [...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 220 Figure 155 Advanced Application > IP Source Guard > ARP Inspection > Configure > P ort The following table describes the labels in this screen. T a ble 99 Advanced Application > IP Source Guard > ARP Inspection > Configure > Port LABEL DESCRIPTION Port This field di[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 221 25.9.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from each VLAN. T o open this screen, click Advanced Application > IP Source G uard > ARP Inspection > Configu[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 222 25.10 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 25.10.1 DHCP Snooping Overv iew Use DHCP snooping to filter un au thorized DHCP packets on the ne twork and to build the binding table dynamically . This can prevent [...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 223 25.10.1.2 DHCP Snooping Dat abase The Switch stores the binding table in volatile memor y . If the Switch restarts, it loads static bindings from permanent memory but loses the dynamic bindings, in which case the devi ces in the network have to send DHCP reques ts again. As a result, it is[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 224 1 Enable DHCP snooping on the Switch. 2 Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. 3 Configure trusted and untrusted ports, and specify th e maximum number of DHCP packets that each port can receive per second. 4 Configure static bindings. 25.10.2 ARP Inspection[...]

Chapter 25 IP Source Guard GS2210 Series User’s Guide 225 25.10.2.2 T ru sted vs. Untrusted Port s Every port is either a trusted port or an untrusted port for ARP inspection. This setting is independent of the trusted/untrusted setting for DHCP snooping. Y ou can al so spec ify the maximum rate at which the S witch receives ARP packets on untrus[...]

GS2210 Series User’s Guide 226 C HAPTER 26 Loop Guard 26.1 Loop Guard Overview This chapter shows you how to configure the Switch to guard against loops on th e edge of your network. Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch. While y ou can use Spanni[...]

Chapter 26 Loop Guard GS2210 Series User’s Guide 227 • It will receive broadcast messages sent out from the switch in loop state. • It will receive its own broadcast messages that it sends out as they loop back. It will then re- broadcast those messages again. The following figure shows port N on switch A connected to switch B . Switch B is i[...]

Chapter 26 Loop Guard GS2210 Series User’s Guide 228 Figure 162 Loop Guard - Network Loop Note: After resolving the loop problem on yo ur network y ou can re-activ ate the disabled port via the web configur ator (see Section 8.7 on page 68 ) or via commands (See the CLI R eference Guide). 26.2 Loop Guard Setup Click Advanced Application > Loop[...]

Chapter 26 Loop Guard GS2210 Series User’s Guide 229 The following table describes the labels in this screen. T a ble 101 Adv anced Application > Loop Guard LABEL DESCRIPTION Active Select th is option to e n able loop guard on the S witch. The Switch generates syslog, intern al log mess ages as well as SNMP traps when it shuts down a port via[...]

GS2210 Series User’s Guide 230 C HAPTER 27 Layer 2 Protocol Tunneling 27.1 Layer 2 Protocol T unneling Overview This chapter shows you how to configure la yer 2 protocol tunneling on the Switch. Layer 2 protocol tunneling (L2PT) is used on the service provider's edge devices. 27.1.1 What Y ou Can Do Use the Layer 2 Protocol Tunnel screen ( S[...]

Chapter 27 Layer 2 Protocol Tunneling GS2210 Series User’s Guide 231 Figure 165 L2PT Network Example 27.1.2.1 Layer 2 Prot ocol T unnelin g Mode Each port can have two lay er 2 protocol tunneling modes, Access and Tunnel . •T h e Access port is an ingress port on the service provider's edge de vice ( 1 or 2 in Figure 16 5 on page 231 ) and[...]

Chapter 27 Layer 2 Protocol Tunnel ing GS2210 Series User’s Guide 232 Figure 166 Advanced Application > Lay er 2 Protocol T unneling The following table describes the labels in this screen. T a ble 102 Adv anced Application > Layer 2 Protocol T unneling LABEL DESCRIPTION Active Selec t this to enable layer 2 protocol tunneling on the Swit c[...]

Chapter 27 Layer 2 Protocol Tunneling GS2210 Series User’s Guide 233 VTP Select this o ption to have the Swit ch t unnel VTP (VLAN T runking Prot ocol) packets so tha t all customer swi tches can use co nsistent VLAN configuration through the service provider ’ s network. Point to P oint The Switch supports PAgP (Port Aggr egation Protocol), LA[...]

GS2210 Series User’s Guide 234 C HAPTER 28 PPPoE 28.1 PPPoE Intermediate Agent Overview This chapter describes how the Switch give s a PPP oE termination server additional information that the server can use to identify and authenticate a PPP oE client. A PPP oE Intermediate Agent (P PPoE IA) is d eployed betw een a PPP oE server and PPPoE client[...]

Chapter 28 PPPoE GS2210 Series User’s Guide 235 The T ag_T ype is 0 x0105 for vendor-specific tags, as defined in RFC 2516. The T ag _Len indicates the length of V alue, i1 and i2. The V alue is the 32 -bit number 0x00000DE9, which stands for the “ ADSL Forum” IANA entry . i1 and i2 are PPPoE intermed iate agent sub-options, which contain add[...]

Chapter 28 PPPoE GS2210 Series User’s Guide 236 defined in the DSL F orum W orking T ext (WT)-101. The default access node identifier is the host name of the PPP oE intermediate agent and the eth indicates “Ethernet” . 28.1.2.3 Port St ate Every port is either a trusted port or an untrust ed port for the PPPoE intermediate agent. This setting[...]

Chapter 28 PPPoE GS2210 Series User’s Guide 237 28.3 PPPoE Intermediate Agent Use this screen to configure the Switch to giv e a PPPoE termin ation server additional subscriber information that the server can use to identify and authenticate a PPP oE client. Click Advanced Application > PPPoE > Intermediate Ag ent in the navigation panel to[...]

Chapter 28 PPPoE GS2210 Series User’s Guide 238 28.3.1 PPPoE IA Per-Port Use this screen to specify whether individual ports are trusted or untrusted ports and have the Switch add extr a information to PPP oE discovery pack ets from PPPoE clients on a per-port basis. Note: The Switch will drop all PPP oE packets if you enable the PPP oE Intermedi[...]

Chapter 28 PPPoE GS2210 Series User’s Guide 239 28.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPP oE IA settings that apply to a specific VLAN on a port. Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. Server T rusted State Select whether this port is a trusted port ( Trusted ) or an[...]

