ZyXEL Communications MGS-3712 инструкция обслуживания

www .zyxel.com www .zyxel.com MGS-3712/MGS-3712F MetroGigabit Switch Copyright © 2008 ZyXEL Communications Corporation Firmware V ersion 3.90 Edition 1, 10/2008 Default Login Details IP Address http://192.168.1.1 http://192.168.0.1 (Out-of -band MGMT port) User Name admin Pa ss wo rd 12 34[...]

[...]

About This User's Guide MGS-3712/MGS-3712F Use r’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Switch using the web configurator . Related Document ation •Q u i c k S t a r t G u i d e The Quick Start Guide is de signed to help you get your S witch up and running righ[...]

About This User's Guide MGS-3712/MGS-3712F User’s Guide 4 Need More Help? More help is av ailable at www.zyx el.com. • Download Library Search for the latest produc t updates an d documentation from this link. Re ad the T ech Doc Overview to find out how to efficiently use the User Guide, Quick Start Guide and Command Line Int erface R efe[...]

Document Conventions MGS-3712/MGS-3712F Use r’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell you other import ant informat ion (for e xample, other things you may need to configure or help fu[...]

Document Conventions MGS-3712/MGS-3712F User’s Guide 6 Icons Used in Figures Figures in this User’ s Guide may use the following generic icons. The Sw itch icon is not an exact representation of y our device. The Switch Computer Notebook computer Server DSLAM Firewa ll Te l e p h o n e Ro u t e r[...]

Safety Warnings MGS-3712/MGS-3712F Use r’s Guide 7 Safety Warnings • Do NO T use this product near water , for exam ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device. • Do NOT install, use, or service this device during a thunderstorm. [...]

Safety Warnings MGS-3712/MGS-3712F User’s Guide 8[...]

Contents Overview MGS-3712/MGS-3712F Use r’s Guide 9 Contents Overview Introduction and Hardware ................................................ ................................................... 21 Getting to Know Y our Switch . ............. ................ ................ ................ ............. ................ ........ .. 23 Hardw[...]

Contents Overview MGS-3712/MGS-3712F User’s Guide 10 Differentiated Services ................. .... ... ... ... ... .... ... ............. ... ... .... ... ... ... ... ............. .... ... ... ... .. ..... . 279 DHCP ............. ............. ................ ............. ................ ............. ................ ............. ........[...]

Table of Contents MGS-3712/MGS-3712F Use r’s Guide 11 Table of Contents About This User's Guide ................................................................ ........................................ .. 3 Document Conventions.................................................................. ......................................... .5 Safe[...]

Table of Contents MGS-3712/MGS-3712F User’s Guide 12 3.1.5 Power Connector ............. ... ... ... ... .... ............. ... ... ... .... ... ... ... ... .... ... ............. ... ... ... .... ... 38 3.1.6 Signal Slot .............. ... ... .... ............ .... ... ... ... .... ... ............. ... ... ... .... ... ............. ... ... ..[...]

Table of Contents MGS-3712/MGS-3712F Use r’s Guide 13 7.2.1 S tatus: Port Details ............... ............. ................ ............. ................ ............. ......... .7 5 Chapter 8 Basic Setting ............................................................. .................................................... ......... 79 8.1 Ove[...]

Table of Contents MGS-3712/MGS-3712F User’s Guide 14 Chapter 1 1 St atic Mu lticast Forward Setup...................................................... ...................................... 1 19 1 1.1 S tatic Multicast Forwarding Overview .. ................. ................ ............. ................ ............... 1 19 1 1.2 Configuring [...]

Table of Contents MGS-3712/MGS-3712F Use r’s Guide 15 17.2 Dynamic Link Aggregation .................. .... ...... ............. ................ ............. ................ ........ 15 5 17.2.1 Link Aggregation ID ... ................ ............. ................. ............ ................. ............ ..... 156 17.3 Link Aggregation S[...]

Table of Contents MGS-3712/MGS-3712F User’s Guide 16 22.1.3 Weighted Round Robin Scheduling (WRR) ......... ................ ............. ................ ..... 194 22.2 Configuring Queuing ................ ................ ... ................ ............. ............. ................ ......... .. 195 Chapter 23 VLAN St acking ..............[...]

Table of Contents MGS-3712/MGS-3712F Use r’s Guide 17 25.3 Supported RADIUS Att ributes ....... ............. ................ ................ ................ ................ ..... 231 25.3.1 Attributes Used for Au thentication ..... .......... ......... .......... .......... ......... .......... .......... . 232 25.3.2 Attributes Used for Acc[...]

Table of Contents MGS-3712/MGS-3712F User’s Guide 18 Chapter 30 St atic Route ................................................................ ................................................... ........ 275 30.1 S tatic Routing Overview ................ ............. ................ ................ ................ ............. ........ 275 3[...]

Table of Contents MGS-3712/MGS-3712F Use r’s Guide 19 33.7 Backup a Configuration File ....... ............. ................ ............. ................ ............. ........... 30 1 33.8 FTP Command Line ................... ................ ................ ................ ................ ................ ..... 3 01 33.8.1 Filename Conven[...]

Table of Contents MGS-3712/MGS-3712F User’s Guide 20 37.2 Cluster Management S tatus ......... .......... ...... ............. ............. ................ ............. ........... 3 36 37.2.1 Cluster Member Switch Management . ................ ............. ................ ............. ........ 337 37.3 Clustering Management Configuration .[...]

21 P ART I Introduction and Hardware Getting to Know Y our Switch (23) Hardware Installation and Connecti on (29) Hardware Overview (33) Tu t o r i a l s ( 4 5 )[...]

22[...]

MGS-3712/MGS-3712F Use r’s Guide 23 C HAPTER 1 Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction The MGS-3712 and MGS-3712F are la yer 2 stand-al one Gigabit Ethernet (GbE) switches. The MGS-3712 has four GbE dual persona lity interfaces with each interface comprising one mini-G[...]

Chapter 1 Getting to Know Your Switch MGS-3712/MGS-3712F User’s Guide 24 In this example, all computers can share hi gh-speed applications on the server . T o expand the network, simply add more networking devi ces such as switches, routers, computers, print servers etc. Figure 1 Backbone Application 1.1.2 Bridging Example In this example applica[...]

Chapter 1 Getting to Kn ow Your Switch MGS-3712/MGS-3712F Use r’s Guide 25 1.1.3 High Performance Switching Example The Switch is ideal for connecting two netw orks that need high b andwidth. In the following example, use trunking to connect these two networks. Switching to higher -speed LANs such as A TM (Asynchronous T ransmissi on Mode) is not[...]

Chapter 1 Getting to Know Your Switch MGS-3712/MGS-3712F User’s Guide 26 Shared resources such as a serv er can be used by al l ports in the same VLAN as the server . In the following figure only po rts that need access to the serv er need to be part of VLAN 1. P orts can belong to other VLAN g roups too. Figure 4 Shared Serve r Using VLAN Exampl[...]

Chapter 1 Getting to Kn ow Your Switch MGS-3712/MGS-3712F Use r’s Guide 27 • W rite down the password and p ut it in a safe place. • Back up the configur ation (and make sure you know how to restore it). Restoring an e arlier wo rking conf iguratio n may be usef ul if the device becomes unstable or even cr ashes. If you forget your password, [...]

Chapter 1 Getting to Know Your Switch MGS-3712/MGS-3712F User’s Guide 28[...]

MGS-3712/MGS-3712F Use r’s Guide 29 C HAPTER 2 Hardware Installation and Connection This chapter shows you how t o install and connect the S witch. 2.1 Inst allation Scenarios The Switch can be placed on a desktop or r ack -mounted on a standard EIA r ack. Use the rubber feet in a desktop installation and the brack ets in a r ack -mounted install[...]

Chapter 2 Hardware Installation and Connection MGS-3712/MGS-3712F User’s Guide 30 5 Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the Switch from shoc k or vibration and ensure space between devices when stacking. Figure 5 Att aching Rubber Feet Note: Do NOT block the ventilation ho les. Leave s[...]

Chapter 2 Har d war e In sta lla tion an d Conn ec tion MGS-3712/MGS-3712F Use r’s Guide 31 2.3.2 Att aching the Mounting Bracket s to the Switch 1 P osition a mounting br acket on one side of the Switch, lining up the four screw holes on the brack et with the screw ho les on the si de of the Switch. Figure 6 Att aching the Mounting Bracket s 2 U[...]

Chapter 2 Hardware Installation and Connection MGS-3712/MGS-3712F User’s Guide 32 2.3.3 Mounting the Switch on a Rack 1 P osition a mounting br acket (that is already att ached to the Switch) on one s ide of the rack, lini ng up th e two screw holes on the br ack et with the screw holes on the side of the rack. Figure 7 Mounting the Switch on a R[...]

MGS-3712/MGS-3712F Use r’s Guide 33 C HAPTER 3 Hardware Overview This chapter describes the front panel and rear p anel of the S w itch and shows you how to make the hardware connections. 3.1 Front Panel MGS-3712 The following figure shows the front panel of the MGS-3712. The front panel contains the Switch LEDs, 8 RJ-45 Gigabit Ethernet (GbE) po[...]

Chapter 3 Har d war e Ov er vie w MGS-3712/MGS-3712F User’s Guide 34 RJ-45 port, one console and one manageme nt port for local management, and a slot for alarm manag ement. Figure 9 Front Panel: MGS-3712F The following table describes the port labels on the front panel. Mini-GBIC slots Dual Personality Interfaces Console P ort LEDs Signal slot M[...]

Chapter 3 Hardware Overview MGS-3712/MGS-3712F Use r’s Guide 35 3.1.1 Console Port For local management, you can use a computer with terminal emulation software configured to the following par ameters: • VT100 • T erminal emulation • 9600 bps • No parity , 8 data bits, 1 stop bit • No flow control Connect the male 9-pin end of the conso[...]

Chapter 3 Har d war e Ov er vie w MGS-3712/MGS-3712F User’s Guide 36 3.1.2.1 Default Ethernet Negotiation Settings The factory defaul t negotiation settings for the Gigabit ports on the S witch are: • Speed: Auto •D u p l e x : A u t o • Flow con trol: Off •L i n k A g g r e g a t i o n : D i s a b l e d 3.1.2.2 Auto-crossover All ports a[...]

Chapter 3 Hardware Overview MGS-3712/MGS-3712F Use r’s Guide 37 3 The Switch automaticall y detects the installed tr ansceiv er . Check the LEDs to verify that i t is functioning properly . 4 Close the transceiver’s latch (latch styles vary). 5 Connect the fiber optic cables to the transc ei ver . Figure 10 T ransceiver Installation Example Fig[...]

Chapter 3 Har d war e Ov er vie w MGS-3712/MGS-3712F User’s Guide 38 3 Pull the transceiver out of the slot. Figure 12 Removing the Fibe r Optic Cables Figure 13 Opening the T ransceiver ’s Latch Example Figure 14 T ransceiver Removal Example 3.1.4 Management Port The MGMT ( management) port is used for local management. Conn ect directly t o t[...]

Chapter 3 Hardware Overview MGS-3712/MGS-3712F Use r’s Guide 39 Use only power wires of the required di ameter for connecting the Switch to a power supply . 3.1.5.1 AC Power Connection Connect the female end of the po wer cord to the power socket of your S witch. Connect the other end of the cord to a power outlet. 3.1.5.2 DC Power Connection The[...]

Chapter 3 Har d war e Ov er vie w MGS-3712/MGS-3712F User’s Guide 40 3.1.6 Signal Slot The Signal slot (fitted wit h the signal connector) allows y ou to connect devices to the Switch, such as sensors or other Z yXEL switches which support the external alarm feat ure. This feature is in additi on to the syst em alarm, which detect s abnormal temp[...]

Chapter 3 Hardware Overview MGS-3712/MGS-3712F Use r’s Guide 41 3 Insert the alarm connector into the Signal slot. Figure 15 Connecting a Sensor to the Signal Slot 4 T o connect an output device, repeat the pr evious steps but this time connect to either pins (1,2) or (2,3) on the Signal connector . Y ou can also daisy-chain the external alarm to[...]

Chapter 3 Har d war e Ov er vie w MGS-3712/MGS-3712F User’s Guide 42 2 When daisy -chaining further S witches ensure that the sig nal output pins y ou use are the same as those you used when conne cting to the first switch, as shown i n the diagr am below . Figure 16 Daisy-chaining an External Alarm Sens or to Other Switches of the Same Model 3.2[...]

Chapter 3 Hardware Overview MGS-3712/MGS-3712F Use r’s Guide 43 3.3 LEDs After you connect t he power to the Swit ch, view the LEDs to ensure proper functioning of the S witch and as an aid in troubleshooting. T able 2 LED Descriptions LED COLOR STAT U S DESCRIPTION BPS Green On The backup power supply is connected and acti ve. Blinking The syste[...]

Chapter 3 Har d war e Ov er vie w MGS-3712/MGS-3712F User’s Guide 44 3.4 Configuring the Switch Y ou may use th e embedded web co nfigur ator or command lin e interface to configure the Switch. If you’re using th e web configurator , you need Inte rnet Explorer 5.5 and later or Netscape Na vigator 6 and later . Y ou can access the command line [...]

