ZyXEL Communications GS1920 manuel d'utilisation

Quick Start Guide www .zyxel.com GS1920 Series Intelligent Lay er 2 GbE Switch V e rsion 4.10 Edition 2, 03/2014 Copyright © 2013 Z yXEL Communications Corpor ation User’s Guide Default Login Details IP Address https://192.168.1.1 User Name admin P assword 1234[...]

GS1920 Series User’s Gui de 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Gu ide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ sl ightly from your product due to differences in your product firmware o r your computer o[...]

Contents Overview GS1920 Series User’ s Guide 3 Contents Overview User ’ s Guide .................................................................... .......... ........... ........... .............. ....... .............. 17 Getting to Know Y our Sw itch ........ ................ ................... ................. ................ .........[...]

Contents Overview GS1920 Series User’s Gui de 4 Maintenance ............. ................. ................ ................ ................ ................ ................ ..... ....................... 284 Access Control ... ................ ................ ................ ................. ................ ................ ............ ..[...]

Table of Contents GS1920 Series User’ s Guide 5 Table of Contents Contents Overview .......................................................... .................................................... ................. 3 Table of Contents ................................................. ..................................................... ..........[...]

Table of Contents GS1920 Series User’s Gui de 6 Part II: T echnical Reference . ............................................................ ............... 33 Chapter 4 The Web Configurator ..................................................... ..................................................... .............. 35 4.1 Overview ................ .[...]

Table of Contents GS1920 Series User’ s Guide 7 8.3 General Setup ................. ................ ................ ................ ................ ................ ........ ..................... . 61 8.4 Introduction to VLANs .............. ................ ................ ................. ................ ................ ..... ..........[...]

Table of Contents GS1920 Series User’s Gui de 8 Chapter 1 1 St atic Multicast Forward Setup ...................................... ........................................................... ...... 103 1 1.1 S tatic Multicast Forward Setup Overview .. ....... ................ ................ ................ ................ ........ .... 103 1 [...]

Table of Contents GS1920 Series User’ s Guide 9 15.2 Broadcast S torm Control Setup .. ................ .... ................ ............. ................ ................ ......... ......... 129 Chapter 16 Mirroring ........... ..................................................... ...................................................... ........[...]

Table of Contents GS1920 Series User’s Gui de 10 Chapter 21 Policy Rule ................................................. ..................................................... ............. .................... 154 21.1 Policy Rules Overview . .... ................ ................ ................ ................ ................ ..............[...]

Table of Contents GS1920 Series User’ s Guide 11 Chapter 25 IP Source Guard .................................................... ..................................................... ........... ............ 187 25.1 Overview ....... ................ ................. ................ ................ ................ ................ ......... .[...]

Table of Contents GS1920 Series User’s Gui de 12 28.3.1 PPPoE IA Per-Port . ................ ................ ................ ............. ................ ................ ....... ........ 222 28.3.2 PPPoE IA Per-Port Per-V LAN ... ................ .................... ................ ................ ................ ..... 224 28.3.3 PPPoE I[...]

Table of Contents GS1920 Series User’ s Guide 13 33.1 Differentiated Services Overview .............. ................. ................ ................ ................ ......... ......... 262 33.1.1 What Y ou Can Do ....... ................ .......... ... ................ ................ ................ ................ .... ........ 262 33.[...]

Table of Contents GS1920 Series User’s Gui de 14 36.5 Backup a Configuration File .............. ............. ................ ................ ................ ................ .......... .. 288 36.6 T ech-Support ... ................. ................... ................ ................ ................ ................. .... ................[...]

Table of Contents GS1920 Series User’ s Guide 15 40.4 T echnical Referenc e ................... ................ ................. ............. ................ ................ ..... ................ 320 40.4.1 Cluster Member Switch Ma nagement ....................... ................ ................. ................ ........ 320 Chapter 41 M[...]

Table of Contents GS1920 Series User’s Gui de 16 Index ................................................ ..................................................... .................... ........................ 360[...]

17 P ART I User ’ s Guide[...]

18[...]

GS1920 Series User’ s Guide 19 C HAPTER 1 Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The GS1920 Series consist of the four following models: • GS1920-24 • GS1920-24HP • GS1920-48 • GS1920-48HP Referring to P oE model(s) in this User's Guide only applies for G[...]

Chapter 1 Getting to Know Your Switch GS1920 Series User’s Gui de 20 The following table describes the P oE features of the Switch by model. This section shows a few examples of using the S witch in various network en vironments. 1.1.1 Backbone Application The Switch is an ideal solution for small networks where rapid growth can be expected in th[...]

Chapter 1 Getting to Know Your Switch GS1920 Series User’ s Guide 21 Figure 2 Bridging Application 1.1.3 High Performa nce Switching Example The Switch is ideal for connecting two networks that need high bandwidth. In th e following example, use trunking to connect these two networks. Switching to higher-speed LANs such as A TM (A sy nchronous T [...]

Chapter 1 Getting to Know Your Switch GS1920 Series User’s Gui de 22 1.1.4.1 T ag-based VLAN Example Po rts in the same VLAN group share the same frame broadcast domain thus increase network performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re-cabling. Shared res[...]

Chapter 1 Getting to Know Your Switch GS1920 Series User’ s Guide 23 • Back up the configur ation (and make sure y ou know how to restore it). R estoring an earlier working configur ation may be useful if the devi ce becomes unstable or even crashes. If y ou forget your password, y ou will have to reset the Switch to its factory default setting[...]

GS1920 Series User’ s Guide 24 C HAPTER 2 Hardware Installation and Connection 2.1 Inst allation Scenarios This chapter shows you how to install and connect the Sw itch. The Switch can be placed on a desktop or r ack -mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the br ackets in a rack -mounted installation. N[...]

Chapter 2 Hardware Installation and Conne ction GS1920 Series User’ s Guide 25 • Make sure the position of the S witch does not make the r ack unstable or top-heav y . T ake all necessary precautions to anchor the rack securely before installing the unit. 2.3.2 Att aching the Mounti ng Brackets to the Switch 1 Po sition a mounting bracket on on[...]

Chapter 2 Hardware Installation and Connection GS1920 Series User’s Gui de 26 Figure 6 Mounting the Switch on a Rack 2 Using a #2 Philips screwdriver , install the M5 flat head screws through the mounting bracket holes into the rack. 3 R epeat steps 1 and 2 to attach the second mounting brack et on the other side of the r ack.[...]

GS1920 Series User’ s Guide 27 C HAPTER 3 Hardware Panels This chapter describes the front panel and rear pa nel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel The following figures show the front panels of the S witch. See Section 3.3 on page 31 for information on the LEDs. Figure 7 Front Panel: GS1920-24 Figur[...]

Chapter 3 Hardware Panels GS1920 Series User’s Gui de 28 Four 1000Base- T Ethernet ports are paired with a mini-GBIC slot to create a dual personality interface. The Switch uses up to one connection for each mini-GBIC and 1000 Base- T Ethernet pair . The mini-GBIC slots have priority over the Gigabit ports. This means that if a mini-GBIC slot and[...]

Chapter 3 Hardwa re Panels GS1920 Series User’ s Guide 29 1 Insert the transceiv er into the slot with the exposed section of PCB board facing down. 2 Press the transceiver firmly until it clicks into place. 3 The Switch automatically detects the installed transceiver . Check the LEDs to verify that it is functioning properly . 4 Close the transc[...]

Chapter 3 Hardware Panels GS1920 Series User’s Gui de 30 Figure 15 T ransceiver R emov al Example 3.1.3 LED Mode (only available for GS1920-48HP) After you push this button (see Section Figure 10 on page 27 ) to active PoE on the Switch, view the LEDs to ensure proper functioning of the S witch and as an aid in troubleshooting (see Section 3.3 on[...]

Chapter 3 Hardwa re Panels GS1920 Series User’ s Guide 31 3.3 LEDs After you connect the power to the Switch, view the LEDs to ensure proper functioning of the Switch and as an aid in troubleshooting. 3.4 Reset to Factory Default s If you forget your password or cannot access the W eb Configurator , you will need to use the R eset button at the s[...]

Chapter 3 Hardware Panels GS1920 Series User’s Gui de 32 If you backed up an earlier co nfigur ation file as advised in Section 1.3 on page 22 , you will not have to totally re-configure the Switch after resetting . Y ou can simply restore your last configur ation. Follow th e steps below to reset the Switch back to factory defau lts. 1 Make sure[...]

33 P ART II T echnical Reference[...]

34[...]

GS1920 Series User’ s Guide 35 C HAPTER 4 The Web Configurator 4.1 Overview This section introduces the configur ation and functions of the web configur ator . The web configurator is an HTML -based management interface that allows easy Switch setup and management via Intern et browser . Use Internet Ex plorer 6.0 and later , Netscape Navigator 7[...]

Chapter 4 The Web Configurator GS1920 Series User’s Gui de 36 Figure 22 W eb Configur ator: Login 4 Click OK to view the first web configurator screen. 4.3 The S t atus Screen The Status screen is the first screen that displays when y ou access the web configur ator . This guide uses PoE model(s) screens as an example. The screens may very slight[...]

Chapter 4 The Web Configurator GS1920 Series User’ s Guide 37 B - Click this link to sav e your configuration into the S witch’ s nonvolatile memory . Nonv olatile memory is the configur ation of your Switch that st ays the same even if the S witch’s power is turned off . C - Click this link to go to the status page of the Switch. D - Click t[...]

Chapter 4 The Web Configurator GS1920 Series User’s Gui de 38 IP Setup This link takes you to a screen where you can configure the IP addre ss, subnet mask (necessary for Switch manage ment) and DNS (domain name se rv er) and set up to 64 IP routing domains. Port Setup This link takes you to a screen where you can configure se ttings for individu[...]

Chapter 4 The Web Configurator GS1920 Series User’ s Guide 39 4.3.1 Change Y our Password After you log in for the first time, it is recommended y ou change the default adm inistrator password. Click Management > Access Control > Logins to display the next screen. Layer 2 Protocol T unneling This link takes you to a scree n where you can co[...]

Chapter 4 The Web Configurator GS1920 Series User’s Gui de 40 Figure 24 Change Administrator Login P assword 4.4 Saving Y our Configuration When you are done modifying the settings in a screen, click Apply to save y our changes back to the run-time memory . Settings in the run-time memo ry are lost w hen th e S wi tch’ s power is turned off . C[...]

Chapter 4 The Web Configurator GS1920 Series User’ s Guide 41 5 Misconfigure the text configuration file. 6 F orge t the passw ord and/o r IP address. 7 Prevent all services from accessing the Switch. 8 Change a service port number but forget it. Note: Be careful not to lock y ourse lf and other s out of the Swit ch. 4.6 Resetting the Switch If y[...]

GS1920 Series User’ s Guide 42 C HAPTER 5 Initial Setup Example 5.1 Overview This chapter shows how to set up th e Switch for an example network. The following lists the configuration steps fo r the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast fr[...]

Chapter 5 Initial Setup Example GS1920 Series User’ s Guide 43 2 In the Static VLAN screen, select ACTIVE , enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID. 3 Since the VLAN2 netw[...]

Chapter 5 In itial Setup Exam ple GS1920 Series User’s Gui de 44 Figure 27 Initial Setup Network Example: Port VID 1 Click Advanced Applications > VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 2 and click Apply to save your changes back to the run- time memory . Settings in the run-ti[...]

Chapter 5 Initial Setup Example GS1920 Series User’ s Guide 45 3 Click Basic Setting > IP Setup in the navigation panel. 4 Configure the related fields in the IP Setup screen. 5 For t h e VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255. 0 as the subnet mask. 6 In the VID field, enter the ID of the VLAN group to which you wan[...]

GS1920 Series User’ s Guide 46 C HAPTER 6 Tutorials 6.1 Overview This chapter provides some examples of using th e web configur ator to set up and use the S witch. The tutorials include: • How to Use DHCP Snooping on the S witch • How to Use DHCP R elay on the Switch 6.2 How to Use DHCP Snooping on the Switch Y ou only want DHCP serv er A con[...]

Chapter 6 Tutorials GS1920 Series User’ s Guide 47 2 Go to Advanced Application > VLAN > Static VLAN , and create a VL AN with ID of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as show n. Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN tag. Click Add . Figure 30 T utorial:[...]

Chapter 6 Tutorials GS1920 Series User’s Gui de 48 4 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure , activate and specify VLAN 100 as the DHCP VLAN as shown. C lick Apply . Figure 32 T utorial: Specify DHCP VL AN 5 Click the Port link at the top right corner . 6 The DHCP Snooping Port Configure screen appears. [...]

Chapter 6 Tutorials GS1920 Series User’ s Guide 49 7 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure > VLAN , show VLAN 100 by entering 100 in the St art VID and End VID fie lds an d click Apply . Then select Yes in the Enabl ed field of the VLAN 100 entry shown at the bottom section of the screen. If you w an[...]

