background image

GS-4012F User’s Guide

192

Chapter 32 Access Control

32.3.3  Configuring SNMP 

From the 

Access Control 

screen, display the 

SNMP 

screen.  You can click 

Access Control 

to 

go back to the 

Access Control 

screen. 

Figure 113   

Access Control: SNMP 

The following table describes the labels in this screen. 

32.3.4  Setting Up Login Accounts  

Up to five people (one administrator and four non-administrators) may access the switch via 
web configurator at any one time. 

• An administrator is someone who can both view and configure switch changes. The 

username for the Administrator is always 

admin

. The default administrator password is 

1234

.

Note: 

It is highly recommended that you change the default administrator password 
(

1234

).

•  A non-administrator (username is something other than 

admin

) is someone who can 

view but not configure switch settings. 

Table 75   

Access Control: SNMP 

LABEL

DESCRIPTION

Get Community

Enter the get community, which is the password for the incoming Get- and GetNext- 

requests from the management station.

Set Community

Enter the set community, which is the password for incoming Set- requests from the 

management station. 

Trap Community Enter the trap community, which is the password sent with each trap to the SNMP 

manager.

Trap Destination Enter the IP addresses of up to four stations to send your SNMP traps to.

Apply

Click 

Apply

 to save your changes back to the switch.

Cancel

Click 

Cancel

 to begin configuring this screen afresh.

Summary of Contents for GS-4012F

Page 1: ...GS 4012F Ethernet Switch User s Guide Version 3 60 4 2005...

Page 2: ...tocopying manual or otherwise without the prior written permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assum...

Page 3: ...uency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely...

Page 4: ...rica or 230V AC in Europe Do NOT use the device if the power supply is damaged as it might cause electrocution If the power supply is damaged remove it from the power outlet Do NOT attempt to repair t...

Page 5: ...an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warr...

Page 6: ...2860 Soeborg Denmark sales zyxel dk 45 39 55 07 07 FINLAND support zyxel fi 358 9 4780 8411 www zyxel fi ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland sales zyxel fi 358 9 4780 8448 F...

Page 7: ...ations UK Ltd 11 The Courtyard Eastern Road Bracknell Berkshire RG12 2XB United Kingdom UK sales zyxel co uk 44 0 8702 909091 0906 7370001 UK only ftp zyxel co uk is the prefix number you enter to mak...

Page 8: ...Backbone Application 35 1 4 2 Bridging Example 35 1 4 3 High Performance Switching Example 36 1 4 4 IEEE 802 1Q VLAN Application Examples 36 1 4 4 1 Tag based VLAN Example 37 1 4 4 2 VLAN Shared Serv...

Page 9: ...9 4 3 The Status Screen 50 4 3 1 Change Your Password 54 4 4 Switch Lockout 54 4 5 Resetting the Switch 55 4 5 1 Reload the Configuration File 55 4 6 Logging Out of the Web Configurator 56 4 7 Help 56...

Page 10: ...3 Port VLAN Trunking 83 8 4 Select the VLAN Type 83 8 5 Static VLAN 84 8 5 1 Static VLAN Status 84 8 5 2 Configure a Static VLAN 85 8 5 3 Configure VLAN Port Settings 87 8 6 Port based VLANs 88 8 6 1...

Page 11: ...regation 107 15 1 2 Link Aggregation ID 108 15 2 Link Aggregation Status 108 15 3 Link Aggregation Setup 109 Chapter 16 Port Authentication 113 16 1 Overview 113 16 1 1 RADIUS 113 16 2 Configuring Por...

Page 12: ...132 20 2 Configuring Queuing 132 Chapter 21 VLAN Stacking 135 21 1 Introduction 135 21 1 1 VLAN Stacking Example 135 21 2 VLAN Stacking Port Roles 136 21 3 VLAN Tag Format 136 21 3 1 Frame Format 137...

Page 13: ...fault DVMRP Timer Values 160 Chapter 27 IP Multicast 161 27 1 Overview 161 27 2 Configuring 161 Chapter 28 Differentiated Services 163 28 1 Overview 163 28 1 1 DSCP and Per Hop Behavior 163 28 1 2 Dif...

Page 14: ...e Maintenance Screen 183 31 2 Firmware Upgrade 183 31 3 Restore a Configuration File 184 31 4 Backing Up a Configuration File 184 31 5 Load Factory Defaults 185 31 6 Reboot System 185 31 7 FTP Command...

Page 15: ...203 Chapter 34 Cluster Management 205 34 1 Overview 205 34 2 Cluster Management Status 206 34 2 1 Cluster Member Switch Management 207 34 2 1 1 Uploading Firmware to a Cluster Member Switch 207 34 3...

Page 16: ...224 39 8 1 Logging Out 225 39 9 Command Summary 225 39 9 1 User Mode 225 39 9 2 Enable Mode 226 39 9 3 General Configuration Mode 230 39 9 4 interface port channel Commands 241 39 9 5 interface route...

Page 17: ...q 263 40 8 11 wrr 263 40 8 12 egress set 264 40 8 13 qos priority 264 40 8 14 name 265 40 8 15 speed duplex 265 Chapter 41 IEEE 802 1Q Tagged VLAN Commands 267 41 1 IEEE 802 1Q Tagged VLAN Overview 26...

Page 18: ...pter 42 Troubleshooting 277 42 1 Problems Starting Up the Switch 277 42 2 Problems Accessing the Switch 277 42 2 1 Pop up Windows JavaScripts and Java Permissions 278 42 2 1 1 Internet Explorer Pop up...

Page 19: ...GS 4012F User s Guide 18 Table of Contents...

Page 20: ...16 Web Configurator Home Screen Status 50 Figure 17 Change Administrator Login Password 54 Figure 18 Resetting the Switch Via the Console Port 56 Figure 19 Web Configurator Logout Screen 56 Figure 20...

Page 21: ...icy Example 130 Figure 57 Queuing Method 132 Figure 58 VLAN Stacking Example 136 Figure 59 VLAN Stacking 138 Figure 60 Static Routing 141 Figure 61 RIP 144 Figure 62 OSPF Network Example 146 Figure 63...

Page 22: ...VRRP Example 2 VRRP Parameter Settings for VR2 on Switch B 181 Figure 100 VRRP Example 2 VRRP Status on Switch A 181 Figure 101 VRRP Example 2 VRRP Status on Switch B 181 Figure 102 Maintenance 183 Fi...

Page 23: ...te memory 224 Figure 145 show system information Command Example 247 Figure 146 show hardware monitor Command Example 248 Figure 147 show ip Command Example 249 Figure 148 show logging Command Example...

Page 24: ...Example 268 Figure 180 CPU VLAN Configuration and Activation Example 269 Figure 181 GARP STATUS Command Example 269 Figure 182 GARP Timer Command Example 270 Figure 183 GVRP Status Command Example 270...

Page 25: ...GS 4012F User s Guide 24 List of Figures...

