ZyXEL Communications GS-3012 Series manual

www .zyxel.com GS-3012/GS-3012F Series Gigabit Ethernet Switch User ’ s Guide V ersion 3.70 11 / 2 0 0 6 Edition 1[...]

[...]

About This User's Guide GS-3012/GS- 3012F User’s Guid e 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the switch using the web configurator or via commands. Y ou should have at least a basic knowledg e of TCP/IP networking conce pts and topology . Related Document ation • Quick St[...]

Document Conventions GS-3012/GS-3012F User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other important informati on (for example, other things you may need to configure or helpful [...]

Document Conventions GS-3012/GS- 3012F User’s Guid e 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The switch icon is not an exact representation of your device. The switch Computer Notebook computer Server DSLAM Firewall T elephone Switch Router[...]

Safety Warnings GS-3012/GS-3012F User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the[...]

Safety Warnings GS-3012/GS- 3012F User’s Guid e 7 This product is recyclable . Dispose of it properly .[...]

Safety Warnings GS-3012/GS-3012F User’s Guide 8[...]

Contents Overview GS-3012/GS- 3012F User’s Guid e 9 Contents Overview Introduction and Hardware Overview ..................................................... ............................. 31 Getting to Know Y our Sw itch ....... .................... ................ ................ ................ ................ ........ .. 33 Hardware Insta[...]

Contents Overview GS-3012/GS-3012F User’s Guide 10 Configure Clone .................. ................ ................ ................ ................ ................ ............. ........ 2 03 Commands and T roubleshooting ....................................................................................... 205 Introducing the Commands ..[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 11 Table of Contents About This User's Guide ..................................................................................... ..................... 3 Document Conventions.................................................................. ......................................... .4 Safety[...]

Table of Contents GS-3012/GS-3012F User’s Guide 12 3.1.2 Gigabit Ports .. ................. ................ ................ ................ ................ ................ ....... ... 44 3.1.3 Mini-GBIC Slots ............ ................ ................. ................ ................ ................ ............ .4 5 3.1.4 Management [...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 13 7.5 Switch Setup Screen ...................... ................ ................ ................ ................. ............... .... 75 7.6 IP Setup .......... ................ ................ ................ ................ ................ ................. ...... ............. 77 7.6.[...]

Table of Contents GS-3012/GS-3012F User’s Guide 14 1 1.2 S panning T r ee Protocol Main Screen ........ ................ ................ .................... ................ . 106 1 1.3 Configure R apid S panning T ree Protocol ................ ................ ................ ................ ..... 106 1 1.4 Rapid Sp anning Tree Protocol S t [...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 15 Chapter 18 Classifier .................................... ................................................................................ ........... 133 18.1 About the Classifier and QoS ............. .... ......... ................. ................ ................ .............. 1 33 18.2[...]

Table of Contents GS-3012/GS-3012F User’s Guide 16 22.1.1 DHCP “Relay Agent In formation Option” ................. ................ ................ .............. 161 22.1.2 DHCP Relay Agent Circuit ID Sub-opti on Format .................... ................ .............. 161 22.2 DHCP Relay Configuration ........ ................ .........[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 17 25.7.3 Netscape Navigator W arning Messages . .................... ................ ................ ........... 182 25.7.4 Login Screen . .................... ................ ................ ................ ................ ................ ..... 1 83 25.8 Service Access Control ...........[...]

Table of Contents GS-3012/GS-3012F User’s Guide 18 32.1 Overview ................. ................. ................ ................ ................ ................ ............... ......... 2 07 32.1.1 Switch Configuration F ile ..... ................ ................ ................ ................. ................ . 207 32.2 Accessing t[...]

Table of Contents GS-3012/GS- 3012F User’s Guid e 19 33.7.1 no mirror-port ............................ ................. ................... ................ ................ ........ 247 33.7.2 no trunk ...... ................ ................ ................. ................ ................ ................ ........ ... 247 33.7.3 no port-a[...]

Table of Contents GS-3012/GS-3012F User’s Guide 20 Part VI: Appendices and Inde x ........................................................... 267 Appendix A Product S pecifications ...................................... ................................................. 269 Appendix B Browser Setup .................. ..............................[...]

List of Figures GS-3012/GS- 3012F User’s Guid e 21 List of Figures Figure 1 Backbone Application ....................... ................ ................... ................ ................. ..... .............. 34 Figure 2 Bridging Application ......... ......... ....... ............. ................ ................ ................ ........[...]

List of Figure s GS-3012/GS-3012F User’s Guide 22 Figure 39 802.1Q VLAN Port Settings ............ ................ ................ ................ .................... .......... ......... 89 Figure 40 802.1Q S tatic VLAN ................ .................... ................ ................ ................ ............. ...... ....... 91 Fi[...]

List of Figures GS-3012/GS- 3012F User’s Guid e 23 Figure 82 MVR Configuration Example ... .......... ...... ................. ................ ................ ................ ...... ..... 160 Figure 83 DHCP Relay ...... ................ ................ ................ ................ .................... ............... ....... ........ 162[...]

List of Figure s GS-3012/GS-3012F User’s Guide 24 Figure 125 CLI: History Command Example ........ ....... ................ ................ ................ ................ ....... .2 1 3 Figure 126 CLI: write memory ..................... ... ................ ................ ................ ................ ......... ............ 2 13 Figure [...]

List of Figures GS-3012/GS- 3012F User’s Guid e 25 Figure 168 Pop-up Blocker ................. ................ ................... ................. ................ ................ ...... ........ 273 Figure 169 Internet Options ............... ................ ................ ................ ................ ................. .. ...........[...]

List of Figure s GS-3012/GS-3012F User’s Guide 26[...]

List of Tables GS-3012/GS- 3012F User’s Guid e 27 List of Tables T able 1 Front Panel Connec tions ............................ .................... ................ ................ .............. ......... ... 44 T able 2 LED Des criptions ..... ................ ................... ................. ................ ................ ...........[...]

List of Tables GS-3012/GS-3012F User’s Guide 28 T able 39 Supported Tunnel Protocol Attribute ... ............. ................ ................ ................ ................ . .... 124 T able 40 Port Authentication: RADIUS ........... ................ ................... ................ ................. .......... ....... 1 25 T able 41 P[...]

List of Tables GS-3012/GS- 3012F User’s Guid e 29 T able 82 Command Summary: Enable Mode .... ................... ................. ................... ................ ........... 21 5 T able 83 Command Summary: Configure Mode ............ ................... ................ .................... .............. 220 T able 84 Command Summary: con[...]

List of Tables GS-3012/GS-3012F User’s Guide 30[...]

31 P ART I Introduction and Hardware Overview Getting to Know Y our Switch (33) Hardware Installation and Connectio n (39) Hardware Overview (43)[...]

32[...]

GS-3012/GS- 3012F User’s Guid e 33 C HAPTER 1 Getting to Know Your Switch This chapter describes the key features, be nefits and applicatio ns of the switc h. 1.1 Introduction The GS-3012 and GS-3012F are laye r 2 stand-alone Gigabit Ethe rnet switches. The GS-3012 has 12 100/1000Mbps ports and four mini-GBIC slots for optical uplinking . There a[...]

Chapter 1 Getting to Know Your Switch GS-3012/GS-3012F User’s Guide 34 Figure 1 Backbone Application 1.1.2 Bridging Example In this example application the switch is the ideal solution for dif ferent company departments to connect to the corporate backbone. It ca n alleviate band width contention and eliminate server and network bottlenecks. All [...]

Chapter 1 Getting to Kn ow Your Switch GS-3012/GS- 3012F User’s Guid e 35 1.1.3 High Performance Sw itched Workgroup Example The switch is ideal for connectin g two power workgroups that need h igh bandwidth. In the following example, use trunking to connect these two power wo rkgroups. Switching to higher-speed LANs such as FDDI or A TM is not f[...]

Chapter 1 Getting to Know Your Switch GS-3012/GS-3012F User’s Guide 36 Figure 4 T ag-based VLAN Application 1.1.4.2 VLAN Shared Server Example Shared resources such as a server can be us ed by all ports in the same VLAN as the server , as shown in the following example. In this example, only ports that need access to the server need belong to VLA[...]

Chapter 1 Getting to Kn ow Your Switch GS-3012/GS- 3012F User’s Guid e 37 • SNMP . The switch can be monito red by an SNMP manager . See Section 25.3 o n page 176 . • Cluster Management. Cluster Management allows you to manage multiple switches through one switch, called the cluster manager . See Chapter 28 on page 1 9 3 . 1.3 Good Habit s fo[...]

Chapter 1 Getting to Know Your Switch GS-3012/GS-3012F User’s Guide 38[...]

GS-3012/GS- 3012F User’s Guid e 39 C HAPTER 2 Hardware Installation and Connection This chapter shows you how to install and connect the switch. 2.1 Inst allation Scenarios The switch can be placed on a desktop or rack-mounted on a stand ard EIA rack. Use the rubber feet in a desktop installation and the brackets in a rack-mounted installation. &[...]

Chapter 2 Hardware Installation and Connection GS-3012/GS-3012F User’s Guide 40 Figure 6 Attaching Rubber Feet " Do NOT block the ventilation holes. Leave space between devices when stacking. 2.3 Mounting the Switch on a Rack The switch can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with other equipment. Follow th[...]

Chapter 2 Hard ware Installation an d Connection GS-3012/GS- 3012F User’s Guid e 41 Figure 7 Attaching the Mounting Brackets 2 Using a #2 Philips screwdriver , install the M3 flat head screws through the mounting bracket holes into the switch. 3 Repeat steps 1 and 2 to install the second mounting br acket on the other side of the switch. 4 Y ou m[...]

Chapter 2 Hardware Installation and Connection GS-3012/GS-3012F User’s Guide 42[...]