Chapter 6 Tutorials GS1920 Series User’s Gui de 50 Figure 36 T utorial: DHCP Rela y Scenario 6.3.2 Creating a VLAN Follow the steps below to configure port 2 as a member of VLAN 10 2. 1 Access the web configurator through the Switch’ s management port. 2 Go to Basic Setting > Switch Setup and set the VLAN t ype to 802.1Q . Click Apply to sav[...]

Chapter 6 Tutorials GS1920 Series User’ s Guide 51 4 In the Static VLAN screen, select ACTIVE , enter a descriptiv e na me (VLAN 10 2 for examp l e) in the Name field and enter 1 02 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN. 6 Clear the TX Tagging check box to set the S witch to remove VL[...]

Chapter 6 Tutorials GS1920 Series User’s Gui de 52 9 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are fo rwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory . Figure 40 T utorial: Add T ag for Frames R eceived on[...]

Chapter 6 Tutorials GS1920 Series User’ s Guide 53 Figure 41 T utorial: Set DHCP Server and R elay Information 6 Click the Save link in the upper right corner of the web configurator to save your conf iguration permanently . 7 The DHCP server can then assign a specif ic IP address based on the DHCP request. 6.3.4 T roublesh ooting Check the clien[...]

GS1920 Series User’ s Guide 54 C HAPTER 7 System Status and Port Status 7.1 Overview This chapter describes the screens for system status (web configurator home page), port details and P oE status. The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details. 7.1.1 What Y ou Can D[...]

Chapter 7 System St atus and Port Status GS1920 Series User’ s Guide 55 The following table describes the labels in this screen. 7.2.1 St atus: Port Det ails Click a number in the Port column in the Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Sw[...]

Chapter 7 System Stat us and Port Status GS1920 Series User’s Gui de 56 Figure 43 Status > Port Details The following table describes the labels in this screen. T a ble 8 Status: Port Details LABEL DESCRIPTION Port Info Por t NO. This field displays the port number you are viewing. Name This field displays the name of the port. Link This field[...]

Chapter 7 System St atus and Port Status GS1920 Series User’ s Guide 57 Up Time Thi s field shows the tot al amount of time the connection has been up. Tx P acke t The following fields displ ay detailed informatio n about packets transmitted. TX Pac ke t s This field shows the number of good packets (unicast, multicast and broadcast) transmitted.[...]

Chapter 7 System Stat us and Port Status GS1920 Series User’s Gui de 58 1024- 1518 This field shows the num ber of packets (includi ng bad packets) receiv ed that were between 1024 and 1518 octets i n length. Giant This field shows the n um ber of packets (inclu ding bad packets) receiv ed that were between 1519 octets and the maxi mum frame siz [...]

GS1920 Series User’ s Guide 59 C HAPTER 8 Basic Setting 8.1 Overview This chapter describes how to configure the System Info, Ge neral Setup , Switch Setup , IP Setup , Port Setup , PoE, Inte rface Setu p and IPv6 screens. 8.1.1 What Y ou Can Do •U s e t h e System Info screen ( Section 8.9 on page 72 ) to check the firmware version number . ?[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 60 Figure 44 Basic Setting > System Info (for PoE model(s) only) The following table describes the labels in this screen. T a ble 9 Basic Setting > System Info LABEL DESCRIPTION System Name This fiel d displays the descriptive name of the Swit ch for identification purposes. Product Model [...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 61 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Bas ic Setting > General Se tup in the navigation panel to display the screen as shown. Current This shows the current temperature at this sensor . MAX This field displays the maximum te[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 62 Figure 45 Basic Setting > General Setup The following table describes the labels in this screen. T a ble 10 Basic Setting > General Setup LABEL DESCRIPTION System Name Choose a descript ive name for i dentification purposes. This name consists of up to 64 printable characters; spaces ar[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 63 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a ph ysic al network to be partitioned into multiple logical networks. Devices on a logical network belong to on e gr ou p. A d ev ic e c an be lo ng to mo re th a n o ne group. With VLAN, a device cannot directly talk to or[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 64 See Chapter 9 on page 85 for information on port-based and 802.1Q tagged VLANs. 8.5 Switch Setup Screen Click Basic Setti ng > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 65 8.6 IP Setup Use the IP Setup screen to configure the Switch IP addres s, default gateway device, the default domain name server and the management VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic. 8.6.1 Manage ment IP Addresses The [...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 66 Note: Y ou must configure a VLAN first. Figure 47 Basic Setting > IP Setup The following table describes the labels in this screen. T a ble 12 Basic Setting > IP Setup LABEL DESCRIPTION Domain Nam e Serve r DNS (Domain Name System) is for mapping a domain name to its corresponding IP ad[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 67 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to displa y the configuration screen. IP Subnet Mask Enter the IP sub net mask of your Sw itch in dotted decimal notation for example 255.255.255.0. Default Gateway En[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 68 Figure 48 Basic Setting > Port Setup The following table describes the labels in this screen. T a ble 13 Basic Setting > Port Setup LABEL DESCRIPTION Port This is the port index number . * Settings in this row apply to all ports. Us e t h is ro w on ly if yo u wan t to ma ke s om e se t[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 69 8.8 PoE S t atus Note: The following screens are available for the P oE model(s) only . Some features are only av ailable for the Ethernet port s (1 to 24 for GS1920-24HP and 1 to 48 for GS1920-48HP). The PoE model(s) supports the IEEE 802.3at High P ower over Ethernet (P oE) standard. A powe[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 70 T o view the current amount of power that PDs are receiving from the Switch, click Basic Setting > PoE Setup . Figure 50 Basic Setting > PoE Status The following table describes the labels in this screen. T a ble 14 Basic Setting > PoE Status LABEL DESCRIPTION PoE Sta tu s PoE Mode T[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 71 8.8.1 PoE Setup Use this screen to set the priority levels for the Switch in distributing power to PDs. Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen opens. Figure 51 Basic Setting > PoE Setup Class This shows th e power classificati on of the P[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 72 The following table describes the labels in this screen. 8.9 Interface Setup An IPv6 address is configured on a per-interface basis. The interface can support virtual interface (for example, a VLAN). The Switch supports the VLAN interface type for IPv6 at the time of writing. Use this screen [...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 73 Figure 52 Basic Setting > Interface Setup The following table describes the labels in this screen. 8.10 IPv6 Use this screen to view the IPv6 interface status and configure Switch’ s management IPv6 addresses. Click Basic Setting > IPv6 in the navigation panel to display the IPv6 stat[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 74 Figure 53 Basic Setting > IPv6 The following table describes the labels in this screen. 8.10.1 IPv6 Interface St atus Use this screen to view a specific IPv6 interface status and detailed information. Click an interface index number in the Basic Setting > IPv6 screen. The following scre[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 75 Figure 54 Basic Setting > IPv6 > IPv6 Interface Status The following table describes the labels in this screen. T a ble 18 Basic Setting > IPv6 > IPv6 Interface Status LABEL DESCRIPTION IPv6 Active This field displ ays whether the IPv6 interface is activated or not. MTU Size This [...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 76 Global Unicast Address(es) This field displays the Swit ch’ s global unicast address to identify this interface. Joined Group Address(es) This field displays the IPv6 multicast addresses of groups the Swit ch ’ s interfa ce joins. ND DAD Active This field displays whether Neighbor Discove[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 77 8.10.2 IPv6 Configuration Use this screen to configure IPv6 settings on the Switch. Click the IPv6 Configuration link in the Basic Setting > IPv6 screen. The following screen opens. Figure 55 Basic Setting > IPv6 > IPv6 Configur ation The following table describes the labels in this [...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 78 Figure 56 Basic Setting > IPv6 > IPv6 Conf iguration > IPv6 Global Setup The following table describes the labels in this screen. 8.10.4 IPv6 Interface Setup U s e t h i s s c r e e n t o t u r n o n o r o f f a n I P v 6 i n t e r f a c e and enable stateless auto configuration on i[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 79 The following table describes the labels in this screen. 8.10.5 IPv6 Link-Local Address Setup A link -local address uniquely identifies a device on the local network (the LAN). It is similar to a “private IP address” in IPv4. Y ou can have the sa me link -local address on multiple interfa[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 80 8.10.6 IPv6 Global Address Setup Use this screen to configure the interface’ s IP v6 global address. Click the link next to IPv6 Global Address Setup in the IPv6 Conf iguration screen to display the screen as shown next. Figure 59 Basic Setting > IPv6 > IPv6 Configur ation > IPv6 G[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 81 8.10.7 IPv6 Neighbor Discovery Setup Use this screen to configure neighbor discovery settings for each interface. Click the link next to IPv6 Neighbor Discovery Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 60 Basic Setting > IPv6 > IPv6 Configur at [...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 82 8.10.8 IPv6 Neighbor Setup Use this screen to create a static IPv6 neighbor en try in the Switch’ s IPv6 neighbor table to store the neighbor information permanently . Click the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as shown n ext. Figure 61[...]

Chapter 8 Basic Setting GS1920 Series User’ s Guide 83 8.10.9 DHCPv6 Client Setup Use this screen to configure the Switch’ s DHCP setti ngs when it is acting as a DHCPv6 client. Click the link next to IPv6 Neig hbor Setup in the IPv6 Configuration screen to display the screen as shown next. Figure 62 Basic Setting > IPv6 > IPv6 Conf igura[...]

Chapter 8 Basic Setting GS1920 Series User’s Gui de 84 The following table describes the labels in this screen. T a ble 26 Bas ic Setting > I Pv6 > IPv6 Conf iguration > D HCPv6 Client Setup LABEL DESCRIPTION Interface Select the IPv6 inte rface you want to configure. IA T ype Select IA-NA to set the Switch to get a n o n-t empor ary IP [...]

GS1920 Series User’ s Guide 85 C HAPTER 9 VLAN 9.1 Overview This chapter shows you how to configure 802.1Q ta gged and port-based VLANs. The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. 9.1.1 What Y ou Can Do •U s e t h e VLAN Status screen ( Section 9.2 on page 88 ) to view all VLAN groups. •U[...]

Chapter 9 VLAN GS1920 Series User’s Gui de 86 level is significant and the default VID of the ingre ss port is giv en as the VID of the fr ame. Of the 4096 possible VIDs, a VID of 0 is used to identify priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN configur ations are 4,094. Forwarding T agged and Unt agged Frames [...]

Chapter 9 VLAN GS1920 Series User’ s Guide 87 9.1.2.2 Port VLAN T runking Enable VLAN Trunking on a port to allow fr ames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without ha ving to configure the same VLAN grou ps on intermediary devices. Refer to the following fig[...]

Chapter 9 VLAN GS1920 Series User’s Gui de 88 St atic VLAN Use a static VLAN to decide whether an incoming fr ame on a port should be • sent to a VLAN grou p as normal depending on its VLA N tag. • sent to a group whether it has a VLAN tag or not. • blocked from a VLAN group regardless of its VLAN tag. Y ou can also tag all outgoing frames [...]

Chapter 9 VLAN GS1920 Series User’ s Guide 89 9.2.1 VLAN Det ails Use this screen to view detailed port settings and status of the VLAN group . Click on an index number in the VLAN Status screen to display VLAN details. Figure 66 Advanced Application > VLAN > VLAN Detail The following table describes the labels in this screen. 9.3 Configure[...]

Chapter 9 VLAN GS1920 Series User’s Gui de 90 Figure 67 Advanced Application > VLAN > Static VLAN The following table describes the related labels in this screen. T a ble 30 Advanced Application > VL AN > Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings. Name Enter a descriptive na me for the VL[...]

Chapter 9 VLAN GS1920 Series User’ s Guide 91 9.4 Configure VLAN Port Settings Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q) settings on a port. Click the VLAN Port Setting link in the VLAN Status screen. Figure 68 Advanced Application > VLAN > VLAN Port Setting The following table describes the labels in this [...]

Chapter 9 VLAN GS1920 Series User’s Gui de 92 9.5 Subnet Based VLANs Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP subnet you specify . When a frame is received on a port, the S w itch checks if a tag is added already and the IP subnet it c ame from. The untag ged packets from the same IP subnet are then [...]

Chapter 9 VLAN GS1920 Series User’ s Guide 93 untagged incoming frames will be classified based on their source IP subnet and prioritized accordingly . That is video services receiv e the highest priority and data the lowest. Figure 69 Subnet Based VLAN Application Example 9.5.1 Configuring Subnet Based VLAN Click Su bnet Based VLAN in the VLAN P[...]

Chapter 9 VLAN GS1920 Series User’s Gui de 94 The following table describes the labels in this screen. 9.6 Protocol Based VLANs Protocol based VLANs allow you to grou p traffic into logical VLANs based on the protocol y ou specify . When an upstream frame is received on a port (configured for a protocol based VLAN), the Switch checks if a tag is [...]

Chapter 9 VLAN GS1920 Series User’ s Guide 95 For example, port 1, 2, 3 and 4 belong to static VLAN 100, and p ort 4, 5, 6, 7 be long to static VLAN 120. Y ou configure a protocol b ased VLAN A with priority 3 for ARP traffic received on port 1, 2 and 3 . Yo u a l s o h a v e a p r o t o c o l b a s e d V L A N B w i t h p r i o r i t y 2 f o r A[...]