Chapter 28 PPPoE GS2210 Series User’s Guide 240 Figure 170 Advanced Application > PPPoE > Intermediate Agent > P ort > VLAN The following table describes the labels in this screen. T a ble 110 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN LABEL DESCRIPTION Show Port Enter a port number to show the PPPo E [...]

Chapter 28 PPPoE GS2210 Series User’s Guide 241 28.3.3 PPPoE IA for VLAN Use this screen to set whether the PPPoE Intermedia te Agent is enabled on a VLAN and whether the Switch appends the Circuit ID and/or R emote ID to PPP oE discovery packets from a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as s[...]

GS2210 Series User’s Guide 242 C HAPTER 29 Error Disable 29.1 Error Disable Overview This chapter shows you how to configure the r ate limit for control packets on a port, and set the Switch to take an action (such as to shut down a port or stop sending packets) on a port when the Switch detects a pre-configured error . It also shows you how to c[...]

Chapter 29 Error Disable GS2210 Series User’s Guide 243 Figure 173 Advanced Application > Errdisable > Errdisable Status The following table describes the labels in this screen. T a ble 112 Advanced Application > Errdisable > Errdisable Status LABEL DESCRIPTION Inactiv e-reaso n mode reset Port List Enter the number of the port(s) (se[...]

Chapter 29 Error Disable GS2210 Series User’s Guide 244 29.3 CPU Protection Configuration Use this screen to limit the maximum number of co ntrol packets (ARP , BPDU and/or IGMP) that the Switch can receive or tr ansmit on a port. Click the Click Here link next to CPU protection in the Advanced Application > Errdisable screen to display the sc[...]

Chapter 29 Error Disable GS2210 Series User’s Guide 245 29.4 Error-Disable Detect Configuration Use this screen to have the Switch detect whether the control packets exceed the r ate limit configured for a port and configu re the action to tak e once the limit is exceeded. Click the Click Here link next to Errdisable Detect link in the Advanced A[...]

Chapter 29 Error Disable GS2210 Series User’s Guide 246 29.5 Error-Disable R ecovery Configuration Use this screen to configure the Switch to automati cally undo an action after the error is gone. Click the Click Here link next to Errdisable Recovery in the Advanced Application > Errdisable screen to display the screen as shown. Figure 176 Adv[...]

GS2210 Series User’s Guide 247 C HAPTER 30 30 Private VLAN This chapter shows you how to configure the Switch to prevent communications between ports in a VLAN. 30.1 Private VLAN Overview Private VLAN allows you to do port isolation within a VLAN in a simple way . Y ou specify which port(s) in a VLAN is not isolated by adding it to the promiscuou[...]

Chapter 30 Private VLAN GS2210 Series User’s Guide 248 Figure 178 Advanced Application > Private VLAN The following table describes the labels in this screen. T a ble 116 Advanced Application > Priv ate VLAN LABEL DESCRIPTION Active Check this box to enable private VLAN in a VLAN. Name Enter a descriptiv e name (up to 32 printable ASCII cha[...]

GS2210 Series User’s Guide 249 C HAPTER 31 Green Ethernet This chapter shows you how to configure the Switch to reduce the power consumed by switch ports. 31.1 Green Ethernet Overview Green Ethernet reduces switch port power consumption in the following w ays. IEEE 802.3az Energy Efficient Ethernet (EEE) If EEE is enabled, both sides of a link su[...]

Chapter 31 Green Ethernet GS2210 Series User’s Guide 250 Figure 179 Advanced Application > Green Ethernet The following table describes the labels in this screen. Advanced Application > Green Ethernet LABEL DESCRIPTION EEE Select this to activate Energy Efficient Et hernet globally . Auto Power Down Select this to ac ti vate Auto Power Down[...]

GS2210 Series User’s Guide 251 C HAPTER 32 31 Link Layer Discovery Protocol (LLDP) 32.1 LLDP Overview The LLDP (Link Layer Discov ery Protocol) is a la yer 2 protocol. It allows a network device to advertise its identity and capabilities on the local ne twork. It also allows the device to maintain and store information from adjacent devices which[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 252 Figure 180 LLDP Overview 32.2 LLDP-MED Overview LLDP-MED (Link Layer Discovery Protocol for Medi a Endpo int Devices) is an extension to the standard LLDP developed by the T elecommuni cations Industry Association (TIA) TR -41.4 subcommittee which defines the enhanced [...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 253 Figure 181 LLDP-MED Overview 32.3 LLDP Screens Click Advanced Application > LL DP in the navigation panel to display the screen as shown next. Figure 182 Advanced Application > LLDP The following table describes the labels in this screen. T a ble 117 Advanced Ap[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 254 32.4 LLDP Local S t atus This screen displays a summary of LL DP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) to display the screen as shown next. Figure 183 Advanced Application > LLDP > LLDP Local Status LLDP-M[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 255 The following table describes the labels in this screen. 32.4.1 LLDP Local Port S t atus Det ail This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status and then, click a port numbe r , for ex[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 256 Figure 184 Advanced Application > LLDP > LLDP Local Stat us > LLDP Local Port Status Detail (Basic TL V)[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 257 Figure 185 Advanced Application > LLDP > LLDP Local Stat us > LLDP Local Port Status Detail (MED TL V)[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 258 The following table describes the labels in this screen. T a ble 119 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status De tail LABEL DESCRIPTION Basic TL V These are the Basic TL V flags Por t ID TL V The port ID TL V identifies the sp e[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 259 32.5 LLDP Remote S t atus This screen displays a summary of LLDP status fo r each LLDP connection to a neighboring Sw itch. Click Advanced Application > LLDP > LLDP Remote Status (Click H ere) to display the screen as shown next. Figure 186 Advanced Application [...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 260 32.5.1 LLDP Remote Port S t atus Det ail This screen displays detaile d LLDP status received from remote device. Click Advanced Application > LLDP > LLD P Remote Status (Cli ck Here) and then click an index number , for example 1, in the Index column in the LLDP [...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 261 The following table describes the labels in Basic TL V part of the screen. T a ble 121 Advanced Application > LLDP > LLDP Remote Status > LLDP R emote Port Status Detail (Basic TLV) LABEL DESCRIPTION Basic TL V Chassis ID TL V • Chassis ID Subtype - this di[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 262 Figure 188 A d v a n c e d A p p l i c a t i o n > L L D P > L L D P R e m o t e S t a t u s > L L D P R e m o t e P o r t S t a t u s D e t a i l > (Dot 1 and Dot3 TL V) The following table describes the labels in the Dot1 and Dot3 parts of the screen. T a[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 263 Protocol Identity TL V The Protocol Identity TL V allows the Switch to advertise the particular protocols that are accessible through its port. Dot3 TL V MAC PHY Configur ation & Status TL V The MAC/PHY Configuration/Status TL V advertis es the bit-r ate and duple[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 264 Figure 189 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote P ort Status Detail (MED TL V)[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 265 The following table describes the labels in the MED TL V part of the screen. T a ble 123 Advanced Application > LLDP > LLDP Remote Status > LLDP R emote Port Status Detail (MED TLV) LABEL DESCRIPTION MED TL V LLDP Media Endpoint Discovery (MED) is an extensio[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 266 32.6 LLDP Configuration Use this screen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Config uration (Click Here) to display the screen as shown next. Inventory TL V The majority of IP Phones lack su pport of management[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 267 Figure 190 Advanced Application > LLDP > LLDP Configur ation The following table describes the labels in this screen. T a ble 124 Advanced Application > LLDP > LLDP Configuration LABEL DESCRIPTION Active Select to enable LLDP on th e Switch. It is enabled [...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 268 32.6.1 LLDP Configuration Basic TL V Setting Use this screen to configure Basic TL V settings. Click Advanced Application > LLDP > L LDP Configuration (Click Here) > Basic TLV Setting to display the screen as shown next. Figure 191 Advanced Application > LL[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 269 32.6.2 LLDP Configuration B asic Org-specific TL V Setting Use this screen to configure organization-specific TL V settings. Click Advanced Application > LLDP > LLDP Configuration (Click Her e) > Org-specific TLV Setting to display the screen as shown next. F[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 270 32.7 LLDP-MED Configuration Click Advanced Application > LL DP > LLDP-MED Conf iguration (Click Here) to display the screen as shown next. Figure 193 Advanced Application > LLDP > LLDP-MED Configur ation The following table describes the labels in this scre[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 271 32.8 LLDP-MED Network Policy Click Advanced Application > LLDP > LLDP-MED Network Policy (Click Here) to display the screen as shown next. Figure 194 Advanced Application > LLDP > LLDP-MED Network Policy The following table describes the labels in this scr[...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 272 32.9 LLDP-MED Location Click Advanced Application > LL DP > LLDP-MED Location (Click Here) to display the screen as shown next. Application T ype This field displays the application ty pe of the network policy . T ag This field displays the T ag Statu s of the ne[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 273 Figure 195 Advanced Application > LLDP > LLDP-MED Location The following table describes the labels in this screen. T a ble 129 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTION Port Enter the port number you want to set up the loc a ti on [...]