MGS-3712/MGS-3712F Use r’s Guide 45 C HAPTER 4 Tutorials This chapter provides some examples of using the web configur ator to set up and use the Switch. The tutorials include: • How to Use DHCP Snooping on the Switch • How to Use DHCP Rela y on the Switch 4.1 How to Use DHCP Snooping on the Switch Yo u o n l y w a n t D H C P s e r v e r A c[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F User’s Guide 46 1 Access the Switch from t he MGMT port through http://192.168 .0.1 by default. Log into the Switch by entering the username (default: admin ) and password (default: 1234 ). 2 Go to Advanced Application > VLAN > Static VLAN , and create a VLAN with ID of 100. Add ports 5, 6 and 7 in the[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F Use r’s Guide 47 3 Go to Advanced Application > VLAN > VLAN Port Setting , and set the PVID of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6 and 7 with the tag 100. Figure 21 T utorial: T ag Untagged Fr ames 4 Go to Advanced Application > IP Source Guard > DHCP sno[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F User’s Guide 48 5 Click the Port link at the top righ t corner . 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5. K eep ports 6 and 7 Untrusted because they are connected to DHCP clients. Click Apply[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F Use r’s Guide 49 8 Click Save at the top right corner of the web configurator to sa ve the configurat ion permanently . 9 Connect your DHCP server to p ort 5 and a computer (as DHCP client) t o either port 6 or 7. The computer should be ab le to get an IP address from the DHCP server . If you put the DHCP se[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F User’s Guide 50 the system name, VLAN ID and port nu mber in the DHCP request. Client A connects to the S witch’ s port 2 in VLAN 102. Figure 26 T utorial: DH CP Relay Scenario 4.2.2 Creating a VLAN Fol low the steps below to configure port 2 as a member of VLAN 102. 1 Access th e web c onf ig u rator thro[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F Use r’s Guide 51 2 Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q . Click Apply to save the settings to the run-time memory . Figure 27 T utorial: Set VLAN T ype to 802.1Q 3 Click Advanced Application > VLAN > Static VLAN . 4 In the Static VLAN screen, select ACTIVE , enter a des[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F User’s Guide 52 7 Click Add to sav e the settings to the run-ti me memory . Settings in the run-time memory are lost when the Switc h’ s power is turned off . Figure 28 T utorial: Create a S tatic VLAN 8 Click the VLAN St atus link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN S[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F Use r’s Guide 53 10 Click Apply t o save y our changes back to the run-time memory . Figure 30 T utorial: Add T ag for Frames Received on Port 2 11 Click the Save link in the upper right c orner of the web configur ator to sav e y our configu ration permane ntly . 4.2.3 Configuring DHCP Relay Fol low the ste[...]

Chapter 4 Tutorials MGS-3712/MGS-3712F User’s Guide 54 5 Click Apply t o save y our changes back to the run-time memory . Figure 31 T utorial: Set DHCP Server and Relay Information 6 Click the Save link in the upper right c orner of the web configur ator to sav e y our configu ration permane ntly . 7 The DHCP server can then assign a specif ic IP[...]

55 P ART II Basic Configuration The W eb Configur ator (57) Initial Setup Example (67) System Status and P ort Statistics (73) Basic Setting (79)[...]

56[...]

MGS-3712/MGS-3712F Use r’s Guide 57 C HAPTER 5 The Web Configurator This section introduces the config uratio n and functions of the web configurator . 5.1 Introduction The web configurator is an HTML -based management interface that allows easy Switch setup an d m an agement v ia Inter net browser . Use Int erne t Explorer 6.0 and later or Netsc[...]

Chapter 5 The Web Con figurator MGS-3712/MGS-3712F User’s Guide 58 3 The login screen appears. The defa ult username is admin and associated default password is 1234 . The date and time displ ay as sh own if y ou have not configured a time server nor manually entered a time and date in the General Setup screen. Figure 32 W eb Configurator: Login [...]

Chapter 5 T he Web Configurator MGS-3712/MGS-3712F Use r’s Guide 59 B , C , D , E - These are quick links which allo w y ou to perform certain tasks no matter which s creen you are currently working in. B - Click t his link t o save your co nfiguration into the Switch’s nonvolatile m emory . Nonv olatile memory is the configuration of y our Swi[...]

Chapter 5 The Web Con figurator MGS-3712/MGS-3712F User’s Guide 60 System Info This link takes you to a screen that displays general system and hardware monitoring inform ation. General Setup This link takes you to a screen where y ou can configure gener al identification information about the Switch. Switch Setup This link takes yo u to a screen[...]

Chapter 5 T he Web Configurator MGS-3712/MGS-3712F Use r’s Guide 61 VLAN Stacking This link takes yo u to screens where you can configure VLAN stacking which helps to distinguish multiple customers VLANs. Multicast This link takes you to screens where you can configure v ariou s multicast features, IGMP snooping and create multicast VLANs. AAA Th[...]

Chapter 5 The Web Con figurator MGS-3712/MGS-3712F User’s Guide 62 5.3.1 Change Y our Password After you log i n for the first time, it is recommended you change the default administr ator password. Click Man agement > Access Control > Logi ns to display the next screen. Figure 34 Change Administrator Login Password 5.4 Saving Y our Configu[...]

Chapter 5 T he Web Configurator MGS-3712/MGS-3712F Use r’s Guide 63 2 Delete all port -based VLANs with the CPU port as a member . The “CPU port” is the management port of the Swit ch. 3 Filter all tr affic to the CPU port. 4 Disable all ports. 5 Misconfigure the text configur ation file. 6 Forget the password and/or IP address . 7 Prevent al[...]

Chapter 5 The Web Con figurator MGS-3712/MGS-3712F User’s Guide 64 5 Wa i t f o r t h e “ Starting XMODEM upload ” message before activating XMODEM upload on your terminal. 6 After a configu ration file up load, typ e atgo to restart the S witch. Figure 35 Resetting the Switch: Via the Conso le Port The Switch i s now rein itialize d with a d[...]

Chapter 5 T he Web Configurator MGS-3712/MGS-3712F Use r’s Guide 65 5.8 Help The web configurator’ s online help has de scriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen.[...]

Chapter 5 The Web Con figurator MGS-3712/MGS-3712F User’s Guide 66[...]

MGS-3712/MGS-3712F Use r’s Guide 67 C HAPTER 6 Initial Setup Example This chapter shows how to set up the S witch for an example network. 6.1 Overview The following lists the configur ation steps for the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Swi tch IP management address 6.1.1 Creating a VLAN VLANs confine broad [...]

Chapter 6 Initi al Set up Ex amp l e MGS-3712/MGS-3712F User’s Guide 68 1 Click Advanced Application > VLAN in the navigati on panel and click t he Static VLAN link. 2 In the Static VLAN screen, select ACTIVE , enter a descriptiv e name in the Name field and enter 2 in the VLAN Group ID field fo r the VLAN2 network. Note: The VLAN Group ID fie[...]

Chapter 6 Initi al Set up Ex amp le MGS-3712/MGS-3712F Use r’s Guide 69 In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on that port get sent to VLAN 2. Figure 38 Initia l Setup Network Example: Port VID 1 Click Advanced Applications > VLAN in the navigation panel. Then click the VLAN Por t Se[...]

Chapter 6 Initi al Set up Ex amp l e MGS-3712/MGS-3712F User’s Guide 70 6.2 Configuring Switch Management IP Address The default management IP address of the Switc h is 192.168.1.1. Y ou can configure another IP address in a differ ent subnet for management purposes. The following figure shows an exa mple. Figure 39 Initia l Setup Example: Manage[...]

Chapter 6 Initi al Set up Ex amp le MGS-3712/MGS-3712F Use r’s Guide 71 3 Click Basic Setting > IP Setup in the navigation panel. 4 Configure the related fields in the IP Setup screen. 5 For t h e VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask. 6 In the VID field, enter the ID of the VLAN group to which[...]

Chapter 6 Initi al Set up Ex amp l e MGS-3712/MGS-3712F User’s Guide 72[...]

MGS-3712/MGS-3712F Use r’s Guide 73 C HAPTER 7 System Status and Port Statistics This chapter describes the system s tatus (web configur ator home page) and port details screens. 7.1 Overview The home screen of the web configur ator displays a port s tatistical summary with links to each port showing s tatistical details. 7.2 Port S t atus Summar[...]

Chapter 7 S ystem Status and Port Sta tistics MGS-3712/MGS-3712F User’s Guide 74 The following table describes t he labels in this screen. T able 6 Status LABEL DESCRIPTION P ort This identifies the Ethernet port. Click a port number to display the Port Details screen (refer to Figure 41 on pag e 75 ). Name This is the name you assigned to this p[...]

Chapter 7 System Status and Port Statistics MGS-3712/MGS-3712F Use r’s Guide 75 7.2.1 S t atus: Port Det ails Click a number in the Port column in the Status screen to display individual p ort statistics. Use t his screen to check status and detailed perf ormance data about an individual port on the S witch. Figure 41 S tatus > Port Det ails T[...]

Chapter 7 S ystem Status and Port Sta tistics MGS-3712/MGS-3712F User’s Guide 76 Status I f STP (Spanning T ree Protocol) is enabled, this field displays the STP state of the port (see Section 13.1 on page 125 for more information). If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP . LACP This field[...]

Chapter 7 System Status and Port Statistics MGS-3712/MGS-3712F Use r’s Guide 77 Error Packet The following fields display detailed information about packets received that were in error . RX CRC This field shows th e number of packets received with CRC (Cy clic Red u nd a n t C h ec k ) er r o r ( s) . Length This field shows the number of pack et[...]

Chapter 7 S ystem Status and Port Sta tistics MGS-3712/MGS-3712F User’s Guide 78[...]

MGS-3712/MGS-3712F Use r’s Guide 79 C HAPTER 8 Basic Setting This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. 8.1 Overview The System Info screen displays gener al Switch information (such as fi rmware version number) and hardware polling information (such as fan speeds). The[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F User’s Guide 80 8.2 System Information In the navigation panel, click Basic Setting > System Info to displ ay the screen as shown. Y ou can check the firmware version number and monitor the Switch temperature, fan speeds an d voltag e in this screen. Figure 42 Basic Setting > System Info The follow[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F Use r’s Guide 81 F an Speed (RPM) A properly functioning fan is an essential component (along with a sufficiently ventilated, cool operating environment) in order for the device to stay within the temper ature threshold. Each fan has a sensor that is capable of detecting and reporting if the fan speed fa[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F User’s Guide 82 8.3 General Setup Use this screen to configure genera l set t ings such as the system name and time. Click Basic Setting > Gener al Setup in the navigation panel to display the screen as shown. Figure 43 Basic Setting > General Setup The following table describes t he labels in this[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F Use r’s Guide 83 Use Time Server when Bootup Enter the time service pro tocol that your timeserv er uses. Not all time servers support all protocols, so you may have to use trial and error to find a protocol that works. The ma in differences between them are the time format. When you select the Daytime ([...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F User’s Guide 84 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allo ws a ph ysical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one grou p. With VLAN, a device cannot directly talk to or hear fr[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F Use r’s Guide 85 8.5 Switch Setup Screen Click Basic Setting > Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens chan ge depending on whether you choose 802.1Q or Port Base d in the VLAN Type field in this screen. Re fer to the chapter on VLAN. Figure 44 Basic[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F User’s Guide 86 Join Timer Join Timer sets the duration of the Join P eriod timer for GVRP in milliseconds. Each port has a Join Period timer . The allowed Join Time range is between 100 and 6 5535 milliseconds; the default is 200 milliseconds. See the chapter on VLAN setup for more background informatio[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F Use r’s Guide 87 8.6 IP Setup Use the IP Setup screen to configure the Switch IP address, default gatew ay device, the default d omain name serv er and the management VLAN ID . The default gateway specifies the IP address of the default gateway (next hop ) f o r outgoing traffi c. 8.6.1 Management IP Add[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F User’s Guide 88 Note: Y ou must configure a VLAN first. Figure 45 Basic Setting > IP Setup The following table describes t he labels in this screen. T able 1 1 Basic Setting > IP Setup LABEL DESCRIPTION Domain Name Server DNS (Domain Name System) is for mappin g a domain name to its corresponding I[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F Use r’s Guide 89 Default Management Specify which traffic flow ( In-Band or Ou t-of-band ) the S witch is to send packets originating from itself (such as SNMP traps) or pack ets with unknown source. Select Out-of-band to have the Switch send the packets to the out- of-band management port. This means th[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F User’s Guide 90 In-band IP Addresses Y ou can create up to 64 IP addresses, which are used to access and manage the Switch from the ports belonging to the pre-defin ed VLAN(s). Y ou must conf igure a VLAN first. IP Address E nter the IP ad dre ss f or man aging the S wi tch b y th e members of the VLAN s[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F Use r’s Guide 91 8.7 Port Setup Use this screen to configure Switch port settings.Cli ck Basic Setting > Port Setup in the navigation panel to display the conf iguration screen. Figure 46 Basic Setting > Port Setup The following table describes t he labels in this screen. T able 12 Basic Setting &g[...]

Chapter 8 Basic Setting MGS-3712/MGS-3712F User’s Guide 92 Speed/ Duplex Select the speed and the duplex mode of the Ethernet connection on this port. Choices are Auto , 10M/Half Duplex , 10M/Full Duplex , 100M/ Half Duplex , 100M/Full Duplex and 1000M/Full Duplex . Selecting Auto (auto-negotiation) allows one port to negotiate with a peer port a[...]

93 P ART III Advanced VLAN (95) Static MAC F orward Setup (115) Static Multicast Forw ard Setup (119) Filtering (123) Spanning T ree Protocol (125) Bandwidth Control (147) Broadcast Storm Control (151) Mirroring (153) Link Aggregation (155) P ort Authentication (165) P ort Security (171) Classifier (177) P olicy Rule (185) Queuing Method (193) VLAN[...]

94[...]