Page 26: ...18 Static MAC Forwarding 92 Table 19 FIltering 93 Table 20 STP Path Costs 95 Table 21 STP Port States 96 Table 22 Spanning Tree Protocol Status 97 Table 23 Spanning Tree Protocol Configuration 98 Tab...

Page 27: ...3 Table 57 IGMP 155 Table 58 DVMRP 159 Table 59 DVMRP Default Timer Values 160 Table 60 IP Multicast 162 Table 61 DiffServ 164 Table 62 Default DSCP IEEE802 1p Mapping 165 Table 63 DiffServ DSCP Setti...

Page 28: ...4 Troubleshooting the Start Up of Your Switch 277 Table 95 Troubleshooting Accessing the Switch 277 Table 96 Troubleshooting the Password 285 Table 97 General Product Specifications 287 Table 98 Manag...

Page 29: ...GS 4012F User s Guide 28 List of Tables...

Page 30: ...creens and supplementary information ZyXEL Glossary and Web Site Please refer to www zyxel com for an online glossary of networking terms and additional support documentation Syntax Conventions Enter...

Page 31: ...omments questions or suggestions for improvement to techwriters zyxel com tw or send regular mail to The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial...

Page 32: ...P interface also known as an IP routing domain is not bound to a physical port Configure an IP routing domain to allow the switch to route traffic between different networks DHCP DHCP Dynamic Host Con...

Page 33: ...pe etc Queuing Queuing is used to help solve performance degradation when there is network congestion Two scheduling services are supported Strict Priority Queuing SPQ and Weighted Round Robin WRR Thi...

Page 34: ...runs both the IPv4 protocol with IP Multicast support and the IGMP protocol VRRP Virtual Routing Redundancy Protocol VRRP defined in RFC 2338 allows you to create redundant backup gateways to ensure...

Page 35: ...witch 1 3 Hardware Features This section describes the ports on the switch Mini GBIC Slots Install SPF transceivers in these slots to connect to other Ethernet switches at longer distances than the Et...

Page 36: ...eed applications on the server To expand the network simply add more networking devices such as switches routers computers print servers etc Figure 1 Backbone Application 1 4 2 Bridging Example In thi...

Page 37: ...vide the same bandwidth as ATM at much lower cost while still being able to use existing adapters and switches Moreover the current LAN structure can be retained as all ports can freely communicate wi...

Page 38: ...n be modified at any time by adding moving or changing ports without any re cabling Figure 4 Tag based VLAN Application 1 4 4 2 VLAN Shared Server Example Shared resources such as a server can be used...

Page 39: ...GS 4012F User s Guide 38 Chapter 1 Getting to Know Your Switch...

Page 40: ...is enough clearance around the switch to allow air circulation and the attachment of cables and the power cord 4 Remove the adhesive backing from the rubber feet 5 Attach the rubber feet to each corn...

Page 41: ...eavy Take all necessary precautions to anchor the rack securely before installing the unit 2 2 2 Attaching the Mounting Brackets to the Switch 1 Position a mounting bracket on one side of the switch l...

Page 42: ...Connection 41 Figure 8 Mounting the Switch on a Rack 2 Using a 2 Philips screwdriver install the M5 flat head screws through the mounting bracket holes into the rack 3 Repeat steps 1 and 2 to attach...

Page 43: ...GS 4012F User s Guide 42 Chapter 2 Hardware Installation and Connection...

Page 44: ...control Connect the male 9 pin end of the console cable to the console port of the switch Connect the female end to a serial port COM1 COM2 or other COM port of your computer Table 1 Front Panel PORT...

Page 45: ...actory default negotiation settings for the Ethernet ports on the switch are Speed Auto Duplex Auto Flow control on 3 1 3 SFP Slots The switch comes with 12 SFP Small Form factor Pluggable slots for m...

Page 46: ...tomatically detects the installed transceiver Check the LEDs to verify that it is functioning properly Figure 11 Installed Transceiver 3 1 3 2 Transceiver Removal Use the following steps to remove a m...

Page 47: ...the female end of power cord to the power receptacle on the rear panel Connect the other end of the supplied power cord to a 100 240VAC 1 5A power outlet Make sure that no objects obstruct the airflo...

Page 48: ...a 1000 Mbps Ethernet network is up The link to a 10 Mbps Ethernet network is up when the 100 LED is on Off No Ethernet device is connected to this port or the port is transmitting at 100 Mbps 100 Ambe...

Page 49: ...GS 4012F User s Guide 48 Chapter 3 Hardware Overview...

Page 50: ...he web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScript enabled by default Java permissio...

Page 51: ...The Status Screen The Status screen is the first screen that displays when you access the web configurator The following figure shows the navigating components of a web configurator screen Figure 16...

Page 52: ...ION MANAGEMENT System Info General Setup Switch Setup IP Setup Port Setup VLAN VLAN Status VLAN Port Setting Static VLAN Static MAC Forwarding Filtering Spanning Tree Protocol Status Spanning Tree Pro...

Page 53: ...queues IP Setup This link takes you to a screen where you can configure the IP address subnet mask necessary for switch management and DNS domain name server and set up to 64 IP routing domains Port...

Page 54: ...y configuring the TCP IP parameters manually RIP This link takes you to a screen where you can configure the RIP Routing Information Protocol direction and versions OSPF This link takes you to screens...

Page 55: ...l others out from the switch by 1 Deleting the management VLAN default is VLAN 1 2 Deleting all IP routing domains 3 Deleting all port based VLANs with the CPU port as a member The CPU port is the man...

Page 56: ...will lose all previous configurations and the speed of the console port will be reset to the default of 9600bps with 8 data bit no parity one stop bit and flow control set to none The password will al...

Page 57: ...management session for security reasons Figure 19 Web Configurator Logout Screen 4 7 Help The web configurator s online help has descriptions of individual screens and some supplementary information C...

Page 58: ...is not bound to a physical port The default IP address of the switch is 192 168 1 1 with a subnet mask of 255 255 255 0 In the example network since the RD network is already in the same IP interface...

Page 59: ...is IP interface to belong This is the same as the VLAN ID you configure in the Static VLAN screen 6 Click Add 5 1 2 Configuring DHCP Server Settings You can set the switch to assign network informatio...

Page 60: ...group in which the port s belongs You can do this with port based VLAN or tagged static VLAN with fixed port members In this example you want to configure port 10 as a member of VLAN 2 Figure 21 Initi...

Page 61: ...ort 10 to be a permanent member of the VLAN only 4 To ensure that VLAN unaware devices such as computers and hubs can receive frames properly clear the TX Tagging check box to set the switch to remove...

Page 62: ...abling RIP To exchange routing information with other routing devices across different routing domains enable RIP Routing Information Protocol in the RIP screen 1 Click IP Application and RIP in the n...

Page 63: ...GS 4012F User s Guide 62 Chapter 5 Initial Setup Example...

Page 64: ...and port details screens 6 1 Overview The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details 6 2 Port Status Summary To view t...

Page 65: ...ocol state of the port See the chapter on STP for details on STP states LACP This fields displays whether LACP Link Aggregation Control Protocol has been enabled on the port TxPkts This field shows th...