Chapter 32 Link Layer Discovery Protocol (LLDP) GS2210 Series User’s Guide 274 Altitude Enter the altitude inform ation. The v alue should be from -20 97151 to 2097151 in me ters or in floors. • meters • floor Datum Select the appropriate geodet ic datum used by GPS . •W G S 8 4 •N A D 8 3 - N A V D 8 8 •N A D 8 3 - M L L W Civic Addres[...]

Chapter 32 Link Layer Discovery Protocol (L LDP) GS2210 Series User’s Guide 275 Delete Check the locati ons that you w ant to remov e in the Delete column, the n click the Dele te button. Cancel Click Cancel to clear the sel ected check box es in the delete co lumn. T a ble 129 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTI[...]

GS2210 Series User’s Guide 276 C HAPTER 33 Static Route 33.1 S t atic Route Overview This chapter shows you how to configure static routes. The Switch uses IP for communication with management computers, for example using HT TP , T elnet, SSH, or SNMP . Use IP static routes to hav e the Switch respond to remote management stations that are not re[...]

Chapter 33 Static Route GS2210 Series User’s Guide 277 33.2 S t atic Routing T o enable IPv4 static route, configure the static route settings in the IP Application > Static Routing > IPv4 Static Route screen. Click IP Application > Static Routing in the navigation panel to display the screen as shown. Figure 197 IP Application > Stat[...]

Chapter 33 Static Route GS2210 Series User’s Guide 278 Gatew ay IP Address Enter the IP address of the gateway . The gatewa y is an imm ediate neighbor of your Swi tch that will forward the pack et to the destinatio n. The gateway must be a router o n the same segment as your S witch. Metric The metric represents the “cost” of tran sm ission [...]

GS2210 Series User’s Guide 279 C HAPTER 34 Differentiated Services 34.1 Differentiated Services Overview This chapter shows you how to configure Differ entiated Services (DiffS erv) on the Switch. Quality of Service (QoS) is used to prioritize sour ce-to-destination traffic flows. All pack ets in the flow are given the same priority . Y ou can us[...]

Chapter 34 Differentiated Services GS2210 Series User’s Guide 280 The DSCP value determines the PHB (P er-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking ru le different kinds of traffic can be mark ed for different priorities of forwarding. R esources can then be allocated according to th[...]

Chapter 34 Differentiated Services GS2210 Series User’s Guide 281 Figure 201 IP Application > DiffServ The following table describes the labels in this screen. 34.3 DSCP-to-IEEE 802.1p Priority Settings Y ou can configure the DSCP to IEEE 802.1p mapping to allow the Switch to prioritize all tr affic based on the incoming DSCP value according t[...]

Chapter 34 Differentiated Services GS2210 Series User’s Guide 282 34.3.1 Configuring DSCP Settings T o change the DS CP-IEEE 802.1p mapping click the DSCP Setting link in the DiffServ screen to display the screen as shown next. Figure 202 IP Application > DiffServ > DSCP Setting The following table describes the labels in this screen. T a b[...]

GS2210 Series User’s Guide 283 C HAPTER 35 DHCP 35.1 DHCP Overview This chapter shows you how to configure the DHCP feature. DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configur ation at start-up from a server . If you configure the Switch as a DHCP rela y agent, then the Switch fo[...]

Chapter 35 DHCP GS2210 Series User’s Guide 284 DHCP Relay Configure DHCP relay on th e Switch if the DHCP clients and the DHCP server are not in the same broadcast domain. During the initial IP addre ss leasing, the Switch helps to relay network information (such as the IP address and subnet mask) between a DHCP client and a DHCP server . Once th[...]