MGS-3712/MGS-3712F Use r’s Guide 95 C HAPTER 9 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-bas ed VLANs. 9.1 Introduction to IEEE 802.1Q T a gged VLANs A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify[...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 96 switch, the Swit ch first decides where to forward the fr ame and then strips off the VLAN tag. T o forward a fr ame from an 802.1Q VLAN-una ware switch to an 802.1Q VLAN-aware switc h, the Switch first de cide s where to forward the fr ame, and then inserts a VLAN tag reflecting the ingress port&[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 97 9.3 Port VLAN T runking Enable VLAN Trunking on a port to allow fr ames belonging to unknown VLAN groups to pass through that port. This is us eful if y ou w ant to set up VLAN grou ps on end devices without ha ving to co nfigure the same VLAN groups on intermediary devices. Refer t o the followi[...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 98 VLAN group tags 1 and 2 (VLAN groups th at are unknown to those switches) to pass through their VLAN trunking port(s). Figure 47 Port VLAN T runking 9.4 Select the VLAN T ype Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 48 Switch Setup > Select VLAN T ype 9.5 S t ati[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 99 9.5.1 S t atic VLAN S t atus See Section 9.1 on page 95 for more information on Static VLAN. Clic k Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. Figure 49 Advanced Application > VLAN: VLAN S t atus The following table describes t he [...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 100 9.5.2 VLAN Det ails Use this screen to view detai led port se ttings and status of the VLAN group . See Section 9.1 on page 95 for more information on stat ic VLAN. Click on an index number in the VLAN Status screen to display VLAN det ails. Figure 50 Advanced Application > VLAN > VLAN Deta[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 101 static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. Figure 51 Advanced Application > VLAN > S tatic VLAN The following table describes t he related labels in this screen. T able 16 Advanced Application > VLAN > S tatic VLAN LABEL DESCRIPTION [...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 102 * Settings in this row apply to all ports. Use this row only if y ou want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port -by-port basis. Note: Changes in this row are copied to all t he ports as soon as you make them[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 103 9.5.4 Configure VLAN Port Settings Use the VLAN Port Set ti ng screen to co nfigure the static VLAN (IEEE 802.1Q) settings on a port. See Section 9.1 on page 95 for more information on static VLAN. Click the VLAN Port Setting link in th e VLAN Status screen. Figure 52 Advanced Application > V[...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 104 9.6 Subnet Based VLANs Subnet based VLANs allow y ou to group tr affic into logical VLANs based on the source IP subnet you s pecify . When a fr ame is received on a port, the Switch checks if a tag is added already and the IP subnet it came from. The untag ged packets fr om the same IP su bnet a[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 105 Y ou configure a subnet based VLAN with priority 6 and VID of 100 for tr affic received from IP subnet 172.16.1. 0/24 (voice services). Y ou also have a subnet based VLAN with priority 5 and VID of 200 for tr affic received from IP subnet 192.168.1.0/24 (video services). Lastly , you configure V[...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 106 Note: Subnet based VLAN applies to un-tagg ed packet s and is applicable only when you use IEEE 802.1Q t agged VLAN. Figure 54 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN The following table describes t he labels in this screen. T able 18 Advanced Application >[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 107 9.8 Protocol Based VLANs Protocol based VLANs allow y ou to group tr affic into logi cal VLANs based on the protocol you s pecify . When an u pstream f rame is received on a port (confi gured for a protocol based VLAN), t he Switch checks if a tag is added already and its protocol. The untagged [...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 108 for ARP traff ic receiv ed on port 1, 2 and 3. Y ou also have a pr otocol based VLAN B with priority 2 for Appl e T alk traffic receiv ed on port 6 and 7. All upst ream ARP traffic from port 1, 2 and 3 will be grou ped together , and all upstream Apple T alk traffic from port 6 and 7 will be in a[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 109 The following table describes t he labels in this screen. T able 19 Advanced Application > VLAN > VL AN Port Setting > Protocol Based VLAN Setup LABEL DESCRIPTION Active Check this bo x to activate this protocol based VLAN. P ort T ype a port to be included in this protocol based VLAN. [...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 11 0 9.10 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. Fo llow these steps: 1 Activ ate this protocol based VLAN. 2 T ype the port number you w ant to include in this protocol based VLAN. T ype 1 . 3 Give this protocol-based VLAN a d[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 111 9.1 1 Port-based VLAN Setup P or t-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. P ort-based VLANs require all owed outgoing ports to be defined for each port. Therefore, if y ou wish to allow t wo subscr iber ports to[...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 11 2 9.1 1.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation p anel to display the next screen. Figure 58 Port Ba sed VLAN Setup (All Connected)[...]

Chapter 9 VLAN MGS-3712/MGS-3712F Use r’s Guide 11 3 Figure 59 Port Ba sed VLAN Setup (Port Isolation) The following table describes t he labels in this screen. T able 20 Port Based VLAN Setup label Description Setting Wizard Choose All connected or Port isolation . All connected means all ports can communicate with each other , that is, there ar[...]

Chapter 9 VLAN MGS-3712/MGS-3712F User’s Guide 11 4 Outgoing These are the egress ports; an egre ss port is an outgoing port, that is, a port through which a data packet leav es. If you wish to allow two subscriber ports to talk to each other , you must defin e the egress port for both ports. CPU refers to the Switch management port. By default i[...]

MGS-3712/MGS-3712F Use r’s Guide 11 5 C HAPTER 10 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 10.1 Overview This chapter discusses how to configure forw arding rules based on MAC addresses of devices on your network. 10.2 Configuring S t atic MAC Forwarding A static MAC address is an address that has bee[...]

Chapter 10 St at ic MAC Fo rw ard Setup MGS-3712/MGS-3712F User’s Guide 11 6 Click Advanced Applications > Static MAC Forwarding in the na vigation panel to display the configur ation screen as shown. Figure 60 Advanced Application > S tatic MAC Forwarding The following table describes t he labels in this screen. T able 21 Advanced Applicat[...]

Chapter 10 Static MAC Fo rward Setup MGS-3712/MGS-3712F Use r’s Guide 11 7 VID This field displays the ID number of the VLAN group. P ort This field displays the port w here the MAC address sh own in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete c[...]

Chapter 10 St at ic MAC Fo rw ard Setup MGS-3712/MGS-3712F User’s Guide 11 8[...]

MGS-3712/MGS-3712F Use r’s Guide 11 9 C HAPTER 11 Static Multicast Forward Setup Use these screens to configure stat ic Multicast address forwarding. 1 1.1 St atic Multicast Forwarding Overview A multicast MAC address is the MAC addres s of a member of a multicast group. A static multicast address is a multicas t MAC address that has been manuall[...]

Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up MGS-3712/MGS-3712F User’s Guide 120 connected to port 3. Fi gure 63 shows fr ames being forwarded to ports 2 and 3 within VLAN group 4. Figure 61 No S tatic Multicast Forwardin g Figure 62 S tatic Mutlicast Forwardin g to A Single Port Figure 63 S tatic Mutlicast Forwardin g to Multiple Ports 1 [...]

Chapter 11 Static Mu lticast Forward Setup MGS-3712/MGS-3712F Use r’s Guide 121 Click Advanced Applications > Static Multicast Forwarding to display the configurati on screen as shown. Figure 64 Advanced Application > S tat ic Multicast Forwarding The following table describes t he labels in this screen. T able 22 Advanced Application > [...]

Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up MGS-3712/MGS-3712F User’s Guide 122 Active This field displays whether a static multicast MAC address forwarding rule is active ( Yes ) or not ( No ). Y ou may tempor arily deactivate a rule without deleting it. Name This field displays the descriptive name for identification purposes for a stat[...]

MGS-3712/MGS-3712F Use r’s Guide 123 C HAPTER 12 Filtering This chapter discusses MAC address port fil tering. 12.1 Configure a Filtering Rule Filtering means sifting tr affic going throug h the Switch based on the source and/or destination MAC addresse s and VLAN group (ID). Click Advanced Application > Filtering in the navigation panel to di[...]

Chapter 12 Filtering MGS-3712/MGS-3712F User’s Guide 124 The following table describes t he related labels in this screen. T able 23 Advanced Application > FIltering LABEL DESCRIPTION Active Make sure to select this check box to activ ate your rule. Y ou may temporarily deactiv ate a rule without de leting it by deselecting this check box. Nam[...]

MGS-3712/MGS-3712F Use r’s Guide 125 C HAPTER 13 Spanning Tree Protocol The Switch suppor ts Spanning T ree Protocol (STP), R apid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protoc ol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning T ree Protocol • IEEE 802.1w Rapid Spanning T ree Protocol • IEEE 802.1s [...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 126 P ath cost is the cost of tr ansmitting a frame onto a LAN through that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost. On each bridge, the root port is the port through whi ch t[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 127 13.1.3 STP Port S t ates STP assigns fiv e port states to eliminate packet loopi ng. A bridge port is not allowed to go direct ly from blocking state to forw arding state so as to eliminate transient loops. 13.1.4 Multiple RSTP MRSTP (Multiple RSTP) is Z yXEL ’s propri etar[...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 128 Note: Each port can belong to one STP tree only . Figure 66 MRST P Network Exa mpl e 13.1.5 Multiple STP Multiple Spanning T ree Protocol (IEEE 802.1s) is backward compatible with STP/ RSTP and addresses the limit ations of existing spanning tree prot ocols (STP and RSTP) in [...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 129 blocked as STP and RSTP allow only one link i n the network and block the redundant link. Figure 67 STP/RSTP Network Example With MSTP , VLANs 1 and 2 are mapped to di fferent spanning t rees in the network. Thus traf fic from the two VLANs tr avel on different paths. The fol[...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 130 Devices that belong to the same MST re gion are configured to hav e the same MSTP configuration identificati on settings . These include the following parameters: • Name of the MST region • Revision level as the uniqu e nu m be r for the MST regio n • VLAN-to-MST Instan[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 131 and single spanning tree devi ces. A ne t work may contain multiple MST regions and other network segments running RSTP . Figure 70 MSTP and Legacy RSTP Network Example 13.2 S p anning T ree Protocol St atus Screen The Spanning T ree Protocol status scree n changes depending [...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 132 13.3 S p anning T ree Configuration Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch. Click Configuration in t he Advanced Application > Spanning Tree Proto col . Figure 72 Advanced Application > S panning T ree Protocol > Con[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 133 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 125 for more informat ion on RS TP . Click RS TP in the Advanced Application > Spanning Tree Proto col screen. Figure 73 Advanced Application > S panni ng[...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 134 Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch. If all switches have the same priority , the switch with the lowest MAC address will[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 135 13.5 Rapid S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Pro tocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 125 for more information on RSTP . Note: This screen is only available af ter you [...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 136 Max Age (second) This is the maximum time (in seconds) the Switch can w ait without receiving a configuration message be fore attempting to reconfigure. For w a r d i n g Delay (second) This is the time (in seconds) the r oot switch will wait before changing states (that is, [...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 137 13.6 Configure Multiple Rapid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanced Application > Spanning Tree Proto col screen. Se e Section 13.1 on page 125 for more information on MRSTP . Figure 75 Advanced Application > S panning T ree Protoco[...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 138 Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch. If all switches have the same priority , the switch with the lowest MAC address will[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 139 13.7 Multiple Rapid S p anning T ree Protocol S t atus Click Advanced Applicat ion > Spanning Tree Protoc ol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 125 for more information on MRSTP . Note: This screen is only available[...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 140 Hello Time (second) This is the time interval (in seconds) at wh ich the root switch tr ansmits a configuration message. The root br idge determines Hello Time, Max Age and Forw arding Delay . Max Age (second) This is the maximum time (in seconds) the Switch can w ait without[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 141 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1.5 on page 128 for more information on MSTP . Figure 77 Advanced Application > S panni ng T ree Protocol > M[...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 142 The following table describes t he labels in this screen. T able 31 Advanced Application > S p anning T ree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 78 on page 144 ). Active Select this check box to activ ate MS[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 143 Bridge Priority Set the priority of the Switch for the specific spanning tree instance. The lower the number , the more li kely the Switch will be chosen as the root bridge within the spanning tree instance. Enter priority values between 0 and 61440 in increments of 4096 (thu[...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 144 13.9 Multiple S p anning T ree Protocol St atus Click Advanced Applicat ion > Spanning Tree Protoc ol in the navigation panel to display the status screen as shown next. See Section 13.1.5 on page 128 for more information on MSTP . Note: This screen is only available af te[...]

Chapter 13 Spanning Tr ee Protocol MGS-3712/MGS-3712F Use r’s Guide 145 The following table describes t he labels in this screen. T able 32 Advanced Application > S p anning T ree Protocol > S tatus: MSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you w ant to activate. Click MSTP to edit MSTP settings on [...]

Chapter 13 Spanning Tr ee Protoc ol MGS-3712/MGS-3712F User’s Guide 146 Internal Cost This is the path cost from the root port in this MST instance to the regional root switch. P ort ID This is the priority and number of the port on the Sw itch through which this Switch must communicate with the root of th e MST instance. T able 32 Advanced Appli[...]

MGS-3712/MGS-3712F Use r’s Guide 147 C HAPTER 14 Bandwidth Control This chapter shows you how y ou can cap the maximum bandwidth using the Bandwidth Control screen. 14.1 Bandwid th Control Overview Bandwidth control means defining a maxi mum allowab le bandwidth for incoming and/or out-going tr affic flows on a port. 14.1.1 CIR and PIR The Commit[...]

Chapter 14 Bandwidth Control MGS-3712/MGS-3712F User’s Guide 148 14.2 Bandwid th Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 79 Advanced Application > Bandwid th Control The following table describes t he related labels in this screen. T able 33 Advanced A[...]

Chapter 14 Band wid th Contr ol MGS-3712/MGS-3712F Use r’s Guide 149 Pe a k Rat e Specify the maximum bandwidth allowed in kilobits per second (Kbps) for the incoming traffic flow on a port. Active Select this check box to activate egress r ate limits on this port. Egress Rate Specify the maximum bandwidth allowed in kilobits per second (Kbps) fo[...]