GS-3012/GS- 3012F User’s Guid e 43 C HAPTER 3 Hardware Overview This chapter describes the front panel a nd rear pa nel of the switch and shows you how to make the hardware conn ections. 3.1 Front Panel The following figure shows the front panel of the GS-301 2. The front panel contains the switch LEDs, 8 RJ-45 gigabit p orts, four dual pe rsonal[...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 44 The following table describes the po rt labels on the front panel. 3.1.1 Console Port For local management, you can use a computer w ith terminal emulation software configured to the following parameters: •V T 1 0 0 • T erminal emulation • 9600 bps • No parity , 8 data bits, 1 [...]

Chapter 3 Hardware Overview GS-3012/GS- 3012F User’s Guid e 45 When auto-negotiation is turned on, a Gigabit port nego tiates wi th the peer au tomatically to determine the connection sp eed and duplex mode. If the peer Ethernet p ort does not support auto-negotiation or turns off this feature, the switch determines th e connection speed by detec[...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 46 3.1.3.1 T ransceiver Installation Use the following steps to install a mini-GBIC transceiver (SFP module). 1 Insert the transceiver into the slot with the exposed section of PCB board facing down. 2 Press the transceiver firmly until it clicks into place. 3 The switch automatically det[...]

Chapter 3 Hardware Overview GS-3012/GS- 3012F User’s Guid e 47 Figure 15 T ransceiver Removal Example 3.1.4 Manage ment Port The MGMT (management) port is used for local mana gement. Connect directly to this port using an Ethernet cable. Y ou can configure the switch via T elnet or the web config urator . The default IP address of the management [...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 48 T o connect the power to the AC power model, insert the female end of power cord to the power receptacle on the rear panel. Connect th e other end of the supplied power cord to a 100~240V AC/1.5A power outlet. Make sure that no object s obstruct the airflow of the fans (located on the [...]

Chapter 3 Hardware Overview GS-3012/GS- 3012F User’s Guid e 49 3.4 Configuring the Switch Y ou may use the embedded web configurator or co mmand line interface to configure the switch. If you’re using the web con figurator , you need Internet Explorer 5.5 an d later or Netscape Navigator 6 and later . Y ou can access the comma nd line interface[...]

Chapter 3 Hard ware Overview GS-3012/GS-3012F User’s Guide 50[...]

51 P ART II Basic Settings Introducing the W eb Configurator (53) Initial Setup Example (61) System Status and Port Details (65) Basic Setting (71)[...]

52[...]

GS-3012/GS- 3012F User’s Guid e 53 C HAPTER 4 Introducing the Web Configurator This section introduces the con figuration and functions of the web config urator . 4.1 Introduction The embedded web configurator allows you to manag e the switch from anywhere th rough a standard browser such as Microsoft Internet Explorer or Netscape Navigator . &qu[...]

Chapter 4 Introducing the Web Configur ator GS-3012/GS-3012F User’s Guide 54 4.3 St atus Screen The St a t u s screen is the first web configurator scr een you see after you log in. The following figure shows the navigating co mponents of a web configura tor screen. Figure 21 Web Configura tor Home Screen (S tatus) In the navigation panel, click [...]

Chapter 4 Introducin g the Web C onfigurator GS-3012/GS- 3012F User’s Guid e 55 The following table lists the various web configurator screens within the sub-links. The following table summarizes these sub-links in the navigation panel. T able 4 W eb Configurat or Screen Sub -links Details BASIC SETTING ADV ANCED APPLICA TION IP APPLICATION MANAG[...]

Chapter 4 Introducing the Web Configur ator GS-3012/GS-3012F User’s Guide 56 Port Setup This link takes you to screens where you can configure settings for individual switch p orts. Advanced Application VLAN This link takes you to screens where you can configure port-based or 802.1 Q VLAN (depending on what you configured in the Switch Setup menu[...]

Chapter 4 Introducin g the Web C onfigurator GS-3012/GS- 3012F User’s Guid e 57 4.3.1 Change Y our Password After you log in for the first time, it is reco mmende d you change the default Administrator password in the Logins screen. Click Advanced Application , Access Control and t hen Logins to display the next screen. Figure 22 Web Configurator[...]

Chapter 4 Introducing the Web Configur ator GS-3012/GS-3012F User’s Guide 58 5 Assigning minimu m bandwidth to the CPU port. If you limit bandwidth to the CPU port, you may find that th e switch pe rforms sluggishly or not at all. " Be careful not to lock y ourself and others out of t he switch. If you do lock yourself out, try using out-of-[...]

Chapter 4 Introducin g the Web C onfigurator GS-3012/GS- 3012F User’s Guid e 59 Figure 23 Resetting the Switch: V ia Console Port The switch is now reinitialized with a default configuration file including the default password of “1234”. 4.5.2 Logging Out of the W eb Configurator Click Logout in a screen to exit the web configurator . Y ou ha[...]

Chapter 4 Introducing the Web Configur ator GS-3012/GS-3012F User’s Guide 60[...]

GS-3012/GS- 3012F User’s Guid e 61 C HAPTER 5 Initial Setup Example This chapter shows how to set up the switch for an example network. 5.1 Overview The following lists the configuration steps for the initial setup: • Create a V LAN • Set port VLAN ID • Configure the switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast[...]

Chapter 5 Initial Set up Example GS-3012/GS-3012F User’s Guide 62 1 Click Advanced App lication and VLAN in the navigation panel and click the St a t i c VLAN link. 2 In the S tatic VLAN screen, select ACTIVE , enter a descriptive name in the Na me field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field i[...]

Chapter 5 Initial Set up Example GS-3012/GS- 3012F User’s Guid e 63 Figure 26 Initial Setup Network Example: Port VID 1 Click Advanced Applications and VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 1 and click Apply to save your changes back to the run- time memory . Settings in the run-[...]

Chapter 5 Initial Set up Example GS-3012/GS-3012F User’s Guide 64 1 Connect your computer to any Ethernet port on the switch. Make sure y o ur computer is in the same subnet as the switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurat or . See Section 4.2 on page 53 for more[...]

GS-3012/GS- 3012F User’s Guid e 65 C HAPTER 6 System Status and Port Details This chapter describes the system status (web configurator ho me page) and port details screens. 6.1 About System S t atistics and Information The status screen of the web conf igurator displays a port statisti cal summary with links to each port showing statistical deta[...]

Chapter 6 S ystem Status and Port Details GS-3012/GS-3012F User’s Guide 66 The following table describes the labels in this screen. 6.2.1 Port Det ails Click a number in the Port column in the St a t u s screen to display indivi dual port statistics. Use this screen to check status and detailed performance data about an individual port on the swi[...]

Chapter 6 System Status and Port Details GS-3012/GS- 3012F User’s Guid e 67 Figure 29 S tatus: Port Deta ils The following table describes the labels in this screen. T able 7 S tatus: Port Details LABEL DESCRIPTION Port Info Port NO. This field identifies the Gi gabi t port described in this screen. Name T his field displays the port name you con[...]

Chapter 6 S ystem Status and Port Details GS-3012/GS-3012F User’s Guide 68 TxPkts This field shows the number of transmitted frames on this port RxPkts This field shows the number of received frames on this port Errors This field shows the number of received errors on this port. Tx KB/s This field shows the number kilobytes per second transmitted[...]

Chapter 6 System Status and Port Details GS-3012/GS- 3012F User’s Guid e 69 65-127 This field sho ws the number of packets (including bad packets) received that were between 65 a nd 127 octets in leng th. 128-255 This field sho ws the number of packets (including bad packets) received that were between 128 and 255 octe ts in length. 256-51 1 This[...]

Chapter 6 S ystem Status and Port Details GS-3012/GS-3012F User’s Guide 70[...]

GS-3012/GS- 3012F User’s Guid e 71 C HAPTER 7 Basic Setting This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. 7.1 Introducing the Basic Setting Screens The System Info screen displays general switch info rmation (such as fi rmware version number) and hardware polling inform at[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 72 Figure 30 System Info The following table describes the labels in this screen. T able 8 S ystem Info LABEL DESCRIPTION System Name This field displa ys the switch's model name. ZyNOS F/W V ersion This field displays the version number of the switch’s current firmware including the da[...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 73 7.3 General Setup Click Basic Setting and General Setup in the navigation panel to display the screen as shown. Use this screen to configure general settin gs such as the syst em name and time. Figure 31 General Setup MAX This field displays this fan's maximum speed measured in Revol[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 74 The following table describes the labels in this screen. T able 9 General Setup LABEL DESCRIPTION System Name Choose a descriptive name for identification purposes. This name consists of up to 64 printable characters; spaces are allowed. Location Enter the geographic lo cation ( up to 32 ch[...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 75 7.4 Introduction to VLANs A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Device s on a logical network belong to one group. A device can belong to more than one group. W ith VLAN, a device cannot directly talk to or hear fr[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 76 The following table describes the labels in this screen. T able 10 Switch Setup LABEL DESCRIPTION VLAN T ype Choose 802.1Q or Port Based . The VLAN Setup screen changes dependi ng on whether you choose 802.1Q VLAN T yp e or Port Base d VLAN T ype in this screen. See Section 7. 4 on page 75 [...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 77 7.6 IP Setup Use the IP Setup screen to configure the switch IP address, default gateway device, the default domain name serv er and the manageme nt VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic. 7.6.1 Manage ment IP Addresses[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 78 Figure 33 IP Setup The following table describes the labels in this screen. Ta b l e 1 1 IP Setup LABEL DESCRIPTION Domain Name Serve r DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. Enter a domain name server IP address in order to be [...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 79 DHCP Client Select this option if you have a DHC P server that can assign the switch an IP address, subnet mask, a default gateway IP address and a domain na me server IP address automatically . S tatic IP Address Select this option if you don’t have a DHCP server or if you wish to assi[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 80 7.7 Port Setup Click Basic Setting and the n Port Setup in the navigation pa nel to enter the por t configuration screen. Use this scr een to configure switch port settings. Figure 34 Port Setup The following table describes th e fields in this screen. IP Subnet Mask This field displays the[...]

Chapter 7 Basic Setting GS-3012/GS- 3012F User’s Guid e 81 Name Enter a descriptive name that identifies this port. Y ou can enter up to 64 alphanumeric characters. Note: Due to space limit ation, the port name may be truncated in some web configurator screens. T ype This field displ ays 10/100/1000M (Gigabit) or 1000 M (GBIC). S peed/ Duplex Sel[...]