Chapter 9 VLAN GS1920 Series User’s Gui de 96 The following table describes the labels in this screen. 9.7 Port-based VLAN Setup Port -based VLANs are VLANs where the packet forwar ding decision is based on the destination MAC address and its associated port. Port -based VLANs require allowed outgoing p orts to be defined for each port. Therefore[...]

Chapter 9 VLAN GS1920 Series User’ s Guide 97 Note: In screens ( s uc h as IP Setup and Filtering ) that require a VID, y ou must enter 1 as the VID. The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN with all Ethernet ports. 9.7.1 Configure a Port-based VLAN Select Port Based as the VLAN Ty pe in the Basic Setti[...]

Chapter 9 VLAN GS1920 Series User’s Gui de 98 Figure 74 Port Based VLAN Setup (P ort Isolation)[...]

Chapter 9 VLAN GS1920 Series User’ s Guide 99 The following table describes the labels in this screen. 9.8 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 9.8.1 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. F ol[...]

Chapter 9 VLAN GS1920 Series User’s Gui de 100 Figure 75 Protocol Based VLAN Configuration Example T o add more ports to this protocol based VLAN. 1 Click the index number of the protocol based VLAN entry . Click 1 2 Change the value in the Port field to the next port you want to add. 3 Click Add .[...]

GS1920 Series User’ s Guide 101 C HAPTER 10 Static MAC Forward Setup 10.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your net wor k. Use these screens to configure static MAC address forwarding. 10.1.1 What Y ou Can Do Use the Static MAC Forwarding screen ( Section 10.2 on page 101 ) to [...]

Chapter 10 Static MAC Forward Setup GS1920 Series User’s Gui de 102 The following table describes the labels in this screen. T a ble 35 Advanced Application > Static MAC Forwarding LABEL DESCRIPTION Active Select this che ck box to activ ate your rule. Y ou may temporarily deac tivate a rul e without deleting it by cleari ng this check box. Na[...]

GS1920 Series User’ s Guide 103 C HAPTER 11 Static Multicast Forward Setup 1 1.1 S t atic Multicast Forward Setup Overview This chapter discusses how to configure forwarding rules based on multicast MAC addresses of devices on your network. Use these screens to configure static multicast address forwarding. 1 1.1.1 What Y ou Can Do Use the Static[...]

Chapter 11 Static Multicast Forward Setup GS1920 Series User’s Gui de 104 Figure 78 Static Multicast Forwarding to A Single P ort Figure 79 Static Multicast Forwarding to Multiple P orts 1 1.2 Configuring S t atic Multicast Forwarding Use this screen to configure rules to forward specif ic multicast fr ames, such as streaming or control frames, t[...]

Chapter 11 Static Multicast Forward Setup GS1920 Series User’ s Guide 105 The following table describes the labels in this screen. T a ble 36 Advanced Application > Static Multicast Forwarding LABEL DESCRIPTION Active Select this che ck box to activ ate your rule. Y ou may temporarily deac tivate a rul e without deleting it by cleari ng this c[...]

GS1920 Series User’ s Guide 106 C HAPTER 12 Filtering 12.1 Filtering Overview This chapter discusses MAC address port filtering. Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). 12.1.1 What Y ou Can Do Use the Filtering screen ( Section 12.2 on page 106 ) to create [...]

Chapter 12 Filtering GS1920 Series User’ s Guide 107 The following table describes the related labels in this screen. T a ble 37 Advanced Application > Filtering LABEL DESCRIPTION Active Make sure to select this ch eck box t o activ ate y our rule . Y ou may temporarily deacti v ate a rule without deleting i t by deselecting this chec k box. N[...]

GS1920 Series User’ s Guide 108 C HAPTER 13 Spanning Tree Protocol 13.1 S p anning T ree Protocol Overview The Switch supports Spanning T ree Protocol (S TP), Rapid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protocol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning T ree Protocol • IEEE 802.1w Rapid Spannin[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 109 The Switch uses IEEE 802.1w RSTP (Rapid Spanning T ree Protocol) that allows faster convergence of the spanning tree than STP (while also be ing backwards compatible with STP-only aware bridges). In RSTP , topology change information is direc tly propagated throughout the network [...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 0 STP Port S t ates STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate tr ansient loops. Multiple RSTP MRSTP (Multiple RSTP) is Z yXEL ’ s proprietary featur e that is com[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 111 • One Common and Internal Spanning T ree (CIST) that represents the entire network’ s connectivity . • Grouping of multiple bridges (or switching devices) into regions th at appear as one single bridge on the network. • A VLAN can be mapped to a specific Multiple Spanning [...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 2 The following table describes the labels in this screen. 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 108 for more information on RSTP . Click RSTP in the Advanced Application > Spanning Tree Protocol screen[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 3 The following table describes the labels in this screen. T a ble 41 Advanced Application > Spanning T ree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 86 on page 114 ). Active Select this check bo x to activate RSTP . C[...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 4 13.5 Rapid S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 108 for more information on RSTP . Note: This screen is only av ailable after y ou activ[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 5 13.6 Configure Multiple Ra pid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanc ed Application > Spanning Tree Protocol screen. See Section 13.1 on page 108 for more information on MRSTP . Figure 87 Advanced Application > Spanning T ree Protocol >[...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 6 Active Select this check box to activate an STP tree. Clea r t his checkbox to disable an STP tree. Note: Y ou must also activate Multiple Rapid Spanning T ree in the Advanced Application > Sp anning T ree Pro tocol > Conf iguration screen to enable MRST P on the Switch. Bri[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 7 13.7 Multiple Rapid S p anning T r ee Protocol St atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 108 for more information on MRSTP . Note: This screen is only av ailable afte[...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 11 8 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Sp anning Tree Pr otocol screen. See Section on page 110 for more information on MSTP . Cost to Bridge This is the path cost from the root port on this Switch to the [...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 11 9 Figure 89 Advanced Application > Spanning T ree Protocol > MSTP The following table describes the labels in this screen. T a ble 45 Advanced Application > Spanning T ree Protocol > MSTP LABEL DESCRIPTION Port Cl ic k Port to display the MSTP Port screen (see Figure 90[...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 120 Hello Time This is the time interval i n seco nds between BPDU (Bridge Protocol Data Units) configur ation me ssage gener ations by t he root switch. T he allowed range is 1 to 10 seconds. MaxAge This is th e maximum time (in seconds) the Switch can wait withou t receiving a BPDU b[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 121 13.9 Multiple S p anning T ree Port Configuration Click Advanced Application > Spanning Tree Protocol > MSTP > Port in the navigation panel to display the status screen as shown next. See Section on page 110 for more information on MSTP . Figure 90 Advanced Application &g[...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 122 The following table describes the labels in this screen. 13.10 Multiple S p anning T r ee Protocol S t atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section on page 110 for more information on MST[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 123 Figure 91 Advanced Application > Spanning T ree Protocol > Status: MSTP The following table describes the labels in this screen. T a ble 47 Advanced Application > Spanning Tree Protocol > Status: MSTP LABEL DESCRIPTION Configur ation C lick Configurati on to specify wh[...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 124 13.1 1 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 13.1 1.1 MSTP N etwork Example The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP[...]

Chapter 13 Spanning T ree Protocol GS1920 Series User’ s Guide 125 Figure 92 STP/RSTP Network Example With MSTP , VLANs 1 and 2 are mappe d to different sp anning trees in the network. Thus tr affic from the two VLANs trav el on different paths. The fo llowing figure sh ows the network ex ample using MSTP . Figure 93 MSTP Network Example 13.1 1.2[...]

Chapter 13 Spanning Tree Protocol GS1920 Series User’s Gui de 126 • VLAN-to-MST Instance mapping 13.1 1.3 MST Inst ance An MST Instance (MSTI) is a spanning tree instance . VLANs can be co nfigured to run on a specific MSTI. Each created MSTI is identi fied by a unique number (known as an MST ID) known internally to a region. Thus an MSTI does [...]

GS1920 Series User’ s Guide 127 C HAPTER 14 Bandwidth Control 14.1 Overview This chapter shows you how y ou can cap the maximum bandwidth using th e Ban dwidth Control screen. Bandwidth c o ntrol mean s defining a ma x imum allowable band width for inco ming and/or o ut-going traffic flows on a port. 14.1.1 What Y ou Can Do Use the Band w id th C[...]

Chapter 14 Bandwidth Control GS1920 Series User’s Gui de 128 The following table describes the related labels in this screen. T a ble 48 Advanced Application > Bandwidth Control LABEL DESCRIPTION Active Select th is check box t o enable bandwidt h control on the Switch. Port This field displays the port number . * Settings in this row apply to[...]

GS1920 Series User’ s Guide 129 C HAPTER 15 Broadcast Storm Control 15.1 Broadcast S torm Control Overview This chapter introduces and shows you how to configure the broadcast storm control feature. Broadcast storm control limits the number of broadc ast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the[...]

Chapter 15 Broadcast Storm Control GS1920 Series User’s Gui de 130 Figure 97 Advanced Application > Broadcast Storm Control The following table describes the labels in this screen. T a ble 49 Advanced Application > Broadcast Storm Control LABEL DESCRIPTION Active Select th is check bo x to enable traffic sto rm control on the Swi tch. Clear[...]

GS1920 Series User’ s Guide 131 C HAPTER 16 Mirroring 16.1 Mirroring Overview This chapter discusses port mirroring setup screens. Po rt mirroring allows you to copy a tr affic flow to a monitor port (the port y ou copy the tr affic to) in order that you can examine the tr affic from the monitor port without interference. 16.1.1 What Y ou Can Do [...]

Chapter 16 Mirroring GS1920 Series User’s Gui de 132 The following table describes the labels in this screen. T a ble 50 Advanced Application > Mirroring LABEL DESCRIPTION Active Sele ct this c heck box t o activ ate port mirroring on the S witch. Cl ear this ch eck box t o disabl e the feature. Monitor Port T he monitor port is the port you c[...]

GS1920 Series User’ s Guide 133 C HAPTER 17 Link Aggregation 17.1 Overview This chapter shows you how to logically aggregate ph ysical links to form one logical, higher- bandwidth link. Link aggregation (trunking) is the groupin g of ph ysical ports into one logical higher-capacit y link. Y ou may want to trunk ports if for example, it is cheaper[...]

Chapter 17 Link Aggre gation GS1920 Series User’s Gui de 134 is, if an operational port fails, then one of th e “standby” ports become oper ational without user intervention. Please note that: • Y ou must connect all ports point-to-point to the same Ethernet switch an d configure the ports for LACP trunking. • LACP only works on full-dupl[...]

Chapter 17 Link Ag gregation GS1920 Series User’ s Guide 135 The following table describes the labels in this screen. 17.3 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 133 for more information on link aggregation. T a ble 53 Advan[...]

Chapter 17 Link Aggre gation GS1920 Series User’s Gui de 136 Figure 100 Advanced Application > Link Aggreg ation > Link Aggregation Setting The following table describes the labels in this screen. T a ble 54 Advanced Application > Link Aggr egation > Link Ag gregation Setting LABEL DESCRIPTION Link Aggregation Setting This is the only[...]

Chapter 17 Link Ag gregation GS1920 Series User’ s Guide 137 17.4 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section on page 133 for more information on dynamic link aggregation. Figure 101 Advanced Application > Link Aggregati[...]

Chapter 17 Link Aggre gation GS1920 Series User’s Gui de 138 The following table describes the labels in this screen. 17.5 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 17.5.1 S t atic T runking Example This example shows you how to create a static port trunk group for ports [...]

Chapter 17 Link Ag gregation GS1920 Series User’ s Guide 139 Figure 102 T runking Example - Physical Connections 2 Configure static trunking - Click Advanced Application > Link Aggregation > Link Aggregation Setting . In this screen activ ate trunk group T1 , select the traffic distribution algorithm used by this group and select the ports [...]

GS1920 Series User’ s Guide 140 C HAPTER 18 Port Authentication 18.1 Port Authentication Overview This chapter describes the IEEE 802.1x authentication method. Port authentication is a way to v alidate access to po rts on the Switch to clients based on an external server (authentication server). The Switch supports the following method for port a[...]

Chapter 18 Port Authenticati on GS1920 Series User’ s Guide 141 Figure 104 IEEE 802.1x Authentication Process 18.2 Port Authentication Configuration T o enable port authentication, first activ ate the po rt authentication method (both on the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct > Radius Server [...]

Chapter 18 Port Authentication GS1920 Series User’s Gui de 142 Figure 106 Advanced Application > Po rt Authentication > 802.1x The following table describes the labels in this screen. T a ble 56 Advanced Application > Port Authentication > 802.1 x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the Sw[...]

Chapter 18 Port Authenticati on GS1920 Series User’ s Guide 143 18.3.1 Guest VLAN When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the correct credentials are blocked from using the port(s). Y ou can configure your Switch to ha ve one VLAN that acts as a guest VLAN. If you enable the guest VLAN ( 10[...]