Chapter 14 Bandwidth Control MGS-3712/MGS-3712F User’s Guide 150[...]

MGS-3712/MGS-3712F Use r’s Guide 151 C HAPTER 15 Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature. 15.1 Broadcast S torm Control Setup Broadcast storm control limits the number of broadcast, multicast and destinat ion lookup failure (DLF ) packets the S witch re ceives per second o[...]

Chapter 15 Broadcast Storm Control MGS-3712/MGS-3712F User’s Guide 152 The following table describes t he labels in this screen. T able 34 Advanced Application > Broadcast S torm Control LABEL DESCRIPTION Active Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature. P ort This field d[...]

MGS-3712/MGS-3712F Use r’s Guide 153 C HAPTER 16 Mirroring This chapter discusses port mirroring s etup screens. 16.1 Port Mirroring Setup P o r t m i r r o r i n g a l l o w s y o u t o c o p y a t r a f f i c f l o w t o a m o n i t o r p o r t ( t h e p o r t y o u c o p y the traffic to) in order th at you ca n examine th e traffic f r om th [...]

Chapter 16 M irr or in g MGS-3712/MGS-3712F User’s Guide 154 The following table describes t he labels in this screen. T able 35 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this check box to activ ate port mirroring on the Switch. Clear this check box to disable the feature. Monitor Po r t The monitor port is the port you [...]

MGS-3712/MGS-3712F Use r’s Guide 155 C HAPTER 17 Link Aggregation This chapter shows you how t o logically aggr egate phy sical links t o form one logical, higher-bandwid th link. 17.1 Link Aggregation Overview Link aggregation (trunking) is the groupi ng of physical por ts into one log i ca l higher-capacity link. Y ou may want to trunk ports i [...]

Chapter 17 Li nk Aggr eg a tion MGS-3712/MGS-3712F User’s Guide 156 When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote en d of a li nk to establish trunk groups. LACP also allows port redundancy , that is, if an operational port fails, then one of the “standby” ports become opera[...]

Chapter 17 L ink Aggr eg a tion MGS-3712/MGS-3712F Use r’s Guide 157 17.3 Link Aggregation S t atus Click Advanced Application > Link Aggregation in the navigation panel. The Link Aggregation Status screen d isplays by default. See Sect ion 17.1 on pa ge 155 for more information. Figure 82 Advanced Application > Link Aggregation S t atus Th[...]

Chapter 17 Li nk Aggr eg a tion MGS-3712/MGS-3712F User’s Guide 158 Criteria This shows the outgoing traffic distribution algorith m used in this trunk group. P ackets from the same source and/or to the same destination are sent over the same link within the trun k. src-mac means the Switch distributes traffic based on the packet’ s source MAC [...]

Chapter 17 L ink Aggr eg a tion MGS-3712/MGS-3712F Use r’s Guide 159 17.4 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 155 for more informat ion on link aggre gation. Figure 83 Advanced Application > Link Aggreg ation > Link[...]

Chapter 17 Li nk Aggr eg a tion MGS-3712/MGS-3712F User’s Guide 160 Criteria Select the outgoing traffic distribution type. P ackets from the same source and/or to the same destination are sent ov er the same link within the trunk. By default, the Switch uses the src-dst-mac distribution type. If the Switch is behind a router , the packet’s des[...]

Chapter 17 L ink Aggr eg a tion MGS-3712/MGS-3712F Use r’s Guide 161 17.5 Link Aggregation Control Protocol Click Advanced Application > Link Aggregation > Link A ggregation Setting > LACP to display the screen shown next. See Section 17.2 on page 155 for more information on d ynamic link aggregation. Figure 84 Advanced Application > [...]

Chapter 17 Li nk Aggr eg a tion MGS-3712/MGS-3712F User’s Guide 162 17.6 S t atic T runking Example This example shows you how to create a static port trunk group for ports 2-5. Syst e m Priority LACP system priority is a number be tween 1 and 65,535. The switch with the lowest system priority (and lowest port number if system priority is the sam[...]

Chapter 17 L ink Aggr eg a tion MGS-3712/MGS-3712F Use r’s Guide 163 1 Make your physical connections - make sure that the ports that you w ant to belong to the trunk group are connected to the same destina tion. The followin g figure shows ports 2-5 on swit ch A connected to switch B . Figure 85 T runking Example - Physical Connections 2 Configu[...]

Chapter 17 Li nk Aggr eg a tion MGS-3712/MGS-3712F User’s Guide 164 Y our trunk group 1 ( T1 ) configur ation is now complete; you do not need to go to any additional screens.[...]

MGS-3712/MGS-3712F Use r’s Guide 165 C HAPTER 18 Port Authentication This chapter describes the IEEE 802. 1x and MAC authentication methods. 18.1 Port Authentication Overview P ort authentication is a w ay to v alidate access to ports on the Switch to clients based on an external server (authentic ation server). The S witch supports the following[...]

Chapter 18 Port Authentication MGS-3712/MGS-3712F User’s Guide 166 request to a RADIUS server . The RADIUS se rver v alidates whether this client is allowed access to the port. Figure 87 IEEE 802.1x Authentication Process 18.1.2 MAC Authentication MAC authentication works in a very sim ilar way to IEEE 802.1x authentication. The main difference i[...]

Chapter 18 Port Authentication MGS-3712/MGS-3712F Use r’s Guide 167 client connecting to a port on the Switch along with a password configured specifically for MAC authenti cation on the Switc h. Figure 88 MAC Authentication Process 18.2 Port Authentication Configuration T o enable port authentication, first activ a te the port authentication met[...]

Chapter 18 Port Authentication MGS-3712/MGS-3712F User’s Guide 168 18.2.1 Activate IEEE 802.1x Security Use this screen to activ ate IEEE 802.1x security . In the Port Authentication screen click 802.1x to display the configur ation screen as shown. Figure 90 Advanced Application > Port Authentication > 802.1x The following table describes [...]

Chapter 18 Port Authentication MGS-3712/MGS-3712F Use r’s Guide 169 18.2.2 Activate MAC Authentication Use this screen to activ ate MAC authentication. In t he Port Authentication screen click MAC Authentication to di splay the configur ation screen as shown. Figure 91 Advanced Application > Port Authentication > MAC Authentication R eauthe[...]

Chapter 18 Port Authentication MGS-3712/MGS-3712F User’s Guide 170 The following table describes t he labels in this screen. T able 42 Advanced Application > Port Authentication > MAC Authen tication LABEL DESCRIPTION Active Select this check box to permit MAC authentication on the Switch. Note: Y ou must first enable MAC authentication on [...]

MGS-3712/MGS-3712F Use r’s Guide 171 C HAPTER 19 Port Security This chapter shows you how t o set up port securit y . 19.1 About Port Security P ort security allows only packet s with dynamically learned MAC addresses and/or configured static MAC ad dresses to pass throug h a port on the S witch. Th e Switch can learn up to 16K MAC addresses in t[...]

Chapter 19 Port Secu rity MGS-3712/MGS-3712F User’s Guide 172 19.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. Figure 92 Advanced Application > Port Security The following table describes t he labels in this screen. T able 43 Advanced Application > Port Security L[...]

Chapter 19 Port Security MGS-3712/MGS-3712F Use r’s Guide 173 * Settings in this row apply to all ports. Use this row only if you w ant to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port -by-po rt basis. Note: Changes in this row are copied to all the ports as soon as yo[...]

Chapter 19 Port Secu rity MGS-3712/MGS-3712F User’s Guide 174 19.3 VLAN MAC Address Limit Use this screen to set t he MAC address le arning limit on per-port and per- VLAN basis. Click VLAN MAC Address Lim it in the Advanced Application > Port Security screen to display the screen as shown. Figure 93 Advanced Application > Port Secu rity &g[...]

Chapter 19 Port Security MGS-3712/MGS-3712F Use r’s Guide 175 VID This is the VLAN ID number to which the port belongs. Limit Number This is the maximum number of MAC addresses which a port can learn in a VLAN. Delete Check the rule(s) that y ou want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the[...]

Chapter 19 Port Secu rity MGS-3712/MGS-3712F User’s Guide 176[...]

MGS-3712/MGS-3712F Use r’s Guide 177 C HAPTER 20 Classifier This chapter introduces and shows you how to configure the packet classif ier on the Switch. 20.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay , and the networking me thods used to control the use of band[...]

Chapter 20 Classifier MGS-3712/MGS-3712F User’s Guide 178 Click Advanced Application > Classifier in the navigation panel to displa y the configurati on screen as shown. Figure 94 Advanced Applicatio n > Classifier The following table describes t he labels in this screen. T able 45 Advanced Application > Classifier LABEL DESCRIPTION Acti[...]

Chapter 20 Classifier MGS-3712/MGS-3712F Use r’s Guide 179 Layer 2 Specify the fields below to configure a layer 2 classifier . VLAN Select Any to classify traffic from an y VLAN or select the second option and specify the source VLAN ID in the field provided. When VLAN mapping is enable d, this is the translated VLAN ID you set in the VLAN Mappi[...]

Chapter 20 Classifier MGS-3712/MGS-3712F User’s Guide 180 20.3 V iewing and Editing Classifier Configuration T o view a summary of t he classifier configur ation, scroll down to the s ummary table at the bottom of the Classifier screen. T o change the settings of a rule, click a number in the Index field. Note: When two rules conflict with each o[...]

Chapter 20 Classifier MGS-3712/MGS-3712F Use r’s Guide 181 The following table describes t he labels in this screen. The following table shows some other common Ethernet types and the corresponding protocol number . In the Internet Protocol there is a field, called “Protocol” , to identify the next level protocol. The foll owi ng table shows [...]

Chapter 20 Classifier MGS-3712/MGS-3712F User’s Guide 182 Some of the most common T C P and UDP port numbers are: See Append i x A on page 36 7 for information on commonly used port numbers. 20.4 Classifier Example The following screen shows an example where you configure a classifier that identifies all traffic from M AC ad dress 00:50:ba:ad:4f:[...]

Chapter 20 Classifier MGS-3712/MGS-3712F Use r’s Guide 183 After you hav e configured a classifier , you can configure a poli cy (in the Policy screen) to def i ne ac tion (s) on the classified tr affic flow . Figure 96 Classifier: Example[...]

Chapter 20 Classifier MGS-3712/MGS-3712F User’s Guide 184[...]

MGS-3712/MGS-3712F Use r’s Guide 185 C HAPTER 21 Policy Rule This chapter shows you how t o configure policy rules. 21.1 Policy Rules Overview A classifier dist inguishes traffic into flows based on the configured criteria (refer to Chapter 20 on page 177 for more information). A policy rule ensures that a tr affic flow gets the requested treatme[...]

Chapter 21 Policy Rule MGS-3712/MGS-3712F User’s Guide 186 The DSCP value determines the forwarding behavior , the PHB (Per-Hop Behavior), that each pack et gets across the DiffSer v network. Based on the marking rule, different kinds of tr affic can be marked for different kinds of forwarding. R esources can then be allocated according to the DS[...]

Chapter 21 Policy Rule MGS-3712/MGS-3712F Use r’s Guide 187 Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. Figure 97 Advanced Application > Policy Rule The following table describes t he labels in this screen. T able 50 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select t[...]

Chapter 21 Policy Rule MGS-3712/MGS-3712F User’s Guide 188 Classifier(s) This field dis plays the active classifier(s) you configure in the Classifier screen. Select the classifier(s) to which this policy rule applies. T o select more than one classifier , press [SHIF T] and select the choices at the same time. Pa ra m e t e r s Set the fields be[...]

Chapter 21 Policy Rule MGS-3712/MGS-3712F Use r’s Guide 189 21.3 V iewing and Editin g Policy Configuration T o view a summary of t he classifier configur ation, scroll down to the s ummary table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field. Figure 98 Advanced Application > Policy Rul[...]

Chapter 21 Policy Rule MGS-3712/MGS-3712F User’s Guide 190 The following table describes t he labels in this screen. T able 51 Advanced Application > Policy Rule: Summary Table LABEL DESCRIPTION Index This field displays the policy index num ber . Click an index number to edit the policy . Active This field displays Yes when policy is activ at[...]

Chapter 21 Policy Rule MGS-3712/MGS-3712F Use r’s Guide 191 21.4 Policy Example The figure below shows an example Policy screen where y ou configure a policy to limit bandwidth and discard out -of-profi le traffic on a tr affic flow classified using the Example classifier (r efer to Section 20.4 on page 182 ). Figure 99 Policy Example[...]

Chapter 21 Policy Rule MGS-3712/MGS-3712F User’s Guide 192[...]

MGS-3712/MGS-3712F Use r’s Guide 193 C HAPTER 22 Queuing Method This chapter introduces the queuing methods supported. 22.1 Queuing Method Overview Queuing is us ed to help solve performa nce degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffi c. See al so Priority Queue [...]

Chapter 22 Q ue u ing Me tho d MGS-3712/MGS-3712F User’s Guide 194 22.1.3 W eighted Round Robin Scheduling (WRR) Ro u nd Robin Scheduli ng services queues on a rotating basi s and is activ ated only when a port has more traffic than it can handle. A queue is a gi ven an amount of bandwidth irrespective of the incoming tr a ffic on that port. T hi[...]

Chapter 22 Queuing Me thod MGS-3712/MGS-3712F Use r’s Guide 195 22.2 Configuring Queuing Click Advanced Application > Queuing Method in the na vigation panel. Figure 100 Advanced App lication > Queuing Method[...]

Chapter 22 Q ue u ing Me tho d MGS-3712/MGS-3712F User’s Guide 196 The following table describes t he labels in this screen. T able 52 Advanced Application > Queuing Method LABEL DESCRIPTION P ort This label shows the port you are configuring. Method Select SPQ (Strictly Priority Queuing), WFQ (W eighted F air Queuing) or WRR (W eighted Round [...]

