ZyXEL Communications Dimension GS-3012 Скачать руководство пользователя страница 172

Страница: 172 / 259

GS-3012/GS-3012F User’s Guide

24-8

Access Control

24.7.2

Internet Explorer Warning Messages

When you attempt to access the switch HTTPS server, a Windows dialog box pops up asking if you trust the server
certificate. Click

View Certificate

if you want to verify that the certificate is from the switch.

You see the following

Security Alert

screen in Internet Explorer. Select

Yes

to proceed to the web configurator

, then web configurator access is blocked.

Figure 24-9 Security Alert Dialog Box (Internet Explorer)

24.7.3

Netscape Navigator Warning Messages

When you attempt to access the switch HTTPS server, a

Website Certified by an Unknown Authority

screen

pops up asking if you trust the server certificate. Click

Examine Certificate

if you want to verify that the

certificate is from the switch.

Accept this certificate temporarily for this session

is selected, then click

to continue in Netscape.

Select

Accept this certificate permanently

to import the switch’s certificate into the SSL client.

Содержание Dimension GS-3012

Страница 1: ...GS 3012 GS 3012F Gigabit Ethernet Switch Version 3 60 LH 1 LR 1 12 2005 User s Guide...

Страница 2: ...of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any produc...

Страница 3: ...r or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchant...

Страница 4: ...a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to...

Страница 5: ...Praha 4 Modrany Cesk Republika support zyxel dk 45 39 55 07 00 www zyxel dk DENMARK sales zyxel dk 45 39 55 07 07 ZyXEL Communications A S Columbusvej 5 2860 Soeborg Denmark support zyxel fi 358 9 478...

Страница 6: ...strovityanova 37a Str Moscow 117279 Russia support zyxel es 34 902 195 420 www zyxel es SPAIN sales zyxel es 34 913 005 345 ZyXEL Communications Alejandro Villegas 33 1 28043 Madrid Spain support zyxe...

Страница 7: ...troduction 1 1 1 2 Features 1 1 1 3 Applications 1 3 Part II II Chapter 2 Hardware Installation 2 1 2 1 Installation Scenarios 2 1 Chapter 3 Hardware Connections 3 1 3 1 Safety Warnings 3 1 3 2 Front...

Страница 8: ...tion to Port based VLANs 7 9 Chapter 8 Static MAC Forward Setup 8 1 8 1 Introduction to Static MAC Forward Setup 8 1 8 2 Configuring Static MAC Forwarding 8 1 8 3 Viewing and Editing Static MAC Forwar...

Страница 9: ...ut Port Security 16 1 16 2 Port Security Setup 16 1 Chapter 17 Queuing Method 17 1 17 1 Introduction to Queuing 17 1 17 2 Configuring Queuing 17 2 Chapter 18 Classifier 18 1 18 1 About the Classifier...

Страница 10: ...figuration File 23 2 23 4 Backing Up a Configuration File 23 2 23 5 Load Factory Defaults 23 3 23 6 Reboot System 23 3 23 7 Command Line FTP 23 4 Chapter 24 Access Control 24 1 24 1 About Access Contr...

Страница 11: ...Introducing the Commands 30 1 30 1 Overview 30 1 30 2 Accessing the CLI 30 1 30 3 The Login Screen 30 2 30 4 Command Syntax Conventions 30 3 30 5 Getting Help 30 3 30 6 Command Modes 30 5 30 7 Using...

Страница 12: ...tabases 32 1 32 3 Configuring Tagged VLAN 32 1 32 4 Global VLAN1Q Tagged VLAN Configuration Commands 32 2 32 5 Port VLAN Commands 32 4 32 6 Enable VLAN 32 7 32 7 Disable VLAN 32 7 32 8 Show VLAN Setti...

Страница 13: ...e 3 4 Installed Transceiver 3 4 Figure 3 5 Opening the Transceiver s Latch Example 3 5 Figure 3 6 Transceiver Removal Example 3 5 Figure 3 7 GS 3012F Rear Panel AC Model 3 6 Figure 3 8 GS 3012F Rear P...

Страница 14: ...g Tree Protocol Status 10 3 Figure 10 2 Spanning Tree Protocol Configuration 10 4 Figure 11 1 Bandwidth Control 11 2 Figure 12 1 Broadcast Storm Control 12 1 Figure 13 1 Mirroring 13 1 Figure 14 1 Agg...

Страница 15: ...re 22 1 DHCP Relay 22 2 Figure 23 1 Maintenance 23 1 Figure 23 2 Firmware Upgrade 23 1 Figure 23 3 Restore Configuration 23 2 Figure 23 4 Backup Configuration 23 2 Figure 23 5 Confirm Load factory Def...

Страница 16: ...AC Table 28 2 Figure 29 1 ARP Table 29 2 Figure 30 1 Initial Console Port Screen 30 2 Figure 30 2 CLI Login Screen 30 3 Figure 30 3 CLI Help List of Commands Example 1 30 4 Figure 30 4 CLI Help List o...

Страница 17: ...le 31 11 Figure 31 23 bandwidth limit Command Example 31 12 Figure 31 24 mirror Command Example 31 12 Figure 31 25 gvrp Command Example 31 13 Figure 31 26 ingress check Command Example 31 13 Figure 31...

Страница 18: ...GS 3012 GS 3012F User s Guide xviii Lists of Figures Figure 32 9 no vlan Command Example 32 7 Figure 32 10 show vlan Command Example 32 7...

Страница 19: ...logy 7 2 Table 7 2 802 1Q VLAN Status 7 4 Table 7 3 802 1Q VLAN Port Settings 7 5 Table 7 4 802 1Q Static VLAN 7 7 Table 7 5 Static VLAN Summary Table 7 8 Table 7 6 Port Based VLAN Setup 7 11 Table 8...

Страница 20: ...ng 20 3 Table 20 3 Multicast IGMP Filtering Profile 20 5 Table 20 4 MVR 20 8 Table 20 5 MVR Group Configuration 20 10 Table 21 1 Static Routing 21 1 Table 21 2 Static Routing Summary Table 21 2 Table...