Chapter 18 Port Authentication GS1920 Series User’s Gui de 144 Figure 108 Advanced Application > Po rt Authentication > 802.1x > Guest VLAN The following table describes the labels in this screen. T a ble 57 Advanc ed Ap plication > Port Authentication > 802.1x > Guest VLAN LABEL DESCRIPTION Port This field displays a port numbe[...]

Chapter 18 Port Authenticati on GS1920 Series User’ s Guide 145 Host-mode Specify how the Switch authenticates u sers when more than one use r connect to the port (using a hub). Select Multi-Hos t to authenticate only the first user that connects to this port. If the fi rst user enters the corre ct creden tial, any other users are allowe d to acc[...]

GS1920 Series User’ s Guide 146 C HAPTER 19 Port Security 19.1 Port Security Overview This chapter shows you how to set up port security . Po rt security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the S witch. The Switch can learn up to 16K MAC addresses in total wit[...]

Chapter 19 Port Security GS1920 Series User’ s Guide 147 Figure 109 Advanced Application > P ort Security The following table describes the labels in this screen. T a ble 58 Advanced Application > Port Security LABEL DESCRIPTION Port List Enter the numbe r of the port(s) (s eparated by a comma) on which yo u want to en able port security an[...]

Chapter 19 Port Security GS1920 Series User’s Gui de 148 Limited Numbe r of Learned MAC Address Use this field to l imit the number o f (dynam ic) MAC addresses that may be learned on a port. For example, if you set this field to "5" on port 2, the n only the de vices with th ese five learned MAC addresses ma y access port 2 at an y one[...]

GS1920 Series User’ s Guide 149 C HAPTER 20 Classifier 20.1 Overview This chapter introduces and shows you how to config ure the packet classifie r on the Switch. It also discusses Quality of Service (QoS) and classifier concepts as employ ed by the Switch. 20.1.1 What Y ou Can Do Use the Classifier scree n ( Section 20.2 on page 149 ) to define [...]

Chapter 20 Cl assifier GS1920 Series User’s Gui de 150 Figure 1 10 Advanced Application > Classifier The following table describes the labels in this screen. T a ble 59 Advanced Application > Classifier LABEL DESCRIPTION Active Select this option to enable th is rule. Name Enter a descriptive name for this rule fo r identifying purposes. La[...]

Chapter 20 Classifier GS1920 Series User’ s Guide 151 20.2.1 V iewing and Editin g Classifier Configuration T o view a summary of the classifier configur ation, scroll down to the summary table at the bottom of the Classifier screen. T o change the settings of a rule, click a number in the Index field. Note: When two rules confl ict wi th each ot[...]

Chapter 20 Cl assifier GS1920 Series User’s Gui de 152 F i g u r e 111 Advanced Application > Classifier: Summary T able The following table describes the labels in this screen. The following table shows some other common Ethernet types and the corresponding protocol number . In the Internet Protoc ol there is a field, called “P rotocol” ,[...]

Chapter 20 Classifier GS1920 Series User’ s Guide 153 Some of the most common T CP and UDP port numbers are: See Appendix B on page 346 for information on commonly used port numbers. 20.3 Classifier Example The following screen shows an example where you conf igure a classifier that identifies all tr affic from MAC address 00:50:ba:ad:4f: 81 on p[...]

GS1920 Series User’ s Guide 154 C HAPTER 21 Policy Rule 21.1 Policy Rules Overview This chapter shows you how to configure policy rules. A classifier distinguishes traffic into flows based on the con figured criteria (refer to Chapter 20 on page 149 for more information). A policy rule ensure s that a traffic flow gets the requested treatment in [...]

Chapter 21 Policy Ru le GS1920 Series User’ s Guide 155 Figure 1 13 Advanced Application > Policy R ule The following table describes the labels in this screen. T a ble 64 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy . Name Enter a descriptive name for identification purposes. Classifie[...]

Chapter 21 Policy Rule GS1920 Series User’s Gui de 156 Bandwidth Specify the bandwidth in kilobit per second (Kbps). Enter a number between 64 and 1000000. Action Specify the action(s) the S witch takes on the associate d classified tr affic flow. Note: Y ou can specify only one action (pair) in a policy rule. T o have the Switch take multiple ac[...]

Chapter 21 Policy Ru le GS1920 Series User’ s Guide 157 21.2.1 V iewing and Edit ing Policy Configuration T o view a summary of the classifier configur ation, scroll down to the summary table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field. Figure 1 14 Advanced Application > Policy R ule[...]

GS1920 Series User’ s Guide 158 C HAPTER 22 Queuing Method 22.1 Queuing Method Overview This chapter introduces the queuing methods supported. Queuing is used to help solve performance degr ad ation when there is network conge stion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assign[...]

Chapter 22 Queuing Meth od GS1920 Series User’ s Guide 159 an equal amount of bandwidth, and then mov es to the end of the list; and so on, depending on the number of queues being used. This works in a looping fashion until a queue is empty . W eighted Round R obin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services q[...]

Chapter 22 Qu euing Method GS1920 Series User’s Gui de 160 The following table describes the labels in this screen. T a ble 65 Advanced Application > Queuing Method LABEL DESCRIPTION Port This label shows the port you are configuring. * Settings in this row apply to all ports. Use this row only if y ou want to make some se ttings the same for [...]

GS1920 Series User’ s Guide 161 C HAPTER 23 Multicast 23.1 Multicast Overview This chapter shows you how to configure v arious multicast features. T raditionally , IP packets are transmitted in one of either two wa ys - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to ev erybody on the networ k). Multicast delivers IP pack ets to just [...]

Chapter 23 Mul ticast GS1920 Series User’s Gui de 162 The Switch forw ards multicast traf fic destined for multicast groups (that it has learned from IGMP snooping or that you ha ve manually configured) to ports that are members of that group . IGMP snooping generates no additional network tr affic, allowing you to significantly reduce multicast [...]

Chapter 23 Multicast GS1920 Series User’ s Guide 163 In dynamic mode, the Switch sends IGMP leave an d join reports to the other multicast devices (such as multicast routers or servers) in the multicast VLAN. This allows the multicast devices to update the multicast forwarding table to forw ard or not forward multicast tr affic to the receiver po[...]

Chapter 23 Mul ticast GS1920 Series User’s Gui de 164 The following table describes the labels in this screen. 23.3 IPv4 Multicast S t atus Click Advanced Appl ication > Multicast > IPv4 Multicast to display the screen as shown. This screen shows the IPv4 multicast group information. See Section 23.1 on page 161 for more information on mult[...]

Chapter 23 Multicast GS1920 Series User’ s Guide 165 Figure 121 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping The following table describes the labels in this screen. T a ble 68 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping LABEL DESCRIPTION IGMP Snooping Use these settings to c onfigure I[...]

Chapter 23 Mul ticast GS1920 Series User’s Gui de 166 Port This field displays the port number . * Settings in this row apply to all ports. Use this row only if y ou want to make some se ttings the same for all ports. Use this row first to set the common settings and then ma ke adjustments on a port -by-port basis. Changes in this row are co pied[...]

Chapter 23 Multicast GS1920 Series User’ s Guide 167 23.4 IGMP Snooping VLAN Click Advanced Application > Multicast > IPv4 Multicast in the navigation panel. Click the IGMP Snooping link and then the IGMP Snooping VLAN link to display the screen as shown. See Section on page 162 for more information on IGMP Snooping VLAN. Figure 122 Advance[...]

Chapter 23 Mul ticast GS1920 Series User’s Gui de 168 The following table describes the labels in this screen. 23.4.1 IGMP Filtering Profile An IGMP filtering profile specifie s a range of multicast groups that clients connected to the S witch are able to join. A profile contains a r ange of mu lticast IP addresses which you want clients to be ab[...]

Chapter 23 Multicast GS1920 Series User’ s Guide 169 Figure 123 Advanced Application > Multicast > IPv4 Mu lticast > IGMP Snooping > IGMP Filtering Profile The following table describes the labels in this screen. T a ble 70 Advanced Application > Multicast > IPv4 Multicast > IGMP Snooping > IGMP Filtering Profile LABEL DES[...]

Chapter 23 Mul ticast GS1920 Series User’s Gui de 170 23.5 General MVR Configuration Use the MVR screen to create multicast VLANs and select the receiver port(s) and a source port for each multicast VLAN. Click Advanced Application > Multicast > Multica st Setup > MVR to display the screen as shown next. Note: Y ou can create up to five [...]

Chapter 23 Multicast GS1920 Series User’ s Guide 171 23.5.1 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Use this screen to configure MVR IP mu lticast group address(es). Click the Group Configuration link in the MVR screen. Note: A port can bel[...]

Chapter 23 Mul ticast GS1920 Series User’s Gui de 172 Figure 125 Advanced Application > Multicast > Multicast Setup > MVR > Group Configur ation The following table describes the labels in this screen. T a ble 72 Advanced Application > Multicast > Multic ast Setting > MVR > Group Configuration LABEL DESCRIPTION Multicast V[...]

Chapter 23 Multicast GS1920 Series User’ s Guide 173 23.5.2 MVR Conf iguration Example The following fig ure shows a network example where ports 1, 2 and 3 on the Sw itch belong to VLAN 1. In addition, port 7 belongs to the multicast group with VID 200 to receive multicast traffic (the News and Movie channels) from the remote streaming media serv[...]

Chapter 23 Mul ticast GS1920 Series User’s Gui de 174 T o set the Switch to forw ard the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an exam ple where two IPv4 multicast groups ( News and Movi e ) are configured for the multicast VLAN 200. Figure 128 [...]

GS1920 Series User’ s Guide 175 C HAPTER 24 AAA 24.1 AAA Overview This chapter describes how to configure authenti cation and authorization settings on the Switch. The external servers that perform authen tication and authorization functions are known as AAA servers. The Switch supports RADIUS (R emote Authentication Dial- In User Service, see Se[...]

Chapter 24 AAA GS1920 Series User’s Gui de 176 Local User Account s By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users without interacting with a network AAA serv er . However , the re is a limit on the number of users you may authenticate in this way (See Chapter 36 on page 284 ). RADIUS and T[...]

Chapter 24 AAA GS1920 Series User’ s Guide 177 Figure 132 Advanced Application > AAA > RADIUS Server Setup The following table describes the labels in this screen. T a ble 74 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentica tion Serve r Use this section to configure your RADIUS authent ication settings . M[...]

Chapter 24 AAA GS1920 Series User’s Gui de 178 24.4 T ACACS+ Server Setup Use this screen to configure your T ACACS+ server settings. See Section on page 176 for more information on T ACACS+ servers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. Delete Check this box if you want to remo ve an existing RADIU[...]

Chapter 24 AAA GS1920 Series User’ s Guide 179 Figure 133 Advanced Application > AAA > T AC ACS+ Server Setup The following table describes the labels in this screen. T a ble 75 Advanced Application > AA A > T ACACS+ Server Setup LABEL DESCRIPTION Authentica tion Serve r Use this section t o configure your T A CACS+ aut hentication se[...]

Chapter 24 AAA GS1920 Series User’s Gui de 180 24.5 AAA Setup Use this screen to configure authentication and authorization settings on the Sw itch. Click on the AAA Setup link in the AAA scre en to view the screen as shown. Delete Check this box if you want to remo ve an existing T ACACS+ server entry from the Switch. This entry is deleted whe n[...]

Chapter 24 AAA GS1920 Series User’ s Guide 181 Figure 134 Advanced Application > AAA > AAA Setup The following table describes the labels in this screen. T a ble 76 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authenticatio n Use this section to spe cify the methods us ed to authenticat e users accessing th e Switch. Login[...]

Chapter 24 AAA GS1920 Series User’s Gui de 182 24.6 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 24.6.1 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access device (for exampl e, [...]

Chapter 24 AAA GS1920 Series User’ s Guide 183 • Limit bandwidth on incoming or outgoing traffic for the port the user connects to . • Assign account privilege levels for the authenticated user . The VSAs are composed of the following: • Vendor-ID : An identification number assigned to th e company by the IANA (Internet Assigned Numbers Aut[...]

Chapter 24 AAA GS1920 Series User’s Gui de 184 describes the values yo u need to configure. Note th at the bolded values in the table are fixed values as defined in RFC 3580. 24.6.2 Supported RADIUS Attributes R emote Authentication Dial- In User Service (RADIUS) attributes are data used to define specific authentication elements in a user profil[...]

Chapter 24 AAA GS1920 Series User’ s Guide 185 - This value is set to Ethernet(15) on the S witch. Calling-Station- Id Frame-MTU EAP-Message State Message-Authenticator[...]

Chapter 24 AAA GS1920 Series User’s Gui de 186[...]