Chapter 35 DHCP GS2210 Series User’s Guide 285 35.3 DHCPv4 S t atus Click IP Applicati on > DHCP > DHCPv4 in the navigation panel. The DHCP Status scree n displays. Figure 204 IP Application > DHCP > DHCPv4 The following table describes the labels in this screen. 35.4 DHCPv4 Relay Configure DHCP relay on th e Switch if the DHCP client[...]

Chapter 35 DHCP GS2210 Series User’s Guide 286 35.4.1.1 DHCPv4 Relay Ag ent Information Format A DHCP R elay Agent Information option has the following format. i1, i2 and iN are DHCP relay agent sub-options, which contain additional information about the DHCP client. Y o u need to defi ne at least one sub-option. 35.4.1.2 Sub-Option Format There [...]

Chapter 35 DHCP GS2210 Series User’s Guide 287 Figure 205 IP Application > DHCP > DHCPv4 > Option 82 Profile The following table describes the labels in this screen. T a ble 139 IP Application > DHCP > DH CPv4 > Option 82 Prof ile LABEL DESCRIPTION Name Enter a descriptive name for the profile for identification purposes. Y ou c[...]

Chapter 35 DHCP GS2210 Series User’s Guide 288 35.4.3 Configuring DHCPv4 Global Relay Use this screen to configure global DHCPv4 relay . Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to displa y the screen as shown. Figure 206 IP Application > DHCP > DHCPv4 > Global Add Click this to create [...]

Chapter 35 DHCP GS2210 Series User’s Guide 289 The following table describes the labels in this screen. 35.4.4 DHCPv4 Global Relay Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports on the Switch. T o open this screen, click IP Application > DHCP > DHCPv4 > Global > Port . Figure 207 IP Applica[...]

Chapter 35 DHCP GS2210 Series User’s Guide 290 35.4.5 Global DHCP Re lay Configuration Example The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that service s the DHCP clients in both domains. Figure 208 Global DHCP R elay Network Example Confi[...]

Chapter 35 DHCP GS2210 Series User’s Guide 291 Figure 209 DHCP R elay Configuration Example 35.5 Configuring DHCPv4 VLAN Settings Use this screen to configure your DHCP settings ba sed on the VLAN domain of the DHCP clients. Click IP Application > DHCP > D HCPv4 in the navigation panel, then click the VLAN link In the DHCP Status screen tha[...]

Chapter 35 DHCP GS2210 Series User’s Guide 292 Figure 210 IP Application > DHCP > DHCPv4 > V LAN The following table describes the labels in this screen. T a ble 142 IP Application > DHCP > DHCPv4 > VLAN LABEL DESCRIPTION VID Enter the I D number of the VLAN to which th ese DHCP settings appl y . Rem ot e D HC P Server 1 .. 3 En[...]

Chapter 35 DHCP GS2210 Series User’s Guide 293 35.5.1 DHCPv4 VLAN Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. T o open this screen, click IP Application > DHCP > DHCPv4 > VLAN > Port . Figure 211 IP Application > DHCP > DHCPv4 > VLAN > Port The following table desc[...]

Chapter 35 DHCP GS2210 Series User’s Guide 294 35.5.2 Example: DHCP Relay for T wo VLANs The following example displays two VLANs (VIDs 1 and 2) for a campus network. T wo DHCP servers are installed to serve each VLAN. The system is set up to forw ard DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.168[...]

Chapter 35 DHCP GS2210 Series User’s Guide 295 Figure 213 DHCP R elay for T wo VLANs Configuration Example 35.6 DHCPv6 Relay A DHCPv6 relay agent is on the same network as the DHCPv6 cl ients and helps forward messages between the DHCPv6 server and clients. When a c lient cannot use its link -local address and a well- known multicast address to l[...]

Chapter 35 DHCP GS2210 Series User’s Guide 296 Figure 214 IP Application > DHCP > DHCPv6 The following table describes the labels in this screen. T a ble 144 IP Application > DHCP > DHCPv6 LABEL DESCRIPTION VID Enter the I D n um ber of the VL AN yo u want to con figure here. Helper Address Ent er t he remote DHCPv6 server address for[...]

GS2210 Series User’s Guide 297 C HAPTER 36 ARP Setup 36.1 ARP Overview Address Resolution Protocol (ARP) is a protocol for mapping an Intern et Protocol address (IP address) to a physical machine address, also kn own as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long. In an Ethernet L AN[...]

Chapter 36 ARP Setup GS2210 Series User’s Guide 298 ARP request to the S witch and then sends an IC MP request after getting the ARP reply from the Switch. The Sw itch finds no matched entry for host B in the ARP table and broadcasts the ARP request to all the devices on the LAN. When the S witch receives the ARP reply from host B , it updates it[...]

Chapter 36 ARP Setup GS2210 Series User’s Guide 299 Therefore in the following example, the Switch can learn host A ’s MAC address from the ARP request sent by host A . The Switch then forwards host B ’ s ICMP reply to host A right after getting host B ’ s MAC address and ICMP reply . 36.2 ARP Setup Click IP Applicati on > ARP Setup in t[...]

Chapter 36 ARP Setup GS2210 Series User’s Guide 300 Figure 216 IP Application > ARP Setup > ARP Learning The following table describes the labels in this screen. T a ble 145 IP Application > ARP Setup > ARP Learning LABEL DESCRIPTION Port This field displays the port number . * Settings in this row apply to all ports. Use this row onl[...]

GS2210 Series User’s Guide 301 C HAPTER 37 Maintenance 37.1 Overview This chapter explains how to configure the screens that let y ou maintain the firmware and configuration files. 37.1.1 What Y ou Can Do •U s e t h e Maintenance screen ( Section 37.2 on page 301 ) to upload the latest firmware. •U s e t h e Firmware Upgrade scre en ( Section[...]

Chapter 37 Ma intenance GS2210 Series User’s Guide 302 37.2.1 Load Factory Default Follow th e steps below to reset the Switch back to the factory defaults. 1 In the Maintenance screen, click the Click Here button next to Load Factory Default to clear all Switch configur ation information you configured and return to the factory defaults. 2 Click[...]

Chapter 37 Maintenance GS2210 Series User’s Guide 303 Click Config 2 to save the current configuration settings to Configuration 2 on the Switch. Alternatively , click Save on the top right-hand corner in an y screen to save the configur ation changes to the current configur ation. Note: Clicking the Apply or Add button does NO T sav e the change[...]

