ZyXEL Communications XGS-4728F manuale d’uso

www .zyxel.com www .zyxel.com XGS-4728F Intelligent Layer 3+ Switch Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 3.90 Edition 2, 04/2010 Default Login Details IP Address http://192.168.0.1 (Out-of -band MGMT port) http://192.168.1.1 (In-band ports) User Name admin Pa ss wo rd 12 34[...]

[...]

About This User's Guide XGS-4728F User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Switch using the web configurator . Related Document ation • W eb Configurator On line He lp The embedded W eb Help contains descriptions of individual screens and supplementary infor[...]

About This User's Guide XGS-4728F User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link. Re ad the T ech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Int erface R eference Guide in ord er to better understand how to use your product .[...]

Document Conventions XGS-4728F User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help ful tips) or[...]

Document Conventions XGS-4728F User’s Guide 6 Icons Used in Figures Figures in this User’ s Guide may use the following generic icons. The Sw itch icon is not an exact representation of y our device. The Switch Computer Notebook computer Server DSLAM Firewa ll Te l e p h o n e Swi tch Ro u te r[...]

Safety Warnings XGS-4728F User’s Guide 7 Safety Warnings • Do NO T use this product near water , for exam ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There is a[...]

Safety Warnings XGS-4728F User’s Guide 8[...]

Contents Overview XGS-4728F User’s Guide 9 Contents Overview Introduction .......................................... ..................................................... ................... .......... 23 Getting to Know Y our Switch .............. ................ ............. ................ ................ ............. ........... .. 25 Ha[...]

Contents Overview XGS-4728F User’s Guide 10 IP Application ............................ ..................................................... ............................... ....... 271 S tatic Route .................... ................. ............ ................. ................ ............. ................ ... ........... 273 RIP ......[...]

Table of Contents XGS-4728F User’s Guide 11 Table of Contents About This User's Guide ..................................................... ................................................... .. 3 Document Conventions.................................................................. ......................................... .5 Safety Warning[...]

Table of Contents XGS-4728F User’s Guide 12 3.2.2 External Backup Power Supply Connecto r ............ ............. ................ ............. .......... 41 3.2.3 Console Port ............... .... ... ............. ... ... ... .... ... ... ... ............. ... .... ... ... ... .... ... ... ........... .. 41 3.3 LEDs ............... ........[...]

Table of Contents XGS-4728F User’s Guide 13 7.2.1 S tatus: Port Details ............... ............. ................ ............. ................ ............. ......... .7 3 Chapter 8 Basic Setting .................................................................................. ............................... ......... 77 8.1 Overview ... [...]

Table of Contents XGS-4728F User’s Guide 14 10.2 Configuring S t atic MAC Forwarding ......... ................ ............. ................ ............. .........1 15 Chapter 1 1 St atic Mu lticast Forward Setup...................................................... ...................................... 1 19 1 1.1 S tatic Multicast Forwarding[...]

Table of Contents XGS-4728F User’s Guide 15 17.1 Link Aggregation Overview . ....................... ....................... ...................... ....................... . 15 3 17.2 Dynamic Link Aggregation .................. .... ...... ............. ................ ............. ................ ........ 1 5 3 17.2.1 Link Aggregation ID ... [...]

Table of Contents XGS-4728F User’s Guide 16 22.1.2 Weighted Fair Queuing ........ ................ ............. ................ ............. ................ ........ 187 22.1.3 Weighted Round Robin Scheduling (WRR) ......... ................ ............. ................ ..... 188 22.2 Configuring Queuing ................ ................ ..[...]

Table of Contents XGS-4728F User’s Guide 17 25.2.4 V endor S pecific Attribute ................ ............. ................ ................ ............. .............. 224 25.2.5 T unnel Protocol Attribute ... ................ ................ ................ ............. ................ ........ 225 25.3 Supported RADIUS Att ributes ....[...]

Table of Contents XGS-4728F User’s Guide 18 30.1 Private VLAN Overview .......... ................ ............. ................ ................ ................ ........... 2 67 30.2 Configuring Private VLAN .... ............. ................ ............. ................ ............. ................ ..... 2 68 Part IV : IP Application ...[...]

Table of Contents XGS-4728F User’s Guide 19 35.2.1 DVMRP T erminology . ............. ................ ............. ................ ............. ................ ..... 296 35.3 Configuring DVMRP .................. ................ ................ ............. ................ ................ ........ 296 35.3.1 DVMRP Configuration Er ror Me[...]

Table of Contents XGS-4728F User’s Guide 20 38.4.2 T wo Subnet s Example ......................... ............. ............. ................ ............. ........... 3 25 Part V : Management ............... .............................. ........................ ........ 327 Chapter 39 Maintenance .............................................[...]

Table of Contents XGS-4728F User’s Guide 21 Chapter 41 Diagnostic........................................................ ..................................................... ........... ...... 357 41.1 Diagnostic ..... ................ ................ ............. ................ ................ ............. ............... ......... 357 C[...]

Table of Contents XGS-4728F User’s Guide 22 Part VI: T roubleshooting & Prod uct Specification s .......................... 385 Chapter 49 T roubleshooting ............... ............................................................... .................................. .... 387 49.1 Power , Hardwa re Connections, and LEDs ....... .... ... ..[...]

23 P ART I Introduction Getting to Know Y our Switch (25) Hardware Installation and Connecti on (31) Hardware Overview (35)[...]

24[...]

XGS-4728F User’s Guide 25 C HAPTER 1 Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction Y our Switch is a stand-alone, layer- 3, Gigabit Ethernet (GbE) switch with two 12 Gigabit stacking ports as well as support for an optional 2-port 10 Gigabit uplink module. By integrating rou[...]

Chapter 1 Getting to Know Your Switch XGS-4728F User’s Guide 26 super-fast uplink connection by using the optional 10 Gigabit uplink module on the Swit ch . Figure 1 Bridging Ap plication 1.1.2 High Performance Switching Example The Switch is ideal for connecting two geogr aphically dispersed networks that need high bandwidth. In the following ex[...]

Chapter 1 Getting to Kn ow Your Switch XGS-4728F User’s Guide 27 1.1.3 Gigabit Ethernet to the Desktop The Switch is an i deal solution for small net works which demand high bandwidth for a group of heavy traffic users. Y ou ca n connect computers an d servers directly to the Switch’ s port or connect other sw itches to the Switch. Use the opti[...]

Chapter 1 Getting to Know Your Switch XGS-4728F User’s Guide 28 Shared resources such as a serv er can be used by al l ports in the same VLAN as the server . In the following figure only po rts that need access to the serv er need to be part of VLAN 1. P orts can belong to other VLAN g roups too. Figure 4 Shared Serve r Using VLAN Example 1.2 W a[...]

Chapter 1 Getting to Kn ow Your Switch XGS-4728F User’s Guide 29 • Back up the configur ation (and make sure you know how to restore it). Restoring an e arlier wo rking conf iguratio n may be usef ul if the device becomes unstable or even cr ashes. If you forget your password, you will have to reset the Switch to it s factory default set tings.[...]

Chapter 1 Getting to Know Your Switch XGS-4728F User’s Guide 30[...]

XGS-4728F User’s Guide 31 C HAPTER 2 Hardware Installation and Connection This chapter shows you how t o install and connect the S witch. 2.1 Freest anding Inst allation 1 Make sure the Switch is clean and dry . 2 Set the Swit ch on a smo oth, leve l surface strong enough to support the weight of the Switch and the c onnected cables. Make sure th[...]

Chapter 2 Hardware Installation and Connection XGS-4728F User’s Guide 32 Note: Do NOT block the ventilation ho les. Leave space between devices when stackin g. Note: For proper ventilation, allow at le ast 4 inches (10 cm) of clearance at the front and 3.4 inches (8 cm) at the back of the Switch. This is especially imp ort ant for enclosed rack i[...]

Chapter 2 Har d war e In sta lla tion an d Conn ec tion XGS-4728F User’s Guide 33 2 Using a #2 Philips s crewdriver , install the M3 flat head screws through the mounting br acket holes into t he Switch. 3 Re peat steps 1 and 2 to install the second mounting br acket on the other side of the Switch. 4 Y ou may now mount the Switch on a r ack. Pro[...]

Chapter 2 Hardware Installation and Connection XGS-4728F User’s Guide 34[...]

XGS-4728F User’s Guide 35 C HAPTER 3 Hardware Overview This chapter describes the front panel and rear p anel of the S w itch and shows you how to make the hardware connections. 3.1 Front Panel Connections The figure below shows the front panel of the S witch. Figure 8 Front Panel The following table describes t he ports. 3.1.1 Dual Personality I[...]

Chapter 3 Har d war e Ov er vie w XGS-4728F User’s Guide 36 This means that if a mini-GBIC port and t he corresponding 1000Base- T port are connected at the same time, the 1000Base- T port will be disabled. 3.1.2 1000Base-T Port s The Switch has 24 1000Base- T auto-negotiating, auto-cros sover Ethernet ports. In 100/1000 Mbps Gigabit Ethernet, th[...]

Chapter 3 Hardware Overview XGS-4728F User’s Guide 37 3.1.3.1 T ransceiver Inst allation Use the following steps to install a mini GBIC transceiver (SFP or XFP modul e). 1 Insert the transceiv er into the slot with the exposed section of PCB board facing down. Figure 9 T ransceiver Installation Example 2 Press the tr ansceiver firmly until i t cl[...]

Chapter 3 Har d war e Ov er vie w XGS-4728F User’s Guide 38 2 Pull the transceiver out of the slot. Figure 12 T ransceiver Removal Example 3.2 Rear Panel The following figures show the rear pane ls of the AC and DC power input model switches. The rear panels contain: • A connector for the backup power supply ( A ) • An optional slot ( B ) for[...]

Chapter 3 Hardware Overview XGS-4728F User’s Guide 39 The following figure shows the front pa nel of the EM-422 and EM-412 modules. Figure 15 The Front Panel of the EM-422 and EM-412 Modules The following table describes t he ports on the rear panel. 3.2.1 Power Connector Make sure you are using the correct po wer source as shown on the panel and[...]

Chapter 3 Har d war e Ov er vie w XGS-4728F User’s Guide 40 Use only power wires of the required di ameter for connecting the Switch to a power supply . 3.2.1.1 AC Power Connection Note: This is only for the AC model of the Switch. Connect the female end of the po wer cord to the power socket of your S witch. Connect the other end of the cord to [...]

Chapter 3 Hardware Overview XGS-4728F User’s Guide 41 3.2.2 External Backup Power Supply Connector The Switch s upports external backup power suppl y (BPS). The Switch constan tly monitor s t he s ta t us of the internal power supply . The backup power supply auto matically pro vides power to the S witch in the ev ent of a power failure. Once the[...]

Chapter 3 Har d war e Ov er vie w XGS-4728F User’s Guide 42 ALM Red On There is a hardware failure. Off The system is functioning normally . S1 Green On The Switch is connected to other switches in the stack on Stacking Port 1. Off The Switch is not connected to other switches in the stack on Stacking Po rt 1. S2 Green On The Switch is connected [...]

43 P ART II Basic Configuration The W eb Configur ator (45) Initial Setup Example (55) System Status and P ort Statistics (71) Basic Setting (77)[...]

44[...]

XGS-4728F User’s Guide 45 C HAPTER 4 The Web Configurator This section introduces the config uratio n and functions of the web configurator . 4.1 Introduction The web configurator is an HTML -based management interface that allows easy Switch setup an d m an agement v ia Inter net browser . U se Int e rne t Explorer 6.0 and later or Firefox 2.0 a[...]

Chapter 4 The Web Con figurator XGS-4728F User’s Guide 46 3 The login screen appears. The defa ult username is admin and associated default password is 1234 . The date and time displ ay as sh own if y ou have not configured a time server nor manually entered a time and date in the General Setup screen. Figure 16 W eb Configurator: Login 4 Click O[...]

Chapter 4 T he Web Configurator XGS-4728F User’s Guide 47 The following figure shows the navigati ng components of a web configur ator screen. Figure 17 W eb Configurator Home Screen (S t atus) A - Click the menu items to open submenu li nks, and then click on a submenu link to open the screen in the main w in d ow. B , C , D , E - These are quic[...]

Chapter 4 The Web Con figurator XGS-4728F User’s Guide 48 In the navigation panel, clic k a main link to rev eal a list of sub menu links. The following table descri bes the links in the na vigation panel. T able 4 Navigation Panel Sub-links Overview BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT T able 5 Navigation Panel Links LINK[...]

Chapter 4 T he Web Configurator XGS-4728F User’s Guide 49 VLAN This link takes yo u to screens where you can configure port -based or 802.1Q VLAN (depending on what you configured in the Switch Setup menu). Y ou ca n also configure a protocol based VLAN or a subnet based VLAN in these screens. Static MAC For w a r d i n g This link takes you to s[...]

Chapter 4 The Web Con figurator XGS-4728F User’s Guide 50 VLAN Mapping This link takes you to screens where you can configure VLAN mapping settings on the Switch. Layer 2 Protocol T unneling This link takes you to a screen wher e y o u can configure L2PT (Layer 2 Protocol T unneling) settings on the Switch. Private VLAN This link takes you to a s[...]

Chapter 4 T he Web Configurator XGS-4728F User’s Guide 51 4.3.1 Change Y our Password After you log i n for the first time, it is recommended you change the default administr ator password. Click Man agement > Access Control > Logins to display the next screen. Figure 18 Change Administrator Login Password 4.4 Saving Y our Configuration Whe[...]

Chapter 4 The Web Con figurator XGS-4728F User’s Guide 52 4.5 Switch Lockout Y ou could block yourself (and all others) from using in-band-management (managing through the data ports) if you do one of the following: 1 Delete the management VLAN (def ault is VLAN 1). 2 Delete all port -based VLANs with the CPU port as a member . The “CPU port”[...]

Chapter 4 T he Web Configurator XGS-4728F User’s Guide 53 1 Connect to the console port using a computer with terminal emulation software. See Section 3.2 on page 38 for details. 2 Disconnect and reconnect the S witch’ s power to b egin a session. When y ou reconnect the Switch’ s power , you will see the initial screen. 3 When you see the me[...]

Chapter 4 The Web Con figurator XGS-4728F User’s Guide 54 4.7 Logging Out of the W eb Configurator Click Logout in a screen to exit the web configurator . Y ou have to log in with your password again after you log out. This is recommended after you fini sh a management session for security reasons. Figure 20 W eb Configurator: Logout Scre en 4.8 [...]

XGS-4728F User’s Guide 55 C HAPTER 5 Initial Setup Example This chapter shows how to set up the S witch for an example network. 5.1 Overview The following lists the configur ation steps for the example network: • Configure an I P interfa ce • Configure DHCP server settings • Create a VLAN • Set port VLAN ID •E n a b l e R I P 5.1.1 Conf[...]

Chapter 5 Initi al Set up Ex amp l e XGS-4728F User’s Guide 56 new IP interface. Th is allows the Switch to route tr affic between the RD and Sales networks. Figure 21 Initia l Setup Network Example: IP Interface 1 Connect y our computer to t he MGMT port that i s used only for management. Make sure your computer is in the same subnet as the MGMT[...]