GS1920 Series User’ s Guide 187 C HAPTER 25 IP Source Guard 25.1 Overview Use IP source guard to filter unauthoriz ed DHCP and ARP packets in y our network. IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in y our network. A binding contains these key attributes: •M A C a d d r e s s [...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 188 •U s e t h e ARP Inspection Configure screen ( Section 25.9 on page 202 ) to enable ARP inspection on the Switch. Y ou can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log. •U s e t h e ARP Inspection P[...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 189 25.3 IP Source Guard S t atic Binding Use this screen to manage static bindings for DHCP snooping and ARP inspection. Static bindings are uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only be in one static binding. If you try to create a static bindi[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 190 The following table describes the labels in this screen. 25.4 DHCP Snooping Use this screen to look at various statistics abou t the DHCP snooping database. T o open this screen, click Advanced Application > IP So urce Guard > DHCP Snooping . T a ble 80 Advanced Application > IP [...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 191 Figure 137 Advanced Application > IP Source Guard > DHCP Snooping The following table describes the labels in this screen. T a ble 81 Advanced Application > IP So urce Guard > DHCP Snooping LABEL DESCRIPTION Database Status This sect ion displays the current settings for the D[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 192 Agent runnin g This field displays the status of th e current update or acce ss of the DHCP snooping database. none : The Switch is not accessin g the DHCP snooping database. read : The Switch is loading dynamic bindings from the DHCP snooping database. write : The Switch is updating the [...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 193 25.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Sw itch (not on specific VLAN), specify the V LAN where the defau lt DH CP server is loca ted , and configure the DHCP snooping database. The DHCP snooping database stores the current bindings on a secure, externa[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 194 Figure 138 Advanced Application > IP Source Guard > DHCP Snooping > Configure The following table describes the labels in this screen. T a ble 82 Advanced Application > IP Source Guard > DHCP Snoopin g > Configure LABEL DESCRIPTION Active Select this to enable DHCP snoop[...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 195 25.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are tr usted or untrusted ports for DHCP snooping. Note: If DHCP snooping is enabl ed but there are no t rusted ports, DHCP requests cannot reach the DHCP server . Y ou can also specify the maximum number for DHC[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 196 The following table describes the labels in this screen. 25.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Sw itch adds DHCP relay agent option 82 information ( Chapter 34 on page 266 ) to DHCP requests that the Sw i[...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 197 The following table describes the labels in this screen. 25.5.3 DHCP Snooping VLAN Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. T o open this screen, click Advanced Application > IP Source Guard > DHCP Snoop ing > Configur[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 198 The following table describes the labels in this screen. 25.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unautho rized ARP packet. Wh en the Switch identifies an unauthorized ARP packet, it [...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 199 Figure 142 Advanced Application > IP Source Guard > ARP Inspection The following table describes the labels in this screen. 25.7 ARP Inspection VLAN S t atus Use this screen to look at various statistics about ARP packets in each VLAN. T o open this screen, click Advanced Applicati [...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 200 Figure 143 Advan ced Application > IP Source Guard > ARP Inspection > VLAN Status The following table describes the labels in this screen. 25.8 ARP Inspection Log S t atus Use this screen to look at log messages that were gener ated by ARP packets and that ha ve not been sent to [...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 201 Figure 144 Advanced Application > IP Source Guard > ARP Inspection > Log Status The following table describes the labels in this screen. T a ble 88 Advanc ed Ap plication > IP Source Guard > ARP Inspection > Log Status LABEL DESCRIPTION Clearing log status table Click Ap[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 202 25.9 ARP Inspection Configure Use this screen to enable ARP inspection on the Sw itch. Y ou can also configure the length of time the Switch stores records of discarded ARP pack ets and global settings for the ARP inspection log. T o open this screen, click Advanced Application > IP So[...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 203 25.9.1 ARP Inspection Port Configure Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port. T o open this screen, click Advanced Application > IP[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 204 Figure 146 Advanced Application > IP Source Guard > ARP Inspection > Configure > P ort The following table describes the labels in this screen. T a ble 90 Advanced Application > IP Source Guard > ARP Inspection > Configure > Port LABEL DESCRIPTION Port This field d[...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 205 25.9.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from each VLAN. T o open this screen, click Advanced Application > IP Source G uard > ARP Inspection > Config[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 206 25.10 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 25.10.1 DHCP Snooping Overv iew Use DHCP snooping to filter un au thorized DHCP packets on the ne twork and to build the binding table dynamically . This can prevent[...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 207 25.10.1.2 DHCP Snooping Dat abase The Switch stores the binding table in volatile memor y . If the Switch restarts, it loads static bindings from permanent memory but loses the dynamic bindings, in which case the devi ces in the network have to send DHCP reques ts again. As a result, it i[...]

Chapter 25 IP Source Guard GS1920 Series User’s Gui de 208 1 Enable DHCP snooping on the Switch. 2 Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. 3 Configure trusted and untrusted ports, and specify th e maximum number of DHCP packets that each port can receive per second. 4 Configure static bindings. 25.10.2 ARP Inspectio[...]

Chapter 25 IP Source Guard GS1920 Series User’ s Guide 209 25.10.2.2 T ru sted vs. Untrusted Port s Every port is either a trusted port or an untrusted port for ARP inspection. This setting is independent of the trusted/untrusted setting for DHCP snooping. Y ou can al so spec ify the maximum rate at which the S witch receives ARP packets on untru[...]

GS1920 Series User’ s Guide 210 C HAPTER 26 Loop Guard 26.1 Loop Guard Overview This chapter shows you how to configure the Switch to guard against loops on th e edge of your network. Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch. While y ou can use Spann[...]

Chapter 26 Loop Guard GS1920 Series User’ s Guide 21 1 • It will receive broadcast messages sent out from the switch in loop state. • It will receive its own broadcast messages that it sends out as they loop back. It will then re- broadcast those messages again. The following figure shows port N on switch A connected to switch B . Switch B is[...]

Chapter 26 Loop Guard GS1920 Series User’s Gui de 212 Figure 153 Loop Guard - Network Loop Note: After resolving the loop problem on yo ur network y ou can re-activ ate the disabled port via the web configur ator (see Section 8.7 on page 67 ). 26.2 Loop Guard Setup Click Advanced Application > Loop Guard in the navigation panel to display the [...]

Chapter 26 Loop Guard GS1920 Series User’ s Guide 213 The following table describes the labels in this screen. T a ble 92 Advanced Application > Loop Guard LABEL DESCRIPTION Active Select th is option to e n able loop guard on the S witch. The Switch generates syslog, intern al log mess ages as well as SNMP traps when it shuts down a port via [...]

GS1920 Series User’ s Guide 214 C HAPTER 27 Layer 2 Protocol Tunneling 27.1 Layer 2 Protocol T unneling Overview This chapter shows you how to configure la yer 2 protocol tunneling on the Switch. Layer 2 protocol tunneling (L2PT) is used on the service provider's edge devices. 27.1.1 What Y ou Can Do Use the Layer 2 Protocol Tunnel screen ( [...]

Chapter 27 Layer 2 Protocol Tunneling GS1920 Series User’ s Guide 215 Figure 156 L2PT Network Example 27.1.2.1 Layer 2 Prot ocol T unnelin g Mode Each port can have two lay er 2 protocol tunneling modes, Access and Tunnel . •T h e Access port is an ingress port on the service provider's edge de vice ( 1 or 2 in Figure 15 6 on page 215 ) an[...]

Chapter 27 Layer 2 Protocol Tunnel ing GS1920 Series User’s Gui de 216 Figure 157 Advanced Application > Lay er 2 Protocol T unneling The following table describes the labels in this screen. T a ble 93 Advanced Application > Layer 2 Protocol T unneling LABEL DESCRIPTION Active Selec t this to enable layer 2 protocol tunneling on the Swit ch[...]

Chapter 27 Layer 2 Protocol Tunneling GS1920 Series User’ s Guide 217 VTP Select this o ption to have the Swit ch tunnel VTP (VLAN T runking P rotocol) packets so tha t all customer swi tches can use co nsistent VLAN configuration through the service provider ’s network. Point to P oint The Switch supports PAgP (Port Aggr egation Protocol), LAC[...]

GS1920 Series User’ s Guide 218 C HAPTER 28 PPPoE 28.1 PPPoE Intermediate Agent Overview This chapter describes how the Switch give s a PPP oE termination server additional information that the server can use to identify and authenticate a PPP oE client. A PPP oE Intermediate Agent (P PPoE IA) is d eployed betw een a PPP oE server and PPPoE clien[...]

Chapter 28 PPPoE GS1920 Series User’ s Guide 219 28.1.2.1 PPPoE Intermed iate Agent T ag Format If the PPP oE Intermediate Agent is enabled, the Switch adds a vendor-specific tag to P ADI (PPPoE Active Discovery Initialization) and P ADR (PPPoE Active Disco very Request) packets from PPP oE clients. This tag is defin ed in RFC 2516 and has the fo[...]

Chapter 28 PPPoE GS1920 Series User’s Gui de 220 option example is “Switch/07/0123” and indicates the PPPoE pack ets come from a PPPoE client which is connected to the Switch’ s port 7 and belong to VLAN 123. WT -10 1 Default Circuit ID S ynt ax If you do not configu re a Circuit ID string for a specific VLAN on a port or for a specific por[...]

Chapter 28 PPPoE GS1920 Series User’ s Guide 221 28.2 The PPPoE Screen Use this screen to configure the PPP oE Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click He re to go to the Intermediate Agent screen. Figure 159 Advanced Application > PPP oE Interme[...]

Chapter 28 PPPoE GS1920 Series User’s Gui de 222 28.3.1 PPPoE IA Per-Port Use this screen to specify whether individual ports are trusted or untrusted ports and have the Switch add extr a information to PPP oE discovery pack ets from PPPoE clients on a per-port basis. Note: The Switch will drop all PPP oE packets if you enable the PPP oE Intermed[...]

Chapter 28 PPPoE GS1920 Series User’ s Guide 223 Figure 161 Advanced Application > PPP oE > Intermediate Agent > Port The following table describes the labels in this screen. T a ble 100 Advanced Application > PPPoE > Intermediate Agent > Port LABEL DESCRIPTION Port This field displays the port number . * Use this row to make th[...]

Chapter 28 PPPoE GS1920 Series User’s Gui de 224 28.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPP oE IA settings that apply to a specific VLAN on a port. Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. Figure 162 Advanced Application > PPPoE > Intermediate Agent > P ort >[...]

Chapter 28 PPPoE GS1920 Series User’ s Guide 225 28.3.3 PPPoE IA for VLAN Use this screen to set whether the PPPoE Intermedia te Agent is enabled on a VLAN and whether the Switch appends the Circuit ID and/or R emote ID to PPP oE discovery packets from a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as [...]

Chapter 28 PPPoE GS1920 Series User’s Gui de 226 Remote-id Sel ect this optio n to make the Remote ID settings for a specific VLAN take effect. Apply Click Apply to sav e your change s t o the S witch’ s run-time memory . The Switch los es th es e changes if it is turned off or loses power , so use the Save link on the top navigati on panel to [...]

GS1920 Series User’ s Guide 227 C HAPTER 29 Error Disable 29.1 Error Disable Overview This chapter shows you how to configure the r ate limit for control packets on a port, and set the Switch to take an action (such as to shut down a port or stop sending packets) on a port when the Switch detects a pre-configured error . It also shows you how to [...]

Chapter 29 Error Disable GS1920 Series User’s Gui de 228 Figure 165 Advanced Application > Errdisable > Errdisable Status The following table describes the labels in this screen. T a ble 103 Advanced Application > Errdisable > Errdisable Status LABEL DESCRIPTION Inactiv e-reaso n mode reset Port List Enter the number of the port(s) (s[...]

Chapter 29 Error Disable GS1920 Series User’ s Guide 229 29.4 CPU Protection Configuration Switches exchange protocol con trol packets in a network to get the latest networking information. If a switch receives large numbers of control pack ets, such as ARP , BPDU or IGMP packets, which are to be processed by the CPU, the CPU may beco me overload[...]

Chapter 29 Error Disable GS1920 Series User’s Gui de 230 The following table describes the labels in this screen. 29.5 Error-Disable Detect Configuration Use this screen to have the Switch detect whether the control packets exceed the r ate limit configured for a port and configu re the action to tak e once the limit is exceeded. Click the Click [...]

Chapter 29 Error Disable GS1920 Series User’ s Guide 231 29.6 Error-Disable R ecovery Configuration Some features, such as loop guard or CPU protec tion, allow the Switch to shut down a port or discard specific packets on a port when an error is detected on the port. F or example, if the Switch detects that packets sent out the port(s) loop back [...]

Chapter 29 Error Disable GS1920 Series User’s Gui de 232 The following table describes the labels in this screen. T a ble 106 Advanced Application > Errdisable > Errdisable R ecovery LABEL DESCRIPTION Active Select th is option to turn on the error-disable reco very functi on on the Switch. Reason This field displays the suppo rted features[...]

GS1920 Series User’ s Guide 233 C HAPTER 30 Green Ethernet This chapter shows you how to configure the Switch to reduce the power consumed by switch ports. 30.1 Green Ethernet Overview Green Ethernet reduces switch port power consumption in the following w ays. IEEE 802.3az Energy Efficient Ethernet (EEE) If EEE is enabled, both sides of a link s[...]