MGS-3712/MGS-3712F Use r’s Guide 197 C HAPTER 23 VLAN Stacking This chapter shows you how t o configure VLAN stacking on your Switch. See the chapter on VLANs for more background information on Virtual LAN 23.1 VLAN S t acking Overview A service provider c an use VLAN stacking (also known as Q-in-Q) to allow it to distinguish multipl e customers [...]

Chapter 23 VLAN Stacking MGS-3712/MGS-3712F User’s Guide 198 distinguish customer A and tag 48 to disti nguish customer B at ed ge device 1 and then stripping those tags at edge device 2 as the data frames leav e the network. Figure 101 VLAN S tacking Examp le 23.2 VLAN S t acking Port Roles Each port can hav e three VLAN stacking “roles” , N[...]

Chapter 23 VLAN Stacking MGS-3712/MGS-3712F Use r’s Guide 199 23.3 VLAN T ag Format A VLAN tag (service pro vider VLAN st acki ng or customer IEEE 802.1Q) consists of the following th ree fields. TPID (T ag Protocol Identifier) is a standard Ethernet type code identifying the frame and indicates that whether the fr ame carries IEEE 802.1Q tag inf[...]

Chapter 23 VLAN Stacking MGS-3712/MGS-3712F User’s Guide 200 23.4 Configuring VLAN S t acking Click Advanced Applications > VLAN Stacking to disp l ay the sc re en as shown. Note: Y ou can not enable VLAN mapp ing and VLAN stacking at the same time. Figure 102 Advanced App lication > VLAN S t acking The following table describes t he labels[...]

Chapter 23 VLAN Stacking MGS-3712/MGS-3712F Use r’s Guide 201 23.4.1 Port-based Q-in-Q Port -based Q-in-Q lets t he Switc h tre at a ll frames receiv ed on the same port as the same VLAN flows and add the same ou ter VLAN tag to them, even they have different customer VLAN IDs. * Settings in this row apply to all ports. Use this row only if you w[...]

Chapter 23 VLAN Stacking MGS-3712/MGS-3712F User’s Guide 202 Click Port-based QinQ in the Advanced Application > VLAN Stacking screen to display the screen as shown. Figure 103 Advanced App lication > VLAN S t acking > Port-based QinQ The following table describes t he labels in this screen. 23.4.2 Selective Q-in-Q Selective Q-in-Q is VL[...]

Chapter 23 VLAN Stacking MGS-3712/MGS-3712F Use r’s Guide 203 Note: Selective Q-in-Q rules are only ap plied to single-t agged frames received on th e access ports. If the incoming fra mes are untagged or sin gle-tagged but received on a tunnel port or cannot match any selective Q-in-Q rules, the Switch applies the port-based Q-in-Q rules to them[...]

Chapter 23 VLAN Stacking MGS-3712/MGS-3712F User’s Guide 204 Index This is the number of the selective VLAN stacking rule. Active This shows whether this rule is activated or not. Name This is the descriptive name for this rule. P ort This is the port number to which this rule is applied. VID This is the customer VLAN ID in the incoming pack ets.[...]

MGS-3712/MGS-3712F Use r’s Guide 205 C HAPTER 24 Multicast This chapter shows you how t o configure various multicast features. 24.1 Multicast Overview T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast deliv ers IP packets to jus[...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 206 24.1.3 IGMP Snooping A Switch can passiv ely snoop on IGMP pa ck ets trans ferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP pack ets pa ssing through it, picks out the group registration informa t ion , and config[...]

Chapter 24 Multicast MGS-3712/MGS-3712F Use r’s Guide 207 24.3 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to display the screen as shown. See Section 24.1 on page 205 for more i nformation on multicasting. Figure 106 Advanced App lication > Multicast > Multicast Setting The following table descr[...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 208 Host Timeout Specify the time (from 1 to 16,711,450) in second s that elapses before the Switch remov es an IGMP group membership entry if it does not receive report messages from the port. 802.1p Priority Select a priority level (0-7) to which the Switch changes the priority in outgoing IG[...]

Chapter 24 Multicast MGS-3712/MGS-3712F Use r’s Guide 209 F ast Leave Enter an IGMP fast leave timeout value (from 200 to 6,348,800) in miliseconds. Select this option to ha ve the Switch use this timeout to update the forwarding table for the port. This defines how many seconds the Switch w aits for an IGMP report before removing an IGMP snoopin[...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 210 24.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the screen as shown. See Section 24.1.4 on page 206 for more information on IG MP Snooping VLAN. Figure 107 Advanced A[...]

Chapter 24 Multicast MGS-3712/MGS-3712F Use r’s Guide 21 1 The following table describes t he labels in this screen. T able 61 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN LABEL DESCRIPTION Mode Select auto to have the S witch learn multicast group membership information of any VLANs automatically . Select fi[...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 212 24.5 IGMP Filtering Profile An IGMP filter in g profile sp ec if ies a range of multic as t groups th at cl ie nts connected to the Switch are able to join. A profile contains a r ange of multicast IP addresses which you w ant cli ents to be able to join. Profiles are assigned to ports (in [...]

Chapter 24 Multicast MGS-3712/MGS-3712F Use r’s Guide 213 24.6 MVR Overview Multicast VLAN R egist ration (MVR) is designed for applications (such as Media-on- Demand (MoD)) that use multicast tr affic across an Ethernet ring-based service provider network. MVR allows one single multicast VLAN t o be shared among different subscriber VLANs on the[...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 214 24.6.1 T ypes of MVR Port s In MVR, a source port i s a port on the S witch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast tr affic. Once configured, the Switch maintains a forwarding table that matches the multicast stream t[...]

Chapter 24 Multicast MGS-3712/MGS-3712F Use r’s Guide 215 for the multicast traffic. Otherwise, the Sw itch remov es the rece iver port fr om the forwarding tabl e. Figure 1 10 MVR Multicast T elevision Example 24.7 General MVR Configuration Use the MVR screen to create multicast VL ANs and select the receiv er port(s) and a source port for each [...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 216 Note: Y our Switch automatically creates a stat ic VLAN (with th e same VID) when you create a multicast VLAN in this screen. Figure 1 1 1 Advanced Application > Multicast > Multicast Setting > MVR The following table describes t he related labels in this screen. T able 63 Advanced[...]

Chapter 24 Multicast MGS-3712/MGS-3712F Use r’s Guide 217 24.8 MVR Group Configuration All source ports and receiv er ports belo nging to a multicast group can recei ve multicast data sent to thi s multicast group. Configure MVR IP mul ticast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. * Setti[...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 218 Note: A port can belong to more than one multicast VLAN. However , IP multicast group addresses in dif ferent multicast VLANs cannot overlap. Figure 1 12 Advanced Application > Mu lticast > Multicast Setting > MVR: Group Configuration The following table describes t he labels in th[...]

Chapter 24 Multicast MGS-3712/MGS-3712F Use r’s Guide 219 24.8.1 MVR Configuration Example The following figure shows a network ex ample where ports 1, 2 and 3 on the Switch bel ong to VLAN 1. In addition, po rt 7 belongs to the mul ticast group with VID 200 to receive multi cast traffic ( the News and Movie channels) from the remote streaming me[...]

Chapter 24 Multicast MGS-3712/MGS-3712F User’s Guide 220 T o set the Switc h to forward the multicast group traffic to the subscribers, configure multicast group sett ings in the Group Configuration screen. The following figure shows an exa mpl e where two multicast groups ( News and Movie ) are configured for the multicast VLAN 200. Figure 1 15 [...]

MGS-3712/MGS-3712F Use r’s Guide 221 C HAPTER 25 AAA This chapter describes how to config ure authentication, authorization and accounting se ttings on th e Switch . 25.1 Authentication, Authorization and Accounting (AAA) Authentication is the process of determin ing who a user is and validating access to the Switch. The Switch can authenticate u[...]

Chapter 25 AAA MGS-3712/MGS-3712F User’s Guide 222 25.1.2 on page 222 ) as external authentication, authorization and accounting servers. Figure 1 17 AAA Server 25.1.1 Local User Account s By storing user profiles locally on the S wit ch, your Swit ch is able to authenticate and authorize users without inter acting wi th a network AAA server . Ho[...]

Chapter 25 AAA MGS-3712/MGS-3712F Use r’s Guide 223 Click Advanced Application > AAA in the navigation panel to displa y the screen as shown. Figure 1 18 Advanced Application > AAA 25.2.1 RADIUS Server Setup Use this screen to configure yo ur RADIUS server settings. See Section 25.1.2 on page 222 for more information on RADIUS servers and S[...]

Chapter 25 AAA MGS-3712/MGS-3712F User’s Guide 224 The following table describes t he labels in this screen. T able 66 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure your RADIUS authentication settings. Mode This field is only v alid if you configure multiple RADIUS ser[...]

Chapter 25 AAA MGS-3712/MGS-3712F Use r’s Guide 225 25.2.2 T ACACS+ Server Setup Use this screen to configure yo ur T ACACS+ server settings. See Section 25.1. 2 on page 222 for more information on T ACACS+ se rvers. Click on the TACACS+ Server Setup link in the AAA screen to view the screen as shown. Figure 120 Advanced Application > AAA >[...]

Chapter 25 AAA MGS-3712/MGS-3712F User’s Guide 226 The following table describes t he labels in this screen. T able 67 Advanced Application > AAA > T ACACS+ Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure your T ACACS+ authentication settings. Mode This field is only v alid if you configure multiple T ACAC[...]

Chapter 25 AAA MGS-3712/MGS-3712F Use r’s Guide 227 25.2.3 AAA Setup Use this screen to configure authentication , authorization and accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 121 Advanced Application > AAA > AAA Setup Shared Secret Specify a password (up to 32 alphan[...]

Chapter 25 AAA MGS-3712/MGS-3712F User’s Guide 228 The following table describes t he labels in this screen. T able 68 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authentication Use this section to specify the methods used to authenticate users accessing the Switch. Privilege Enable These fields specify which database the Switc[...]

Chapter 25 AAA MGS-3712/MGS-3712F Use r’s Guide 229 Active Select this to activate authorization for a specified event types. Method Select whether you w ant to use RADIUS or T ACACS+ for authorization of specific types of events. RADIUS is the only method for IEEE 802.1x authorization. Accounting Use this section to configure accounting settings[...]

Chapter 25 AAA MGS-3712/MGS-3712F User’s Guide 230 25.2.4 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access d evice (for example, the Switch). A company can create V endor Specific Attributes (VSAs) to expand the function ality of a RADIUS serv er .[...]

Chapter 25 AAA MGS-3712/MGS-3712F Use r’s Guide 231 25.2.4.1 T unnel Protocol Attribute Y ou can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN settings are fixed and untagged. This will also set the p[...]

Chapter 25 AAA MGS-3712/MGS-3712F User’s Guide 232 Refer t o RFC 2865 for more information about RADIUS attributes used for authentication. R efer to RFC 2866 and RFC 2869 for RADIUS attributes used for accounting. This section lists t he attributes used by authentication and accounting functions on the Switch. In cases where the attribute has a [...]

Chapter 25 AAA MGS-3712/MGS-3712F Use r’s Guide 233 25.3.2 Attributes Used for Accounting The following sections list the attributes sent from the Switch to the RADIUS server when performi ng authenti ca tion. 25.3.2.1 Attributes Used fo r Accounting System Events NAS-IP- Address NAS-Identifier Acct- Status- T ype Acct-Session-ID - The format of [...]

Chapter 25 AAA MGS-3712/MGS-3712F User’s Guide 234 25.3.2.3 Attributes Used for Ac counting IEEE 802.1x Event s The attributes are listed in the following table along with the ti me of the session they are sent: Acct-S ession-Id Y Y Y Acct- Authentic Y Y Y Acct-Session- Time Y Y Acct- T erminate-Cause Y T able 72 RADIUS Attributes - Exec Events v[...]