Chapter 5 Initi al Set up Ex amp le XGS-4728F User’s Guide 57 5 In the VID field, enter the ID of the VLAN group to which you want this IP interface to belong. This is the same as the VLAN ID you configure in the Static VLAN screen. 6 Click Add to sav e the settings to the run-ti me memory . Settings in the run-time memory are lost when the Switc[...]

Chapter 5 Initi al Set up Ex amp l e XGS-4728F User’s Guide 58 In this example, you want to configure port 1 as a member of VLAN 2. Figure 22 Initia l Setup Network Example: VLAN 1 Click Advanced Application > VLAN in the navigati on panel and click t he Static VLAN link. 2 In the Static VLAN screen, select ACTIVE , enter a descriptive name in[...]

Chapter 5 Initi al Set up Ex amp le XGS-4728F User’s Guide 59 3 Since the VLAN2 network is connected t o po rt 1 on the Switch, select Fixed to configure port 1 to be a perman ent member of the VLAN only . 4 T o ensure that VLAN-unawa re devices (such as computers and hubs) can receive frames properly , clea r the TX Tagging check bo x to set the[...]

Chapter 5 Initi al Set up Ex amp l e XGS-4728F User’s Guide 60 5.1.5 Enabling RIP T o exchange routing information with other routing devices across different routing domains, enable RIP (R outing Information Protocol) in the RIP screen. 1 Click IP Application and RIP in the na vigation panel. 2 Select Both in the Directio n field to set the Swit[...]

XGS-4728F User’s Guide 61 C HAPTER 6 Tutorials This chapter provides some examples of using the web configur ator to set up and use the Switch. The tutorials include: • How to Use DHCP Snooping on the Switch • How to Use DHCP Rela y on the Switch 6.1 How to Use DHCP Snooping on the Switch Yo u o n l y w a n t D H C P s e r v e r A connected t[...]

Chapter 6 Tutorials XGS-4728F User’s Guide 62 1 Access the Switch from t he MGMT port through http://192.168 .0.1 by default. Log into the Switch by entering the username (default: admin ) and password (default: 1234 ). 2 Go to Advanced Application > VLAN > Static VLAN , and create a VLAN with ID of 100. Add ports 5, 6 and 7 in the VLAN by [...]

Chapter 6 Tutorials XGS-4728F User’s Guide 63 3 Go to Advanced Application > VLAN > VLAN Port Setting , and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Figure 26 T utorial: T ag Untagged Fr ames 4 Go to Advanced Application > IP Source Guard > DHCP snooping >[...]

Chapter 6 Tutorials XGS-4728F User’s Guide 64 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5. K eep ports 6 and 7 Untrusted because they are connected to DHCP clients. Click Apply . Figure 28 T utorial: Set the DHCP Server Port to T rust[...]

Chapter 6 Tutorials XGS-4728F User’s Guide 65 9 Connect your DHCP server to p ort 5 and a computer (as DHCP client) t o either port 6 or 7. The computer should be ab le to get an IP address from the DHCP server . If you put the DHCP server on port 6 or 7, the computer will not able to get an IP address. 10 T o check if DHCP snooping works, go to [...]

Chapter 6 Tutorials XGS-4728F User’s Guide 66 DHCP client A based on the system name, VLAN ID and port number i n the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. Figure 31 T utorial: DH CP Relay Scenario 6.2.2 Creating a VLAN Fol low the steps below to configure port 2 as a member of VLAN 102. 1 Access th e web c onf ig [...]

Chapter 6 Tutorials XGS-4728F User’s Guide 67 4 In the Static VLAN screen, select ACTIVE , enter a descripti ve name (V ALN 102 for example) in the Name field and enter 102 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN. 6 Clear the TX Tagging check box to set the Switch to remov e VLAN tags b[...]

Chapter 6 Tutorials XGS-4728F User’s Guide 68 8 Click the VLAN St atus link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN Status sc reen. Figure 34 T utorial: Click the VLAN Port Setting Link 9 Enter 102 in the PVID f ield for port 2 to add a tag to incoming untagged frames received on that port s o that the frames are[...]

Chapter 6 Tutorials XGS-4728F User’s Guide 69 6.2.3 Configuring DHCP Relay Fol low the steps below to enable DHCP relay on the Switch and allow the Switch to add relay agent information (such as the VLAN ID) to DHCP request s. 1 Click IP Application > DHCP and then the Global link to open the DHCP Rela y screen. 2 Select the Active check box. [...]

Chapter 6 Tutorials XGS-4728F User’s Guide 70 3 Yo u c l i c k e d t h e Save link on the Switch t o have yo ur settings take effect.[...]

XGS-4728F User’s Guide 71 C HAPTER 7 System Status and Port Statistics This chapter describes the system s tatus (web configur ator home page) and port details screens. 7.1 Overview The home screen of the web configur ator displays a port s tatistical summary with links to each port showing s tatistical details. 7.2 Port S t atus Summary T o view[...]

Chapter 7 S ystem Status and Port Sta tistics XGS-4728F User’s Guide 72 The following table describes t he labels in this screen. T able 7 Status LABEL DESCRIPTION P ort This identifies the Ethernet port. Click a port number to display the Port Details screen (refer to Figure 38 on pag e 73 ). Name This is the name you assigned to this port in th[...]

Chapter 7 System Status and Port Statistics XGS-4728F User’s Guide 73 7.2.1 S t atus: Port Det ails Click a number in the Port column in the Status screen to display individual p ort statistics. Use t his screen to check status and detailed perf ormance data about an individual port on the S witch. Figure 38 S tatus: Port Det ails The following t[...]

Chapter 7 S ystem Status and Port Sta tistics XGS-4728F User’s Guide 74 Status If STP (Spanning T r ee Protocol) is enabled, this field displays the STP state of the port (see Section 13.1.3 on page 127 for more information). If STP is disabled, th is field displa ys FORWARDING if the link is up, otherwise, it displays STOP . LACP This field show[...]

Chapter 7 System Status and Port Statistics XGS-4728F User’s Guide 75 Error P acket The following fields display detailed information about packets received that were in error . RX CRC This field shows the number of packets received with CRC (Cyclic R edundant Check) error(s). Length This field shows the number of packets received with a length t[...]

Chapter 7 S ystem Status and Port Sta tistics XGS-4728F User’s Guide 76[...]

XGS-4728F User’s Guide 77 C HAPTER 8 Basic Setting This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. 8.1 Overview The System Info screen displays gener al Switch information (such as fi rmware version number) and hardware polling information (such as fan speeds). The General S[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 78 8.2 System Information In the navigation panel, click Basic Setting > System Info to displ ay the screen as shown. Y ou can check the firmware version number and monitor the Switch temperature, fan speeds an d voltag e in this screen. Figure 39 Basic Setting > System Info The following table[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 79 Status This field displays Normal for temper atures below the threshold and Error for those above. F an Speed (RPM) A properly functioning fan is an essential component (along with a sufficiently ventilated, cool operating environment) in order for the device to stay within the temper ature thresh[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 80 8.3 General Setup Use this screen to configure genera l set t ings such as the system name and time. Click Basic Setting and Gener al Setup in the navigation panel to display the screen as shown. Figure 40 Basic Setting > General Setup The following table describes t he labels in this screen. T[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 81 Use Time Server when Bootup T ype the time service protocol that your timeserver uses. Not all time servers support all protocols, so you may have to use trial and error to find a protocol that works. The ma in differences between them are the time format. When you select the Daytime (RFC 867) for[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 82 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allo ws a ph ysical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one grou p. With VLAN, a device cannot directly talk to or hear from device[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 83 8.4.1 Smart Isolation T o block tr affic between two specific ports withi n the Switch, y ou can use port isolation or private VLAN ( se e Chapter 30 on page 267 for more information). However , it does not work across multiple switches. F or example, broadcast traffic from isolated ports on a swi[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 84 Note: The uplink port connecte d to the Internet should be the root po rt. Otherwise, with smart isolation enabled, the isolated port s cannot access the Internet. 8.5 Switch Setup Screen Click Basic Setting and then Switch Setup in the navigation panel to display t he screen as shown. The VLAN se[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 85 Smart Isolation Select Active to enable smart isolation on the S witch. The designated port(s) then becomes the isolated port. Smart isolation allows you to prevent isolated ports on different switch es from transmitting tr affic to each other . Note: T o use smart isolation, y ou should have conf[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 86 8.6 IP Setup Use the IP Setup screen to configure the default gateway d evice, the default domain name server and add IP domains. 8.6.1 IP Interfaces The Switch needs an IP address for it to be managed ov er the network. The factory default IP address is 192.168. 1.1. The subnet mask specifies t h[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 87 Switch in a rout ing domain, simply ad d a new routing domain entry with a different IP address in the same subnet. Figure 42 Basic Setting > IP Setup The following table describes t he labels in this screen. T able 12 Basic Setting > IP Setup LABEL DESCRIPTION Default Gateway T ype the IP a[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 88 IP Address Enter the out-of -band management IP address of your Switch in dotted decimal notation. For example, 192.168.0.1. IP Subnet Mask Enter the IP subnet mask of your S witch in dotted decimal notation, for example, 255.255. 255.0. Default Gateway Enter the IP address of the default outgoing[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 89 8.7 Port Setup Use this screen to configure Switch port setting s.Cli ck Basic Setting > Port Setup in the navigation panel to display the conf iguration screen. Figure 43 Basic Setting > Port Setup The following table describes t he labels in this screen. T able 13 Basic Setting > Port S[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 90 Speed/ Duplex Select the speed and the duplex mode of the Ethernet connection on this port. The choices are Auto , 10M/Half Duplex , 10M/Full Duplex , 100M/Half Duplex and 100M/Full D uplex for a 1000Base- T connection. 1000M/Full Duple x is supported by both 1000Base- T and 1000Base- X conne ctio[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 91 Apply Click Apply to save your changes to the Sw itch’s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to sav e your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to b[...]

Chapter 8 Basic Setting XGS-4728F User’s Guide 92[...]

93 P ART III Advanced Setup VLAN (95) Static MAC F orward Setup (115) Static Multicast Forw ard Setup (119) Filtering (123) Spanning T ree Protocol (125) Bandwidth Control (145) Broadcast Storm Control (149) Mirroring (151) Link Aggregation (153) P ort Authentication (163) P ort Security (169) Classifier (173) P olicy Rule (179) Queuing Method (187[...]

94[...]

XGS-4728F User’s Guide 95 C HAPTER 9 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-bas ed VLANs. 9.1 Introduction to IEEE 802.1Q T agged VLANs A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN m[...]

Chapter 9 VLAN XGS-4728F User’s Guide 96 switch, the Swit ch first decides where to forward the fr ame and then strips off the VLAN tag. T o forward a fr ame from an 802.1Q VLAN-unaw are switch to an 802.1Q VLAN-aware switc h, the Switch first de cide s where to forward the fr ame, and then inserts a VLAN tag reflecting the ingress port's de[...]

Chapter 9 VLAN XGS-4728F User’s Guide 97 9.3 Port VLAN T runking Enable VLAN Trunking on a port to allow fr ames belonging to unknown VLAN groups to pass through that port. This is us eful if y ou w ant to set up VLAN grou ps on end devices without ha ving to co nfigure the same VLAN groups on intermediary devices. The following figure describes [...]

Chapter 9 VLAN XGS-4728F User’s Guide 98 allow fr ames with VLAN group tags 1 an d 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s). Figure 44 Port VLAN T runking 9.4 Select the VLAN T ype Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 45 Switch Setup: Select VLAN T ype 9.5 S[...]

Chapter 9 VLAN XGS-4728F User’s Guide 99 9.5.1 VLAN St atus See Section 9.1 on page 95 for more information on Static VLAN. Clic k Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. Figure 46 Advanced Application > VLAN: VLAN S t atus The following table describes t he labels in this scree[...]

Chapter 9 VLAN XGS-4728F User’s Guide 100 9.5.2 VLAN Det ails Use this screen to view detai led port se ttings and status of the VLAN group . See Section 9.1 on page 95 for more information on stat ic VLAN. Click on an index number in the VLAN Status screen to display VLAN det ails. Figure 47 Advanced Application > VLAN > VLAN Detail The fo[...]

Chapter 9 VLAN XGS-4728F User’s Guide 101 static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. Figure 48 Advanced Application > VLAN > S tatic VLAN The following table describes t he related labels in this screen. T able 17 Advanced Application > VLAN > S tatic VLAN LABEL DESCRIPTION ACTIVE Sel[...]

Chapter 9 VLAN XGS-4728F User’s Guide 102 9.5.4 Configure VLAN Port Settings Use the VLAN Port Set ti ng screen to co nfigure the static VLAN (IEEE 802.1Q) settings on a port. See Section 9.1 on page 95 for more information on static VLAN. Click the VLAN Port Setting link in th e VLAN Status screen. Figure 49 Advanced Application > VLAN > V[...]

Chapter 9 VLAN XGS-4728F User’s Guide 103 The following table describes t he labels in this screen. 9.6 Subnet Based VLANs Subnet based VLANs allow y ou to group tr affic into logical VLANs based on the source IP subnet you s pecify . When a fr ame is received on a port, the Switch checks if a tag is added already and the IP subnet it came from. [...]

Chapter 9 VLAN XGS-4728F User’s Guide 104 packets fr om the same IP su bnet are then placed in the same subnet based VLAN. One adv antage of using subnet based VLANs is that priority can be as signed to traffic from the same IP subnet. For example, an ISP (Internet Service Pr ovider) may divide different types of services it provides to customers[...]

Chapter 9 VLAN XGS-4728F User’s Guide 105 Note: Subnet based VLAN applies to un-tagg ed packet s and is applicable only when you use IEEE 802.1Q t agged VLAN. Figure 51 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN The following table describes t he labels in this screen. T able 19 Advanced Application > VLAN >[...]

Chapter 9 VLAN XGS-4728F User’s Guide 106 9.8 Protocol Based VLANs Protocol based VLANs allow y ou to group tr affic into logi cal VLANs based on the protocol you s pecify . When an u pstream f rame is received on a port (confi gured for a protocol based VLAN), t he Switch checks if a tag is added already and its protocol. The untagged packets of[...]

Chapter 9 VLAN XGS-4728F User’s Guide 107 T alk traffic from port 6 and 7 will be i n another group and hav e higher priority than ARP traffic when they go through the upli nk port to a backbone switch C. Figure 52 Protocol Based VLAN Application Example 9.9 Configuring Protoc ol Based VLAN Click Protocol B ased VLAN in the VLAN Port Setting scre[...]

Chapter 9 VLAN XGS-4728F User’s Guide 108 The following table describes t he labels in this screen. T able 20 Advanced Application > VLAN > VL AN Port Setting > Protocol Based VLAN Setup LABEL DESCRIPTION Active Check this bo x to activate this protocol based VLAN. P ort T ype a port number to be inclu ded in this protocol based VLAN. Th[...]

Chapter 9 VLAN XGS-4728F User’s Guide 109 9.10 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. Foll ow these steps using the screen below: 1 Activ ate this protocol based VLAN. 2 T ype the port number you w ant to include in this protocol based VLAN. T ype 1 . 3 Give this protocol-b[...]