Chapter 30 Green Ethe rnet GS1920 Series User’s Gui de 234 Figure 169 Advanced Application > Green Ethernet The following table describes the labels in this screen. T a ble 107 Adv anced Application > Green Ethernet LABEL DESCRIPTION EEE Select this to activate Energy Efficient Et hernet globally . Auto Power Down Select this to ac ti vate [...]

GS1920 Series User’ s Guide 235 C HAPTER 31 Link Layer Discovery Protocol (LLDP) 31.1 LLDP Overview The LLDP (Link Layer Discov ery Protocol) is a la yer 2 protocol. It allows a network device to advertise its identity and capabilities on the local ne twork. It also allows the device to maintain and store information from adjacent devices which a[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 236 Figure 170 LLDP Overview 31.2 LLDP-MED Overview LLDP-MED (Link Lay er Discovery Protocol for Media Endpoint Devices) is an extension to the standard LLDP developed by the T elecommuni cations Industry Association (TIA) TR -41.4 subcommittee which defines the enhanced[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 237 Figure 171 LLDP-MED Overview 31.3 LLDP Screens Click Advanced Application > LL DP in the navigation panel to display the screen as shown next. Figure 172 Advanced Application > LLDP The following table describes the labels in this screen. T a ble 108 Advanced Ap[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 238 31.4 LLDP Local S t atus This screen displays a summary of LL DP status on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Click Here) to display the screen as shown next. Figure 173 Advanced Application > LLDP > LLDP Local Status LLDP[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 239 The following table describes the labels in this screen. 31.4.1 LLDP Local Port S t atus Det ail This screen displays detailed LLDP status for each port on this Switch. Click Advanced Application > LLDP > LLDP Local Status (Cli ck Here) > then, click a port n[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 240 Figure 174 Advanced Application > LLDP > LLDP Local Stat us > LLDP Local Port Status Detail (Basic TL V)[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 241 Figure 175 Advanced Application > LLDP > LLDP Local Stat us > LLDP Local Port Status Detail (MED TL V)[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 242 The following table describes the labels in this screen. T a ble 110 Advanced Application > LLDP > LLDP Local Status > LLDP Local Port Status De tail LABEL DESCRIPTION Basic TL V These are the Basic TLV flags Por t ID TL V The port ID TL V identifies the sp [...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 243 31.5 LLDP Remote S t atus This screen displays a summary of LLDP status fo r each LLDP connection to a neighboring Sw itch. Click Advanced Application > LLDP > LLDP Remote Status (Click H ere) to display the screen as shown next. Figure 176 Advanced Application [...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 244 31.5.1 LLDP Remote Port S t atus Det ail This screen displays detaile d LLDP status received from remote device. Click Advanced Application > LLDP > LLD P Remote Status ( Click Here) and then click an index number , for example 1, in the Index column in the LLD[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 245 The following table describes the labels in Basic TL V part of the screen. T a ble 112 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (Basic TLV) LABEL DESCRIPTION Basic TL V Chassis ID TL V • Chassis ID Subtype - this dis[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 246 Figure 178 A d v a n c e d A p p l i c a t i o n > L L D P > L L D P R e m o t e S t a t u s > L L D P R e m o t e P o r t S t a t u s D e t a i l > (Dot 1 and Dot3 TL V) The following table describes the labels in the Dot1 and Dot3 parts of the screen. T[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 247 Protocol Identity TL V The Protocol Identity TL V allows the Switch to advertise the particular protocols that are accessible through its port. Dot3 TL V MAC PHY Configur ation & Status TL V The MAC/PHY Configuration/Status TL V advertis es the bit-r ate and duple[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 248 Figure 179 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote P ort Status Detail (MED TL V)[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 249 The following table describes the labels in the MED TL V part of the screen. T a ble 114 Advanced Application > LLDP > LLDP Remote Status > LLDP Remote Port Status Detail (MED TLV) LABEL DESCRIPTION MED TL V LLDP Media Endpoint Discovery (MED) is an extension[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 250 31.6 LLDP Configuration Use this creen to configure global LLDP settings on the Switch. Click Advanced Application > LLDP > LLDP Config uration (Click Here) to display the screen as shown next. Inventory TL V The majority of IP Phones lack su pport of managemen[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 251 Figure 180 Advanced Application > LLDP > LLDP Configur ation The following table describes the labels in this screen. T a ble 115 Advanced Application > LL DP > LLDP Configuration LABEL DESCRIPTION Active Select to enable LLDP on the Switch. It is disabled[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 252 31.6.1 LLDP Configuration Basic TL V Setting Use this screen to configure Basic TL V settings. Click Advanced Application > LL DP > LLDP Configuration (Click Here) > Basic TLV Setting to display the screen as shown next. Figure 181 Advanced Application > [...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 253 31.6.2 LLDP Configuraion Ba sic Org-specific TL V Setting Use this screen to configure organization-specific TL V settings. Click Advanced Application > LLDP > LLDP Configuration (Click Her e) > Org-specific TLV Setting to display the screen as shown next. Fi[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 254 31.7 LLDP-MED Configuration Click Advanced Application > LL DP > LLDP-MED Conf iguration (Click Here) to display the screen as shown next. Figure 183 Advanced Application > LLDP > LLDP-MED Configur ation The following table describes the labels in this sc[...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 255 31.8 LLDP-MED Network Policy Click Advanced Application > LLDP > LLDP-MED Network Policy (Click Here) to display the screen as shown next. Figure 184 Advanced Application > LLDP > LLDP-MED Network Policy The following table describes the labels in this scr[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 256 31.9 LLDP-MED Location Click Advanced Application > LL DP > LLDP-MED Location (Click Here) to display the screen as shown next. Figure 185 Advanced Application > LLDP > LLDP-MED Location Ta g This field disp lays the T ag St atus of the network poli cy . [...]

Chapter 31 Link Layer Discovery Protocol (LLDP) GS1920 Series User’ s Guide 257 The following table describes the labels in this screen. T a ble 120 Advanced Application > LLDP > LLDP-MED Location LABEL DESCRIPTION Port Enter the port number you want to se t up the location wit hi n the LLPD-MED network. Location Coordin ates The LLPD-MED u[...]

Chapter 31 Link Laye r Discovery Protocol (LLDP) GS1920 Series User’s Gui de 258 ELIN Number Enter a numerical digit string, corresponding to the ELIN identi fier which is used during emergency ca ll setup to a traditional CAM A o r ISDN trunk-based PSAP . The valid length is from 10 octe ts to 25 octets . Add Click Add after finish entering the [...]

GS1920 Series User’ s Guide 259 C HAPTER 32 Static Route 32.1 S t atic Route Overview This chapter shows you how to configure static routes. The Switch uses IP for communication with management computers, for example using HT TP , or SNMP . Use IP static routes to ha ve the Switch respond to remote management stations that are not reachable throu[...]

Chapter 32 Static Route GS1920 Series User’s Gui de 260 Figure 187 IP Application > Static Routing > IPv4 Static Route The following table describes the related labels you use to create a static route. T a ble 121 IP Application > Static Routing > IPv4 Static Route LABEL DESCRIPTION Active This field allows y ou to activ ate/deactiv a[...]

Chapter 32 Static Route GS1920 Series User’ s Guide 261 Gatew ay Address This field displays the IP address of the gate way . The gateway is an immediate neighbor of your Switch that will forw ard the packet to the dest in ation. Metric This fi eld displays the cost of transmission for routing purposes. Delete Click Delete to remo ve the selected[...]

GS1920 Series User’ s Guide 262 C HAPTER 33 Differentiated Services 33.1 Differentiated Services Overview This chapter shows you how to configure Differ entiated Services (DiffS erv) on the Switch. Quality of Service (QoS) is used to prioritize sour ce-to-destination traffic flows. All pack ets in the flow are given the same priority . Y ou can u[...]

Chapter 33 Differenti ated Services GS1920 Series User’ s Guide 263 The DSCP value determines the PHB (P er-Hop Behavior), that each packet gets as it is forwarded across the DiffServ network. Based on the marking ru le different kinds of traffic can be mark ed for different priorities of forwarding. R esources can then be allocated according to [...]

Chapter 33 Differentiated Services GS1920 Series User’s Gui de 264 Figure 190 IP Application > DiffServ The following table describes the labels in this screen. 33.3 DSCP-to-IEEE 802.1p Priority Settings Y ou can configure the DSCP to IEEE 802.1p mapping to allow the Switch to prioritize all tr affic based on the incoming DSCP value according [...]

Chapter 33 Differenti ated Services GS1920 Series User’ s Guide 265 33.3.1 Configuring DSCP Settings T o change the DSCP-IEEE 802.1p mapping click the DSCP S etting link in the DiffServ screen to display the screen as shown next. Figure 191 IP Application > DiffServ > DSCP Setting The following table describes the labels in this screen. T a[...]

GS1920 Series User’ s Guide 266 C HAPTER 34 DHCP 34.1 DHCP Overview This chapter shows you how to configure the DHCP feature. DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configur ation at start-up from a server . If y ou configure the Switch as a DHCP relay agent, then the Switch f[...]

Chapter 34 DHCP GS1920 Series User’ s Guide 267 DHCP Relay Configure DHCP relay on th e Switch if the DHCP clients and the DHCP server are not in the same broadcast domain. During the initial IP addre ss leasing, the Switch helps to relay network information (such as the IP address and subnet mask) between a DHCP client and a DHCP server . Once t[...]

Chapter 34 DHCP GS1920 Series User’s Gui de 268 34.3 DHCPv4 S t atus Click IP Applicati on > DHCP > DHCPv4 in the navigation panel. The DHCP Status screen displays. Figure 193 IP Application > DHCP > DHCPv4 The following table describes the labels in this screen. 34.4 DHCPv4 Relay Configure DHCP relay on th e Switch if the DHCP client[...]

Chapter 34 DHCP GS1920 Series User’ s Guide 269 34.4.1.1 DHCPv4 Relay Ag ent Information Format A DHCP R elay Agent Information option has the following format. i1, i2 and iN are DHCP relay agent sub-options, which contain additional information about the DHCP client. Y o u need to defi ne at least one sub-option. 34.4.1.2 Sub-Option Format There[...]

Chapter 34 DHCP GS1920 Series User’s Gui de 270 Figure 194 IP Application > DHCP > DHCPv4 > Option 82 Profile The following table describes the labels in this screen. T a ble 130 IP Application > DHCP > DH CPv4 > Option 82 Prof ile LABEL DESCRIPTION Name Enter a descriptive name for the profile for identification purposes. Y ou [...]

Chapter 34 DHCP GS1920 Series User’ s Guide 271 34.4.3 Configuring DHCPv4 Global Relay Use this screen to configure global DHCPv4 relay . Click IP Application > DHCP > DHCPv4 in the navigation panel and click the Global link to displa y the screen as shown. Figure 195 IP Application > DHCP > DHCPv4 > Global Add Click this t o creat[...]

Chapter 34 DHCP GS1920 Series User’s Gui de 272 The following table describes the labels in this screen. 34.4.4 DHCPv4 Global Relay Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports on the Switch. T o ope n this screen, click IP Application > DHCP > DHCPv4 > Global > Port . Figure 196 IP Appli[...]

Chapter 34 DHCP GS1920 Series User’ s Guide 273 34.4.5 Global DHCP Re lay Configuration Example The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that service s the DHCP clients in both domains. Figure 197 Global DHCP R elay Network Example Conf[...]

Chapter 34 DHCP GS1920 Series User’s Gui de 274 Figure 198 DHCP Re lay Configuration Example 34.5 Configuring DHCPv4 VLAN Settings Use this screen to configure your DHCP settings ba sed on the VLAN domain of the DHCP clients. Click IP Application > DHCP > D HCPv4 in the navigation panel, then click the VLAN link In the DHCP Status screen th[...]

Chapter 34 DHCP GS1920 Series User’ s Guide 275 Figure 199 IP Application > DHCP > DHCPv4 > V LAN The following table describes the labels in this screen. T a ble 133 IP Application > DHCP > DHCPv4 > VLAN LABEL DESCRIPTION VID Enter the I D number of the VLAN to which th ese DHCP settings appl y . Rem ot e D H C P Server 1 .. 3 [...]

Chapter 34 DHCP GS1920 Series User’s Gui de 276 34.5.1 DHCPv4 VLAN Port Configure Use this screen to apply a different DHCP option 82 profile to certain ports in a VLAN. T o open this screen, click IP Application > DHCP > DHCPv4 > VLAN > Port . Figure 200 IP Application > DHCP > DHCPv4 > V LAN > Port The following table de[...]

Chapter 34 DHCP GS1920 Series User’ s Guide 277 34.5.2 Example: DHCP Relay for T wo VLANs The following example displays two VLANs (VIDs 1 and 2) for a campus network. T wo DHCP serv ers are installed to serve each VLAN. The system is set up to forw ard DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.1[...]

Chapter 34 DHCP GS1920 Series User’s Gui de 278 Figure 202 DHCP Re lay for T wo VLANs Configuration Example 34.6 DHCPv6 Relay A DHCPv6 relay agent is on the same network as the DHCPv6 cl ients and helps forward messages between the DHCPv6 server and clients. When a c lient cannot use its link -local address and a well- known multicast address to [...]