Page 66: ...field shows the training state of the ports The states are FORWARDING forwarding which means the link is functioning normally or STOP the port is stopped to break a loop or duplicate path LACP This f...

Page 67: ...lay information on collisions while transmitting Single This is a count of successfully transmitted packets for which transmission is inhibited by exactly one collision Multiple This is a count of suc...

Page 68: ...24 1518 This field shows the number of packets including bad packets received that were between 1024 and 1518 octets in length Giant This field shows the number of packets dropped because they were bi...

Page 69: ...GS 4012F User s Guide 68 Chapter 6 System Status and Port Statistics...

Page 70: ...creen also allows you to set the system time manually or get the current time and date from an external server when you turn on your switch The real time is then displayed in the switch logs The Switc...

Page 71: ...t The switch has temperature sensors that are capable of detecting and reporting if the temperature rises above the threshold You may choose the temperature unit Centigrade or Fahrenheit in this field...

Page 72: ...minimum speed at which a normal fan should work Status Normal indicates that this fan is functioning above the minimum speed Error indicates that this fan is functioning below the minimum speed Volta...

Page 73: ...icate an administrator user for switch management Configure the local user accounts in the Access Control Logins screen The RADIUS is an external server Before you specify the priority make sure you h...

Page 74: ...you may have to use trial and error to find a protocol that works The main differences between them are the time format Daytime RFC 867 format is day month year time zone of the server Time RFC 868 f...

Page 75: ...affic destined for multicast groups that it has learned from IGMP snooping or that you have manually configured to ports that are members of that group The switch discards multicast traffic destined f...

Page 76: ...ion Join Timer Join Timer sets the duration of the Join Period timer for GVRP in milliseconds Each port has a Join Period timer The allowed Join Time range is between 100 and 65535 milliseconds the de...

Page 77: ...ters You can configure multiple routing domains on the same VLAN as long as the IP address ranges for the domains do not overlap To change the IP address of the switch in a routing domain simply add a...

Page 78: ...and the switch is to send packets originating from itself such as SNMP traps or packets with unknown source Select Out of band to have the switch send the packets to the management port labelled MGMT...

Page 79: ...mask of an IP routing domain in dotted decimal notation For example 255 255 255 0 VID Enter the VLAN identification number to which an IP routing domain belongs Add Click Add to save the new rule to...

Page 80: ...Choices are Auto 10M Half Duplex 10M Full Duplex 100M Half Duplex 100M Full Duplex and 1000M Full Duplex Selecting Auto auto negotiation allows one port to negotiate with a peer port automatically to...

Page 81: ...mimicking a state of packet collision causing the sending port to temporarily stop sending signals and resend later Select Flow Control to enable it 802 1P Priority This priority value is added to in...

Page 82: ...d as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 212 VLANs Note that user priority and VLAN ID are independent of each other A fram...

Page 83: ...egister VLAN membership across switches 8 2 1 GARP GARP Generic Attribute Registration Protocol allows network switches to register and de register attribute values with other GARP participants within...

Page 84: ...own to those switches to pass through their VLAN trunking port s Figure 30 Port VLAN Trunking 8 4 Select the VLAN Type Select a VLAN type in the Switch Setup screen VLAN Administrative Control Registr...

Page 85: ...tag sent to a group whether it has a VLAN tag or not blocked from a VLAN group regardless of its VLAN tag You can also tag all outgoing frames that were previously untagged from a port with the specif...

Page 86: ...marked as T an untagged port is marked as U and ports not participating in a VLAN are marked as Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN...

Page 87: ...AN group using GVRP This is the default selection Select Fixed for the port to be a permanent member of this VLAN group Select Forbidden if you want to prohibit the port from joining this VLAN group T...

Page 88: ...LABEL DESCRIPTION GVRP GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network Select this check...

Page 89: ...VLAN Select Port Based as the VLAN Type in the Switch Setup screen and then click VLAN from the navigation panel to display the next screen PVID Specify the VLAN group ID or VID that will be added to...

Page 90: ...GS 4012F User s Guide Chapter 8 VLAN 89 Figure 35 Port Based VLAN Setup All Connected Figure 36 Port Based VLAN Setup Port Isolation The following table describes the labels in this screen...

Page 91: ...ing These are the ingress ports an ingress port is an incoming port that is a port through which a data packet enters If you wish to allow two subscriber ports to talk to each other you must define th...

Page 92: ...a port This may reduce the need for broadcasting Static MAC address forwarding together with port security allow only computers in the MAC address table on a port to access the switch See Chapter 17...

Page 93: ...automatically forwarded Add After you set the fields above click Add to insert a new rule Cancel Click Cancel to reset the fields Clear Click Clear to begin configuring this screen afresh Index Click...

Page 94: ...the navigation panel to display the screen as shown next Scroll down to the bottom of the screen to view the summary table for the settings Figure 38 Filtering The following table describes the relat...

Page 95: ...ays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults Index This fie...

Page 96: ...ing to the speed of the link to which a port is attached The slower the media the higher the cost On each bridge the root port is the port through which this bridge communicates with the root It is th...

Page 97: ...Max Age the bridge assumes that the link to the root bridge is down This bridge then initiates negotiations with other bridges to reconfigure the network to re establish a valid network topology 11 1...

Page 98: ...is the root switch Hello Time second This is the time interval in seconds at which the root switch transmits a configuration message The root bridge determines Hello Time Max Age and Forwarding Delay...

Page 99: ...isplays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt STP statistic polli...

Page 100: ...he switch ports attached to the network The allowed range is 6 to 40 seconds Forwarding Delay This is the maximum time in seconds a switch will wait before changing states This delay is required becau...

Page 101: ...GS 4012F User s Guide 100 Chapter 11 Spanning Tree Protocol...

Page 102: ...the screen as shown next Figure 41 Bandwidth Control The following table describes the related labels in this screen Table 24 Bandwidth Control LABEL DESCRIPTION Active Select this check box to enable...

Page 103: ...ser s Guide 102 Chapter 12 Bandwidth Control Apply Click Apply to save the settings Cancel Click Cancel to reset the fields to your previous configuration Table 24 Bandwidth Control continued LABEL DE...

Page 104: ...second on the ports When the maximum number of allowable broadcast multicast and or DLF packets is reached per second the subsequent packets are discarded Enable this feature to reduce broadcast multi...

Page 105: ...st pkt s Select this option and specify how many broadcast packets the port receives per second Multicast pkt s Select this option and specify how many multicast packets the port receives per second D...

Page 106: ...ffic from the mirror port the port you copy the traffic to without interference 14 2 Port Mirroring Configuration Click Advanced Application Mirroring in the navigation panel to display the configurat...

Page 107: ...e it in more detail without interfering with the traffic flow on the original port s Select this port from this drop down list box Port This field displays the port number Mirrored Select this option...

Page 108: ...LACP port trunking The switch supports the link aggregation IEEE802 3ad standard This standard describes the Link Aggregate Control Protocol LACP which is a protocol that dynamically creates and mana...

Page 109: ...ys by default Figure 44 Link Aggregation Control Protocol Status The following table describes the labels in this screen Table 27 Link Aggregation ID Local Switch SYSTEM PRIORITY MAC ADDRESS KEY PORT...

Page 110: ...ng multiple ports Aggregator ID Refer to Section 15 1 2 on page 108 for more information on this field Enabled Port These are the ports you have configured in the Link Aggregation screen to be in the...

Page 111: ...tch with the lowest system priority and lowest port number if system priority is the same becomes the LACP server The LACP server controls the operation of LACP setup Enter a number to set the priorit...

Page 112: ...r three tries then it is deemed to be down and is removed from the trunk Set a short timeout one second for busy trunked links to ensure that disabled ports are removed from the trunk group as soon as...

Page 113: ...GS 4012F User s Guide 112 Chapter 15 Link Aggregation...

Page 114: ...he memory capacity of the device In essence RADIUS authentication allows you to validate an unlimited number of users from a central location Figure 46 RADIUS Server 16 2 Configuring Port Authenticati...

Page 115: ...ls in this screen Table 31 Port Authentication 802 1x LABEL DESCRIPTION Active Select this check box to permit 802 1x authentication on the switch Note You must first enable 802 1x authentication on t...

Page 116: ...t Authentication 802 1x continued LABEL DESCRIPTION Table 32 Port Authentication RADIUS LABEL DESCRIPTION Authentication Server IP Address Enter the IP address of the external RADIUS server in dotted...

Page 117: ...GS 4012F User s Guide 116 Chapter 16 Port Authentication...

Page 118: ...h a port on the switch For maximum port security enable this feature disable MAC address learning and configure static MAC address es for a port It is not recommended you disable Port Security togethe...

Page 119: ...raffic For MAC address learning to occur on a port the port itself must be active with address learning enabled Limited Number of Learned MAC Address Use this field to limit the number of dynamic MAC...

Page 120: ...ddress and or port number A layer 3 classifier groups traffic according to the IP address and or TCP UDP protocol number Configure QoS on the switch to group and prioritize application traffic and fin...

Page 121: ...e name up to 32 printable ASCII characters for this rule This is for identification purpose only Packet Format Specify the format of the packet Choices are All 802 3 tagged 802 3 untagged Ethernet II...

Page 122: ...ffic from any DSCP or select the second option and specify a DSCP DiffServ Code Point number between 0 and 63 in the field provided IP Protocol Select an IP protocol type or select Other and enter the...

Page 123: ...guration Clear Click Clear to set the above fields back to the factory defaults Table 34 Classifier continued LABEL DESCRIPTION Table 35 Classifier Summary Table LABEL DESCRIPTION Index This field dis...

Page 124: ...ba ad 4f 81 on port 2 After you have configured a classifier you can configure a policy in the Policy screen to define action s on the classified traffic flow XNS Compat 0807 Banyan Systems 0BAD BBN S...

Page 125: ...GS 4012F User s Guide 124 Chapter 18 Classifier Figure 53 Classifier Example...

Page 126: ...mation for every flow In addition applications do not have to request a particular service or give advanced notice of where the traffic is going 19 1 2 DSCP and Per Hop Behavior DiffServ defines a new...

Page 127: ...s Guide 126 Chapter 19 Policy Rule Click Advanced Applications and then Policy Rule in the navigation panel to display the screen as shown Figure 54 Policy The following table describes the labels in...

Page 128: ...63 TOS Specify the type of service TOS priority level Metering You can configure the desired bandwidth available to a traffic flow Traffic that exceeds the maximum bandwidth allocated in cases where t...

Page 129: ...ing or to be sent to the CPU to the egress port to send the broadcast multicast DLF marked to drop or CPU frames to the egress port Select Set the packet s VLANID to set the VLAN ID of the packet with...

Page 130: ...using the Example classifier refer to Section 18 4 on page 123 Name Enter a descriptive name up to 32 printable ASCII characters for identification purposes Classifier s This field displays the name s...

Page 131: ...GS 4012F User s Guide 130 Chapter 19 Policy Rule Figure 56 Policy Example...

Page 132: ...a source from monopolizing the bandwidth The switch has eight physical queues Q0 to Q7 Q7 has the highest priority and Q0 has the lowest 20 1 1 Strict Priority Queuing SPQ Strict Priority Queuing SPQ...

Page 133: ...s in a looping fashion until a queue is empty Weighted Round Robin Scheduling WRR uses the same algorithm as round robin scheduling but services queues based on their priority and queue weight the num...

Page 134: ...ghted Round Robin Scheduling WRR services queues on a rotating basis based on their queue weight the number you configure in the queue Weight field Queues with larger weights get more service than que...

Page 135: ...GS 4012F User s Guide 134 Chapter 20 Queuing Method...

Page 136: ...e based on specific VLANs for many different customers A service provider s customers may require a range of VLANs to handle multiple applications A service provider s customers can assign their own i...

Page 137: ...as untagged so a second VLAN tag outer VLAN tag can be added Note Static VLAN Tx Tagging MUST be disabled on a port where you choose Normal or Access Port Select Tunnel available for Gigabit ports on...

Page 138: ...dd the tag Priority refers to the IEEE 802 1p standard that allows the service provider to prioritize traffic based on the class of service CoS the customer has paid for On the switch configure priori...

Page 139: ...n the Others text field Port The port number identifies the port you are configuring Role Select Normal to have the switch ignore frames received or transmitted on this port with VLAN stacking tags An...

Page 140: ...evel of the outer tag 0 is the lowest priority level and 7 is the highest Note Configure the priority level of the inner IEEE 802 1Q tag in the Port Setup screen Apply Click Apply to save your changes...

Page 141: ...GS 4012F User s Guide 140 Chapter 21 VLAN Stacking...

Page 142: ...to activate deactivate this static route Name Enter a descriptive name up to 32 printable ASCII characters for identification purposes Destination IP Address This parameter specifies the IP network a...

Page 143: ...of the route Click a number to edit the static route entry Active This field displays Yes when the static route is activated and NO when it is deactivated Name This field displays the descriptive name...

Page 144: ...ived None the switch will not send any RIP packets and will ignore any RIP packets received The Version field controls the format and the broadcasting method of the RIP packets that the switch sends i...

Page 145: ...work This field displays the IP interface configured on the switch Refer to the section on IP Setup for more information on configuring IP domains Direction Select the RIP direction from the drop down...

Page 146: ...reas Each area represents a group of adjacent networks All areas are connected to a backbone also known as area 0 The backbone is the transit area to route packets between two areas A stub area at the...

Page 147: ...r IDs their associated links and path costs Each device can then use the link state database and Dijkstra algorithm to compute the least cost paths to network destinations 24 1 3 Interfaces and Virtua...

Page 148: ...nning or not Down Interface The text box displays the OSPF status of the interface s on the switch Neighbor The text box displays the status of the neighboring router participating in the OSPF network...

Page 149: ...ackup designated router Time Intervals Configured This field displays the time intervals in seconds configured Neighbor Count This field displays the number of neighbor routers Adjacent Neighbor Count...

Page 150: ...learned through other routing protocols RIP and Static into the OSPF network transparently Active Select this option to activate route redistribution for routes learn through the selected protocol Typ...

Page 151: ...SCII character password To configure an area set the related fields in the OSPF Configuration screen Figure 65 OSPF Configuration Area Setup The following table describes the related labels in this sc...

Page 152: ...a default route into a stub area for routes which are external to an OSPF domain If you do not set a route cost no default route is added Add Click Add to apply the changes Cancel Click Cancel to sta...

Page 153: ...lect an authentication method Choices are Same as Area None default Simple and MD5 To participate in an OSPF network you must set the authentication method and or password the same as the associated a...

Page 154: ...ing table describes the related labels in this screen Apply Click Apply to save the changes Cancel Click Cancel to start configuring the above fields again Table 55 OSPF Interface continued LABEL DESC...

Page 155: ...on number of the authentication you want to use Key When you select Simple in the Authentication field enter a password eight character long When you select MD5 in the Authentication field enter a pas...

Page 156: ...onnected networks to gather group membership After that the switch periodically updates this information 25 2 Configuring Click IP Application IGMP in the navigation panel to display the screen as sho...

Page 157: ...e IP Setup section for more information on configuring IP domains Version Select an IGMP version from the drop down list box Choices are IGMP v1 IGMP v2 and None Apply Click Apply to save your changes...

Page 158: ...RP otherwise you see the screen as in Figure 72 on page 159 26 2 How DVMRP Works DVMRP uses the Reverse Path Multicasting RPM algorithm to generate an IP Multicast delivery tree Multicast packets are...

Page 159: ...perform Reverse Path Forwarding RPF checks on incoming multicast packets RPF checks prevent duplicate packets being filtered when loops exist in the network topology DVMRP prunes trim the multicast de...

Page 160: ...ulticasting You should reduce this value if you do not wish to flood Layer 3 devices many hops away with multicast traffic This applies only to multicast traffic this switch sends out Index Index is t...

Page 161: ...hanged using line commands Please see the commands chapter later in this User s Guide Table 59 DVMRP Default Timer Values DVMRP FIELD DEFAULT VALUE Probe interval 10 sec Report interval 35 sec Route e...

Page 162: ...he network IP Multicast is a third way to deliver IP packets to a group of hosts on the network not everybody You can configure the switch to untag remove the VLAN tags from IP multicast packets that...

Page 163: ...ess Untag Vlan ID The switch removes the VLAN tag from IP multicast packets belonging to the specified VLAN before transmission on this port Enter a VLAN group ID in this field Enter 0 to set the swit...

Page 164: ...applications do not have to request a particular service or give advanced notice of where the traffic is going 28 1 1 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field...

Page 165: ...tivating DiffServ Activate DiffServ to allow the switch to enable DiffServ and apply marking rules and IEEE802 1p priority mapping on the selected port s Click IP Application DiffServ in the navigatio...

Page 166: ...pping click the DSCP Setting link in the DiffServ screen to display the screen as shown next Figure 79 DiffServ DSCP Setting The following table describes the labels in this screen Port This field dis...

Page 167: ...LABEL DESCRIPTION 0 63 This is the DSCP classification identification number To set the IEEE802 1p priority mapping select the priority level from the drop down list box Apply Click Apply to save the...

Page 168: ...e computer must be manually configured 29 1 1 DHCP modes The switch can be configured as a DHCP server or DHCP relay agent If you configure the switch as a DHCP server it will maintain the pool of add...

Page 169: ...EL DESCRIPTION Index This is the index number VID This field displays the ID number of the VLAN group to which this DHCP settings apply Server Status This field displays the starting DHCP client IP ad...

Page 170: ...gateway device Primary Secondary DNS Server Enter the IP addresses of the DNS servers The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask Add Click Add to inse...

Page 171: ...s The following shows an example Figure 83 DHCP Server Configuration Example 29 4 Configuring DHCP Relay Configure DHCP relay on the switch if the DHCP clients and the DHCP server are not in the same...

Page 172: ...ver Slot ID 1 byte Port ID 1 byte VLAN ID 2 bytes System name up to 32 bytes this is optional Configure DHCP relay in the DHCP Relay screen Click IP Application DHCP in the navigation panel and click...

Page 173: ...mple Configure the DHCP Relay screen as shown Make sure you select the Option 82 check box to set the switch to send additional information such as the VLAN ID together with the DHCP requests to the D...

Page 174: ...virtual router A layer 3 device having the same IP address is the preferred master router while the other Layer 3 devices are the backup routers The master router forwards traffic for the virtual rout...

Page 175: ...s of the virtual router This field is Master indicating that the GS 4012F functions as the master router This field is Backup indicating that the GS 4012F functions as a backup router This field displ...

Page 176: ...in in the IP Setup screen see the Section 7 7 on page 76 for more information Click IP Application VRRP and click the Configuration link to display the VRRP Configuration screen as shown next Note You...

Page 177: ...that owns the IP address es associated with the virtual router is 255 30 3 2 3 Preempt Mode If the master router is unavailable a backup router assumes the role of the master router However when anot...

Page 178: ...one network Advertisement Interval Specify the number of seconds between Hello message transmissions The default is 1 Preempt Mode Select this option to activate preempt mode Priority Enter a number...

Page 179: ...68 1 100 The host computer X is set to use VR1 as the default gateway Table 70 VRRP Configuring VRRP Parameters LABEL DESCRIPTION Index This field displays the index number of an entry Active This fie...

Page 180: ...outer Configure the VRRP parameters in the VRRP Configuration screens on the switches as shown in the figures below Figure 93 VRRP Example 1 VRRP Parameter Settings on Switch A Figure 94 VRRP Example...

Page 181: ...ckup a virtual router using VRRP You wish to configure switch A as the master router for virtual router VR1 and as a backup for virtual router VR2 On the other hand switch B is the master for VR2 and...

Page 182: ...VR2 on Switch A Figure 99 VRRP Example 2 VRRP Parameter Settings for VR2 on Switch B After configuring and saving the VRRP configuration the VRRP Status screens for both switches are shown next Figur...

Page 183: ...GS 4012F User s Guide 182 Chapter 30 VRRP...

Page 184: ...Upgrade Make sure you have downloaded and unzipped the correct model firmware and version to your computer before uploading to the device Note Be sure to upload the correct model firmware as uploadin...

Page 185: ...een below from which you can locate it After you have specified the file click Restore config is the name of the configuration file on the switch so your backup configuration file is automatically ren...

Page 186: ...Factory Default Conformation 2 Click OK to display the screen shown next Figure 107 Load Factory Default Start 3 Click OK to begin resetting all switch configurations to the factory defaults and then...

Page 187: ...e of your choosing ZyNOS ZyXEL Network Operating System sometimes referred to as the ras file is the system firmware and has a bin filename extension 31 7 1 1 Example FTP Commands ftp put firmware bin...

Page 188: ...iguration file on your computer config cfg to the switch and renames it to config Likewise get config config cfg transfers the configuration file on the switch to your computer and renames it to confi...

Page 189: ...WAN Restrictions FTP over WAN will not work when Telnet service is disabled in Secured Client Sets The IP address es in the Secured Client Sets menu does not match the client IP address If it does not...

Page 190: ...onsole Port Priority A console port or Telnet session can coexist with one FTP session up to five Web sessions five different usernames and passwords and or limitless SNMP access control sessions 32 2...

Page 191: ...ed network consists of two main components agents and a manager An agent is a management software module that resides in a managed switch the GS 4012F An agent translates the local management informat...

Page 192: ...rted are outlined in the following table Table 73 SNMP Commands COMMAND DESCRIPTION Get Allows the manager to retrieve an object variable from the agent GetNext Allows the manager to retrieve the next...

Page 193: ...234 Note It is highly recommended that you change the default administrator password 1234 A non administrator username is something other than admin is someone who can view but not configure switch se...

Page 194: ...rator This is the default administrator account with the admin user name You cannot change the default administrator user name Only the administrator has read write access Old Password Type the existi...

Page 195: ...t to the SSH server The server identifies itself with a host key The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server The clien...

Page 196: ...cket Layer SSL is an application level protocol that enables secure transactions of data by ensuring confidentiality an unauthorized party cannot read the transferred data authentication one party can...

Page 197: ...eb site address where switch IP Address is the IP address or domain name of the switch you wish to access 32 8 1 Internet Explorer Warning Messages When you attempt to access the switch HTTPS server a...

Page 198: ...d by an Unknown Authority screen pops up asking if you trust the server certificate Click Examine Certificate if you want to verify that the certificate is from the switch If Accept this certificate t...

Page 199: ...120 Security Certificate 2 Netscape 32 8 3 The Main Screen After you accept the certificate and enter the login username and password the switch main screen appears The lock displayed in the bottom r...

Page 200: ...GS 4012F User s Guide Chapter 32 Access Control 199 Figure 121 Login Screen Internet Explorer Figure 122 Login Screen Netscape...

Page 201: ...e 77 Access Control Service Access Control LABEL DESCRIPTION Services Services you may use to access the switch are listed here Active Select this option for the corresponding services that you want t...

Page 202: ...client set Clear the check box if you wish to temporarily disable the set without deleting it Start Address End Address Configure the IP address range of trusted computers from which you can manage th...

Page 203: ...GS 4012F User s Guide 202 Chapter 32 Access Control...

Page 204: ...table describes the labels in this screen Table 79 Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty the text box and res...

Page 205: ...GS 4012F User s Guide 204 Chapter 33 Diagnostic...

Page 206: ...with one another In the following example switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members Figure 126 Clustering Applicat...

Page 207: ...are MAC address The Number of Member This field displays the number of switches that make up this cluster The following fields describe the cluster member switches Index You can manage cluster member...

Page 208: ...to that cluster member switch s web configurator home page This cluster member web configurator home page and the home page that you d see if you accessed it directly are different Figure 128 Cluster...

Page 209: ...Jul 01 12 00 config 00 a0 c5 d4 88 bf 226 File sent OK ftp 463 bytes received in 0 00Seconds 463000 00Kbytes sec ftp bin 200 Type I OK ftp put 350du1 bin fw 00 a0 c5 d4 88 bf 200 Port command okay 15...

Page 210: ...e up to 20 printable characters no spaces are allowed VID This is the VLAN ID and is only applicable if the switch is set to 802 1Q VLAN All switches must be directly connected and in the same VLAN gr...

Page 211: ...configurator password Add Click Add to save this part of the screen to the switch Cancel Click Cancel to begin configuring this part of the screen afresh Refresh Click Refresh to perform auto discove...

Page 212: ...ermine how to forward frames See the following figure 1 The switch examines a received frame and learns the port on which this source MAC address came 2 The switch checks to see if the frame s destina...

Page 213: ...elow MAC Click this button to display and arrange the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to display and...

Page 214: ...ng figure 1 The switch examines a received packet and learns the port on which this source IP address came 2 The switch checks to see if the packet s destination IP address matches a source IP address...

Page 215: ...utton to display and arrange the data according to IP address VID Click this button to display and arrange the data according to VLAN group Port Click this button to display and arrange the data accor...

Page 216: ...to the device If no entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The switch fills in its own MAC and IP address in the sender address fields and puts the...

Page 217: ...is the ARP Table entry number IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below MAC Address This is the MAC address of the device w...

Page 218: ...38 2 Viewing the Routing Table Click Management Routing Table in the navigation panel to display the screen as shown Figure 136 Routing Table Status The following table describes the labels in this s...

Page 219: ...GS 4012F User s Guide 218 Chapter 38 Routing Table...

Page 220: ...gure the switch using either the CLI Command Line Interface or web configurator the settings are saved as a series of commands in a configuration file on the switch You can perform the following with...

Page 221: ...tial Screen When you turn on your switch it performs several internal tests as well as line initialization You can view the initialization information using the console port After the initialization t...

Page 222: ...mp server contact system contact location system location means that the contact and location fields are optional Command refers to a command used in the command line interface CI command The symbol m...

Page 223: ...Enter help to display a list of available commands and the corresponding sub commands Enter to display a list of commands you can use Figure 139 CLI Help List of Commands Example 1 ras help Commands...

Page 224: ...and modes User Enable and Configure When you first log into the CLI the initial command mode is the User mode The User mode commands are a subset of the Enable mode commands The User mode command prom...

Page 225: ...10 To configure the routing domain enter interface route domain followed by the domain IP address and subnet mask bits for example interface route domain 192 168 1 1 24 Use the router commands to con...

Page 226: ...er s Guide for more background information 39 9 1 User Mode The following table describes the commands available for User mode Table 88 Command Summary User Mode COMMAND DESCRIPTION enable Accesses En...

Page 227: ...ig tftp ip remote file Backs up running configuration to the specified TFTP server with the specified file name tftp config ip remote file Restores configuration with the specified filename from the s...

Page 228: ...server Displays DHCP server settings server vlnd id Displays DHCP server settings in a specified VLAN diffserv Displays general DiffServ settings garp Displays GARP information hardware monitor C F D...

Page 229: ...multi login Displays multi login information policy Displays all policy related information name Displays the specified policy related information port access authenticator Displays all port authentic...

Page 230: ...nk Displays link aggregation information vlan Displays the status of all VLANs vlan id Displays the status of the specified VLAN vlan stacking Displays VLAN stacking settings vlan1q gvrp Displays GVRP...

Page 231: ...ther num ip ipx arp rarp appletalk decnet sna netbios dlc source mac src mac addr source port port num destination mac dest mac addr dscp 0 63 ip protocol protocol num tcp udp icmp egp ospf rsvp igmp...

Page 232: ...evious command s that you have executed hostname name_string Sets the switch s name for identification purposes https cert regeneration rsa dsa Re generates a certificate timeout 0 65535 Sets the HTTP...

Page 233: ...name name mac mac addr vlan vlan id drop src dst both Configures a static MAC address port filtering rule inactive Disables a static MAC address port filtering rule mac forward name name mac mac addr...

Page 234: ...meout to the default of 300 seconds igmp snooping Disables IGMP snooping ip Sets the management IP address to the default value route ip mask Removes a specified IP static route route ip mask inactive...

Page 235: ...t s port security port list Disables port security on the specified ports learn inactive Enables MAC address learning on the specified ports radius server Disables the use of authentication from the R...

Page 236: ...ip Removes the specified remote hosts from the list of all known hosts known hosts host ip 1024 ssh rsa ssh dsa Removes remote known hosts with the specified public key 1024 bit RSA1 RSA or DSA storm...

Page 237: ...uishes traffic into flows based on the configured criteria A policy rule ensures that a traffic flow gets the requested treatment in the network port access authenticator Enables 802 1x authentication...

Page 238: ...threshold ttl value Sets the DVMRP threshold value igmp Enables and enters the IGMP configuration mode exit Leaves the IGMP configuration mode ospf router id Enables and enters the OSPF configuration...

Page 239: ...for the virtual link for identification purposes exit Leaves the router OSPF configuration mode network ip addr bits area area id Creates an OSPF area no area area id Removes the specified area no are...

Page 240: ...arn static routing information which will use the specified metric information rip Enables and enters the RIP configuration mode exit Leaves the RIP configuration mode vrrp network ip address mask bit...

Page 241: ...e geographic location and the name of the person in charge of this switch get community property Sets the get community set community property Sets the set community trap community property Sets the t...

Page 242: ...ime ntp Sets the time server protocol server ip Sets the IP address of your time server trunk T1 T2 T3 T4 T5 T6 Activates a trunk group T1 T2 T3 T4 T5 T6 l acp Enables LACP for a trunk group T1 T2 T3...

Page 243: ...pkt s Sets how many broadcast packets the interface receives per second diffserv Enables DiffServ on the port s dlf limit Enables the Destination Lookup Failure DLF limit pkt s Sets the interface DLF...

Page 244: ...s Sets how many multicast packets the port s receives per second name port name string Sets a name for the port s Enter a descriptive name up to nine printable ASCII characters no bandwidth limit Disa...

Page 245: ...connection speed and duplex mode that both ends support spq Sets the port s to use Strict Priority Queuing test Performs an interface loopback test vlan stacking priority 0 7 Sets the priority of the...

Page 246: ...t 1 65535 Sets the OSPF cost in this routing domain ospf message digest key k Sets the OSPF authentication key in this routing domain rip direction Outgoing In Sets the RIP direction in this routing d...

Page 247: ...default IP address of 0 0 0 0 if you do not configure a static IP address ip address default gateway Deletes the default gateway from this VLAN ip address ip address mask Deletes the IP address and su...

Page 248: ...nformation Syntax show system information This command shows the general system information such as the firmware version and system up time An example is shown next Figure 145 show system information...

Page 249: ...ollowing figure shows the default interface settings ras show hardware monitor c Temperature Unit c Temperature Current MAX MIN Threshold Status MAC 33 0 34 0 32 0 65 0 Normal CPU 32 0 32 0 31 0 65 0...

Page 250: ...1 1 Netmask 255 255 255 0 VID 1 ras ras show logging 0 Thu Jan 1 00 00 11 1970 PP2b INFO adjtime task pause 1 day 7 Thu Jan 1 01 06 26 1970 PP23 ERROR ospfReadConf can t get spOSPFArea_t 10 Thu Jan 1...

Page 251: ...ss es stored in the switch The following example shows the static MAC address table ras show interface 2 Port Info Port NO 2 Link 100M F Statuss FORWARDING LACP Disabled TxPkts 2778 RxPkts 2043 Errors...

Page 252: ...ermanent 2 00 50 ba ad 4f 81 1 Permanent 1 00 a0 c5 fe ea 71 CPU Permanent 2 00 a0 c5 fe ea 71 CPU Permanent ras ip The IP address of an Ethernet device in band out of band vlan vlan id Specifies the...

Page 253: ...To enable RSTP on a port Enter spanning tree followed by the port number and press ENTER The following example enables RSTP on port 10 ip The IP address of an Ethernet device in band out of band vlan...

Page 254: ...est cfg on the TFTP server 172 23 19 96 Figure 154 CLI Backup Configuration Example 40 6 2 Restoring Configuration Syntax copy tftp config index ip remote file where ras config spanning tree 10 ras ip...

Page 255: ...following example restarts the switch to use the second configuration file Figure 156 CLI boot config Command Example Use the reload config command to restart the system and use a different configura...

Page 256: ...ommands 40 7 1 no mirror port Syntax no mirror port Disables port mirroring on the switch An example is shown next Figure 159 no mirror port Command Example 40 7 2 no https timeout Syntax no https tim...

Page 257: ...thenticate no port access authenticator port list where An example is shown next Disable authentication on the switch Disable re authentication on ports one three four and five Disable authentication...

Page 258: ...Example 40 8 interface Commands These are some commonly used commands that belong to the interface group of commands ras config no port access authenticator ras config no port access authenticator 1...

Page 259: ...ommand to enable create the specified routing domain for configuration An example is shown next Enter the configuration mode Enable default routing domain the 192 168 1 1 subnet for configuration Begi...

Page 260: ...mple 40 8 4 broadcast limit Syntax broadcast limit broadcast limit pkt s ras config ras config interface route domain 192 168 1 1 24 cmd interface route domain 192 168 1 1 255 255 255 0 ras config if...

Page 261: ...c bandwidth limit to 7Mbps Set the incoming traffic bandwidth limit to 9Mbps Figure 168 bandwidth limit Command Example Enables broadcast storm control limit on the switch pkt s Sets how many broadcas...

Page 262: ...e 169 mirror Command Example 40 8 7 gvrp Syntax gvrp GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to register necessary VLAN members on ports across...

Page 263: ...able ports one three four and five for configuration Enable ingress checking on the interface Figure 171 ingress check Command Example 40 8 9 frame type Syntax frame type all tagged where An example i...

Page 264: ...wt8 where An example is shown next Enable port two and ports six to twelve for configuration Enable Weighted Round Robin queuing on the ports Set the queue weights from Q0 to Q7 ras config interface p...

Page 265: ...Command Example 40 8 13 qos priority Syntax qos priority 0 7 where An example is shown next Enable ports one three four and five for configuration Set the IEEE 802 1p quality of service priority as fo...

Page 266: ...peed to 10 Mbps in half duplex mode Figure 178 speed duplex Command Example ras config interface port channel 1 3 5 ras config interface qos priority 4 port name string Sets a name for your port inter...

Page 267: ...GS 4012F User s Guide 266 Chapter 40 Command Examples...

Page 268: ...1Q Tagged VLAN uses both explicit and implicit tagging Whether to tag an outgoing frame depends on the setting of the egress port on a per LAN per port basis recall that a port can belong to multiple...

Page 269: ...nters the config vlan mode Use the inactive command to deactivate the VLAN s Use the interface port channel port list command to enter the config interface mode to set the VLAN settings on a port then...

Page 270: ...imer settings including the join leave and leave all timers An example is shown next Figure 181 GARP STATUS Command Example 41 4 2 GARP Timer Syntax garp join msec leave msec leaveall msec where ras c...

Page 271: ...e 182 GARP Timer Command Example 41 4 3 GVRP Timer Syntax show vlan1q gvrp This command shows the switch s GVRP settings An example is shown next Figure 183 GVRP Status Command Example 41 4 4 Enable G...

Page 272: ...he switch port VLAN settings in config interface mode 41 5 1 Set Port VID Syntax pvid VID where This command sets the default VLAN ID on the port s The following example sets the default VID to 200 on...

Page 273: ...4 Modify Static VLAN Use the following commands in the config vlan mode to configure the static VLAN table Syntax vlan vlan id fixed port list forbidden port list name name str normal port list untag...

Page 274: ...that is the SVLAN tells the switch whether or not to forward a frame and if the forwarded frames should have tags 4 Then the switch applies the port filter to finish the forwarding decision This mean...

Page 275: ...ID in the SVLAN Static VLAN table 41 7 Disable VLAN Syntax vlan vlan id inactive This command disables the specified VLAN ID in the SVLAN Static VLAN table 41 8 Show VLAN Setting Syntax show vlan This...

Page 276: ...1Q Tagged VLAN Commands 275 Figure 189 show vlan Command Example ras show vlan 802 1Q VLAN Static Entry idx Name VID Active AdCtl TagCtl 0 1 1 active FFFFFFFFFFFFFFFFFFFFFFFF UUUUUUUUUUUUUUUUUUUUUUUU...

Page 277: ...GS 4012F User s Guide 276 Chapter 41 IEEE 802 1Q Tagged VLAN Commands...

Page 278: ...ecured client IP address your computer s IP address must match it Refer to the chapter on access control for details I cannot access the web configurator The administrator username is admin The defaul...

Page 279: ...up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address 42 2...

Page 280: ...ve this setting 42 2 1 1 2 Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools In...

Page 281: ...bleshooting Figure 192 Internet Options 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the...

Page 282: ...Click Close to return to the Privacy screen 6 Click Apply to save this setting 42 2 1 2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaScripts...

Page 283: ...94 Internet Options 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Enable is selected the default 5 Under Scripting of Java applets make sure that E...

Page 284: ...Java Scripting 42 2 1 3 Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 Under Java per...

Page 285: ...leshooting Figure 196 Security Settings Java 42 2 1 3 1 JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 make sure that Use Java 2 for applet under Java Sun i...

Page 286: ...at you enter the correct password using the proper casing The administrator username is admin The default administrator password is 1234 The username and password are case sensitive Make sure that you...

Page 287: ...GS 4012F User s Guide 286 Chapter 42 Troubleshooting...

Page 288: ...addresses per port Switching Switching fabric 24Gbps non blocking Max Frame size 1522 bytes Forwarding frame IEEE 802 3 IEEE 802 1q Ethernet II PPPoE Prevent the forwarding of corrupted packets STP IE...

Page 289: ...Four RMON groups history statistics alarms and events Throughput monitoring ICMP packet transmission Port mirroring and aggregation Spanning Tree Protocol IGMP snooping Firmware upgrade and download...

Page 290: ...m W x 225mm D x 44 45 mm H Standard 19 rack mountable Weight 3 4 Kg Temperature Operating 0 C 45 C 32 F 113 F Storage 25 C 70 C 13 F 158 F Humidity 10 90 non condensing Power Supply Overload protectio...

Page 291: ...GS 4012F User s Guide 290 Product Specifications...

Page 292: ...first two octets make up the network number and the two remaining octets make up the host ID Class C addresses begin starting from the left with 1 1 0 In a class C address the first three octets make...

Page 293: ...Subnet masks are expressed in dotted decimal notation just as IP addresses are The natural masks for class A B and C IP addresses are as follows Subnetting With subnetting the class arrangement of an...

Page 294: ...168 1 0 with subnet mask of 255 255 255 0 The first three octets of the address make up the network number class C You want to have two separate networks Divide the network 192 168 1 0 into two separa...

Page 295: ...5 128 is the directed broadcast address for the first subnet Therefore the lowest IP address that can be assigned to an actual host for the first subnet is 192 168 1 1 and the highest is 192 168 1 126...

Page 296: ...dress Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 63 Highest Hos...

Page 297: ...1 11111111 11000000 Subnet Address 192 168 1 192 Lowest Host ID 192 168 1 193 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 Table 111 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS...

Page 298: ...ing The following table is a summary for class B subnet planning Table 113 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 128 0 17 2 32766 2 255 255...

Page 299: ...GS 4012F User s Guide 298 IP Subnetting...

Page 300: ...Automatic VLAN registration 82 Autonomous system AS 33 145 157 B Backbone 145 Backbone Router BR 145 Basement 3 Basic setting 69 BPDUs Bridge Protocol Data Units 96 Bridge Protocol Data Units BPDUs 9...

Page 301: ...CP 163 DSCP to IEEE802 1p mapping 165 Network example 163 PHB 163 DiffServ Differentiated Services 125 DiffServ Code Point DSCP 125 DiffServ marking rule 125 Double tagged Frames 32 135 DS Differentia...

Page 302: ...eenwich Mean Time 73 GVRP 82 87 88 268 GVRP GARP VLAN Registration Protocol 82 261 gvrp disable 271 gvrp enable 270 gvrp status 270 H Hardware installation 39 Hardware monitor 70 Hardware overview 43...

Page 303: ...ation 44 Transceiver removal 45 Modifications 2 Mounting brackets 40 MSA MultiSource Agreement 44 MTU Multi Tenant Unit 73 Multicast delivery tree 158 Multicast router mrouter 158 N Network management...

Page 304: ...ght 132 133 Queuing 32 131 Queuing algorithm 131 133 Queuing method 131 133 Calculate 133 R RADIUS 113 RADIUS Remote Authentication Dial In User Service 113 RADIUS server 113 Advantages 113 Network ex...

Page 305: ...state 96 Root port 95 Status 96 Terminology 95 STP Spanning Tree Protocol 33 Strict Priority Queuing SPQ 131 Stub area 145 151 Subnet Masks 292 Subnetting 292 Supply Voltage 3 Support E mail 5 SVLAN...

Page 306: ...ort accept 271 vlan1q port gvrp 272 vlan1q svlan active 274 vlan1q svlan delentry 273 vlan1q svlan inactive 274 vlan1q svlan list 274 vlan1q svlan setentry 272 Voltage Supply 3 Voltage High 3 VRID Vir...

Reviews: