ZyXEL XGS-4728F User Manual

www.zyxel.comwww.zyxel.comXGS-4728FIntelligent Layer 3+ SwitchCopyright © 2010 ZyXEL Communications CorporationFirmware Version 3.90Edition 2, 04/2010

Contents OverviewXGS-4728F User’s Guide10IP Application ...

Chapter 9 VLANXGS-4728F User’s Guide1009.5.2 VLAN DetailsUse this screen to view detailed port settings and status of the VLAN group. See Section 9.1

Chapter 9 VLANXGS-4728F User’s Guide101static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. Figure 48 Adva

Chapter 9 VLANXGS-4728F User’s Guide1029.5.4 Configure VLAN Port Settings Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.

Chapter 9 VLANXGS-4728F User’s Guide103The following table describes the labels in this screen. 9.6 Subnet Based VLANs Subnet based VLANs allow you

Chapter 9 VLANXGS-4728F User’s Guide104packets from the same IP subnet are then placed in the same subnet based VLAN. One advantage of using subnet ba

Chapter 9 VLANXGS-4728F User’s Guide105Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VL

Chapter 9 VLANXGS-4728F User’s Guide1069.8 Protocol Based VLANs Protocol based VLANs allow you to group traffic into logical VLANs based on the proto

Chapter 9 VLANXGS-4728F User’s Guide107Talk traffic from port 6 and 7 will be in another group and have higher priority than ARP traffic when they go

Chapter 9 VLANXGS-4728F User’s Guide108The following table describes the labels in this screen. Table 20 Advanced Application > VLAN > VLAN Po

Chapter 9 VLANXGS-4728F User’s Guide1099.10 Create an IP-based VLAN ExampleThis example shows you how to create an IP VLAN which includes ports 1, 4

Table of ContentsXGS-4728F User’s Guide11Table of ContentsAbout This User's Guide...

Chapter 9 VLANXGS-4728F User’s Guide1109.11 Port-based VLAN Setup Port-based VLANs are VLANs where the packet forwarding decision is based on the

Chapter 9 VLANXGS-4728F User’s Guide111The following screen shows users on a port-based, all-connected VLAN configuration.Figure 55 Advanced Applic

Chapter 9 VLANXGS-4728F User’s Guide112The following screen shows users on a port-based, port-isolated VLAN configuration.Figure 56 Advanced Applica

Chapter 9 VLANXGS-4728F User’s Guide113The following table describes the labels in this screen. Table 21 Advanced Application > VLAN: Port Based

Chapter 9 VLANXGS-4728F User’s Guide114

XGS-4728F User’s Guide115CHAPTER 10 Static MAC Forward SetupUse these screens to configure static MAC address forwarding.10.1 OverviewThis chapter d

Chapter 10 Static MAC Forward SetupXGS-4728F User’s Guide116Click Advanced Applications > Static MAC Forwarding in the navigation panel to display

Chapter 10 Static MAC Forward SetupXGS-4728F User’s Guide117Port This field displays the port where the MAC address shown in the next field will be f

Chapter 10 Static MAC Forward SetupXGS-4728F User’s Guide118

XGS-4728F User’s Guide119CHAPTER 11 Static Multicast Forward SetupUse these screens to configure static multicast address forwarding.11.1 Static Mul

Table of ContentsXGS-4728F User’s Guide123.2.2 External Backup Power Supply Connector ...

Chapter 11 Static Multicast Forward SetupXGS-4728F User’s Guide120connected to port 3. Figure 60 shows frames being forwarded to ports 2 and 3 within

Chapter 11 Static Multicast Forward SetupXGS-4728F User’s Guide121Click Advanced Application > Static Multicast Forwarding to display the configur

Chapter 11 Static Multicast Forward SetupXGS-4728F User’s Guide122Active This field displays whether a static multicast MAC address forwarding rule is

XGS-4728F User’s Guide123CHAPTER 12 FilteringThis chapter discusses MAC address port filtering.12.1 Configure a Filtering Rule Configure the Switch

Chapter 12 FilteringXGS-4728F User’s Guide124Action Select Discard source to drop frames from the source MAC address (specified in the MAC field). The

XGS-4728F User’s Guide125CHAPTER 13 Spanning Tree ProtocolThe Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and M

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide126Path cost is the cost of transmitting a frame onto a LAN through that port. The recommended

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide12713.1.3 STP Port States STP assigns five port states to eliminate packet looping. A bridge

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide128Note: Each port can belong to one STP tree only. 13.1.5 Multiple STP Multiple Spanning Tree

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide129With MSTP, VLANs 1 and 2 are mapped to different spanning trees in the network. Thus traffi

Table of ContentsXGS-4728F User’s Guide137.2.1 Status: Port Details ...

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide130The following figure shows an example where there are two MST regions. Regions 1 and 2 have

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide13113.2 Spanning Tree Protocol Status Screen The Spanning Tree Protocol status screen changes

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide132The following table describes the labels in this screen. 13.4 Configure Rapid Spanning Tree

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide133The following table describes the labels in this screen. Table 28 Advanced Application &g

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide13413.5 Rapid Spanning Tree Protocol Status Click Advanced Application > Spanning Tree Pr

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide135The following table describes the labels in this screen. Table 29 Advanced Application &g

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide13613.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in t

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide137Bridge Priority Bridge priority is used in determining the root switch, root port and desig

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide13813.7 Multiple Rapid Spanning Tree Protocol Status Click Advanced Application > Span

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide139Hello Time (second)This is the time interval (in seconds) at which the root switch transmit

Table of ContentsXGS-4728F User’s Guide1410.2 Configuring Static MAC Forwarding ...

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide14013.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advan

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide141The following table describes the labels in this screen. Table 32 Advanced Application &g

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide142Bridge Priority Set the priority of the Switch for the specific spanning tree instance. The

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide14313.9 Multiple Spanning Tree Protocol Status Click Advanced Application > Spanning

Chapter 13 Spanning Tree ProtocolXGS-4728F User’s Guide144Bridge Root refers to the base of the spanning tree (the root bridge). Our Bridge is this Sw

XGS-4728F User’s Guide145CHAPTER 14 Bandwidth ControlThis chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen.

Chapter 14 Bandwidth ControlXGS-4728F User’s Guide14614.2 Bandwidth Control SetupClick Advanced Application > Bandwidth Control in the navigation

Chapter 14 Bandwidth ControlXGS-4728F User’s Guide147Active Select this check box to activate egress rate limits on this port. Egress Rate Specify th

Chapter 14 Bandwidth ControlXGS-4728F User’s Guide148

XGS-4728F User’s Guide149CHAPTER 15 Broadcast Storm ControlThis chapter introduces and shows you how to configure the broadcast storm control featur

Table of ContentsXGS-4728F User’s Guide1517.1 Link Aggregation Overview ...