Chapter 9 VLAN XGS-4728F User’s Guide 11 0 9.1 1 Port-based VLAN Setup P or t-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. P ort-based VLANs require all owed outgoing ports to be defined for each port. Therefore, if y ou wish to allow t wo subscr iber ports to talk to [...]

Chapter 9 VLAN XGS-4728F User’s Guide 111 The following screen shows users on a port-based, all- connected VLAN configu ration. Figure 55 Advanced Application > VLAN > Po rt Based VLAN Setup (All Connected)[...]

Chapter 9 VLAN XGS-4728F User’s Guide 11 2 The following screen shows users on a port-based, port -isolated VLAN configu ration. Figure 56 Advanced Application > VLAN: Port Ba se d VLAN Setup (Port Isolation)[...]

Chapter 9 VLAN XGS-4728F User’s Guide 11 3 The following table describes t he labels in this screen. T able 21 Advanced Application > VLAN: Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose All connected or Port isolation . All connected means all ports can communicate with each other , that is, there are no virtual LANs. All incom[...]

Chapter 9 VLAN XGS-4728F User’s Guide 11 4[...]

XGS-4728F User’s Guide 11 5 C HAPTER 10 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 10.1 Overview This chapter discusses how to configure forw arding rules based on MAC addresses of devices on your network. 10.2 Configuring S t atic MAC Forwarding A static MAC address is an address that has been manually[...]

Chapter 10 St at ic MAC Fo rw ard Setup XGS-4728F User’s Guide 11 6 Click Adv anced Applications > Static MAC Forwarding in the navigati on panel to display the configur ation screen as shown. Figure 57 Advanced Application > S tatic MAC Forwarding The following table describes t he labels in this screen. T able 22 Advanced Application >[...]

Chapter 10 Static MAC Fo rward Setup XGS-4728F User’s Guide 11 7 P ort This field displays the port w here the MAC address sh own in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. T able 22 Advanced Application > S t atic MAC Forwar[...]

Chapter 10 St at ic MAC Fo rw ard Setup XGS-4728F User’s Guide 11 8[...]

XGS-4728F User’s Guide 11 9 C HAPTER 11 Static Multicast Forward Setup Use these screens to configure stat ic multicast add ress forwarding . 1 1.1 S t atic Multicast Forwarding Overview A multicast MAC address is the MAC addres s of a member of a multicast group. A static multicast address is a multicas t MAC address that has been manually enter[...]

Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up XGS-4728F User’s Guide 120 connected to port 3. Fi gure 60 shows fr ames being forwarded to ports 2 and 3 within VLAN group 4. Figure 58 No S tatic Multicast Forwardin g Figure 59 S tatic Multicast Forwarding to A Sin gle Port Figure 60 S tatic Multicast Forwardin g to Multiple Ports 1 1.2 Confi[...]

Chapter 11 Static Mu lticast Forward Setup XGS-4728F User’s Guide 121 Click Advanced Application > Static Multicast Forwarding to display the configurati on screen as shown. Figure 61 Advanced Application > S tat ic Multicast Forwarding The following table describes t he labels in this screen. T able 23 Advanced Application > S t atic Mu[...]

Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up XGS-4728F User’s Guide 122 Active This field displays whether a static multicast MAC address forwarding rule is active ( Yes ) or not ( No ). Y ou may tempor arily deactivate a rule without deleting it. Name This field displays the descriptive name for identification purposes f or a static multi[...]

XGS-4728F User’s Guide 123 C HAPTER 12 Filtering This chapter discusses MAC address port fil tering. 12.1 Configure a Filtering Rule Configure the S witch to filter tr affic base d on the tr affic’ s source, destinat ion MAC addresses and/or VLAN group (ID). Click Advanced Application > Filtering in the navigation panel to display the screen[...]

Chapter 12 Filtering XGS-4728F User’s Guide 124 Action Select Discard source to drop frames from th e source MAC address (specified in the MAC field). The Switch can still send frames to the MAC address. Select Discard destination to drop frames to the destination MAC address (specified in the MAC address). The Switch can still receive frames ori[...]

XGS-4728F User’s Guide 125 C HAPTER 13 Spanning Tree Protocol The Switch suppor ts Spanning T ree Protocol (STP), R apid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protoc ol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning T ree Protocol • IEEE 802.1w Rapid Spanning T ree Protocol • IEEE 802.1s Multiple S[...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 126 P ath cost is the cost of tr ansmitting a frame onto a LAN through that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost. On each bridge, the bridge communicates wi th the root throug h the[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 127 13.1.3 STP Port S t ates STP assigns fiv e port states to eliminate packet loopi ng. A bridge port is not allowed to go direct ly from blocking state to forw arding state so as to eliminate transient loops. 13.1.4 Multiple RSTP MRSTP (Multiple RSTP) is Z yXEL ’s propri etar y feature[...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 128 Note: Each port can belong to one STP tree only . 13.1.5 Multiple STP Multiple Spanning T ree Protocol (IEEE 802.1s) is backwards c ompatible with STP/ RSTP and addresses the limit ations of existing spanning tree prot ocols (STP and RSTP) in networks to include the following features[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 129 With MSTP , VLANs 1 and 2 are mapped to di fferent spanning t rees in the network. Thus traf fic from the two VLANs tr avel on different paths. The following fig ure shows the network example using MSTP . Figure 65 MSTP Network Example 13.1.5.2 MST Region An MST region is a logic al gr[...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 130 The following figure shows an example wh ere there are two MST regions. R egions 1 and 2 hav e 2 spanning tree instances. Figure 66 MSTIs in Dif ferent Regions 13.1.5.4 Common and Inter nal Sp anning T ree (CIST) A CIST represents the connecti vit y of the entire network and it is equ[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 131 13.2 S p anning T ree Protocol St atus Screen The Spanning T ree Protocol status scree n changes depending on what standard you choose to implement on your network. Click Advanced Application > Spanning Tree Protocol to see the screen as shown. Figure 68 Advanced Application > S [...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 132 The following table describes t he labels in this screen. 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 125 for more informat ion on RS TP . Click RSTP in the Advanced Application > Spanning Tree Proto col screen[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 133 The following table describes t he labels in this screen. T able 28 Advanced Application > S p anning T ree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 71 on page 134 ). Active Select this check box to activ ate RSTP . Clear[...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 134 13.5 Rapid S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Pro tocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 125 for more information on RSTP . Note: This screen is only available af ter you activate [...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 135 The following table describes t he labels in this screen. T able 29 Advanced Application > S p anning T ree Protocol > S tatus: RSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you w ant to activate. Click RSTP to edit RSTP settings on the Switch[...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 136 13.6 Configure Multiple Rapid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanced Application > Spanning Tree Proto col screen. Se e Section 13.1 on page 125 for more information on MRSTP . Figure 72 Advanced Application > S panning T ree Protocol > MR[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 137 Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch. If all switches have the same priority , the switch with the lowest MAC address will the n bec[...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 138 13.7 Multiple Rapid S p anning T ree Protocol S t atus Click Advanced Applicat ion > Spanning Tree Protoc ol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 125 for more information on MRSTP . Note: This screen is only available af ter y[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 139 Hello Time (second) This is the time interval (in seconds) at wh ich the root switch tr ansmits a configuration message. The root br idge determines Hello Time, Max Age and Forw arding Delay . Max Age (second) This is the maximum time (in seconds) a switch can wait without receiving a [...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 140 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1.5 on page 128 for more information on MSTP . Figure 74 Advanced Application > S panni ng T ree Protocol > MSTP[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 141 The following table describes t he labels in this screen. T able 32 Advanced Application > S p anning T ree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 75 on page 143 ). Active Select this check box to activ ate MSTP on the [...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 142 Bridge Priority Set the priority of the Switch for the specific spanning tree instance. The lower the number , t he more likely the Switch will be chosen as the root bridge within the spanning tree instance. Enter priority values between 0 and 61440 in increments of 4096 (thus valid v[...]

Chapter 13 Spanning Tr ee Protocol XGS-4728F User’s Guide 143 13.9 Multiple S p anning T ree Protocol St atus Click Advanced Applicat ion > Spanning Tree Protoc ol in the navigation panel to display the status screen as shown next. See Section 13.1.5 on page 128 for more information on MSTP . Note: This screen is only available af ter you acti[...]

Chapter 13 Spanning Tr ee Protoc ol XGS-4728F User’s Guide 144 Bridge Root refers to the base of the spanning tree (the root bridge). Our Bridge is this Switch. This Switch ma y also be the root bridge. Bridge ID This is the unique identifier fo r this bridge, consisting of bridge priority plus MAC ad dress. This ID is t he same for Root and Our [...]

XGS-4728F User’s Guide 145 C HAPTER 14 Bandwidth Control This chapter shows you how y ou can cap the maximum bandwidth using the Bandwidth Control screen. 14.1 Bandwid th Control Overview Bandwidth control means defining a maxi mum allowab le bandwidth for incoming and/or out-going tr affic flows on a port. 14.1.1 CIR and PIR The Committed Inform[...]

Chapter 14 Bandwidth Control XGS-4728F User’s Guide 146 14.2 Bandwid th Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 76 Advanced Application > Bandwid th Control The following table describes t he related labels in this screen. T able 34 Advanced Applicatio[...]

Chapter 14 Band wid th Contr ol XGS-4728F User’s Guide 147 Active Select this check bo x to activate egress r ate limits on this port. Egress Rate Specify the maximum bandwidth allowed in kilobits per second (Kbps) for the out -going traffic flow on a port. Apply Click Apply to save your changes to the Switch’ s run-time m emory . The Switch lo[...]

Chapter 14 Bandwidth Control XGS-4728F User’s Guide 148[...]

XGS-4728F User’s Guide 149 C HAPTER 15 Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature. 15.1 Broadcast S torm Control Setup Broadcast storm control limits the number of broadcast, multicast and destinat ion lookup failure (DLF ) packets the S witch re ceives per second on the port[...]

Chapter 15 Broadcast Storm Control XGS-4728F User’s Guide 150 The following table describes t he labels in this screen. T able 35 Advanced Application > Broadcast S torm Control LABEL DESCRIPTION Active Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature. P ort This field displays a[...]

XGS-4728F User’s Guide 151 C HAPTER 16 Mirroring This chapter discusses port mirroring s etup screens. 16.1 Port Mirroring Setup P o r t m i r r o r i n g a l l o w s y o u t o c o p y a t r a f f i c f l o w t o a m o n i t o r p o r t ( t h e p o r t y o u c o p y the traffic to) in order th at you ca n examine th e traffic f r om th e m o ni t[...]

Chapter 16 M irr or in g XGS-4728F User’s Guide 152 The following table describes t he labels in this screen. T able 36 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this check bo x to activate port mirroring on the Switch. Clear this check box to disable the feature. Monitor Po r t The monitor port is the port you copy the [...]

XGS-4728F User’s Guide 153 C HAPTER 17 Link Aggregation This chapter shows you how t o logically aggr egate phy sical links t o form one logical, higher-bandwid th link. 17.1 Link Aggregation Overview Link aggregation (trunking) is the groupi ng of physical por ts into one log i ca l higher-capacity link. Y ou may want to trunk ports i f for exam[...]

Chapter 17 Li nk Aggr eg a tion XGS-4728F User’s Guide 154 When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote en d of a li nk to establish trunk groups. LACP also allows port redundancy , that is, if an operational port fails, then one of the “standby” ports become operational wi[...]

Chapter 17 L ink Aggr eg a tion XGS-4728F User’s Guide 155 17.3 Link Aggregation S t atus Click Advanced Application > Link Aggregation in the navigation panel. The Link Aggregation Status screen d isplays by default. See Sect ion 17.1 on pa ge 153 for more information. Figure 79 Advanced Application > Link Aggregation S t atus The followin[...]

Chapter 17 Li nk Aggr eg a tion XGS-4728F User’s Guide 156 Criteria This shows the outgoing tr affic distribution algorithm used in this trunk group. P ackets from the same source and/or to the same destination are sent over the same link within the trun k. src-mac means the Switch distributes traffic based on the packet’ s source MAC address. [...]

Chapter 17 L ink Aggr eg a tion XGS-4728F User’s Guide 157 17.4 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 153 for more informat ion on link aggre gation. Figure 80 Advanced Application > Link Aggreg ation > Link Aggregati[...]

Chapter 17 Li nk Aggr eg a tion XGS-4728F User’s Guide 158 Criteria Sele ct the outgoing traffic distribu tion type. Packets fro m the same source and/or to the same destination are sent ov er the same link within the trunk. By default, the Switch uses the src-dst-mac distribution type. If the Switch is behind a router , the packet’s destinatio[...]

Chapter 17 L ink Aggr eg a tion XGS-4728F User’s Guide 159 17.5 Link Aggregation Control Protocol Click in the Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to displa y the screen shown next. See Section 17.2 on page 153 for more infor mation on dynamic link aggregation. Figure 81 Advanced Application > Lin[...]

Chapter 17 Li nk Aggr eg a tion XGS-4728F User’s Guide 160 17.6 S t atic T runking Example This example shows you how to create a static port trunk group for ports 2-5. Syst e m Priority LACP system priority is a number be tween 1 and 65,535. The switch with the lowest system priority (and lowest port number if system priority is the same) become[...]

Chapter 17 L ink Aggr eg a tion XGS-4728F User’s Guide 161 1 Make your physical connections - make sure that the ports that you w ant to belong to the trunk group are connected to the same destina tion. The followin g figure shows ports 2-5 on swit ch A connected to switch B . Figure 82 T runking Example - Physical Connections 2 Configure static [...]

Chapter 17 Li nk Aggr eg a tion XGS-4728F User’s Guide 162[...]

XGS-4728F User’s Guide 163 C HAPTER 18 Port Authentication This chapter describes the IEEE 802. 1x and MAC authentication methods. 18.1 Port Authentication Overview P ort authentication is a w ay to v alidate access to ports on the Switch to clients based on an external server (authentic ation server). The S witch supports the following methods f[...]

Chapter 18 Port Authentication XGS-4728F User’s Guide 164 request to a RADIUS server . The RADIUS se rver v alidates whether this client is allowed access to the port. Figure 84 IEEE 802.1x Authentication Process 18.1.2 MAC Authentication MAC authentication works in a very sim ilar way to IEEE 802.1x authentication. The main difference is that th[...]

Chapter 18 Port Authentication XGS-4728F User’s Guide 165 client connecting to a port on the Switch along with a password configured specifically for MAC authenti cation on the Switc h. Figure 85 MAC Authentication Process 18.2 Port Authentication Configuration T o enable port authentication, first activ a te the port authentication method(s) y o[...]

Chapter 18 Port Authentication XGS-4728F User’s Guide 166 18.2.1 Activate IEEE 802.1x Security Use this screen to activ ate IEEE 802.1x security . In the Port Authentication screen click 802. 1x to displa y the configurat ion screen as shown. Figure 87 Advanced Application > Port Authentication > 802.1x The following table describes t he la[...]

Chapter 18 Port Authentication XGS-4728F User’s Guide 167 18.2.2 Activate MAC Authentication Use this screen to activ ate MAC authentication. In t he Port Authentication screen click MAC Authentication to di splay the configur ation screen as shown. Figure 88 Advanced Application > Port Authentication > MAC Authentication The following tabl[...]