Страница 21: ...able 28 2 Table 29 1 ARP Table 29 2 Table 30 1 Command Summary User Mode 30 6 Table 30 2 Command Summary Enable Mode 30 7 Table 30 3 Command Summary Configure Mode 30 11 Table 30 4 Command Summary con...

Страница 22: ...odels The GS 3012F DC model requires DC power supply input of 48 VDC to 60 VDC 1 2A Max The GS 3012F AC model requires 100 240VAC 1 5A power All figures in this guide display the GS 3012F AC model unl...

Страница 23: ...The GS Switch Server Computer Printer Gateway Related Documentation Web Configurator Online HTML help The online HTML help shows you how to use the web configurator to configure individual screens Mor...

Страница 24: ......

Страница 25: ...Features and Applications I Part I Features and Applications This part acquaints you with the features and applications of the switches...

Страница 26: ......

Страница 27: ...ng cryptic command strings In addition the switch can also be managed via Telnet the console port or third party SNMP management 1 2 Features These sections describe the hardware and firmware features...

Страница 28: ...and Trace Route RFC 2925 Management Web configurator Command line interface locally via console port or remotely via Telnet Out of band RJ 45 management port SNMP System Monitoring System status link...

Страница 29: ...p links between switches bridges or routers It allows a switch to interact with other R STP compliant switches in your network to ensure that only one path exists between any two stations on the netwo...

Страница 30: ...width can connect to high speed department servers via the switch You can provide a super fast uplink connection by installing the transceiver s in the mini GBIC slots Moreover the switch eases superv...

Страница 31: ...each other Figure 1 3 High Performance Switched Workgroup Application 1 3 4 IEEE 802 1Q VLAN Application Examples This section shows a workgroup and a shared server example using 802 1Q tagged VLANs F...

Страница 32: ...ared Server Example Shared resources such as a server can be used by all ports in the same VLAN as the server as shown in the following example In this example only ports that need access to the serve...

Страница 33: ...allation and Connections II Part II Hardware Installation and Connections This part acquaints you with installing the switch instructs you on how to make the hardware connections and explains the fron...

Страница 34: ......

Страница 35: ...lations 2 1 1 Desktop Installation Procedure 1 Make sure the switch is clean and dry 2 Set the switch on a smooth level surface strong enough to support the weight of the switch and the connected cabl...

Страница 36: ...a rack mounting kit 1 Align one bracket with the holes on one side of the switch and secure it with the bracket screws smaller than the rack mounting screws 2 Attach the other bracket in a similar fa...

Страница 37: ...GS 3012 GS 3012F User s Guide Hardware Installation 2 3 Figure 2 3 Mounting the ES to an EIA standard 19 inch rack...

Страница 38: ......

Страница 39: ...isassemble this device 3 2 Front Panel The following figure shows the front panel of the GS 3012 The front panel contains the switch LEDs RJ 45 gigabit ports mini GBIC ports and a console and manageme...

Страница 40: ...he speed of the Gigabit ports can be 100Mbps or 1000Mbps and the duplex mode can be half duplex for 100 Mbps or full duplex The GS 3012 s mini GBIC slots are paired with Gigabit ports The GS 3012F s G...

Страница 41: ...ansceivers that comply with the Small Form factor Pluggable SFP Transceiver MultiSource Agreement MSA See the SFF committee s INF 8074i specification Rev 1 0 for details You can change transceivers wh...

Страница 42: ...Figure 3 3 Transceiver Installation Example Figure 3 4 Installed Transceiver Transceiver Removal Use the following steps to remove a mini GBIC transceiver SFP module 1 Open the transceiver s latch la...

Страница 43: ...ort using an Ethernet cable You can configure the switch via Telnet or the web configurator The default IP address of the management port is 192 168 0 1 with a subnet mask of 255 255 255 0 3 3 Rear Pa...

Страница 44: ...y input see the appendix of product specifications for details To connect the power to the unit insert the one end of the supplied power cord to the power receptacle on the rear panel and the other en...

Страница 45: ...DESCRIPTION BPS Green Blinking The system is receiving power from the backup power supply On The backup power supply is connected and active Off The backup power supply is not ready or not active PWR...

Страница 46: ...g in half duplex mode and no collisions are occurring 1000 GS 3012F Green Blinking The system is transmitting receiving to from an Ethernet network On The link to a 1000 Mbps Ethernet network is up Of...

Страница 47: ...n access the command line interface using a terminal emulation program on a computer connected to the switch console port see Section 3 2 1 or access the switch using Telnet The next part of this guid...

Страница 48: ......

Страница 49: ...Getting Started III Part III Getting Started This part introduces you to the web configurator describes the Status and Port Details screens and shows you how to configure the Basic Setting screens...

Страница 50: ......

Страница 51: ...browser 2 Type http and the IP address of the switch for example the default is 192 168 1 1 for in band management or 192 168 0 1 when connected to the management port in the Location or Address field...

Страница 52: ...ator Home Screen Status In the navigation panel click a main link to reveal a list of submenu links Navigation Panel Click on a tab to display related links Click here for help on configuring a screen...

Страница 53: ...tem Info General Setup Switch Setup IP Setup Port Setup VLAN Status VLAN Port Setting Static VLAN Static MAC Forwarding Filtering Spanning Tree Protocol Status Spanning Tree Protocol Configuration Ban...

Страница 54: ...ameters such as VLAN type MAC address learning IGMP snooping GARP and priority queues IP Setup This link takes you to a screen where you can configure the IP address subnet mask necessary for switch m...

Страница 55: ...rious multicast features and create multicast VLANs IP Application Static Routing This link takes you to screens where you can configure static routes A static route defines how the switch should forw...

Страница 56: ...tings this could also lock you out from performing out of band management 4 Disabling all ports 5 Assigning minimum bandwidth to the CPU port If you limit bandwidth to the CPU port you may find that t...