Chapter 15 Broadcast Storm ControlXGS-4728F User’s Guide150The following table describes the labels in this screen. Table 35 Advanced Application &g

XGS-4728F User’s Guide151CHAPTER 16 MirroringThis chapter discusses port mirroring setup screens.16.1 Port Mirroring Setup Port mirroring allows you

Chapter 16 MirroringXGS-4728F User’s Guide152The following table describes the labels in this screen. Table 36 Advanced Application > Mirroring L

XGS-4728F User’s Guide153CHAPTER 17 Link AggregationThis chapter shows you how to logically aggregate physical links to form one logical, higher-band

Chapter 17 Link AggregationXGS-4728F User’s Guide154When you enable LACP link aggregation on a port, the port can automatically negotiate with the por

Chapter 17 Link AggregationXGS-4728F User’s Guide15517.3 Link Aggregation Status Click Advanced Application > Link Aggregation in the navigation

Chapter 17 Link AggregationXGS-4728F User’s Guide156Criteria This shows the outgoing traffic distribution algorithm used in this trunk group. Packets

Chapter 17 Link AggregationXGS-4728F User’s Guide15717.4 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggrega

Chapter 17 Link AggregationXGS-4728F User’s Guide158Criteria Select the outgoing traffic distribution type. Packets from the same source and/or to th

Chapter 17 Link AggregationXGS-4728F User’s Guide15917.5 Link Aggregation Control Protocol Click in the Advanced Application > Link Aggregation

Table of ContentsXGS-4728F User’s Guide1622.1.2 Weighted Fair Queuing ...

Chapter 17 Link AggregationXGS-4728F User’s Guide16017.6 Static Trunking ExampleThis example shows you how to create a static port trunk group for po

Chapter 17 Link AggregationXGS-4728F User’s Guide1611 Make your physical connections - make sure that the ports that you want to belong to the trunk

Chapter 17 Link AggregationXGS-4728F User’s Guide162

XGS-4728F User’s Guide163CHAPTER 18 Port AuthenticationThis chapter describes the IEEE 802.1x and MAC authentication methods.18.1 Port Authenticatio

Chapter 18 Port AuthenticationXGS-4728F User’s Guide164request to a RADIUS server. The RADIUS server validates whether this client is allowed access t

Chapter 18 Port AuthenticationXGS-4728F User’s Guide165client connecting to a port on the Switch along with a password configured specifically for MA

Chapter 18 Port AuthenticationXGS-4728F User’s Guide16618.2.1 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In t

Chapter 18 Port AuthenticationXGS-4728F User’s Guide16718.2.2 Activate MAC Authentication Use this screen to activate MAC authentication. In the Por

Chapter 18 Port AuthenticationXGS-4728F User’s Guide168Password Type the password the Switch sends along with the MAC address of a client for authenti

XGS-4728F User’s Guide169CHAPTER 19 Port SecurityThis chapter shows you how to set up port security.19.1 About Port SecurityPort security allows onl

Table of ContentsXGS-4728F User’s Guide1725.2.4 Vendor Specific Attribute ...

Chapter 19 Port SecurityXGS-4728F User’s Guide17019.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to di

Chapter 19 Port SecurityXGS-4728F User’s Guide17119.3 VLAN MAC Address Limit Use this screen to set the MAC address learning limit on per-port and p

Chapter 19 Port SecurityXGS-4728F User’s Guide172The following table describes the labels in this screen. Table 45 Advanced Application > Port Se

XGS-4728F User’s Guide173CHAPTER 20 ClassifierThis chapter introduces and shows you how to configure the packet classifier on the Switch.20.1 About

Chapter 20 ClassifierXGS-4728F User’s Guide174Click Advanced Application > Classifier in the navigation panel to display the configuration screen a

Chapter 20 ClassifierXGS-4728F User’s Guide175Layer 2Specify the fields below to configure a layer 2 classifier.VLAN Select Any to classify traffic f

Chapter 20 ClassifierXGS-4728F User’s Guide17620.3 Viewing and Editing Classifier ConfigurationTo view a summary of the classifier configuration, scr

Chapter 20 ClassifierXGS-4728F User’s Guide177The following table shows some other common Ethernet types and the corresponding protocol number. Some

Chapter 20 ClassifierXGS-4728F User’s Guide17820.4 Classifier ExampleThe following screen shows an example of configuring a classifier that identifie

XGS-4728F User’s Guide179CHAPTER 21 Policy RuleThis chapter shows you how to configure policy rules. 21.1 Policy Rules Overview A classifier distin

Table of ContentsXGS-4728F User’s Guide1830.1 Private VLAN Overview ...

Chapter 21 Policy RuleXGS-4728F User’s Guide180The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets ac

Chapter 21 Policy RuleXGS-4728F User’s Guide181Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown.Fi

Chapter 21 Policy RuleXGS-4728F User’s Guide182The following table describes the labels in this screen. Table 50 Advanced Application > Policy Ru

Chapter 21 Policy RuleXGS-4728F User’s Guide18321.3 Viewing and Editing Policy ConfigurationTo view a summary of the classifier configuration, scrol

Chapter 21 Policy RuleXGS-4728F User’s Guide184The following table describes the labels in this screen. Table 51 Policy: Summary Table LABEL DESCRIP

Chapter 21 Policy RuleXGS-4728F User’s Guide18521.4 Policy ExampleThe figure below shows an example Policy screen where you configure a policy to li

Chapter 21 Policy RuleXGS-4728F User’s Guide186

XGS-4728F User’s Guide187CHAPTER 22 Queuing MethodThis chapter introduces the queuing methods supported.22.1 Queuing Method Overview Queuing is used

Chapter 22 Queuing MethodXGS-4728F User’s Guide1882(Weight -1) x 10 KBIf the weight setting is 5, the actual quantum guaranteed to the associated queu

Chapter 22 Queuing MethodXGS-4728F User’s Guide18922.2 Configuring Queuing Click Advanced Application > Queuing Method in the navigation panel.Fi

Table of ContentsXGS-4728F User’s Guide1935.2.1 DVMRP Terminology ...

Chapter 22 Queuing MethodXGS-4728F User’s Guide190Method Select SPQ (Strictly Priority Queuing), WFQ (Weighted Fair Queuing) or WRR (Weighted Round Ro

XGS-4728F User’s Guide191CHAPTER 23 VLAN StackingThis chapter shows you how to configure VLAN stacking on your Switch. See the chapter on VLANs for m

Chapter 23 VLAN StackingXGS-4728F User’s Guide192distinguish customer A and tag 48 to distinguish customer B at edge device 1 and then stripping those

Chapter 23 VLAN StackingXGS-4728F User’s Guide19323.3 VLAN Tag FormatA VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of

Chapter 23 VLAN StackingXGS-4728F User’s Guide194Configure the fields as highlighted in the Switch VLAN Stacking screen. 23.4 Configuring VLAN Stacki

Chapter 23 VLAN StackingXGS-4728F User’s Guide195The following table describes the labels in this screen.23.4.1 Port-based Q-in-QPort-based Q-in-Q l

Chapter 23 VLAN StackingXGS-4728F User’s Guide196Click Port-based QinQ in the Advanced Application > VLAN Stacking screen to display the screen as

Chapter 23 VLAN StackingXGS-4728F User’s Guide197Click Selective QinQ in the Advanced Application > VLAN Stacking screen to display the screen as

Chapter 23 VLAN StackingXGS-4728F User’s Guide198Priority This is the service provider’s priority level in the packets.Delete Check the rule(s) that y

XGS-4728F User’s Guide199CHAPTER 24 MulticastThis chapter shows you how to configure various multicast features. 24.1 Multicast Overview Traditional

Table of ContentsXGS-4728F User’s Guide2038.4.2 Two Subnets Example ...