Chapter 18 Port Authentication XGS-4728F User’s Guide 168 P assword T ype the password the Switch sends along with the MAC address of a client for authentication with the RADIUS server . Y ou can enter up to 32 printable ASCII characters. Timeout Specify the amount of time before the Switch allows a client MAC address that fails authentication to[...]

XGS-4728F User’s Guide 169 C HAPTER 19 Port Security This chapter shows you how t o set up port securit y . 19.1 About Port Security P ort security allows only packet s with dynamically learned MAC addresses and/or configured static MAC ad dresses to pass throug h a port on the S witch. Th e Switch can learn up to 16K MAC addresses in total with [...]

Chapter 19 Port Secu rity XGS-4728F User’s Guide 170 19.2 Port Security Setup Click Advanced Application > Port Security in the navigati on panel to displa y the screen as shown. Figure 89 Advanced Application > Port Security The following table describes t he labels in this screen. T able 44 Advanced Application > Port Security LABEL DE[...]

Chapter 19 Port Security XGS-4728F User’s Guide 171 19.3 VLAN MAC Address Limit Use this screen to set t he MAC address le arning limit on per-port and per- VLAN basis. Click VLAN MAC Address Lim it in the Advanced Application > Port Security screen to display the screen as shown. Figure 90 Advanced Application > Port Secu rity > VLAN MA[...]

Chapter 19 Port Secu rity XGS-4728F User’s Guide 172 The following table describes t he labels in this screen. T able 45 Advanced Application > Port Secu rity > VLAN MAC Address Limit LABEL DESCRIPTION Active Select this option to activ ate this rule. P ort Enter the num ber of the port to which this rule is applied. VID Enter the VLAN iden[...]

XGS-4728F User’s Guide 173 C HAPTER 20 Classifier This chapter introduces and shows you how to configure the packet classif ier on the Switch. 20.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay , and the networking me thods used to control the use of bandwidth. Wit[...]

Chapter 20 Classifier XGS-4728F User’s Guide 174 Click Advanced Application > Classifier in the navigation panel to display the configurati on screen as shown. Figure 91 Advanced Applicatio n > Classifier The following table describes t he labels in this screen. T able 46 Advanced Application > Classifier LABEL DESCRIPTION Active Select [...]

Chapter 20 Classifier XGS-4728F User’s Guide 175 Layer 2 Specify the fields below to configure a layer 2 classifier . VLAN Select Any to classify traffic from any VLAN or select the second option and specify the source VLAN ID in the field provided. Priority Select Any to classify traffic from an y priority level or select the second option and s[...]

Chapter 20 Classifier XGS-4728F User’s Guide 176 20.3 V iewing and Editing Classifier Configuration T o view a summary of t he classifier configur ation, scroll down to the s ummary table at the bottom of the Classifier screen. T o change the settings of a rule, cl ick a number in the Index field. Note: When two rules conflict with each other , a[...]

Chapter 20 Classifier XGS-4728F User’s Guide 177 The following table shows some other common Ethernet types and the corresponding protocol number . Some of the most common IP ports are: Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. T able 48 Common Ethernet Types and [...]

Chapter 20 Classifier XGS-4728F User’s Guide 178 20.4 Classifier Example The following screen shows an example of conf iguring a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. Figure 93 Classifier: Example After you hav e configured a classifier , you can configure a poli cy to define action(s) on the classif[...]

XGS-4728F User’s Guide 179 C HAPTER 21 Policy Rule This chapter shows you how t o configure policy rules. 21.1 Policy Rules Overview A classifier dist inguishes traffic into flows based on the configured criteria (refer to Chapter 20 on page 173 for more information). A policy rule ensures that a tr affic flow gets the requested treatment in the [...]

Chapter 21 Policy Rule XGS-4728F User’s Guide 180 The DSCP value determines the forwarding behavior , the PHB (Per-Hop Behavior), that each pack et gets across the DiffSer v network. Based on the marking rule, different kinds of tr affic can be marked for different kinds of forwarding. R esources can then be allocated according to the DS CP v alu[...]

Chapter 21 Policy Rule XGS-4728F User’s Guide 181 Click Advanced Applications > Policy Rule in the navigation panel t o display the screen as shown. Figure 94 Advanced Application > Policy Rule[...]

Chapter 21 Policy Rule XGS-4728F User’s Guide 182 The following table describes t he labels in this screen. T able 50 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy . Name Enter a descriptive name for identification purposes. Classifier(s) This field dis plays the active classifier(s) you co[...]

Chapter 21 Policy Rule XGS-4728F User’s Guide 183 21.3 V iewing and Editin g Policy Configuration T o view a summary of t he classifier configur ation, scroll down to the s ummary table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field. Figure 95 Advanced Application > Policy Rule: Summary[...]

Chapter 21 Policy Rule XGS-4728F User’s Guide 184 The following table describes t he labels in this screen. T able 51 Policy: Summary Table LABEL DESCRIPTION Index This field displa ys the policy index num ber . Click an index number to edit the policy . Active This fie ld displays Ye s when policy is activated and No when is it deactivated. Name[...]

Chapter 21 Policy Rule XGS-4728F User’s Guide 185 21.4 Policy Example The figure below shows an example Policy screen where y ou configure a policy to limit bandwidth and discard out -of-profi le traffic on a tr affic flow classified using the Example classifier (r efer to Section 20.4 on page 178 ). Figure 96 Policy Example EXAMPLE[...]

Chapter 21 Policy Rule XGS-4728F User’s Guide 186[...]

XGS-4728F User’s Guide 187 C HAPTER 22 Queuing Method This chapter introduces the queuing methods supported. 22.1 Queuing Method Overview Queuing is us ed to help solve performa nce degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffi c. See al so Priority Queue Assignment[...]

Chapter 22 Q ue u ing Me tho d XGS-4728F User’s Guide 188 2 ( Weight -1) x 10 KB If the weight setting is 5, the actual quantum guaranteed to the associated queue would be as fol lows: 2 4 x 10KB = 160 KB 22.1.3 W eighted Round Robin Scheduling (WRR) Ro u nd Robin Scheduli ng services queues on a rotating basi s and is activ ated only when a port[...]

Chapter 22 Queuing Me thod XGS-4728F User’s Guide 189 22.2 Configuring Queuing Click Advanced Application > Queuing Method in the na vigation panel. Figure 97 Advanced Application > Que uing Method The following table describes t he labels in this screen. T able 52 Advanced Application > Queuing Method LABEL DESCRIPTION P ort This label [...]

Chapter 22 Q ue u ing Me tho d XGS-4728F User’s Guide 190 Method Select SPQ (Strictly Prior ity Queuing), WFQ (Weighted Fair Queuing) or WRR (Weighted Round Robin) . Strictly Priority services queues based on priority only . When the highest priority queue empties, traffic on the next highest-priority queue begins. Q7 has the highest priority and[...]

XGS-4728F User’s Guide 191 C HAPTER 23 VLAN Stacking This chapter shows you how t o configure VLAN stacking on your Switch. See the chapter on VLANs for more background information on Virtual LAN 23.1 VLAN S t acking Overview A service provider c an use VLAN stacking to allow i t to distinguish multiple customers VLANs, even those with the sa me [...]

Chapter 23 VLAN Stacking XGS-4728F User’s Guide 192 distinguish customer A and tag 48 to disti nguish customer B at ed ge device 1 and then stripping those tags at edge device 2 as the data frames leav e the network. Figure 98 VLAN S tacking Example 23.2 VLAN S t acking Port Roles Each port can hav e three VLAN stacking “roles” , Nor mal , Ac[...]

Chapter 23 VLAN Stacking XGS-4728F User’s Guide 193 23.3 VLAN T ag Format A VLAN tag (service pro vider VLAN st acki ng or customer IEEE 802.1Q) consists of the following th ree fields. Type is a standard Ethernet type code id entifying the fr ame and indicates that whether the frame carries IEEE 802.1Q tag information. SP TPID (Service Provider [...]

Chapter 23 VLAN Stacking XGS-4728F User’s Guide 194 Configure the fields as highlighted in the Switch VLAN Stacking screen. 23.4 Configuring VLAN S t acking Click Advanced Applications > VLAN Stacking to disp l ay the sc re en as shown. Figure 99 Advanced Application > VLAN S t acking T able 54 Single and Double Tagged 802.11Q Frame Format [...]

Chapter 23 VLAN Stacking XGS-4728F User’s Guide 195 The following table describes t he labels in this screen. 23.4.1 Port-based Q-in-Q Port -based Q-in-Q lets t he Switc h tre at a ll frames receiv ed on the same port as the same VLAN flows and add the same ou ter VLAN tag to them, even they have different customer VLAN IDs. T able 56 Advanced Ap[...]

Chapter 23 VLAN Stacking XGS-4728F User’s Guide 196 Click Port-based QinQ in the Advanced Application > VLAN Stacking screen to display the screen as shown. Figure 100 Advanced App lication > VLAN S t acking > Port-based QinQ The following table describes t he labels in this screen. 23.4.2 Selective Q-in-Q Selective Q-in-Q is VLAN-based.[...]

Chapter 23 VLAN Stacking XGS-4728F User’s Guide 197 Click Selective QinQ in the Adv anced Ap plicati on > VLAN Stacking screen to display the s creen as shown. Figure 101 Advanced Applicatio n > VLAN S t acking > Selective QinQ The following table describes t he labels in this screen. T able 58 Advanced Application > VLAN Stacking >[...]

Chapter 23 VLAN Stacking XGS-4728F User’s Guide 198 Priority This is the service provider’s priority lev el in the packets. Delete Check the rule(s) that you want to remove in the Delete c ol u m n a n d t h e n c l i c k the Delete button. Cancel Click Cancel to clear the Delete check boxes. T able 58 Advanced Application > VLAN St acking &[...]

XGS-4728F User’s Guide 199 C HAPTER 24 Multicast This chapter shows you how t o configure various multicast features. 24.1 Multicast Overview T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast deliv ers IP packets to just a group [...]

Chapter 24 Multicast XGS-4728F User’s Guide 200 24.1.3 IGMP Snooping The Switch can passively snoop on IGMP pack ets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP pack ets pa ssing through it, picks out the group registration informa t ion , and configu res mult[...]

Chapter 24 Multicast XGS-4728F User’s Guide 201 24.3 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to display the screen as shown. See Section 24.1 on page 199 for more i nformation on multicasting. Figure 103 Advanced App lication > Multicast > Multicast Setting The following table describes t he [...]

Chapter 24 Multicast XGS-4728F User’s Guide 202 IGMP Filtering Select Active to enable IGMP filtering to control w hich IGMP gr o ups a subscriber on a port can join. Note: If you enable IGMP filterin g, you must create a nd assign IGMP filtering profiles for the port s that you want to allow to join multicast group s. Unknown Multicast Frame Spe[...]

Chapter 24 Multicast XGS-4728F User’s Guide 203 24.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the Group Limited Select this option to limit the number of multicast groups this port is allowed to join. Max Group Num. Enter[...]

Chapter 24 Multicast XGS-4728F User’s Guide 204 screen as shown. See Section 24.1.4 on page 200 for more information on IG MP Snooping VLAN. Figure 104 Advanced App lication > Multicast > Multicast Se tting > IGMP Snooping VLAN The following table describes t he labels in this screen. T able 61 Advanced Application > Multicast > Mu[...]

Chapter 24 Multicast XGS-4728F User’s Guide 205 24.5 IGMP Filtering Profile An IGMP filter in g profile sp ec if ies a range of multic as t groups th at cl ie nts connected to the Switch are able to join. A profile contains a r ange of multicast IP addresses which you w ant cli ents to be able to join. Profiles are assigned to ports (in the Multi[...]

Chapter 24 Multicast XGS-4728F User’s Guide 206 Click Advanced Applications > Multicast > Multicast Setting > IGMP Filtering Profile link to display th e sc re en as shown. Figure 105 Advanced App lication > Multicast > Multicast Setting > IGMP Filtering Profile The following table describes t he labels in this screen. T able 62[...]

Chapter 24 Multicast XGS-4728F User’s Guide 207 24.6 MVR Overview Multicast VLAN R egist ration (MVR) is designed for applications (such as Media-on- Demand ( MoD)) th at use mul ticast traffi c across an Ethernet ring-based ser vice provider network. MVR allows one single multicast VLAN t o be shared among different subscriber VLANs on the netwo[...]

Chapter 24 Multicast XGS-4728F User’s Guide 208 Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associated multicast group . 24.6.2 MVR Modes Y ou can set your Switch to operate in either dynamic or compatible mode. In dynamic mode, the Switc h sends IGMP leav e and join reports to the other multi[...]

Chapter 24 Multicast XGS-4728F User’s Guide 209 24.7 General MVR Configuration Use the MVR screen to create multicast VL ANs and select the receiv er port(s) and a source port for each multicast VLAN. Click Advanced Applications > Multicast > Multicast Setting > MVR link to disp l ay th e sc reen as shown next. Note: Y ou can create up t[...]

Chapter 24 Multicast XGS-4728F User’s Guide 210 Multicast VLAN ID Enter the VLAN ID (1 to 40 94) of the multicast VLAN. 802.1p Priority Select a priority level (0-7) with which the Switch replaces the priority in outgoing IGMP control packets (bel onging to this multicast VLAN). Mode Spe cify the MVR mode on the Switch. Choices are Dynamic and Co[...]

Chapter 24 Multicast XGS-4728F User’s Guide 21 1 24.8 MVR Group Configuration All source ports and receiv er ports belo nging to a multicast group can recei ve multicast data sent to thi s multicast group. Configure MVR IP mul ticast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. Note: A port can[...]

Chapter 24 Multicast XGS-4728F User’s Guide 212 24.8.1 MVR Configuration Example The following figure shows a network ex ample where ports 1, 2 and 3 on the Switch bel ong to VLAN 1. In addition, po rt 7 belongs to the mul ticast group with VID 200 to receive multi cast traffic ( the News and Movie channels) from the remote streaming media server[...]

Chapter 24 Multicast XGS-4728F User’s Guide 213 T o configure the MVR settings on the S w itch, create a mul ticast group in the MVR screen and set the receiv er and source ports. Figure 1 1 1 MVR Configuration Example T o set the Switc h to forward the multicast group traffic to the subscribers, configure multicast group sett ings in the Group C[...]

Chapter 24 Multicast XGS-4728F User’s Guide 214 following figure shows an exa mpl e where two multicast groups ( News and Movie ) are configured for the multicast VLAN 200. Figure 1 12 MVR Group Configuration Example Figure 1 13 MVR Group Configuration Example EXAMPLE EXAMPLE[...]

XGS-4728F User’s Guide 215 C HAPTER 25 AAA This chapter describes how to config ure authentication, authorization and accounting se ttings on th e Switch . 25.1 Authentication, Authorization and Accounting (AAA) Authentication is the process of determin ing who a user is and validating access to the Switch. The Switch can authenticate users who t[...]

Chapter 25 AAA XGS-4728F User’s Guide 216 25.1.2 on page 216 ) as external authentication, authorization and accounting servers. Figure 1 14 AAA Server 25.1.1 Local User Account s By storing user profiles locally on the S wit ch, your Swit ch is able to authenticate and authorize users without inter acting wi th a network AAA server . However , t[...]