Chapter 34 DHCP GS1920 Series User’ s Guide 279 Figure 203 IP Application > DHCP > DHCPv6 The following table describes the labels in this screen. T a ble 135 IP Application > DHCP > DHCPv6 LABEL DESCRIPTION VID Enter the I D n um ber of the VL AN you w ant to conf igure here. Helper Address Ent er t he remote DHCPv6 server address fo[...]

GS1920 Series User’ s Guide 280 C HAPTER 35 ARP Setup 35.1 ARP Overview Address Resolution Protocol (ARP) is a protocol for mapping an Intern et Protocol address (IP address) to a physical machine address, also kn own as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long. In an Ethernet L A[...]

Chapter 35 ARP Setup GS1920 Series User’ s Guide 281 ARP request to the S witch and then sends an IC MP request after getting the ARP reply from the Switch. The Sw itch finds no matched entry for host B in the ARP table and broadcasts the ARP request to all the devices on the LAN. When the S witch receives the ARP reply from host B , it updates i[...]

Chapter 35 ARP Setup GS1920 Series User’s Gui de 282 Therefore in the following example, the Switch can learn host A ’s MAC address from the ARP request sent by host A . The Switch then forwards host B ’ s ICMP reply to host A right after getting host B ’ s MAC address and ICMP reply . 35.2 ARP Setup Click IP Applicati on > ARP Setup in [...]

Chapter 35 ARP Setup GS1920 Series User’ s Guide 283 Figure 205 IP Application > ARP Setup > ARP Learning The following table describes the labels in this screen. T a ble 136 IP Application > ARP Setup > ARP Learning LABEL DESCRIPTION Port This field displays the port number . * Settings in this row apply to all ports. Use this row on[...]

GS1920 Series User’ s Guide 284 C HAPTER 36 Maintenance 36.1 Overview This chapter explains how to configure the screens that let y ou maintain the firmware and configuration files. 36.1.1 What Y ou Can Do •U s e t h e Maintenance screen ( Section 36.2 on page 284 ) to upload the latest firmware. •U s e t h e Firmware Upgrade scre en ( Sectio[...]

Chapter 36 Maintenance GS1920 Series User’ s Guide 285 36.2.1 Load Factory Default Follow th e steps below to reset the Switch back to the factory defaults. 1 In the Maintenance screen, click the Click Here button next to Load Factory Default to clear all Switch configur ation information you configured and return to the factory defaults. 2 Click[...]

Chapter 36 Maintenance GS1920 Series User’s Gui de 286 Alternatively , click Save on the top right -hand corner in any screen to save the configuration changes to the current configur ation. Note: Clicking the Apply or Add button does NO T sav e the changes permanently . All unsaved changes are er ased after you reboot the Switch. 36.2.3 Reboot S[...]

Chapter 36 Maintenance GS1920 Series User’ s Guide 287 Figure 209 Management > Maintenance > Firmw are Upgrade The following table describes the labels in this screen. 36.4 Restore a Configuration File Use this screen to restore a previously sa ved configur ation fr om your com puter to the Switch using the Restore Configuration screen. T a[...]

Chapter 36 Maintenance GS1920 Series User’s Gui de 288 Figure 210 Management > Maintenance > R estore Configuration T ype the path and file name of the configur ation file you wish to restore in the File Path text box or click Browse to locate it. After you have specified the file, click Restore . "config" is the name of the confi[...]

Chapter 36 Maintenance GS1920 Series User’ s Guide 289 effort in obtaining reports and it is also av aila ble in CLI command by t yping “Show tech-support” command. Click Menu > Manage ment > Maintenance > Tech-Support to see the following screen. Figure 212 Management > Maintenance > T ech-S upport Y ou may need W ordP ad or s[...]

Chapter 36 Maintenance GS1920 Series User’s Gui de 290 36.7 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 36.7.1 FTP Command Line This section shows some examples of uploading to or downloading files from the Switch using FTP commands. First, understand the filename conventio[...]

Chapter 36 Maintenance GS1920 Series User’ s Guide 291 This is a sample FTP session saving the current co nfigur ation to a file called “config.cfg” on your computer . If your (T)FTP client does not allow you to have a destination filename different than the source, you will need to rename them as the S witch only recognizes “config” and [...]

Chapter 36 Maintenance GS1920 Series User’s Gui de 292 36.7.5 FTP Restrictions FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately .[...]

GS1920 Series User’ s Guide 293 C HAPTER 37 Access Control 37.1 Access Control Overview This chapter describes how to control access to the Switch. One FTP session, up to five W eb sessions (five different user names and passwords) and/or limitless SNMP access control sessions are allowed. 37.1.1 What Y ou Can Do •U s e t h e Access Control scr[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 294 Figure 213 Management > Access Control 37.3 Configuring SNMP Use this screen to configure your SNMP settings. Click Management > Access Control > SNMP to view the screen as shown. Figure 214 Management > Access Control > SNMP The following table describes the labels in this [...]

Chapter 37 Access Control GS1920 Series User’ s Guide 295 37.3.1 Configuring SNMP T rap Group From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP tr aps that should be sent to each SNMP manager . Figure 215 Management > Access Control > SNMP > Trap Group Set Communi t[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 296 The following table describes the labels in this screen. 37.3.2 Enabling/Disabling Send ing of SNMP T rap s on a Port From the SNMP > Trap Group screen, click Port to view the screen as shown. Use this screen to set whether a trap received on the port(s) would be sent to the SNMP manage[...]

Chapter 37 Access Control GS1920 Series User’ s Guide 297 The following table describes the labels in this screen. 37.3.3 Configuring SNMP User From the SNMP screen, click User to view the screen as shown. Use the User screen to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups. An SNMP user is an [...]

Chapter 37 Access Control GS1920 Series User’s Gui de 298 Security Level Select whet her you want to implem ent authentic ation and/or encryption f or SNMP communication from this user . Choose: • noauth -t o use the userna me as the passwor d string to se nd to the SNMP manager . Th i s i s eq u i va l en t t o t he G e t , Se t a n d T ra p C[...]

Chapter 37 Access Control GS1920 Series User’ s Guide 299 37.4 Setting Up Login Account s Up to five people (one administr ator and four non-administr ators) may access the Switch via web configurator at any one time. • An administrator is someone who can both view and configure Switch changes. The username for the Administrator is alw ays admi[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 300 37.5 Service Port Access Control Service Access Control allows you to decide what services you ma y use to access the Switch. Y ou may also change the default service port and conf igure “trusted computer(s)” for each service in the Remote Management screen (discussed later). Click Acc[...]

Chapter 37 Access Control GS1920 Series User’ s Guide 301 37.6 Remote Manage ment Use this screen to specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch. Click Management > Access Control > Remote Management to view the screen as shown next. Y o u can specify a group of o[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 302 Figure 220 Management > Access Control > Remote Management The following table describes the labels in this screen. T a ble 148 Management > Access Control > Remote Management LABEL DESCRIPTION Entry This is the client set inde x number . A “cli ent set” is a group of one o[...]

Chapter 37 Access Control GS1920 Series User’ s Guide 303 37.7 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 37.7.1 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor T CP/IP-based devices. SNMP is used to exchange[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 304 SNMP v3 and Security SNMP v3 enhances security for SNMP manage ment. SNMP managers can be required to authenticate with agents before co ndu cting SNMP management sessions. Security can be further enhanced by encrypti ng the SNMP messages sent from the managers. Encryption protects the con[...]

Chapter 37 Access Control GS1920 Series User’ s Guide 305 37.7.2 Introduction to HTTPS HT TPS (HyperT ext T ransfer Protocol o ver Secure Sock et Lay er , or HT TP ov er S SL) is a web protocol that encrypts and decrypts web pages. Secure Sock et Layer (S SL) is an application-level protocol that enables secure transactions of data by ensu ring c[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 306 It relies upon certificates, public keys, and priv ate keys. HT TPS on the Switch is used so that y ou may securely access the Switch using the web configurator . The SSL protocol specifies that the SSL serv er (the Switch) must alwa ys authenticate itself to the SSL client (the computer w[...]

Chapter 37 Access Control GS1920 Series User’ s Guide 307 Figure 223 Security Alert Dialog Box (Internet Explorer 6) Internet Explorer 7 or 8 When you attempt to access the Switch HT TPS server , a screen with the me ssage "There is a problem with this websi te's security certificate." may display . If that is the case, click Conti[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 308 Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser . Figure 226 Certificate (Internet Explorer 7 or 8) Mozilla Firefox W arning Messages When you attempt to access the Switch HTTPS server , a This Connec tion is Unst ructed screen [...]

Chapter 37 Access Control GS1920 Series User’ s Guide 309 Figure 227 Security Alert (Mozilla Firefox) Confirm the HT TPS serv er URL matches. Click Confirm Security Exception to proceed to the web configurator login screen. Figure 228 Security Alert (Mozilla Firefox) 37.7.2.2 The Main Screen After you accept the certificate and enter the logi n u[...]

Chapter 37 Access Control GS1920 Series User’s Gui de 310 Mozilla Firefox) or next to the address bar (in Internet Explorer 7 or 8) denotes a secure connection. Figure 229 Example: Lock Denoting a Secure Connection EXAMPLE[...]

Chapter 38 Diagnostic GS1920 Series User’ s Guide 31 1 C HAPTER 38 Diagnostic 38.1 Overview This chapter explains the Diagnostic screen. Use the Diagnostic screen ( Section 38.2 on pa ge 311 ) to check system logs, ping IP addresses or perform port tests. 38.2 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen[...]

Chapter 38 Diagnostic GS1920 Series User’s Gui de 312 The following table describes the labels in this screen. T a ble 151 Management > Diagnostic LABEL DESCRIPTION System Log Click Di splay to display a log of events in the multi-line text bo x. Click Clear to empty the text box and reset th e sy slog entry . IP Ping IPv4 Select this option i[...]

Chapter 39 Syslog GS1920 Series User’ s Guide 313 C HAPTER 39 Syslog 39.1 Syslog Overview This chapter explains the syslog screens. The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a sy[...]

Chapter 39 Syslog GS1920 Series User’s Gui de 314 Figure 231 Management > Syslog The following table describes the labels in this screen. 39.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. T a ble 153 Management > Sy[...]

GS1920 Series User’ s Guide 315 Figure 232 Management > Syslog > S yslog Server Setup The following table describes the labels in this screen. T a ble 154 Management > Syslog > Syslog Server Setup LABEL DESCRIPTION Active Sele ct this che ck box to have the de vice se nd logs to this syslog server . Clear the check box if you want to [...]

Chapter 40 Cluster Management GS1920 Series User’s Gui de 316 C HAPTER 40 Cluster Management 40.1 Cluster Management Overview This chapter introduces cluster management. Cluster Management allows y ou to manage switches through one S witch, called the cluster manager . The switches must be directly connected an d be in the same VLAN group so as t[...]

GS1920 Series User’ s Guide 317 40.1.1 What Y ou Can Do •U s e t h e Cluster Management screen ( Section 40.2 on page 317 ) to view the role of the Switch within the cluster and to access a cluster member switch’ s web configurator . •U s e t h e Clustering Management Configuratio n screen ( Section 40.1 on page 316 ) to configure clusterin[...]

Chapter 40 Cluster Management GS1920 Series User’s Gui de 318 40.3 Clustering Management Configuration Use this screen to configure clustering management. Click Managem ent > Cluster Manage ment > Configuration to display the next screen. Figure 235 Management > Cluster Management > Configur ation Model This field displa ys the mode l[...]

Chapter 40 Cluster Management GS1920 Series User’ s Guide 319 The following table describes the labels in this screen. T a ble 157 Management > Cluster Management > Configu ration LABEL DESCRIPTION Clustering M anager Active Select Activ e to have this S witch become the c l uster manager swit ch. A cluster c an only have one manager . Othe[...]

GS1920 Series User’ s Guide 320 40.4 T echnical Reference This section provides technical background information on the topics discussed in this chapter . 40.4.1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink fro m the list of members to go to that cl[...]

Chapter 40 Cluster Management GS1920 Series User’ s Guide 321 The following table explains so me of the FTP par ameters. T a ble 158 FTP Upload to Cluster Member Example FTP PARAMETER DESCRIPTION User Enter “admin” . Password The web configur ator password default is 1234. ls Enter this command to list the name of cluster membe r switch’ s [...]

Chapter 41 MAC Tab le GS1920 Series User’s Gui de 322 C HAPTER 41 MAC Table 41.1 MAC T able Overview This chapter introduces the MAC Table screen. The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’ s ports. It shows what device MAC address, belonging to what VLA[...]

Chapter 41 MAC Table GS1920 Series User’ s Guide 323 Figure 238 MAC T able Flowchart 41.2 V iewing the MAC T able Use this screen to check whether the MAC address is dynamic or static. Click Management > MAC Table in the navigation panel to display the following screen. Figure 239 Management > MAC T able[...]

