This manual is intended for people who want to configure the Switch using the
web configurator.
Related Documentation
• Support Disc
Refer to the included CD for support documents.
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team, ZyXEL Communications Corp.,
6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
Need More Help?
More help is available at www.zyxel.com.
• Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide and
Quick Start Guide in order to better understand how to use your product.
• Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
GS1500-24P User’s Guide
3
Page 4
About This User's Guide
•Forum
This contains discussions on ZyXEL products. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should contact your vendor. If you cannot contact your vendor, then contact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following information ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
4
GS1500-24P User’s Guide
Page 5
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The GS1500-24P may be referred to as the “Switch”, the “device”, the “system”
or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other
words”.
GS1500-24P User’s Guide
5
Page 6
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The Switch icon is
not an exact representation of your device.
SwitchComputerNotebook computer
ServerDSLAMFirewall
Tele p ho n eSwitchRouter
6
GS1500-24P User’s Guide
Page 7
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Do not obstruct the device ventillation slots as insufficient airflow may harm your device.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Use ONLY power wires of the appropriate wire gauge (see Chapter 24 on page 161 for
details) for your device. Connect it to a power supply of the correct voltage (see Chapter
24 on page 161 for details).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power
source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Fuse Warning! Replace a fuse only with a fuse of the same type and rating.
• The length of exposed (bare) power wire should not exceed 7 mm.
• For pluggable equipment (equipment that doesn’t have a fixed power connection), the
socket-outlet shall be installed near the equipment and shall be easily accessible (install
the device within reach of a power outlet and keep the area free of obstructions).
Your product is marked with this symbol, which is known as the WEEE mark.
WEEE stands for Waste Electronics and Electrical Equipment. It means that used
electrical and electronic products should not be mixed with general waste. Used
electrical and electronic equipment should be treated separately.
GS1500-24P User’s Guide
7
Page 8
Safety Warnings
8
GS1500-24P User’s Guide
Page 9
Contents Overview
Contents Overview
Introduction and Hardware ...................................................................................................19
Getting to Know Your Switch ..................................................................................................... 21
Hardware Installation and Connection ....................................................................................... 27
This chapter introduces the main features and applications of the Switch.
The Switch is a web managed switch with Layer 2 functions. The Switch has
twenty-four 10/100/1000 Mbps Ethernet ports each with Power-Over-Ethernet
(PoE) function. It also has four GbE dual personality interfaces with each interface
comprising one mini-GBIC slot and one 100/1000 Mbps RJ-45 port, with either
port or slot active at a time.
With its built-in web configurator, managing and configuring the Switch is easy. In
addition, the Switch can also be managed via Telnet, or third-party SNMP
management.
See Chapter 24 on page 161 for a full list of software features available on the
Switch.
This section shows a few examples of using the Switch in various network
environments.
1.1.1 Backbone Application
The Switch is an ideal solution for small networks where rapid growth can be
expected in the near future. The Switch can be used standalone for a group of
heavy traffic users. You can connect computers and servers directly to the
Switch’s port or connect other switches to the Switch.
GS1500-24P User’s Guide
21
Page 22
Chapter 1 Getting to Know Your Switch
In this example, all computers can share high-speed applications on the server. To
expand the network, simply add more networking devices such as switches,
routers, computers, print servers etc.
Figure 1 Backbone Application
1.1.2 Bridging Example
In this example, the Switch connects different company departments (RD and
Sales) to the corporate backbone. It can alleviate bandwidth contention and
eliminate server and network bottlenecks. All users that need high bandwidth can
connect to high-speed department servers via the Switch. You can provide a
super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the
Switch.
Moreover, the Switch eases supervision and maintenance by allowing network
managers to centralize multiple servers at a single location.
Figure 2 Bridging Application
22
GS1500-24P User’s Guide
Page 23
Chapter 1 Getting to Know Your Switch
1.1.3 High Performance Switching Example
The Switch is ideal for connecting two networks that need high bandwidth. In the
following example, use trunking to connect these two networks.
Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode)
is not feasible for most people due to the expense of replacing all existing
Ethernet cables and adapter cards, restructuring your network and complex
maintenance. The Switch can provide the same bandwidth as ATM at much lower
cost while still being able to use existing adapters and switches. Moreover, the
current LAN structure can be retained as all ports can freely communicate with
each other.
Figure 3 High Performance Switched Workgroup Application
1.1.4 IEEE 802.1Q VLAN Application Examples
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Stations on a logical network belong to one group.
A station can belong to more than one group. With VLAN, a station cannot directly
talk to or hear from stations that are not in the same group(s) unless such traffic
first goes through a router.
For more information on VLANs, refer to Chapter 8 on page 67.
1.1.4.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain thus
increase network performance through reduced broadcast traffic. VLAN groups
can be modified at any time by adding, moving or changing ports without any recabling.
GS1500-24P User’s Guide
23
Page 24
Chapter 1 Getting to Know Your Switch
Shared resources such as a server can be used by all ports in the same VLAN as
the server. In the following figure only ports that need access to the server need
to be part of VLAN 1. Ports can belong to other VLAN groups too.
Figure 4 Shared Server Using VLAN Example
1.2 Ways to Manage the Switch
Use any of the following methods to manage the Switch.
• Web Configurator. This is recommended for everyday management of the Switch
using a (supported) web browser. See Chapter 4 on page 39.
• TFTP. Use TFTP for firmware upgrades and configuration backup/restore. See
Chapter 22 on page 149.
• SNMP. The Switch can be monitored by an SNMP manager. See Chapter 12 on
page 95.
1.3 Good Habits for Managing the Switch
Do the following things regularly to make the Switch more secure and to manage
the Switch more effectively.
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
24
GS1500-24P User’s Guide
Page 25
Chapter 1 Getting to Know Your Switch
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget your password, you will have to reset the
Switch to its factory default settings. If you backed up an earlier configuration
file, you would not have to totally re-configure the Switch. You could simply
restore your last configuration.
GS1500-24P User’s Guide
25
Page 26
Chapter 1 Getting to Know Your Switch
26
GS1500-24P User’s Guide
Page 27
CHAPTER 2
Hardware Installation and
Connection
2.1 Installation Scenarios
This chapter shows you how to install and connect the Switch.
The Switch can be placed on a desktop or rack-mounted on a standard EIA rack.
Use the rubber feet in a desktop installation and the brackets in a rack-mounted
installation.
Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front
and 3.4 inches (8 cm) at the back of the Switch. This is especially important for
enclosed rack installations.
2.2 Desktop Installation Procedure
1Make sure the Switch is clean and dry.
2Set the Switch on a smooth, level surface strong enough to support the weight of
the Switch and the connected cables. Make sure there is a power outlet nearby.
3Make sure there is enough clearance around the Switch to allow air circulation and
the attachment of cables and the power cord.
2.3 Mounting the Switch on a Rack
The Switch can be mounted on an EIA standard size, 19-inch rack or in a wiring
closet with other equipment. Follow the steps below to mount your Switch on a
standard EIA rack using a rack-mounting kit.
GS1500-24P User’s Guide
27
Page 28
Chapter 2 Hardware Installation and Connection
2.3.1 Rack-mounted Installation Requirements
• Two mounting brackets.
• Eight M3 flat head screws and a #2 Philips screwdriver.
• Four M5 flat head screws and a #2 Philips screwdriver.
Failure to use the proper screws may damage the unit.
2.3.1.1 Precautions
• Make sure the rack will safely support the combined weight of all the equipment
it contains.
• Make sure the position of the Switch does not make the rack unstable or topheavy. Take all necessary precautions to anchor the rack securely before
installing the unit.
2.3.2 Attaching the Mounting Brackets to the Switch
1Position a mounting bracket on one side of the Switch, lining up the four screw
holes on the bracket with the screw holes on the side of the Switch.
Figure 5 Attaching the Mounting Brackets
2Using a #2 Philips screwdriver, install the M3 flat head screws through the
mounting bracket holes into the Switch.
3Repeat steps 1 and 2 to install the second mounting bracket on the other side of
the Switch.
4You may now mount the Switch on a rack. Proceed to the next section.
28
GS1500-24P User’s Guide
Page 29
Chapter 2 Hardware Installation and Connection
2.3.3 Mounting the Switch on a Rack
1Position a mounting bracket (that is already attached to the Switch) on one side of
the rack, lining up the two screw holes on the bracket with the screw holes on the
side of the rack.
Figure 6 Mounting the Switch on a Rack
2Using a #2 Philips screwdriver, install the M5 flat head screws through the
mounting bracket holes into the rack.
3Repeat steps 1 and 2 to attach the second mounting bracket on the other side of
the rack.
GS1500-24P User’s Guide
29
Page 30
Chapter 2 Hardware Installation and Connection
30
GS1500-24P User’s Guide
Page 31
CHAPTER 3
Ethernet Ports
Dual Personality Interfaces
LEDs
Hardware Panels
3.1 Overview
This chapter describes the front panel and rear panel of the Switch and shows you
how to make the hardware connections.
3.2 Front Panel
The following figure shows the front panel of the Switch.
Figure 7 Front Panel
The following table describes the port labels on the front panel.
Table 1 Front Panel Connections
LABELDESCRIPTION
24 10/100/
1000 RJ-45
Ethernet
Ports
GS1500-24P User’s Guide
Connect these ports to a computer, a hub, an Ethernet switch or router.
31
Page 32
Chapter 3 Hardware Panels
Table 1 Front Panel Connections (continued)
LABELDESCRIPTION
Four Dual
Personality
Interfaces
Each interface has one 1000BASE-T RJ-45 port and one Small Form-Factor
Pluggable (SFP) slot (also called a mini-GBIC slot), with one port or
transceiver active at a time.
• Four 100/1000 Mbps RJ-45 Ports:
Connect these ports to high-bandwidth backbone network Ethernet
switches using 1000BASE-T compatible Category 5/5e/6 copper cables.