Chapter 24 MulticastXGS-4728F User’s Guide20024.1.3 IGMP Snooping The Switch can passively snoop on IGMP packets transferred between IP multicast rou

Chapter 24 MulticastXGS-4728F User’s Guide20124.3 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to displa

Chapter 24 MulticastXGS-4728F User’s Guide202IGMP Filtering Select Active to enable IGMP filtering to control which IGMP groups a subscriber on a port

Chapter 24 MulticastXGS-4728F User’s Guide20324.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the M

Chapter 24 MulticastXGS-4728F User’s Guide204screen as shown. See Section 24.1.4 on page 200 for more information on IGMP Snooping VLAN.Figure 104 A

Chapter 24 MulticastXGS-4728F User’s Guide20524.5 IGMP Filtering Profile An IGMP filtering profile specifies a range of multicast groups that client

Chapter 24 MulticastXGS-4728F User’s Guide206Click Advanced Applications > Multicast > Multicast Setting > IGMP Filtering Profile link to dis

Chapter 24 MulticastXGS-4728F User’s Guide20724.6 MVR Overview Multicast VLAN Registration (MVR) is designed for applications (such as Media-on-Dema

Chapter 24 MulticastXGS-4728F User’s Guide208Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associa

Chapter 24 MulticastXGS-4728F User’s Guide20924.7 General MVR Configuration Use the MVR screen to create multicast VLANs and select the receiver por

Table of ContentsXGS-4728F User’s Guide21Chapter 41Diagnostic...

Chapter 24 MulticastXGS-4728F User’s Guide210Multicast VLAN IDEnter the VLAN ID (1 to 4094) of the multicast VLAN. 802.1p Priority Select a priority

Chapter 24 MulticastXGS-4728F User’s Guide21124.8 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can rec

Chapter 24 MulticastXGS-4728F User’s Guide21224.8.1 MVR Configuration ExampleThe following figure shows a network example where ports 1, 2 and 3 on t

Chapter 24 MulticastXGS-4728F User’s Guide213To configure the MVR settings on the Switch, create a multicast group in the MVR screen and set the rece

Chapter 24 MulticastXGS-4728F User’s Guide214following figure shows an example where two multicast groups (News and Movie) are configured for the mult

XGS-4728F User’s Guide215CHAPTER 25 AAAThis chapter describes how to configure authentication, authorization and accounting settings on the Switch.25

Chapter 25 AAAXGS-4728F User’s Guide21625.1.2 on page 216) as external authentication, authorization and accounting servers. Figure 114 AAA Server 2

Chapter 25 AAAXGS-4728F User’s Guide217Click Advanced Application > AAA in the navigation panel to display the screen as shown. Figure 115 Advan

Chapter 25 AAAXGS-4728F User’s Guide218The following table describes the labels in this screen. Table 66 Advanced Application > AAA > RADIUS S

Chapter 25 AAAXGS-4728F User’s Guide21925.2.2 TACACS+ Server Setup Use this screen to configure your TACACS+ server settings. See Section 25.1.2

Table of ContentsXGS-4728F User’s Guide22Part VI: Troubleshooting & Product Specifications... 385Chapter 49Troubleshooting

Chapter 25 AAAXGS-4728F User’s Guide220The following table describes the labels in this screen. Table 67 Advanced Application > AAA > TACACS+

Chapter 25 AAAXGS-4728F User’s Guide22125.2.3 AAA SetupUse this screen to configure authentication, authorization and accounting settings on the Swi

Chapter 25 AAAXGS-4728F User’s Guide222The following table describes the labels in this screen. Table 68 Advanced Application > AAA > AAA Setu

Chapter 25 AAAXGS-4728F User’s Guide223Type Set whether the Switch provides the following services to a user.• Exec: Allow an administrator which log

Chapter 25 AAAXGS-4728F User’s Guide22425.2.4 Vendor Specific AttributeRFC 2865 standard specifies a method for sending vendor-specific information b

Chapter 25 AAAXGS-4728F User’s Guide22525.2.5 Tunnel Protocol Attribute You can configure tunnel protocol attributes on the RADIUS server (refer to

Chapter 25 AAAXGS-4728F User’s Guide22625.3 Supported RADIUS AttributesRemote Authentication Dial-In User Service (RADIUS) attributes are data used t

Chapter 25 AAAXGS-4728F User’s Guide227- This value is set to Ethernet(15) on the Switch.Calling-Station-IdFrame-MTUEAP-MessageStateMessage-Authentic

Chapter 25 AAAXGS-4728F User’s Guide22825.3.2.3 Attributes Used for Accounting IEEE 802.1x Events The attributes are listed in the following table al

Chapter 25 AAAXGS-4728F User’s Guide229Acct-Input-GigawordsDDAcct-Output-GigawordsDDTable 73 RADIUS Attributes - Exec Events via ConsoleATTRIBUTE S

23PART IIntroductionGetting to Know Your Switch (25)Hardware Installation and Connection (31)Hardware Overview (35)

Chapter 25 AAAXGS-4728F User’s Guide230

XGS-4728F User’s Guide231CHAPTER 26 IP Source GuardUse IP source guard to filter unauthorized DHCP and ARP packets in your network.26.1 IP Source Gu

Chapter 26 IP Source GuardXGS-4728F User’s Guide23226.1.1 DHCP Snooping OverviewUse DHCP snooping to filter unauthorized DHCP packets on the network

Chapter 26 IP Source GuardXGS-4728F User’s Guide233You can configure the name and location of the file on the external TFTP server. The file has the

Chapter 26 IP Source GuardXGS-4728F User’s Guide2343 Configure trusted and untrusted ports, and specify the maximum number of DHCP packets that each p

Chapter 26 IP Source GuardXGS-4728F User’s Guide235• They appear only in the ARP Inspection screens and commands, not in the MAC Address Filter scree

Chapter 26 IP Source GuardXGS-4728F User’s Guide236the bindings by snooping DHCP packets (dynamic bindings) and from information provided manually by

Chapter 26 IP Source GuardXGS-4728F User’s Guide237new static binding replaces the original one. To open this screen, click Advanced Application >

Chapter 26 IP Source GuardXGS-4728F User’s Guide23826.4 DHCP SnoopingUse this screen to look at various statistics about the DHCP snooping database.

Chapter 26 IP Source GuardXGS-4728F User’s Guide239The following table describes the labels in this screen.Table 76 DHCP SnoopingLABEL DESCRIPTIOND

24

Chapter 26 IP Source GuardXGS-4728F User’s Guide240Successful transfers This field displays the number of times the Switch read bindings from or updat

Chapter 26 IP Source GuardXGS-4728F User’s Guide24126.5 DHCP Snooping ConfigureUse this screen to enable DHCP snooping on the Switch (not on specifi

Chapter 26 IP Source GuardXGS-4728F User’s Guide242The following table describes the labels in this screen.Table 77 DHCP Snooping ConfigureLABEL DES

Chapter 26 IP Source GuardXGS-4728F User’s Guide24326.5.1 DHCP Snooping Port ConfigureUse this screen to specify whether ports are trusted or untrus

Chapter 26 IP Source GuardXGS-4728F User’s Guide244The following table describes the labels in this screen.26.5.2 DHCP Snooping VLAN ConfigureUse thi

Chapter 26 IP Source GuardXGS-4728F User’s Guide245open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configur

