manualshive.com logo in svg

ZyXEL Communications Dimension GS-3012, User Manual, Page: 174 / 259

Share
Download
ZyXEL Communications Dimension GS-3012 User Manual Download Page 174

GS-3012/GS-3012F User’s Guide 

24-10 

Access Control 

 

Figure 24-12 Status Screen (Internet Explorer) 

 

 

Figure 24-13 Status Screen (Netscape) 

24.8 Service  Access  Control 

Service Access Control allows you to decide what services you may use to access the switch. You may also change 
the default service port and configure “trusted computer(s)” for each service in the 

Remote Management 

screen 

(discussed later). Click 

Access Control 

to go back to the 

Access Control 

screen.  

 

Summary of Contents for Dimension GS-3012

Page 1: ...GS 3012 GS 3012F Gigabit Ethernet Switch Version 3 60 LH 1 LR 1 12 2005 User s Guide...

Page 2: ...of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any produc...

Page 3: ...r or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchant...

Page 4: ...a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to...

Page 5: ...Praha 4 Modrany Cesk Republika support zyxel dk 45 39 55 07 00 www zyxel dk DENMARK sales zyxel dk 45 39 55 07 07 ZyXEL Communications A S Columbusvej 5 2860 Soeborg Denmark support zyxel fi 358 9 478...

Page 6: ...strovityanova 37a Str Moscow 117279 Russia support zyxel es 34 902 195 420 www zyxel es SPAIN sales zyxel es 34 913 005 345 ZyXEL Communications Alejandro Villegas 33 1 28043 Madrid Spain support zyxe...

Page 7: ...troduction 1 1 1 2 Features 1 1 1 3 Applications 1 3 Part II II Chapter 2 Hardware Installation 2 1 2 1 Installation Scenarios 2 1 Chapter 3 Hardware Connections 3 1 3 1 Safety Warnings 3 1 3 2 Front...

Page 8: ...tion to Port based VLANs 7 9 Chapter 8 Static MAC Forward Setup 8 1 8 1 Introduction to Static MAC Forward Setup 8 1 8 2 Configuring Static MAC Forwarding 8 1 8 3 Viewing and Editing Static MAC Forwar...

Page 9: ...ut Port Security 16 1 16 2 Port Security Setup 16 1 Chapter 17 Queuing Method 17 1 17 1 Introduction to Queuing 17 1 17 2 Configuring Queuing 17 2 Chapter 18 Classifier 18 1 18 1 About the Classifier...

Page 10: ...figuration File 23 2 23 4 Backing Up a Configuration File 23 2 23 5 Load Factory Defaults 23 3 23 6 Reboot System 23 3 23 7 Command Line FTP 23 4 Chapter 24 Access Control 24 1 24 1 About Access Contr...

Page 11: ...Introducing the Commands 30 1 30 1 Overview 30 1 30 2 Accessing the CLI 30 1 30 3 The Login Screen 30 2 30 4 Command Syntax Conventions 30 3 30 5 Getting Help 30 3 30 6 Command Modes 30 5 30 7 Using...

Page 12: ...tabases 32 1 32 3 Configuring Tagged VLAN 32 1 32 4 Global VLAN1Q Tagged VLAN Configuration Commands 32 2 32 5 Port VLAN Commands 32 4 32 6 Enable VLAN 32 7 32 7 Disable VLAN 32 7 32 8 Show VLAN Setti...

Page 13: ...e 3 4 Installed Transceiver 3 4 Figure 3 5 Opening the Transceiver s Latch Example 3 5 Figure 3 6 Transceiver Removal Example 3 5 Figure 3 7 GS 3012F Rear Panel AC Model 3 6 Figure 3 8 GS 3012F Rear P...

Page 14: ...g Tree Protocol Status 10 3 Figure 10 2 Spanning Tree Protocol Configuration 10 4 Figure 11 1 Bandwidth Control 11 2 Figure 12 1 Broadcast Storm Control 12 1 Figure 13 1 Mirroring 13 1 Figure 14 1 Agg...

Page 15: ...re 22 1 DHCP Relay 22 2 Figure 23 1 Maintenance 23 1 Figure 23 2 Firmware Upgrade 23 1 Figure 23 3 Restore Configuration 23 2 Figure 23 4 Backup Configuration 23 2 Figure 23 5 Confirm Load factory Def...

Page 16: ...AC Table 28 2 Figure 29 1 ARP Table 29 2 Figure 30 1 Initial Console Port Screen 30 2 Figure 30 2 CLI Login Screen 30 3 Figure 30 3 CLI Help List of Commands Example 1 30 4 Figure 30 4 CLI Help List o...

Page 17: ...le 31 11 Figure 31 23 bandwidth limit Command Example 31 12 Figure 31 24 mirror Command Example 31 12 Figure 31 25 gvrp Command Example 31 13 Figure 31 26 ingress check Command Example 31 13 Figure 31...

Page 18: ...GS 3012 GS 3012F User s Guide xviii Lists of Figures Figure 32 9 no vlan Command Example 32 7 Figure 32 10 show vlan Command Example 32 7...

Page 19: ...logy 7 2 Table 7 2 802 1Q VLAN Status 7 4 Table 7 3 802 1Q VLAN Port Settings 7 5 Table 7 4 802 1Q Static VLAN 7 7 Table 7 5 Static VLAN Summary Table 7 8 Table 7 6 Port Based VLAN Setup 7 11 Table 8...

Page 20: ...ng 20 3 Table 20 3 Multicast IGMP Filtering Profile 20 5 Table 20 4 MVR 20 8 Table 20 5 MVR Group Configuration 20 10 Table 21 1 Static Routing 21 1 Table 21 2 Static Routing Summary Table 21 2 Table...

Page 21: ...able 28 2 Table 29 1 ARP Table 29 2 Table 30 1 Command Summary User Mode 30 6 Table 30 2 Command Summary Enable Mode 30 7 Table 30 3 Command Summary Configure Mode 30 11 Table 30 4 Command Summary con...

Page 22: ...odels The GS 3012F DC model requires DC power supply input of 48 VDC to 60 VDC 1 2A Max The GS 3012F AC model requires 100 240VAC 1 5A power All figures in this guide display the GS 3012F AC model unl...

Page 23: ...The GS Switch Server Computer Printer Gateway Related Documentation Web Configurator Online HTML help The online HTML help shows you how to use the web configurator to configure individual screens Mor...

Page 24: ......

Page 25: ...Features and Applications I Part I Features and Applications This part acquaints you with the features and applications of the switches...

Page 26: ......

Page 27: ...ng cryptic command strings In addition the switch can also be managed via Telnet the console port or third party SNMP management 1 2 Features These sections describe the hardware and firmware features...

Page 28: ...and Trace Route RFC 2925 Management Web configurator Command line interface locally via console port or remotely via Telnet Out of band RJ 45 management port SNMP System Monitoring System status link...

Page 29: ...p links between switches bridges or routers It allows a switch to interact with other R STP compliant switches in your network to ensure that only one path exists between any two stations on the netwo...

Page 30: ...width can connect to high speed department servers via the switch You can provide a super fast uplink connection by installing the transceiver s in the mini GBIC slots Moreover the switch eases superv...

Page 31: ...each other Figure 1 3 High Performance Switched Workgroup Application 1 3 4 IEEE 802 1Q VLAN Application Examples This section shows a workgroup and a shared server example using 802 1Q tagged VLANs F...

Page 32: ...ared Server Example Shared resources such as a server can be used by all ports in the same VLAN as the server as shown in the following example In this example only ports that need access to the serve...

Page 33: ...allation and Connections II Part II Hardware Installation and Connections This part acquaints you with installing the switch instructs you on how to make the hardware connections and explains the fron...

Page 34: ......

Page 35: ...lations 2 1 1 Desktop Installation Procedure 1 Make sure the switch is clean and dry 2 Set the switch on a smooth level surface strong enough to support the weight of the switch and the connected cabl...

Page 36: ...a rack mounting kit 1 Align one bracket with the holes on one side of the switch and secure it with the bracket screws smaller than the rack mounting screws 2 Attach the other bracket in a similar fa...

Page 37: ...GS 3012 GS 3012F User s Guide Hardware Installation 2 3 Figure 2 3 Mounting the ES to an EIA standard 19 inch rack...

Page 38: ......

Page 39: ...isassemble this device 3 2 Front Panel The following figure shows the front panel of the GS 3012 The front panel contains the switch LEDs RJ 45 gigabit ports mini GBIC ports and a console and manageme...

Page 40: ...he speed of the Gigabit ports can be 100Mbps or 1000Mbps and the duplex mode can be half duplex for 100 Mbps or full duplex The GS 3012 s mini GBIC slots are paired with Gigabit ports The GS 3012F s G...

Page 41: ...ansceivers that comply with the Small Form factor Pluggable SFP Transceiver MultiSource Agreement MSA See the SFF committee s INF 8074i specification Rev 1 0 for details You can change transceivers wh...

Page 42: ...Figure 3 3 Transceiver Installation Example Figure 3 4 Installed Transceiver Transceiver Removal Use the following steps to remove a mini GBIC transceiver SFP module 1 Open the transceiver s latch la...

Page 43: ...ort using an Ethernet cable You can configure the switch via Telnet or the web configurator The default IP address of the management port is 192 168 0 1 with a subnet mask of 255 255 255 0 3 3 Rear Pa...

Page 44: ...y input see the appendix of product specifications for details To connect the power to the unit insert the one end of the supplied power cord to the power receptacle on the rear panel and the other en...

Page 45: ...DESCRIPTION BPS Green Blinking The system is receiving power from the backup power supply On The backup power supply is connected and active Off The backup power supply is not ready or not active PWR...

Page 46: ...g in half duplex mode and no collisions are occurring 1000 GS 3012F Green Blinking The system is transmitting receiving to from an Ethernet network On The link to a 1000 Mbps Ethernet network is up Of...

Page 47: ...n access the command line interface using a terminal emulation program on a computer connected to the switch console port see Section 3 2 1 or access the switch using Telnet The next part of this guid...

Page 48: ......

Page 49: ...Getting Started III Part III Getting Started This part introduces you to the web configurator describes the Status and Port Details screens and shows you how to configure the Basic Setting screens...

Page 50: ......

Page 51: ...browser 2 Type http and the IP address of the switch for example the default is 192 168 1 1 for in band management or 192 168 0 1 when connected to the management port in the Location or Address field...

Page 52: ...ator Home Screen Status In the navigation panel click a main link to reveal a list of submenu links Navigation Panel Click on a tab to display related links Click here for help on configuring a screen...

Page 53: ...tem Info General Setup Switch Setup IP Setup Port Setup VLAN Status VLAN Port Setting Static VLAN Static MAC Forwarding Filtering Spanning Tree Protocol Status Spanning Tree Protocol Configuration Ban...

Page 54: ...ameters such as VLAN type MAC address learning IGMP snooping GARP and priority queues IP Setup This link takes you to a screen where you can configure the IP address subnet mask necessary for switch m...

Page 55: ...rious multicast features and create multicast VLANs IP Application Static Routing This link takes you to screens where you can configure static routes A static route defines how the switch should forw...

Page 56: ...tings this could also lock you out from performing out of band management 4 Disabling all ports 5 Assigning minimum bandwidth to the CPU port If you limit bandwidth to the CPU port you may find that t...

Page 57: ...he Starting XMODEM upload message before activating XMODEM upload on your terminal 6 After a successful configuration file upload type atgo to finish starting the switch Figure 4 4 Resetting the Switc...

Page 58: ...r Figure 4 5 Web Configurator Logout Screen 4 5 2 Help The web configurator s online help has descriptions of individual screens and some supplementary information Click the Help link from a web confi...

Page 59: ...the web configurator displays a port statistical summary with links to each port showing statistical details 5 2 Port Status Summary To view the port statistics click Status in all web configurator sc...

Page 60: ...rrors This field shows the number of received errors on this port Tx KB s This field shows the number of kilobytes per second transmitted on this port Rx KB s This field shows the number of kilobytes...

Page 61: ...port connection is down and the speed duplex mode Status This field shows the training state of the ports The states are FORWARDING forwarding which means the link is functioning normally or STOP the...

Page 62: ...d multicast frames received Broadcast This field shows the number of good broadcast frames received Pause This field shows the number of 802 3x Pause frames received Control This field shows the numbe...

Page 63: ...octets in length 128 255 This field shows the number of packets including bad packets received that were between 128 and 255 octets in length 256 511 This field shows the number of packets including b...

Page 64: ......

Page 65: ...creen also allows you to set the system time manually or get the current time and date from an external server when you turn on your switch The real time is then displayed in the switch logs The Switc...

Page 66: ...e created Ethernet Address This field refers to the Ethernet MAC Media Access Control address of the switch Hardware Monitor Temperature Unit The switch has temperature sensors that are capable of det...

Page 67: ...RPM 41 is displayed for speeds too small to measure under 2000 RPM Threshold This field displays the minimum speed at which a normal fan should work Status Normal indicates that this fan is functionin...

Page 68: ...ION System Name Choose a descriptive name for identification purposes This name consists of up to 32 printable characters spaces are allowed Location Enter the geographic location up to 32 characters...

Page 69: ...When you select the Daytime RFC 867 format the switch displays the day month year and time with no time zone adjustment When you use this format it is recommended that you use a Daytime timeserver wit...

Page 70: ...on the same LAN thus a user will not see the printers and hard disks of another user in the same building VLAN also increases network performance by limiting broadcasts to a smaller and more manageab...

Page 71: ...on VLAN setup for more background information 200 milliseconds default Leave Timer Leave Timer sets the duration of the Leave Period timer for GVRP in milliseconds Each port has a single Leave Period...

Page 72: ...bandwidth Level 1 This is typically used for non critical background traffic such as bulk transfers that are allowed but that should not affect other applications and users Level 0 Typically used for...

Page 73: ...cribes the labels in this screen Table 6 4 IP Setup LABEL DESCRIPTION Domain Name Server DNS Domain Name System is for mapping a domain name to its corresponding IP address and vice versa Enter a doma...

Page 74: ...t Gateway Enter the IP address of the default outgoing gateway in dotted decimal notation for example 192 168 1 254 VID Enter the VLAN identification number associated with the switch IP address This...

Page 75: ...lds to your previous configuration Index This field displays the index number of the rule Click an index number to edit the rule IP Address This field displays the IP address IP Subnet Mask This field...

Page 76: ...select Auto 10M Half Duplex 10M Full Duplex 100M Half Duplex 100M Full Duplex or 1000M Full Duplex Selecting Auto auto negotiation makes one Gigabit port able to negotiate with a peer automatically to...

Page 77: ...ng a state of packet collision causing the sending port to temporarily stop sending signals and resend later Select this option to enable flow control 802 1P Priority This priority value is added to i...

Page 78: ......

Page 79: ...Advanced Application 1 IV Part IV Advanced Application 1 This part shows you how to configure the VLAN Static MAC Forwarding Filtering STP and Bandwidth Control Advanced Application screens...

Page 80: ......

Page 81: ...I set to 1 then that frame should not be forwarded as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 212 VLANs Note that user priority...

Page 82: ...fer to the following table for common GARP terminology Table 7 1 GARP Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually Dynamic VLAN This is a...

Page 83: ...ches C D and E otherwise they will drop frames with unknown VLAN group tags However with VLAN Trunking enabled on a port s in each intermediary switch you only need to create VLAN groups in the end de...

Page 84: ...This column displays the ports that are participating in a VLAN A tagged port is marked as T an untagged port is marked as U and ports not participating in a VLAN in marked as Elapsed Time This field...

Page 85: ...1Q VLAN Port Settings LABEL DESCRIPTION GVRP GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to dynamically register necessary VLAN members on ports ac...

Page 86: ...protocol that defines a way for switches to register necessary VLAN members on ports across the network Acceptable Frame Type Specify the type of frames allowed on a port Choices are All and Tag Only...

Page 87: ...e is between 1 and 4094 Port The port number identifies the port you are configuring Control Select Normal for the port to dynamically join this VLAN group using GVRP This is the default selection Sel...

Page 88: ...ings of a rule click a number in the VID field Figure 7 6 Static VLAN Summary Table The following table describes the labels in this screen Table 7 5 Static VLAN Summary Table LABEL DESCRIPTION VID Th...

Page 89: ...talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports Port b...

Page 90: ...GS 3012 GS 3012F User s Guide 7 10 VLAN Figure 7 8 Port Based VLAN Setup All Connected...

Page 91: ...rt is selected Figure 7 9 This option is the most limiting but also the most secure After you make your selection click Apply top right of screen to display the screens as mentioned above You can stil...

Page 92: ...to allow two subscriber ports to talk to each other you must define the egress port for both ports CPU refers to the in band switch management port By default it forms a VLAN with all Gigabit ports If...

Page 93: ...t receive traffic on other ports This may reduce unicast flooding 8 2 Configuring Static MAC Forwarding Click Static MAC Forwarding to display the configuration screen as shown Figure 8 1 Static MAC F...

Page 94: ...C Forwarding Summary Table The following table describes the labels in this screen Table 8 2 Static MAC Forwarding Summary Table LABEL DESCRIPTION Index Click an index number to modify a static MAC ad...

Page 95: ...up ID 9 2 Configuring a Filtering Rule Click Advanced Application and Filtering to display the screen as shown next Figure 9 1 Filtering The following table describes the related labels in this screen...

Page 96: ...the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults 9 3 Viewing and Editing Filter Rules To vi...

Page 97: ...ering Summary Table LABEL DESCRIPTION Action This field displays the filter action Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cancel Click Ca...

Page 98: ......

Page 99: ...the port states are Discarding Learning and Forwarding In this user s guide STP often refers to both STP and RSTP 10 1 1 STP Terminology The root bridge is the base of the spanning tree it is the bri...

Page 100: ...rval Max Age the device assumes that the link to the root bridge is down This device then initiates negotiations with other devices to reconfigure the network to re establish a valid network topology...

Page 101: ...is bridge consisting of bridge priority plus MAC address This ID is the same for Root and Our Bridge if the switch is the root switch Hello Time second This is the time interval in seconds at which th...

Page 102: ...red Time Since Last Change This is the time since the spanning tree was last reconfigured Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh in...

Page 103: ...nated port for the attached LAN If it is a root port a new root port is selected from among the switch ports attached to the network The allowed range is 6 to 40 seconds Forwarding Delay This is the m...

Page 104: ......

Page 105: ...ming traffic flow on a port The Peak Information Rate PIR is the maximum bandwidth allowed for the incoming traffic flow on a port when there is no network congestion The CIR and PIR should be set for...

Page 106: ...box Commit Rate Specify the guaranteed bandwidth allowed in kilobits per second Kbps for the incoming traffic flow on a port The commit rate should be less than the peak rate The sum of commit rates c...

Page 107: ...Advanced Application 2 This part shows you how to configure the Broadcast Storm Control Mirroring Link Aggregation Port Authentication Port Security Queuing Method Classifier Policy Rule and Multicas...

Page 108: ......

Page 109: ...number of allowable broadcast multicast and or DLF packets is reached per second the subsequent packets are discarded Enable this feature to reduce broadcast multicast and or DLF packets in your netwo...

Page 110: ...st pkt s Select this option and specify how many broadcast packets the port receives per second Multicast pkt s Select this option and specify how many multicast packets the port receives per second D...

Page 111: ...raffic from the monitor port the port you copy the traffic to without interference 13 2Port Mirroring Configuration Click Advanced Application Mirroring in the navigation panel to display the Mirrorin...

Page 112: ...to examine it in more detail without interfering with the traffic flow on the original port s Select this port from this drop down list box Port This field displays the port number Mirrored Select thi...

Page 113: ...ltiple ports 14 1 1 Dynamic Link Aggregation The switch adheres to the IEEE 802 3ad standard for static and dynamic LACP port trunking The switch supports the link aggregation IEEE 802 3ad standard Th...

Page 114: ...er switch 0000 00 00 00 00 00 0000 00 0000 System priority MAC address Key Port Priority1 Port Number1 Figure 14 1 Aggregation ID 14 2Link Aggregation Protocol Status Click Advanced Application Link A...

Page 115: ...in the Link Aggregation screen to be in the trunk group Synchronized Ports These are the ports that are currently transmitting data as one logical link in this trunk group Poll Interval s The text bo...

Page 116: ...LACP system priority is a number between 1 and 65 535 The switch with the lowest system priority and lowest port number if system priority is the same becomes the LACP server The LACP server controls...

Page 117: ...een the individual port exchanges of LACP packets in order to check that the peer port in the trunk group is still up If a port does not respond after three tries then it is deemed to be down and is r...

Page 118: ......

Page 119: ...se that is limited to the memory capacity of the device In essence RADIUS authentication allows you to validate an unlimited number of users from a central location Figure 15 1 RADIUS Server 15 2Confi...

Page 120: ...UDP Port The default port of the RADIUS server for authentication is 1812 You need not change this value unless your network administrator instructs you to do so Shared Secret Specify a password up to...

Page 121: ...This field displays a port number Active Select this checkbox to permit IEEE 802 1x authentication on this port You must first allow IEEE 802 1x authentication on the switch before configuring it on e...

Page 122: ......

Page 123: ...ough a port on the switch For maximum port security enable this feature disable MAC address learning and configure static MAC address es for a port It is not recommended you disable Port Security toge...

Page 124: ...mic MAC addresses that may be learned on a port For example if you set this field to 5 on port 2 then only the devices with these five learned MAC addresses may access port 2 at any one time A sixth d...

Page 125: ...ghest Q6 7 Q5 6 Q4 5 Q3 4 Q2 3 Q1 2 Q0 1 lowest 17 1 1 Strict Priority Queuing SPQ Strict Priority Queuing SPQ services queues based on priority only As traffic comes into the switch traffic on the hi...

Page 126: ...t field see Figure 17 1 rather than a fixed amount of bandwidth WRR is activated only when a port has more traffic than it can handle Queues with larger weights get more service than queues with small...

Page 127: ...ins Q7 has the highest priority and Q0 the lowest WRR services queues on a rotating basis based on their queue weight the number you configure in the queue Weight field Queues with larger weights get...

Page 128: ......

Page 129: ...address source port number destination port number or incoming port number For example you can configure a classifier to select traffic from the same protocol port such as Telnet to form a flow Config...

Page 130: ...ifier Figure 18 1 Classifier The following table describes the labels in this screen Table 18 1 Classifier LABEL DESCRIPTION Active Select this option to enable this rule Name Enter a descriptive name...

Page 131: ...ble 18 3 for information Source MAC Address Select Any to apply the rule to all MAC addresses To specify a source select the second choice and type a MAC address in valid MAC address format six hexade...

Page 132: ...el to reset the fields back to your previous configuration Clear Click Clear to set the above fields back to the factory defaults 18 3Viewing and Editing Classifier Configuration To view a summary of...

Page 133: ...TYPE PROTOCOL NUMBER IP ETHII 0800 X 75 Internet 0801 NBS Internet 0802 ECMA Internet 0803 Chaosnet 0804 X 25 Level 3 0805 XNS Compat 0807 Banyan Systems 0BAD BBN Simnet 5208 IBM SNA 80D5 AppleTalk A...

Page 134: ...GS 3012 GS 3012F User s Guide 18 6 Classifier Figure 18 3 Classifier Example...

Page 135: ...to request a particular service or give advanced notice of where the traffic is going 19 1 2 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to replace the Type of Se...

Page 136: ...GS 3012 GS 3012F User s Guide 19 2 Policy Rule Figure 19 1 Policy The following table describes the labels in this screen...

Page 137: ...ice TOS priority level Metering You can configure the desired bandwidth available to a traffic flow Traffic that exceeds the maximum bandwidth allocated in cases where the network is congested is call...

Page 138: ...te bandwidth limitation on the traffic flow s then set the actions to be taken on out of profile packets Out of profile action Select the action s to be performed for out of profile traffic Select Dro...

Page 139: ...is field displays the descriptive name for this policy This is for identification purposes only Classifier s This field displays the name s of the classifier to which this policy applies Delete Click...

Page 140: ...GS 3012 GS 3012F User s Guide 19 6 Policy Rule Figure 19 3 Policy Example...

Page 141: ...D range 224 0 0 0 to 239 255 255 255 are used for IP multicasting Certain IP multicast numbers are reserved by IANA for special purposes see the IANA web site for more information 20 1 2 IGMP Filterin...

Page 142: ...generates no additional network traffic allowing you to significantly reduce multicast traffic passing through your switch 20 2Multicast Status Click Advanced Applications and Multicast to display the...

Page 143: ...ing to send the frame s to all ports Port This field displays the port number Immed Leave Select this option to set the switch to remove this port from the multicast tree when an IGMP version 2 leave...

Page 144: ...packets to this port Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh 20 4IGMP Filtering Profile IGMP filter profiles allow you to...

Page 145: ...e profile s that you want to remove in the Delete Profile column then click the Delete button To delete a rule s from a profile select the rule s that you want to remove in the Delete Rule column then...

Page 146: ...tings on the multicast devices in the multicast VLAN 20 5 3 How MVR Works The following figure shows a multicast television example where a subscriber device such as a computer in VLAN 1 receives mult...

Page 147: ...e the MVR screen to create multicast VLANs and select the receiver port s and a source port for each multicast VLAN Click Advanced Applications and Multicast in the navigation panel Click the Multicas...

Page 148: ...ast VLAN Mode Specify the MVR mode on the switch Choices are Dynamic and Compatible Select Dynamic to send IGMP reports to all MVR source ports in the multicast VLAN Select Compatible to set the switc...

Page 149: ...This field displays the MVR mode Source Port This field displays the source port number s Receiver Port This field displays the receiver port number s Delete To delete a multicast VLAN s select the r...

Page 150: ...cast addresses Add Cancel Click Add to save the settings Click Cancel to discard all changes MVLAN This field displays the multicast VLAN ID Name This field displays the descriptive name for this sett...

Page 151: ...et the receiver and source ports Figure 20 9 MVR Configuration Example To set the switch to forward the multicast group traffic to the subscribers configure multicast group settings in the Group Confi...

Page 152: ...GS 3012 GS 3012F User s Guide 20 12 Multicast Figure 20 10 MVR Configuration Example Figure 20 11 MVR Configuration Example...

Page 153: ...IP Application and Management VI Part VI IP Application and Management This part describes the IP Application and Management screens...

Page 154: ......

Page 155: ...s field allows you to activate deactivate this static route Name Enter a descriptive name for this route This is for identification purpose only Destination IP Address This parameter specifies the IP...

Page 156: ...g Summary Table The following table describes the labels in the summary table Table 21 2 Static Routing Summary Table LABEL DESCRIPTION Index This field displays the index number of the route Click a...

Page 157: ...can also specify additional information for the switch to add to the client DHCP requests that it relays to the DHCP server Please refer to RFC 3046 for more details 22 1 2 DHCP Relay Agent Circuit ID...

Page 158: ...on Select the Option 82 check box to have the switch add information slot number port number and VLAN ID to client TCP IP configuration requests that it relays to a DHCP server Information This read o...

Page 159: ...enance screen if you want to upgrade your switch firmware See the System Info screen to verify your current firmware version number Make sure you have downloaded and unzipped the correct model firmwar...

Page 160: ...tion file is automatically renamed when you restore using this screen 23 4Backing Up a Configuration File Backing up your switch configurations allows you to create various snap shots of your device f...

Page 161: ...t screen Figure 23 6 Close Browser After Load Factory Defaults Click Yes to close this window Open a new browser window to access the switch web configurator again You may need to change the IP addres...

Page 162: ...ror log or the trace log ZyNOS ZyXEL Network Operating System sometimes referred to as the ras file is the system firmware and has a bin filename extension Table 23 1 Filename Conventions FILE TYPE IN...

Page 163: ...d FTP Clients The following table describes some of the commands that you may see in GUI based FTP clients Table 23 2 General Commands for GUI based FTP Clients COMMAND DESCRIPTION Host Address Enter...

Page 164: ......

Page 165: ...ons are permitted when the multiple login feature is either enabled or disabled Table 24 1 Access Control Overview Multiple Login Console port SSH Telnet FTP Web SNMP Enabled One console port session...

Page 166: ...nt is a management software module that resides in a managed switch the GS An agent translates the local management information from the managed switch into a form compatible with SNMP The manager is...

Page 167: ...ce The switch supports the following MIBs SNMP MIB II RFC 1213 RFC 1157 SNMP v1 RFC 1493 Bridge MIBs RFC 1643 Ethernet MIBs RFC 1155 SMI SNMPv2 SNMPv2c RFC 2863 if mib Bridge extension MIBs RFC 2674 R...

Page 168: ...p community which is the password sent with each trap to the SNMP manager Trap Destination Enter the IP addresses of up to four stations to send your SNMP traps to Apply Click Apply to save your chang...

Page 169: ...ly the administrator has read write access Old Password Type the existing system password 1234 is the default password when shipped New Password Enter your new system password Retype to confirm Retype...

Page 170: ...public key is checked against the saved version on the client computer 2 Encryption Method Once the identification is verified both the client and server must agree on the type of encryption method t...

Page 171: ...switch whereas the SSL client only should authenticate itself when the SSL server requires it to do so Please refer to the following figure 8 HTTPS connection requests from an SSL aware web browser g...

Page 172: ...ogin screen if you select No then web configurator access is blocked Figure 24 9 Security Alert Dialog Box Internet Explorer 24 7 3 Netscape Navigator Warning Messages When you attempt to access the s...

Page 173: ...curity Certificate 1 Netscape Figure 24 11 Security Certificate 2 Netscape 24 7 4 Login Screen After you accept the certificate and login in the switch main screen appears The lock displayed in the bo...

Page 174: ...cape 24 8Service Access Control Service Access Control allows you to decide what services you may use to access the switch You may also change the default service port and configure trusted computer s...

Page 175: ...then you will have to let people who wish to use the service know the new port number for that service Timeout Type how many minutes a management session via the web configurator can be left idle bef...

Page 176: ...ent set Clear the check box if you wish to temporarily disable the set without deleting it Start Address End Address Configure the IP address range of trusted computers fro which you can manage this s...

Page 177: ...e following table describes the labels in this screen Table 25 1 Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty the te...

Page 178: ......

Page 179: ...ocumentation of your syslog program for details The following table describes the syslog severity levels Table 26 1 Syslog Severity Levels NUMERICAL CODE SEVERITY 0 Emergency The system is unusable 1...

Page 180: ...ion to set the device to generate logs for the corresponding category Facility The log facility allows you to send logs to different files in the syslog server Refer to the documentation of your syslo...

Page 181: ...ower the number the more critical the logs are Add Click Add to save your changes back to the device The entry displays in the table below Cancel Click Cancel to begin configuring this screen afresh C...

Page 182: ...GS 3012 GS 3012F User s Guide 26 4 Syslog Table 26 3 Syslog Server Setup LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh...

Page 183: ...L Clustering Management Specifications Maximum number of cluster members 24 Cluster Member Models Must be compatible with ZyXEL cluster management implementation Cluster Manager The switch through whi...

Page 184: ...n the cluster member switch directly and not via the cluster manager o None neither a manager nor a member of a cluster Manager This field displays the cluster manager switch s hardware MAC Address Th...

Page 185: ...own 27 2 1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluste...

Page 186: ...ster manager switch 360ABM0 bin The name of the firmware file you want to upload to the cluster member switch 27 3Configuring Cluster Management Click Configuration from the Cluster Management screen...

Page 187: ...mber is later set to become a cluster manager then its Status is displayed as Error in the Cluster Management Status screen and a warning icon appears in the member summary list below Name Type a name...

Page 188: ...password afterwards then it cannot be managed from the Cluster Manager Its Status is displayed as Error in the Cluster Management Status screen and a warning icon appears in the member summary list b...

Page 189: ...the following figure 1 The switch examines a received frame and learns the port on which this source MAC address came 2 The switch checks to see if the frame s destination MAC address matches a source...

Page 190: ...table below MAC Click this button to display and arrange the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to disp...

Page 191: ...ss sends it to the device If no entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The switch fills in its own MAC and IP address in the sender address fields a...

Page 192: ...x This is the ARP Table entry number IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below MAC Address This is the MAC address of the de...

Page 193: ...Commands VII Part VII Commands This part gives information on the Command Line Interface CLI...

Page 194: ......

Page 195: ...Use the same configuration file to set all switches of the same model in your network to the same settings You may also edit a configuration file using a text editor Make sure you use valid commands...

Page 196: ...local management connect your computer to the RJ 45 management port labeled MGMT on the switch 2 Make sure your computer IP address and the switch IP address are on the same subnet In Windows click St...

Page 197: ...y or down z arrow key to scroll through the command history list The CLI does not accept partial or incomplete commands You may enter a unique part of a command and press TAB to have the switch automa...

Page 198: ...on privileged commands exit Exit from the EXEC help Description of the interactive help system history Show a list of previously run commands ping Exec ping show Show system information ssh SSH clien...

Page 199: ...10 To enter config interface mode enter interface port channel followed by a port number For example interface port channel 10 Enter exit to quit from the current mode or log out from the CLI 30 7Usi...

Page 200: ...Logs out from the CLI help Displays help information history Displays a list of previously command s that you have executed The switch stores up to 256 commands in history ping IP host name in band ou...

Page 201: ...e via TFTP disable Exits Enable or privileged mode enable Accesses Enable or privileged mode erase running config Resets to the factory default settings exit Exits Enable or privileged mode help Displ...

Page 202: ...with the specified temperature unit Celsius C or Fahrenheit F https Displays the HTTPS information certificate Displays the HTTPS certificates key rsa dsa Displays the HTTPS key session Displays curr...

Page 203: ...c Displays static MAC address table You can sort by MAC address VID or port address table all mac vid port Displays MAC address table You can sort by MAC address VID or port address table count Displa...

Page 204: ...te keys known hosts Displays known SSH hosts information session Displays current SSH session s system information Displays general system information time Displays current system time and date timesy...

Page 205: ...untag EtherI Itag priority 0 7 vlan vlan id ethernet type ether num ip ipx arp rarp appletalk decnet sna netbios dlc source mac src mac addr source port port num destination mac dest mac addr dscp 0 6...

Page 206: ...ddress svr_ip svr2_ip svr3_ip Sets the IP addresses of up to 3 DHCP servers information Allows the switch to add system name to agent information option Allows the switch to add DHCP relay agent infor...

Page 207: ...s the default gateway s IP address for the out of band management port name server ip Sets the IP address of a domain name server route ip mask next hop ip Creates a static route ip mask next hop ip m...

Page 208: ...ort mirroring on a specified port mode zynos Changes the CLI mode to the ZyNOS format multi login Enables multi login mvr vlan id Enters the MVR Multicast VLAN Registration configuration mode See Sect...

Page 209: ...nk aggregation control protocol dynamic trunking on the switch logins name Disables login access to the specified name mac filter mac mac addr vlan vlan id inactive Enables the specified MAC filter ru...

Page 210: ...the list of secure clients index service telnet ftp http icmp snmp ssh h ttps Disables a secure client set entry number from using the selected remote management service s name inactive Enables a poli...

Page 211: ...entry server ip inactive Enables a syslog server entry type system interface switch authentication ip Sets the device to not generate a category of logs timesync Disables the time setting on the time...

Page 212: ...s diff replace priority diff set dscp outgoing mirror outgoing eport outgoing non unicast eport outgoing set vlan metering out of profile action change dscp drop forward set drop prec inactive Configu...

Page 213: ...amic MAC addresses are saved to the static MAC address table queue level 0 7 priority 0 7 Sets the priority level to physical queue mapping radius server host ip acct port socket number key key string...

Page 214: ...your SNMP traps to spanning tree Enables STP on the switch port list Enables STP on a specified port port list priority 0 255 Sets the priority for a specified port port list path cost 1 65535 Sets t...

Page 215: ...Sets the time server protocol server ip Sets the IP address of your time server trunk T1 T2 T3 T4 T5 T6 Activates a trunk group T1 T2 T3 T4 T5 T6 interface port list Adds a port s to the specified tr...

Page 216: ...managed using this specified IP address default gateway ip address Sets a default gateway IP address for this VLAN inband default ip address mask Sets a static in band IP address and subnet mask inban...

Page 217: ...this VLAN Group ID 30 9 5 interface Commands The following commands are listed in configuration mode as interface switch commands all are preceded with the command interface Table 30 5 Command Summary...

Page 218: ...the receiving port frame type all tagged Choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port gvrp Enables this function to permit VLAN groups beyond the...

Page 219: ...mit Enables the interface multicast limit pkt s Sets how many multicast packets the interface receives per second name port name string Sets a name for your interface Enter a descriptive name up to ni...

Page 220: ...f service priority for an interface speed duplex auto 10 half 10 full 100 half 100 full 1000 full Sets the duplex mode half full and speed 10 100 1000 Mbps of the connection on the interface Selecting...

Page 221: ...oup settings no group name str Disables the specified MVR group setting no inactive Enables MVR no receiver port port list Disables the receiver port s An MVR receiver port can only receive multicast...

Page 222: ......

Page 223: ...ersion and system up time An example is shown next Figure 31 1 show system information Command Example 31 2 2 show hardware monitor Syntax show hardware monitor c f This command displays the current h...

Page 224: ...1 Netmask 255 255 255 0 VID 0 IP Interface IP 192 168 1 1 Netmask 255 255 255 0 VID 1 ras ras show hardware monitor c Temperature Unit c Temperature c Current Max Min Threshold Status MAC 40 0 40 0 30...

Page 225: ...TX Packet Tx Packets 69 Multicast 0 Broadcast 0 Pause 0 Tagged 0 RX Packet Rx Packets 4 Multicast 0 Broadcast 4 Pause 0 Control 0 TX Collison Single 0 Multiple 0 Excessive 0 Late 0 Error Packet RX CRC...

Page 226: ...which the Ethernet device belongs out of band refers the management port while in band means the other ports on the switch size 0 8024 Specifies the packet size to send t Sends Ping packets to the Eth...

Page 227: ...example displays route information to an Ethernet device with an IP address of 192 168 1 100 Figure 31 8 traceroute Command Example 31 5Enabling RSTP To enable RSTP on a port enter spanning tree foll...

Page 228: ...ation file on the switch The following example uploads the configuration file test cfg from the TFTP server 172 23 19 96 to the switch Figure 31 11 CLI Restore Configuration Example 31 6 3 Using a Dif...

Page 229: ...o reset the switch back to the factory defaults 1 Enter erase running config to reset the current running configuration 2 Enter write memory to save the changes to the current configuration file If yo...

Page 230: ...T4 T5 T6 lacp no trunk T1 T2 T3 T4 T5 T6 interface port list where T1 T2 T3 T4 T5 T6 Disables the trunk group T1 T2 T3 T4 T5 T6 lacp Disables LACP in the trunk group T1 T2 T3 T4 T5 T6 interface port l...

Page 231: ...ess authenticator Command Example 31 7 5 no ssh Syntax no ssh key rsa1 rsa dsa no ssh known hosts host ip cr no ssh known hosts host ip 1024 ssh rsa ssh dsa where key rsa1 rsa dsa Disables the secure...

Page 232: ...separated by a dash An example is shown next Enter the configuration command set Enable ports one three four and five for configuration Begin configuring for those ports Figure 31 20 interface Command...

Page 233: ...onfiguration Enable broadcast control Set the number of broadband packets the interface receives per second Figure 31 22 broadcast limit Command Example 31 8 4 bandwidth limit Syntax bandwidth limit b...

Page 234: ...nalysis An example is shown next Enable port mirroring Enable the monitor port three Enable ports one four five and six for configuration Enable port mirroring on the interface Enable port mirroring f...

Page 235: ...Syntax ingress check Enables the device to discard incoming frames for VLANs that are not included in a port member set An example is shown next Enable ports one three four and five for configuration...

Page 236: ...nterface Figure 31 28 vlan trunking Command Example 31 8 10 weight Syntax weight wt1 wt2 wt8 where wt1 wt2 wt8 Sets the interface WFQ weighting A weight value of one to eight is given to each variable...

Page 237: ...2 from the VLAN Add ports 0 6 and 7 9 as outgoing ports for the VLAN Figure 31 30 egress set Command Example 31 8 12 qos priority Syntax qos priority 0 7 where 0 7 Sets the quality of service priority...

Page 238: ...mode half full and speed 10 100 1000 Mbps of the connection on the interface Selecting auto auto negotiation makes one port able to negotiate with a peer automatically to obtain the connection speed a...

Page 239: ...ed for the VID of a frame then the frame is transmitted as a tagged frame otherwise it is transmitted as an untagged frame 32 2VLAN Databases A VLAN database stores and organizes VLAN registration inf...

Page 240: ...gged VLAN Configuration and Activation Example 6 Configure your management VLAN Use the vlan vlan id command to create a VLAN VID 3 in this example for managing the switch and the switch will activate...

Page 241: ...imer for GVRP in milliseconds Each port has a single Leave All Period timer Leave All Timer must be larger than Leave Timer the default is 10000 milliseconds This command sets the switch s GARP timer...

Page 242: ...N information to other switches 32 5Port VLAN Commands You must configure the switch port VLAN settings in config interface mode 32 5 1 Set Port VID Syntax pvid VID where VID Specifies the VLAN number...

Page 243: ...he port s Use the no gvrp command to disable GVRP The following example turns off GVRP for ports 1 to 5 Figure 32 7 no gvrp Command Example 32 5 4 Modify Static VLAN Use the following commands in the...

Page 244: ...s tag against the SVLAN table 3 The switch notes what the SVLAN table says that is the SVLAN tells the switch whether or not to forward a frame and if the forwarded frames should have tags 4 Then the...

Page 245: ...enables the specified VLAN ID in the SVLAN Static VLAN table 32 7Disable VLAN Syntax vlan vlan id inactive This command disables the specified VLAN ID in the SVLAN Static VLAN table 32 8Show VLAN Sett...

Page 246: ......

Page 247: ...Appendices and Index VIII Part VIII Appendices and Index This part contains an appendix and an index...

Page 248: ...bit port paired with a mini GBIC slot One console port One RJ 45 management port Interfaces GS 3012F Eight mini GBIC slots for uplinking Four Gigabit interfaces consisting of a 10 100 1000BASE T RJ 45...

Page 249: ...Buffer 1MB excluding optional modules Uplink data buffers depend on the uplink module used see your module manual VLAN IEEE 802 1Q tag based VLAN 4094 Max IEEE 802 1p Priority Queues Eight CoS queues...

Page 250: ...3012F Main switch 3Kg LED Main switch BPS PWR SYS ALM Per Port LNK ACT FDX GS 3012 Per Port 1000 100 GS 3012F Per GBIC Slot LNK ACT Per Management Port 10 100 Dimensions Main switch GS 3012 438 W x 3...

Page 251: ...C Caution For continued protection against risk of fire replace only with the same type and fuse rating Operating Temperature 0 C 45 C 32 F to 113 F Storage Temperature 25 C 70 C 13 F to 158 F Operati...

Page 252: ...3 Bridge MIBs RFC 1493 1 2 Bridge Priority 10 5 Bridge Protocol Data Units BPDUs 10 2 Broadcast storm control 1 3 Broadcast Storm Control 12 1 C Calssifier View summary 18 4 Canonical Format Indicato...

Page 253: ...sclaimer ii DS See Differentiated Services DS field 19 1 DVLAN Table 32 1 Dynamic Link Aggregation 14 1 E egress port 7 11 Error Packet 5 4 Ethernet Address 6 2 Ethernet MIBs RFC 1643 1 2 Ethernet Por...

Page 254: ...Hello Time 10 3 10 5 Help 4 8 How SSH works 24 6 How STP Works 10 2 HTML help xxii xxiii HTTP 18 5 HTTPS 24 7 HTTPS Example 24 7 I IEEE 802 1p 6 7 IEEE 802 1Q See Tagged VLAN IEEE 802 1Q Tagged VLAN 3...

Page 255: ...ets 2 2 MTU Multi Tenant Unit 6 6 Multi tenant unit MTU xxii N Navigation Panel Links 4 4 Network Applications Bridging 1 4 Backbone 1 3 High Performance Switched Workgroup 1 5 IEEE802 1Q VLAN Applica...

Page 256: ...2 Rapid Spanning Tree Protocol 10 1 ras 23 4 Ras 23 4 Rear Panel 3 5 Rear Panel Connections 3 6 Reauthentication 15 3 Related Documentation xxiii Remote Management 24 11 repair iii Resetting the Swit...

Page 257: ...ree Protocol 1 3 STP Path Costs 10 1 STP Status 10 2 STP Terminology 10 1 Strict Priority Queuing SPQ 17 1 SVLAN Table 32 1 Switch Lockout 4 6 Switch Setup 6 6 7 3 Switching Method A 2 Synchronized Po...

Page 258: ...AN 7 1 Explicit Tagging 32 1 Forwarding 7 1 ID VID 32 1 Implicit Tagging 32 1 Introduction 6 6 Port based 7 9 Priority frame 7 1 Registration Information 32 1 Tagged VLAN 7 1 VLAN Virtual Local Area N...

Page 259: ...2F User s Guide B 8 Index WRR See Weighted Round Robin Scheduling X XMODEM upload 4 7 Z ZyNOS ZyXEL Network Operating System 23 4 ZyNOS Firmware version 6 2 ZyXEL Limited Warranty iii Note iii ZyXEL W...

Reviews:

No comments