Chapter 37 Ma intenance GS2210 Series User’s Guide 304 Figure 220 Management > Maintenance > Firmw are Upgrade T y pe the path and file name of the firmware f ile you wish to upload to the S witch in the File Path text box or click Browse to locate it. Select the Rebooting checkbo x if you w ant to reboot the Switch and apply the new firmw [...]

Chapter 37 Maintenance GS2210 Series User’s Guide 305 37.4 Restore a Configuration File Use this screen to restore a previously sa ved configur ation fr om your com puter to the Switch using the Restore Configuration screen. Figure 221 Management > Maintenance > R estore Configuration T y pe the path and file name of the configur ation file[...]

Chapter 37 Ma intenance GS2210 Series User’s Guide 306 37.6 T e ch-Support The T ech-Support feature is a log enhancement tool that logs useful information such as CPU utilization history , memory and Mbuf (Memory Buff er) log and crash reports for issue analysis by customer support should you hav e difficulty with your S witch. The T e ch Suppor[...]

Chapter 37 Maintenance GS2210 Series User’s Guide 307 37.7 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 37.7.1 FTP Command Line This section shows some examples of uploading to or downloading files from the Switch using FTP commands. First, understand the filename convention[...]

Chapter 37 Ma intenance GS2210 Series User’s Guide 308 This is a sample FTP session showing the transfer of the computer file "firmware.bin" to the Switch. ftp> get config config.cfg This is a sample FTP session saving the current co nfigur ation to a file called “config.cfg” on your computer . If your (T)FTP client does not allo[...]

Chapter 37 Maintenance GS2210 Series User’s Guide 309 37.7.5 FTP Restrictions FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately . Initia l[...]

GS2210 Series User’s Guide 310 C HAPTER 38 Access Control 38.1 Access Control Overview This chapter describes how to control access to the Switch. A console port and FTP are allowed one session each, T elnet and SSH share nine sessions, up to fiv e W eb sessions (five different user names and passwords) and/or limitless SNMP access control sessio[...]

Chapter 38 Access Control GS2210 Series User’s Guide 31 1 Figure 224 Management > Access Control 38.3 Configuring SNMP Use this screen to configure your SNMP settings. Click Management > Access Control > SNMP to view the screen as shown. Figure 225 Management > Access Control > SNMP The following table describes the labels in this [...]

Chapter 38 Access Control GS2210 Series User’s Guide 312 38.3.1 Configuring SNMP T rap Group From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP tr aps that should be sent to each SNMP manager . Figure 226 Management > Access Control > SNMP > Trap Group Set Communi t [...]

Chapter 38 Access Control GS2210 Series User’s Guide 313 The following table describes the labels in this screen. 38.3.2 Enabling/Disabling Send ing of SNMP T rap s on a Port From the SNMP > Trap Group screen, click Port to view the screen as shown. Use this screen to set whether a trap received on the port(s) would be sent to the SNMP manager[...]

Chapter 38 Access Control GS2210 Series User’s Guide 314 The following table describes the labels in this screen. 38.3.3 Configuring SNMP User From the SNMP screen, click User to view the screen as shown. Use the User screen to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups. An SNMP user is an S[...]

Chapter 38 Access Control GS2210 Series User’s Guide 315 Security Level Selec t wh ether you want to implem ent authentication and/or encryption for SNMP communication from this user . Choose: • noauth -t o use the userna me as the passwor d string to se nd to the SNMP manager . Th i s i s e q u iv a le n t t o th e G et , S e t an d T rap C om[...]

Chapter 38 Access Control GS2210 Series User’s Guide 316 38.4 Setting Up Login Account s Up to five people (one administr ator and four non-administr ators) may access the Switch via web configurator at any one time. • An administrator is someone who can both view and configure Switch changes. The username for the Administrator is alw ays admin[...]

Chapter 38 Access Control GS2210 Series User’s Guide 317 38.5 Service Po rt Access Control Service Access Control allows you to decide what services you ma y use to access the Switch. Y ou may also change the default service port and conf igure “trusted computer(s)” for each service in the Remote Management screen (discussed later). Click Acc[...]

Chapter 38 Access Control GS2210 Series User’s Guide 318 The following table describes the fields in this screen. 38.6 Remote Manage ment Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Management > Access Control > Remote Management to view [...]

Chapter 38 Access Control GS2210 Series User’s Guide 319 Figure 231 Management > Access Control > Remote Management The following table describes the labels in this screen. 38.7 T echnical Reference This section provides technical background information on the topics discussed in this chapter . T a ble 157 Management > Access Control >[...]

Chapter 38 Access Control GS2210 Series User’s Guide 320 38.7.1 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor T CP/IP-based devices. SNMP is used to exchange management information between the network management system (NMS) and a networ k element (NE). A manager station can manag[...]

Chapter 38 Access Control GS2210 Series User’s Guide 321 Security can be further enhanced by encrypti ng the SNMP messages sent from the managers. Encryption protects the contents of the SNMP messages. When the contents of the SNMP messages are encrypted, only the intended recipients can read them. Supported MIBs MIBs let administrators collect s[...]

Chapter 38 Access Control GS2210 Series User’s Guide 322 poe (For PoE models only) zyPoe PowerP ortOverload 1.3.6.1.4.1.890. 1.15.3.59.4.1 This trap is sent when the po rt is turned off to supply power due to ov erloading. zyPoe PowerP ortShortCircuit 1.3.6.1.4.1.890.1.15.3.5 9.4.2 This tr ap is sent when the po rt is turned off to supply power d[...]

Chapter 38 Access Control GS2210 Series User’s Guide 323 errdisable zyErrdisableDetect 1.3.6.1.4.1.890.1. 15.3.24.4.1 This trap is sent when an error i s detected on a port, such as a loop occurs or the rate limit for specific control packets is exce eded. zyErrdisableR ecovery 1.3.6.1.4.1.890. 1.15.3.24.4.2 Th is trap is sent when the Switch cea[...]

Chapter 38 Access Control GS2210 Series User’s Guide 324 transceiver- ddm zyT ransceiverDdmiT emperatur eOutOfR ange 1.3.6.1.4 .1.890.1.15.3.84. 3.1 This tr ap is sent when the transceiver temperature is above or below the normal operating range. zyT ransceiverDdmiTxP owerOut OfRange 1.3. 6.1.4.1.890.1.15.3. 84.3.2 Thi s trap is sent when the tra[...]

Chapter 38 Access Control GS2210 Series User’s Guide 325 T a ble 161 AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION authenticati on authenti cationF ailure 1.3.6.1.6.3.1.1.5.5 This tr ap is sent when authentic ation fails due to incorrect user name and/ or password. zyAaaAuthenticationF ailure 1.3.6.1.4.1.890.1.15. 3. 8.3.1 This t rap is sen[...]

Chapter 38 Access Control GS2210 Series User’s Guide 326 38.7.2 SSH Overview Unlike T elnet or F TP , which tr ansmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts ov er an unsecured network. Figure 233 SSH Comm[...]

Chapter 38 Access Control GS2210 Series User’s Guide 327 Figure 234 How SSH W orks 1 Host Identification The SSH client sends a connection request to the SSH server . The server identifies itself with a host key . The client encrypts a randomly generated session k ey with the host key and server key and sends the result back to the server . The c[...]

Chapter 38 Access Control GS2210 Series User’s Guide 328 38.7.3 Introduction to HTTPS HT TPS (HyperT ext T ransfer Protocol over Secure Sock et Layer , or HT TP ov er SSL) is a web protocol that encrypts and decrypts web pages. Secure Sock et Layer (S SL) is an application-level protocol that enables secure transactions of data by ensu ring confi[...]

Chapter 38 Access Control GS2210 Series User’s Guide 329 When you attempt to access the Switch HTTPS server , a Windows dialog box pops up asking if you trust the server certificate. Y ou see the following Security Alert screen in Internet Explorer . Select Yes to proceed to the web configurator login screen; if you select No , then web configura[...]

Chapter 38 Access Control GS2210 Series User’s Guide 330 Figure 238 Certificate Error (Internet Explorer 7 or 8) Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser . Figure 239 Certificate (Internet Explorer 7 or 8) Mozilla Firefox W arning Messages When you attempt to access the Switch H[...]

Chapter 38 Access Control GS2210 Series User’s Guide 331 Figure 240 Security Alert (Mozilla Firefox) Confirm the HT TPS serv er URL matches. Click Confirm Security Exception to proceed to the web configurator login screen. Figure 241 Security Alert (Mozilla Firefox) 38.7.3.2 The Main Screen After you accept the certificate and enter the logi n us[...]

Chapter 38 Access Control GS2210 Series User’s Guide 332 Mozilla Firefox) or next to the address bar (in Internet Explorer 7 or 8) denotes a secure connection. Figure 242 Example: Lock Denoting a Secure Con nection EXAMPLE[...]

GS2210 Series User’s Guide 333 C HAPTER 39 Diagnostic 39.1 Overview This chapter explains the Diagnostic screen. Use the Diagnostic screen ( Section 39.2 on pa ge 333 ) to check system logs, ping IP addresses or perform port tests. 39.2 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to che[...]

Chapter 39 Diagnostic GS2210 Series User’s Guide 334 The following table describes the labels in this screen. T a ble 164 Management > Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi-line text box. Click Clear to empty the text box and reset th e sy slog entry . Ping T est IPv4 Select this option i[...]

GS2210 Series User’s Guide 335 C HAPTER 40 Syslog 40.1 Syslog Overview This chapter explains the syslog screens. The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server . Syslo[...]

Chapter 40 Sysl og GS2210 Series User’s Guide 336 Figure 244 Management > Syslog The following table describes the labels in this screen. 40.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. T a ble 166 Management > Sy[...]

Chapter 40 Syslog GS2210 Series User’s Guide 337 Figure 245 Management > Syslog > S y slog Server Setup The following table describes the labels in this screen. T a ble 167 Management > Syslog > Syslog Server Setup LABEL DESCRIPTION Active Sele ct this che ck box to have the de vice se nd logs to this syslog server . Clear th e check [...]

GS2210 Series User’s Guide 338 C HAPTER 41 Cluster Management 41.1 Cluster Management Overview This chapter introduces cluster management. Cluster Management allows y ou to manage switches through one S witch, called the cluster manager . The switches must be directly connected an d be in the same VLAN g roup so as to be able to communicate with [...]

Chapter 41 Cluster Management GS2210 Series User’s Guide 339 41.1.1 What Y ou Can Do •U s e t h e Cluster Management screen ( Section 41.2 on page 339 ) to view the role of the Switch within the cluster and to access a cluster member switch’ s web configurator . •U s e t h e Clustering Management Configuratio n screen ( Section 41.1 on page[...]

Chapter 41 Cluster Management GS2210 Series User’s Guide 340 41.3 Clustering Management Configuration Use this screen to configure clustering management. Click Managem ent > Cluster Manage ment > Configuration to display the next screen. Figure 248 Management > Cluster Management > Configur ation Model This field displa ys the mode l [...]

Chapter 41 Cluster Management GS2210 Series User’s Guide 341 The following table describes the labels in this screen. T a ble 170 Management > Cluster Management > Configu ration LABEL DESCRIPTION Clustering M anager Active Select Activ e to have this S witch become the c l uster manager swit ch. A cluster c an only have one manager . Other[...]

Chapter 41 Cluster Management GS2210 Series User’s Guide 342 41.4 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 41.4.1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink fro m the lis[...]

Chapter 41 Cluster Management GS2210 Series User’s Guide 343 Figure 250 Example: Uploading Firmware to a Cluster Member S witch The following table explains so me of the FTP par ameters. C:>ftp 192.168.1.1 Connected to 192.168.1.1. 220 Switch FTP version 1.0 ready at Thu Jan 1 00:58:46 1970 User (192.168.0.1:(none)): admin 331 Enter PASS comm[...]

GS2210 Series User’s Guide 344 C HAPTER 42 MAC Table 42.1 MAC T a ble Overview This chapter introduces the MAC Table screen. The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’ s ports. It shows what device MAC address, belonging to what VLAN group (if any) is fo[...]

Chapter 42 MAC Table GS2210 Series User’s Guide 345 Figure 251 MAC T able Flowchart 42.2 V iewing the MAC T able Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen. Figure 252 Management > MAC T able[...]

Chapter 42 MAC Table GS2210 Series User’s Guide 346 The following table describes the labels in this screen. T a ble 172 Management > MAC Table LABEL DESCRIPTION Condition Select on e of the buttons an d click Search to only display th e data which matches t he criteria you specif ied. Select All to display any entry i n the MAC table of the S[...]

GS2210 Series User’s Guide 347 C HAPTER 43 ARP Table 43.1 Overview This chapter introduces ARP T able. Address Resolution Protocol (ARP) is a protocol for mapping an Intern et Protocol address (IP address) to a physical machine address, also kn own as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 3[...]