Chapter 26 IP Source GuardXGS-4728F User’s Guide24626.6 ARP Inspection StatusUse this screen to look at the current list of MAC address filters that

Chapter 26 IP Source GuardXGS-4728F User’s Guide24726.6.1 ARP Inspection VLAN StatusUse this screen to look at various statistics about ARP packets

Chapter 26 IP Source GuardXGS-4728F User’s Guide24826.6.2 ARP Inspection Log StatusUse this screen to look at log messages that were generated by ARP

Chapter 26 IP Source GuardXGS-4728F User’s Guide24926.7 ARP Inspection ConfigureUse this screen to enable ARP inspection on the Switch. You can also

XGS-4728F User’s Guide25CHAPTER 1 Getting to Know Your SwitchThis chapter introduces the main features and applications of the Switch.1.1 Introducti

Chapter 26 IP Source GuardXGS-4728F User’s Guide250settings for the ARP inspection log. To open this screen, click Advanced Application > IP Source

Chapter 26 IP Source GuardXGS-4728F User’s Guide25126.7.1 ARP Inspection Port ConfigureUse this screen to specify whether ports are trusted or untru

Chapter 26 IP Source GuardXGS-4728F User’s Guide252ARP packets on each untrusted port. To open this screen, click Advanced Application > IP Source

Chapter 26 IP Source GuardXGS-4728F User’s Guide25326.7.2 ARP Inspection VLAN ConfigureUse this screen to enable ARP inspection on each VLAN and to

Chapter 26 IP Source GuardXGS-4728F User’s Guide254Apply Click this to display the specified range of VLANs in the section below.VID This field displa

XGS-4728F User’s Guide255CHAPTER 27 Loop GuardThis chapter shows you how to configure the Switch to guard against loops on the edge of your network.2

Chapter 27 Loop GuardXGS-4728F User’s Guide256• It will receive its own broadcast messages that it sends out as they loop back. It will then re-broadc

Chapter 27 Loop GuardXGS-4728F User’s Guide257port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch

Chapter 27 Loop GuardXGS-4728F User’s Guide258The following table describes the labels in this screen. Table 86 Advanced Application > Loop Guard

XGS-4728F User’s Guide259CHAPTER 28 VLAN MappingThis chapter shows you how to configure VLAN mapping on the Switch.28.1 VLAN Mapping Overview With V

Chapter 1 Getting to Know Your SwitchXGS-4728F User’s Guide26super-fast uplink connection by using the optional 10 Gigabit uplink module on the Switch

Chapter 28 VLAN MappingXGS-4728F User’s Guide26028.2 Enabling VLAN MappingClick Advanced Application and then VLAN Mapping in the navigation panel to

Chapter 28 VLAN MappingXGS-4728F User’s Guide26128.3 Configuring VLAN MappingClick the VLAN Mapping Configure link in the VLAN Mapping screen to dis

Chapter 28 VLAN MappingXGS-4728F User’s Guide262Port This is the port number to which this rule is applied.VID This is the customer VLAN ID in the inc

XGS-4728F User’s Guide263CHAPTER 29 Layer 2 Protocol TunnelingThis chapter shows you how to configure layer 2 protocol tunneling on the Switch.29.1

Chapter 29 Layer 2 Protocol TunnelingXGS-4728F User’s Guide2642 for PAgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection).Fig

Chapter 29 Layer 2 Protocol TunnelingXGS-4728F User’s Guide26529.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application > Layer 2 Pr

Chapter 29 Layer 2 Protocol TunnelingXGS-4728F User’s Guide266* Use this row to make the setting the same for all ports. Use this row first and then m

XGS-4728F User’s Guide267CHAPTER 30 Private VLANThis chapter shows you how to configure the Switch to prevent communications between ports in a VLAN.

Chapter 30 Private VLANXGS-4728F User’s Guide26830.2 Configuring Private VLAN Click Advanced Application > Private VLAN in the navigation panel to

Chapter 30 Private VLANXGS-4728F User’s Guide269Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete butto

Chapter 1 Getting to Know Your SwitchXGS-4728F User’s Guide271.1.3 Gigabit Ethernet to the Desktop The Switch is an ideal solution for small network

Chapter 30 Private VLANXGS-4728F User’s Guide270

271PART IVIP ApplicationStatic Route (273)RIP (275)OSPF (277)IGMP (291)DVMRP (295)Differentiated Services (299)DHCP (307)VRRP (317)

272

XGS-4728F User’s Guide273CHAPTER 31 Static RouteThis chapter shows you how to configure static routes.31.1 Configuring Static Routing Static routes

Chapter 31 Static RouteXGS-4728F User’s Guide274IP Subnet MaskEnter the subnet mask for this destination.Gateway IP AddressEnter the IP address of the

XGS-4728F User’s Guide275CHAPTER 32 RIPThis chapter shows you how to configure RIP (Routing Information Protocol).32.1 RIP OverviewRIP (Routing Info

Chapter 32 RIPXGS-4728F User’s Guide276automatically created when you configure a new IP domain in the IP Setup screen (refer to Section 8.6 on page 8

XGS-4728F User’s Guide277CHAPTER 33 OSPFThis chapter describes the OSPF (Open Shortest Path First) routing protocol and shows you how to configure OS

Chapter 33 OSPFXGS-4728F User’s Guide278The following table describes the four classes of OSPF routers.The following figure depicts an OSPF network ex

Chapter 33 OSPFXGS-4728F User’s Guide279When you configure an OSPF interface, you first set an interface to transmit OSPF traffic and add the interfa

Chapter 1 Getting to Know Your SwitchXGS-4728F User’s Guide28Shared resources such as a server can be used by all ports in the same VLAN as the server

Chapter 33 OSPFXGS-4728F User’s Guide2803 Create and associate interface(s) to an area4 Create virtual links to maintain backbone connectivity.33.2 O

Chapter 33 OSPFXGS-4728F User’s Guide281The following table describes some common output fields.Poll Interval(s) The text box displays how often (in

Chapter 33 OSPFXGS-4728F User’s Guide28233.3 OSPF Configuration Use this screen to activate OSPF and set general settings. Click IP Application >

Chapter 33 OSPFXGS-4728F User’s Guide28333.4 Configure OSPF Areas To ensure that the Switch receives only routing information from a trusted layer 3

Chapter 33 OSPFXGS-4728F User’s Guide28433.4.1 View OSPF Area Information TableThe bottom of the OSPF Configuration screen displays a summary table o

Chapter 33 OSPFXGS-4728F User’s Guide28533.5 Configuring OSPF Redistribution Use this screen to configure route redistribution and summary addresses

Chapter 33 OSPFXGS-4728F User’s Guide28633.6 Configuring OSPF Interfaces To configure an OSPF interface, first create an IP routing domain in the IP

Chapter 33 OSPFXGS-4728F User’s Guide287In the OSPF Configuration screen, click Interface to display the OSPF Interface screen. Figure 155 IP Appli

Chapter 33 OSPFXGS-4728F User’s Guide28833.7 OSPF Virtual-Links Configure and view virtual link settings in this screen. See Section 33.1 on page 2

Chapter 33 OSPFXGS-4728F User’s Guide289In the OSPF Configuration screen, click Virtual-Link to display the screen as shown next. Figure 156 IP App

Chapter 1 Getting to Know Your SwitchXGS-4728F User’s Guide29• Back up the configuration (and make sure you know how to restore it). Restoring an ear

Chapter 33 OSPFXGS-4728F User’s Guide290Key When you select Simple in the Authentication field, enter a password eight-character long. When you select

XGS-4728F User’s Guide291CHAPTER 34 IGMPThis chapter shows you how to configure the Switch as a multicast router. See also Section 24.4 on page 203 f

Chapter 34 IGMPXGS-4728F User’s Guide292IGMP (Internet Group Management Protocol) is used by multicast hosts to indicate their multicast group members

Chapter 34 IGMPXGS-4728F User’s Guide293on a particular network. This in turn helps reduce the amount of multicast traffic going through the multicas

Chapter 34 IGMPXGS-4728F User’s Guide29434.3 Configuring IGMP Click IP Application > IGMP in the navigation panel to display the screen as shown n

XGS-4728F User’s Guide295CHAPTER 35 DVMRPThis chapter introduces DVMRP and tells you how to configure it.35.1 DVMRP OverviewDVMRP (Distance Vector M

Chapter 35 DVMRPXGS-4728F User’s Guide2964 The final multicast (“M”) after pruning and grafting is shown in the next figure.Figure 162 How DVMRP Wor

Chapter 35 DVMRPXGS-4728F User’s Guide29735.3.1 DVMRP Configuration Error Messages You must have IGMP enabled when you enable DVMRP; otherwise you s

Chapter 35 DVMRPXGS-4728F User’s Guide298Each IP routing domain DVMRP configuration must be in a different VLAN group; otherwise you see the following

XGS-4728F User’s Guide299CHAPTER 36 Differentiated ServicesThis chapter shows you how to configure Differentiated Services (DiffServ) on the Switch.3

About This User's GuideXGS-4728F User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who want to confi

Chapter 1 Getting to Know Your SwitchXGS-4728F User’s Guide30

Chapter 36 Differentiated ServicesXGS-4728F User’s Guide300kinds of traffic can be marked for different priorities of forwarding. Resources can then b

Chapter 36 Differentiated ServicesXGS-4728F User’s Guide301specifies the average rate at which packets are admitted to the network. The PIR is greate

Chapter 36 Differentiated ServicesXGS-4728F User’s Guide302decrease it. Packets that have been previously marked red or yellow can only be marked with

Chapter 36 Differentiated ServicesXGS-4728F User’s Guide303The following table describes the labels in this screen.36.3.1 Configuring 2-Rate 3 Color

Chapter 36 Differentiated ServicesXGS-4728F User’s Guide304Note: You cannot enable both TRTCM and Bandwidth Control at the same time. Figure 172 IP

Chapter 36 Differentiated ServicesXGS-4728F User’s Guide30536.4 DSCP-to-IEEE 802.1p Priority Settings You can configure the DSCP to IEEE 802.1

Chapter 36 Differentiated ServicesXGS-4728F User’s Guide30636.4.1 Configuring DSCP Settings To change the DSCP-IEEE 802.1p mapping, click the DSCP Se

XGS-4728F User’s Guide307CHAPTER 37 DHCPThis chapter shows you how to configure the DHCP feature. 37.1 DHCP Overview DHCP (Dynamic Host Configuratio

Chapter 37 DHCPXGS-4728F User’s Guide308• VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured as a DHCP server for o

Chapter 37 DHCPXGS-4728F User’s Guide309this screen to view details regarding DHCP server settings configured on the Switch.Figure 175 IP Applicati

XGS-4728F User’s Guide31CHAPTER 2 Hardware Installation andConnectionThis chapter shows you how to install and connect the Switch. 2.1 Freestanding

Chapter 37 DHCPXGS-4728F User’s Guide31037.4 DHCP Relay Configure DHCP relay on the Switch if the DHCP clients and the DHCP server are not in the sam

Chapter 37 DHCPXGS-4728F User’s Guide31137.4.2 Configuring DHCP Global RelayConfigure global DHCP relay in the DHCP Relay screen. Click IP Applicati

Chapter 37 DHCPXGS-4728F User’s Guide31237.4.3 Global DHCP Relay Configuration ExampleThe follow figure shows a network example where the Switch is u

Chapter 37 DHCPXGS-4728F User’s Guide31337.5 Configuring DHCP VLAN Settings Use this screen to configure your DHCP settings based on the VLAN doma

Chapter 37 DHCPXGS-4728F User’s Guide314Server Use this section if you want to configure the Switch to function as a DHCP server for this VLAN.Client

Chapter 37 DHCPXGS-4728F User’s Guide31537.5.1 Example: DHCP Relay for Two VLANsThe following example displays two VLANs (VIDs 1 and 2) for a campus

Chapter 37 DHCPXGS-4728F User’s Guide316For the example network, configure the VLAN Setting screen as shown. Figure 181 DHCP Relay for Two VLANs Con

XGS-4728F User’s Guide317CHAPTER 38 VRRPThis chapter shows you how to configure and monitor the Virtual Router Redundancy Protocol (VRRP) on the Swit

Chapter 38 VRRPXGS-4728F User’s Guide318default gateway. If switch A has a higher priority, it is the master router. Switch B, having a lower priority

Chapter 38 VRRPXGS-4728F User’s Guide31938.3 VRRP Configuration The following sections describe the different parts of the VRRP Configuration screen

Chapter 2 Hardware Installation and ConnectionXGS-4728F User’s Guide32Note: Do NOT block the ventilation holes. Leave space between devices when stack

Chapter 38 VRRPXGS-4728F User’s Guide320Note: Routing domains with the same VLAN ID are not displayed in the table indicated. Figure 184 IP Applicat

Chapter 38 VRRPXGS-4728F User’s Guide32138.3.2 VRRP Parameters This section describes the VRRP parameters. 38.3.2.1 Advertisement Interval The mast

Chapter 38 VRRPXGS-4728F User’s Guide32238.3.3 Configuring VRRP ParametersAfter you set up an IP interface, configure the VRRP parameters in the VRRP

Chapter 38 VRRPXGS-4728F User’s Guide32338.3.4 Configuring VRRP ParametersView the VRRP configuration summary at the bottom of the screen. Figure 18

Chapter 38 VRRPXGS-4728F User’s Guide32438.4.1 One Subnet Network Example The figure below shows a simple VRRP network with only one virtual router V

Chapter 38 VRRPXGS-4728F User’s Guide325After configuring and saving the VRRP configuration, the VRRP Status screens for both switches are shown next

Chapter 38 VRRPXGS-4728F User’s Guide326VR1 (refer to Section 38.4.2 on page 325). Configure the VRRP parameters on the switches as shown in the figur

327PART VManagementMaintenance (329)Access Control (337)Diagnostic (357)Syslog (359)Cluster Management (363)MAC Table (371)IP Table (375)ARP Ta

328

XGS-4728F User’s Guide329CHAPTER 39 MaintenanceThis chapter explains how to configure the maintenance screens that let you maintain the firmware and

Chapter 2 Hardware Installation and ConnectionXGS-4728F User’s Guide332 Using a #2 Philips screwdriver, install the M3 flat head screws through the m

Chapter 39 MaintenanceXGS-4728F User’s Guide33039.2 Load Factory Default Follow the steps below to reset the Switch back to the factory defaults. 1 I

Chapter 39 MaintenanceXGS-4728F User’s Guide331Click Config 2 to save the current configuration settings to Configuration 2 on the Switch.Alternative

Chapter 39 MaintenanceXGS-4728F User’s Guide332From the Maintenance screen, display the Firmware Upgrade screen as shown next. Figure 200 Managemen

Chapter 39 MaintenanceXGS-4728F User’s Guide33339.7 Backup a Configuration FileBacking up your Switch configurations allows you to create various “s

Chapter 39 MaintenanceXGS-4728F User’s Guide334ZyNOS (ZyXEL Network Operating System, sometimes referred to as the “ras” file) is the system firmware

Chapter 39 MaintenanceXGS-4728F User’s Guide3356 Use put to transfer files from the computer to the Switch, for example, put firmware.bin ras transfe

Chapter 39 MaintenanceXGS-4728F User’s Guide336

XGS-4728F User’s Guide337CHAPTER 40 Access ControlThis chapter describes how to control access to the Switch.40.1 Access Control Overview A conso

Chapter 40 Access ControlXGS-4728F User’s Guide33840.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to

Chapter 40 Access ControlXGS-4728F User’s Guide339SNMP itself is a simple request/response protocol based on the manager/agent model. The manager iss

Chapter 2 Hardware Installation and ConnectionXGS-4728F User’s Guide34

Chapter 40 Access ControlXGS-4728F User’s Guide34040.3.3 SNMP Traps The Switch sends traps to an SNMP manager when an event occurs. The following tab

Chapter 40 Access ControlXGS-4728F User’s Guide341 timesync RTCNotUpdatedEventOn 1.3.6.1.4.1.890.1.5.8.46.31.2.1 This trap is sent when the Switch fa

Chapter 40 Access ControlXGS-4728F User’s Guide342 transceiver-ddmDDMIRxPowerEventOnDDMITemperatureEventOnDDMITxBiasEventOnDDMITxPowerEventOnDDMIVolta

Chapter 40 Access ControlXGS-4728F User’s Guide343 Table 127 SNMP IP Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTIONping pingProbeFailed 1.3.6.1.2

Chapter 40 Access ControlXGS-4728F User’s Guide34440.3.4 Configuring SNMP From the Access Control screen, display the SNMP screen. You can click

Chapter 40 Access ControlXGS-4728F User’s Guide345Trap CommunityEnter the Trap Community string, which is the password sent with each trap to the SNM

Chapter 40 Access ControlXGS-4728F User’s Guide34640.3.5 Configuring SNMP Trap Group From the SNMP screen, click Trap Group to view the screen as s

Chapter 40 Access ControlXGS-4728F User’s Guide34740.3.6 Setting Up Login Accounts Up to five people (one administrator and four non-administrators

Chapter 40 Access ControlXGS-4728F User’s Guide348The following table describes the labels in this screen. 40.4 SSH OverviewUnlike Telnet or FTP, whi

Chapter 40 Access ControlXGS-4728F User’s Guide34940.5 How SSH worksThe following table summarizes how a secure connection is established between tw

XGS-4728F User’s Guide35CHAPTER 3 Hardware OverviewThis chapter describes the front panel and rear panel of the Switch and shows you how to make the

Chapter 40 Access ControlXGS-4728F User’s Guide3503 Authentication and Data TransmissionAfter the identification is verified and data encryption activ

Chapter 40 Access ControlXGS-4728F User’s Guide3511 HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the Switch

Chapter 40 Access ControlXGS-4728F User’s Guide352You see the following Security Alert screen in Internet Explorer. Select Yes to proceed to the web c

Chapter 40 Access ControlXGS-4728F User’s Guide353Select Accept this certificate permanently to import the Switch’s certificate into the SSL client.F

Chapter 40 Access ControlXGS-4728F User’s Guide35440.8.3 The Main ScreenAfter you accept the certificate and enter the login username and password, t

Chapter 40 Access ControlXGS-4728F User’s Guide355computer(s)” for each service in the Remote Management screen (discussed later). Click Access Contr

Chapter 40 Access ControlXGS-4728F User’s Guide356You can specify a group of one or more “trusted computers” from which an administrator may use a ser

XGS-4728F User’s Guide357CHAPTER 41 DiagnosticThis chapter explains the Diagnostic screen.41.1 Diagnostic Click Management > Diagnostic in the na

Chapter 41 DiagnosticXGS-4728F User’s Guide358IP Ping Type the IP address of a device that you want to ping in order to test a connection.Click Ping

XGS-4728F User’s Guide359CHAPTER 42 SyslogThis chapter explains the syslog screens.42.1 Syslog Overview The syslog protocol allows devices to send e

Chapter 3 Hardware OverviewXGS-4728F User’s Guide36This means that if a mini-GBIC port and the corresponding 1000Base-T port are connected at the same

Chapter 42 SyslogXGS-4728F User’s Guide36042.2 Syslog Setup Click Management > Syslog in the navigation panel to display this screen. The syslog f

Chapter 42 SyslogXGS-4728F User’s Guide36142.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to open the following scree

Chapter 42 SyslogXGS-4728F User’s Guide362

XGS-4728F User’s Guide363CHAPTER 43 Cluster ManagementThis chapter introduces cluster management.43.1 Clustering Management Status Overview Cluster

Chapter 43 Cluster ManagementXGS-4728F User’s Guide364In the following example, switch A in the basement is the cluster manager and the other switches

Chapter 43 Cluster ManagementXGS-4728F User’s Guide365The following table describes the labels in this screen. 43.2.1 Cluster Member Switch Manageme

Chapter 43 Cluster ManagementXGS-4728F User’s Guide366configurator home page and the home page that you'd see if you accessed it directly are dif

Chapter 43 Cluster ManagementXGS-4728F User’s Guide36743.2.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to

Chapter 43 Cluster ManagementXGS-4728F User’s Guide36843.3 Clustering Management Configuration Use this screen to configure clustering management. C

Chapter 43 Cluster ManagementXGS-4728F User’s Guide369Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

Chapter 3 Hardware OverviewXGS-4728F User’s Guide373.1.3.1 Transceiver Installation Use the following steps to install a mini GBIC transceiver (SF

Chapter 43 Cluster ManagementXGS-4728F User’s Guide370

XGS-4728F User’s Guide371CHAPTER 44 MAC TableThis chapter introduces the MAC Table screen.44.1 MAC Table Overview The MAC Table screen (a MAC table

Chapter 44 MAC TableXGS-4728F User’s Guide372• If the Switch has already learned the port for this MAC address, but the destination port is the same a

Chapter 44 MAC TableXGS-4728F User’s Guide373The following table describes the labels in this screen. Table 142 Management > MAC Table LABEL DES

Chapter 44 MAC TableXGS-4728F User’s Guide374

XGS-4728F User’s Guide375CHAPTER 45 IP TableThis chapter introduces the IP table.45.1 IP Table Overview The IP Table screen shows how packets are fo

Chapter 45 IP TableXGS-4728F User’s Guide376• If the Switch has already learned the port for this IP address, but the destination port is the same as

Chapter 45 IP TableXGS-4728F User’s Guide377VID This is the VLAN group to which the packet belongs.Port This is the port from which the above IP addr

Chapter 45 IP TableXGS-4728F User’s Guide378

XGS-4728F User’s Guide379CHAPTER 46 ARP TableThis chapter introduces ARP Table.46.1 ARP Table Overview Address Resolution Protocol (ARP) is a protoc

Chapter 3 Hardware OverviewXGS-4728F User’s Guide382 Pull the transceiver out of the slot.Figure 12 Transceiver Removal Example 3.2 Rear PanelThe f

Chapter 46 ARP TableXGS-4728F User’s Guide38046.2 Viewing the ARP Table Click Management > ARP Table in the navigation panel to open the followi

XGS-4728F User’s Guide381CHAPTER 47 Routing TableThis chapter introduces the routing table. 47.1 OverviewThe routing table contains the route inform

Chapter 47 Routing TableXGS-4728F User’s Guide382

XGS-4728F User’s Guide383CHAPTER 48 Configure CloneThis chapter shows you how you can copy the settings of one port onto other ports.48.1 Configure

Chapter 48 Configure CloneXGS-4728F User’s Guide384The following table describes the labels in this screen. Table 146 Management > Configure Clon

385PART VITroubleshooting & Product SpecificationsTroubleshooting (387)Product Specifications (393)

386

XGS-4728F User’s Guide387CHAPTER 49 TroubleshootingThis chapter offers some suggestions to solve problems you might encounter. The potential problems

Chapter 49 TroubleshootingXGS-4728F User’s Guide3881 Turn the Switch off and on (in DC models or if the DC power supply is connected in AC/DC models).

Chapter 49 TroubleshootingXGS-4728F User’s Guide389I forgot the username and/or password.1 The default username is admin and the default password is

Chapter 3 Hardware OverviewXGS-4728F User’s Guide39The following figure shows the front panel of the EM-422 and EM-412 modules.Figure 15 The Front

Chapter 49 TroubleshootingXGS-4728F User’s Guide3901 Make sure you have entered the user name and password correctly. The default user name is admin,

Chapter 49 TroubleshootingXGS-4728F User’s Guide39149.3 Switch ConfigurationI lost my configuration settings after I restart the Switch.Make sure yo

Chapter 49 TroubleshootingXGS-4728F User’s Guide392

XGS-4728F User’s Guide393CHAPTER 50 Product SpecificationsThe following tables summarize the Switch’s hardware and firmware features.Table 147 Hard

Chapter 50 Product SpecificationsXGS-4728F User’s Guide394LEDs Main switch: BPS, PWR, SYS, ALM, Per Stacking port: S1, S2Per mini-GBIC port: green LED

Chapter 50 Product SpecificationsXGS-4728F User’s Guide395VLAN A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into m

Chapter 50 Product SpecificationsXGS-4728F User’s Guide396IP Multicast With IP multicast, the Switch delivers IP packets to a group of hosts on the ne

Chapter 50 Product SpecificationsXGS-4728F User’s Guide397Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the

Chapter 50 Product SpecificationsXGS-4728F User’s Guide398 Table 149 Switching Specifications Layer 2 FeaturesBridging 16K MAC addresses Static MAC

Chapter 50 Product SpecificationsXGS-4728F User’s Guide399The following list, which is not exhaustive, illustrates the standards supported in the Swi

About This User's GuideXGS-4728F User’s Guide4• Download LibrarySearch for the latest product updates and documentation from this link. Read the

Chapter 3 Hardware OverviewXGS-4728F User’s Guide40Use only power wires of the required diameter for connecting the Switch to a power supply.3.2.1.1

Chapter 50 Product SpecificationsXGS-4728F User’s Guide400RFC 1058 RIP-1 (Routing Information Protocol)RFC 1112 IGMP v1RFC 1155 SMIRFC 1157 SNMPv1: Si

Chapter 50 Product SpecificationsXGS-4728F User’s Guide401IEEE 802.3x Flow ControlIEEE 802.3z 1000BASE-XFor optical fiber link 1000BASE-SX/LX. Table

Chapter 50 Product SpecificationsXGS-4728F User’s Guide402

403PART VIIAppendices and IndexCommon Services (405)Legal Information (409)Index (413)

404

XGS-4728F User’s Guide405APPENDIX A Common ServicesThe following table lists some commonly-used services and their associated protocols and port numb

Appendix A Common ServicesXGS-4728F User’s Guide406ESP (IPSEC_TUNNEL)User-Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protoco

Appendix A Common ServicesXGS-4728F User’s Guide407POP3 TCP 110 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server t

Appendix A Common ServicesXGS-4728F User’s Guide408TELNET TCP 23 Telnet is the login and terminal emulation protocol common on the Internet and in UNI

XGS-4728F User’s Guide409APPENDIX B Legal InformationCopyrightCopyright © 2010 by ZyXEL Communications Corporation.The contents of this publication m

Chapter 3 Hardware OverviewXGS-4728F User’s Guide413.2.2 External Backup Power Supply ConnectorThe Switch supports external backup power supply (BPS

Appendix B Legal InformationXGS-4728F User’s Guide410• This device must accept any interference received, including interference that may cause undesi

Appendix B Legal InformationXGS-4728F User’s Guide411Viewing Certifications1 Go to http://www.zyxel.com.2 Select your product on the ZyXEL home page

Appendix B Legal InformationXGS-4728F User’s Guide412

IndexXGS-4728F User’s Guide413IndexNumerics802.1P priority 90Aaccess controllimitations 337login account 347remote management 355service port 354SNMP

IndexXGS-4728F User’s Guide414CIST (Common and Internal Spanning Tree) 128Class of Service (CoS) 299classifier 173, 175and QoS 173editing 176example 1

IndexXGS-4728F User’s Guide415Autonomous System 295default timer setting 298error message 297graft 296how it works 295implementation 295probe 296prune

IndexXGS-4728F User’s Guide416IIEEE 802.1p, priority 85IEEE 802.1xactivate 166, 167, 219reauthentication 166IEEE 802.1x, port authentication 163IGMP 2

IndexXGS-4728F User’s Guide417configuring via web configurator 347multiple 347number of 347login password 348loop guard 255how it works 256port shut d

IndexXGS-4728F User’s Guide418multicast router (‘mrouter’) 296multicast VLAN 211Multiple Spanning Tree Instance, See MSTI 128Multiple Spanning Tree Pr

IndexXGS-4728F User’s Guide419port-based VLAN 110all connected 113port isolation 113settings wizard 113ports“standby” 154diagnostics 358mirroring 151s

Chapter 3 Hardware OverviewXGS-4728F User’s Guide42ALM Red On There is a hardware failure.Off The system is functioning normally.S1 Green On The Swit

IndexXGS-4728F User’s Guide420Ssafety warnings 7save configuration 51, 330Secure Shell See SSHsecurity 399service access control 354service port 355Si

IndexXGS-4728F User’s Guide421system log 357system reboot 331TTACACS+ 216setup 219TACACS+ (Terminal Access Controller Access-Control System Plus) 215t

IndexXGS-4728F User’s Guide422VLAN mapping 259activating 260configuration 261example 259priority level 259tagged 259traffic flow 259untagged 259VLAN I

43PART IIBasic ConfigurationThe Web Configurator (45)Initial Setup Example (55)System Status and Port Statistics (71)Basic Setting (77)

44

XGS-4728F User’s Guide45CHAPTER 4 The Web ConfiguratorThis section introduces the configuration and functions of the web configurator. 4.1 Introduct

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide463 The login screen appears. The default username is admin and associated default password is 123

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide47The following figure shows the navigating components of a web configurator screen. Figure 17

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide48In the navigation panel, click a main link to reveal a list of submenu links. The following tabl

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide49VLAN This link takes you to screens where you can configure port-based or 802.1Q VLAN (dependin

Document ConventionsXGS-4728F User’s Guide5Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s Guide. War

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide50VLAN Mapping This link takes you to screens where you can configure VLAN mapping settings on th

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide514.3.1 Change Your Password After you log in for the first time, it is recommended you change

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide524.5 Switch Lockout You could block yourself (and all others) from using in-band-management (m

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide531 Connect to the console port using a computer with terminal emulation software. See Section 3.

Chapter 4 The Web ConfiguratorXGS-4728F User’s Guide544.7 Logging Out of the Web Configurator Click Logout in a screen to exit the web configurator.

XGS-4728F User’s Guide55CHAPTER 5 Initial Setup ExampleThis chapter shows how to set up the Switch for an example network. 5.1 OverviewThe following

Chapter 5 Initial Setup ExampleXGS-4728F User’s Guide56new IP interface. This allows the Switch to route traffic between the RD and Sales networks. Fi

Chapter 5 Initial Setup ExampleXGS-4728F User’s Guide575 In the VID field, enter the ID of the VLAN group to which you want this IP interface to belo

Chapter 5 Initial Setup ExampleXGS-4728F User’s Guide58In this example, you want to configure port 1 as a member of VLAN 2. Figure 22 Initial Setup

Chapter 5 Initial Setup ExampleXGS-4728F User’s Guide593 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to configure port

Document ConventionsXGS-4728F User’s Guide6Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The Switch icon is n

Chapter 5 Initial Setup ExampleXGS-4728F User’s Guide605.1.5 Enabling RIP To exchange routing information with other routing devices across different

XGS-4728F User’s Guide61CHAPTER 6 TutorialsThis chapter provides some examples of using the web configurator to set up and use the Switch. The tutori

Chapter 6 TutorialsXGS-4728F User’s Guide621 Access the Switch from the MGMT port through http://192.168.0.1 by default. Log into the Switch by enteri

Chapter 6 TutorialsXGS-4728F User’s Guide633 Go to Advanced Application > VLAN > VLAN Port Setting, and set the PVID of the ports 5, 6 and 7 to

Chapter 6 TutorialsXGS-4728F User’s Guide646 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for por

Chapter 6 TutorialsXGS-4728F User’s Guide659 Connect your DHCP server to port 5 and a computer (as DHCP client) to either port 6 or 7. The computer s

Chapter 6 TutorialsXGS-4728F User’s Guide66DHCP client A based on the system name, VLAN ID and port number in the DHCP request. Client A connects to t

Chapter 6 TutorialsXGS-4728F User’s Guide674 In the Static VLAN screen, select ACTIVE, enter a descriptive name (VALN 102 for example) in the Name fi

Chapter 6 TutorialsXGS-4728F User’s Guide688 Click the VLAN Status link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN Stat

Chapter 6 TutorialsXGS-4728F User’s Guide696.2.3 Configuring DHCP RelayFollow the steps below to enable DHCP relay on the Switch and allow the Switc

Safety WarningsXGS-4728F User’s Guide7Safety Warnings• Do NOT use this product near water, for example, in a wet basement or near a swimming pool.• D

Chapter 6 TutorialsXGS-4728F User’s Guide703 You clicked the Save link on the Switch to have your settings take effect.

XGS-4728F User’s Guide71CHAPTER 7 System Status and PortStatisticsThis chapter describes the system status (web configurator home page) and port deta

Chapter 7 System Status and Port StatisticsXGS-4728F User’s Guide72The following table describes the labels in this screen. Table 7 Status LABEL DES

Chapter 7 System Status and Port StatisticsXGS-4728F User’s Guide737.2.1 Status: Port Details Click a number in the Port column in the Status sc

Chapter 7 System Status and Port StatisticsXGS-4728F User’s Guide74Status If STP (Spanning Tree Protocol) is enabled, this field displays the STP stat

Chapter 7 System Status and Port StatisticsXGS-4728F User’s Guide75Error Packet The following fields display detailed information about packets rece

Chapter 7 System Status and Port StatisticsXGS-4728F User’s Guide76

XGS-4728F User’s Guide77CHAPTER 8 Basic SettingThis chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Por

Chapter 8 Basic SettingXGS-4728F User’s Guide788.2 System Information In the navigation panel, click Basic Setting > System Info to display the

Chapter 8 Basic SettingXGS-4728F User’s Guide79Status This field displays Normal for temperatures below the threshold and Error for those above.Fan S

Safety WarningsXGS-4728F User’s Guide8

Chapter 8 Basic SettingXGS-4728F User’s Guide808.3 General Setup Use this screen to configure general settings such as the system name and time. C

Chapter 8 Basic SettingXGS-4728F User’s Guide81Use Time Server when BootupType the time service protocol that your timeserver uses. Not all time serv

Chapter 8 Basic SettingXGS-4728F User’s Guide828.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a physical network to be partitio

Chapter 8 Basic SettingXGS-4728F User’s Guide838.4.1 Smart IsolationTo block traffic between two specific ports within the Switch, you can use port

Chapter 8 Basic SettingXGS-4728F User’s Guide84Note: The uplink port connected to the Internet should be the root port. Otherwise, with smart isolatio

Chapter 8 Basic SettingXGS-4728F User’s Guide85Smart IsolationSelect Active to enable smart isolation on the Switch. The designated port(s) then beco

Chapter 8 Basic SettingXGS-4728F User’s Guide868.6 IP Setup Use the IP Setup screen to configure the default gateway device, the default domain nam

Chapter 8 Basic SettingXGS-4728F User’s Guide87Switch in a routing domain, simply add a new routing domain entry with a different IP address in the s

Chapter 8 Basic SettingXGS-4728F User’s Guide88IP AddressEnter the out-of-band management IP address of your Switch in dotted decimal notation. For ex

Chapter 8 Basic SettingXGS-4728F User’s Guide898.7 Port Setup Use this screen to configure Switch port settings.Click Basic Setting > Port Setup

Contents OverviewXGS-4728F User’s Guide9Contents OverviewIntroduction ...

Chapter 8 Basic SettingXGS-4728F User’s Guide90Speed/DuplexSelect the speed and the duplex mode of the Ethernet connection on this port. The choices a

Chapter 8 Basic SettingXGS-4728F User’s Guide91Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes

Chapter 8 Basic SettingXGS-4728F User’s Guide92

93PART IIIAdvanced SetupVLAN (95)Static MAC Forward Setup (115)Static Multicast Forward Setup (119)Filtering (123)Spanning Tree Protocol (125)Ban

94

XGS-4728F User’s Guide95CHAPTER 9 VLANThe type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter

Chapter 9 VLANXGS-4728F User’s Guide96switch, the Switch first decides where to forward the frame and then strips off the VLAN tag. To forward a frame

Chapter 9 VLANXGS-4728F User’s Guide979.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass

Chapter 9 VLANXGS-4728F User’s Guide98allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to pass through their

Chapter 9 VLANXGS-4728F User’s Guide999.5.1 VLAN Status See Section 9.1 on page 95 for more information on Static VLAN. Click Advanced Application &