MGS-3712/MGS-3712F Use r’s Guide 235 C HAPTER 26 IP Source Guard Us e I P s o ur ce g ua r d t o f i lt er unauthorized DHC P and AR P packets in your network. 26.1 IP Source Guard Overview IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in yo ur network. A binding contains these key at[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 236 26.1.1 DHCP Snooping Overview Use DHCP s nooping t o filter u nau th orized DHCP packets on the netwo rk and to build the binding tab le dynamically . This can prevent clients from getting IP addresses from unauthorized DHCP servers. 26.1.1.1 T rusted vs. Untrusted Port s Every port [...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 237 Y ou can configure the nam e and location of the file on the external TF TP server . The file has the following format: Figure 122 DHCP Snooping Dat abase File Format The <initial-checksum> helps distinguis h between the bindings in the latest update and the bindings from previ[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 238 3 Configure trusted and untrusted ports, an d specify the maximum number of DHCP packets t hat each port can receive per second. 4 Configure static bindings. 26.1.2 ARP Inspection Overview Use ARP inspection to filter unauthorized ARP packets on the network. This can prevent many kin[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 239 • They ap pe ar only in the ARP Inspection screens and commands, not in the MAC Address Filter screens and commands. 26.1.2.2 T rusted vs. Untrusted Port s Every port is either a trusted port or an untrusted p o rt for A R P inspecti on. Th is setting is independent of the t rusted[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 240 the bindings by snooping DHCP packets (dynami c bindings) and from informati on provided manually by administr ators (static bindings). T o open this screen, click Advanced Application > IP Source Guard . Figure 124 IP Source Guar d The following table describes t he labels in thi[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 241 new static binding replaces the origin al one. T o open this screen, click Advanced Application > IP Source Guard > Static Binding . Figure 125 IP Source Guar d S tatic Binding The following table describes t he labels in this screen. T able 75 IP Source Guard Static Binding LA[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 242 Delete Select this, and click Delete to remove the specified entry . Cancel Click this to clear the Delete check boxes abov e. T able 75 IP Source Guard Static Binding (continued) LABEL DESCRIPTION[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 243 26.4 DHCP Snooping Use this scre en to look at various statis tics about the DHCP snooping database. T o open this screen, click Advanced Application > IP Source Guard > DHCP Snooping . Figure 126 DHCP Snooping[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 244 The following table describes t he labels in this screen. T able 76 DHCP Snooping LABEL DESCRIPTION Database Status This section displays the current settings for the DHCP snooping database. Y ou can con figure them in the DHCP Snooping Configure screen. See Section 26.5 on page 246 [...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 245 Successful transfers This field displays the number of times the Switch read bindings from or updated the bindings in the DHC P snooping database successfully . F ailed transfers This fie ld displays the number of time s the Switch was unable to read bindings from or update th e bind[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 246 26.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and conf igure the DHCP snooping database. Th e DHCP snooping databa se stores the current bindings on a secure, exter[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 247 The following table describes t he labels in this screen. T able 77 DHCP Snooping Configure LABEL DESCRIPTION Active Select this to en able DHCP snooping on th e Switch. Y ou still have to enable DHCP snooping on spec ific VLAN and specify trusted ports. Note: If DHCP is enabled and [...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 248 26.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are trusted or untrusted ports for DHCP snooping. Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed. Y ou can also specify the maximum number for DHCP packets t hat each[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 249 The following table describes t he labels in this screen. 26.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Switch adds DHCP rela y agent option 82 informati on ( Chapt er 32 on page 287 ) to DHCP requ ests that[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 250 open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN . Figure 129 DHCP Snooping VLAN Configure The following table describes t he labels in this screen. T able 79 DHCP Snooping VLAN Configure LABEL DESCRIPTION Show VLAN Use thi[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 251 26.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were c reated because the Switch identified an unau thorized ARP pack et. When the Switch identifies an unauthorized ARP packet, it automatically cr eates a MAC addres s filter to blo[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 252 26.6.1 ARP Inspection VLAN St atus Use this screen to look at various statistics about ARP p ackets in each VL AN. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status . Figure 131 ARP Inspection VL AN S t atus The following table[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 253 26.6.2 ARP Inspection Log St atus Use this scre en t o look at lo g m es s a g e s th at we re generated by ARP pac kets and that have not been sent to the syslog server yet. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status . F[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 254 26.7 ARP Inspection Configure Use this screen to enable ARP inspection on the Swit ch. Y ou can also configure the length of time the Switch stores reco rds of discarded ARP pack ets and global Num Pkts This field displays the number of ARP packets that were consolidated into this lo[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 255 settings for the ARP inspection log. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure . Figure 133 ARP Inspection Co nfigure The following table describes t he labels in this screen. T able 83 ARP Inspection Configure LABEL DESC[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 256 26.7.1 ARP Inspection Port Configure Use this screen to specify whether port s are trusted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at which the Sw itch receives Syslog r ate Enter the maximum number of syslog messages the Switch can send to the s[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 257 ARP packets on each untrusted po rt. T o open this screen, click Advanc ed Application > IP Source Guard > ARP Inspection > Configure > Port . Figure 134 ARP Inspection Po rt Configure The following table describes t he labels in this screen. T able 84 ARP Inspection Port[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 258 26.7.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specif y when the Switch gener ates log messages for receiv ing ARP packets from each VLAN. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection >[...]

Chapter 26 IP Source Guard MGS-3712/MGS-3712F Use r’s Guide 259 Apply Click this to display the specified range of VLANs in the section below . VID This field displays the VLAN ID of each VLAN in the r ange specified above. If y ou configure the * VLAN, the settings are applied to all VLANs. Enabled Select Yes to enable ARP inspection on the VLAN[...]

Chapter 26 IP Source Gua rd MGS-3712/MGS-3712F User’s Guide 260[...]

MGS-3712/MGS-3712F Use r’s Guide 261 C HAPTER 27 Loop Guard This chapter shows you how to config ure the Swit ch to guard against loops on the edge of your network. 27.1 Loop Guard Overview Loop guard allows you to configure the S w itch to shut down a port if it detects that packets sent out on that port loop back to the Swit ch. While you can u[...]

Chapter 27 Loop Guard MGS-3712/MGS-3712F User’s Guide 262 • It will receive its own broadcast messages that it sends out as they lo op back. It will then re-broadcast those messages agai n. The following figure shows port N on switch A connected to switch B . Switch B is in loop state. When broadcast or multi cast packets leav e port N and reac[...]

Chapter 27 Loop Guar d MGS-3712/MGS-3712F Use r’s Guide 263 port N . The Switch will shut down port N if it detects that the probe packet has returned to the Switch. Figure 139 Loop Guard - Network L oop Note: After resolving the loop problem on your network you can re-activate the disabled port via the web configurator (se e Section 8.7 on page [...]

Chapter 27 Loop Guard MGS-3712/MGS-3712F User’s Guide 264 The following table describes t he labels in this screen. T able 86 Advanced Application > Loop Guard LABEL DESCRIPTION Active Select this option to enable loop guard on the Switch. The Switch generates syslog, internal log messages as well as SNMP traps when it shuts down a port via th[...]

MGS-3712/MGS-3712F Use r’s Guide 265 C HAPTER 28 VLAN Mapping This chapter shows you how t o conf igure VLAN mapping on the Switch. 28.1 VLAN Mapping Overview With VLAN mapping enabled, the S witch ca n map the VLAN ID and priority leve l of packets received from a priv ate network to those used in the service provider’ s network. The Switch ch[...]

Chapter 28 VLAN Ma p ping MGS-3712/MGS-3712F User’s Guide 266 28.2 Enabling VLAN Mapping Click Advanced Application and then VLAN Mapping in the navigation panel to display the s creen as shown. Figure 142 VLAN Mapping The following table describes t he labels in this screen. T able 87 VLAN Mapping LABEL DESCRIPTION Active Select this option to e[...]

Chapter 28 VLAN Mapping MGS-3712/MGS-3712F Use r’s Guide 267 28.3 Configuring VLAN Mapping Click the VLAN Mapping Configure link in the VLA N Mapping screen to displa y the screen as shown. Use this screen to enable an d edit the VLAN mapping rule(s). Figure 143 VLAN Mapping Configuration The following table describes t he labels in this screen. [...]

Chapter 28 VLAN Ma p ping MGS-3712/MGS-3712F User’s Guide 268 Active This shows whether this entry is activated or not. Name This is the descriptive name for this rule. P ort This is the port number to which this rule is applied. VID This is the cu stomer VLAN ID in the incoming packets. T ranslated VID This is the VLAN ID that repl aces the cust[...]

MGS-3712/MGS-3712F Use r’s Guide 269 C HAPTER 29 Layer 2 Protocol Tunneling This chapter shows y ou how to configure la yer 2 protocol tunneling on the Switch. 29.1 Layer 2 Protocol T unneling Overview Layer 2 protocol tunneling (L2PT) is used on the service provid er's edge devi ces. L2PT allows edge switches ( 1 and 2 in the following figu[...]

Chapter 29 Layer 2 Prot ocol Tunne ling MGS-3712/MGS-3712F User’s Guide 270 2 for P AgP (Port Aggreg ation Protocol), LACP or UDLD (UniDirecti onal Link Detection). Figure 145 L2P T Network Example 29.1.1 Layer 2 Protocol T unneling Mode Each port can have two lay e r 2 protocol tunnel ing modes, Access and Tunnel . •T h e Access port is an ing[...]

Chapter 29 Layer 2 Protocol Tunneling MGS-3712/MGS-3712F Use r’s Guide 271 29.2 Configuring Layer 2 Protocol T unneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. Figure 146 Advanced Applicatio n > Lay er 2 Protocol T unneling The following table describes t he labels in t[...]

Chapter 29 Layer 2 Prot ocol Tunne ling MGS-3712/MGS-3712F User’s Guide 272 * Use this row to make the setting th e same for all po rts. Use this row first and then make adjustments on a port-by -port basis. Note: Changes in this row are copied to all the ports as soon as you make them. CDP Select this option to have th e Switch tunnel CDP (Cisco[...]

273 P ART IV IP Application Static R oute (275) Differentiated Services ( 279) DHCP (287)[...]

274[...]

MGS-3712/MGS-3712F Use r’s Guide 275 C HAPTER 30 Static Route This chapter shows you how t o configure static routes. 30.1 S t atic Routing Overview The Switch uses IP for co mmunicat ion with management computers, for example using HT TP , telnet, SSH, or SNMP . Use I P st atic routes to ha ve the S witch respond to remote management stations th[...]

Chapter 30 Stat ic Route MGS-3712/MGS-3712F User’s Guide 276 30.2 Configuring S t atic Routing Click IP Application > Static Routing in the navigati on panel to display t he screen as shown. Figure 148 IP Ap plication > S t atic Routing The following table describes t he related labe ls you use to create a static route. T able 90 IP Applica[...]

Chapter 30 Static Route MGS-3712/MGS-3712F Use r’s Guide 277 Index This field displays the index number of the route. Click a number to edit the static route entry . Active This field displays Yes when the static route is activated and NO when it is deactivated. Name This field displays the descriptive name for this route. This is for identificat[...]

Chapter 30 Stat ic Route MGS-3712/MGS-3712F User’s Guide 278[...]

MGS-3712/MGS-3712F Use r’s Guide 279 C HAPTER 31 Differentiated Services This chapter describes how Differentiated Se rvices (DiffServ) fits into a quality of service strat egy and shows you how to configure T wo Rate Three Color Marker traffic policing on the Switch. 31.1 DiffServ Overview Quality of Service (QoS) is used to prioriti ze source-t[...]

Chapter 31 Differe ntiated Services MGS-3712/MGS-3712F User’s Guide 280 The DSCP v alue determines t he PHB (P er -Hop Be havior) , that each pack et gets as it is forw arded across the DiffServ networ k. Based on the mark ing rule di fferent kinds of tr affic can be marked fo r di fferent p riorities of forw arding. Resources c an then be alloca[...]

Chapter 31 Differentiated Services MGS-3712/MGS-3712F Use r’s Guide 281 T wo Rate Three Color Marker (TR TCM, defined in RFC 2698) is a type of tr affic policing that identi fi es packets by compar ing them to two user -defined rates: the Committed Information R ate (CIR) and the Peak Informati on Rate (PIR). The CIR specifies the a verag e rate [...]

Chapter 31 Differe ntiated Services MGS-3712/MGS-3712F User’s Guide 282 31.2.2 TRTCM-Color-aware Mode In color-a ware mode the ev aluation of th e packets uses the existing pack et loss priority . TR TCM can increase a p acket loss priority of a packet but it cannot decrease it. P ackets that have been previo usly marked red or yellow can only be[...]

Chapter 31 Differentiated Services MGS-3712/MGS-3712F Use r’s Guide 283 Click IP Application > DiffServ in the navigation panel to displa y the screen as shown. Figure 153 IP Ap plication > DiffServ The following table describes t he labels in this screen. T able 91 IP Application > DiffServ LABEL DESCRIPTION Active Select this option to[...]

Chapter 31 Differe ntiated Services MGS-3712/MGS-3712F User’s Guide 284 31.3.1 Configuring 2-Rate 3 Color Marker Settings Use this screen to configur e TR TCM settings. Click the 2-rat e 3 Color Marker link in the DiffServ screen to display the screen as shown next . Note: Y ou cannot enable both TR TCM and Bandwid th Control at the same time. Fi[...]

Chapter 31 Differentiated Services MGS-3712/MGS-3712F Use r’s Guide 285 31.4 DSCP-to-IEEE 802.1p Priority Settings Y ou can configure the DSCP to IEEE 802.1p mapping to allow the Swit ch to prioritize all tr affi c based on the incoming DSCP v alue according to the DiffServ to IEEE 802.1p mapping table. The following table shows the de fault DSCP[...]

Chapter 31 Differe ntiated Services MGS-3712/MGS-3712F User’s Guide 286 31.4.1 Configuring DSCP Settings T o change the DSCP-IEEE 802. 1p mapping click the DSCP Setting link in the DiffServ screen to display the screen as shown next. Figure 155 IP Ap plication > DiffServ > DSCP Setting The following table describes t he labels in this scree[...]

MGS-3712/MGS-3712F Use r’s Guide 287 C HAPTER 32 DHCP This chapter shows you how t o configure the DHCP feature. 32.1 DHCP Overview DHCP (Dynamic Host Configur ation Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP conf iguration at start-up from a server . Y o u can configure the Switch as a DHCP se rver or a DHCP rel[...]

Chapter 32 DHCP MGS-3712/MGS-3712F User’s Guide 288 32.2 DHCP S t atus Click IP Application > DHCP in the na vigation panel. The DHCP Status screen displays. Figure 156 IP Application > DHCP S tatus The following table describes t he labels in this screen. 32.3 DHCP Relay Configure DHCP relay on the Switch if the DHCP client s and the DHCP [...]

Chapter 32 DHCP MGS-3712/MGS-3712F Use r’s Guide 289 The DHCP Relay Agent Information feature adds an Agent Information field to the Option 82 field. The Option 82 fie ld is in the DHCP he a d ers of clie nt DHCP request frames that the Switch relays t o a DHCP server . Relay Agent Information can include the System N ame of the Switch if you sel[...]

Chapter 32 DHCP MGS-3712/MGS-3712F User’s Guide 290 The following table describes t he labels in this screen. 32.3.3 Global DHCP Relay Configuration Example The follow figure shows a network exampl e where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in bot[...]