Chapter 7 Basic Setting GS-3012/GS-3012F User’s Guide 82[...]

83 P ART III Advanced Settings VLAN (85) Stat ic MAC Forward Setup (97) Filtering (101) Spanning T ree Protocol (103) Bandwidth Control (1 13) Broadcast Storm Con trol (115 ) Mirroring (1 17) Link Aggregation (1 19) Port Authentication (123) Port Security (129) Classifier (133) Policy Rule (139) Queuing Method (145) Multicast (149) DHCP Relay (161)[...]

84[...]

GS-3012/GS- 3012F User’s Guid e 85 C HAPTER 8 VLAN The type of screen you see here depends o n the VLAN T y pe you selected in the Switch Setup screen. This chapter shows you how to config ure 802.1Q tagge d and port-based VLANs. See the General, Switch and IP Setu p chapter for more information. 8.1 Introduction to I EEE 802.1Q T agged VLAN T ag[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 86 8.1.2 Automatic VLAN Registration GARP and GVRP are the protocols used to auto matically register VLAN membership acros s switches. 8.1.2.1 GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de- register attribute values with other GARP par ticipants within a[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 87 Refer to the following figure. Suppose you wan t to create VLAN groups 1 and 2 (V1 and V2) on devices A and B. W ithout VLAN T runking , you must configure VLAN groups 1 and 2 on all intermediary switches C, D and E; otherwi se they will drop frames with unknown VLAN group tags. However , with VLA[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 88 Figure 37 802.1Q VLAN S t atus The following table describes the labels in this screen. 8.3.1 802.1Q VLAN Det ail Click on an index n umber in the VLAN St a t u s screen to display VLAN details. Use this screen to view detailed port settings and status of the VLAN group. See Section 8.1 on page 85 f[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 89 The following table describes the labels in this screen. 8.3.2 802.1Q VLAN Port Settings Use this screen to configure the 802.1Q VLAN settings on a port. S ee Section 8.1 on page 85 for more information on static VLAN. Click the VLAN Port Setting link in the VLAN S tatus screen. Figure 39 802.1Q V[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 90 The following table describes the labels in this screen. 8.3.3 802.1Q St atic VLAN Use this screen to configure and view 802. 1Q VLAN parameters for the switch. Y ou can dynamically have a port join a VLAN group us ing GVRP , permanently assign a port to be a member of a VLAN group or prohibit a por[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 91 Figure 40 802.1Q S t atic VLAN The following table describes the labels in this screen. T able 17 802.1Q Static VLAN LABEL DESCRIPTION Active Select this check box to enable the VLAN. Name Enter a descriptive na me for this VLAN group for identification purpo ses. VLAN Group ID Enter the VLAN ID f[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 92 8.3.4 V iewing and Editing VLAN Settings T o view a summary of the VLAN configuratio n, scroll down to the summary table at the bottom of the S tatic VLAN screen. T o change the settings of a rule , click a number in the VID field. Figure 41 S tatic VLAN: Summary T able The following table describes[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 93 8.3.4.1 VID1 Example Screen Figure 42 VID1 Example Screen 8.4 Introduction to Port-based VLANs Port-based VLANs are VLANs where the packet forwarding de cision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each po[...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 94 8.4.1 Configuring a Port-based VLAN Select Port Based as the VLAN T ype in the Switch Setup screen under Basic Setting and then click VLAN under Advanced Application to display the next screen. Figure 43 Port Based VLAN Se tup (All Conn ected) Figure 44 Port Based VLAN Setup (Port isolation)[...]

Chapter 8 VLAN GS-3012/GS- 3012F User’s Guid e 95 The following table describes the labels in this screen. T able 19 Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose fr om All conn ected or Port isolation . All connected means all ports can communicate wit h each other , that is, there are no virtual LANs. All inco ming and outgoing [...]

Chapter 8 VLAN GS-3012/GS-3012F User’s Guide 96[...]

GS-3012/GS- 3012F User’s Guid e 97 C HAPTER 9 Static MAC Forward Setup Use these screens to c onfigure forwarding ru les ba sed on MAC addresses of devices on your network. 9.1 Introduction to S t atic MAC Forward Setup A static MAC address is an address that has been ma nually entered in the MAC addres s table. St atic MAC addresses do not age o[...]

Chapter 9 Static MAC Forward Setup GS-3012/GS-3012F User’s Guide 98 The following table describes the labels in this screen. 9.3 V i ewing and Editing St atic MAC Forwarding Rules T o view a summary of the rule configuration, scroll down to the summ ary table at the bottom of the S tatic MAC Forwarding screen. T o change the settings of a rule , [...]

Chapter 9 Static MAC Forward Setup GS-3012/GS- 3012F User’s Guid e 99 Delete Check the rule(s) that you want to remove in the De lete column, then click the Delete button. Cancel Cli ck Cancel to clear the selected checkboxes in th e Delete column. T able 21 Static MAC Forwarding: Summary Table (contin ued) LABEL DESCRIPTION[...]

Chapter 9 Static MAC Forward Setup GS-3012/GS-3012F User’s Guide 100[...]

GS-3012/GS- 3012F User’s Guid e 101 C HAPTER 10 Filtering This chapter discusses static IP and MAC address port filtering. 10.1 Introduction to Filtering Filtering means sifting traf fic going through the switch based on the sour c e and/or destinatio n MAC addresses and VLAN group (ID). 10.2 Configuring a Filtering Rule Click Advanced App licati[...]

Chapter 10 Filtering GS-3012/GS-3012F User’s Guide 102 10.3 V iewing and Editing Filter Rules T o view a summary of the rule configuration, scroll down to the summ ary table at the bottom of the Filtering screen. T o change the settings of a rule , click a number in the Index field. Figure 48 Filtering: Summary T able The following table describe[...]

GS-3012/GS- 3012F User’s Guid e 103 C HAPTER 11 Spanning Tree Protocol The switch supports Spanning T ree Protocol (STP) and Rapid Spanning T ree Protocol (RSTP) as defined in th e following standards. • IEEE 802.1D Span ning Tree P rotocol • IEEE 802.1w Rap id Spanning T ree Protocol The switch also allows you to set up multiple STP configur[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 104 Path cost is the cost of tr ansmitting a frame onto a LAN thro ugh that port. It is assigned according to the speed of the link to which a port is attached. Th e slower the media, the higher the cost. On each bridge, the root port is the port thro ugh which this bridge communic[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 105 1 1.1.3 STP Port St ates STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding st ate so as to eliminate transient loops. 1 1.1.4 Multiple RSTP MRSTP (Multiple RSTP) is ZyXEL ’ s proprietary f[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 106 1 1.2 Sp anning T ree Protocol Main Screen The switch allows you to configure a single RS TP configuration or you can configure multiple configurations. See Section 1 1.1 on p a ge 103 for more informa tion on RSTP . Click Advanced Application , Spanning T ree Pr otocol in the [...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 107 Figure 51 RSTP: Configu ration The following table describes the labels in this screen. T able 27 RSTP: Configuration LABEL DESCRIPTION S tatus Click Status to display the RSTP Stat us scree n (see Figure 52 on page 109 ). Active Select this check box t o activate RSTP . Clea[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 108 1 1.4 Rapid Sp anning T r ee Protocol S tatus Click Advanced Appli c ation , Spanning T r ee Protocol in the navigation panel to display the status screen as shown next. See Section 1 1.1 on page 103 for more information on RSTP . Note: This screen is only available af ter you [...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 109 Figure 52 Rapid S p anning T ree Protocol: S t atus The following table describes the labels in this screen. 1 1.5 Configure Multiple Rapid Sp anning T ree Protocol T o configure MRSTP , select MRSTP in the Advanced Application , Spanning T ree Pro tocol screen. Se e Section [...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 11 0 Figure 53 MRSTP: Configuration The following table describes the labels in this screen. T able 29 MRSTP: Configuration LABEL DESCRIPTION S tatus Click St a tus to display the MRSTP St atus screen (see Figure 54 on page 1 12 ). T ree This is a read only index number of the STP [...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS- 3012F User’s Guid e 111 1 1.6 Multiple Rapid Sp anning T r ee Protocol S tatus Click Advanced Appli c ation , Spanning T r ee Protocol in the navigation panel to display the status screen as shown next. See Section 1 1.1 on page 103 for more information on MRSTP . Note: This screen is only available[...]

Chapter 11 Spanning T ree Protoc ol GS-3012/GS-3012F User’s Guide 11 2 Figure 54 MRSTP: S tatus The following table describes the labels in this screen. T able 30 S panning T ree Protocol: S tatus LABEL DESCRIPTION Configuration Click Configuration to configure MRSTP settings. Refer to Se ction 1 1.5 on page 109 . T ree Select which STP tree conf[...]

GS-3012/GS- 3012F User’s Guid e 11 3 C HAPTER 12 Bandwidth Control This chapter shows you ho w you can set the maximum bandwidth allowed for traf fic flows on a port using the Bandwidth Control setup screens. 12.1 Introduction to Bandwid th Control Bandwidth control mean s defining a maximum allowable bandwidth for incoming and/or out- going traf[...]

Chapter 12 Bandwidth Control GS-3012/GS-3012F User’s Guide 11 4 Figure 55 Bandwidt h Control The following table describes the labels in this screen. T able 31 Bandwidth Control LABEL DESCRIPTION Active Select this check box to activate bandwidth control. Port This fie ld displays the port nu mber . * Settings in this row apply to all ports. Use [...]

GS-3012/GS- 3012F User’s Guid e 11 5 C HAPTER 13 Broadcast Storm Control 13.1 Introducing Broadcast S torm Control Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the switch receives per sec ond on the ports. When the maximum number of allowable broadcast, multicast and/or DLF pa cket[...]