Chapter 25 AAA XGS-4728F User’s Guide 217 Click Advanced Application > AAA in the navigation panel to displa y the screen as shown. Figure 1 15 Advanced Application > AAA 25.2.1 RADIUS Server Setup Use this screen to configure yo ur RADIUS server settings. See Section 25.1.2 on page 216 for more information on RADIUS servers and Sec tion 25[...]

Chapter 25 AAA XGS-4728F User’s Guide 218 The following table describes t he labels in this screen. T able 66 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure your RADIUS authentication settings. Mode This field only applies if you configure multiple RADIUS servers. Selec[...]

Chapter 25 AAA XGS-4728F User’s Guide 219 25.2.2 T A CACS+ Server Setup Use this screen to configure yo ur T ACACS+ server settings. See Section 25.1. 2 on page 216 for more information on T ACACS+ se rvers. Click on the TACACS+ Server Setup link in the Authentication and Accountin g screen to view the screen as shown. Figure 1 17 Advanced Applic[...]

Chapter 25 AAA XGS-4728F User’s Guide 220 The following table describes t he labels in this screen. T able 67 Advanced Application > AAA > T ACACS+ Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure y our T ACACS+ authentication settings. Mode This field is only v alid if you configure multiple T ACACS + serv[...]

Chapter 25 AAA XGS-4728F User’s Guide 221 25.2.3 AAA Setup Use this screen to configure authentication , authorization and accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 1 18 Advanced Application > AAA > AAA Setup Shared Secret Specify a password (up to 32 alphanumeric ch[...]

Chapter 25 AAA XGS-4728F User’s Guide 222 The following table describes t he labels in this screen. T able 68 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authentication Use this section to specify the methods used to authenticate users accessing the Switch. Privilege Enable These fields specify which database the Switch should [...]

Chapter 25 AAA XGS-4728F User’s Guide 223 T ype Set whether the Switch prov ides the following services to a user . • Exec : Allow an administrator which logs in the S witch through T elnet or SSH to hav e different access privilege level assigned via the external server . • Dot1x : Allow an IEEE 802.1x client to have differe nt bandwidth lim[...]

Chapter 25 AAA XGS-4728F User’s Guide 224 25.2.4 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access d evice (for example, the Switch). A company can create V endor Specific Attributes (VSAs) to expand the function ality of a RADIUS serv er . The Swit[...]

Chapter 25 AAA XGS-4728F User’s Guide 225 25.2.5 T unnel Protocol Attribute Y ou can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN settings are fixed and untagged. This will also set the port’ s VID[...]

Chapter 25 AAA XGS-4728F User’s Guide 226 25.3 Supported RADIUS Attributes Remote A uthentication Dial- In User Servic e (RADIUS) attributes are data used to define specific authenticati on, and accounti ng elements in a user profile, which is stored on the RADIUS server . This section lists the RADIUS attributes supported by the Switch. Refer t [...]

Chapter 25 AAA XGS-4728F User’s Guide 227 - This value is se t t o Ethernet(15) on the Switch. Calling-Stati on-Id Frame-MTU EAP-Message State Message-Authenticator 25.3.2 Attributes Used for Accounting The following sections list the attributes sent from the Switch to the RADIUS server when performi ng authenti ca tion. 25.3.2.1 Attributes Used [...]

Chapter 25 AAA XGS-4728F User’s Guide 228 25.3.2.3 Attributes Used for Ac counting IEEE 802.1x Event s The attributes are listed in the following table along with the ti me of the session they are sent: T able 72 RADIUS Attributes - Exec Events via Telnet/SSH ATTRIBUTE START INTERIM-UP DATE STOP User-Name DD D NAS-Identifier DD D NAS-IP- Address [...]

Chapter 25 AAA XGS-4728F User’s Guide 229 Acct- Input-Gigawords DD Acct-Output - Gigawords DD T able 73 RADIUS Attributes - Exec Events via Console ATTRIBUTE START INTERIM-UP D ATE STOP[...]

Chapter 25 AAA XGS-4728F User’s Guide 230[...]

XGS-4728F User’s Guide 231 C HAPTER 26 IP Source Guard Us e I P s o ur ce g ua r d t o f i lt er unauthorized DHC P and AR P packets in your network. 26.1 IP Source Guard Overview IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in yo ur network. A binding contains these key attribut es:[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 232 26.1.1 DHCP Snooping Overview Use DHCP s nooping t o filter u nau th orized DHCP packets on the netwo rk and to build the binding tab le dynamically . This can prevent clients from getting IP addresses from unauthorized DHCP servers. 26.1.1.1 T rusted vs. Untrusted Port s Every port is either[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 233 Y ou can configure the nam e and location of the file on the external TF TP server . The file has the following format: Figure 1 19 DHCP Snooping Dat abase File Format The <initial-checksum> helps distinguis h between the bindings in the latest update and the bindings from previous upda [...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 234 3 Configure trusted and untrusted ports, an d specify the maximum number of DHCP packets t hat each port can receive per second. 4 Configure static bindings. 26.1.2 ARP Inspection Overview Use ARP inspection to filter unauthorized ARP packets on the network. This can prevent many kinds of man[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 235 • They ap pe ar only in the ARP Inspection screens and commands, not in the MAC Address Filter screens and commands. 26.1.2.2 T rusted vs. Untrusted Port s Every port is either a trusted port or an untrusted p o rt for A R P inspecti on. Th is setting is independent of the t rusted/untrusted[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 236 the bindings by snooping DHCP packets (dynami c bindings) and from informati on provided manually by administr ators (static bindings). T o open this screen, click Advanced Application > IP Source Guard . Figure 121 IP Source Guar d The following table describes t he labels in this screen.[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 237 new static binding replaces the origin al one. T o open this screen, click Advanced Application > IP Source Guard > Static Binding . Figure 122 IP Source Guar d S tatic Binding The following table describes t he labels in this screen. T able 75 IP Source Guard Static Binding LABEL DESCRI[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 238 26.4 DHCP Snooping Use this scre en to look at various statis tics about the DHCP snooping database. T o open this screen, click Advanced Application > IP Source Guard > DHCP Snooping . Figure 123 DHCP Snooping Delete Select this, and click Delete to remove the specified entry . Cancel [...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 239 The following table describes t he labels in this screen. T able 76 DHCP Snooping LABEL DESCRIPTION Database Status This section displays the current settings for the DHCP snooping database. Y ou can con figure them in the DHCP S nooping Configure screen. See Section 26.5 on page 241 . Agent U[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 240 Successful transfers This field displays the number of times the Switch read bindings from or updated the bindings in the DHC P snooping database successfully . F ailed transfers This field displays the number of times the Switch was unable to read bindings from or update th e bindings in the[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 241 26.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and conf igure the DHCP snooping database. Th e DHCP snooping databa se stores the current bindings on a secure, external TFTP s[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 242 The following table describes t he labels in this screen. T able 77 DHCP Snooping Configure LABEL DESCRIPTION Active Sele ct this to enable DHCP snooping on the Switch. Y ou still ha ve to enable DHCP snooping on specific VLAN and specif y trusted ports. Note: The Switch will drop all DHCP re[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 243 26.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are trusted or untrusted ports for DHCP snooping. Note: The Switch will drop all DHCP requests if you enable DHCP snooping and there are no trusted ports. Y ou can also specify the maximum number for DHCP packets t ha[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 244 The following table describes t he labels in this screen. 26.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Switch adds DHCP rela y agent option 82 informati on ( Chapt er 37 on page 307 ) to DHCP requ ests that the Swit[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 245 open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN . Figure 126 DHCP Snooping VLAN Configure The following table describes t he labels in this screen. T able 79 DHCP Snooping VLAN Configure LABEL DESCRIPTION Show VLAN Use this section [...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 246 26.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were c reated because the Switch identified an unau thorized ARP pack et. When the Switch identifies an unauthorized ARP packet, it automatically cr eates a MAC addres s filter to block tr aff[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 247 26.6.1 ARP Inspection VLAN St atus Use this screen to look at various statistics about ARP p ackets in each VL AN. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status . Figure 128 ARP Inspection VL AN S t atus The following table describes[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 248 26.6.2 ARP Inspection Log St atus Use this scre en t o look at lo g m es s a g e s th at we re generated by ARP pac kets and that have not been sent to the syslog server yet. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status . Figure 129[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 249 26.7 ARP Inspection Configure Use this screen to enable ARP inspection on the Swit ch. Y ou can also configure the length of time the Switch stores reco rds of discarded ARP pack ets and global Sender IP This field displays the source IP address of the ARP packet. Num Pkts This field displays [...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 250 settings for the ARP inspection log. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure . Figure 130 ARP Inspection Co nfigure The following table describes t he labels in this screen. T able 83 ARP Inspection Configure LABEL DESCRIPTION A[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 251 26.7.1 ARP Inspection Port Configure Use this screen to specify whether port s are trusted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at which the Sw itch receives Syslog r ate T ype the maxi mum number of syslog messages the Switch can send to the syslog ser[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 252 ARP packets on each untrusted po rt. T o open this screen, click Advanc ed Application > IP Source Guard > ARP Inspection > Configure > Port . Figure 131 ARP Inspection Po rt Configure The following table describes t he labels in this screen. T able 84 ARP Inspection Port Configur[...]

Chapter 26 IP Source Guard XGS-4728F User’s Guide 253 26.7.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specif y when the Switch gener ates log messages for receiv ing ARP packets from each VLAN. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure[...]

Chapter 26 IP Source Gua rd XGS-4728F User’s Guide 254 Apply Click this to display the specified range of VLANs in the section below . VID This field displays the VLAN ID of each VLAN in the range specifie d above. If yo u configure the * VLAN, the settings are applied to all VLANs. Enabled Select Yes to enable ARP inspection on the VLAN. Select [...]

XGS-4728F User’s Guide 255 C HAPTER 27 Loop Guard This chapter shows you how to config ure the Swit ch to guard against loops on the edge of your network. 27.1 Loop Guard Overview Loop guard allows you to configure the S w itch to shut down a port if it detects that packets sent out on that port loop back to the Swit ch. While you can use Spannin[...]

Chapter 27 Loop Guard XGS-4728F User’s Guide 256 • It will receive its own broadcast messages that it sends out as they lo op back. It will then re-broadcast those messages agai n. The following figure shows port N on switch A connected to switch B . Switch B is in loop state. When broadcast or multi cast packets leav e port N and reach switch [...]

Chapter 27 Loop Guar d XGS-4728F User’s Guide 257 port N . The Switch will shut down port N if it detects that the probe packet has returned to the Switch. Figure 136 Loop Guard - Network L oop Note: After resolving the loop problem on your network you can re-activate the disabled port via the web configurator (se e Section 8.7 on page 89 ) or vi[...]

Chapter 27 Loop Guard XGS-4728F User’s Guide 258 The following table describes t he labels in this screen. T able 86 Advanced Application > Loop Guard LABEL DESCRIPTION Active Select this option to enable loop guard on the Switch. The Switch generates syslog, internal log messages as well as SNMP traps when it shuts down a port via the loop gu[...]

XGS-4728F User’s Guide 259 C HAPTER 28 VLAN Mapping This chapter shows you how t o conf igure VLAN mapping on the Switch. 28.1 VLAN Mapping Overview With VLAN mapping enabled, the S witch ca n map the VLAN ID and priority leve l of packets received from a priv ate network to those used in the service provider’ s network. The Switch checks inc o[...]

Chapter 28 VLAN Ma p ping XGS-4728F User’s Guide 260 28.2 Enabling VLAN Mapping Click Advanced Application and then VLAN Mapping in the navigation panel to display the s creen as shown. Figure 139 VLAN Mapping The following table describes t he labels in this screen. T able 87 VLAN Mapping LABEL DESCRIPTION Active Select this option to enable VLA[...]

Chapter 28 VLAN Mapping XGS-4728F User’s Guide 261 28.3 Configuring VLAN Mapping Click the VLAN Mapping Configure link in the VLA N Mapping screen to displa y the screen as shown. Use this screen to enable an d edit the VLAN mapping rule(s). Figure 140 VLAN Mapping Configuration The following table describes t he labels in this screen. T able 88 [...]

Chapter 28 VLAN Ma p ping XGS-4728F User’s Guide 262 P ort This is the port numbe r to which this rule is applied. VID This is the customer VLAN ID in the incoming packets. T ranslated VID This is the VL AN ID that repl aces the customer VLAN ID in the tagged packets. Priority This is the priority level that replaces the customer priority level i[...]

XGS-4728F User’s Guide 263 C HAPTER 29 Layer 2 Protocol Tunneling This chapter shows y ou how to configure la yer 2 protocol tunneling on the Switch. 29.1 Layer 2 Protocol T unneling Overview Layer 2 protocol tunneling (L2PT) is used on the service provid er's edge devi ces. L2PT allows edge switches ( 1 and 2 in the following figure) to tun[...]

Chapter 29 Layer 2 Prot ocol Tunne ling XGS-4728F User’s Guide 264 2 for P AgP (Port Aggreg ation Protocol), LACP or UDLD (UniDirecti onal Link Detection). Figure 142 L2P T Network Example 29.1.1 Layer 2 Protocol T unneling Mode Each port can have two lay e r 2 protocol tunnel ing modes, Access and Tunnel . •T h e Access port is an ingress port[...]

Chapter 29 Layer 2 Protocol Tunneling XGS-4728F User’s Guide 265 29.2 Configuring Layer 2 Protocol T unneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. Figure 143 Advanced Applicatio n > Lay er 2 Protocol T unneling The following table describes t he labels in this screen[...]

Chapter 29 Layer 2 Prot ocol Tunne ling XGS-4728F User’s Guide 266 * Use this row to make the setting th e same for all po rts. Use this row first and then make adjustments on a port-by -port basis. Note: Changes in this row are copied to all the ports as soon as you make them. CDP Select this option to have th e Switch tunnel CDP (Cisco Discover[...]

XGS-4728F User’s Guide 267 C HAPTER 30 Private VLAN This chapter shows you how t o configure the Switc h to prevent communications between ports in a VLAN. 30.1 Private VLAN Overview Private VLAN all ows you to do port isolati on within a VLAN in a simple way . Y ou specify which port(s) in a VLAN is not isolated by adding it to the promiscuous p[...]

Chapter 30 Private VLAN XGS-4728F User’s Guide 268 30.2 Configuring Private VLAN Click Advanced Application > Private VLAN in the navigati on panel to displa y the screen as shown. Figure 145 Advanced Applicatio n > Private VLAN The following table describes t he labels in this screen. T able 90 Advanced Application > Private VLAN LABEL [...]

Chapter 30 Private VLAN XGS-4728F User’s Guide 269 Delete Check the rule(s) that you want to remov e in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete che ck boxes. T able 90 Advanced Application > Private VLAN (continue d) LABEL DESCRIPTION[...]

Chapter 30 Private VLAN XGS-4728F User’s Guide 270[...]

271 P ART IV IP Application Static R oute (273) RIP (275) OSPF (277) IGMP (291) DVMRP (295) Differentiated Services ( 299) DHCP (307) VRRP (317)[...]

272[...]

XGS-4728F User’s Guide 273 C HAPTER 31 Static Route This chapter shows you how t o configure static routes. 31.1 Configuring S t atic Routing Static routes tell the Switch how to forw ard IP traffic when you configure the TCP/ IP paramet ers manually . Click IP Application > Static Routing in the navigation p anel to display the screen as show[...]

Chapter 31 Stat ic Route XGS-4728F User’s Guide 274 IP Subnet Mask Enter the subnet mask for this destination. Gateway IP Address Enter the IP address of the gateway . The gateway is an immediate neighbor of your S witch that will forward the packet to the destination. The gateway must be a rou ter on the same segment as your Switch. Metric The m[...]

XGS-4728F User’s Guide 275 C HAPTER 32 RIP This chapter shows you how t o configure RIP (R outing Information Protocol). 32.1 RIP Overview RIP (Routing Information Protocol) allows a routin g d ev ice to exchan ge routing information with other routers. The Direction f ield control s the se nding an d receiving of RIP pack ets. When set to: • B[...]

Chapter 32 RI P XGS-4728F User’s Guide 276 automatically created when you configure a new IP domain in the IP Setup screen (refer to Section 8.6 on page 86 ). Figure 147 IP Ap plication > RIP The following table describes t he labels in this screen. T able 92 IP Application > RIP LABEL DESCRIPTION Active Select this check box to enable RIP [...]

XGS-4728F User’s Guide 277 C HAPTER 33 OSPF This chapter describes the OSPF ( Open Shor test P ath First) routing protocol and shows you how to config ure OSPF . 33.1 OSPF Overview OSPF (Open Shortest P ath First) is a link -state protocol designed to dis tribute routing information within an autonomous system (AS). An autonomous system is a coll[...]

Chapter 33 OSPF XGS-4728F User’s Guide 278 The following table describes t he four classes of OSPF routers. The following figure depicts an OSPF ne twork example. The backbone is area 0 with a backbone router . The internal route r s ar e in area 1 and 2. The area border routers connect area 1 and 2 to the backbone. Figure 148 OSPF Network Exampl[...]

Chapter 33 OSPF XGS-4728F User’s Guide 279 When you configu re an OSPF interface, y ou first set an interfa ce to transmit OSP F traffic and add the interface to an area. Y ou can configure a virtual link to estab lish/maintain connectivity between a non- backbone area and the backbone. The virt ual link must be configured on both layer 3 devi ce[...]

Chapter 33 OSPF XGS-4728F User’s Guide 280 3 Create and associate interface(s) to an area 4 Create virt ual links to maintain backbone connec tivity . 33.2 OSPF S t atus Use this screen to view cu rrent OSPF status. Click IP Application > OSPF in the navigation panel to display the screen as s hown next. See Section 33.1 on page 277 for more i[...]

Chapter 33 OSPF XGS-4728F User’s Guide 281 The following table describes some c ommon output fields. P oll Interval(s) The text bo x displays how often (in seconds) this screen refreshes. Y ou may change the refresh interv al by typing a new number in the text bo x and then clicking Set Inter va l . Stop Click Stop to end OSPF status po lling. T [...]

Chapter 33 OSPF XGS-4728F User’s Guide 282 33.3 OSPF Configuration Use this screen to ac tiv ate OSPF and s et gener al setting s. Cl ick IP Application > OSPF and the Configuration link to display the OSPF Configuration screen. See Section 33.1 on page 277 for more information on OSPF . Figure 151 IP Ap plication > OSPF Configuratio n: Act[...]

Chapter 33 OSPF XGS-4728F User’s Guide 283 33.4 Configure OSPF Areas T o ensure that the Switch receives onl y routing information from a trusted la yer 3 devices, activ ate authentication. The OSPF supports three levels of authentication: • None – no authentication is used. • Simple – authenticate link s tate update s using an 8 printabl[...]

Chapter 33 OSPF XGS-4728F User’s Guide 284 33.4.1 V iew OSPF Area Information T able The bottom of the OSPF Configuration screen displays a summary table of all the OSPF areas you hav e configured. Figure 153 IP Ap plication > OSPF Configuration: Summary T able The following table describes t he related labels in this screen. Authenticati on S[...]

Chapter 33 OSPF XGS-4728F User’s Guide 285 33.5 Configuring OSPF Redistribution Use this screen to configure ro ute redi stribution and summary addresses. Ro ute redistribution is used when other router s which use RIP routing protocol and/or static routes need t o exchange routing information with the Switc h using OSPF routing protocol. A summa[...]

Chapter 33 OSPF XGS-4728F User’s Guide 286 33.6 Configuring OSPF Interfaces T o configure an OSPF interface, first create an IP routing domain in the IP Setup screen (see Section 8.6 on page 86 for more information). Once y ou create an IP routing domain, an OSPF interface en try is automati cally created. See Sec tion 33.1 on page 277 for more i[...]

Chapter 33 OSPF XGS-4728F User’s Guide 287 In the OSPF Configuration screen, click Interface to displa y the OSPF Interface screen. Figure 155 IP Ap plication > OSPF Configuration > OSPF Interface The following table describes t he labels in this screen. T able 101 IP Application > OSPF Configuration > OSPF In terface LABEL DESCRIPTIO[...]

Chapter 33 OSPF XGS-4728F User’s Guide 288 33.7 OSPF V irtual-Links Configure and view virtual link s ettings in this screen. See Section 33.1 on page 277 for more information on OSPF . K ey When you select Simple in the Authentica tion field, enter a password eight-char acter long. Characters after the eighth char acter will be ignored. When you[...]

Chapter 33 OSPF XGS-4728F User’s Guide 289 In the OSPF Configuration screen, click Virtual-Link to display the screen as shown next. Figure 156 IP Ap plication > OSPF Configuration > OSPF V irtual Link The following table describes t he related labels in this screen. T able 102 IP Application > OSPF Configuration > OSPF V irtual Link [...]

Chapter 33 OSPF XGS-4728F User’s Guide 290 K ey When you select Simple in the Authentic ation field, enter a password eight-char acter long. When you select MD5 in the Authentication field, enter a password 16- character long. Add Click Add to save your changes to the S witch’s run -time memory . The Switch loses these changes if it is turned o[...]

XGS-4728F User’s Guide 291 C HAPTER 34 IGMP This chapter shows y ou how to configure the Switch as a multicast rout er . See also Section 24.4 on page 203 for information on IGMP snooping. 34.1 IGMP Overview IP multicast is an IETF standard for dist ributi ng data to multiple recipients. The following figure shows a mul ticast se ssion and the re[...]

Chapter 34 IG M P XGS-4728F User’s Guide 292 IGMP (Internet Group Management Protocol) is used b y multicast hosts to indicate their multicast group membership to mul tic ast routers. Multicast routers can also use IGMP to periodical ly chec k if multic as t hosts still want t o receive tr ansmission from a mult i c ast serv er . In other words, [...]

Chapter 34 IGMP XGS-4728F User’s Guide 293 on a particular network. This in turn he lps reduce the amount of multicast tr affic going through the multicast router . Figure 159 IGMP V ersion 2 Example IGMP version 3 allows a mul ticast host to join a multicast group and speci fy from which source (multicast server) it wants to receive multicast pa[...]

Chapter 34 IG M P XGS-4728F User’s Guide 294 34.3 Configuring IGMP Click IP Application > IGMP in the navigation panel to di splay the screen as shown next. Ea ch entry in the table is automa tically cre ated when you configure a new IP dom a in in the IP Setup screen (refer to Section 8.6 on page 86 ). Figure 161 IP Ap plication > IGMP The[...]

XGS-4728F User’s Guide 295 C HAPTER 35 DVMRP This chapter introduces DVMRP and tells you how to configure i t. 35.1 DVMRP Overview DVMRP (Distance V ector Multicast Ro uting Pr otocol) is a protocol used for routing multicast data within an aut onomous system (AS). This DVMRP implementation is based on draft -ietf -idmr-dvmrp- v3-10. DVMRP pro vi[...]

Chapter 35 DV MR P XGS-4728F User’s Guide 296 4 The final m ulticas t (“ M ”) after pruning and gr afting is shown in the next figure. Figure 162 How DVMRP Works 35.2.1 DVMRP T erminology DVMRP probes are used to discover other DVMRP Neighbors on a network. DVMRP repor ts are used to exchange DVMRP source ro uting informati on. These packets [...]

Chapter 35 DVMRP XGS-4728F User’s Guide 297 35.3.1 DVMRP Configuration Error Messages Y ou must have IGMP enabled when you enable DVMRP; otherwise you see the screen as in the next figure. Figure 164 DVMRP: IGMP No t Set Error When you disable IGMP , but DVMRP is still active y ou also see another w arning screen. Figure 165 DVMRP: Unable to Disa[...]

Chapter 35 DV MR P XGS-4728F User’s Guide 298 Each IP routing domain DVMRP configuratio n must be in a different VLAN group; otherwise you see the following screen. Figure 166 DVMRP: Duplicate VID Error Message 35.4 Default DVMRP T imer V a lues The following are some default DVMRP timer values. T able 105 DVMRP: Default Timer Values DVMRP FIELD [...]

XGS-4728F User’s Guide 299 C HAPTER 36 Differentiated Services This chapter shows you how to conf igure Di fferentiated Services (DiffServ) on the Swit ch . 36.1 DiffServ Overview Quality of Service (QoS) is used to prioriti ze source-to-destination tr affic flows. All packets in t he flow are g ive n the same priori ty . Y ou can use CoS (class [...]

Chapter 36 Differe ntiated Services XGS-4728F User’s Guide 300 kinds of tr affic can be marked fo r di fferent p riorities of forw arding. Resources c an then be allocated according to the DSCP v alues and the configured policies. 36.1.2 DiffServ Network Example The following figure depicts a DiffServ netw ork consisting of a group of directly co[...]

Chapter 36 Differentiated Services XGS-4728F User’s Guide 301 specifies the a verag e rate at which packets are admitted to the network. The PIR is greater than or equal to the CIR. CIR and PIR v alues are based on the guaranteed and maximum bandwidth respectiv e ly as negotiated between a service provider and client. T wo Rate Three Color Marker[...]

Chapter 36 Differe ntiated Services XGS-4728F User’s Guide 302 decrease it. P ackets that have been previo usly marked red or yellow can only be marked with an equal or higher pack et loss priority . P a ck ets marked red (high packet loss priority) continue to be red without eval uation against the PIR or CIR . P ack et s marked yel low can only[...]

Chapter 36 Differentiated Services XGS-4728F User’s Guide 303 The following table describes t he labels in this screen. 36.3.1 Configuring 2-Rate 3 Color Marker Settings Use this screen to configur e TR TCM settings. Click the 2-rat e 3 Color Marker link in the DiffServ screen to display the screen as shown next . T able 106 IP Application > D[...]

Chapter 36 Differe ntiated Services XGS-4728F User’s Guide 304 Note: Y ou cannot enable both TR TCM and Bandwid th Control at the same time. Figure 172 IP Ap plication > DiffServ > 2-rate 3 Color Marker The following table describes t he labels in this screen. T able 107 IP Application > DiffServ > 2-rate 3 Color Marker LABEL DESCRIPT[...]

Chapter 36 Differentiated Services XGS-4728F User’s Guide 305 36.4 DSCP-to-IEEE 802.1p Priority Settings Y ou can configure the DSCP to IEEE 802.1p mapping to allow the Swit ch to prioritize all tr affi c based on the incoming DSCP v alue according to the DiffServ to IEEE 802.1p mapping table. The following table shows the de fault DSCP-to- IEEE8[...]

Chapter 36 Differe ntiated Services XGS-4728F User’s Guide 306 36.4.1 Configuring DSCP Settings T o change the DSCP-IEEE 802. 1p mapping, click the DSCP Setting link in the DiffServ screen to display the screen as shown next. Figure 173 IP Ap plication > DiffServ > DSCP Setting The following table describes t he labels in this screen. T abl[...]

XGS-4728F User’s Guide 307 C HAPTER 37 DHCP This chapter shows you how t o configure the DHCP feature. 37.1 DHCP Overview DHCP (Dynamic Host Configur ation Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP conf iguration at start-up from a server . Y o u can configure the Switch as a DHCP se rver or a DHCP rela y agent.[...]

Chapter 37 DHCP XGS-4728F User’s Guide 308 • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured as a DHCP server for one VLAN and at the same time the Switch can be configured to relay DHCP requests for clients in another VLAN. 37.2 DHCP S t atus Click IP Application > DHCP in the na vigation panel. The DHC[...]

Chapter 37 DHCP XGS-4728F User’s Guide 309 this screen to view detail s regarding DH CP server set tings conf igured on the Swit ch . Figure 175 IP Application > DHCP > DHCP Server S tatus Detail The following table describes t he labels in this screen. T able 1 1 1 IP Application > DHCP Server Status Detail LABEL DESCRIPTION Start IP Ad[...]

Chapter 37 DHCP XGS-4728F User’s Guide 310 37.4 DHCP Relay Configure DHCP relay on the Switch if the DHCP client s and the DHCP server are not in the same broadcast domain. During the initi al IP address leasing, the Switch helps to relay network information (such as t he IP address and subnet mask) between a DHCP client and a DHCP se rver . Once[...]

Chapter 37 DHCP XGS-4728F User’s Guide 31 1 37.4.2 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP Relay screen. Click IP Application > DHCP in the navigation panel and click the Global link to display the scre en as shown. Figure 176 IP Application > DHCP > Global The following table describes t he labels in this s[...]

Chapter 37 DHCP XGS-4728F User’s Guide 312 37.4.3 Global DHCP Relay Configuration Example The follow figure shows a network exampl e where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. Figure 177 Global DHCP Relay Network Example Configure t[...]

Chapter 37 DHCP XGS-4728F User’s Guide 313 37.5 Configuring DHCP VLAN Settings Use this screen to configure your DHCP se ttings based on the VLAN domain of the DHCP clients. Cl ick IP Application > DHCP in the navigation panel, then click the VLAN link In the DHCP Status screen that displays. Note: Y ou must set up a management IP address for [...]

Chapter 37 DHCP XGS-4728F User’s Guide 314 Server Use this section if you want to conf igure the Switch to function as a DHCP server for this VLAN. Client IP P ool Starting Address Specify the first of the contiguous addresses in the IP address pool. Size of Client IP P ool Specify the size, or count of the IP address pool. The S witch can issue [...]

Chapter 37 DHCP XGS-4728F User’s Guide 315 37.5.1 Example: DHCP Relay for T wo VLANs The following example dis plays two VLANs (VIDs 1 and 2) for a campus network. T wo DHCP servers are installed to serve each VLAN. The system is set up to forward DHCP request s from the dormitor y rooms (VLAN 1) to the DHCP server with an IP address of 192.168.1[...]

Chapter 37 DHCP XGS-4728F User’s Guide 316 For the example netw ork, configure the VLAN Setting screen as shown. Figure 181 DHCP Relay for T wo VLANs Configuration Example EXAMPLE[...]

XGS-4728F User’s Guide 317 C HAPTER 38 VRRP This chapter shows you how t o configure and monitor the Virtual R outer Redundancy Protocol (VRRP) on the S witch. 38.1 VRRP Overview Each host on a network is configured to send packets t o a statically configured default gateway (this S w i tch). The default gateway can become a s ingle point of fail[...]