Chapter 32 DHCP MGS-3712/MGS-3712F Use r’s Guide 291 together w ith the D HCP requests to the DH CP server . This allows the DHC P server to assign the ap propriate IP address according to the VLAN ID . Figure 159 DHCP Relay Configuration Example 32.4 Configuring DHCP VLAN Settings Use this screen to configure your DHCP se ttings based on the VLA[...]

Chapter 32 DHCP MGS-3712/MGS-3712F User’s Guide 292 The following table describes t he labels in this screen. 32.4.1 Example: DHCP Relay for T wo VLANs The following example dis plays two VLANs (VIDs 1 and 2) for a campus network. T wo DHCP servers are installed to serve each VLAN. The system is set up to forward DHCP request s from the dormitor [...]

Chapter 32 DHCP MGS-3712/MGS-3712F Use r’s Guide 293 with an IP address of 192.168.1.100. R equests from the academic buildings (VLAN 2) are sent to the other DHCP server with an IP address of 172.23.10.100. Figure 161 DHCP Relay for T wo VLANs For the example netw ork, configure the VLAN Setting screen as shown. Figure 162 DHCP Relay for T wo VL[...]

Chapter 32 DHCP MGS-3712/MGS-3712F User’s Guide 294[...]

295 P ART V Management Maintenance (297) Access Control (305) Diagnostic (329) Syslog (331) Cluster Management (335) MAC T able (343) ARP T able (347) Configure Clone (349)[...]

296[...]

MGS-3712/MGS-3712F Use r’s Guide 297 C HAPTER 33 Maintenance This chapter explains how to confi gure the screens that let y ou maintain the firmware and configur ation files. 33.1 The Maintenance Screen Use this screen to manage firmware and yo ur confi gur ation files. Click Management > Maintenance in the navi gation panel to open the follow[...]

Chapter 33 Maintenance MGS-3712/MGS-3712F User’s Guide 298 33.2 Load Factory Default Follow the steps below to rese t the Switch bac k to th e fa ctory defau lts. 1 In the Maintenance screen, click the Click Here button next to Load Factory Default to clear all Switch c onfigur ation i nformation y ou configured and return to the factory de fault[...]

Chapter 33 Maintenance MGS-3712/MGS-3712F Use r’s Guide 299 Click Config 2 to sav e the current configur ation settings to Configuration 2 on the Switch. Alternativel y , click Save on the top right - hand corner in any sc reen to save the configurati on changes to the current configur ation. Note: Clicking the Apply or Add button does NOT save t[...]

Chapter 33 Maintenance MGS-3712/MGS-3712F User’s Guide 300 Click Management > Maintenance > Firmware Upgrade to view the screen as shown next. Figure 166 Management > Mainte nance > Firmware Upgrade T ype the path and file name of t he firmware fil e you wish to upload to the Swit ch in the File Path text box or click Browse to locate[...]

Chapter 33 Maintenance MGS-3712/MGS-3712F Use r’s Guide 301 33.7 Backup a Configuration File Backing up your S witch configurations allows y ou to create various “snap shots” of your device from which you ma y restore at a later date. Back up your c urrent Switch confi guratio n to a computer using the Backup Configuration screen. Figure 168 [...]

Chapter 33 Maintenance MGS-3712/MGS-3712F User’s Guide 302 Z yNOS (Z yXEL Network Oper ating S ystem sometimes referred to as the “ras” file) is the system firmware and ha s a “bin” filename extension. 33.8.1.1 Example FTP Commands ftp> put firmware.bin ras This is a sample FTP session showing the tr ansfer of the computer file "f[...]

Chapter 33 Maintenance MGS-3712/MGS-3712F Use r’s Guide 303 6 Use put to tr ansfer files from the computer to the Swit ch, for example, pu t firmware.bin ras transfers the firmware on your computer (firmware.bin) to the Switch and renames it to “r as” . Similarly , put config.cfg config tr ansfers the configuration fi le on your co mputer (co[...]

Chapter 33 Maintenance MGS-3712/MGS-3712F User’s Guide 304[...]

MGS-3712/MGS-3712F Use r’s Guide 305 C HAPTER 34 Access Control This chapter describes how to c ontrol access to the Sw itch. 34.1 Access Control Overview A console port and FTP are allowed one se ssion ea ch , T elnet and SSH share nine sessions, up to fiv e W eb s essions (five different user names and passwords) and/ or limitless SNMP access c[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 306 34.3 About SNMP Simple Network Manageme nt Protocol (SNM P) is an application layer protocol used to manage and monitor T CP/IP-based devices. SNMP is used to exchange management information between the network manage ment system (NMS) and a network element (NE). A manager station can [...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 307 SNMP itself is a simple request /respon se protocol based on the manager/agent model. The manager issues a request an d the agent returns responses using t he following protocol operations: 34.3.1 SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 308 34.3.3 SNMP T raps The Switch se nds traps to an SNMP mana ger when an e vent occurs. The following tables outline the SNMP traps by category . An OID (Object ID) that begins with “ 1.3.6.1.4.1.890.1.5.8 ” is de fined in pri vate MIBs. Otherwis e, it is a st and a rd MIB OID. T abl[...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 309 voltage V oltageEventOn MGS-3712F: 1.3.6.1.4.1. 890.1.5.8.48.2 5.2.1 MGS-3712: 1.3.6.1.4.1. 890.1.5.8.47.2 5.2.1 This trap is sent when the voltage goes above or below the normal operating r ange. V oltageEventClear MGS-3712F: 1.3.6.1.4.1. 890.1.5.8.48.2 5.2.2 MGS-3712: 1.3.6.1.4.1. 8[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 310 loopguard LoopguardEventOn MGS-3712F: 1.3.6.1.4.1. 890.1.5.8.48.2 5.2.1 MGS-3712: 1.3.6.1.4.1. 890.1.5.8.47.2 5.2.1 This trap is sent when loopguard shuts down a port. externalarm Exte rnalAlarmEventOn MGS-3712F: 1.3.6.1.4.1. 890.1.5.8.48.2 5.2.1 MGS-3712: 1.3.6.1.4.1. 890.1.5.8.47.2 5[...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 31 1 autonegotiati on AutonegotiationF ailedEve ntOn MGS-3712F: 1.3.6.1.4.1 .890.1.5.8.48.25 .2.1 MGS-3712: 1.3.6.1.4.1 .890.1.5.8.47.25 .2.1 This trap is sent when an Ethernet interface fails to auto-negotiate with the peer Ethernet interface. AutonegotiationF ailedEve ntClear MGS-3712F:[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 312 T able 105 AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION authenticatio n authenticationF ailure 1.3. 6.1.6.3.1.1.5.5 This trap is sent when authentication fails due to incorrect user name and/or password. AuthenticationF ailureEven tOn MGS-3712F: 1.3.6.1.4.1. 890.1.5.8.48. 2 5.2.[...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 313 T able 106 SNMP IP Traps OPTION OBJEC T LA BEL OBJECT ID DESCRIPTION ping pingPro beF ailed 1.3.6.1.2.1.80.0.1 Th i s trap is sent when a single ping probe fails. pingT estF ailed 1.3.6.1.2.1.80.0.2 T his trap is sent when a ping test (consisting of a series of ping probes) fails. pin[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 314 T able 107 SNMP Switch Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION stp STPNewRoot 1.3.6.1.2.1. 17.0.1 This trap is sent when the S TP root switch changes. MRSTPNewRoot MGS-3712F: 1.3.6.1.4.1. 890.1.5.8.48. 3 2.2.1 MGS-3712: 1.3.6.1.4.1. 890.1.5.8.47. 3 2.2.1 This trap is sent when [...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 315 34.3.4 Configuring SNMP Click Manageme nt > Access Control > SNMP to view the screen as shown. Use this screen to configure y our SNMP settings. Figure 171 Management > Access Contro l > SNMP rmon RmonRisingAlarm 1.3.6.1.2.1.16 .0.1 T his tr ap is sent when a variable goes[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 316 The following table describes t he labels in this screen. T able 108 Management > Access Control > SNMP LABEL DESCRIPTION General Setting Use this section to specify the SNMP version and community (password) val ue s . V ersion Select the SNMP version for the Switch. The SNMP ver[...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 317 Security Level Select whether you w ant to implemen t authentication and/or encryption for SNMP communication from this user . Choose: • noauth -to use the username as the password string to send to the SNMP manager . This is equivale nt to the Get, Set and T rap Community in SNMP v[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 318 34.3.5 Configuring SNMP T rap Group Click Management > Access Control > SNMP > Trap Group to view the screen as shown. Use the Trap Group screen to sp ecify the t ypes of SNMP tr aps that should be sent to each SNMP manager . Figure 172 Management > Access Contro l > SNM[...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 319 34.3.6 Setting Up Login Account s Up t o f i ve p eo p l e (o n e a d m in i s t ra to r a n d four non-administr ators) may access the Switch via web configur ator at any one time. • An administr ator is someone who can both view and configure Switch c hanges. The username for the [...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 320 34.4 SSH Overview Unlike T elnet or F TP , which transmit data in clear text, S SH (Secure Shell) is a secure communication protocol that combin es authentication and data encryption to provide secure encrypted communication bet ween two hosts over an unsecured network. Figure 174 SSH [...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 321 34.5 How SSH works The following table summarizes how a secure connection is established between two remot e hosts. Figure 175 How SSH W orks 1 Host Identificat io n The SSH client send s a connection request to the SSH server . The server identifies itself with a host k ey . The clie[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 322 3 Authentication and Data T ransmission After the identification is verified and data encrypt ion activ ated, a secure tunnel is established between the client and th e serv er . The client then sends its authentication information (u ser name and password) to th e server to log in to [...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 323 1 HT TPS connection requests from an SSL - aware web browser go to port 443 (by default) on the Switch’ s WS (web server). 2 HT TP connection requests fr om a web brow ser go t o port 80 (by default) on the Switch’ s WS (web server). Figure 176 HTTPS Implement ation Note: If you d[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 324 Y ou see the following Security Al ert screen in Internet Explorer . Select Yes to proceed to the web configurator login screen; if you select No , then web configur ator access is block ed. Figure 177 Security Aler t Dialog Box (Internet Explorer) 34.8.2 Net scape Navigator W arning M[...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 325 Select Accept this certificate permanently to import the S witch’ s certificate into the SSL client. Figure 178 Security Certificate 1 (Net scape) Figure 179 Security Certificate 2 (Net scape) example example example example[...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 326 34.8.3 The Main Screen After you accept the certifi cate and ente r the login username and password, the Switch main screen appears. The l ock displayed in t he bottom right of the browser status bar denotes a secure connection. Figure 180 Example: Lock Denoting a Secure Conn ection 34[...]

Chapter 34 Access Control MGS-3712/MGS-3712F Use r’s Guide 327 later). Cl ick Management > Access Control > Service Access Control to view the screen as shown. Figure 181 Manageme nt > Access Control > Service Access Control The following table describes t he fields in this screen. 34.10 Remote Management Click Management > Access [...]

Chapter 34 Access Control MGS-3712/MGS-3712F User’s Guide 328 Y ou can specify a group of one or more “trusted computers” from which an administr ator may use a service to manage the Sw itch. Click Access Control to return to the Access Control screen. Figure 182 Management > Access Contro l > Remote Management The following table descr[...]

MGS-3712/MGS-3712F Use r’s Guide 329 C HAPTER 35 Diagnostic This chapter explains the Diagnostic screen. 35.1 Diagnostic Click Management > Diagnostic in the naviga tion panel to open thi s screen. Us e this screen to check sys tem logs, ping IP addresses or perf orm port tests. Figure 183 Manageme nt > Diagnostic[...]

Chapter 35 Diagnostic MGS-3712/MGS-3712F User’s Guide 330 The following table describes t he labels in this screen. T able 1 13 Management > Diag nostic LABEL DESCRIPTION System Log Click Display to display a log of ev ents in the multi-line text box. Click Cl ear to empty the text box and reset the syslog entry . IP Ping T ype the IP addre ss[...]

MGS-3712/MGS-3712F Use r’s Guide 331 C HAPTER 36 Syslog This chapter explains the syslog screens. 36.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to sy s lo g servers that col l e ct the event messages. A sys log-enabled device can generate a syslog message and send it to a syslog s[...]

Chapter 36 Sy slog MGS-3712/MGS-3712F User’s Guide 332 36.2 Syslog Setup Click Management > Syslog in the navigation panel to displa y this screen. The syslog feature sends logs to an external sy slog serv er . Use this screen to configure the device’ s system logging set tings. Figure 184 Manageme nt > Syslog The following table describe[...]

Chapter 36 Syslog MGS-3712/MGS-3712F Use r’s Guide 333 36.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to vie w the screen as shown next. Use this screen to configure a list of external sysl og servers. Figure 185 Management > Syslog > Syslog Server Setup The following table describes t he labels in this scree[...]

Chapter 36 Sy slog MGS-3712/MGS-3712F User’s Guide 334[...]

MGS-3712/MGS-3712F Use r’s Guide 335 C HAPTER 37 Cluster Management This chapter introduces cluster management. 37.1 Cluster Management S t atus Overview Cluster Management allows you to manage switc hes through one Switch, call ed the cluster manager . The switches must be directly connected and be in the same VLAN group so as to be able to comm[...]

Chapter 37 Clust er Managem en t MGS-3712/MGS-3712F User’s Guide 336 In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are clust er members. Figure 186 Clustering App lication Example 37.2 Cluster Management S t atus Click Management > Clus ter Management in the[...]

Chapter 37 Clust er Managem en t MGS-3712/MGS-3712F Use r’s Guide 337 The following table describes t he labels in this screen. 37.2.1 Cluster Member Switch Management Go to the Clustering Management St atus screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's [...]