Chapter 41 MAC Tab le GS1920 Series User’s Gui de 324 The following table describes the labels in this screen. T a ble 159 Management > MAC Table LABEL DESCRIPTION Condition Select on e of the button s an d click Search to only display th e data which matches t he criteria you specif ied. Select All to display any entry i n the MAC table of th[...]

Chapter 42 ARP Table GS1920 Series User’ s Guide 325 C HAPTER 42 ARP Table 42.1 Overview This chapter introduces ARP T able. Address Resolution Protocol (ARP) is a protocol for mapping an Intern et Protocol address (IP address) to a physical machine address, also kn own as a Media Access Control or MAC address, on the local area network. An IP (v[...]

GS1920 Series User’ s Guide 326 Figure 240 Management > ARP T able The following table describes the labels in this screen. T a ble 160 Management > ARP Table LABEL DESCRIPTION Condition Specify how you want the Switch to remove AR P entries when y ou click Flush . Select All to remove all of the dynamic entries from the ARP table. Select I[...]

Chapter 43 Path MTU Ta ble GS1920 Series User’ s Guide 327 C HAPTER 43 Path MTU Table This chapter introduces the IPv6 Path MTU table. 43.1 Path MTU Overview The largest size (in bytes) of a packet that can be tr ansferred over a data link is called the maximum transmission unit (MTU). The S witch uses Path MTU Discovery to discover P ath MTU (PM[...]

Chapter 44 Configu re Clone GS1920 Series User’s Gui de 328 C HAPTER 44 Configure Clone 44.1 Overview This chapter shows you how you can copy the settings of one port onto other ports. 44.2 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Conf igure[...]

GS1920 Series User’ s Guide 329 Figure 242 Management > Configure Clone The following table describes the labels in this screen. T a ble 162 Management > Configure Clone LABEL DESCRIPTION Sourc e/ Destinat ion Port Enter the source port under the Source label . This port’s attributes are copied. Enter the destinat ion po rt or ports under[...]

Chapter 45 Neighbor Tabl e GS1920 Series User’s Gui de 330 C HAPTER 45 Neighbor Table This chapter introduces the IPv6 neighbor table. 45.1 IPv6 Neighbor T able Overview An IPv6 host is required to ha ve a neighbor table. If there is an address to be resolved or v erified, the Switch sends out a neighbor solicitation me ssage. When the Switch rec[...]

GS1920 Series User’ s Guide 331 MAC This field displays the MAC address of the IPv6 interface on whic h the IPv6 address is configure or the MAC address of the neighboring device. Status This field dis p lays whet her the neighbor IP v6 interface is reachabl e. I n IPv6, “reach able” means an IPv6 packet can be correctl y forwarde d to a neig[...]

GS1920 Series User’ s Guide 332[...]

Chapter 45 Neighb or Table GS1920 Series User’ s Guide 333[...]

Chapter 45 Neighbor Tabl e GS1920 Series User’s Gui de 334[...]

GS1920 Series User’ s Guide 335[...]

GS1920 Series User’ s Guide 336 C HAPTER 46 Troubleshooting This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LEDs • Switch Access and Login • Switch Configur ation 46.1 Power , Hardware Connections, and LEDs The[...]

Chapter 46 Troubl eshooting GS1920 Series User’ s Guide 337 4 Disconnect and re-connect the power adaptor or cord to the Switch. 5 If the problem continues, contact the v endor . 46.2 Switch Access and Login I forgot the IP address for the Switch. 1 The default IP address is 192.168.1.1 . 2 If this does not work, you ha ve to reset the device to [...]

Chapter 46 Tro ubleshooting GS1920 Series User’s Gui de 338 Advanced Suggestions • T ry to access the Switch using another service, such as FTP . If you can access the Switch, check the remote management settings to find out why the S witch does not respond to HT TP . I can see the Login screen, but I cannot log in to the Switch. 1 Make sure yo[...]

Chapter 46 Troubl eshooting GS1920 Series User’ s Guide 339 46.3 Switch Configuration I lost my config uration settings after I restart the Switc h. Make sure you sa ve your configur ation into the Switch’ s nonvolatile memory each time you mak e changes. Click Save at the top right corner of the web configurator to save the configuration perma[...]

GS1920 Series User’ s Guide 340 A PPENDIX A Customer Support In the event of problems th at cannot be solved by using this manual, you should contact your vendor . If you cann ot contact your vendor , then contact a Z yXEL office for the region in which you bought the device. Regional websites are listed below (see also http://www .zyxel.com/ abo[...]

Appendix A Customer Suppo rt GS1920 Series User’ s Guide 341 Korea • Z yXEL K orea Corp. • http://www.zyx el.kr Malaysia • Z yXEL Malaysia Sdn Bhd. • http://www.zyx el.com.my Pakist an • ZyXEL P akistan (Pvt.) Ltd. • http://www .zyxel.com.pk Philipines • Z yXEL Philippines • http://www .zyxel.com.ph Singapore • Z yXEL Singapore [...]

Appendix A Customer Support GS1920 Series User’s Gui de 342 Belgium • Z yXEL Communications B.V . • http://www .zyxel.com/be/nl/ Bulgaria •Z y X E L България • http://www.zyx el.com/bg/bg/ Czech • Z yXEL Communications Czech s.r .o • http://www.zyx el.cz Denmark • Z yXEL Communications A/S • http://www.zyx el.dk Estonia ?[...]

Appendix A Customer Suppo rt GS1920 Series User’ s Guide 343 Lithuania • Z yXEL Lithuania • http://www .zyxel.com/lt/lt/homepage.shtml Netherlands •Z y X E L B e n e l u x • http://www.zyx el.nl Norway • Z yXEL Communications • http://www.zyx el.no Poland • Z yXEL Communications Poland • http://www.zyx el.pl Romania •Z y X E L R[...]

Appendix A Customer Support GS1920 Series User’s Gui de 344 T urkey •Z y X E L T u r k e y A . S . • http://www.zyx el.com.tr UK • Z yXEL Communications UK Ltd. • http://www.zyx el.co.uk Ukraine •Z y X E L U k r a i n e • http://www .ua.zyxel.com Latin America Argentina • Z yXEL Communication Corpor ation • http://www.zyx el.com/e[...]

Appendix A Customer Suppo rt GS1920 Series User’ s Guide 345 Oceania Australia • Z yXEL Communications Corporation • http://www .zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyx el.co.za[...]

GS1920 Series User’ s Guide 346 A PPENDIX B Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port number s, ICMP t ype/code numbers and services, visit the IANA (I nternet Assigned Number Authority) web site. • Name : This is a short, descriptive n[...]

Appendix B Common Services GS1920 Series User’ s Guide 347 HT TPS TC P 443 HT TPS is a secured http session often u sed in e- commerce. ICMP User- Defined 1 Internet Control Message Pr otocol is often used for diagnostic or routing purposes. ICQ UDP 4000 This is a popular In ternet chat progr am. IGMP (MUL TICAST) User- Defined 2 Internet Group M[...]

Appendix B Common Services GS1920 Series User’s Gui de 348 SQL -NET TC P 1521 Structured Query Language is an inte rface to access data on many different ty pes of database systems, including mainfr ames, midr ange systems, UNIX systems and network se rvers. SSH TCP /UD P 22 Secure Shell Remote Login Progr am. STRM WORKS UDP 1558 Stream W orks Pr[...]

GS1920 Series User’ s Guide 349 A PPENDIX C IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 38 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal block[...]

Appendix C IPv6 GS1920 Series User’s Gui de 350 Global Address A global address uniquely iden tifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not ha[...]

Appendix C IPv6 GS1920 Series User’ s Guide 351 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal ch[...]

Appendix C IPv6 GS1920 Series User’s Gui de 352 combines its interface ID and global and subnet in formation advertised from the router . This is a routable global IP address. DHCPv6 The Dynamic Host Configur ation Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pa ss IPv6 network addresses[...]

Appendix C IPv6 GS1920 Series User’ s Guide 353 such as the system name. The interface-ID option provides slot number , port information and the VLAN ID to the DHCPv6 server . The rem ote- ID option (if any) is stripped from the Rela y-R e ply messages before the relay agent sends the packets to the clients. The DHCP server copies the interface-I[...]

Appendix C IPv6 GS1920 Series User’s Gui de 354 determine whether the destination address is on- link and can be reached directly without passing through a router . If the address is onlink, the addre ss is considered as the next hop . Otherwise, the Switch determines the next-hop from the default ro uter list or routing table. Once the next hop [...]

Appendix C IPv6 GS1920 Series User’ s Guide 355 4 Double click Di bbler - a DHCPv6 client . 5 Click Start and then OK . 6 Now your computer can obtain an IP v6 address from a DH CPv6 server . Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is al so en abled when you enable IPv6 on a Windows 7 computer . T o enable [...]

Appendix C IPv6 GS1920 Series User’s Gui de 356 4 Click Close to exit the Local Area Connectio n Status screen. 5 Select Start > All Programs > Accessories > Command Prompt . 6 Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obta ined from a DHCP server . C:>ipconf[...]

GS1920 Series User’ s Guide 357 A PPENDIX D Legal Information Copyright Copyright © 2014 b y ZyXEL Communi cations Corpor ation. Th e c o nt e nt s o f th is p ub l ic at i on ma y n o t b e re p ro du c ed in a ny pa r t o r a s a w ho l e, t ran s cr i be d, s to re d in a re tr i eva l sy s te m, t r anslated into any language, or tr ansmitte[...]

Appendix D Legal Informa tion GS1920 Series User’s Gui de 358 ZyXEL Limited W arranty Z yXEL warrants to the original end user (pu rchaser) that this pr oduct is free from any defects in material or workmanship for a spe cific period (the Warranty P eriod) from the date o f purchase. The Warranty P eriod varies by region. Check with your vendor a[...]

Appendix D Legal Informa tion GS1920 Series User’ s Guide 359 Environment al Product Declaration[...]

Index GS1920 Series User’s Gui de 360 Index Numerics 802.1P priority 69 802.3az 233 A AAA 175 AAA (Authentication and Authorization) 175 access control limitations 293 login account 299 remote management 301 service port 300 SNMP 303 address learning, MAC 93 , 95 Address R esolution Protocol (ARP) 280 , 325 , 328 , 329 administrator password 299 [...]

Index GS1920 Series User’ s Guide 361 cluster management 316 and switch passwords 319 cluster manager 316 , 319 cluster member 316 , 319 cluster member firmware upgr ade 320 network example 316 setup 318 specification 316 status 317 switch models 316 VID 319 web config urator 320 cluster manager 316 cluster member 316 Common and Internal Spanning[...]

Index GS1920 Series User’s Gui de 362 configuration file names 290 filtering 106 rules 106 filtering database, MAC table 322 firmware 60 upgrade 286 , 320 flow control 69 back pressure 69 IEEE802.3x 69 forwarding delay 120 frames tagged 92 untagged 92 front panel 27 FTP 290 file transfer procedure 291 restrictions over W A N 292 G GARP 86 GARP (G[...]

Index GS1920 Series User’ s Guide 363 ping 349 prefix 349 prefix length 349 stateless autoconfiguration 351 unspecified address 350 L L2PT 214 access port 215 CDP 214 configuration 215 encapsulation 214 LACP 214 MAC address 214 mode 215 overview 214 PAg P 214 point to point 214 STP 214 tunnel port 215 UDLD 214 VTP 214 LACP 133 , 217 system priori[...]

Index GS1920 Series User’s Gui de 364 age 120 hops 120 maximum transm ission unit 327 MDIX (Media Dependent Interface Crossover) 28 MIB and SNMP 303 supported MIBs 304 MIB (Management Information Base) 303 mirroring ports 131 monitor port 131 , 132 mounting brackets 25 MRSTP status 11 7 MST ID 126 MST Instance, See MSTI 126 MST region 125 MSTI 12[...]

Index GS1920 Series User’ s Guide 365 overview 146 setup 146 , 212 , 215 port setup 67 port status 54 port VLAN ID, see PVID 92 port VLAN trunking 87 port-based VLAN 96 all connected 99 port isolation 99 settings wizard 99 ports diagnostics 312 mirroring 131 speed/duplex 68 standby 134 power volt age 61 power connector 30 power status 61 PPPoE IA[...]

Index GS1920 Series User’s Gui de 366 protocol operations 303 security 298 setup 294 traps 295 users 297 version 3 and security 304 versions supported 303 SNMP traps 304 supported 304 , 305 Spanning T ree Protocol, See STP . 108 SPQ (Strict Priority Queuing) 158 SSL (Secure Socket Layer) 305 standby ports 134 static bindings 188 static link aggre[...]

Index GS1920 Series User’ s Guide 367 trunking 133 example 138 trusted ports ARP inspection 209 DHCP snooping 206 PPPoE IA 220 tunnel protocol attribute, and RADIUS 183 tutorials 46 DHCP snooping 46 Ty p e o f S e r v i c e ( To S ) 262 U UDLD 217 UniDirectional Link Detection, see UDLD untrusted ports ARP inspection 209 DHCP snooping 206 PPPoE I[...]

Index GS1920 Series User’s Gui de 368[...]