Chapter 43 ARP Table GS2210 Series User’s Guide 348 Figure 253 Management > ARP T able The following table describes the labels in this screen. T a ble 173 Management > ARP Table LABEL DESCRIPTION Condition Specify how you want the Switch to remove AR P entries when y ou click Flush . Select All to remove all of the dynamic entries from the[...]

GS2210 Series User’s Guide 349 C HAPTER 44 Path MTU Table 44.1 Path MTU Overview This chapter introduces the IPv6 Path MTU table. The largest size (in bytes) of a packet that can be tr ansferred over a data link is called the maximum transmission unit (MTU). The S witch uses Path MTU Discovery to discover P ath MTU (PMTU), that is, the minimum li[...]

GS2210 Series User’s Guide 350 C HAPTER 45 Configure Clone 45.1 Overview This chapter shows you how you can copy the settings of one port onto other ports. 45.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Conf igure Clone to open the following [...]

Chapter 45 Configure Clone GS2210 Series User’s Guide 351 Figure 255 Management > Configure Clone The following table describes the labels in this screen. T a ble 175 Management > Configure Clone LABEL DESCRIPTION Sourc e/ Destinat ion Port Enter the source port under the Source label . This port’s attributes are copied. Enter the destina[...]

Chapter 45 Configure Clone GS2210 Series User’s Guide 352 Apply Click Apply to save your changes t o the Switch’ s run-time me mory . The Switch l oses these changes if it is turned off or lose s power , so use the Sav e link on the top navigation pane l to save y our changes to t he non-v olatile memory when you are done configuring. Cancel Cl[...]

GS2210 Series User’s Guide 353 C HAPTER 46 Neighbor Table 46.1 IPv6 Neighbor T able Overview This chapter introduces the IPv6 neighbor table. An IPv6 host is required to ha ve a neighbor table. If there is an address to be resolved or v erified, the Switch sends out a neighbor solicitation me ssage. When the Switch receiv es a neighbor advertisem[...]

Chapter 46 Neighbor Tab le GS2210 Series User’s Guide 354 Status This field dis p lays whet her the neighbor IP v6 interface is reachabl e. I n IPv6, “reach able” means an IPv6 packet can be correctl y forwarde d to a neighbor node (host or router) and the neighbor can successfu lly receive and handle th e packet. Th e avail able options in t[...]

GS2210 Series User’s Guide 355 C HAPTER 47 Troubleshooting This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LEDs • Switch Access and Login • Switch Configur ation 47.1 Power , Hardware Connections, and LEDs The [...]

Chapter 47 Troub leshooting GS2210 Series User’s Guide 356 4 Disconnect and re-connect the power adaptor or cord to the Switch. 5 If the problem continues, contact the v endor . 47.2 Switch Access and Login I forgot the IP address for the Switch. 1 The default IP address is 192.168.1.1 . 2 Use the console port to log in to the S witch. 3 If this [...]

Chapter 47 Troubl eshooting GS2210 Series User’s Guide 357 6 If the problem continues, contact the v endor , or try one of the advanced suggestions. Advanced Suggestions • T ry to access the Switch using another service, such as T elnet. If you can access the Switch, check the remote management settings to find out why the Switch does not respo[...]

Chapter 47 Troub leshooting GS2210 Series User’s Guide 358 Click the Display button in the System Log field in the Management > Diagnostic screen to check for unauthorized access to y our Switch. T o avoid unauthorized access, configu re the secured client setting in the Management > Access Control > Remote Management screen for teln et,[...]

GS2210 Series User’s Guide 359 A PPENDIX A Customer Support In the event of problems th at cannot be solved by using this manual, you should contact your vendor . If you cannot contact your v endor , then contact a Z y XEL office for the region in which you bought the device. Regional websites are listed below (see also http://www .zyxel.com/ abo[...]

Appendix A Customer Support GS2210 Series User’s Guide 360 • http://www.zyx el.kz Korea • Z yXEL K orea Corp. • http://www.zyx el.kr Malaysia • Z yXEL Malaysia Sdn Bhd. • http://www.zyx el.com.my Pakist an • ZyXEL P akistan (Pvt.) Ltd. • http://www .zyxel.com.pk Philipines • Z yXEL Philippines • http://www .zyxel.com.ph Singapor[...]

Appendix A Customer Supp ort GS2210 Series User’s Guide 361 Belarus •Z y X E L B Y • http://www.zyx el.by Belgium • Z yXEL Communications B.V . • http://www .zyxel.com/be/nl/ Bulgaria •Z y X E L България • http://www.zyx el.com/bg/bg/ Czech • Z yXEL Communications Czech s.r .o • http://www.zyx el.cz Denmark • Z yXEL Comm[...]

Appendix A Customer Support GS2210 Series User’s Guide 362 • http://www.zyx el.com/l v/lv/homepage.shtml Lithuania • Z yXEL Lithuania • http://www .zyxel.com/lt/lt/homepage.shtml Netherlands •Z y X E L B e n e l u x • http://www.zyx el.nl Norway • Z yXEL Communications • http://www.zyx el.no Poland • Z yXEL Communications Poland ?[...]

Appendix A Customer Supp ort GS2210 Series User’s Guide 363 • http://www.zyx el.ch/ T urkey •Z y X E L T u r k e y A . S . • http://www.zyx el.com.tr UK • Z yXEL Communications UK Ltd. • http://www.zyx el.co.uk Ukraine •Z y X E L U k r a i n e • http://www .ua.zyxel.com Latin America Argentina • Z yXEL Communication Corpor ation ?[...]

Appendix A Customer Support GS2210 Series User’s Guide 364 Oceania Australia • Z yXEL Communications Corporation • http://www .zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyx el.co.za[...]

GS2210 Series User’s Guide 365 A PPENDIX B Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port number s, ICMP t ype/code numbers and services, visit the IANA (I nternet Assigned Number Authority) web site. • Name : This is a short, descriptive na[...]

Appendix B Common Service s GS2210 Series User’s Guide 366 HTTPS TCP 443 HT TPS is a secured http session often used in e- commerce. ICMP User-Defined 1 I nternet Control Message Protocol is often used for diagnostic or routing purposes. ICQ UDP 4000 This is a popula r Internet ch at program. IGMP (MUL TICAST) User-Defined 2 Internet Group Multic[...]

Appendix B Common Service s GS2210 Series User’s Guide 367 SQL -NET TCP 1521 Structured Query Language is an interface to access data on many different ty pes of data base systems, including mainframes, midrange systems, UNIX systems and network servers. SSH TCP / UD P 22 Secure Shell Remote Login Program. STRM WORKS UDP 1558 Stream W orks Protoc[...]

GS2210 Series User’s Guide 368 A PPENDIX C IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 38 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks[...]

Appendix C IPv6 GS2210 Series User’s Guide 369 Global Address A global address uniquely iden tifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not hav[...]

Appendix C IPv6 GS2210 Series User’s Guide 370 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal cha[...]

Appendix C IPv6 GS2210 Series User’s Guide 371 combines its interface ID and global and subnet in formation advertised from the router . This is a routable global IP address. DHCPv6 The Dynamic Host Configur ation Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pa ss IPv6 network addresses,[...]

Appendix C IPv6 GS2210 Series User’s Guide 372 such as the system name. The interface-ID option provides slot number , port information and the VLAN ID to the DHCPv6 server . The remote-ID option (if any) is stripped from the R elay -R eply messages before the relay agent sends the packets to the clients. The DHCP serv er copies the interface-ID [...]

Appendix C IPv6 GS2210 Series User’s Guide 373 determine whether the destination address is on- link and can be reached directly without passing through a router . If the address is onlink, the addre ss is considered as the next hop. Otherwise, the Switch determines the next-hop from the default ro uter list or routing table. Once the next hop IP[...]

Appendix C IPv6 GS2210 Series User’s Guide 374 4 Double click Di bbler - a DHCPv6 client . 5 Click Start and then OK . 6 Now your computer can obtain an IP v6 address from a DH CPv6 server . Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is al so en abled when you enable IPv6 on a Windows 7 computer . T o enable I[...]

Appendix C IPv6 GS2210 Series User’s Guide 375 4 Click Close to exit the Local Area Connection Status screen. 5 Select Start > All Programs > Accessories > Command Prompt . 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obta ined from a DHCP server . C:>ipconfig[...]

GS2210 Series User’s Guide 376 A PPENDIX D Legal Information Copyright Copyright © 2014 b y ZyXEL Communi cations Corpor ation. Th e c o nt e nt s o f th is p ub li ca t io n m a y n ot be r ep r od uc e d i n a ny p ar t or as a wh ol e, t ran s cr i be d, s to re d in a r et r ie va l s y st em , tr anslated into any language, or tr ansmitted [...]

Appendix D Legal Information GS2210 Series User’s Guide 377 ZyXEL Limited W arranty Z yXEL warrants to the original end user (pu rchaser) that this pr oduct is free from any defects in material or workmanship for a spe cific period (the Warranty P eriod) from the date o f purchase. The Warranty P eriod varies by region. Check with your vendor an [...]

Appendix D Legal Information GS2210 Series User’s Guide 378 Environment al Product Declaration[...]

Index GS2210 Series User’s Guide 379 Index Numerics 802.1P priority 70 802.3az 249 A AAA 192 AAA (Authentication and Authorization) 192 access control limitations 310 login account 316 remote management 318 service port 317 SNMP 320 address learning, MAC 95 , 97 Address R esolution Protocol (ARP) 297 , 347 , 350 , 351 administrator password 316 a[...]

Index GS2210 Series User ’s Guide 380 CLI Re fe r e n c e G u i d e 2 cloning a port See port cloning cluster management 338 and switch passwords 341 cluster manager 338 , 341 cluster member 338 , 341 cluster member firmware upgr ade 342 network example 338 setup 340 specification 338 status 339 switch models 338 VID 341 web config urator 342 clu[...]

Index GS2210 Series User’s Guide 381 FCC interference statement 376 file transfer using FTP command example 307 filename convention, configur ation configuration file names 307 Filtering 183 filtering 11 2 rules 11 2 filtering database, MAC table 344 Filtering Profile 185 firmware 61 upgrade 303 , 342 flow control 70 back pressure 70 IEEE802.3x 7[...]

Index GS2210 Series User ’s Guide 382 IP subnet mask 67 IPv6 368 addressing 368 EUI-64 370 global address 369 interface ID 370 link -local address 368 Neighbor Discovery Protocol 368 ping 368 prefix 368 prefix length 368 stateless autoconfiguration 370 unspecified address 369 IPv6 Multicast 178 L L2PT 230 access port 231 CDP 230 configuration 231[...]

Index GS2210 Series User’s Guide 383 current configuration 301 main screen 301 Management Information Base (MIB) 320 management port 102 managing the device good habits 21 usi ng FT P . See FTP . 21 using T elnet. See command interface. 21 using the command interface. See command interface. 21 man-in-the-middle attacks 224 max age 126 hops 126 ma[...]

Index GS2210 Series User ’s Guide 384 viewing 164 Po rt Aggregation Protocol, see PAgP port authentication 147 and RADIUS 193 IEEE802.1x 148 , 19 5 port based VLAN type 65 port cloning 350 , 351 advanced settings 35 0 , 351 basic settings 350 , 35 1 port details 56 port isolation 102 port mirroring 137 , 138 direction 138 egress 138 ingress 138 p[...]

Index GS2210 Series User’s Guide 385 related documentation 2 remote management 318 service 319 trusted computers 319 resetting 38 , 302 to factory default settings 302 restoring configuration 38 , 305 RFC 3164 335 R ound Robin Scheduling 165 RSTP 11 4 S save configur ation 37 , 30 2 Secure Shell See SSH service access control 317 service port 318[...]

Index GS2210 Series User ’s Guide 386 syslog 225 , 335 protocol 335 server setup 336 settings 335 setup 335 seve rity leve ls 335 system information 60 , 73 , 74 system log 334 system reboot 303 T T ACA CS+ 192 , 193 setup 195 T ACACS+ (T erminal Access Controller Access- Control System Plus) 19 2 tagged VLAN 86 Te c h - S u p p o r t 306 tempera[...]

Index GS2210 Series User’s Guide 387 VTP 233 W warranty 377 note 377 web config urator getting help 39 home 33 login 32 logout 38 navigation panel 34 weight, queuing 166 W eighted Round R obin Scheduling (WRR) 166 WRR (W eighted Round Robin Scheduling) 165 Z ZON Neighbor Management 53 ZON Utility 52 Z y NOS (Z yXEL Network Operating System) 307[...]