•Four Mini-GBIC Slots:
Use mini-GBIC transceivers in these slots for connections to backbone
Ethernet switches.
3.2.1 Gigabit Ethernet Ports
The Switch has 1000Base-T auto-negotiating, auto-crossover Ethernet ports. In
10/100/1000 Mbps Gigabit, the speed can be 10 Mbps, 100 Mbps or 1000 Mbps
and the duplex mode can be half duplex or full duplex.
An auto-negotiating port can detect and adjust to the optimum Ethernet speed
(10/100/1000 Mbps) and duplex mode (full duplex or half duplex) of the
connected device.
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straightthrough or crossover Ethernet cable.
Four 1000Base-T Ethernet ports are paired with a mini-GBIC slot to create a dual
personality interface. The Switch uses up to one connection for each mini-GBIC
and 1000Base-T Ethernet pair. The mini-GBIC slots have priority over the Gigabit
ports. This means that if a mini-GBIC slot and the corresponding GbE port are
connected at the same time, the GbE port will be disabled.
When auto-negotiation is turned on, an Ethernet port negotiates with the peer
automatically to determine the connection speed and duplex mode. If the peer
Ethernet port does not support auto-negotiation or turns off this feature, the
Switch determines the connection speed by detecting the signal on the cable and
using half duplex mode. When the Switch’s auto-negotiation is turned off, an
Ethernet port uses the pre-configured speed and duplex mode when making a
connection, thus requiring you to make sure that the settings of the peer Ethernet
port are the same in order to connect.
3.2.1.1 Default Ethernet Negotiation Settings
The factory default negotiation settings for the Gigabit ports on the Switch are:
32
• Speed: Auto
•Duplex: Auto
GS1500-24P User’s Guide
Page 33
• Flow control: Off
•Link Aggregation: Disabled
3.2.1.2 Auto-crossover
All ports are auto-crossover, that is auto-MDIX ports (Media Dependent Interface
Crossover), so you may use either a straight-through Ethernet cable or crossover
Ethernet cable for all Gigabit port connections. Auto-crossover ports automatically
sense whether they need to function as crossover or straight ports, so crossover
cables can connect both computers and switches/hubs.
3.2.2 Mini-GBIC Slots
These are slots for mini-GBIC (Gigabit Interface Converter) transceivers. A
transceiver is a single unit that houses a transmitter and a receiver. The Switch
does not come with transceivers. You must use transceivers that comply with the
Small Form-factor Pluggable (SFP) Transceiver MultiSource Agreement (MSA). See
the SFF committee’s INF-8074i specification Rev 1.0 for details.
Chapter 3 Hardware Panels
You can change transceivers while the Switch is operating. You can use different
transceivers to connect to Ethernet switches with different types of fiber-optic or
even copper cable connectors.
To avoid possible eye injury, do not look into an operating fiberoptic module’s connectors.
• Type: SFP connection interface
• Connection speed: 1 Gigabit per second (Gbps)
3.2.2.1 Transceiver Installation
Use the following steps to install a mini-GBIC transceiver (SFP module).
1Insert the transceiver into the slot with the exposed section of PCB board facing
down.
2Press the transceiver firmly until it clicks into place.
3The Switch automatically detects the installed transceiver. Check the LEDs to
verify that it is functioning properly.
4Close the transceiver’s latch (latch styles vary).
GS1500-24P User’s Guide
33
Page 34
Chapter 3 Hardware Panels
5Connect the fiber optic cables to the transceiver.
Figure 8 Transceiver Installation Example
Figure 9 Connecting the Fiber Optic Cables
3.2.2.2 Transceiver Removal
Use the following steps to remove a mini-GBIC transceiver (SFP module).
1Remove the fiber optic cables from the transceiver.
2Open the transceiver’s latch (latch styles vary).
3Pull the transceiver out of the slot.
Figure 10 Removing the Fiber Optic Cables
Figure 11 Opening the Transceiver’s Latch Example
Figure 12 Transceiver Removal Example
34
GS1500-24P User’s Guide
Page 35
3.2.3 The RESET Button
Reset the Switch to its factory default configuration via the RESET button. Press
the RESET button for one second and release. The Switch automatically reboots
and reloads its factory default configuration file. The RESET button is on the front
panel of the Switch.
3.3 Rear Panel
The following figure shows the rear panel of the Switch.
Figure 13 Rear Panel
Chapter 3 Hardware Panels
3.3.1 Power Connector
Note: Make sure you are using the correct power source as shown on the panel.
To connect power to the Switch, insert the female end of the power cord to the AC
power receptacle on the rear panel. Connect the other end of the supplied power
cord to a power outlet. Make sure that no objects obstruct the airflow of the unit.
See Chapter 24 on page 161 for information on the Switch’s power supply
requirements.
3.4 LEDs
After you connect the power to the Switch, view the LEDs to ensure proper
functioning of the Switch and as an aid in troubleshooting.
Table 2 LED Descriptions
LEDCOLOR
PWRGreenOnThe system is turned on.
STATU
S
OffThe system is off or has failed.
DESCRIPTION
GS1500-24P User’s Guide
35
Page 36
Chapter 3 Hardware Panels
Table 2 LED Descriptions (continued)
LEDCOLOR
SYSGreenOn The system is on and functioning properly.
Ethernet Ports
LNK/ACT GreenBlinkingThe system is transmitting/receiving to/from a 10 Mbps or
AmberBlinkingThe system is transmitting/receiving to/from a 100 Mbps
PoEAmberOnThe port is feeding power.
FDXAmberOnThe port is in full-duplex mode.
Mini-GBIC Slots
LNKGreenOnThe link to this port is up.
ACTGreenBlinkingThis port is receiving or transmitting data.
STATU
S
BlinkingThe system is rebooting and performing self-diagnostic
OffThe power is off or the system is not ready/
OnThe link to a 10 Mbps or a 1000 Mbps Ethernet network is
OnThe link to a 100 Mbps Ethernet network is up.
OffThe link to an Ethernet network is down.
OffThe port is not feeding power.
OffThe port is in half-duplex mode.
OffThe link to this port is not connected.
DESCRIPTION
tests.
malfunctioning.
a 1000 Mbps Ethernet network.
up.
Ethernet network.
36
GS1500-24P User’s Guide
Page 37
PART II
Basic Configuration
The Web Configurator (39)
Initial Setup Example (47)
System (51)
37
Page 38
38
Page 39
CHAPTER 4
The Web Configurator
4.1 Overview
This section introduces the configuration and functions of the web configurator.
The web configurator is an HTML-based management interface that allows easy
Switch setup and management via Internet browser. Use Internet Explorer 6.0
and later or Netscape Navigator 7.0 and later versions. The recommended screen
resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled
by default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
4.2 System Login
1Start your web browser.
2Type “http://” and the IP address of the Switch (for example, the default
management IP address is 192.168.1.1) in the Location or Address field. Press
[ENTER].
GS1500-24P User’s Guide
39
Page 40
Chapter 4 The Web Configurator
A
B
C
3The login screen appears. The default username is admin and associated default
password is 1234.
Figure 14 Web Configurator: Login
4Click OK to view the first web configurator screen.
4.3 The Status Screen
The Status screen is the first screen that displays when you access the web
configurator.
The following figure shows the navigating components of a web configurator
screen.
Figure 15 Web Configurator Home Screen (Status)
A - Click the menu items to open submenu links, and then click on a submenu link
to open the screen in the main window. There is also a logout link.
40
B - The device graphic displays information regarding current port usage.
GS1500-24P User’s Guide
Page 41
Chapter 4 The Web Configurator
C - Displays system information such as MAC address and firmware version.
In the navigation panel, click a main link to reveal a list of submenu links.
Table 3 Navigation Panel Sub-links Overview
SYSTEMCONFIGURATIONSECURITYMONITORINGTOOLS
The following table describes the links in the navigation panel.
Table 4 Navigation Panel Links
LINKDESCRIPTION
SYSTEM
InformationThis link takes you to a screen that displays general system information.
Time SettingThis link takes you to a screen where you can configure the Switch’s time
IP SettingThis link takes you to a screen where you can configure the IP address,
User AccountThis link takes you to a screen where you can change the web
Port SettingThis link takes you to a screen where you can configure settings for
GS1500-24P User’s Guide
settings.
subnet mask and gateway settings.
configurator login account.
individual Switch ports.
41
Page 42
Chapter 4 The Web Configurator
Table 4 Navigation Panel Links (continued)
LINKDESCRIPTION
CONFIGURATION
Link
Aggregation
Trunk
Group
Setting
Trunk
Distribution
Algorithim
LACP
Setting
VLANThis sub-menu takes you to screens where you can configure a port-
Static VLAN This link takes you to a screen where you can configure the static VLAN
Port-based
VLAN
Spanning TreeThis sub-menu takes you to screens where you can configure the RSTP
STP Global
Setting
STP Port
Setting
QoSThis sub-menu takes you to screens where you can configure the
Port-based
priority
DSCPbased
priority
Policybased
priority
Priority to
Queue
Mapping
Setting
Packet
Scheduling
MirroringThis sub-menu takes you to screens where you can copy traffic from one
Port-based
Mirroring
Policybased
Mirroring
This sub-menu takes you to screens where you can logically aggregate
physical links to form one logical, higher-bandwidth link.
This link takes you to a screen where you can assign ports to be part of
a trunk group.
This link takes you to a screen where you can configure the trunk
distribution algorithm for the trunk groups.
This link takes you to a screen where you can enable Link Aggregation
Control Protocol (LACP)
based VLAN.
(IEEE 802.1Q) settings on a port.
This link takes you to a screen where you can configure the port VLAN ID
(PVID) for a port.
to prevent network loops.
This link takes you to a screen where you can configure the global
spanning tree settings for the Switch.
This link takes you to a screen where you can configure individual port
spanning tree settings.
Switch’s quality of service (QoS) parameters.
This link takes you to a screen where you can assign a IEEE
802.1p priority to packets based on the ingress (incoming) port
of the packet.
This link takes you to a screen where you can assign priority to
packets based on their Differentiated Services Code Points
(DSCPs).
This link takes you to a screen where you can classify and prioritize
certain traffic flows.
This link takes you to a screen where you can configure the priority
level-to-physical queue mapping.
This link takes you to a screen where you can set priorities for the
Switch queues.
port or ports to another port in order that you can examine the traffic
from the first port without interference.
This link takes you to a screen where you can configure port-based
mirroring.
This link takes you to a screen where you can classify an ingress
traffic flow for mirroring.
42
GS1500-24P User’s Guide
Page 43
Chapter 4 The Web Configurator
Table 4 Navigation Panel Links (continued)
LINKDESCRIPTION
SNMPThis sub-menu takes you to screens where you can configure the Simple
Network Management Protocol (SNMP) settings.
SNMP
Setting
SNMPv3
Setting
Rate LimitThis link takes you to a screen where you can configure rate limits for
Bandwidth
Control
Jumbo FrameThis link takes you to a screen where you can configure the Jumbo
Power Over
Ethernet
SECURITY
MAC AddressThis sub-menu takes you to screens where you can configure MAC
MAC
Forwarding
Tab le
Static MACThis link takes you to a screen where you can
MAC
Filtering
802.1xThis sub-menu takes you to screens where you can configure IEEE
802.1x
Setting
802.1x Port
Setting
Dynamic ARPThis sub-menu takes you to screens where you can activate dynamic
Dynamic
ARP Setting
Dynamic
ARP VLAN
Setting
MAC-IP
Binding
Storm ControlThis link takes you to a screen where you can limit the number of
Defence
Engine
This link takes you to a screen where you can configure your SNMP
settings.
This link takes you to a screen where you can configure your SNMP
v3 settings.
traffic flows.
This link takes you to a screen where you can configure bandwidth limits
on the Switch.
Frame size.
This link takes you to a screen where you can configure the Power Over
Ethernet settings (PoE).
address options.
This link takes you to a screen that displays static and dynamic MAC
forwarding entries.
assign static MAC
addresses for a port.
This link takes you to a screen where you can create filtering rules for
traffic going through the Switch.
802.1x port authentication for clients communicating via the Switch.
This link takes you to a screen where you can activate IEEE
802.1x security and configure the RADIUS server settings.
This link takes you to a screen where you can configure IEEE
802.1x port authentication settings.
Address Resolution Protocol (ARP) learning and enter static ARP
table entries.
This link takes you to a screen where you can specify whether
ports are trusted or untrusted ports for ARP inspection.
This link takes you to a screen where you can enable ARP
inspection on each VLAN.
This link takes you to a screen where you can manage static MAC-IP
bindings for DHCP snooping and ARP inspection.
broadcast, multicast and unknown unicast and multicast packets
the Switch receives per second on the ports.
This link takes you to a screen where you can enable the Defence Engine
to prevent the CPU from being flooded with unknown unicast/multicast
packets.
GS1500-24P User’s Guide
43
Page 44
Chapter 4 The Web Configurator
Table 4 Navigation Panel Links (continued)
LINKDESCRIPTION
MONITORING
LoggingThis sub-menu takes you to screens where you can view and setup
system logs.
Logging
Setting
Logging
Viewing
Port StatisticsThis link takes you to a screen where you can view port statistics.
TOOLS
TFTPThis link takes you to a screen where you can perform firmware and
ResetThis link takes you to a screen where you can reset the switch to factory
RebootThis link takes you to a screen where you can reboot the switch.
This link takes you to a screen where you can configure log settings.
This link takes you to a screen where you can view system logs.
configuration file maintenance.
default settings.
4.3.1 Change Your Password
After you log in for the first time, it is recommended you change the default
administrator password. Click System > User Account to display the next
screen.
Figure 16 Change Administrator Login Password
4.4 Saving Your Configuration
When you are done modifying the settings in a screen, click the Apply button to
save your changes to the Switch.
4.5 Switch Lockout
You could block yourself (and all others) from managing the Switch if you do one
of the following:
44
GS1500-24P User’s Guide
Page 45
Chapter 4 The Web Configurator
1Disable all ports.
2Forget the password and/or IP address.
3Prevent all services from accessing the Switch.
Note: Be careful not to lock yourself and others out of the Switch.
4.6 Resetting the Switch
If you lock yourself (and others) from the Switch or forget the administrator
password, you will need to reload the factory-default configuration file or reset the
Switch back to the factory defaults.
4.7 Logging Out of the Web Configurator
Click Logout in the navigation panel to exit the web configurator. You have to log
in with your password again after you log out. This is recommended after you
finish a management session for security reasons.
Figure 17 Web Configurator: Logout
GS1500-24P User’s Guide
45
Page 46
Chapter 4 The Web Configurator
46
GS1500-24P User’s Guide
Page 47
CHAPTER 5
Initial Setup Example
5.1 Overview
This chapter shows how to set up the Switch for an example network.
The following lists the configuration steps for the initial setup:
• Create a VLAN
• Set port VLAN ID
• Configure the Switch IP management address
5.1.1 Creating a VLAN
VLANs confine broadcast frames to the VLAN group in which the port(s) belongs.
You can do this with port-based VLAN or tagged static VLAN with fixed port
members.
In this example, you want to configure port 1 as a member of VLAN 2.
Figure 18 Initial Setup Network Example: VLAN
GS1500-24P User’s Guide
47
Page 48
Chapter 5 Initial Setup Example
1Click Configuration > VLAN > Static VLAN in the navigation panel and the
following screen will display.
2In the Static VLAN screen, enter 2 in the VLAN ID field and enter a descriptive
name in the VLAN Name field for the VLAN group.
3Since the VLAN2 network is connected to port 1 on the Switch, select Untagged
on port 1 to make it a permanent member of the VLAN2 group only.
4To ensure that VLAN-unaware devices (such as computers and hubs) can receive
frames properly, make sure Untagged is selected as above so the Switch
removes VLAN tags before sending.
5Click Add / Modify to save the settings to the run-time memory. Settings in the
run-time memory are lost when the Switch’s power is turned off.
5.1.2 Setting Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that
the frames are forwarded to the VLAN group that the tag defines.
48
GS1500-24P User’s Guide
Page 49
Chapter 5 Initial Setup Example
In the example network, configure 2 as the port VID on port 1 so that any
untagged frames received on that port get sent to VLAN 2.
Figure 19 Initial Setup Network Example: Port VID
1Click Configuration >
VLAN > Port-based
VLAN in the navigation
panel.
2Enter 2 in the PVID
field for port 1 and click
Apply to save your
changes.
5.2 Configuring Switch Management IP Address
The default management IP address of the Switch is 192.168.1.1. You can change
it by following the example below.
1Connect your computer to any Ethernet port on the Switch. Make sure your
computer is in the same subnet as the Switch.
GS1500-24P User’s Guide
49
Page 50
Chapter 5 Initial Setup Example
2Open your web browser and enter 192.168.1.1 (the default IP address) in the
address bar to access the web configurator. See Section 4.2 on page 39 for more
information.
3Click System> IP
Setting in the navigation
panel.
4Configure the IP fields
and click Apply to save
your changes to the
switch.
50
GS1500-24P User’s Guide
Page 51
CHAPTER 6
System
6.1 Overview
This chapter describes how to configure the Information, Time Setting, IP
Setting, User Account and Port Setting screens.
The Information screen displays general Switch information (such as firmware
version number). The Time Setting screen allows you to set the system time
manually or get the current time and date from an external server when you turn
on your Switch. The real time is then displayed in the Switch logs. The IP Setting
screen allows you to configure a Switch IP address for management purposes. The
User Account screen allows you to configure a login account for the web
configurator. The Port Setting screen allows you to configure Switch port
settings.
6.2 What You Can Do
•Use the Information screen (Section 6.3 on page 52) to check the firmware
version number.
•Use the Time Setting screen (Section 6.4 on page 53) to configure the system
time.
•Use the IP Setting screen (Section 6.5 on page 53) to configure the Switch IP
address and default gateway.
•Use the User Account screen (Section 6.6 on page 54) to configure a login
account for the web configurator.
•Use the Port Setting screen (Section 6.7 on page 55) to configure Switch port
settings.
GS1500-24P User’s Guide
51
Page 52
Chapter 6 System
6.3 Information
In the navigation panel, click System > Information to display the screen as
shown.
Figure 20 System > Information
The following table describes the labels in this screen.
Table 5 System > Information
LABELDESCRIPTION
Device TypeThis field displays the descriptive name of the Switch for identification
purposes.
MAC AddressThis field refers to the Ethernet MAC (Media Access Control) address of the
Switch.
IP AddressThis field displays the IP address of the Switch.
NetmaskThis field displays the IP subnet mask of the IP address.
GatewayThis field displays the IP address of the gateway.
Firmware
Version
Firmware
Date
This field displays the version number of the Switch 's current firmware.
This field displays the date the Switch 's current firmware was created.
52
GS1500-24P User’s Guide
Page 53
6.4 Time Setting
Use this screen to configure the time settings of the Switch. Click System > Time
Setting in the navigation panel to display the screen as shown.
Figure 21 System > Time Setting
The following table describes the labels in this screen.
Table 6 System > Time Setting
LABELDESCRIPTION
SNTPSelect Enable to use Simple Network Time Protocol (SNTP) or Disable
to set the time manually.
Time Server IP
Address
Time
(hh:mm:ss)
Date (yyyymm-dd)
Time ZoneSelect the time difference between UTC (Universal Time Coordinated,
ApplyClick Apply to save your changes to the Switch.
If SNTP is enabled, enter the IP address of the time server you will use.
Click Apply to save your changes to the Switch and to update the time.
Enter the new time in hour, minute and second format.
Enter the new date in year, month and day format.
formerly known as GMT, Greenwich Mean Time) and your time zone from
the drop-down list box.
Chapter 6 System
6.5 IP Setting Screen
Use the IP Setting screen to configure the Switch IP address and the default
gateway device. The gateway field specifies the IP address of the gateway (next
hop) for outgoing traffic.
The Switch needs an IP address for it to be managed over the network. The
factory default IP address is 192.168.1.1. The subnet mask specifies the network
number portion of an IP address. The factory default subnet mask is
255.255.255.0.
GS1500-24P User’s Guide
53
Page 54
Chapter 6 System
Click System > IP Setting in the navigation panel to display the screen as
shown.
Figure 22 System > IP Setting
The following table describes the labels in this screen.
Table 7 System > IP Setting
LABELDESCRIPTION
ModeSelect Static IP from the drop-down box if you don’t have a DHCP server
or if you wish to assign static IP address information to the Switch. You
need to fill in the following fields when you select this option.
Select DHCP option if you have a DHCP server that can assign the Switch
an IP address, subnet mask and a gateway IP address automatically.
IP AddressEnter the IP address of your Switch in dotted decimal notation for
example 192.168.1.1.
Subnet MaskEnter the IP subnet mask of your Switch in dotted decimal notation for
example 255.255.255.0.
GatewayEnter the IP address of the gateway in dotted decimal notation.
ApplyClick Apply to save your changes to the Switch.
6.6 User Account
Use the User Account screen to configure the web configurator login details.
Click System > User Account in the navigation panel to display the screen as
shown.
Note: It is highly recommended that you change the default password (1234).
Figure 23 System > User Account
54
GS1500-24P User’s Guide
Page 55
The following table describes the labels in this screen.
Table 8 System > User Account
LABELDESCRIPTION
New UsernameEnter your new username.
New PasswordEnter your new system password.
Retype PasswordRetype your new system password for confirmation.
ApplyClick Apply to save your changes to the switch.
6.7 Port Setting
Use this screen to configure Switch port settings. Click System > Port Setting in
the navigation panel to display the screen as shown.
Figure 24 System > Port Setting
Chapter 6 System
The following table describes the labels in this screen.
Table 9 System > Port Setting
LABELDESCRIPTION
PortSelect the port(s) from the list box that you will change the port settings
StateSelect Enable from the drop-down box to enable a port. The factory
GS1500-24P User’s Guide
for. Hold down [Shift] or [CTRL] to highlight more than one port from the
list box.
default for all ports is enabled. A port must be enabled for data
transmission to occur. Select Disable to not use a port.
55
Page 56
Chapter 6 System
Table 9 System > Port Setting (continued)
LABELDESCRIPTION
Speed/
Duplex
Flow ControlA concentration of traffic on a port decreases port bandwidth and overflows
Select the speed and the duplex mode of the Ethernet connection on this
port. Choices are Auto, 10M/Half, 10M/Full, 100M/Half, 100M/Full
and 1000M/Full (Gigabit connections only).
Selecting Auto (auto-negotiation) allows one port to negotiate with a peer
port automatically to obtain the connection speed and duplex mode that
both ends support. When auto-negotiation is turned on, a port on the
Switch negotiates with the peer automatically to determine the connection
speed and duplex mode. If the peer port does not support auto-negotiation
or turns off this feature, the Switch determines the connection speed by
detecting the signal on the cable and using half duplex mode. When the
Switch’s auto-negotiation is turned off, a port uses the pre-configured
speed and duplex mode when making a connection, thus requiring you to
make sure that the settings of the peer port are the same in order to
connect.
buffer memory causing packet discards and frame losses. Flow Control is
used to regulate transmission of signals to match the bandwidth of the
receiving port.
The Switch uses IEEE802.3x flow control in full duplex mode and
backpressure flow control in half duplex mode.
IEEE802.3x flow control is used in full duplex mode to send a pause signal
to the sending port, causing it to temporarily stop sending signals when
the receiving port memory buffers fill.
Back Pressure flow control is typically used in half duplex mode to send a
"collision" signal to the sending port (mimicking a state of packet collision)
causing the sending port to temporarily stop sending signals and resend
later. Select Flow Control to enable it.
ApplyClick Apply to save your changes to the Switch.
PortThe Port column displays the port number.
StateThe State column indicates if the port is Enabled or Disabled.
Speed/Duplex
ConfigThe Config column displays the port’s Speed/Duplex configuration.
ActualThe Actual column displays the port’s current Speed/Duplex status.
Flow Control
ConfigThe Config column displays if Flow Control has been configured to be
turned On or Off for the port.
ActualThe Actual column displays the port’s current Flow Control status.
56
GS1500-24P User’s Guide
Page 57
PART III
Configuration
Link Aggregation (59)
VLAN (67)
Spanning Tree Protocol (73)
QoS (79)
Mirroring (91)
SNMP (95)
Rate Limit (107)
Bandwidth Control and Jumbo Frame
(111)
Power Over Ethernet (115)
57
Page 58
58
Page 59
CHAPTER 7
Link Aggregation
7.1 Overview
This chapter shows you how to logically aggregate physical links to form one
logical, higher-bandwidth link.
Link aggregation (trunking) is the grouping of physical ports into one logical
higher-capacity link. You may want to trunk ports if for example, it is cheaper to
use multiple lower-speed links than to under-utilize a high-speed, but more costly,
single-port link. However, the more ports you aggregate then the fewer available
ports you have. A trunk group is one logical link containing multiple ports.
The beginning port of each trunk group must be physically connected to form a
trunk group.
7.2 What You Can Do
•Use the Trunk Group Setting screen (Section 7.4 on page 60) to assign ports
to be part of a trunk group.
•Use the Trunk Distribution Algorithm screen (Section 7.5 on page 62) to
configure the trunk distribution algorithm for the trunk groups.
•Use the LACP Setting screen (Section 7.6 on page 63) to enable Link
Aggregation Control Protocol (LACP).
7.3 What You Need to Know
The Switch supports both static and dynamic link aggregation.
Note: In a properly planned network, it is recommended to implement static link
aggregation only. This ensures increased network stability and control over the
trunk groups on your Switch.
See Section 7.7.1 on page 64 for a static port trunking example.
GS1500-24P User’s Guide
59
Page 60
Chapter 7 Link Aggregation
7.3.1 Dynamic Link Aggregation
The Switch adheres to the IEEE 802.3ad standard for static and dynamic (LACP)
port trunking.
The IEEE 802.3ad standard describes the Link Aggregation Control Protocol
(LACP) for dynamically creating and managing trunk groups.
When you enable LACP link aggregation on a port, the port can automatically
negotiate with the ports at the remote end of a link to establish trunk groups.
LACP also allows port redundancy, that is, if an operational port fails, then one of
the “standby” ports become operational without user intervention. Please note
that:
• You must connect all ports point-to-point to the same Ethernet switch and
configure the ports for LACP trunking.
• LACP only works on full-duplex links.
• All ports in the same trunk group must have the same media type, speed,
duplex mode and flow control settings.
Configure trunk groups or LACP before you connect the Ethernet switch to avoid
causing network topology loops.
7.4 Trunk Group Setting
Click Configuration > Link Aggregation > Trunk Group Setting in the
navigation panel to view the screen as shown.
Figure 25 Configuration > Link Aggregation > Trunk Group Setting
60
GS1500-24P User’s Guide
Page 61
Chapter 7 Link Aggregation
The following table describes the labels in this screen.
Table 10 Configuration > Link Aggregation > Trunk Group Setting
LABELDESCRIPTION
Group IDSelect the group ID This field displays the group ID to identify a trunk
group, that is, one logical link containing multiple ports.
TypeSele c t Static if the ports are to be configured as static members of a trunk
group.
Select LACP if the ports are to be configured to join a trunk group via
LACP.
PortsSelect the ports to be added to the trunk group.
LACP ActiveSelect the LACP active ports to be added to the trunk group. This field is
active when LACP is selected as the Type.
Add / ModifyClick Add / Modify to save your changes to the Switch.
Group IDThis field displays the group ID to identify a trunk group, that is, one
logical link containing multiple ports.
TypeThis field displays Static if the ports are configured as static members of
the trunk group.
This field displays LACP if the ports are configured to be part of the trunk
group via LACP.
PortsThis field displays the ports that are part of the trunk group.
LACP Active/
Passive
SelectSelect the check box for a trunk group setting and click Delete to remove
DeleteClick Delete to remove any selected trunk groups.
Select AllClick Select All to select all trunk group settings.
The first number in this field displays the number of ports that have LACP
activated. The second number displays the number of ports that do not
have LACP activated.
all settings from the selected trunk group.
GS1500-24P User’s Guide
61
Page 62
Chapter 7 Link Aggregation
7.5 Trunk Distribution Algorithm
Click Configuration > Link Aggregation > Trunk Distribution Algorithm to
display the screen shown next. See Section 7.1 on page 59 for more information
on link aggregation.
Figure 26 Configuration > Link Aggregation > Trunk Distribution Algorithm Setting
The following table describes the labels in this screen.
Table 11 Configuration > Link Aggregation > Trunk Distribution Algorithm Setting
LABELDESCRIPTION
Group IDSelect the link aggregation group for which the Distribution Algorithm
Parameters will be changed.
Distribution
Algorithm
Parameters
ApplyClick Apply to save your changes to the Switch.
Select the outgoing traffic distribution type. Packets from the same source
and/or to the same destination are sent over the same link within the
trunk. By default, the Switch uses the Source MAC distribution type. If the
Switch is behind a router, the packet’s destination or source MAC address
will be changed. In this case, set the Switch to distribute traffic based on its
IP address to make sure port trunking can work properly.
Select Source Port to distribute traffic based on the packet’s source port.
Select Source MAC to distribute traffic based on the packet’s source MAC
address.
Select Destination MAC to distribute traffic based on the packet’s
destination MAC address.
Select Source IP to distribute traffic based on the packet’s source IP
address.
Select Destination IP to distribute traffic based on the packet’s
destination IP address.
62
GS1500-24P User’s Guide
Page 63
Table 11 Configuration > Link Aggregation > Trunk Distribution Algorithm Setting
LABELDESCRIPTION
Group IDThis field displays all the trunk groups.
Distribution
Algorithm
Parameters
This field displays which Distribution Algorithm Parameters are active for
each trunk group.
Click Configuration > Link Aggregation > LACP Setting to display the screen
shown next. See Section 7.3.1 on page 60 for more information on dynamic link
aggregation.
Chapter 7 Link Aggregation
Figure 27 Configuration > Link Aggregation > LACP Setting
The following table describes the labels in this screen.
Table 12 Configuration > Link Aggregation > LACP Setting
LABELDESCRIPTION
Link
Aggregation
Control
Protocol
LACP StatusSelect Enable from the drop down box to enable Link Aggregation Control
Note: Do not configure this screen unless you want to enable
dynamic link aggregation.
Protocol (LACP). Select Disable to not use LACP.
GS1500-24P User’s Guide
63
Page 64
Chapter 7 Link Aggregation
Table 12 Configuration > Link Aggregation > LACP Setting (continued)
LABELDESCRIPTION
System
Priority
ApplyClick Apply to save your changes to the Switch.
PortThis field displays the port number.
LACPThis field displays if the port has LACP enabled.
Group IDThe field identifies the link aggregation group, that is, one logical link
LACP system priority is a number between 1 and 65,535. The switch with
the lowest system priority (and lowest port number if system priority is the
same) becomes the LACP “server”. The LACP “server” controls the
operation of LACP setup. Enter a number to set the priority of an active port
using Link Aggregation Control Protocol (LACP). The smaller the number,
the higher the priority level.
containing multiple ports.
7.7 Technical Reference
This section provides technical background information on the topics discussed in
this chapter.
7.7.1 Static Trunking Example
This example shows you how to create a static port trunk group for ports 2-5.
1Make your physical connections - make sure that the ports that you want to
belong to the trunk group are connected to the same destination. The following
figure shows ports 2-5 on switch A connected to switch B.
Figure 28 Trunking Example - Physical Connections
64
GS1500-24P User’s Guide
Page 65
Chapter 7 Link Aggregation
2Adding ports to the trunk group - Click Configuration > Link Aggregation >
Trunk Group Setting. In this screen select trunk Group ID Trunk1, select the
type Static and then highlight ports 2 to 5. To highlight multiple ports hold down
[CTRL] while clicking on the ports. Click Add / Modify when you are done.
Figure 29 Trunking Example - Configuration Screen
3Configuring trunk distribution algorithm - Click Configuration > Link
Aggregation > Trunk Distribution Algorithm Setting. In this screen select
trunk Group ID Trunk1 and then select the traffic distribution algorithm used by
this group. Click Apply when you are done
Figure 30 Trunking Example - Configuration Screen 2
Your trunk group 1 (T1) configuration is now complete.
GS1500-24P User’s Guide
65
Page 66
Chapter 7 Link Aggregation
66
GS1500-24P User’s Guide
Page 67
CHAPTER 8
VLAN
8.1 Overview
This chapter shows you how to configure static, port-based VLANs.
8.2 What You Can Do
•Use the Static VLAN screen (Section 8.4 on page 70) to configure the static
VLAN settings on a port.
•Use the Port-Based VLAN screen (Section 8.5 on page 71) to configure the
port VLAN ID (PVID) for a port.
8.3 What You Need to Know
Read this section to know more about VLAN and how to configure the screens.
8.3.1 IEEE 802.1Q Tagged VLANs
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
contains two bytes of TPID (Tag Protocol Identifier, residing within the type/length
field of the Ethernet frame) and two bytes of TCI (Tag Control Information, starts
after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
GS1500-24P User’s Guide
67
Page 68
Chapter 8 VLAN
frame with VID (VLAN Identifier) of null (0) is called a priority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN
configurations are 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 bits
8.3.2 Forwarding Tagged and Untagged Frames
Each port on the Switch is capable of passing tagged or untagged frames. To
forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware
switch, the Switch first decides where to forward the frame and then strips off the
VLAN tag. To forward a frame from an 802.1Q VLAN-unaware switch to an 802.1Q
VLAN-aware switch, the Switch first decides where to forward the frame, and then
inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is
VLAN 1 for all ports, but this can be changed.
A broadcast frame (or a multicast frame for a multicast group that is known by the
system) is duplicated only on ports that are members of the VID (except the
ingress port itself), thus confining the broadcast to a specific domain.
8.3.3 Common IEEE 802.1Q VLAN terminology
Please refer to the following table.
68
Table 13 IEEE 802.1Q VLAN Terminology
VLAN
PARAMETER
VLAN TypePermanent VLANThis is a static VLAN created manually.
VLAN
Administrative
Control
VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all
TERMDESCRIPTION
Dynamic VLANThis is a VLAN configured by a GVRP registration/
deregistration process.
Registration Fixed Fixed registration ports are permanent VLAN
members.
Registration
Forbidden
Normal
Registration
Untagged Ports belonging to the specified VLAN don't tag all
Ports with registration forbidden are forbidden to
join the specified VLAN.
Ports dynamically join a VLAN using GVRP.
outgoing frames transmitted.
outgoing frames transmitted.
GS1500-24P User’s Guide
Page 69
Table 13 IEEE 802.1Q VLAN Terminology (continued)
VLAN
PARAMETER
VLAN PortPort VID This is the VLAN ID assigned to untagged frames
8.3.4 Static VLAN
Use a static VLAN to decide whether an incoming frame on a port should be
• sent to a VLAN group as normal depending on its VLAN tag.
• sent to a group whether it has a VLAN tag or not.
Chapter 8 VLAN
TERMDESCRIPTION
that this port received.
Acceptable Frame
Type
Ingress filtering If set, the Switch discards incoming frames for
You may choose to accept both tagged and
untagged incoming frames, just tagged incoming
frames or just untagged incoming frames on a
port.
VLANs that do not have this port as a member
• blocked from a VLAN group regardless of its VLAN tag.
You can also tag all outgoing frames (that were previously untagged) from a port
with the specified VID.
GS1500-24P User’s Guide
69
Page 70
Chapter 8 VLAN
8.4 Static VLAN
Use this screen to configure and view static VLAN parameters for the Switch. To
access this screen click Configuration > VLAN > Static VLAN.
Figure 31 Configuration > VLAN > Static VLAN
The following table describes the related labels in this screen.
Table 14 Configuration > VLAN > Static VLAN
LABELDESCRIPTION
VLAN IDEnter the VLAN ID for this static entry; the valid range is between 1 and
4094.
VLAN NameEnter a descriptive name for the VLAN group for identification purposes.
This name consists of up to 16 printable characters.
Port The port number identifies the port you are configuring.
Select AllUse this only if you want to make a row have the same settings for all
ports.
UntaggedSelect Untagged to make the port a permanent member of this VLAN
group. All outgoing frames will be transmitted without a VLAN Group ID
tag.
Tag ge dS el ec t Tagged to make the port a permanent member of this VLAN
group. All outgoing frames will be transmitted with the VLAN Group ID
tag.
Not MemberSelect Not Member to prohibit the port from joining the VLAN group.
Add / ModifyClick Add / Modify to save your changes to the Switch.
VLAN IDThis field displays the ID number of the VLAN group. Click the number to
edit the VLAN settings.
NameThis field displays the descriptive name for this VLAN group.
Member Ports This field displays the ports that are a member of the VLAN group.
Tagged PortsThis field displays all the ports that will transmit outgoing frames with a
VLAN group ID tag.
Untagged
Ports
DeleteSelect the check box and click Delete to remove the VLAN group.
DeleteClick Delete to remove the selected entry from the summary table.
This field displays all the ports that will transmit outgoing frames without
a VLAN group ID tag.
8.5 Port-based VLAN
Use the Port-based VLAN screen to configure the port VLAN ID (PVID). To access
this screen click Configuration > VLAN > Port-based VLAN.
A PVID (Port VLAN ID) is a tag that adds to incoming untagged frames received on
a port so that the frames are forwarded to the VLAN group that the tag defines.
Chapter 8 VLAN
Figure 32 Configuration > VLAN > Port-based VLAN
The following table describes the labels in this screen.
Table 15 Configuration > VLAN > Port-based VLAN
LABELDESCRIPTION
PortSelect the ports to change the PVID for.
PVIDEnter a number between 1 and 4094 as the port VLAN ID (PVID).
PortThis field displays the port number.
ApplyClick Apply to save your changes to the Switch.
PVIDThis field displays the port’s port VLAN ID (PVID).
72
GS1500-24P User’s Guide
Page 73
CHAPTER 9
Spanning Tree Protocol
9.1 Overview
The Switch supports Spanning Tree Protocol (STP) and Rapid Spanning Tree
Protocol (RSTP) as defined in the following standards.
• IEEE 802.1D Spanning Tree Protocol
• IEEE 802.1w Rapid Spanning Tree Protocol
9.2 What You Can Do
•Use the STP Global Setting screen (Section 9.4 on page 75) to configure global
spanning tree settings for the switch.
•Use the STP Port Setting screen (Section 9.5 on page 77) to configure individual
port spanning tree settings.
9.3 What You Need to Know
(R)STP detects and breaks network loops and provides backup links between
switches, bridges or routers. It allows a switch to interact with other (R)STP compliant switches in your network to ensure that only one path exists between
any two stations on the network.
The Switch uses IEEE 802.1w RSTP (Rapid Spanning Tree Protocol) that allows
faster convergence of the spanning tree than STP (while also being backwards
compatible with STP-only aware bridges). In RSTP, topology change information is
directly propagated throughout the network from the device that generates the
topology change. In STP, a longer delay is required as the device that causes a
topology change first notifies the root bridge that then notifies the network. Both
RSTP and STP flush unwanted learned addresses from the filtering database. In
RSTP, the port states are Discarding, Learning, and Forwarding.
Note: In this user’s guide, “STP” refers to both STP and RSTP.
GS1500-24P User’s Guide
73
Page 74
Chapter 9 Spanning Tree Protocol
9.3.1 STP Terminology
The root bridge is the base of the spanning tree.
Path cost is the cost of transmitting a frame onto a LAN through that port. The
recommended cost is assigned according to the speed of the link to which a port is
attached. The slower the media, the higher the cost.
On each bridge, the root port is the port through which this bridge communicates
with the root. It is the port on this switch with the lowest path cost to the root (the
root path cost). If there is no root port, then this switch has been accepted as the
root bridge of the spanning tree network.
For each LAN segment, a designated bridge is selected. This bridge has the lowest
cost to the root among the bridges connected to the LAN.
9.3.2 How STP Works
After a bridge determines the lowest cost-spanning tree with STP, it enables the
root port and the ports that are the designated ports for connected LANs, and
disables all other ports that participate in STP. Network packets are therefore only
forwarded between enabled ports, eliminating any possible network loops.
STP-aware switches exchange Bridge Protocol Data Units (BPDUs) periodically.
When the bridged LAN topology changes, a new spanning tree is constructed.
Once a stable network topology has been established, all bridges listen for Hello
BPDUs (Bridge Protocol Data Units) transmitted from the root bridge. If a bridge
does not get a Hello BPDU after a predefined interval (Max Age), the bridge
assumes that the link to the root bridge is down. This bridge then initiates
negotiations with other bridges to reconfigure the network to re-establish a valid
network topology.
9.3.3 STP Port States
STP assigns five port states to eliminate packet looping. A bridge port is not
allowed to go directly from blocking state to forwarding state so as to eliminate
transient loops.
74
Table 16 STP Port States
PORT
STATE
DisabledSTP is disabled (default).
BlockingOnly configuration and management BPDUs are received and processed.
DESCRIPTION
GS1500-24P User’s Guide
Page 75
Table 16 STP Port States
PORT
STATE
ListeningAll BPDUs are received and processed.
DESCRIPTION
Note: The listening state does not exist in RSTP.
LearningAll BPDUs are received and processed. Information frames are submitted to
the learning process but not forwarded.
ForwardingAll BPDUs are received and processed. All information frames are received
and forwarded.
9.4 STP Global Setting
Use the SPT Global Setting screen to activate one of the STP modes on the
Switch. Click Configuration > Spanning Tree > STP Global Setting.
Figure 33 Configuration > Spanning Tree > STP Global Setting
Chapter 9 Spanning Tree Protocol
The following table describes the labels in this screen.
Table 17 Configuration > Spanning Tree > STP Global Setting
LABELDESCRIPTION
Spanning Tree
Status
Force VersionSelect to use either Spanning Tree Protocol (STP) or Rapid Spanning
GS1500-24P User’s Guide
Select Enabled to use Spanning Tree Protocol (STP) or Rapid Spanning
Tree Protocol (RSTP).
Select Disable to not use STP or RSTP.
Tree Protocol (RSTP). See Section 9.1 on page 73 for background
information on STP.
75
Page 76
Chapter 9 Spanning Tree Protocol
Table 17 Configuration > Spanning Tree > STP Global Setting (continued)
LABELDESCRIPTION
PriorityPriority is used in determining the root switch, root port and designated
port. The switch with the highest priority (lowest numeric value)
becomes the STP root switch. If all switches have the same priority, the
switch with the lowest MAC address will then become the root switch.
Select a value from 0~61440 from the drop-down list box.
The lower the numeric value you assign, the higher the priority for this
bridge.
Priority determines the root bridge, which in turn determines the Root
Hello Time, Root Maximum Age and Root Forwarding Delay.
Maximum Age This is the maximum time (in seconds) the Switch can wait without
receiving a BPDU before attempting to reconfigure. All Switch ports
(except for designated ports) should receive BPDUs at regular intervals.
Any port that ages out STP information (provided in the last BPDU)
becomes the designated port for the attached LAN. If it is a root port, a
new root port is selected from among the Switch ports attached to the
network. The allowed range is 6 to 40 seconds.
Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data
Units) configuration message generations by the root switch. The
allowed range is 1 to 10 seconds.
Forwarding
Delay
This is the maximum time (in seconds) the Switch will wait before
changing states. This delay is required because every switch must
receive information about topology changes before it starts to forward
frames. In addition, each port needs time to listen for conflicting
information that would make it return to a blocking state; otherwise,
temporary data loops might result. The allowed range is 4 to 30
seconds.
As a general rule:
Note: 2 * (Forward Delay - 1) >= Max Age >= 2 * (Hello Time + 1)
Root priorityRoot refers to the base of the spanning tree (the root bridge). This
field displays the root bridge’s priority. This Switch may also be the root
bridge.
Root MAC
Address
Root Path CostThis is the path cost from the root port on this Switch to the root switch.
Root PortThis is the number of the port on the Switch through which this Switch
Root Maximum
Age
Root Hello Time This is the time interval (in seconds) at which the root switch transmits
Root Forward
Delay
Topology
Changes
This is the MAC address of the root bridge.
must communicate with the root of the Spanning Tree.
This is the maximum time (in seconds) the Switch can wait without
receiving a configuration message before attempting to reconfigure.
a configuration message. The root bridge determines Hello Time, Max
Age and Forwarding Delay.
This is the time (in seconds) the root switch will wait before changing
states.
This is the number of times the spanning tree has been reconfigured.
76
GS1500-24P User’s Guide
Page 77
Table 17 Configuration > Spanning Tree > STP Global Setting (continued)
LABELDESCRIPTION
Last Topology
Change Time
ApplyClick Apply to save your changes to the Switch.
This is the time since the spanning tree was last reconfigured.
9.5 STP Port Setting
Click Configuration > Spanning Tree Protocol > STP Port Setting to access
the screen as shown.
Figure 34 Configuration > Spanning Tree Protocol > STP Port Setting
Chapter 9 Spanning Tree Protocol
The following table describes the labels in this screen.
Table 18 Configuration > Spanning Tree Protocol > STP Port Setting
LABELDESCRIPTION
PortSelect the port(s) to change spanning tree protocol settings for.
Path CostPath cost is the cost of transmitting a frame on to a LAN through that
PriorityConfigure the priority for the port here.
GS1500-24P User’s Guide
port. It is recommended to assign this value according to the speed of
the bridge. The slower the media, the higher the cost.
Type a number from 0 to 200000000. Entering 0 means the Switch will
automatically assign a value.
Priority decides which port should be disabled when more than one port
forms a loop in a switch. Ports with a higher priority numeric value are
disabled first. The allowed range is between 0 and 240 and the default
value is 128.
77
Page 78
Chapter 9 Spanning Tree Protocol
Table 18 Configuration > Spanning Tree Protocol > STP Port Setting (continued)
LABELDESCRIPTION
P2PSelect True when the port is connected to one bridge as a Point-to-
Point link type.
Select False when the port is connected to multiple bridges as a Shared
Medium link type.
Select Auto to have the Switch automatically determine the link type.
EdgeSelect True when the port is connected to an end node (a computer
network card for example).
Select False when the port is connected to a bridge node.
ApplyClick Apply to save your changes to the Switch.
PortThis field displays the port number.
StateThis field displays the port states. See Section 9.3.3 on page 74.
RoleThis field displays the role of the port in the network topology.
Path CostConfig displays the Path Cost setting you have configured for the port.
Actual displays the Path Cost setting currently in use.
PriorityThis field displays the port’s priority.
P2PConfig displays the P2P setting you have configured for the port.
Actual displays the P2P setting currently in use.
EdgeConfig displays the Edge setting you have configured for the port.
Actual displays the Edge setting currently in use.
78
GS1500-24P User’s Guide
Page 79
CHAPTER 10
QoS
This chapter introduces the quality of service (QoS) parameters you can configure
on the Switch.
10.1 Overview
Quality of Service (QoS) refers to both a network's ability to deliver data with
minimum delay, and the networking methods used to control the use of
bandwidth. Without QoS, all traffic data is equally likely to be dropped when the
network is congested. This can cause a reduction in network performance and
make the network inadequate for time-critical application such as video-ondemand.
It can be used to prioritize source-to-destination traffic flows. All packets in the
flow are given the same priority.
You can configure the Switch to prioritize traffic even if the incoming packets are
not marked with IEEE 802.1p priority tags or change the existing priority tags
based on the criteria you select.
It also uses queuing algorithms to allow switches to maintain separate queues for
packets from each individual source or flow and prevent a source from
monopolizing the bandwidth.
10.2 What You Can Do
Use the Port-based Priority screen (Section 10.4 on page 81) to assign a IEEE
802.1p priority to packets based on the ingress (incoming) port of the packet.
Use the DSCP-based Priority screen (Section 10.5 on page 82) to assign priority
to packets based on their Differentiated Services Code Points (DSCPs).
Use the Policy-based Priority screens (Section 10.6 on page 83) to classify and
prioritize certain traffic flows.
GS1500-24P User’s Guide
79
Page 80
Chapter 10 QoS
Use the Priority to Queue Mapping screen (Section 10.7 on page 86) to
configure the priority level-to-physical queue mapping.
Use the Packet Scheduling screen (Section 10.8 on page 87) to set priorities for
the Switch queues. This can help distribute bandwidth across the different traffic
queues.
10.3 What You Need to Know
Read on for concepts on QoS that can help you configure the screens in this
chapter.
10.3.1 DiffServ
DiffServ is a class of service (CoS) model that marks packets so that they receive
specific per-hop treatment at DiffServ-compliant network devices along the route
based on the application types and traffic flow. Packets are marked with DiffServ
Code Points (DSCPs) indicating the level of service desired. This allows the
intermediary DiffServ-compliant network devices to handle the packets differently
depending on the code points without the need to negotiate paths or remember
state information for every flow. In addition, applications do not have to request a
particular service or give advanced notice of where the traffic is going.
10.3.2 DSCP and Per-Hop Behavior
DiffServ defines a new DS (Differentiated Services) field to replace the Type of
Service (ToS) field in the IP header. The DS field contains a 6-bit DSCP field which
can define up to 64 service levels and the remaining 2 bits are defined as currently
unused (CU). The following figure illustrates the DS field.
Figure 35 DiffServ: Differentiated Service Field
DSCP (6 bits) CU (2 bits)
DSCP is backward compatible with the three precedence bits in the ToS octet so
that non-DiffServ compliant, ToS-enabled network device will not conflict with the
DSCP mapping.
The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as
it is forwarded across the DiffServ network. Based on the marking rule different
kinds of traffic can be marked for different priorities of forwarding. Resources can
then be allocated according to the DSCP values and the configured policies.
80
GS1500-24P User’s Guide
Page 81
10.3.3 DiffServ Network Example
The following figure depicts a DiffServ network consisting of a group of directly
connected DiffServ-compliant network devices. The boundary node (A in Figure
36) in a DiffServ network classifies (marks with a DSCP value) the incoming
packets into different traffic flows (Platinum, Gold, Silver, Bronze) based on the
configured marking rules. A network administrator can then apply various traffic
policies to the traffic flows. An example traffic policy, is to give higher drop
precedence to one traffic flow over others. In our example, packets in the Bronze
traffic flow are more likely to be dropped when congestion occurs than the packets
in the Platinum traffic flow as they move across the DiffServ network.
Figure 36 DiffServ Network
Chapter 10 QoS
10.4 Port-based Priority
You can configure the Switch to assign a IEEE 802.1p priority to packets based on
the ingress (incoming) port of the packet.
GS1500-24P User’s Guide
81
Page 82
Chapter 10 QoS
Click Configuration > QoS > Port-based Priority in the navigation panel to
display the screen as shown.
PortSelect the number of the port for which you want to assign IEEE 802.1p
priority to incoming frames.
PrioritySelect the IEEE 802.1p priority you want to assign to the packets coming
into the Switch on the ports specified in the Port field.
ApplyClick Apply to save your changes to the Switch.
PortThis field displays the port number.
PriorityThis field indicates what IEEE 802.1p priority is assigned to the incoming
packets from the port.
10.5 DSCP-to-IEEE 802.1p Priority Settings
You can configure the DSCP to IEEE 802.1p mapping to allow the Switch to
prioritize all traffic based on the incoming DSCP value according to the DiffServ to
IEEE 802.1p mapping table.
82
The following table shows the default DSCP-to-IEEE802.1p mapping.
You can configure the Switch to assign a IEEE 802.1p priority to packets coming
into the Switch with DSCPs assigned to them. Click Configuration > QoS >
DSCP-based Priority to display the screen as shown next.
DSCPSelect the DSCP classification identification number(s).
PriorityTo set the IEEE 802.1p priority mapping, select the priority level from the drop-
down list box.
ApplyClick Apply to save your changes to the Switch.
DSCPThis field displays the DSCP classification identification numbers.
PriorityThis field displays the DSCP classification identification number’s IEEE 802.1p
priority.
10.6 Policy-based Priority
Use these screens to classify and prioritize application traffic flows to fine-tune
network performance.
A classifier groups traffic into data flows according to specific criteria such as the
source address, destination address, source port number, destination port number
or incoming port number. For example, you can configure a classifier to select
traffic from the same protocol port (such as Telnet) to form a flow.
GS1500-24P User’s Guide
83
Page 84
Chapter 10 QoS
Click Configuration > QoS > Policy-based Priority to display the screen as
shown next.
Note: Policy-based priority has a higher priority over both port-based and DSCP-
Note: When two policy-based rules conflict with each other, a higher layer rule has
NameType a descriptive name for the policy. This is for identification purpose
only.
Destination
MAC
Address
MaskEnter the mask of the Destination MAC Address.
Source MAC
Address
MaskEnter the mask of the Source MAC Address.
Destination
IP Address
MaskEnter the subnet mask of the Destination IP Address.
Source IP
Address
MaskEnter the subnet mask of the Source IP Address.
VLAN IDType the VLAN ID for which this rule will apply. Specify 0 to ignore this field.
TCP/UDP
Destination
Port
TCP/UDP
Source Port
Ether TypeSpecify an Ethernet type in hexadecimal value.
To specify a destination, type a MAC address in valid MAC address format
(six hexadecimal character pairs).
To specify a source, type a MAC address in valid MAC address format (six
hexadecimal character pairs).
Enter a destination IP address in dotted decimal notation.
Enter a source IP address in dotted decimal notation.
Type the destination port number to which the rule should be applied. Type
0 to ignore this field. See Appendix B on page 171 for a list of common
services.
Type the source port number to which the rule should be applied. Type 0 to
ignore this field. See Appendix B on page 171 for a list of common services.
AddClick Add to save the policy-based priority rule to the Switch.
10.7 Priority to Queue Mapping
IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a
MAC-layer frame that contains bits to define class of service. Frames without an
explicit priority tag are given the default priority of the ingress port. Use the next
screen to configure the priority level-to-physical queue mapping.
The Switch has eight physical queues that you can map to the 8 priority levels. On
the Switch, traffic assigned to higher index queues gets through faster while traffic
in lower index queues is dropped if the network is congested.
Click Configuration > QoS > Priority to Queue Mapping to display the screen
as shown next.
Figure 41 Configuration > QoS > Priority to Queue Mapping
The following table describes the labels in this screen.
86
Table 24 Configuration > QoS > Priority to Queue Mapping
LABELDESCRIPTION
PriorityPriority Level (The following descriptions are based on the traffic types
defined in the IEEE 802.1d standard (which incorporates the 802.1p).
1This is typically used for non-critical “background” traffic such as bulk
transfers that are allowed but that should not affect other applications and
users.
2This is for “spare bandwidth”.
3Typically used for “excellent effort” or better than best effort and would
include important business traffic that can tolerate some delay.
4Typically used for controlled load, latency-sensitive traffic such as SNA
(Systems Network Architecture) transactions.
5Typically used for video that consumes high bandwidth and is sensitive to
jitter.
6Typically used for voice traffic that is especially sensitive to jitter (jitter is
the variations in delay).
7Typically used for network control traffic such as router configuration
messages.
Queue IDSelect the Queue ID for which the Priority should be applied.
ApplyClick Apply to save your changes to the Switch.
PriorityThis field displays the priority for each Queue ID.
Queue IDThis field displays the Queue ID.
10.8 Packet Scheduling
Packet Scheduling is used to help solve performance degradation when there is
network congestion. Use this screen to configure queuing algorithms for outgoing
traffic. See also Priority to Queue Mapping (Chapter 10 on page 86) for related
information.
10.8.1 Strictly Priority Queuing
Strictly Priority Queuing (SPQ) services queues based on priority only. As traffic
comes into the Switch, traffic on the highest priority queue, Q7 is transmitted first.
When that queue empties, traffic on the next highest-priority queue, Q6 is
transmitted until Q6 empties, and then traffic is transmitted on Q5 and so on. If
higher priority queues never empty, then traffic on lower priority queues never
gets sent. SP does not automatically adapt to changing network requirements.
10.8.2 Weighted Fair Queuing
Weighted Fair Queuing is used to guarantee each queue's minimum bandwidth
based on its bandwidth weight (portion) (the number you configure in the Weight
field) when there is traffic congestion. WFQ is activated only when a port has more
GS1500-24P User’s Guide
87
Page 88
Chapter 10 QoS
traffic than it can handle. Queues with larger weights get more guaranteed
bandwidth than queues with smaller weights. This queuing mechanism is highly
efficient in that it divides any available bandwidth across the different traffic
queues. By default, the weight for Q0 is 1, for Q1 is 2, for Q2 is 3, and so on.
Guaranteed quantum is calculated as Queue Weight x 2048 bytes.
10.8.3 Weighted Round Robin Scheduling (WRR)
Round Robin Scheduling services queues on a rotating basis and is activated only
when a port has more traffic than it can handle. A queue is a given an amount of
bandwidth irrespective of the incoming traffic on that port. This queue then moves
to the back of the list. The next queue is given an equal amount of bandwidth, and
then moves to the end of the list; and so on, depending on the number of queues
being used. This works in a looping fashion until a queue is empty.
Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin
scheduling, but services queues based on their priority and queue weight (the
number you configure in the queue Weight field) rather than a fixed amount of
bandwidth. WRR is activated only when a port has more traffic than it can handle.
Queues with larger weights get more service than queues with smaller weights.
This queuing mechanism is highly efficient in that it divides any available
bandwidth across the different traffic queues and returns to queues that have not
yet emptied.
Click Configuration > QoS > Packet Scheduling to display the screen as shown
next.
Figure 42 Configuration > QoS > Packet Scheduling
88
GS1500-24P User’s Guide
Page 89
Chapter 10 QoS
The following table describes the labels in this screen.
Table 25 Configuration > QoS > Packet Scheduling
LABELDESCRIPTION
Scheduling
Algorithm
ApplyClick Apply to save your changes to the Switch.
Queue IDSelect the Queue ID to change the weight for.
WeightSelect Strict Priority or a weight of between 1 to 15. Bandwidth is divided
ApplyClick Apply to save your changes to the Switch.
Queue IDThis field displays the Queue ID.
Scheduling
Algorithm
WeightThis field displays the weight of the queue.
Select Weight-fair-queue (Weighted Fair Queuing) or Weight-round-robin (Weighted Round Robin).
Weighted Fair Queuing is used to guarantee each queue's minimum
bandwidth based on their bandwidth portion (weight) (the number you
configure in the Weight field). Queues with larger weights get more
guaranteed bandwidth than queues with smaller weights.
Weighted Round Robin Scheduling services queues on a rotating basis
based on their queue weight (the number you configure in the queue
Weight field). Queues with larger weights get more service than queues
with smaller weights.
across the different traffic queues according to their weights.
Strictly Priority Queuing services queues based on priority only. When the
highest priority queue empties, traffic on the next highest-priority queue
begins. Q7 has the highest priority and Q0 the lowest.
This field displays the scheduling algorithm for the queue.
GS1500-24P User’s Guide
89
Page 90
Chapter 10 QoS
90
GS1500-24P User’s Guide
Page 91
CHAPTER 11
Mirroring
11.1 Overview
This chapter discusses port-based and policy-based mirroring setup screens.
Port-based mirroring allows you to copy a traffic flow to a monitor port (the port
you copy the traffic to) in order that you can examine the traffic from the monitor
port without interference.
Policy-based mirroring allows you to copy a specfic ingress traffic flow to a monitor
port.
11.2 What You Can Do
Use the Port-based Mirroring screen (Section 11.3 on page 92) to select a
monitor port and specify the traffic flow to be copied to the monitor port.
Use the Policy-based Mirroring screens (Section 11.4 on page 93) to classify an
ingress traffic flow for mirroring.
GS1500-24P User’s Guide
91
Page 92
Chapter 11 Mirroring
11.3 Port-based Mirroring
Click Configuration > Mirroring > Port-based Mirroring in the navigation
panel to display the following screen. Use this screen to select a monitor port and
specify the traffic flow to be copied to the monitor port.
ApplyClick Apply to save your changes to the Switch.
Mirror
Set Index
Mirror
Direction
Mirroring
Port
Mirrored
Port List
Specify the Mirror Set Index number from 1 or 2. The Switch can have two
mirroring ports set up at the same time.
Specify the direction of the traffic to mirror by selecting from the drop-down
list box. Choices are TX (egress - outgoing) or RX (ingress - incoming).
The mirroring port is the port you copy the traffic to in order to examine it in
more detail without interfering with the traffic flow on the original port(s).
Enter the port number of the mirroring port.
Select the ports or trunks to be monitored by the mirroring port.
This field displays the Mirror Set Index number.
This field displays the direction of the traffic that is being monitored. This will
be either Tx (egress - outgoing) or Rx (ingress - incoming).
This field displays the mirroring port. The mirroring port is the port the Switch
copies the traffic to in order to examine it in more detail without interfering
with the traffic flow on the original port(s).
This field displays the ports or trunks that are being monitored by the
mirroring port.
SelectSelect the checkbox for the Mirror Set Index you want to remove the settings
for.
DeleteClick Delete to remove the settings from any selected Mirror Set Index.
11.4 Policy-based Mirroring
Click Configuration > Mirroring > Policy-based Mirroring in the navigation
panel to display the following screen. Use this screen to see a summary of all the
policy-based mirroring entries.
No.This field displays the index number of the policy-based mirroring entries.
NameThis field displays the descriptive name for the policy.
ModifyClick the Modify button to edit the policy.
DeleteSelect the policy you want to delete.
AddClick Add to create a new policy.
Select AllClick Select All to select all policies in the table.
DeleteClick Delete to remove any selected policies.
11.4.1 Policy-based Mirroring - Add/Modify
Click Configuration > Mirroring > Policy-based Mirroring > Add or Modify in
the navigation panel to display the following screen. Use this screen to classify a
traffic flow and configure that flow for monitoring.
GS1500-24P User’s Guide
93
Page 94
Chapter 11 Mirroring
Note: Before configuring a policy-based mirroring rule, you must first assign one of
the mirror sets to a mirroring port on the port-based mirroring screen. See
MaskEnter the subnet mask of the Destination IP Address.
Source IP
Address
MaskEnter the subnet mask of the Source IP Address.
TCP/UDP
Destination
Port
TCP/UDP
Source Port
Mirror SetSelect the mirror set index number 1 or 2. This is used in conjunction with
Enter a destination IP address in dotted decimal notation.
Enter a source IP address in dotted decimal notation.
Type the source port number to which the policy should be applied. Type 0
to ignore this field. See Appendix B on page 171 for a list of common
services.
Type the destination port number to which the rule should be applied. Type
0 to ignore this field. See Appendix B on page 171 for a list of common
services.
the port-based mirroring screen. For example, if mirror set 1 is using port 5
as a mirroring port then port 5 will be the mirroring port for this policy if
mirror set 1 is selected on this screen.
94
You cannot use this field if you have not assigned a mirroring port to a
mirror set index on the port-based mirroring screen.
AddClick Add to save the policy to the Switch.
GS1500-24P User’s Guide
Page 95
CHAPTER 12
SNMP
12.1 Overview
This chapter describes how to configure the SNMP options of the Switch.
Simple Network Management Protocol (SNMP) is an application layer protocol
used to manage and monitor TCP/IP-based devices.
SNMP v3 enhances security for SNMP management. SNMP managers can be
required to authenticate with agents before conducting SNMP management
sessions.
12.2 What You Can Do
•Use the SNMP Setting screen (Section 12.4 on page 97) to configure your
SNMP settings.
•Use the SNMPv3 screen (Section 12.5 on page 99) to configure your SNMPv3
settings.
12.3 What You Need to Know
12.3.1 About SNMP
Simple Network Management Protocol (SNMP) is an application layer protocol
used to manage and monitor TCP/IP-based devices. SNMP is used to exchange
management information between the network management system (NMS) and a
network element (NE). A manager station can manage and monitor the Switch
through the network via SNMP version one (SNMPv1), SNMP version 2c or SNMP
GS1500-24P User’s Guide
95
Page 96
Chapter 12 SNMP
version 3. The next figure illustrates an SNMP management operation. SNMP is
only available if TCP/IP is configured.
Figure 46 SNMP Management Model
An SNMP managed network consists of two main components: agents and a
manager.
An agent is a management software module that resides in a managed switch (the
Switch). An agent translates the local management information from the managed
switch into a form compatible with SNMP. The manager is the console through
which network administrators perform network management functions. It
executes applications that control and monitor managed devices.
The managed devices contain object variables/managed objects that define each
piece of information to be collected about a switch. Examples of variables include
number of packets received, node port status and so on. A Management
Information Base (MIB) is a collection of managed objects. SNMP allows a
manager and agents to communicate for the purpose of accessing these objects.
SNMP itself is a simple request/response protocol based on the manager/agent
model. The manager issues a request and the agent returns responses using the
following protocol operations:
Table 29 SNMP Commands
COMMANDDESCRIPTION
GetAllows the manager to retrieve an object variable from the agent.
GetNext Allows the manager to retrieve the next object variable from a table or list
within an agent. In SNMPv1, when a manager wants to retrieve all
elements of a table from an agent, it initiates a Get operation, followed by a
series of GetNext operations.
Set Allows the manager to set values for object variables within an agent.
Trap Used by the agent to inform the manager of some events.
96
GS1500-24P User’s Guide
Page 97
SNMP v3 and Security
SNMP v3 enhances security for SNMP management. SNMP managers can be
required to authenticate with agents before conducting SNMP management
sessions.
Security can be further enhanced by encrypting the SNMP messages sent from the
managers. Encryption protects the contents of the SNMP messages. When the
contents of the SNMP messages are encrypted, only the intended recipients can
read them.
12.4 SNMP Setting
Use this screen to configure your SNMP settings.
Click Configuration > SNMP > SNMP Setting in the navigation panel to display
the main screen as shown.
Chapter 12 SNMP
GS1500-24P User’s Guide
97
Page 98
Chapter 12 SNMP
Note: A total of 8 community strings can be set.
Figure 47 Configuration > SNMP > SNMP Setting
98
The following table describes the labels in this screen.
Table 30 Configuration > SNMP > SNMP Setting
LABELDESCRIPTION
SNMP Setting
SNMP StatusSelect Enabled to activate SNMP on the Switch.
Select Disabled to not use SNMP on the Switch.
System NameType a System Name for the Switch.
System
Location
System Contact Type a System Contact for the Switch.
Engine IDThe SNMP Engine ID is a unique identifier that identifies agents to the
managers.
The default SNMP Engine ID is the MAC address of the agent.
The format is limited to hexadecimal characters (0~9 and a~f).
ApplyClick Apply to save any changes to the Switch.
Community Strings Setting
StringEnter a Community string, this will act as a password for requests from
the management station.
TypeSel e c t read-only to allow the SNMP manager using this string to collect
information from the Switch.
Select read-write to allow the SNMP manager using this string to
create or edit MIBs (configure settings on the Switch).
ApplyClick Apply to save any changes to the Switch.
StringThis field displays the community strings.
TypeThis field displays the community string’s type. This will either be read-
only or read-write.
SelectSelect the checkbox for the string you want to delete.
DeleteClick Delete to remove any selected community strings.
Trap Receivers Setting
IP AddressEnter the IP addresses of up to four managers to send your SNMP traps
to.
Community
String
ApplyClick Apply to save any changes to the Switch.
IP AddressThis field displays the IP address where the traps from the Switch are
Community
String
SelectSelect the checkbox for the trap receiver entry you want to delete.
DeleteClick Delete to remove any selected trap receiver entries.
Enter a Community string, which is the password sent with each trap
to the SNMP manager.
sent.
This field displays the password which is sent with each trap to the
SNMP manager.
12.5 SNMPv3 Setting
SNMP v3 adds the concept of groups and users to enhance security for SNMP
management. A user is an SNMP manager. A group is a group of SNMP managers
that are assigned common access rights to MIBs. For example, one group of
managers may only have access to agents with MIB II - System Group MIBs while
another may have access to agents with the Ether-like MIB. Use this screen to
configure your SNMPv3 settings.
GS1500-24P User’s Guide
99
Page 100
Chapter 12 SNMP
Note: SNMP v3 is enabled when you create SNMP groups and users. Once SNMP v3
is enabled, you must configure unique SNMP communities for SNMP v1 and/or
SNMP v2c access.
100
GS1500-24P User’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.