Страница 57: ...he Starting XMODEM upload message before activating XMODEM upload on your terminal 6 After a successful configuration file upload type atgo to finish starting the switch Figure 4 4 Resetting the Switc...

Страница 58: ...r Figure 4 5 Web Configurator Logout Screen 4 5 2 Help The web configurator s online help has descriptions of individual screens and some supplementary information Click the Help link from a web confi...

Страница 59: ...the web configurator displays a port statistical summary with links to each port showing statistical details 5 2 Port Status Summary To view the port statistics click Status in all web configurator sc...

Страница 60: ...rrors This field shows the number of received errors on this port Tx KB s This field shows the number of kilobytes per second transmitted on this port Rx KB s This field shows the number of kilobytes...

Страница 61: ...port connection is down and the speed duplex mode Status This field shows the training state of the ports The states are FORWARDING forwarding which means the link is functioning normally or STOP the...

Страница 62: ...d multicast frames received Broadcast This field shows the number of good broadcast frames received Pause This field shows the number of 802 3x Pause frames received Control This field shows the numbe...

Страница 63: ...octets in length 128 255 This field shows the number of packets including bad packets received that were between 128 and 255 octets in length 256 511 This field shows the number of packets including b...

Страница 64: ......

Страница 65: ...creen also allows you to set the system time manually or get the current time and date from an external server when you turn on your switch The real time is then displayed in the switch logs The Switc...

Страница 66: ...e created Ethernet Address This field refers to the Ethernet MAC Media Access Control address of the switch Hardware Monitor Temperature Unit The switch has temperature sensors that are capable of det...

Страница 67: ...RPM 41 is displayed for speeds too small to measure under 2000 RPM Threshold This field displays the minimum speed at which a normal fan should work Status Normal indicates that this fan is functionin...

Страница 68: ...ION System Name Choose a descriptive name for identification purposes This name consists of up to 32 printable characters spaces are allowed Location Enter the geographic location up to 32 characters...

Страница 69: ...When you select the Daytime RFC 867 format the switch displays the day month year and time with no time zone adjustment When you use this format it is recommended that you use a Daytime timeserver wit...

Страница 70: ...on the same LAN thus a user will not see the printers and hard disks of another user in the same building VLAN also increases network performance by limiting broadcasts to a smaller and more manageab...

Страница 71: ...on VLAN setup for more background information 200 milliseconds default Leave Timer Leave Timer sets the duration of the Leave Period timer for GVRP in milliseconds Each port has a single Leave Period...

Страница 72: ...bandwidth Level 1 This is typically used for non critical background traffic such as bulk transfers that are allowed but that should not affect other applications and users Level 0 Typically used for...

Страница 73: ...cribes the labels in this screen Table 6 4 IP Setup LABEL DESCRIPTION Domain Name Server DNS Domain Name System is for mapping a domain name to its corresponding IP address and vice versa Enter a doma...

Страница 74: ...t Gateway Enter the IP address of the default outgoing gateway in dotted decimal notation for example 192 168 1 254 VID Enter the VLAN identification number associated with the switch IP address This...

Страница 75: ...lds to your previous configuration Index This field displays the index number of the rule Click an index number to edit the rule IP Address This field displays the IP address IP Subnet Mask This field...

Страница 76: ...select Auto 10M Half Duplex 10M Full Duplex 100M Half Duplex 100M Full Duplex or 1000M Full Duplex Selecting Auto auto negotiation makes one Gigabit port able to negotiate with a peer automatically to...

Страница 77: ...ng a state of packet collision causing the sending port to temporarily stop sending signals and resend later Select this option to enable flow control 802 1P Priority This priority value is added to i...

Страница 78: ......

Страница 79: ...Advanced Application 1 IV Part IV Advanced Application 1 This part shows you how to configure the VLAN Static MAC Forwarding Filtering STP and Bandwidth Control Advanced Application screens...

Страница 80: ......

Страница 81: ...I set to 1 then that frame should not be forwarded as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 212 VLANs Note that user priority...

Страница 82: ...fer to the following table for common GARP terminology Table 7 1 GARP Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually Dynamic VLAN This is a...

Страница 83: ...ches C D and E otherwise they will drop frames with unknown VLAN group tags However with VLAN Trunking enabled on a port s in each intermediary switch you only need to create VLAN groups in the end de...

Страница 84: ...This column displays the ports that are participating in a VLAN A tagged port is marked as T an untagged port is marked as U and ports not participating in a VLAN in marked as Elapsed Time This field...

Страница 85: ...1Q VLAN Port Settings LABEL DESCRIPTION GVRP GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to dynamically register necessary VLAN members on ports ac...

Страница 86: ...protocol that defines a way for switches to register necessary VLAN members on ports across the network Acceptable Frame Type Specify the type of frames allowed on a port Choices are All and Tag Only...

Страница 87: ...e is between 1 and 4094 Port The port number identifies the port you are configuring Control Select Normal for the port to dynamically join this VLAN group using GVRP This is the default selection Sel...

Страница 88: ...ings of a rule click a number in the VID field Figure 7 6 Static VLAN Summary Table The following table describes the labels in this screen Table 7 5 Static VLAN Summary Table LABEL DESCRIPTION VID Th...

Страница 89: ...talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports Port b...

Страница 90: ...GS 3012 GS 3012F User s Guide 7 10 VLAN Figure 7 8 Port Based VLAN Setup All Connected...

Страница 91: ...rt is selected Figure 7 9 This option is the most limiting but also the most secure After you make your selection click Apply top right of screen to display the screens as mentioned above You can stil...

Страница 92: ...to allow two subscriber ports to talk to each other you must define the egress port for both ports CPU refers to the in band switch management port By default it forms a VLAN with all Gigabit ports If...

Страница 93: ...t receive traffic on other ports This may reduce unicast flooding 8 2 Configuring Static MAC Forwarding Click Static MAC Forwarding to display the configuration screen as shown Figure 8 1 Static MAC F...