Chapter 38 VRRP XGS-4728F User’s Guide 318 default gateway . If switch A has a higher priority , it is the master router . Switch B , having a lower priority , is the backup router . Figure 182 VRRP: Example 1 If switch A (the master router) is unav ailable, switch B takes ov er . T raffic is then processed by switch B . 38.2 VRRP S t atus Click [...]

Chapter 38 VR RP XGS-4728F User’s Guide 319 38.3 VRRP Configuration The following sections describe the different parts of the VRRP Configur ation screen. 38.3.1 IP Interface Setup Before configuring VRRP , first create an IP interface (or routing domain) i n the IP Setup screen (see the Section 8.6 on page 86 for more in formation). Click IP App[...]

Chapter 38 VRRP XGS-4728F User’s Guide 320 Note: Routing domains with the sa me VLAN ID are not displayed in the t able indicated. Figure 184 IP Ap plication > VRRP Configuration > IP Interface The following table describes t he labels in this screen. T able 1 16 IP Application > VRRP Co nfiguration > IP Interface LABEL DESCRIPTION In[...]

Chapter 38 VR RP XGS-4728F User’s Guide 321 38.3.2 VRRP Parameters This section describes the VRRP parameters. 38.3.2.1 Advertisement Interval The master router sends out Hel lo message s to let the ot her backup routers know that it is still up and running. The time interv al between sending the Hello messages is the advertisement interv al. By [...]

Chapter 38 VRRP XGS-4728F User’s Guide 322 38.3.3 Configuring VRRP Parameters After you set up an IP interface, co nfigure the VRRP par ameters in the VRRP Configuration screen. Figure 185 IP Ap plication > VRRP Configuration > VRRP Parameters The following table describes t he labels in this screen. T able 1 17 IP Application > VRRP Co [...]

Chapter 38 VR RP XGS-4728F User’s Guide 323 38.3.4 Configuring VRRP Parameters View the VRRP configur ation summary at the bottom of the screen. Figure 186 VRRP Configuration: Summary The following table describes t he labels in this screen. 38.4 VRRP Configuration Examples The following sections show two VRRP configuration examples on the Switch[...]

Chapter 38 VRRP XGS-4728F User’s Guide 324 38.4.1 One Subnet Network Example The figure below shows a simple VR RP network with only one virtual router VR1 (VRID =1) and tw o switches . The network is connected to the W AN via an uplink gatewa y G (172.21.1.100). The host computer X is set to use VR1 as the default gateway . Figure 187 VRRP Confi[...]

Chapter 38 VR RP XGS-4728F User’s Guide 325 After configuring and saving the VRRP config uration, the VRRP Status screens for both switches are shown next. Figure 190 VRRP Example 1: VRRP S tatus on Switch A Figure 191 VRRP Example 1: VRRP S tatus on Switch B 38.4.2 T wo Subnet s Example The following figure depicts an exampl e in which two swit [...]

Chapter 38 VRRP XGS-4728F User’s Guide 326 VR1 (refer to Section 38.4.2 on page 325 ). Configure the VRRP par ameters on the switches as shown in the fi gures below . Figure 193 VRRP Example 2: VRRP Paramet e r Settings for VR2 on Switch A Figure 194 VRRP Example 2: VRRP Paramet e r Settings for VR2 on Switch B After configuring and saving the VR[...]

327 P ART V Management Maintenance (329) Access Control (337) Diagnostic (357) Syslog (359) Cluster Management (363) MAC T able (371) IP T able (375) ARP T able (379) Routi ng T a ble (381) Configure Clone (383)[...]

328[...]

XGS-4728F User’s Guide 329 C HAPTER 39 Maintenance This chapter explains how to configure the mainte nance screens that let you maintain the firmware and configur ation files. 39.1 The Maintenance Screen Use this screen to manage firmware and yo ur confi gur ation files. Click Management > Maintenance in the navigation panel to open the follow[...]

Chapter 39 Maintenance XGS-4728F User’s Guide 330 39.2 Load Factory Default Follow the steps below to rese t the Switch bac k to th e fa ctory defau lts. 1 In the Maintenance screen, click the Click Here button next to Load Factory Default to clear all Switch c onfigur ation i nformation y ou configured and return to the factory de faults. 2 Clic[...]

Chapter 39 Maintenance XGS-4728F User’s Guide 331 Click Config 2 to sav e the current configur ation settings to Configuration 2 on the Switch. Alternativel y , click Save on the top right-hand corner in any screen to save the configurati on changes to the current configur ation. Note: Clicking the Apply or Add button does NOT save the changes pe[...]

Chapter 39 Maintenance XGS-4728F User’s Guide 332 From the Maintenance screen, display the Firmware Upgrade screen as shown next. Figure 200 Mana gement > Maintenance > Firmware Upgrade T ype the path and file name of t he firmware fil e you wish to upload to the Swit ch in the File Path text box or click Browse to locate it. Select the Reb[...]

Chapter 39 Maintenance XGS-4728F User’s Guide 333 39.7 Backup a Configuration File Backing up your S witch configur ations allo ws you to create various “snapshots” of your device from which you ma y restore at a later date. Back up your c urrent Switch confi guratio n to a computer using the Backup Configuration screen. Figure 202 Management[...]

Chapter 39 Maintenance XGS-4728F User’s Guide 334 Z yNOS (Z yXEL Network Operating System, so meti mes referred to as the “r as” file) is the system firmware and ha s a “bin” filename extension. 39.8.1.1 Example FTP Commands ftp> put firmware.bin ras This is a sample FTP session showing the tr ansfer of the computer file "firmware[...]

Chapter 39 Maintenance XGS-4728F User’s Guide 335 6 Use put to tr ansfer files from the computer to the Swit ch, for example, pu t firmware.bin ras transfers the firmware on your computer (firmware.bin) to the Switch and renames it to “r as” . Similarly , put config.cfg config tr ansfers the configuration fi le on your co mputer (con fi g.cfg[...]

Chapter 39 Maintenance XGS-4728F User’s Guide 336[...]

XGS-4728F User’s Guide 337 C HAPTER 40 Access Control This chapter describes how to c ontrol access to the Sw itch. 40.1 Access Control Overview A console port and FTP are allowed one se ssion ea ch , T elnet and SSH share nine sessions, up to fiv e W eb sessions (five di fferent usernames and passwords) and/or limitless SNMP access control sessi[...]

Chapter 40 Access Control XGS-4728F User’s Guide 338 40.3 About SNMP Simple Network Manageme nt Protocol (SNM P) is an application layer protocol used to manage and monitor T CP/IP-based devices. SNMP is used to exchange management information between the network manage ment system (NMS) and a network element (NE). A manager station can manage an[...]

Chapter 40 Access Control XGS-4728F User’s Guide 339 SNMP itself is a simple request /respon se protocol based on the manager/agent model. The manager issues a request an d the agent returns responses using t he following protocol operations: 40.3.1 SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required [...]

Chapter 40 Access Control XGS-4728F User’s Guide 340 40.3.3 SNMP T raps The Switch se nds traps to an SNMP mana ger when an e vent occurs. The following tables outline the SNMP traps by category . An OID (Object ID) th at begins with “ 1.3.6.1.4.1.890.1.5. 8. ” is defined in privat e MIBs. Otherwis e, it is a st and a rd MIB OID. The OIDs beg[...]

Chapter 40 Access Control XGS-4728F User’s Guide 341 timesync RT CNotUpdatedEventOn 1.3.6. 1.4.1.890.1.5.8.46. 3 1.2.1 This trap is sent when the Switch fails to get the time and date from a time server . RT CNotUpdatedEventClear 1.3.6.1.4.1 .890.1.5.8.46. 3 1.2.2 This trap is sent when the Switch gets the time and date from a time se rver . intr[...]

Chapter 40 Access Control XGS-4728F User’s Guide 342 transceiver - ddm DDMIRxPowerEv entOn DDMIT emp eratureEv entO n DDMITxBiasEventOn DDMITxPowerEventOn DDMIV oltageEventOn 1.3.6.1.4.1.8 90.1.5.8.46.3 1 .2.1 T h i s t r a p i s s e n t w h e n o n e o f the device operating parameters (such as transceiv er temperature, laser bias current, trans[...]

Chapter 40 Access Control XGS-4728F User’s Guide 343 T able 127 SNMP IP Traps OPTION OBJEC T LA BEL OBJECT ID DESCRIPTION ping pingPro beF ailed 1.3.6.1.2.1.80.0.1 Th i s trap is sent when a single ping probe fails. pingT estF ailed 1.3.6.1.2.1.80.0.2 This trap is sent when a ping test (consisting of a series of ping probes) fails. pingT estCompl[...]

Chapter 40 Access Control XGS-4728F User’s Guide 344 40.3.4 Configuring SNMP From the Access Control screen, display the SNMP screen. Y ou can click Ac cess Control to go back to the Access Control screen. Figure 205 Management > Access Control > SNMP The following table describes t he labels in this screen. T able 129 Management > Acces[...]

Chapter 40 Access Control XGS-4728F User’s Guide 345 Tr a p Community Enter the Trap Community string, which is the password sent with each trap to the SNMP manager . The Trap Community string is only used by SNMP managers using SNMP version 2c or lower . Tr a p Destination Use this section to configure where to send SNMP traps from the Switch. V[...]

Chapter 40 Access Control XGS-4728F User’s Guide 346 40.3.5 Configuring SNMP T rap Group From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Grou p screen to specify the t ypes of SNMP trap s that should be sent to each SNMP manager . Figure 206 Management > Access Control > SNMP > Trap Group The following ta[...]

Chapter 40 Access Control XGS-4728F User’s Guide 347 40.3.6 Setting Up Login Account s Up t o f i ve p eo p l e (o n e a d m in i s t ra to r a n d four non-administr ators) may access the Switch via web configur ator at any one time. • An administr ator is someone who can both view and configure Switch c hanges. The username for the Administra[...]

Chapter 40 Access Control XGS-4728F User’s Guide 348 The following table describes t he labels in this screen. 40.4 SSH Overview Unlike T elnet or F TP , which tr ansmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combin es authentication and data encryption to provide secure encrypted communication bet ween two[...]

Chapter 40 Access Control XGS-4728F User’s Guide 349 40.5 How SSH works The following table summarizes how a secure connection is established between two remot e hosts. Figure 209 How SSH W orks 1 Host Identificat io n The SSH client send s a connection request to the SSH server . The server identifies itself with a host k ey . The client encrypt[...]

Chapter 40 Access Control XGS-4728F User’s Guide 350 3 Authentication and Data T ransmission After the identification is verified and data encrypt ion activ ated, a secure tunnel is established between the client and th e serv er . The client then sends its authentication information (u ser name and password) to th e server to log in to the serve[...]

Chapter 40 Access Control XGS-4728F User’s Guide 351 1 HT TPS connection requests from an SSL - aware web browser go to port 443 (by default) on the Switch’ s WS (web server). 2 HT TP connection requests fr om a web brow ser go t o port 80 (by default) on the Switch’ s WS (web server). Figure 210 HTTPS Implement ation Note: If you disable HTT[...]

Chapter 40 Access Control XGS-4728F User’s Guide 352 Y ou see the following Security Al ert screen in Internet Explorer . Select Yes to proceed to the web configurator login screen; if you select No , then web configur ator access is block ed. Figure 21 1 Security Alert Dialog Box (Internet Explorer) 40.8.2 Net scape Navigator W arning Messages W[...]

Chapter 40 Access Control XGS-4728F User’s Guide 353 Select Accept this certificate permanently to import the S witch’ s certificate into the SSL client. Figure 212 Security Certificate 1 (Net scape) Figure 213 Security Certificate 2 (Net scape) EXAMPLE EXAMPLE EXAMPL E EXAMPLE[...]

Chapter 40 Access Control XGS-4728F User’s Guide 354 40.8.3 The Main Screen After you accept the certifi cate and ente r the login username and password, the Switch main screen appears. The l ock displayed in t he bottom right of the browser status bar denotes a secure connection. Figure 214 Example: Lock Denoting a Secure Conn ection 40.9 Servic[...]

Chapter 40 Access Control XGS-4728F User’s Guide 355 computer(s)” for each service in the Remote Management screen (discussed later). Cli c k Access Control to go back to the main Access Control scre en. Figure 215 Manageme nt > Access Control > Service Access Control The following table describes t he fields in this screen. 40.10 Remote [...]

Chapter 40 Access Control XGS-4728F User’s Guide 356 Y ou can specify a group of one or more “trusted computers” from which an administr ator may use a service to manage the Sw itch. Click Access Control to return to the Access Control screen. Figure 216 Management > Access Control > Remote Management The following table describes t he [...]

XGS-4728F User’s Guide 357 C HAPTER 41 Diagnostic This chapter explains the Diagnostic screen. 41.1 Diagnostic Click Management > Diagnostic in the naviga tion panel to open thi s screen. Us e this screen to check sys tem logs, ping IP addresses or perf orm port tests. Figure 217 Manageme nt > Diagnostic The following table describes t he l[...]

Chapter 41 Diagnostic XGS-4728F User’s Guide 358 IP Ping T ype the IP addre ss of a device that you want to ping in order to test a connection. Click Ping to have the Switch ping the IP address (in the field to the left). Ethernet P ort Te s t Enter a port number and click Port Test to perform an internal loopback test. T able 134 Management >[...]

XGS-4728F User’s Guide 359 C HAPTER 42 Syslog This chapter explains the syslog screens. 42.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to sy s lo g servers that col l e ct the event messages. A sys log-enabled device can generate a syslog message and send it to a syslog server . Sy[...]

Chapter 42 Sy slog XGS-4728F User’s Guide 360 42.2 Syslog Setup Click Management > Syslog in the navigation panel to displa y this screen. The syslog feature sends logs to an external sy slog serv er . Use this screen to configure the device’ s system logging set tings. Figure 218 Manageme nt > Syslog The following table describes t he la[...]

Chapter 42 Syslog XGS-4728F User’s Guide 361 42.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to open the following screen. Use this s creen to configure a list of external syslog servers . Figure 219 Manageme nt > Syslog > Server Setup The following table describes t he labels in this screen. T able 137 Manage[...]

Chapter 42 Sy slog XGS-4728F User’s Guide 362[...]

XGS-4728F User’s Guide 363 C HAPTER 43 Cluster Management This chapter introduces cluster management. 43.1 Clustering Management S t atus Overview Cluster Management allows you to manage switc hes through one Switch, call ed the cluster manager . The switches must be directly connected and be in the same VLAN group so as to be able to communicate[...]

Chapter 43 Clust er Managem en t XGS-4728F User’s Guide 364 In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are clust er members. Figure 220 Clustering App lication Example 43.2 Cluster Management S t atus Click Management > Clus ter Management in the navigati[...]

Chapter 43 Clust er Managem en t XGS-4728F User’s Guide 365 The following table describes t he labels in this screen. 43.2.1 Cluster Member Switch Management Go to the Clustering Management St atus screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web config[...]

Chapter 43 Clust er Managem en t XGS-4728F User’s Guide 366 configurator home page and the home pa ge that you'd see if y ou accessed it directly are different. Figure 222 Cluster Management: Clu ster Mem ber Web Configurator Screen[...]

Chapter 43 Clust er Managem en t XGS-4728F User’s Guide 367 43.2.1.1 Uploading Firmware to a Cluster Member Switch Y ou can use F TP to upload firmware to a cluster member switch through the cluster manager swi tch as sh own in the following example. Figure 223 Example: Uploading Firmware to a Cluster Memb er Switch The following table explains s[...]

Chapter 43 Clust er Managem en t XGS-4728F User’s Guide 368 43.3 Clustering Management Configuration Use this screen to configure clustering management. Click Configuration from the Cluster Management screen t o display the next screen. Figure 224 Manageme nt > Clustering Management > Configuration The following table describes t he labels [...]

Chapter 43 Clust er Managem en t XGS-4728F User’s Guide 369 Apply Click Apply to save y our changes to the Switch’ s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save your changes to the non- volatile memory when y ou are done configuring. Cancel Click [...]

Chapter 43 Clust er Managem en t XGS-4728F User’s Guide 370[...]

XGS-4728F User’s Guide 371 C HAPTER 44 MAC Table This chapter introduces the MAC Table sc reen. 44.1 MAC T able Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forw arded or fil tered ac ross the Switch’ s ports. When a device (which may belong to a VLAN group) sends a packet which is forw [...]

Chapter 44 M AC Ta b le XGS-4728F User’s Guide 372 • If the Switch has already learned the port for this MAC address , but the destination port is the same as the port it came in on, then it filters the fr ame. Figure 225 MAC T able Flowchart 44.2 V iewing the MAC T able Click Management > MAC Table in the navigation panel to dis play the f [...]

Chapter 44 MAC Table XGS-4728F User’s Guide 373 The following table describes t he labels in this screen. T able 142 Management > MAC Table LABEL DESCRIPTION Condition S elect All to display all MAC addresses in the MAC table. Select Static to only display static MAC address(es) in this screen. Select MAC and enter a valid MAC address (six hex[...]

Chapter 44 M AC Ta b le XGS-4728F User’s Guide 374[...]

XGS-4728F User’s Guide 375 C HAPTER 45 IP Table This chapter introduces the IP ta ble. 45.1 IP T able Overview The IP Table screen shows how packet s are forwarded or f iltered across the Switch’ s ports. When a device (which may belong to a VLAN group) sends a packet which is forwarded to a port on the Switch , the IP address of the device is [...]

Chapter 45 IP Table XGS-4728F User’s Guide 376 • If the Switch has already learned the port for this IP address, but the destination port is the same as the port it came in on, then it fi lters the packet. Figure 227 IP T able Flowchart 45.2 V iewing the IP T able Click Management > IP Table i n the na vigation panel to display the followi n[...]

Chapter 45 IP Table XGS-4728F User’s Guide 377 VID This is the VLAN group to which the packet belongs. P ort This is the port from which the abov e IP address was learned. This field displays CPU to indicate the IP addre ss belongs to the Switch. T ype This shows whether the IP address is dynamic (learned by the Switch) or static (belonging to th[...]

Chapter 45 IP Table XGS-4728F User’s Guide 378[...]

XGS-4728F User’s Guide 379 C HAPTER 46 ARP Table This chapter introduces ARP T able. 46.1 ARP T able Overview Address Resolution Protocol (ARP) is a pr otocol for mapping an Internet Protocol address (IP address) to a physi c al machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) addr[...]

Chapter 46 ARP Tab le XGS-4728F User’s Guide 380 46.2 V iewing the ARP T able Click Management > ARP Table in t he navigation panel to open the following screen. Use the ARP table to view IP-to-MAC address mapping(s). Figure 229 Management > ARP T able The following table describes t he labels in this screen. T able 144 Management > ARP [...]

XGS-4728F User’s Guide 381 C HAPTER 47 Routing Table This chapter introduces the routing table. 47.1 Overview The routing table contains the rout e information to the network(s) that the Switch can reach. The Switch automatically u pdates the routing table with the RIP information received from other Ethernet devices. 47.2 V iewing the Routing T [...]

Chapter 47 Rou tin g Ta b l e XGS-4728F User’s Guide 382[...]

XGS-4728F User’s Guide 383 C HAPTER 48 Configure Clone This chapter shows you how y ou can copy the settings of one port onto other ports. 48.1 Configure Clone Cloning allows yo u to copy the basic and adv anced settings from a source port to a destination port or ports. Click Manage ment > Configure Clone to open the following screen. Figure [...]

Chapter 48 Con fig ur e Clo ne XGS-4728F User’s Guide 384 The following table describes t he labels in this screen. T able 146 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Po r t Enter the source port under the Sourc e label. This port’s attributes are copied. Enter the destination port or ports under the Destination la[...]

385 P ART VI T roubleshooting & Product S p ecifications T roubleshooting (387) Product Specifications (393)[...]

386[...]

XGS-4728F User’s Guide 387 C HAPTER 49 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories. • P ower , Hardware Connections, and LEDs • Switch Access and L ogin • Switch Configur ation 49.1 Power , Hardware Connections, and LEDs The [...]

Chapter 49 Tro u blesh oo tin g XGS-4728F User’s Guide 388 1 T urn the Switch off and on (in DC models or if the DC power su pply is co nnected in AC/DC models). 2 Disconnect and re-connect the power adapto r or cord to the Switch (in AC models or if the AC power supply is connected in AC/DC models). 3 If the problem continues, contac t the vendo[...]

Chapter 49 Troubleshooting XGS-4728F User’s Guide 389 I forgot the usernam e and/or password. 1 The default username is admin and the default password is 1234 . 2 If this does not work, you have to reset the device to its fact ory defaults. See Section 4.6 on page 52 . I cannot see or access the Login screen in the web configurator . 1 Make sure [...]

Chapter 49 Tro u blesh oo tin g XGS-4728F User’s Guide 390 1 Make sure you ha ve entered the user name and password correctly . The default user name is admin , and the default password is 1234 . These fie lds are case- sensitive, so make sure [Caps Lock] is not on. 2 Y ou may have ex c eeded the maximum number of concurrent T elnet sessions. Clo[...]

Chapter 49 Troubleshooting XGS-4728F User’s Guide 391 49.3 Switch Configuration I lost my configuration setti ngs after I rest art the Switch. Make sure you sa ve your configur ation into the Switch’ s nonvolat ile memory each time you mak e changes. Click Save at the top right corner of the web configurator to sa v e the configur ation permane[...]

Chapter 49 Tro u blesh oo tin g XGS-4728F User’s Guide 392[...]

XGS-4728F User’s Guide 393 C HAPTER 50 Product Specifications The following tables summarize the Swit ch’ s hardware and firmw are feat ures. T able 147 Hardware Specifications SPECIFICATION DESCRIPTION Dimensions Standard 19” rack mountable 438 mm (W) x 310 mm (D) x 44.45 mm (H) W eight 4.9 Kg P ower Specification AC: 100 - 240 VAC 50/60 Hz [...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 394 LEDs Main swi tch: BPS, PWR, SYS , ALM, Per Stacking port: S1, S2 Per m ini-GBIC port: green LED Per 1000Base- T port: Green: 10/1000 Mbps Amber: 100 Mbps mini-GBIC/1000Base- T L EDs: steady: link state blinking: transmitting/receiving Operating Environment T emperature: 0º C ~ 45º C [...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 395 VLAN A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group. With VLAN, a device canno t directly talk to or hear from devices that are n[...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 396 IP Multicast Wi th IP multicast, the Switch deliv ers IP packets to a group of hosts on the network - not ev erybody . In addition, the Switch can send packets to Ethernet devices that are not VLAN-aw are by untagging (removing the VLAN tags) IP multicast packets. RIP RIP (Routing Infor[...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 397 Firmware Upgr ade Download new firmware (when av ailable) from the Z yXEL web site and use the web configur ator , CLI or an F TP/TFTP tool to put it on the Switch. Note: Only upload firmware for your spe cific model! Configuration B ackup & Res t o r a t i o n Make a copy of the S [...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 398 T able 149 Switching Specifications Layer 2 Fea t ur e s Bridging 16K MAC addresses Static MAC address filtering by source/destination Broadcast storm control Static MAC address forwarding Switching Switching fabric: 144 Gbps, non-blocking Max. Frame size: 9 kbytes Forw arding frame: IE[...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 399 The following list, which is not exhaust ive , illust rates the standards supported in the Switch. Layer 3 Fea t ur e s IP Capability IPV4 support 64 IP routing domains 8K IP address table 12K routing paths Wire speed IP forwarding Ro ut i n g protocols Unicast: RIP- V1/V2, OSPF V2 Mult[...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 400 RFC 1058 RIP-1 (R outing Information Protocol) RFC 1112 IGMP v1 RFC 1155 SMI RFC 1157 SNMPv1: Simple Network Management Protocol version 1 RFC 1213 SNMP MIB II RFC 1305 Network Time Protocol (NTP version 3) RFC 1441 SNMPv2 Simple Network Management Protocol version 2 RFC 1493 Bridge MIB[...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 401 IEEE 802.3x Flow Control IEEE 802.3z 1000BASE-X For optical fiber link 1000BASE-SX/LX. T able 150 Standards Supported (continued) ST ANDARD DESCRIPTION[...]

Chapter 50 Product Specifications XGS-4728F User’s Guide 402[...]

403 P ART VII Appendices and Index Common Services (405) Legal Information (409) Index (413)[...]

404[...]

XGS-4728F User’s Guide 405 A PPENDIX A Common Services The following table lists some commonl y-used services and their associated protocols and port numbers. F or a comprehe nsiv e list of p ort numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, descrip tive n[...]

Appendix A Com mon Servic es XGS-4728F User’s Guide 406 ESP (IPSEC_TUNNEL) User-Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finge r is a UNIX or Internet related command that can be used to find out if a user is logged on. FTP TCP TCP 20 21 File T ransfer Program, a progr am to en[...]

Appendix A Common Services XGS-4728F User’s Guide 407 POP3 TCP 11 0 Post Office Protocol v ersion 3 lets a client computer get e-mail from a POP3 server through a tempor ary connection (TCP/IP or other). PPTP TC P 1723 Point -to-Point T unneling Protocol enables secure transfer of data ov er public networks. This is the control channel. PPTP_TUNN[...]

Appendix A Com mon Servic es XGS-4728F User’s Guide 408 TELNET TCP 23 T elnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over T CP/IP networks. Its primary function is to allow users to log into remote host systems. TFTP UDP 69 T rivial File T ransfer Protocol is an Internet file tran[...]

XGS-4728F User’s Guide 409 A PPENDIX B Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, electronic, mech[...]

Appendix B Leg al In fo rm at ion XGS-4728F User’s Guide 410 • This dev ice m u st accept any in terferen ce received, including interference that may cause undesired operations. FCC W arning This device has been tested and found to comply with the limits for a Clas s A digital switch, pursuant to Part 15 of the FCC Rules . These limits are des[...]

Appendix B Legal Information XGS-4728F User’s Guide 41 1 Viewing Certifications 1 Go to http://www . zyxel.com . 2 Select your prod uct on the Z yXEL home page to go to that product's page. 3 Select the certification y ou wish to view from this page. ZyXEL Limited W arranty Z yXEL warr ants to the original end user (p urchaser) that this pr [...]

Appendix B Leg al In fo rm at ion XGS-4728F User’s Guide 412[...]

Index XGS-4728F User’s Guide 413 Index Numerics 802.1P priority 90 A access control limitations 337 login account 347 remote management 355 service port 354 SNMP 338 accounting setup 221 address learning, MAC 104 , 107 Address R esolution Protocol (ARP) 379 , 383 , 384 administrator password 348 age 141 aggregator ID 157 , 159 aging time 85 appli[...]

Index XGS-4728F User’s Guide 414 CIST (Common and Internal Spanning T ree) 128 Class of Service (CoS) 299 classifier 173 , 175 and QoS 173 editing 176 example 178 overview 173 setup 173 , 175 , 176 viewing 176 cloning a port See port cloning cluster management 363 and switch passwords 369 cluster manager 363 , 368 cluster member 363 , 369 cluster[...]

Index XGS-4728F User’s Guide 415 Autonomous System 295 default timer setting 298 error message 297 graft 296 how it works 295 implementation 295 probe 296 prune 296 report 296 setup 296 terminology 296 threshold 297 DVMRP (Distance V ector Multicast R outing Protocol) 295 dynamic link aggregation 153 E egress port 11 3 Ethernet broadcast address [...]

Index XGS-4728F User’s Guide 416 I IEEE 802.1p, priority 85 IEEE 802.1x activate 166 , 167 , 219 reauthentication 166 IEEE 802.1x, port authentication 163 IGMP 295 how it works 292 overview 291 port based 293 setup 294 vers ion 199 vers ion 3 293 versi ons supp orte d 292 IGMP (Internet Group Management Protocol) 199 , 292 IGMP filtering 199 prof[...]

Index XGS-4728F User’s Guide 417 configuring via web configu rator 347 multiple 347 number of 347 login password 348 loop guard 255 how it works 256 port shut down 257 probe packet 256 loop guard, vs STP 255 LSA (Link State Advertisement) 278 M MAC (Media Access Control) 78 MAC address 78 , 379 maximum number per port 171 , 172 MAC address learni[...]

Index XGS-4728F User’s Guide 418 multicast router (‘mrouter’ ) 296 multicast VLAN 21 1 Multiple Spanning T ree Ins tance , See MSTI 128 Multiple Spanning T ree Protocol 127 Multiple Spanning T ree Protocol, See MSTP . 125 Multiple STP 127 Multiple STP , see MSTP 128 MVR 207 configuration 209 group configuration 21 1 network example 207 MVR (M[...]

Index XGS-4728F User’s Guide 419 port-based VLAN 11 0 all connected 11 3 port isolation 11 3 settings wizard 11 3 ports “standby” 154 diagnostics 358 mirroring 151 speed/duplex 90 power volt age 79 power module current rating 40 power wire 40 power specification 393 power status 79 power wires 40 priority level 85 priority , and OSPF 279 prio[...]

Index XGS-4728F User’s Guide 420 S safety warnings 7 save configur ation 51 , 33 0 Secure Shell See SSH security 399 service access control 354 service port 355 Simple Network Management Protocol, see SNMP SNMP 28 , 338 agent 338 and MIB 338 authentication 345 communities 344 management model 338 manager 338 MIB 339 network components 338 object [...]

Index XGS-4728F User’s Guide 421 system log 357 system reboot 331 T T ACACS+ 216 setup 219 T A CACS+ (T erminal Access Controller Acce ss- Control System Plus) 21 5 tagged VLAN 95 temperature 394 temperature indicator 78 time current 81 time zone 81 Time (RFC-868) 81 time server 81 time service protocol 81 format 81 Time T o Live (TTL) 297 tradem[...]

Index XGS-4728F User’s Guide 422 VLAN mapping 259 activating 260 configuration 261 example 259 priority level 259 tagged 259 traffic flow 25 9 untagged 259 VLAN ID 259 VLAN number 88 VLAN stacking 191 , 193 configuration 194 example 191 frame format 193 port roles 192 , 195 port-based Q-in-Q 195 priority 193 selective Q-in-Q 196 VLAN T runking Pr[...]