Chapter 13 Broadcast Storm Control GS-3012/GS-3012F User’s Guide 11 6 The following table describes the labels in this screen. T able 32 Broad cast Storm Cont rol LABEL DESCRIPTION Active Select this check box to enable traf fic storm control on the switch. Port This field displays a port number. * Settings in this row apply to all ports. Use thi[...]

GS-3012/GS- 3012F User’s Guid e 11 7 C HAPTER 14 Mirroring This chapter discusses the Mirror setup screens. 14.1 Introduction to Port Mirroring Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffi c to) in order that you can examine the traffi c from the monitor port without interference. 14.2 Port Mirr[...]

Chapter 14 Mirr oring GS-3012/GS-3012F User’s Guide 11 8 The following table describes the re lated labels in this screen. T able 33 Mirroring LABEL DESCRIPTION Active Clear this check box to deactivate port mirroring on the switch. Monitor Port The monitor port is the port you co py the traffic to in order to exami ne it in more detail without i[...]

GS-3012/GS- 3012F User’s Guid e 11 9 C HAPTER 15 Link Aggregation This chapter shows you how to logically aggreg ate physical links to form one logical, high er- bandwidth link. 15.1 Introduction to Link Aggregation Link aggregation (trunking) is the grouping of physical ports into one logical higher -c apacity link. Y ou may want to trunk ports [...]

Chapter 15 Link Aggregation GS-3012/GS-3012F User’s Guide 120 15.1.2 Link Aggregation ID LACP aggregation ID consis ts of th e following information: 15.2 Link Aggregation Protocol S t atus Click Advanced App lication , Link Aggregation in the navigation pa nel to display the Link Aggregati on Protocol S tatus scre en. Figure 58 Link Aggregation:[...]

Chapter 15 Link Aggregation GS-3012/GS- 3012F User’s Guid e 121 15.3 Link Aggregation Setup Click Configuration in the Link Aggr egation Protocol S tatus screen to display the screen shown next. Y ou can configure up to six link aggregatio n groups and each group can aggregate up to eight ports. Figure 59 Link Aggregation: Configuration The follo[...]

Chapter 15 Link Aggregation GS-3012/GS-3012F User’s Guide 122 System Prior ity LACP system priority is a number between 1 and 65,535. The swit ch with the lowest system priority (and lowest po rt number if system priority is the same) becomes the LACP “server”. The LACP “server” controls the opera tion of LACP setup. Enter a number to set[...]

GS-3012/GS- 3012F User’s Guid e 123 C HAPTER 16 Port Authentication This chapter describes the 802.1x authenti cation method and RADIUS server connection setup. 16.1 Introduction to Authentication IEEE 802.1x is an extended authentication protocol 1 that allows support of RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) fo r ce[...]

Chapter 16 Port Authentication GS-3012/GS-3012F User’s Guide 124 " Refer to the documentation that comes with your RADIUS server on how to configure a VSA. The following table describes the VSAs supported on the switch. 16.1.1.2 T unnel Protocol Attribute Y ou can configure tunnel protocol attributes on the RADIUS server to assign a port on [...]

Chapter 16 Port Au thentication GS-3012/GS- 3012F User’s Guid e 125 16.2 Configuring Port Authentication T o enable port authentication, first activate IEEE802.1x security (both on the switc h and the port(s)) then configure th e RADIUS server settings. Click Port Authentication under Advanced Application in the navigation panel to display the sc[...]

Chapter 16 Port Authentication GS-3012/GS-3012F User’s Guide 126 16.2.2 Configuring IEEE802.1x Use this screen to activate IEEE 802.1x security . From the Port Authentica tion screen, c lick 802.1x to display the configur ation screen as shown. Figure 63 Port Authentication: 802.1x The following table describes the labels in this screen. T able 4[...]

Chapter 16 Port Au thentication GS-3012/GS- 3012F User’s Guid e 127 Reauthentication Ti m e r S pecify how often a client has to re-enter his or he r username and password to stay connected to the port. Apply Click Apply to save your changes to the swit ch’s run-time memory . The switch loses these changes if it is turned off or loses power , s[...]

Chapter 16 Port Authentication GS-3012/GS-3012F User’s Guide 128[...]

GS-3012/GS- 3012F User’s Guid e 129 C HAPTER 17 Port Security This chapter shows you how to set up port security . 17.1 About Port Security Port security allows only packets w ith dynami cally learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch. The switch can learn up to 16K MAC addresses in total wi[...]

Chapter 17 Port Secu rity GS-3012/GS-3012F User’s Guide 130 Figure 64 Port Security The following table describes the labels in this screen. T able 42 Port Security LABEL DESCRIPTION Active Select this check box to enable the port security feature on the sw itch. Port This field displays a port number . * Settings in this row apply to all ports. [...]

Chapter 17 Port Security GS-3012/GS- 3012F User’s Guid e 131 Apply Click Apply to save your changes to the switch ’s run-time memory . The switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Ca[...]

Chapter 17 Port Secu rity GS-3012/GS-3012F User’s Guide 132[...]

GS-3012/GS- 3012F User’s Guid e 133 C HAPTER 18 Classifier This chapter introduces and shows you how to configure the packet cl assifier on the switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a ne twork’ s ability to deliver data with minimum delay , and the networking methods used to control th e use of bandwi[...]

Chapter 18 Classifier GS-3012/GS-3012F User’s Guide 134 Figure 65 Classifier The following table describes the labels in this screen. T able 43 Classifier LABEL DESCRIPTION Active Select this optio n to enable this rul e. Name Enter a descriptive name for this rule for identifying purpose s. Packet Format Specify the form at of the packet. C hoic[...]

Chapter 18 Classifier GS-3012/GS- 3012F User’s Guid e 135 Ethernet T ype Select an Ethernet type or select Others an d enter the Ethern et type number in hexadecimal value. Refer to T able 45 on page 136 for in formation. Source MAC Address Select Any to apply the rule to all MAC addresses. T o speci fy a source, select the second choice and type[...]

Chapter 18 Classifier GS-3012/GS-3012F User’s Guide 136 18.3 V iewing and Editing Classifier Configuration T o view a summary of the classifier configuration, scroll down to th e summar y table at the bottom of the Clas sifier screen. T o change the settings of a rule, click a number in the Index field. " When two rules conflict with eac h o[...]

Chapter 18 Classifier GS-3012/GS- 3012F User’s Guid e 137 Some of the most common IP ports are: 18.4 Classifier Example The following figure shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. After you have configured a classifier , you can configure a policy (in the Policy [...]

Chapter 18 Classifier GS-3012/GS-3012F User’s Guide 138 Figure 67 Classifier: Example[...]

GS-3012/GS- 3012F User’s Guid e 139 C HAPTER 19 Policy Rule This chapter shows you how to configure policy rules. 19.1 About Policy Rules A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 18 on page 133 for more information). A policy rule ensures that a traffic flow gets the requested treatment in t[...]

Chapter 19 Policy Rule GS-3012/GS-3012F User’s Guide 140 19.2 Configuring Policy Rules " Y ou must first configur e a classifier in the Classifier screen. Refer to Chapter 18 on page 133 for more information. Click Advanced App lications and then Policy Rul e in the navigation panel to display the screen as shown. Figure 68 Policy[...]

Chapter 19 Policy Rule GS-3012/GS- 3012F User’s Guid e 141 The following table describes the labels in this screen. T able 47 Policy LABEL DESCRIPTION Active Select this option to enable the policy . Name Enter a descriptive name for identification purposes. Classifier(s) This field displays the active classifier(s) you configure in th e Classifi[...]

Chapter 19 Policy Rule GS-3012/GS-3012F User’s Guide 142 19.3 V iewing and Editing Policy Configuration T o view a summary of the classifier configuration, scroll down to th e summar y table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field. Figure 69 Policy: Summary T able DiffServ Select No[...]

Chapter 19 Policy Rule GS-3012/GS- 3012F User’s Guid e 143 The following table describes the labels in this screen. 19.4 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-band traffic on a traffic flow classified using the Exam ple classifier (refer to Section 18.4 on[...]

Chapter 19 Policy Rule GS-3012/GS-3012F User’s Guide 144 Figure 70 Policy Example[...]

GS-3012/GS- 3012F User’s Guid e 145 C HAPTER 20 Queuing Method This chapter introduces SPQ and WFQ. 20.1 Introduction to Queuing Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorith ms for outgoing traf fic. See also Priority Queu e Assignment in Switch[...]

Chapter 20 Que uing Method GS-3012/GS-3012F User’s Guide 146 20.1.2 We ighted Round Robin Scheduling (WRR) Round Robin Scheduling services queues on a rotati ng basis and is activated only when a port has more traffic than it can handle. A queue is given an amou nt of bandwidth irrespective of the incoming traf fic on that port . This queue then [...]

Chapter 20 Queuing Method GS-3012/GS- 3012F User’s Guid e 147 Figure 71 Queuing M ethod The following table describes the labels in this screen. T able 50 Queuing Method LABEL DESCRIPTION Port This label shows the port you are configuring. Method Select SPQ (S trict Priority Queuing) or WRR (Weighted Round Robin) scheduling. S trict Priority Queu[...]

Chapter 20 Que uing Method GS-3012/GS-3012F User’s Guide 148[...]

GS-3012/GS- 3012F User’s Guid e 149 C HAPTER 21 Multicast This chapter shows you how to conf igure various multicast features. 21.1 Multicast Overview T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybod y on the network). Multicast delivers IP packets to just[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 150 The switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group. IGMP snooping generates no additional ne twork traf fic, allowing you to significantly reduce multicast tr[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 151 Figure 73 Multicast Setting The following table describes the labels in this screen. T able 52 Multicast Setting LABEL DESCRIPTION IGMP Snooping Active Select Active to enable IGMP snooping to forward group multicast traffic only to ports that are members of that group. Host T imeout Specif[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 152 Unknown Multicast Fr ame S pecify the action to perform when th e switch receives an unknown multicast frame. Select Drop to discard the frame(s). Select Flooding to send the frame(s) to all ports. Reserved Multicast Group Multicast addresses (224.0.0.0 to 224.0.0.255) are reserved for the lo[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 153 21.4 IGMP Filtering Profile IGMP filter profiles allow you to control access to IGMP multicast groups. This allows you to have a service available to a specific IGMP multicast group. Y ou can configure an IGMP filter profile for an IGMP multicast group that has access to a service (like a S[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 154 21.5 MVR Overview Multicast VLAN Registration (MV R) is designed for applicatio ns (such as Media-on-Dem and (MoD)) that use multicast traffi c across an Ethe rnet ring-based servic e provider network. MVR allows one single multicast VLAN to be shared among dif ferent subscriber VLANs on the [...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 155 In dynamic mode, the switch sends IGMP leave and join reports to th e other multicast devices (such as multicast routers or servers) in the mu lticast VLAN. This allows the multicast devic es to update the multicast forwar ding table to forward or not forward multicast traf fic to the recei[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 156 " Y our switch automatically creates a stat ic VLAN (with the same VID) when you create a multicast VLAN in this screen. Figure 77 MVR The following table describes the re lated labels in this screen. T able 54 MVR LABEL DESCRIPTION Active Select this check box to enable MVR to allow one[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 157 21.7 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Configure MVR IP multicast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. Mode S pecify[...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 158 " A port can belong to more than one multicast VLAN. However , IP multicast group addresses in different mult icast VLANs cannot overlap. Figure 78 MVR Group Configuration The following table describes the labels in this screen. T able 55 MVR Group Configuration LABEL DESCRIPTION Multica[...]

Chapter 21 Multicast GS-3012/GS- 3012F User’s Guid e 159 21.7.1 MVR Conf iguration Example The following figure shows a network example wh ere ports 1, 2 and 3 on the switch belong to VLAN 1. In addition, port 7 belo ngs to the multicast group with VID 200 to receive multicast traffic (the News and Movie channels) from the remote streaming media [...]

Chapter 21 Multicast GS-3012/GS-3012F User’s Guide 160 T o set the switch to forward the multicast group traffic to the su bscribers, configure multicast group settings in the Gr oup Configuration sc reen. The following fi gure shows an example where two multicast groups ( News and Movie ) are configured for the multicast VLAN 200. Figure 81 MVR [...]

GS-3012/GS- 3012F User’s Guid e 161 C HAPTER 22 DHCP Relay This chapter describes the DHCP relay and shows you how to configure the DHCP Relay screen. 22.1 DHCP Relay Overview DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at st a rt-up from a DHCP server . Y o u can con[...]

Chapter 22 DHCP Relay GS-3012/GS-3012F User’s Guide 162 Figure 83 DHCP Relay The following table describes the labels in this screen. T able 56 DHCP R elay LABEL DESCRIPTION Active Select this check box to enable DHCP relay . Remote DHCP Server 1 .. 3 Enter the IP address of a DHCP server in dotted decimal notation. Relay Agent Information Select[...]

163 P ART IV S t atic Routing and Management Routing Protocol (165 ) Maintenance (167) Access Control (175) Diagnostic (187) Syslog (189) Cluster Managemen t (193) MAC T able (199) ARP T able (201) Configure Clone (203)[...]

164[...]

GS-3012/GS- 3012F User’s Guid e 165 C HAPTER 23 Routing Protocol This chapter shows you how to configure the routing functions. 23.1 S tatic Route Overview Stat ic routes tell the switch how to forwar d IP traffic when you configure the TCP/IP parameters manually . Click Routing Pr otocol in the navigation panel and then S tatic Routing to displa[...]

Chapter 23 Routing Protocol GS-3012/GS-3012F User’s Guide 166 V iew the current sta tic routes on the switch in the summary table at th e bottom of the screen. Figure 85 S tatic Routin g: Summary T able The following table describes the labels in the summary table. Gateway IP Address Enter the IP address of the gateway . The ga teway is an immedi[...]

GS-3012/GS- 3012F User’s Guid e 167 C HAPTER 24 Maintenance This chapter explains how to config ure the maintenance screens. The link s on the upper right of the Maintenance screen lead to different screens that let you maintain the firmware and configuration files. 24.1 Maintenance Click Management and then Maintenance in the navigation panel to[...]

Chapter 24 Maintenance GS-3012/GS-3012F User’s Guide 168 24.2 Load Factory Default s Press the Click Here button next to Load Factory Defaults to clear all switch configuration information you configured and return to the factory defaults. The following messa ge appears. Figure 87 Confirm Load F actory Defaults Click OK to the confirmation screen[...]

Chapter 24 Maintenance GS-3012/GS- 3012F User’s Guid e 169 Alternatively , click Save on the top right-hand corner in an y screen to save the configuration changes to the current configuration. " Clicking the Apply or Add button does NOT save the changes permanently . All unsaved changes are erased af ter you reboot the switch. 24.4 Reboot S[...]

Chapter 24 Maintenance GS-3012/GS-3012F User’s Guide 170 Figure 90 Firmware Upg rade T ype the path and file name of the firmware f ile you wish to upload to the switch in the File Path text box or click Br owse to locate it. After you have specified the file, click Upgrade . " The system does not restar t automatically after you upload the [...]

Chapter 24 Maintenance GS-3012/GS- 3012F User’s Guid e 171 Figure 92 Backup Config uration Follow the steps below to back up the current switch configuration to your computer in this screen. 1 Click Backup . 2 Click Save to display the Save As screen. 3 Choose a location to save the file on yo ur computer from the Save in drop-down list box and t[...]

Chapter 24 Maintenance GS-3012/GS-3012F User’s Guide 172 ZyNOS (ZyXEL Network Operating System someti mes referred to as the “ras” file) is the system firmware and has a “bin” filename extension. 24.8.1.1 Example FTP Commands ftp> put firmware.bin ras This is a sample FTP session showing the transfer of the computer file "firmware[...]

Chapter 24 Maintenance GS-3012/GS- 3012F User’s Guid e 173 24.8.3 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients. 24.8.4 FTP Restrictions FTP will not work when: • FTP service is disabled in the Access Control screen. • The IP address(es) in the Secured Client Set in the Remo[...]

Chapter 24 Maintenance GS-3012/GS-3012F User’s Guide 174[...]

GS-3012/GS- 3012F User’s Guid e 175 C HAPTER 25 Access Control This chapter describes how to control access to the switch. 25.1 About Access Control Click Advanced Application , Access Control from the navigation panel to display the screen as shown. From this screen you can config ure SNMP , up to four web configurator administrators, enable /di[...]

Chapter 25 Access Control GS-3012/GS-3012F User’s Guide 176 Figure 94 Console Port Priority 25.3 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network switches. SNMP is a member of TCP/IP protoco l suite. A manager station can m anage and monitor the switch thro ugh the network via [...]

Chapter 25 Access Control GS-3012/GS- 3012F User’s Guid e 177 25.3.1 Supported MIBs MIBs let administrators collect statisti cs and monitor status and pe rformance. The switch supports the following MIBs: • SNMP MIB II (RFC 1213) • RFC 1 157 SNMP v1 • RFC 1493 Bridge MIBs • RFC 1643 Ethernet MIBs • RFC 1 155 SMI • RFC 2674 SNMPv2, SNM[...]

Chapter 25 Access Control GS-3012/GS-3012F User’s Guide 178 Figure 96 Access Control: SNMP The following table describes the labels in this screen. 25.3.4 Setting Up Login Account s Up to five people (one ad ministrator and fo ur non-administrators) may access the switch via web configurator at any one time. 1 An administrator is someone who can [...]

Chapter 25 Access Control GS-3012/GS- 3012F User’s Guid e 179 Click Access Control from the navigation panel and then click Logins from this screen. Figure 97 Access Control: Logins The following table describes the labels in this screen. T able 66 Access Control: Logins LABEL DESCRIPTION Administrator This is the default administrato r account w[...]

Chapter 25 Access Control GS-3012/GS-3012F User’s Guide 180 25.4 SSH Overview Unlike T elnet or FTP , which transmit data in clear text, SSH (Secure Shell) is a secure communication protoc ol that combines authenticatio n and data encryption to provide secure encrypted communication bet w een two hosts over an unsecured network. Figure 98 SSH Com[...]

Chapter 25 Access Control GS-3012/GS- 3012F User’s Guid e 181 25.6 SSH Implement ation Y our switch supports SSH versi ons 1 and 2 using RSA and DSA authentication and five encryption methods (AES, 3DES, RC4, Blowfish and CAST). The SSH ser ver is implemented on the switch for remote management and file tran sfer on port 22 (by default). Up to fo[...]

Chapter 25 Access Control GS-3012/GS-3012F User’s Guide 182 25.7.1 HTTPS Example If you haven’t changed the default HTTPS port on the switch, then in your browser enter “https://switch IP Address/” as the web site address where “switch IP Address” is the IP address or domain name of the switch you wish to access. The HTTPS proxy server [...]

Chapter 25 Access Control GS-3012/GS- 3012F User’s Guid e 183 Figure 102 Security Certificate 1 (Net scape) Figure 103 Security Certificate 2 (Net scape) 25.7.4 Login Screen After you accept the certificate and login in , the switch main screen appears. The lock displayed in the bottom of the browser status bar denotes a secure connection.[...]

Chapter 25 Access Control GS-3012/GS-3012F User’s Guide 184 Figure 104 Example: Lock Denotin g a Secure Connectio n 25.8 Service Access Control Service access control allows you to decide wh at services you may us e to access the switch. Y ou may also change the default service po rt an d configure “truste d co mputer(s)” for each service in [...]

Chapter 25 Access Control GS-3012/GS- 3012F User’s Guid e 185 The following table describes th e fields in this screen. 25.9 Remote Management From the Access Control screen, display the Remote Management screen as shown next. Y ou can specify a group of one or more “trust ed computers” from which an administrator may use a service to manage [...]

Chapter 25 Access Control GS-3012/GS-3012F User’s Guide 186 S tart Address End Address Configure the IP address range of tr usted computers from which you can manage this switch. The switch checks if the client IP addre ss of a computer requesting a service or protocol matches the range set here. Th e switch immediately disconnects the session if[...]

GS-3012/GS- 3012F User’s Guid e 187 C HAPTER 26 Diagnostic This chapter explains the Diagnostic screens. 26.1 Diagnostic Click Management and then Diagnos tic in the navigation panel to d isplay this screen. Use this screen to check system logs, ping IP ad dresses or perform loop back tests on a port. Figure 107 Diagnostic The following table des[...]

Chapter 26 Diagnostic GS-3012/GS-3012F User’s Guide 188[...]

GS-3012/GS- 3012F User’s Guid e 189 C HAPTER 27 Syslog This chapter explains the syslog screens. 27.1 Syslog The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event mes sages. A syslog-enabled device can generate a syslog message and send it to a syslog server . Syslog i[...]

Chapter 27 Syslog GS-3012/GS-3012F User’s Guide 190 Figure 108 Syslog Setup The following table describes the labels in this screen. 27.3 Syslog Server Setup Click Management and then Syslog in the navigation panel to display the Syslog Setup screen. Click the Syslog Server Setup link to open the following screen. Use this screen to configure a l[...]

Chapter 27 Sy slog GS-3012/GS- 3012F User’s Guid e 191 Figure 109 Syslog Server Setup The following table describes the labels in this screen. T able 72 Syslog Server Setup LABEL DESCRIPTION Active Select this check box to have the devic e send logs to this syslog server . Clear the check box if you want to cr eate a syslog server entr y but not [...]

Chapter 27 Syslog GS-3012/GS-3012F User’s Guide 192[...]

GS-3012/GS- 3012F User’s Guid e 193 C HAPTER 28 Cluster Management This chapter introduces cluster management. 28.1 Introduction to Cluster Management Cluster Managemen t 2 allows you to manage switches through one switch, called the cluster manager . The switches must be directly connec ted and be in the same VLAN group so as to be able to commu[...]

Chapter 28 Cluster Management GS-3012/GS-3012F User’s Guide 194 28.2 Cluster Management S tatus Click Management in the navigation panel and then Cluster Management to display the following screen. Figure 1 1 1 Cluster Management S tatus The following table describes the labels in this screen. 28.2.1 Cluster Member Switch Management Go to the Clu[...]

Chapter 28 Cluster Management GS-3012/GS- 3012F User’s Guid e 195 Figure 1 12 Cluster Member Web Configuration Screen 28.2.1.1 Uploading Firm ware to a Cluster Member Switch Y ou can use FTP to upload firmwa re to a cluster member switch thr ough the cluster manager switch as shown in the following example. Figure 1 13 Example: Uploading Firmware[...]

Chapter 28 Cluster Management GS-3012/GS-3012F User’s Guide 196 28.3 Clustering Management Configuration Click Configuration from the Clu s ter Management screen to display the next screen. Refer to Section 28.1 on page 193 for more information. Figure 1 14 Configuring Cluster Mana gement config-00-13-49-0 0-00- 02 The cluster member switch’s c[...]

Chapter 28 Cluster Management GS-3012/GS- 3012F User’s Guid e 197 The following table describes the labels in this screen. T able 76 Configuring Cluster Management LABEL DESCRIPTION Clustering Manager Active Select Active to ha ve this switch become the cluster manager switch. A cluster can only have one manager . Other (directly connected) switc[...]

Chapter 28 Cluster Management GS-3012/GS-3012F User’s Guide 198[...]

GS-3012/GS- 3012F User’s Guid e 199 C HAPTER 29 MAC Table This chapter introduces MAC T able. 29.1 Introduction to MAC T able The MAC table shows how frames are forwarded or filtered across the switch’ s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dy[...]

Chapter 29 MAC Ta ble GS-3012/GS-3012F User’s Guide 200 29.2 V iewing MAC T able Click Management in the navigation panel and then MAC T able to display the following screen. The MAC T able can hold up to 16K entries. Figure 1 16 MAC T able The following table describes the labels in this screen. T able 77 MAC Table LABEL DESCRIPTION Sort by Clic[...]

GS-3012/GS- 3012F User’s Guid e 201 C HAPTER 30 ARP Table This chapter introduces the ARP T able. 30.1 Introduction to ARP T able Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on the local area network. An [...]

Chapter 30 ARP Table GS-3012/GS-3012F User’s Guide 202 Figure 1 17 ARP T able The following table describes the labels in this screen. T able 78 ARP Table LABEL DESCRIPTION Index This is the ARP T able entry number . IP Address This is the learned IP address of a devic e connected to a switch port with corresponding MAC address below . MAC Addres[...]

GS-3012/GS- 3012F User’s Guid e 203 C HAPTER 31 Configure Clone This chapter shows you how you can copy the settings of one port onto other ports. 31.1 Configure Clone Cloning allows you to co py the basic and advanced settings fro m a sour ce port to a destination port or ports. Click Management , Configure Clon e to open the following screen. F[...]

Chapter 31 Config ure Clone GS-3012/GS-3012F User’s Guide 204 The following table describes the labels in this screen. T able 79 Configure Clone LABEL DESCRIPTION Source/ Destination Port Enter the source port under the Source label. This port’s attributes are copied. Enter the destination port or ports under the Destination label. Thes e are t[...]

205 P ART V Commands and T roubleshooting Introducing the Commands (207) Command Example s (239) IEEE 802.1Q T agged VLAN Commands (257) T roubleshooting (265)[...]

206[...]

GS-3012/GS- 3012F User’s Guid e 207 C HAPTER 32 Introducing the Commands This chapter introduces th e commands and gives a summary of commands available. 32.1 Overview In addition to the web con figurator, you can us e line commands to conf igure the switch. Use line commands for ad vanced switch diagn osis and troubleshooting . If you have probl[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 208 " The switch automatically logs you out of the management in terface after five minutes of inactivity . If this happens to you, simply log back in again. 32.2.1 Access Priority • By default, the switch allows multiple concu rrent lo gins. However , no more than ten con[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 209 1 For local management, connect yo ur computer to the RJ-45 management port (labeled MGMT ) on the switch. 2 Make sure your computer IP address and th e switch IP address are on the same subnet. In W indows, click St a r t (usually in the bottom left corner), Ru n and then [...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 210 32.5 Getting Help The system includes a help faci l ity to provide you with the following information about the commands: • List of available commands under a command group. • Detailed descriptions of the commands. 32.5.1 List of A vailable Commands Enter “ help ” to [...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 21 1 Enter <command> ? to display detailed help inform ation about the sub commands and parameters. Figure 123 CLI Help: Det a iled Command Information: Example 1 Figure 124 CLI: Help: Deta iled Command Inf ormation: Exam ple 2 32.6 Privilege Levels Y ou can use a command[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 212 T o enter Enable (or privileged) mode, type enable and enter the administrator password when prompted (the defa ult is 1234). When you enter Enable mode, the comm and prompt changes to the pound sign ( # ). If you log into th e comm and interpreter as an administrator ( admin[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 213 32.8 Using Command History The switch keeps a list of commands you have entered for the current CLI session. Y ou can use any commands in the history again by press ing the up ( y ) or down ( z ) arrow key to scroll through the previously use d commands and press [ENT ER]. [...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 214 32.10 Command Summary The following sections summarize the commands available in the switch together with a bri e f description of each command. Comm ands listed in the tables are in alphabetical order . See the related section in the User ’ s Guide for more background info[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 215 32.10.2 Enable Mode The following table describes the co mmands available for Enable mode. T able 82 Command Summary: Enable Mode COMMAND DESCRIPTION PRIVILEGE baudrate <1|2|3|4|5> Changes the console port speed. Choices are 1 (38400), 2 (19200), 3(9600), 4 (57600) an[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 216 interface port- channel <port- list> Resets to the factory default settings on a per port basis. 13 interface port- channel <port- list> [[active] [name] [speed-duplex] [bpdu-control] [flow-control] [intrusion-lock] [vlan1q] [vlan1q-member] [bandwidth-limit] [port[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 217 reload config <index> Restart s th e system with the specified configuration fil e. 13 show alarm-status Displa ys alarm status and configuration. 13 classifier Displays all classifier related information. 13 <name> Displays the specified classifier related info[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 218 igmp-group- limited Displays IGMP group settings. 13 igmp-immediate- leave Displays IGMP immediate leave settings. 13 igmp-query-mode Displays IGMP query mode settings on the port( s). 13 ip Displays IP related information. 13 TCP Displays the switch’s current TCP sessions.[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 219 <port-list> Displays port authentication settings on the specified port(s). 13 port-security Displays all port security settings. 1 3 <port-list> Displays port security settin gs on the specified port(s). 13 radius-server Displays RADIUS server settings. 13 remo[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 220 32.10.3 Configure Mode The following table lists the commands in Configuration (or Config) mode. system- information Displays general system information. 13 time Displays current system time and date. 13 timesync Displays time server information. 13 trunk Displays link aggreg[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 221 classifier <name> <[packet-format <802.3untag|802.3t ag| EtherIIuntag|Ether IItag>] [priority <0-7>] [vlan <vlan-id>] [ethernet-type <ether-num|ip|ipx| arp|rarp| appletalk|decnet| sna|netbios|dlc>] [source-mac <src- mac-addr>] [source-[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 222 helper-address <svr_ip> [svr2_ip] [svr3_ip] Sets the IP addresses of up to 3 DHCP servers. 13 information Allows the switch to add system name to agent information. 13 option Allows the switch to add DHCP relay agent information. 13 exit Returns you to User mode. 13 gar[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 223 unknown-multicast- frame <drop|flooding> Sets how to treat traffic from unknown multicast group. 13 interface port-channel <port-list> Enables a port or a list of ports for configuration. See Section 32.10.5 on page 233 for more details. 13 ip address <ip>[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 224 mac-forward name <name> mac <mac-addr> vlan <vlan-id> interface <interface-id> Configures a static MAC address forwarding rule. 13 name <name> mac <mac-addr> vlan <vlan-id> interface <interface-id> inactive Disables a static MAC[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 225 <name> inactive Enables a classifier . 1 3 cluster Disables cluster management on the switch. 13 member <mac- address> Removes the cluster member . 13 dhcp-relay Disables DHCP relay . 13 information System name is not appended to option 82 information field. 13 [...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 226 mrstp <tree-index> Disables the specified STP configuration. tree-index : 1 or 2 13 mrstp interface <port-list> Disab les the STP assignment from the specified port(s). 13 multi-login Disables another administrator from logging into T elnet or the CLI. 14 mvr <[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 227 ssh Disables SSH (Secure Shell) server access to the switch. 13 telnet Disables telnet access to the switch. 13 snmp-server trap-destination <ip> Removes a configured trap destination IP address. 13 spanning-tree Disables STP . 13 <port-list> Disables STP on lis[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 228 password <password> Change the password for Enable mode. 14 policy <name> classifier <classifier-list> <[vlan<vlan-id>] [egress-port <port-num>] [priority <0-7>] [dscp <0-63>] [tos <0-7>] [bandwidth <bandwidth>] [outgoi[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 229 <port-list> reauth-period <reauth-period> S pecifies how often a client has to re-enter the username and password to stay connected to the specified port(s). 13 port-security Enables port security on the switch. 13 <port-list> Enables the port security fea[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 230 service- control ftp <socket- number> Allows FTP access on the specified service port. 13 http <socket- number> <timeout> Allows HTTP access on the specified service port and defines the timeout pe riod. 13 https <socket- number> Allows HTTPS access on[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 231 server <ip> inactive Disables a syslog server entry . 13 level <0-7> Sets which severity level(s) of logs are sent to this syslog server . A lower number is more critical. 13 type <system, interface, switch, authentication, ip> Sets the device to generate [...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 232 32.10.4 config-vlan Commands The following table lists the vlan commands in configuration mode. T able 84 Command Summary: conf ig-vlan Commands COMMAND DESCRIPTION PRIVILEGE vlan <1-4094> Creates a ne w VLAN group. 13 exit Leaves the VLAN configuration mode. 13 fixed &[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 233 32.10.5 interface port-channel Commands The following table lists the interface port-channel commands in configuration mode. Use these commands to configure the ports. ip address inband-default dhcp-bootp Sets the default in-band interface to use a static IP address in this[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 234 egress set <port-list> Sets the outgoing traf fic port li st for a port-based VLAN. 13 exit Exits from the interface configuration command set. 13 flow-control Enables interface flow control. Flow control regulates transmissions to match the bandwidth of the recei ving [...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 235 name <port-name- string> Sets a name for your interface. Enter a descriptive name (up to nine prin table ASCII characters). 13 no bandwidth-limit cir Disables CIR bandwidth limits on the port(s). 13 bandwidth-limit egress Disables egress bandwidth limits on the port(s[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 236 32.10.6 mvr Commands The following table lists the mvr commands in configuration mode. spq Sets the interface to use S trict Priority Queuing. 13 test Performs an interface loopback test. 13 vlan-trunking Enables VLAN T runking on ports connected to othe r s witches or router[...]

Chapter 32 Intro ducing the Comma nds GS-3012/GS- 3012F User’s Guid e 237 receiver-port <port- list> Sets the receiver port(s). An MVR receiver port can only receive multicast traffic in a multicast VLAN. 13 source-port <port- list> Sets the source port(s). An MVR source port can send and receive multicast traffic in a multicast VLAN.[...]

Chapter 32 Introd ucing the Co mmands GS-3012/GS-3012F User’s Guide 238[...]

GS-3012/GS- 3012F User’s Guid e 239 C HAPTER 33 Command Examples This chapter describes some commands in more detail. 33.1 Overview These are commands that you may use fre quently in maintaining your switch. 33.2 show Commands These are the commonly used show commands. 33.2.1 show system-information Syntax: show system-information This command sh[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 240 33.2.2 show hardware-monito r Syntax: show hardware-monitor [c|f] This command displays the current hardware stat us (such as temperature and voltage levels). Figure 128 how hardware -monitor Command Example 33.2.3 show ip Syntax: show ip This command displays the IP re lated informat[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 241 33.2.4 show logging " This command is not av ailable in User mode. Syntax: show logging This command displays the system logs. The following figure shows an example. Figure 130 show logging C ommand Example " If you clear a log (by entering y at the “ Clear Error Log (y/[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 242 Figure 131 show interface Command Examp le 33.2.6 show mac address-table Syntax: show mac address-table <all <sort>|s tatic> This command displays the MAC address(es) st ored in the switch. The following example shows a static MAC address table. sysname# show interface 2 P[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 243 Figure 132 show mac address-t able Command Example 33.3 ping Syntax: ping <ip> < [in-band|out-of-band|vla n <vlan-id> ] [ size <0-8024> ] [ -t ]> This command sends Ping packets to an Ethe rnet device. The following examp le sends Ping requests to and display[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 244 This command displays information about the route to an Ethernet device. The following example displays route informatio n to an Ethernet device with an IP address of 192.168.1.100 . Figure 134 traceroute C ommand Exam ple 33.5 Enabling RSTP T o enable RSTP on a port, enter spanning-t[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 245 This command backs up the cu rrent configuration file on a TFTP server . The following example backs up the current configuration to a file ( test.cfg ) on the TFTP server ( 172.23.19.96 ). Figure 136 CLI: Backup Confi guration Example 33.6.2 Restoring Configuration This command all[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 246 33.6.3 Using a Different Configuration File Y ou can store up to two configuration files on th e switch. Only one configuration file is used at a time. By default the switch uses the first configuration file (with an index number of 1). Y ou can set the switch to use a different confi[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 247 33.7 Example no Commands These are the commonly used comma nd examples that belong to th e “ no ” group of commands. 33.7.1 no mirror-port Syntax: no mirror-port Disables port mirroring on the sw itch. An example is shown next. Figure 141 no mirror -port Command Example 33.7.2 n[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 248 33.7.3 no port-access-authenticator Syntax: no port-access-authenticator no port-access-authenticator <port-list> reauthenticate no port-access-authenticator <port-list> An example is shown next. • Disable authentication on the switch. • Disable re-authentication on po[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 249 • Remove the remote host with IP address 172.165.1.9 and with an SSH-RSA encryption key from the list of known h osts. Figure 144 no ssh Command Example 33.8 interface Commands These are some commonly used commands that belong to the interfa ce group of commands. 33.8.1 interface [...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 250 • Enable ports one, three, four an d five for configuration. • Set the BPDU control to tunnel, to forward BPDUs received on ports one, three, four and five. Figure 146 interface bpdu-contr ol Command Example 33.8.3 broadcast-limit Syntax: broadcast-limit broadcast-limit <pkt/s&[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 251 • Enable port one for config uration. • Enable bandwidth contro l. • Set the outgoing traffic bandwidth limit to 5000Kbps. • Set the guaranteed bandwidth allowe d for incoming traffic to 4000Kbps. • Set the maximum bandwidth allo wed for incoming traffic to 8000Kbps. Figur[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 252 GVRP (GARP VLAN Registratio n Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLANs grou ps beyond the local switch. An example is shown next. • Enable the IEEE 802.1Q[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 253 33.8.9 weight Syntax: weight <wt1> <wt2> ... <wt8> An example is shown next. • Enable port two and p o rts six to eight for configuration. • Set the queue weights from Q0 to Q7. Figure 153 weight Command Exa mple 33.8.10 egress set Syntax: egress set <port-l[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 254 An example is shown next. • Enable ports one, three, four an d five for configuration. • Set the IEEE 802.1p quality of service priority as four (4). Figure 155 qos priority Comm and Example 33.8.12 name Syntax: name <port-name-string> An example is shown next. • Enable po[...]

Chapter 33 Command Exampl es GS-3012/GS- 3012F User’s Guid e 255 Figure 157 speed-duplex Co mmand Example sysname(config)# interface port-chan nel 1,3-5 sysname(config-interface)# speed-dup lex 10-half[...]

Chapter 33 Comm and Examples GS-3012/GS-3012F User’s Guide 256[...]

GS-3012/GS- 3012F User’s Guid e 257 C HAPTER 34 IEEE 802.1Q Tagged VLAN Commands This chapter describes the IEEE 802.1Q T agged VLAN and associated commands. 34.1 IEEE 802.1Q T agged VLAN Overview See the VLAN chapter for more information on VLANs. There are two kin ds of tagging: 1 Explicit T agging A VLAN identifier is added to the frame header[...]

Chapter 34 IEEE 802.1Q Tagged VLAN Co mmands GS-3012/GS-3012F User’s Guide 258 34.3 Configuring T agged VLAN The following procedur e shows you how to configure tagged VLAN. 1 Use the IEEE 802.1Q tagged VLAN comman ds to configure tagged VLAN for the switch. 2 Use the vlan <vlan-id> command to c onfigure or crea te a VL AN on the switch. Th[...]

Chapter 34 IEEE 802.1Q Tagged VLAN Commands GS-3012/GS- 3012F User’s Guid e 259 34.4.1 GARP St atus Syntax: show garp This command shows the switch’ s GARP timer se ttings, including the join, leave and leave all timers. An example is shown next. Figure 160 garp st atus Command Example 34.4.2 GARP Timer Syntax: garp join <msec> leave <[...]

Chapter 34 IEEE 802.1Q Tagged VLAN Co mmands GS-3012/GS-3012F User’s Guide 260 34.4.3 Show GVRP Syntax: show vlan1q gvrp This command shows the switch’ s GVRP settings. An example is shown next. Figure 161 show gvrp Command Examp le 34.4.4 Enable GVRP Syntax: vlan1q gvrp This command turns on GVRP in order to propagate VLAN information beyond t[...]

Chapter 34 IEEE 802.1Q Tagged VLAN Commands GS-3012/GS- 3012F User’s Guid e 261 Figure 162 port default vid Command Example 34.5.2 Set Accept able Frame T ype Syntax: frame-type <all|tagged> This command sets the specified port to accept all Ethernet frames or only those with an IEEE 802.1Q VLAN tag. The following example sets ports 1 to 5 [...]

Chapter 34 IEEE 802.1Q Tagged VLAN Co mmands GS-3012/GS-3012F User’s Guide 262 Syntax: vlan <vlan-id> fixed <port-list> forbidden <port-list> name <name-str> normal <port-list> untagged <port-list> no fixed <port-list> no forbidden <port-list> no untagged <port-list> •E n t e r fixed to regi[...]

Chapter 34 IEEE 802.1Q Tagged VLAN Commands GS-3012/GS- 3012F User’s Guid e 263 Unt agged Frames 1 An untagged frame co mes in from the LAN. 2 The switch checks the PVID table and assigns a tempora ry VID of 1. 3 The switch ignores the port from which th e frame came, because the switch does not send a frame to the port from which it came. The sw[...]

Chapter 34 IEEE 802.1Q Tagged VLAN Co mmands GS-3012/GS-3012F User’s Guide 264 An example is shown next. For the AdCtl section of the last column, “-“ is a port set to normal, “x” is a forbidden port and “F” is a fixed port. For the TagCtl section of the last column, “T“ is a tagged port, “U ” is an untagged port. Figure 167 s[...]

GS-3012/GS- 3012F User’s Guid e 265 C HAPTER 35 Troubleshooting This chapter covers potential problems and possible remedies. V Problems S t arting Up the Switch V Problems Accessing the Switch T able 87 Troubleshooting the Start-Up of Yo ur Switch PROBLEM CORRECTIVE ACTION None of the LEDs turn on when you turn on the switch. Check the power con[...]

Chapter 35 Trou bleshooting GS-3012/GS-3012F User’s Guide 266 V Problems with the Password T able 89 Troubleshooting the Password PROBLEM CORR ECTIVE ACTION Cannot access the switch. The password field is case sensitive. Make sure that you enter the correct password using the proper casing. The administrator username is “admin”. The default a[...]

267 P ART VI Appendices and Index Product Specification s (269) Browser Setup (273) IP Addresses and Subnetting (279) Legal Information (287) Customer Support (291) Index (295)[...]

268[...]

GS-3012/GS- 3012F User’s Guid e 269 A PPENDIX A Product S pecifications These are the GS-3012 and GS-3012F produ ct specifications. T able 90 General Product Specifications S tandards IEEE802.3 10BASE-T Ethe rnet (twisted-pair copper) IEEE802.3u 100BASE-TX Fast Et hernet (twisted-pair copper) ANSI/IEEE802.3 Auto-negotiation IEEE802.3x Flow Contro[...]

Appendix A Product Specifications GS-3012/GS-3012F User’s Guide 270 T able 91 Performance and Management Specifications Back plane 12.8 Gbps Packet Forwarding Rate 148800 PPS for 100BASE-TX 1488000PPS for 1000Base-X Uplink packet forwarding rate depends on the uplink modul e used (see your module manual) Switching Method S tore-and -forward MAC A[...]

Appendix A Product Specifications GS-3012/GS- 3012F User’s Guid e 271 . T able 92 Physical an d Environmen tal Specifications Weight GS-3012 Main switch: 4 Kg GS-3012F Main switch: 3.1 Kg LED Main switch: PWR, SYS, ALM Per Port: LNK/ACT , FDX (GS-3012) Per Port: 1000, 100 (GS-3012F) Per GBIC Slot: LNK, ACT Per Management Port: 10, 100 Dimensions [...]

Appendix A Product Specifications GS-3012/GS-3012F User’s Guide 272 Classifier and Policy Y ou can create a policy to define acti ons to be performed on a traffic flow group ed by a classifier according to specific criteria such as the IP addr ess, port number or protoc ol type, etc. Queuing Queuing is used to help solve perfor mance degradation [...]

GS-3012/GS- 3012F User’s Guid e 273 A PPENDIX B Browser Setup This appendix helps you co nfigure your browser for wo rking with the web configurato r . Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up windows fro m your device. • JavaScripts (enabled by default). ?[...]

Appendix B Browser Setu p GS-3012/GS-3012F User’s Guide 274 1 In Internet Explorer , select To o l s , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you ma y have enabled. Figure 169 Intern et Options 3 Click Apply to save this setting. Enable[...]

Appendix B Browser Setup GS-3012/GS- 3012F User’s Guid e 275 Figure 170 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites . Figure 171 Pop-up Blocker Settings[...]

Appendix B Browser Setu p GS-3012/GS-3012F User’s Guide 276 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , check that JavaScripts are allowed. 1 In Internet Explorer , click T ools , Internet Options and then the Secur[...]

Appendix B Browser Setup GS-3012/GS- 3012F User’s Guid e 277 Figure 173 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure that a safety leve l is selected.[...]

Appendix B Browser Setu p GS-3012/GS-3012F User’s Guide 278 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 make sure that Use Java 2 for <applet> u nder Ja va (Sun) is selected. 3 Click OK to clos e the window . Figure 175 Java (Sun)[...]

GS-3012/GS- 3012F User’s Guid e 279 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking devic[...]

Appendix C IP Addresses and Subnetting GS-3012/GS-3012F User’s Guide 280 Figure 176 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are part of t[...]

Appendix C IP Addresses and Subnetting GS-3012/GS- 3012F User’s Guid e 281 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the max imum number of po[...]

Appendix C IP Addresses and Subnetting GS-3012/GS-3012F User’s Guide 282 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the compa[...]

Appendix C IP Addresses and Subnetting GS-3012/GS- 3012F User’s Guid e 283 Figure 178 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). 192[...]

Appendix C IP Addresses and Subnetting GS-3012/GS-3012F User’s Guide 284 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 99 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VA L U E IP [...]

Appendix C IP Addresses and Subnetting GS-3012/GS- 3012F User’s Guid e 285 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 2[...]

Appendix C IP Addresses and Subnetting GS-3012/GS-3012F User’s Guide 286 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If th[...]

GS-3012/GS- 3012F User’s Guid e 287 A PPENDIX D Legal Information Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mec[...]

Appendix D Legal Info rmation GS-3012/GS-3012F User’s Guide 288 FCC W arning This device has been tested and foun d to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. Thes e limits are designed to provide reasonable protection against harmful interference in a co mmercial environment. Thi s device genera[...]

Appendix D Legal Infor mation GS-3012/GS- 3012F User’s Guid e 289 condition. Any replacement will consist of a ne w or re-manufactured f unctionally equivalent product of equal or higher value, and will be so lely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tamp ered with, damaged by an act[...]

Appendix D Legal Info rmation GS-3012/GS-3012F User’s Guide 290[...]

GS-3012/GS- 3012F User’s Guid e 291 A PPENDIX E Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps you took to solv e it. Co[...]

Appendix E Customer Support GS-3012/GS-3012F User’s Guide 292 Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb Site: www .zyxel.dk • Re g ul a r Ma i l: ZyXEL Communications A/ S, Columbusvej, 2860 Soebor g, Denmark Finland • Support E-mail: support[...]

Appendix E Customer Support GS-3012/GS- 3012F User’s Guid e 293 • T elephone: +7-3272-590-698 • Fax: +7-327 2-590-689 • W eb Site: www .zyxel.kz • Re g u la r Ma i l : ZyXEL Kazakhstan, 43, Dostyk ave.,Office 414, Dost yk Business Centre, 050010, Almaty , Republic of Kazakhstan North America • Support E-mail: support@zyxel.com • Sales[...]

Appendix E Customer Support GS-3012/GS-3012F User’s Guide 294 • W eb Site: www .zyxel.es • Re g ul a r M a il : ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spain Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb Site: www . zyxel.se • R[...]

Index GS-3012/GS- 3012F User’s Guid e 295 Index Numerics 802.1Q VLAN type 76 A acceptable frame type 90 access control 175 address learning 130 Address Resolution Protocol (ARP) 201 aging time 76 airflow 48 all connected 95 ALM LED 48 alternative subnet mask notation 281 ARP how it works 201 learned IP addresses 202 viewing entries 201 ARP (Addre[...]

Index GS-3012/GS-3012F User’s Guide 296 D data buffer 270 Daytime (RFC 867) 74 default Ethernet settings 45 default IP address 47 Destination Lookup Fa ilure (DLF) 11 5 DHCP 161 diagnostics 187 DiffServ (Differentiated Services) 139 DiffServ Code Point (DSCP) 139 DiffServ marking rule 139 dimensions 271 disclaimer 287 DS (Differentiated Services)[...]

Index GS-3012/GS- 3012F User’s Guid e 297 rack-mounting 40 transceivers 46 installation scenarios 39 Internet Assigned Nu mbers Authority , See also IANA 286 IP address 79 IP interface 77 IP Ports 137 IP setup 71 , 77 IP subnet mask 79 iS tacking 193 J join timer 76 L LACP timeout 122 LACP status 120 leave all timer 76 leave timer 76 LEDs 48 ALM [...]

Index GS-3012/GS-3012F User’s Guide 298 passwor d default 53 PHB (Per-Hop Behavior) 139 ping 187 policy actions 141 example 143 metering 141 view summary 142 policy rules 139 port authentication and VSA 124 port based VLAN type 76 port cloning 203 , 204 advanced settings 203 , 204 basic settings 203 , 204 port details 66 , 67 port isolation 95 po[...]

Index GS-3012/GS- 3012F User’s Guid e 299 SNMP (Simple Network Manageme nt Protocol) 176 SNMP traps 177 source MAC address 102 S panning T ree Protocol (STP) 103 speed/duplex 81 SSH (Secure Shell) 180 SSH implementation 181 standards 269 stati c MAC address 97 static MAC forward setup 97 static MAC forwarding 97 static route setup 165 static VLAN[...]

Index GS-3012/GS-3012F User’s Guide 300 ID (VID) 257 implicit tagging 257 introduction 75 port-based 93 priority frame 85 registration information 257 tag control 86 tagged VLAN 85 type 87 types of 76 VLAN (Virtual Local Area Network) 75 VLAN databases 257 VLAN group 91 VLAN ID 79 , 85 maximum number of 85 VLAN Identifier 85 VLAN port settings 89[...]