Страница 94: ...C Forwarding Summary Table The following table describes the labels in this screen Table 8 2 Static MAC Forwarding Summary Table LABEL DESCRIPTION Index Click an index number to modify a static MAC ad...

Страница 95: ...up ID 9 2 Configuring a Filtering Rule Click Advanced Application and Filtering to display the screen as shown next Figure 9 1 Filtering The following table describes the related labels in this screen...

Страница 96: ...the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults 9 3 Viewing and Editing Filter Rules To vi...

Страница 97: ...ering Summary Table LABEL DESCRIPTION Action This field displays the filter action Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cancel Click Ca...

Страница 98: ......

Страница 99: ...the port states are Discarding Learning and Forwarding In this user s guide STP often refers to both STP and RSTP 10 1 1 STP Terminology The root bridge is the base of the spanning tree it is the bri...

Страница 100: ...rval Max Age the device assumes that the link to the root bridge is down This device then initiates negotiations with other devices to reconfigure the network to re establish a valid network topology...

Страница 101: ...is bridge consisting of bridge priority plus MAC address This ID is the same for Root and Our Bridge if the switch is the root switch Hello Time second This is the time interval in seconds at which th...

Страница 102: ...red Time Since Last Change This is the time since the spanning tree was last reconfigured Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh in...

Страница 103: ...nated port for the attached LAN If it is a root port a new root port is selected from among the switch ports attached to the network The allowed range is 6 to 40 seconds Forwarding Delay This is the m...

Страница 104: ......

Страница 105: ...ming traffic flow on a port The Peak Information Rate PIR is the maximum bandwidth allowed for the incoming traffic flow on a port when there is no network congestion The CIR and PIR should be set for...

Страница 106: ...box Commit Rate Specify the guaranteed bandwidth allowed in kilobits per second Kbps for the incoming traffic flow on a port The commit rate should be less than the peak rate The sum of commit rates c...

Страница 107: ...Advanced Application 2 This part shows you how to configure the Broadcast Storm Control Mirroring Link Aggregation Port Authentication Port Security Queuing Method Classifier Policy Rule and Multicas...

Страница 108: ......

Страница 109: ...number of allowable broadcast multicast and or DLF packets is reached per second the subsequent packets are discarded Enable this feature to reduce broadcast multicast and or DLF packets in your netwo...

Страница 110: ...st pkt s Select this option and specify how many broadcast packets the port receives per second Multicast pkt s Select this option and specify how many multicast packets the port receives per second D...

Страница 111: ...raffic from the monitor port the port you copy the traffic to without interference 13 2Port Mirroring Configuration Click Advanced Application Mirroring in the navigation panel to display the Mirrorin...

Страница 112: ...to examine it in more detail without interfering with the traffic flow on the original port s Select this port from this drop down list box Port This field displays the port number Mirrored Select thi...

Страница 113: ...ltiple ports 14 1 1 Dynamic Link Aggregation The switch adheres to the IEEE 802 3ad standard for static and dynamic LACP port trunking The switch supports the link aggregation IEEE 802 3ad standard Th...

Страница 114: ...er switch 0000 00 00 00 00 00 0000 00 0000 System priority MAC address Key Port Priority1 Port Number1 Figure 14 1 Aggregation ID 14 2Link Aggregation Protocol Status Click Advanced Application Link A...

Страница 115: ...in the Link Aggregation screen to be in the trunk group Synchronized Ports These are the ports that are currently transmitting data as one logical link in this trunk group Poll Interval s The text bo...

Страница 116: ...LACP system priority is a number between 1 and 65 535 The switch with the lowest system priority and lowest port number if system priority is the same becomes the LACP server The LACP server controls...

Страница 117: ...een the individual port exchanges of LACP packets in order to check that the peer port in the trunk group is still up If a port does not respond after three tries then it is deemed to be down and is r...

Страница 118: ......

Страница 119: ...se that is limited to the memory capacity of the device In essence RADIUS authentication allows you to validate an unlimited number of users from a central location Figure 15 1 RADIUS Server 15 2Confi...

Страница 120: ...UDP Port The default port of the RADIUS server for authentication is 1812 You need not change this value unless your network administrator instructs you to do so Shared Secret Specify a password up to...

Страница 121: ...This field displays a port number Active Select this checkbox to permit IEEE 802 1x authentication on this port You must first allow IEEE 802 1x authentication on the switch before configuring it on e...

Страница 122: ......

Страница 123: ...ough a port on the switch For maximum port security enable this feature disable MAC address learning and configure static MAC address es for a port It is not recommended you disable Port Security toge...

Страница 124: ...mic MAC addresses that may be learned on a port For example if you set this field to 5 on port 2 then only the devices with these five learned MAC addresses may access port 2 at any one time A sixth d...

Страница 125: ...ghest Q6 7 Q5 6 Q4 5 Q3 4 Q2 3 Q1 2 Q0 1 lowest 17 1 1 Strict Priority Queuing SPQ Strict Priority Queuing SPQ services queues based on priority only As traffic comes into the switch traffic on the hi...

Страница 126: ...t field see Figure 17 1 rather than a fixed amount of bandwidth WRR is activated only when a port has more traffic than it can handle Queues with larger weights get more service than queues with small...

Страница 127: ...ins Q7 has the highest priority and Q0 the lowest WRR services queues on a rotating basis based on their queue weight the number you configure in the queue Weight field Queues with larger weights get...

Страница 128: ......

Страница 129: ...address source port number destination port number or incoming port number For example you can configure a classifier to select traffic from the same protocol port such as Telnet to form a flow Config...

Страница 130: ...ifier Figure 18 1 Classifier The following table describes the labels in this screen Table 18 1 Classifier LABEL DESCRIPTION Active Select this option to enable this rule Name Enter a descriptive name...

Страница 131: ...ble 18 3 for information Source MAC Address Select Any to apply the rule to all MAC addresses To specify a source select the second choice and type a MAC address in valid MAC address format six hexade...

Страница 132: ...el to reset the fields back to your previous configuration Clear Click Clear to set the above fields back to the factory defaults 18 3Viewing and Editing Classifier Configuration To view a summary of...

Страница 133: ...TYPE PROTOCOL NUMBER IP ETHII 0800 X 75 Internet 0801 NBS Internet 0802 ECMA Internet 0803 Chaosnet 0804 X 25 Level 3 0805 XNS Compat 0807 Banyan Systems 0BAD BBN Simnet 5208 IBM SNA 80D5 AppleTalk A...

Страница 134: ...GS 3012 GS 3012F User s Guide 18 6 Classifier Figure 18 3 Classifier Example...

Страница 135: ...to request a particular service or give advanced notice of where the traffic is going 19 1 2 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to replace the Type of Se...

Страница 136: ...GS 3012 GS 3012F User s Guide 19 2 Policy Rule Figure 19 1 Policy The following table describes the labels in this screen...

Страница 137: ...ice TOS priority level Metering You can configure the desired bandwidth available to a traffic flow Traffic that exceeds the maximum bandwidth allocated in cases where the network is congested is call...

Страница 138: ...te bandwidth limitation on the traffic flow s then set the actions to be taken on out of profile packets Out of profile action Select the action s to be performed for out of profile traffic Select Dro...

Страница 139: ...is field displays the descriptive name for this policy This is for identification purposes only Classifier s This field displays the name s of the classifier to which this policy applies Delete Click...

Страница 140: ...GS 3012 GS 3012F User s Guide 19 6 Policy Rule Figure 19 3 Policy Example...

Страница 141: ...D range 224 0 0 0 to 239 255 255 255 are used for IP multicasting Certain IP multicast numbers are reserved by IANA for special purposes see the IANA web site for more information 20 1 2 IGMP Filterin...

Страница 142: ...generates no additional network traffic allowing you to significantly reduce multicast traffic passing through your switch 20 2Multicast Status Click Advanced Applications and Multicast to display the...

Страница 143: ...ing to send the frame s to all ports Port This field displays the port number Immed Leave Select this option to set the switch to remove this port from the multicast tree when an IGMP version 2 leave...

Страница 144: ...packets to this port Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh 20 4IGMP Filtering Profile IGMP filter profiles allow you to...

Страница 145: ...e profile s that you want to remove in the Delete Profile column then click the Delete button To delete a rule s from a profile select the rule s that you want to remove in the Delete Rule column then...

Страница 146: ...tings on the multicast devices in the multicast VLAN 20 5 3 How MVR Works The following figure shows a multicast television example where a subscriber device such as a computer in VLAN 1 receives mult...

Страница 147: ...e the MVR screen to create multicast VLANs and select the receiver port s and a source port for each multicast VLAN Click Advanced Applications and Multicast in the navigation panel Click the Multicas...

Страница 148: ...ast VLAN Mode Specify the MVR mode on the switch Choices are Dynamic and Compatible Select Dynamic to send IGMP reports to all MVR source ports in the multicast VLAN Select Compatible to set the switc...

Страница 149: ...This field displays the MVR mode Source Port This field displays the source port number s Receiver Port This field displays the receiver port number s Delete To delete a multicast VLAN s select the r...

Страница 150: ...cast addresses Add Cancel Click Add to save the settings Click Cancel to discard all changes MVLAN This field displays the multicast VLAN ID Name This field displays the descriptive name for this sett...

Страница 151: ...et the receiver and source ports Figure 20 9 MVR Configuration Example To set the switch to forward the multicast group traffic to the subscribers configure multicast group settings in the Group Confi...

Страница 152: ...GS 3012 GS 3012F User s Guide 20 12 Multicast Figure 20 10 MVR Configuration Example Figure 20 11 MVR Configuration Example...

Страница 153: ...IP Application and Management VI Part VI IP Application and Management This part describes the IP Application and Management screens...

Страница 154: ......

Страница 155: ...s field allows you to activate deactivate this static route Name Enter a descriptive name for this route This is for identification purpose only Destination IP Address This parameter specifies the IP...

Страница 156: ...g Summary Table The following table describes the labels in the summary table Table 21 2 Static Routing Summary Table LABEL DESCRIPTION Index This field displays the index number of the route Click a...

Страница 157: ...can also specify additional information for the switch to add to the client DHCP requests that it relays to the DHCP server Please refer to RFC 3046 for more details 22 1 2 DHCP Relay Agent Circuit ID...

Страница 158: ...on Select the Option 82 check box to have the switch add information slot number port number and VLAN ID to client TCP IP configuration requests that it relays to a DHCP server Information This read o...

Страница 159: ...enance screen if you want to upgrade your switch firmware See the System Info screen to verify your current firmware version number Make sure you have downloaded and unzipped the correct model firmwar...

Страница 160: ...tion file is automatically renamed when you restore using this screen 23 4Backing Up a Configuration File Backing up your switch configurations allows you to create various snap shots of your device f...

Страница 161: ...t screen Figure 23 6 Close Browser After Load Factory Defaults Click Yes to close this window Open a new browser window to access the switch web configurator again You may need to change the IP addres...

Страница 162: ...ror log or the trace log ZyNOS ZyXEL Network Operating System sometimes referred to as the ras file is the system firmware and has a bin filename extension Table 23 1 Filename Conventions FILE TYPE IN...

Страница 163: ...d FTP Clients The following table describes some of the commands that you may see in GUI based FTP clients Table 23 2 General Commands for GUI based FTP Clients COMMAND DESCRIPTION Host Address Enter...

Страница 164: ......

Страница 165: ...ons are permitted when the multiple login feature is either enabled or disabled Table 24 1 Access Control Overview Multiple Login Console port SSH Telnet FTP Web SNMP Enabled One console port session...

Страница 166: ...nt is a management software module that resides in a managed switch the GS An agent translates the local management information from the managed switch into a form compatible with SNMP The manager is...

Страница 167: ...ce The switch supports the following MIBs SNMP MIB II RFC 1213 RFC 1157 SNMP v1 RFC 1493 Bridge MIBs RFC 1643 Ethernet MIBs RFC 1155 SMI SNMPv2 SNMPv2c RFC 2863 if mib Bridge extension MIBs RFC 2674 R...

Страница 168: ...p community which is the password sent with each trap to the SNMP manager Trap Destination Enter the IP addresses of up to four stations to send your SNMP traps to Apply Click Apply to save your chang...

Страница 169: ...ly the administrator has read write access Old Password Type the existing system password 1234 is the default password when shipped New Password Enter your new system password Retype to confirm Retype...

Страница 170: ...public key is checked against the saved version on the client computer 2 Encryption Method Once the identification is verified both the client and server must agree on the type of encryption method t...

Страница 171: ...switch whereas the SSL client only should authenticate itself when the SSL server requires it to do so Please refer to the following figure 8 HTTPS connection requests from an SSL aware web browser g...

Страница 172: ...ogin screen if you select No then web configurator access is blocked Figure 24 9 Security Alert Dialog Box Internet Explorer 24 7 3 Netscape Navigator Warning Messages When you attempt to access the s...

Страница 173: ...curity Certificate 1 Netscape Figure 24 11 Security Certificate 2 Netscape 24 7 4 Login Screen After you accept the certificate and login in the switch main screen appears The lock displayed in the bo...

Страница 174: ...cape 24 8Service Access Control Service Access Control allows you to decide what services you may use to access the switch You may also change the default service port and configure trusted computer s...

Страница 175: ...then you will have to let people who wish to use the service know the new port number for that service Timeout Type how many minutes a management session via the web configurator can be left idle bef...

Страница 176: ...ent set Clear the check box if you wish to temporarily disable the set without deleting it Start Address End Address Configure the IP address range of trusted computers fro which you can manage this s...

Страница 177: ...e following table describes the labels in this screen Table 25 1 Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty the te...

Страница 178: ......

Страница 179: ...ocumentation of your syslog program for details The following table describes the syslog severity levels Table 26 1 Syslog Severity Levels NUMERICAL CODE SEVERITY 0 Emergency The system is unusable 1...

Страница 180: ...ion to set the device to generate logs for the corresponding category Facility The log facility allows you to send logs to different files in the syslog server Refer to the documentation of your syslo...

Страница 181: ...ower the number the more critical the logs are Add Click Add to save your changes back to the device The entry displays in the table below Cancel Click Cancel to begin configuring this screen afresh C...

Страница 182: ...GS 3012 GS 3012F User s Guide 26 4 Syslog Table 26 3 Syslog Server Setup LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh...

Страница 183: ...L Clustering Management Specifications Maximum number of cluster members 24 Cluster Member Models Must be compatible with ZyXEL cluster management implementation Cluster Manager The switch through whi...

Страница 184: ...n the cluster member switch directly and not via the cluster manager o None neither a manager nor a member of a cluster Manager This field displays the cluster manager switch s hardware MAC Address Th...

Страница 185: ...own 27 2 1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluste...

Страница 186: ...ster manager switch 360ABM0 bin The name of the firmware file you want to upload to the cluster member switch 27 3Configuring Cluster Management Click Configuration from the Cluster Management screen...

Страница 187: ...mber is later set to become a cluster manager then its Status is displayed as Error in the Cluster Management Status screen and a warning icon appears in the member summary list below Name Type a name...

Страница 188: ...password afterwards then it cannot be managed from the Cluster Manager Its Status is displayed as Error in the Cluster Management Status screen and a warning icon appears in the member summary list b...

Страница 189: ...the following figure 1 The switch examines a received frame and learns the port on which this source MAC address came 2 The switch checks to see if the frame s destination MAC address matches a source...

Страница 190: ...table below MAC Click this button to display and arrange the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to disp...

Страница 191: ...ss sends it to the device If no entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The switch fills in its own MAC and IP address in the sender address fields a...

Страница 192: ...x This is the ARP Table entry number IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below MAC Address This is the MAC address of the de...

Страница 193: ...Commands VII Part VII Commands This part gives information on the Command Line Interface CLI...

Страница 194: ......

Страница 195: ...Use the same configuration file to set all switches of the same model in your network to the same settings You may also edit a configuration file using a text editor Make sure you use valid commands...

Страница 196: ...local management connect your computer to the RJ 45 management port labeled MGMT on the switch 2 Make sure your computer IP address and the switch IP address are on the same subnet In Windows click St...

Страница 197: ...y or down z arrow key to scroll through the command history list The CLI does not accept partial or incomplete commands You may enter a unique part of a command and press TAB to have the switch automa...

Страница 198: ...on privileged commands exit Exit from the EXEC help Description of the interactive help system history Show a list of previously run commands ping Exec ping show Show system information ssh SSH clien...

Страница 199: ...10 To enter config interface mode enter interface port channel followed by a port number For example interface port channel 10 Enter exit to quit from the current mode or log out from the CLI 30 7Usi...

Страница 200: ...Logs out from the CLI help Displays help information history Displays a list of previously command s that you have executed The switch stores up to 256 commands in history ping IP host name in band ou...

Страница 201: ...e via TFTP disable Exits Enable or privileged mode enable Accesses Enable or privileged mode erase running config Resets to the factory default settings exit Exits Enable or privileged mode help Displ...

Страница 202: ...with the specified temperature unit Celsius C or Fahrenheit F https Displays the HTTPS information certificate Displays the HTTPS certificates key rsa dsa Displays the HTTPS key session Displays curr...

Страница 203: ...c Displays static MAC address table You can sort by MAC address VID or port address table all mac vid port Displays MAC address table You can sort by MAC address VID or port address table count Displa...

Страница 204: ...te keys known hosts Displays known SSH hosts information session Displays current SSH session s system information Displays general system information time Displays current system time and date timesy...

Страница 205: ...untag EtherI Itag priority 0 7 vlan vlan id ethernet type ether num ip ipx arp rarp appletalk decnet sna netbios dlc source mac src mac addr source port port num destination mac dest mac addr dscp 0 6...