Chapter 37 Clust er Managem en t MGS-3712/MGS-3712F User’s Guide 338 configurator home page and the home pa ge that you'd see if y ou accessed it directly are different. Figure 188 Cluster Management: Clu ster Mem ber Web Configurator Screen 37.2.1.1 Uploading Firmware to a Cluster Member Switch Y ou can use F TP to upload firmware to a clus[...]

Chapter 37 Clust er Managem en t MGS-3712/MGS-3712F Use r’s Guide 339 The following table explains some of the FTP paramet ers. T able 1 19 FTP Upload to Cluster Member Example FTP PARAMETER DESCRIPTION User Enter “admin” . Password The web configurator password default is 12 34. ls Enter this command to list the nam e of cluster member switc[...]

Chapter 37 Clust er Managem en t MGS-3712/MGS-3712F User’s Guide 340 37.3 Clustering Management Configuration Use this screen to configure clustering management. Click Management > Cluster Management > Configuration to display the next screen. Figure 190 Management > Cluster Manag ement > Configuration The following table describes t [...]

Chapter 37 Clust er Managem en t MGS-3712/MGS-3712F Use r’s Guide 341 VID This is the VLAN ID and is only applicable if the Switch is set to 802.1Q VLAN. All switches must be directly connected and in the same VLAN group to belong to the same cluster . Switches that are not in the same VLAN group are not visible in the Clustering Cand idates list[...]

Chapter 37 Clust er Managem en t MGS-3712/MGS-3712F User’s Guide 342[...]

MGS-3712/MGS-3712F Use r’s Guide 343 C HAPTER 38 MAC Table This chapter introduces the MAC Table sc reen. 38.1 MAC T able Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forw arded or fil tered ac ross the S witch’ s ports. It shows what device MAC address, belonging to what VL AN group (if[...]

Chapter 38 M AC Ta b le MGS-3712/MGS-3712F User’s Guide 344 • If the Switch has already learned the port for this MAC address , but the destination port is the same as the port it came in on, then it filters the fr ame. Figure 191 MAC T able Flowchart 38.2 V iewing the MAC T able Click Management > MAC Table in the navigation panel to dis pl[...]

Chapter 38 MAC Table MGS-3712/MGS-3712F Use r’s Guide 345 The following table describes t he labels in this screen. T able 121 Management > MAC Table LABEL DESCRIPTION Condition Select one of the buttons and click Search to only display the data which matches the criteria you specified. Select All to display any entry in the MAC table of the S[...]

Chapter 38 M AC Ta b le MGS-3712/MGS-3712F User’s Guide 346[...]

MGS-3712/MGS-3712F Use r’s Guide 347 C HAPTER 39 ARP Table This chapter introduces ARP T able. 39.1 ARP T able Overview Address Resolution Protocol (ARP) is a pr otocol for mapping an Internet Protocol address (IP address) to a physi c al machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (versi[...]

Chapter 39 ARP Tab le MGS-3712/MGS-3712F User’s Guide 348 39.2 V iewing the ARP T able Click Management > ARP Table in t he navigation panel to open the following screen. Use the ARP table to view IP-to-MAC address mapping(s). Figure 193 Management > ARP T able The following table describes t he labels in this screen. T able 122 Management [...]

MGS-3712/MGS-3712F Use r’s Guide 349 C HAPTER 40 Configure Clone This chapter shows you how y ou can copy the settings of one port onto other ports. 40.1 Configure Clone Cloning allows yo u to copy the basic and adv anced settings from a source port to a destination port or ports. Click Manage ment > Configure Clone to open the following scree[...]

Chapter 40 Con fig ur e Clo ne MGS-3712/MGS-3712F User’s Guide 350 The following table describes t he labels in this screen. T able 123 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Po r t Enter the source port under the Sourc e label. This port’s attributes are copied. Enter the destination port or ports under the Desti[...]

351 P ART VI T roubleshooting & Product S p ecifications T roubleshooting (353) Product Specifications (357)[...]

352[...]

MGS-3712/MGS-3712F Use r’s Guide 353 C HAPTER 41 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories . • P ower , Hardware Connections, and LEDs • Switch Access and L ogin • Switch Configur ation 41.1 Power , Hardware Connections, an[...]

Chapter 41 Tro u blesh oo tin g MGS-3712/MGS-3712F User’s Guide 354 1 Make sure you understand the n ormal behavior of the LED. See Section 3.3 on page 43 . 2 Check the hardware connections. See the Quick Start Guide and Section 41. 1 on page 353 . 3 Inspect your cables for damage. Cont act the vendor to replace any damaged cables. 4 Disconnect a[...]

Chapter 41 Troubleshooting MGS-3712/MGS-3712F Use r’s Guide 355 • The default IP address is 192.168.1.1 . • If you changed t he IP addre ss, use the new IP address. • If you c hanged the IP address and have f orgotten it, see the troubleshooti ng suggestions for I forgot the IP address for the Swit ch. 2 Check the hardware connections, and [...]

Chapter 41 Tro u blesh oo tin g MGS-3712/MGS-3712F User’s Guide 356 Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up wind ows from your device. • Jav aScripts (enabled by defaul t). • Jav a permissions (enabled by default). I cannot see some of Advanced Applicati[...]

MGS-3712/MGS-3712F Use r’s Guide 357 C HAPTER 42 Product Specifications The following tables summarize the Swit ch’ s hardware and firmw are feat ures. T able 124 Hardware Specifications SPECIFICATION DESCRIPTION Dimensions Standard 19” rack mountable 438 mm (W) x 225 mm (D) x 45.45 mm (H) W eight 3.4 Kg P ower Specification One Backup Power [...]

Chapter 42 Product Specifications MGS-3712/MGS-3712F User’s Guide 358 Storage Environment T emperature: -10ºC ~ 70ºC (14ºF ~ 158ºF) Humidity: 10 ~ 90% (non-condensing) Ground Wire Gauge 18 A WG or larger P ower Wire Gauge 18 AWG or larger Fuse Specification 250 V AC, T2A External Signal Jack Supports input from fo ur external alarms or oth er[...]

Chapter 42 Product Specifications MGS-3712/MGS-3712F Use r’s Guide 359 Classifier and Policy Y ou can create a policy to define actions to be performed on a traffic flow grouped by a classifier according to specific criteria such as the IP address, port number or protocol type, etc. Queuing Queuing is used to help solve performance degr adation w[...]

Chapter 42 Product Specifications MGS-3712/MGS-3712F User’s Guide 360 Link Aggregation Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. Y ou may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly , single-port l[...]

Chapter 42 Product Specifications MGS-3712/MGS-3712F Use r’s Guide 361 T able 126 Feature Specifications Layer 2 Fea t ur e s Bridging 16K MAC addresses Static MAC address filtering by source/destination Broadcast storm control Static MAC address forwarding Switching Switching fabric: 24 Gbps, non-blocking Max. Fr am e s i z e: 9 K by te s Forw a[...]

Chapter 42 Product Specifications MGS-3712/MGS-3712F User’s Guide 362 Layer 3 Fea t ur e s IP Capability IPV4 support 64 IPV4 Management IPs Wire speed IP forwarding Ro ut i n g protocols Static Routing IP services DHCP client DHCP relay VLAN-based DHCP relay DHCP snooping Multicast IGMP snooping (IGMP v1 /v2/v3, 16 VLAN maximum-user configurable[...]

Chapter 42 Product Specifications MGS-3712/MGS-3712F Use r’s Guide 363 The following list, which is not exhaust ive , illust rates the standards supported in the Switch. T able 127 Standards Supported ST ANDARD DESCRIPTION RFC 826 Address R esolution Protocol (ARP) RFC 867 Daytime Protocol RFC 868 Time Protocol RFC 894 Ethernet II Encapsulation R[...]

Chapter 42 Product Specifications MGS-3712/MGS-3712F User’s Guide 364 IEEE 802.3ah Ethernet OAM (Operations, Adm inistration and Maintenance) IEEE 802.3x Flow Control Safety UL 60950-1 CSA 60950-1 EN 60950-1 IEC 60950-1 EMC FCC Part 15 (Class A) CE EMC (Class A) T able 127 Standards Supported (continued) ST ANDARD DESCRIPTION[...]

365 P ART VII Appendices and Index Common Services (367) Legal Information (371) Index (375)[...]

366[...]

MGS-3712/MGS-3712F Use r’s Guide 367 A PPENDIX A Common Services The following table lists some commonl y-used services and their associated protocols and port numbers. F or a comprehe nsiv e list of p ort numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, desc[...]

Appendix A Com mon Servic es MGS-3712/MGS-3712F User’s Guide 368 ESP (IPSEC_TUNNEL) User-Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finge r is a UNIX or Internet related command that can be used to find out if a user is logged on. FTP TCP TCP 20 21 File T ransfer Program, a progr[...]

Appendix A Common Services MGS-3712/MGS-3712F Use r’s Guide 369 POP3 TCP 11 0 Post Office Protocol v ersion 3 lets a client computer get e-mail from a POP3 server through a tempor ary connection (TCP/IP or other). PPTP TC P 1723 Point -to-Point T unneling Protocol enables secure transfer of data ov er public networks. This is the control channel.[...]

Appendix A Com mon Servic es MGS-3712/MGS-3712F User’s Guide 370 TELNET TCP 23 T elnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over T CP/IP networks. Its primary function is to allow users to log into remote host systems. TFTP UDP 69 T rivial File T ransfer Protocol is an Internet [...]

MGS-3712/MGS-3712F Use r’s Guide 371 A PPENDIX B Legal Information Copyright Copyright © 2008 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any part or as a whole, transcrib ed, stored in a retriev al syst em, tr anslated into an y language , or transmitted in an y form or by any me ans, electr[...]

Appendix B Leg al In fo rm at ion MGS-3712/MGS-3712F User’s Guide 372 • This dev ice m u st accept any in terferen ce received, including interference that may cause undesired operations. FCC W arning This device has been tested and found to comply with the limits for a Clas s A digital switch, pursuant to Part 15 of the FCC Rules . These limit[...]

Appendix B Legal Information MGS-3712/MGS-3712F Use r’s Guide 373 Viewing Certifications 1 Go to http://www . zyxel.com . 2 Select your prod uct on the Z yXEL home page to go to that product's page. 3 Select the certification y ou wish to view from this page. ZyXEL Limited W arranty Z yXEL warr ants to the original end user (p urchaser) that[...]

Appendix B Leg al In fo rm at ion MGS-3712/MGS-3712F User’s Guide 374[...]

Index MGS-3712/MGS-3712F Use r’s Guide 375 Index Numerics 802.1P priority 92 A AAA 221 AAA (Authentication, Author ization and Accounting) 221 access control limitations 305 login account 319 remote management 327 service port 326 SNMP 306 accounting 221 setup 227 address learning, MAC 105 , 108 Address Resolution Protocol (ARP) 347 , 349 , 350 a[...]

Index MGS-3712/MGS-3712F User’s Guide 376 cluster management 335 and switch passwords 341 cluster manager 335 , 340 cluster me mber 335 , 341 cluster member firmware upgrade 338 network example 336 setup 340 specification 335 status 336 switch models 335 VID 341 web configurator 337 cluster manager 335 cluster me mber 335 Committed Informati on R[...]

Index MGS-3712/MGS-3712F Use r’s Guide 377 frames tagged 104 untagged 104 front panel 33 FTP 301 file transfer procedure 302 restrictions over W AN 303 G GARP 96 GARP (Generic Attribute Registration Protocol) 96 GARP terminology 96 GARP timer 85 , 96 general features 361 general setup 82 getting help 65 Gigabit ports 35 GMT (Greenwich Mean Time) [...]

Index MGS-3712/MGS-3712F User’s Guide 378 layer 2 features 361 Layer 2 protocol tunneling, see L2PT layer 3 features 362 LEDs 43 ALM 43 BPS 43 PWR 43 SYS 43 limit MAC address learning 173 Link Aggregate Contro l Protocol (LACP) 15 5 link aggregation 155 dynamic 155 ID informa tion 156 setup 159 , 161 status 157 traffic distribution algorithm 158 [...]

Index MGS-3712/MGS-3712F Use r’s Guide 379 802.1 priority 207 and IGMP 205 IGMP throttling 209 IP addresses 205 overview 205 setup 207 multicast group 212 multicast VLAN 217 Multiple Rapid S panning T ree Protocol 127 Multiple RSTP 127 Multiple S panning T ree Protocol, See MSTP 125 , 128 Multiple STP 128 MVR 213 configuration 215 group configura[...]

Index MGS-3712/MGS-3712F User’s Guide 380 Q QoS 361 and classifier 177 Queue weight 196 queue weight 194 queuing 193 SPQ 194 WRR 194 Queuing algorithm 196 Queuing meth od 196 queuing method 193 R rack-mounting 30 RADIUS 221 , 222 advantages 222 and port auth entication 222 and tunnel protocol attribu te 231 Network example 222 server 222 settings[...]

Index MGS-3712/MGS-3712F Use r’s Guide 381 VLAN 99 STP 125 , 272 , 361 bridge ID 135 , 139 bridge priority 134 , 138 configuration 133 , 137 designated bridge 126 forwarding delay 134 , 138 Hello BPDU 126 Hello T ime 134 , 135 , 138 , 140 how it works 126 Max Age 134 , 136 , 138 , 14 0 path cost 12 6 , 134 , 138 port priority 134 , 138 port state[...]

Index MGS-3712/MGS-3712F User’s Guide 382 VID (VLAN Identifier) 95 VLAN 84 , 361 acceptable frame type 104 automatic registration 96 ID 95 IGMP snooping 206 ingress filtering 104 introduction 84 number of VLANs 99 port number 100 port settings 103 port-based VLAN 111 port-based, all connected 11 3 port-based, isolation 11 3 port-based, wizard 11 [...]