Страница 206: ...ddress svr_ip svr2_ip svr3_ip Sets the IP addresses of up to 3 DHCP servers information Allows the switch to add system name to agent information option Allows the switch to add DHCP relay agent infor...

Страница 207: ...s the default gateway s IP address for the out of band management port name server ip Sets the IP address of a domain name server route ip mask next hop ip Creates a static route ip mask next hop ip m...

Страница 208: ...ort mirroring on a specified port mode zynos Changes the CLI mode to the ZyNOS format multi login Enables multi login mvr vlan id Enters the MVR Multicast VLAN Registration configuration mode See Sect...

Страница 209: ...nk aggregation control protocol dynamic trunking on the switch logins name Disables login access to the specified name mac filter mac mac addr vlan vlan id inactive Enables the specified MAC filter ru...

Страница 210: ...the list of secure clients index service telnet ftp http icmp snmp ssh h ttps Disables a secure client set entry number from using the selected remote management service s name inactive Enables a poli...

Страница 211: ...entry server ip inactive Enables a syslog server entry type system interface switch authentication ip Sets the device to not generate a category of logs timesync Disables the time setting on the time...

Страница 212: ...s diff replace priority diff set dscp outgoing mirror outgoing eport outgoing non unicast eport outgoing set vlan metering out of profile action change dscp drop forward set drop prec inactive Configu...

Страница 213: ...amic MAC addresses are saved to the static MAC address table queue level 0 7 priority 0 7 Sets the priority level to physical queue mapping radius server host ip acct port socket number key key string...

Страница 214: ...your SNMP traps to spanning tree Enables STP on the switch port list Enables STP on a specified port port list priority 0 255 Sets the priority for a specified port port list path cost 1 65535 Sets t...

Страница 215: ...Sets the time server protocol server ip Sets the IP address of your time server trunk T1 T2 T3 T4 T5 T6 Activates a trunk group T1 T2 T3 T4 T5 T6 interface port list Adds a port s to the specified tr...

Страница 216: ...managed using this specified IP address default gateway ip address Sets a default gateway IP address for this VLAN inband default ip address mask Sets a static in band IP address and subnet mask inban...

Страница 217: ...this VLAN Group ID 30 9 5 interface Commands The following commands are listed in configuration mode as interface switch commands all are preceded with the command interface Table 30 5 Command Summary...

Страница 218: ...the receiving port frame type all tagged Choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port gvrp Enables this function to permit VLAN groups beyond the...

Страница 219: ...mit Enables the interface multicast limit pkt s Sets how many multicast packets the interface receives per second name port name string Sets a name for your interface Enter a descriptive name up to ni...

Страница 220: ...f service priority for an interface speed duplex auto 10 half 10 full 100 half 100 full 1000 full Sets the duplex mode half full and speed 10 100 1000 Mbps of the connection on the interface Selecting...

Страница 221: ...oup settings no group name str Disables the specified MVR group setting no inactive Enables MVR no receiver port port list Disables the receiver port s An MVR receiver port can only receive multicast...

Страница 222: ......

Страница 223: ...ersion and system up time An example is shown next Figure 31 1 show system information Command Example 31 2 2 show hardware monitor Syntax show hardware monitor c f This command displays the current h...

Страница 224: ...1 Netmask 255 255 255 0 VID 0 IP Interface IP 192 168 1 1 Netmask 255 255 255 0 VID 1 ras ras show hardware monitor c Temperature Unit c Temperature c Current Max Min Threshold Status MAC 40 0 40 0 30...

Страница 225: ...TX Packet Tx Packets 69 Multicast 0 Broadcast 0 Pause 0 Tagged 0 RX Packet Rx Packets 4 Multicast 0 Broadcast 4 Pause 0 Control 0 TX Collison Single 0 Multiple 0 Excessive 0 Late 0 Error Packet RX CRC...

Страница 226: ...which the Ethernet device belongs out of band refers the management port while in band means the other ports on the switch size 0 8024 Specifies the packet size to send t Sends Ping packets to the Eth...

Страница 227: ...example displays route information to an Ethernet device with an IP address of 192 168 1 100 Figure 31 8 traceroute Command Example 31 5Enabling RSTP To enable RSTP on a port enter spanning tree foll...

Страница 228: ...ation file on the switch The following example uploads the configuration file test cfg from the TFTP server 172 23 19 96 to the switch Figure 31 11 CLI Restore Configuration Example 31 6 3 Using a Dif...

Страница 229: ...o reset the switch back to the factory defaults 1 Enter erase running config to reset the current running configuration 2 Enter write memory to save the changes to the current configuration file If yo...

Страница 230: ...T4 T5 T6 lacp no trunk T1 T2 T3 T4 T5 T6 interface port list where T1 T2 T3 T4 T5 T6 Disables the trunk group T1 T2 T3 T4 T5 T6 lacp Disables LACP in the trunk group T1 T2 T3 T4 T5 T6 interface port l...

Страница 231: ...ess authenticator Command Example 31 7 5 no ssh Syntax no ssh key rsa1 rsa dsa no ssh known hosts host ip cr no ssh known hosts host ip 1024 ssh rsa ssh dsa where key rsa1 rsa dsa Disables the secure...

Страница 232: ...separated by a dash An example is shown next Enter the configuration command set Enable ports one three four and five for configuration Begin configuring for those ports Figure 31 20 interface Command...

Страница 233: ...onfiguration Enable broadcast control Set the number of broadband packets the interface receives per second Figure 31 22 broadcast limit Command Example 31 8 4 bandwidth limit Syntax bandwidth limit b...

Страница 234: ...nalysis An example is shown next Enable port mirroring Enable the monitor port three Enable ports one four five and six for configuration Enable port mirroring on the interface Enable port mirroring f...

Страница 235: ...Syntax ingress check Enables the device to discard incoming frames for VLANs that are not included in a port member set An example is shown next Enable ports one three four and five for configuration...

Страница 236: ...nterface Figure 31 28 vlan trunking Command Example 31 8 10 weight Syntax weight wt1 wt2 wt8 where wt1 wt2 wt8 Sets the interface WFQ weighting A weight value of one to eight is given to each variable...

Страница 237: ...2 from the VLAN Add ports 0 6 and 7 9 as outgoing ports for the VLAN Figure 31 30 egress set Command Example 31 8 12 qos priority Syntax qos priority 0 7 where 0 7 Sets the quality of service priority...

Страница 238: ...mode half full and speed 10 100 1000 Mbps of the connection on the interface Selecting auto auto negotiation makes one port able to negotiate with a peer automatically to obtain the connection speed a...

Страница 239: ...ed for the VID of a frame then the frame is transmitted as a tagged frame otherwise it is transmitted as an untagged frame 32 2VLAN Databases A VLAN database stores and organizes VLAN registration inf...

Страница 240: ...gged VLAN Configuration and Activation Example 6 Configure your management VLAN Use the vlan vlan id command to create a VLAN VID 3 in this example for managing the switch and the switch will activate...

Страница 241: ...imer for GVRP in milliseconds Each port has a single Leave All Period timer Leave All Timer must be larger than Leave Timer the default is 10000 milliseconds This command sets the switch s GARP timer...

Страница 242: ...N information to other switches 32 5Port VLAN Commands You must configure the switch port VLAN settings in config interface mode 32 5 1 Set Port VID Syntax pvid VID where VID Specifies the VLAN number...

Страница 243: ...he port s Use the no gvrp command to disable GVRP The following example turns off GVRP for ports 1 to 5 Figure 32 7 no gvrp Command Example 32 5 4 Modify Static VLAN Use the following commands in the...

Страница 244: ...s tag against the SVLAN table 3 The switch notes what the SVLAN table says that is the SVLAN tells the switch whether or not to forward a frame and if the forwarded frames should have tags 4 Then the...

Страница 245: ...enables the specified VLAN ID in the SVLAN Static VLAN table 32 7Disable VLAN Syntax vlan vlan id inactive This command disables the specified VLAN ID in the SVLAN Static VLAN table 32 8Show VLAN Sett...

Страница 246: ......

Страница 247: ...Appendices and Index VIII Part VIII Appendices and Index This part contains an appendix and an index...

Страница 248: ...bit port paired with a mini GBIC slot One console port One RJ 45 management port Interfaces GS 3012F Eight mini GBIC slots for uplinking Four Gigabit interfaces consisting of a 10 100 1000BASE T RJ 45...

Страница 249: ...Buffer 1MB excluding optional modules Uplink data buffers depend on the uplink module used see your module manual VLAN IEEE 802 1Q tag based VLAN 4094 Max IEEE 802 1p Priority Queues Eight CoS queues...

Страница 250: ...3012F Main switch 3Kg LED Main switch BPS PWR SYS ALM Per Port LNK ACT FDX GS 3012 Per Port 1000 100 GS 3012F Per GBIC Slot LNK ACT Per Management Port 10 100 Dimensions Main switch GS 3012 438 W x 3...

Страница 251: ...C Caution For continued protection against risk of fire replace only with the same type and fuse rating Operating Temperature 0 C 45 C 32 F to 113 F Storage Temperature 25 C 70 C 13 F to 158 F Operati...

Страница 252: ...3 Bridge MIBs RFC 1493 1 2 Bridge Priority 10 5 Bridge Protocol Data Units BPDUs 10 2 Broadcast storm control 1 3 Broadcast Storm Control 12 1 C Calssifier View summary 18 4 Canonical Format Indicato...

Страница 253: ...sclaimer ii DS See Differentiated Services DS field 19 1 DVLAN Table 32 1 Dynamic Link Aggregation 14 1 E egress port 7 11 Error Packet 5 4 Ethernet Address 6 2 Ethernet MIBs RFC 1643 1 2 Ethernet Por...

Страница 254: ...Hello Time 10 3 10 5 Help 4 8 How SSH works 24 6 How STP Works 10 2 HTML help xxii xxiii HTTP 18 5 HTTPS 24 7 HTTPS Example 24 7 I IEEE 802 1p 6 7 IEEE 802 1Q See Tagged VLAN IEEE 802 1Q Tagged VLAN 3...

Страница 255: ...ets 2 2 MTU Multi Tenant Unit 6 6 Multi tenant unit MTU xxii N Navigation Panel Links 4 4 Network Applications Bridging 1 4 Backbone 1 3 High Performance Switched Workgroup 1 5 IEEE802 1Q VLAN Applica...

Страница 256: ...2 Rapid Spanning Tree Protocol 10 1 ras 23 4 Ras 23 4 Rear Panel 3 5 Rear Panel Connections 3 6 Reauthentication 15 3 Related Documentation xxiii Remote Management 24 11 repair iii Resetting the Swit...

Страница 257: ...ree Protocol 1 3 STP Path Costs 10 1 STP Status 10 2 STP Terminology 10 1 Strict Priority Queuing SPQ 17 1 SVLAN Table 32 1 Switch Lockout 4 6 Switch Setup 6 6 7 3 Switching Method A 2 Synchronized Po...

Страница 258: ...AN 7 1 Explicit Tagging 32 1 Forwarding 7 1 ID VID 32 1 Implicit Tagging 32 1 Introduction 6 6 Port based 7 9 Priority frame 7 1 Registration Information 32 1 Tagged VLAN 7 1 VLAN Virtual Local Area N...

Страница 259: ...2F User s Guide B 8 Index WRR See Weighted Round Robin Scheduling X XMODEM upload 4 7 Z ZyNOS ZyXEL Network Operating System 23 4 ZyNOS Firmware version 6 2 ZyXEL Limited Warranty iii Note iii ZyXEL W...

Результаты поиска

Содержание Dimension GS-3012

Отзывы:

ZyXEL Communications Dimension GS-3012, Руководство пользователя, Страница: 172 / 259

Результаты поиска

Содержание Dimension GS-3012

Отзывы: