Page 1
GS2200-24 Series
Intelligent Layer 2 GbE Switch
Default Login Details
IP Address http://192.168.1.1
User Name admin
Password 1234
Firmware Version 3.90
Edition 1, 2/2010
www.zyxel.com
Copyright © 2010
ZyXEL Communications Corporation
Page 2
Page 3
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the Switch using the
web configurator.
Related Documentation
• Command Line Interface (CLI) Reference Guide
The Command Reference Guide explains how to use the Command-Line
Interface (CLI) and CLI commands to configure the Switch.
• Web Configurator Online Help
The embedded Web Help contains descriptions of individual screens and
supplementary information.
Note: It is recommended you use the web configurator to configure the Switch.
• Support Disc
Refer to the included CD for support documents.
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team , ZyXEL Communications Corp.,
6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
Need More Help?
More help is available at www.zyx el.com.
GS2200-24 User’s Guide
3
Page 4
About This User's Guide
• Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide, Quick
Start Guide and Command Line Interface Reference Guide in order to better
understand how to use your product.
• Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
•Forum
This contains discussions on ZyXEL prod ucts. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should conta ct your vendor. If you cannot contact your vendor, then contact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following informatio n ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
4
GS2200-24 User’s Guide
Page 5
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The GS2200-24 and GS2200-24P may be referred to as the “GS2200-24”,
“GS2200-24P”, “Switch”, the “device”, the “system” or the “product” in this
User’s Guide. Differentiation is made where needed.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “ret urn” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other
words”.
GS2200-24 User’s Guide
5
Page 6
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The S witch icon is
not an exact representation of your device.
The Switch Computer Notebook computer
Server DSLAM Firewall
Telephone Router
6
GS2200-24 User’s Guide
Page 7
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Do not obstruct the device ventillation slots as insufficient airflow may harm your device.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Use ONLY power wires of the appropriate wire gauge (see Chapter 40 on page 333 for
details) for your device. Connect it to a power supply of the correct voltage (see Chapter
40 on page 333 for details).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power
source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Fuse Warning! Replace a fuse only with a fuse of the same type and rating.
• The POE (Power over Ethernet) devices that supply or receive power and their connected
Ethernet cables must all be completely indoors.
Your product is marked with this symbol, which is known as the WEEE mark.
WEEE stands for Waste Electronics and Electrical Equipment. It means that used
electrical and electronic products should not be mixed with general waste. Used
electrical and electronic equipment should be treated separately.
GS2200-24 User’s Guide
7
Page 8
Safety Warnings
8
GS2200-24 User’s Guide
Page 9
Contents Overview
Contents Overview
Introduction and Hardware ...................................................................................................21
Getting to Know Your Switch .....................................................................................................23
Hardware Installation and Connection ................................... ................................. ................... 29
Hardware Panels ....................................................................................................................... 33
Basic Configuration ...............................................................................................................41
The Web Configurator ............................................................................................................... 43
Initial Setup Example ................................................................................................................. 53
Tutorials ..................................................................................................................................... 57
System Status and Port Statistics .................................... ..........................................................67
Basic Setting ............................................................................................................................. 73
Advanced ................................................................................................................................91
VLAN ......................................................................................................................................... 93
Static MAC Forward Setup .......................................................................................................113
Static Multicast Forward Setup .................................................................................................117
Filtering ................................................................................................................................. 121
Spanning Tree Protocol ................... ... ... ... ... .... ........................................................................ 123
Bandwidth Control .... ... ... .... ... ... ... ............................................................................................ 145
Broadcast Storm Control ......................................................................................................... 149
Mirroring .................................................................................................................................. 153
Link Aggregation ................. .....................................................................................................157
Port Authentication ...... ... .... ... ..................................................................................................167
Port Security .................................... ... ... ... ............................................. .... ... ... ... .... ... ..............171
Classifier ................................... .................................................... ........................................... 175
Policy Rule .............................................................................................................................. 181
Queuing Method ...................................................................................................................... 187
................................................................................................................................................ 190
Multicast ................................................................................................................................. 191
AAA ......................................................................................................................................... 209
IP Source Guard ...................................................................................................................... 221
Loop Guard ..................... .... ... ... ............................................. .... ... ... ... ... .... ... ... ... .... .................247
Layer 2 Protocol Tunneling .............. ... ... ... ... .... ... ... ... .... ... ... ... .................................................. 251
IP Application .......................................................................................................................255
Static Route ............................................................................................................................ 257
Differentiated Services ..................................................... ... .... ... ........................................... 261
GS2200-24 User’s Guide
9
Page 10
Contents Overview
DHCP ..................................................................................................................................... 265
Management .........................................................................................................................273
Maintenance ............................................................................................................................ 275
Access Control ........................................................................................................................ 283
Diagnostic .................................... ....................................................... ..................................... 305
Syslog ....................................... .................................................... ........................................... 307
Cluster Management .......... ... ................................................ .... ... ... .........................................311
MAC Table ............................................................................................................................... 319
ARP Table .............................. ... ... .... ... ... ... ............................................. .... ... ... ... .... ... ..............323
Configure Clone ....................................................................................................................... 325
Troubleshooting & Product Specifications .......................................................................327
Troubleshooting ..................................................... .................................................................. 329
Product Specifications ............................................................................................................. 333
Appendices and Index .........................................................................................................341
10
GS2200-24 User’s Guide
Page 11
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: Introduction and Hardware........................................................ 21
Chapter 1
Getting to Know Your Switch.................................................................................................23
1.1 Introduction ......................... ... .... ... ... ... ............................................. .... ... ... ... .... ... ... .............23
1.1.1 Backbone Application ............................................................. .... ... ... ... .... ... ................ 23
1.1.2 Bridging Example ......... .... ... ... ... ... .... ... ... ... .... ................................................ ... ... .... ... 24
1.1.3 High Performance Switching Example .......................................................................25
1.1.4 IEEE 802.1Q VLAN Application Examples ................................................................25
1.2 Ways to Manage the Switch ............................ ... .............................................. ... ... ... ... .... ... 26
1.3 Good Habits for Managing the Switch ................................................................................. 26
Chapter 2
Hardware Installation and Connection .................................................................................29
2.1 Installation Scenarios ............................................. ... ... ... .... ... ... ... ... .... ... ... .......................... 29
2.2 Desktop Installation Procedure ...........................................................................................29
2.3 Mounting the Switch on a Rack .......................................................................................... 29
2.3.1 Rack-mounted Installation Requirements .................................................................. 30
2.3.2 Attaching the Mounting Brackets to the Switch ................................ .......................... 30
2.3.3 Mounting the Switch on a Rack .................................................................................. 31
Chapter 3
Hardware Panels.....................................................................................................................33
3.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 33
3.2 Front Panels ......... ............................................. .... ... ... ... .... ... ............................................. 33
3.2.1 Console Port ....................................................... ... .... ... ... ... ... .... ... ............................. 35
3.2.2 Gigabit Ethernet Ports ........................................ ....................................................... 35
3.2.3 Mini-GBIC Slots ............................................................. ... ... ... .... ... ... ... .......................36
GS2200-24 User’s Guide
11
Page 12
Table of Contents
3.2.4 Power Connector .......................................................... ... ... ....................................... 38
3.3 LEDs ................................. ... .... ... ... ............................................. ... .... ... ............................. 38
Part II: Basic Configuration................................................................... 41
Chapter 4
The Web Configurator............................................................................................................43
4.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 43
4.2 System Login ....................................................................................................................43
4.3 The Status Screen .......................................................................................................... 44
4.3.1 Change Your Password .......................................................................................... 49
4.4 Saving Your Configuration ...................................................................................................49
4.5 Switch Lockout .............................................. ... .... ... ... ............................................. .......... 50
4.6 Resetting the Switch ............................... ... ... ... .............................................. ... ... ... ... ....... 50
4.6.1 Reload the Configuration File .................................................................................... 50
4.7 Logging Out of the Web Configurator ................................................................................. 51
4.8 Help ................................................... ... .... ... ... ............................................. .... ... ................51
Chapter 5
Initial Setup Example..............................................................................................................53
5.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 53
5.1.1 Creating a VLAN ........................................................................................................ 53
5.1.2 Setting Port VID .................................................. ... .... ... ... ..........................................55
5.2 Configuring Switch Management IP Address ...................................................................... 56
Chapter 6
Tutorials...................................................................................................................................57
6.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 57
6.2 How to Use DHCP Snooping on the Switch ........................................................................ 57
6.3 How to Use DHCP Relay on the Switch .............................................................................. 61
6.3.1 DHCP Relay Tutorial Introduction .............................................................................. 61
6.3.2 Creating a VLAN ........................................................................................................ 62
6.3.3 Configuring DHCP Relay .............................................. ... ... ....................................... 65
6.3.4 Troubleshooting ............................................... ... ... .... ... ... ... ....................................... 65
Chapter 7
System Status and Port Statistics.........................................................................................67
12
7.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 67
7.1.1 What You Can Do ............................................... ... .... ... ... ... ....................................... 67
7.2 Port Status Summary ............................................................................................ ... ....... 68
7.2.1 Status: Port Details ................................................................................................70
GS2200-24 User’s Guide
Page 13
Table of Contents
Chapter 8
Basic Setting ..........................................................................................................................73
8.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 73
8.1.1 What You Can Do ............................................... ... .... ... ... ... ....................................... 73
8.2 System Information ........................................................................................................... 74
8.3 General Setup ................................................................................................. ... ... .......... 76
8.4 Introduction to VLANs ........... .... ... ....................................................................................... 78
8.5 Switch Setup Screen .... ... ... .... ... ....................................................................................... 79
8.6 IP Setup .............................................................................................................................. 80
8.6.1 Management IP Addresses ........................................................................................ 81
8.7 Port Setup ................ .... ... ... ............................................. .... ... ... ... ... .... ................................ 83
8.8 PoE Status .......................................................................................................................... 85
8.8.1 PoE Setup .......... ... ... ... .... ... ............................................. ... ... .... ... ... ... .... ................... 87
Part III: Advanced................................................................................... 91
Chapter 9
VLAN........................................................................................................................................93
9.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 93
9.1.1 What You Can Do ............................................... ... .... ... ... ... ....................................... 93
9.1.2 What You Need to Know ...................................... .... ... ... .......................................... 93
9.2 VLAN Status .......................................................................................................................97
9.2.1 VLAN Details ............................................................................................................. 98
9.3 Configure a Static VLAN ..................................................................................................99
9.4 Configure VLAN Port Settings ....................................................................................... 101
9.5 Subnet Based VLANs .......................................................................................................102
9.5.1 Configuring Subnet Based VLAN ........................................................................... 103
9.6 Protocol Based VLANs ...................................... .... ... ........................................................105
9.6.1 Configuring Protocol Based VLAN .......... .... ... ... ... .... ... ... ... ... .... ... ... ... .... ................. 106
9.7 Port-based VLAN Setup ............. ... ... .... ... ... ... ............................................................... 108
9.7.1 Configure a Port-based VLAN ................................................................................. 109
9.8 Technical R eference ..... ... ... ... .............................................................................................111
9.8.1 Create an IP-based VLAN Example ..........................................................................111
Chapter 10
Static MAC Forward Setup...................................................................................................113
10.1 Overview ...........................................................................................................................113
10.1.1 What You Can Do ...................................................................................................113
10.2 Configuring Static MAC Forwarding ............................................................................113
Chapter 11
Static Multicast Forward Setup............................................................................................117
GS2200-24 User’s Guide
13
Page 14
Table of Contents
11.1 Overview ...........................................................................................................................117
11.1.1 What You Can Do ....................................................................................................117
11.1.2 What You Need To Know .........................................................................................117
11.2 Configuring Static Multicast Forwarding ...........................................................................118
Chapter 12
Filtering...............................................................................................................................121
12.1 Overview .......................................................................................................................... 121
12.1.1 What You Can Do .................................................................................................. 121
12.2 Configure a Filtering Rule ..............................................................................................121
Chapter 13
Spanning Tree Protocol........................................................................................................123
13.1 Overview .......................................................................................................................... 123
13.1.1 What You Can Do .................................................................................................. 123
13.1.2 What You Need to Know ........................................................................................ 124
13.2 Spanning Tree Protocol Status Screen ........................................................................... 127
13.3 Spanning Tree Configuration ..........................................................................................127
13.4 Configure Rapid Spanning Tree Protocol ..................................................................... 128
13.5 Rapid Spanning Tree Protocol Status ........................................................................ 130
13.6 Configure Multiple Rapid Spanning Tree Protocol ........................................................ 132
13.7 Multiple Rapid Spanning Tree Protocol Status .......................................................... 134
13.8 Configure Multiple Spanning Tree Protocol .................................................................. 136
13.9 Multiple Spanning Tree Protocol Status .....................................................................139
13.10 Technical Reference ......................................................................................................141
13.10.1 MSTP Network Example ...................................................................................... 141
13.10.2 MST Region ......................................................................................................... 142
13.10.3 MST Instance .......................................................................................................142
13.10.4 Common and Internal Sp anning Tree (CIST) .................. ... .... ... ... ... ..................... 143
Chapter 14
Bandwidth Control................................................................................................................145
14.1 Overview ......................................................................................................................... 145
14.1.1 What You Can Do .................................................................................................. 145
14.2 Bandwidth Control Setup ................................................................................................. 146
Chapter 15
Broadcast Storm Control.....................................................................................................149
15.1 Overview ......................................................................................................................... 149
15.1.1 What You Can Do .................................................................................................. 149
15.2 Broadcast Storm Control Setup ....................................................................................... 150
Chapter 16
Mirroring................................................................................................................................153
14
GS2200-24 User’s Guide
Page 15
Table of Contents
16.1 Overview ......................................................................................................................... 153
16.1.1 What You Can Do .................................................................................................. 153
16.2 Port Mirroring Setup ........................................................................................................ 154
Chapter 17
Link Aggregation ..................................................................................................................157
17.1 Overview ......................................................................................................................... 157
17.1.1 What You Can Do .................................................................................................. 157
17.1.2 What You Need to Know ........................................................................................ 157
17.2 Link Aggregation Status ...................................................................................................159
17.3 Link Aggregation Setting ............................................................................................... 161
17.4 Link Aggregation Control Protocol ................................................................................ 163
17.5 Technical Reference ........................................................................................................164
17.5.1 Static Trunking Example .........................................................................................164
Chapter 18
Port Authentication...............................................................................................................167
18.1 Overview ......................................................................................................................... 167
18.1.1 What You Can Do .................................................................................................. 167
18.1.2 What You Need to Know ........................................................................................ 167
18.2 Port Authentication Configuration ............................ ....................................................... .168
18.3 Activate IEEE 802.1x Security ..................................................................................... 169
Chapter 19
Port Security..........................................................................................................................171
19.1 Overview ......................................................................................................................... 171
19.1.1 What You Can Do .................................................................................................. 171
19.2 Port Security Setup .............................. ....................... ....................... ................... ........... 172
Chapter 20
Classifier................................................................................................................................175
20.1 Overview .......................................................................................................................... 175
20.1.1 What You Can Do .................................................................................................. 175
20.1.2 What You Need to Know ........................................................................................ 175
20.2 Configuring the Classifier ...............................................................................................176
20.2.1 Viewing and Editing Classifier Configuration ................................................... .... . 178
20.3 Classifier Example ...........................................................................................................180
Chapter 21
Policy Rule............................................................................................................................181
21.1 Policy Rules Overview ....................................................................................................181
21.1.1 What You Can Do .................................................................................................. 181
21.2 Configuring Policy Rules ................................................................................................. 181
GS2200-24 User’s Guide
15
Page 16
Table of Contents
21.2.1 Viewing and Editing Policy Configuration ..............................................................184
21.3 Policy Example ................................................................................................................ 185
Chapter 22
Queuing Method....................................................................................................................187
22.1 Overview ......................................................................................................................... 187
22.1.1 What You Can Do .................................................................................................. 187
22.1.2 What You Need to Know ........................................................................................ 187
22.2 Configuring Queuing ........................................................................................................ 188
...............................................................................................................................................190
Chapter 23
Multicast ...............................................................................................................................191
23.1 Overview ........................................................................................................................ 191
23.1.1 What You Can Do .................................................................................................. 191
23.1.2 What You Need to Know ........................................................................................ 191
23.2 Multicast Status ............................................................................................................... 194
23.3 Multicast Setting .............. ... .... ... ................................................ ... .... .............................. 195
23.4 IGMP Snooping VLAN .................................................................................................... 198
23.5 IGMP Filtering Profile ..................................................................................................... 199
23.6 The MVR Screen ............................................................................................................. 201
23.6.1 MVR Group Configuration .....................................................................................203
23.6.2 MVR Configuration Example ... ... .... ... ..................................................................... 205
Chapter 24
AAA........................................................................................................................................209
24.1 Overview ......................................................................................................................... 209
24.1.1 What You Can Do .................................................................................................. 209
24.1.2 What You Need to Know ........................................................................................ 209
24.2 AAA Screens ................................................................................................................... 210
24.3 RADIUS Server Setup ..................................................................................................211
24.4 TACACS+ Server Setup .............................................................................................. 213
24.5 AAA Setup ...................................................................................................................... 215
24.6 Technical Reference ........................................................................................................217
24.6.1 Vendor Specific Attribute ........................................................................................ 217
24.6.2 Supported RADIUS Attributes ................................................................................ 219
24.6.3 Attributes Used for Authentication ............................ ............ .......... .......... ......... ..... 219
Chapter 25
IP Source Guard ....................................................................................................................221
25.1 Overview .......................................................................................................................... 221
25.1.1 What You Can Do .................................................................................................. 221
25.1.2 What You Need to Know ........................................................................................ 222
16
GS2200-24 User’s Guide
Page 17
Table of Contents
25.2 IP Source Guard ............................................................................................................. 222
25.3 IP Source Guard Static Binding ...................................................................................... 223
25.4 DHCP Snooping ........ ... ... ... .... ... ... ... ... .... ... ..................................................................... 225
25.5 DHCP Snooping Configure ............................................................................................. 228
25.5.1 DHCP Snooping Port Configure ............................................................................ 230
25.5.2 DHCP Snooping VLAN Configure .........................................................................231
25.6 ARP Inspection Status ....................................................................................................233
25.7 ARP Inspection VLAN Status .......................................................................................... 234
25.8 ARP Inspection Log Status .............................................................................................. 235
25.9 ARP Inspection Configure ............................................................................................... 236
25.9.1 ARP Inspection Port Configure .............................................................................. 238
25.9.2 ARP Inspection VLAN Configure ........................................................................... 240
25.10 Technical Reference ......................................................................................................241
25.10.1 DHCP Snooping Overview ...................................................................................241
25.10.2 ARP Inspection Overview .................................................................................... 244
Chapter 26
Loop Guard............................................................................................................................247
26.1 Overview ......................................................................................................................... 247
26.1.1 What You Can Do .................................................................................................. 247
26.1.2 What You Need to Know ........................................................................................ 247
26.2 Loop Guard Setup ...........................................................................................................249
Chapter 27
Layer 2 Protocol Tunneling..................................................................................................251
27.1 Overview ......................................................................................................................... 251
27.1.1 What You Can Do .................................................................................................. 251
27.1.2 What You Need to Know ........................................................................................ 251
27.2 Configuring Layer 2 Protocol Tunneling .................................................................. ... .... . 253
Part IV: IP Application.......................................................................... 255
Chapter 28
Static Route..........................................................................................................................257
28.1 Overview .......................................................................................................................... 257
28.1.1 What You Can Do .................................................................................................. 257
28.2 Configuring Static Routing .............................................................................................. 258
Chapter 29
Differentiated Services......................................................................................................261
29.1 Overview ......................................................................................................................... 261
GS2200-24 User’s Guide
17
Page 18
Table of Contents
29.1.1 What You Can Do .................................................................................................. 261
29.1.2 What You Need to Know ........................................................................................ 261
29.2 Activating DiffServ .......................................................................................................... 263
29.3 DSCP-to-IEEE 802.1p Priority Settings ......................................................................... 263
29.3.1 Configuring DSCP Settings ............................ .......................................... .............. 264
Chapter 30
DHCP.....................................................................................................................................265
30.1 DHCP Overview ............................................................................................................. 265
30.1.1 What You Can Do .................................................................................................. 265
30.1.2 What You Need to Know ........................................................................................ 265
30.2 DHCP Status ... ... ... .... ............................................. ... ... .... ... ... ........................................ 267
30.3 Configuring DHCP Global Relay .................................................................................... 268
30.3.1 Global DHCP Relay Configuration Example .......................................................... 269
30.4 Configuring DHCP VLAN Settings ................................................................................ 269
30.4.1 Example: DHCP Relay for Two VLANs .................................................................. 271
Part V: Management............................................................................. 273
Chapter 31
Maintenance..........................................................................................................................275
31.1 Overview .......................................................................................................................... 275
31.1.1 What You Can Do .................................................................................................. 275
31.2 The Maintenance Screen ...................................... ... ... .... ... ... ........................................ 275
31.2.1 Load Factory Default ............................................................................................. 276
31.2.2 Save Configuration ............................... .......... .......... ......... ....... ......... .......... .......... . 277
31.2.3 Reboot System ....................................................................................................... 277
31.3 Firmware Upgrade ........................................................................................................ 278
31.4 Restore a Configuration File .........................................................................................278
31.5 Backup a Configuration File ......................................................................................... 279
31.6 Technical Reference ........................................................................................................280
31.6.1 FTP Command Line ............................................................................................... 280
31.6.2 Filename Conventions .......................................................................................... 280
31.6.3 FTP Command Line Procedure ............................................................................ 281
31.6.4 GUI-based FTP Clients .......................................................................................... 281
31.6.5 FTP Restrictions .................................................................................................... 282
Chapter 32
Access Control......................................................................................................................283
32.1 Overview ........................................................................................................................ 283
32.1.1 What You Can Do .................................................................................................. 283
18
GS2200-24 User’s Guide
Page 19
Table of Contents
32.2 The Access Control Main Screen .................................................................................... 284
32.3 Configuring SNMP ........................................................................................................ 284
32.4 Configuring SNMP Trap Group ..................................................................................... 287
32.5 Setting Up Login Accounts ......................................................................................... 288
32.6 Service Port Access Control ..................................................................................... 289
32.7 Remote Management ................................................................................................ 290
32.8 Technical Reference ........................................................................................................291
32.8.1 About SNMP .........................................................................................................292
32.8.2 SSH Overview ........................................................................................................ 297
32.8.3 Introduction to HTTPS ............................................................................................ 299
Chapter 33
Diagnostic..............................................................................................................................305
33.1 Overview .......................................................................................................................... 305
33.2 Diagnostic ....................................................................................................................... 305
Chapter 34
Syslog....................................................................................................................................307
34.1 Overview .......................................................................................................................... 307
34.1.1 What You Can Do .................................................................................................. 307
34.2 Syslog Setup .................................................................................................................. 308
34.3 Syslog Server Setup ....................................................................................................... 309
Chapter 35
Cluster Management.............................................................................................................311
35.1 Overview ...........................................................................................................................311
35.1.1 What You Can Do .................................................................................................. 312
35.2 Cluster Management Status ......................................................................................... 312
35.3 Clustering Management Configuration .......................................................................... 314
35.4 Technical Reference ........................................................................................................316
35.4.1 Cluster Member Switch Management ................................................................... 316
Chapter 36
MAC Table..............................................................................................................................319
36.1 Overview ......................................................................................................................... 319
36.1.1 What You Can Do .................................................................................................. 319
36.1.2 What You Need to Know ........................................................................................ 319
36.2 Viewing the MAC Table ...................................................................................................320
Chapter 37
ARP Table..............................................................................................................................323
37.1 Overview ......................................................................................................................... 323
37.1.1 What You Can Do .................................................................................................. 323
GS2200-24 User’s Guide
19
Page 20
Table of Contents
37.1.2 What You Need to Know ........................................................................................ 323
37.2 Viewing the ARP Table ................................................................................................... 324
Chapter 38
Configure Clone....................................................................................................................325
38.1 Overview .......................................................................................................................... 325
38.2 Configure Clone ..............................................................................................................325
Part VI: Troubleshooting & Product Specifications.......................... 327
Chapter 39
Troubleshooting....................................................................................................................329
39.1 Power, Hardware Connections, and LEDs .............................. ... ... .... ... ... ... .... ... ... ... ........329
39.2 Switch Access and Login .................................................................................................330
39.3 Switch Configuration ........................................................................................................332
Chapter 40
Product Specifications.........................................................................................................333
Part VII: Appendices and Index.......................................................... 341
Appendix A Changing a Fuse ..............................................................................................343
Appendix B Common Services.............................................................................................345
Appendix C Legal Information..............................................................................................349
Index.......................................................................................................................................353
20
GS2200-24 User’s Guide
Page 21
PART I
Introduction and
Hardware
Getting to Know Your Switch (23)
Hardware Installation and Connection
(29)
Hardware Panels (33)
21
Page 22
22
Page 23
CHAPTER 1
Getting to Know Your Switch
1.1 Introduction
This chapter introduces the main features and applications of the Switch.
The Switch is a layer-2 standalone Ethernet switch with additional layer-2, layer -3,
and layer-4 features suitable for Ethernets. The Switch has twenty-four 10/100/
1000 Mbps Ethernet ports. It also has four GbE dual personality interfaces with
each interface comprising one mini-GBIC slot and one 100/1000 Mbps RJ-45 port,
with either port or slot active at a time.
With its built-in web configurat or, managing and configuring the Switch is easy. In
addition, the Switch can also be managed via Telnet, any terminal emulator
program on the console port, or third-party SNMP management.
The G2200-24P comes with the Power-over-Ethernet (PoE) feature.
See Chapter 40 on page 333 for a full list of software features available on the
Switch.
This section shows a few examples of using the Switch in various network
environments.
1.1.1 Backbone Application
The Switch is an ideal solution for small networks where rapid growth can be
expected in the near future. The Switch can be used standalone for a group of
heavy traffic users. You can connect computers and servers directly to the
Switch’s port or connect other switches to the Switch.
GS2200-24 User’s Guide
23
Page 24
Chapter 1 Getting to Know Your Switch
In this example, all computers can share high-speed applications on the server. T o
expand the network, simply add more networking devices such as switches,
routers, computers, print servers etc.
Figure 1 Backbone Application
1.1.2 Bridging Example
In this example, the Switch connects different company departments (RD and
Sales) to the corporate backbone. It can alleviate bandwidth contention and
eliminate server and network bottlenecks. All users that need high bandwidth can
connect to high-speed department servers via the Switch. You can provide a
super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the
Switch.
Moreover, the Switch eases supervision and maintenance by allowing network
managers to centralize multiple servers at a single location.
Figure 2 Bridging Application
24
GS2200-24 User’s Guide
Page 25
Chapter 1 Getting to Know Your Switch
1.1.3 High Performance Switching Example
The Switch is ideal for connecting two networks that need high bandwidth. In the
following example, use trunking to connect these two networks.
Switching to higher-speed LANs such as ATM (Asynchronous Tr ansmission Mode)
is not feasible for most people due to the expense of replacing all existing
Ethernet cables and adapter cards, restructuring your network and complex
maintenance. The Switch can provide the same bandwidth as ATM at much lower
cost while still being able to use existing adapters and switches. Moreover, the
current LAN structure can be retained as all ports can freely communicate with
each other.
Figure 3 High Performance Switched Workgroup Application
1.1.4 IEEE 802.1Q VLAN Application Examples
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Stations on a logical network belong to one group.
A station can belong to more than one group. With VLAN, a station cannot directly
talk to or hear from stations that are not in the same group(s) unless such traffic
first goes through a router.
For more information on VLANs, refer to Chapter 9 on page 93.
1.1.4.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain thus
increase network performance through reduced broadcast traffic. VLAN groups
can be modified at any time by adding, moving or changing ports without any recabling.
GS2200-24 User’s Guide
25
Page 26
Chapter 1 Getting to Know Your Switch
Shared resources such as a server can be used by all ports in the same VLAN as
the server. In the following figure only ports that need access to the server need
to be part of VLAN 1. Ports can belong to other VLAN groups too.
Figure 4 Shared Server Using VLAN Example
1.2 Ways to Manage the Switch
Use any of the following methods to manage the Switch.
• Web Conf igurator. This is recommended for ev eryday management of the Sw itch
using a (supported) web browser. See Chapter 4 on page 43.
• Command Line Interface. Line commands offer an alternative to the web
configurator and in some cases are necessary to configure advanced features.
See the CLI Reference Guide.
• FTP. Use FTP for firmware upgrades and configuration backup/restore. See
Section 31.6.1 on page 280.
• SNMP. The Switch can be monitored by an SNMP manager. See Section 32.8.1
on page 292.
• Cluster Management. Cluster Management allows you to manage multiple
switches through one switch, called the cluster manager. See Chapter 35 on
page 311.
1.3 Good Habits for Managing the Switch
26
Do the following things regularly to make the Switch more secure and to manage
the Switch more effectively.
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
GS2200-24 User’s Guide
Page 27
Chapter 1 Getting to Know Your Switch
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget y our password, you will hav e to reset the
Switch to its factory default settings. If you backed up an earlier configuration
file, you would not have to totally re-configure the Switch. You could simply
restore your last configuration.
GS2200-24 User’s Guide
27
Page 28
Chapter 1 Getting to Know Your Switch
28
GS2200-24 User’s Guide
Page 29
CHAPTER 2
Hardware Installation and
Connection
2.1 Installation Scenarios
This chapter shows you how to install and connect the Switch.
The Switch can be placed on a desktop or rack-mounted on a standard EIA rack.
Use the rubber feet in a desktop installation and the brackets in a rack-mounted
installation.
Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front
and 3.4 inches (8 cm) at the back of the Switch. This is especially important for
enclosed rack installations.
2.2 Desktop Installation Procedure
1 Make sure the Switch is clean and dry.
2 Set the Switch on a smooth, level surface strong enough to support the weight of
the Switch and the connected cables. Make sure there is a power outlet nearby.
3 Make sure there is enough clearance around the Switch to allow air circulation and
the attachment of cables and the power cord.
2.3 Mounting the Switch on a Rack
The Switch can be mounted on an EIA standard size, 19-inch rack or in a wiring
closet with other equipment. Follow the steps below to mount your Switch on a
st an dar d EI A ra ck usi ng a ra ck-m oun tin g k it.
GS2200-24 User’s Guide
29
Page 30
Chapter 2 Hardware Installation and Connection
2.3.1 Rack-mounted Installation Requirements
• Two mounting brackets.
• Eight M3 flat head screws and a #2 Philips screwdriver.
• Four M5 flat head screws and a #2 Philips screwdriver.
Failure to use the proper screws may damage the unit.
2.3.1.1 Precautions
• Make sure the rack will safely support the combined weight of all the equipment
it contains.
• Make sure the position of the Switch does not make the rack unstable or topheavy. Tak e all necessary precautions to anchor the rack securely before
installing the unit.
2.3.2 Attaching the Mounting Brackets to the Switch
1 Position a mounting bracket on one side of the Switch, lining up the four screw
holes on the bracket with the screw holes on the side of the Switch.
Figure 5 Attaching the Mounting Brackets
2 Using a #2 Philips screwdriver, install the M3 flat head screws through the
mounting bracket holes into the Switch.
3 Repeat steps 1 and 2 to install the second mounting bracket on the other side of
the Switch.
4 You may now mount the Switch on a rack. Proceed to the next section.
30
GS2200-24 User’s Guide
Page 31
Chapter 2 Hardware Installation and Conn ec t ion
2.3.3 Mounting the Switch on a Rack
1 Position a mounting br acket (that is already attached to the Switch) on one s ide of
the rack, lining up the two screw holes on the br ack et with the screw holes on the
side of the rack.
Figure 6 Mounting the Switch on a Rack
2 Using a #2 Philips screwdriver, install the M5 flat head screws through the
mounting bracket holes into the rack.
3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of
the rack.
GS2200-24 User’s Guide
31
Page 32
Chapter 2 Hardware Installation and Connection
32
GS2200-24 User’s Guide
Page 33
CHAPTER 3
Hardware Panels
3.1 Overview
This chapter describes the front panel and rear panel of the Switch and shows y ou
how to make the hardware connections.
3.2 Front Panels
The following figure shows the front panel of the Switch.
Figure 7 Front Panel (GS200-24)
LEDs
Console Port
GS2200-24 User’s Guide
Ethernet Ports
Dual Personality Interfaces
33
Page 34
Chapter 3 Hardware Panels
The following table describes the port labels on the front panel.
Table 1 Front Panel Connections (GS200-24)
LABEL DESCRIPTION
24 10/100/
1000 RJ-45
Ethernet
Ports
Four Dual
Personality
Interfaces
Console Port The console port is for local configuration of the Switch.
Connect these ports to a computer, a hub, an Ethernet switch or router.
Each interface has one 1000BASE-T RJ-45 port and one Small Form-F actor
Pluggable (SFP) slot (also called a mini-GBIC slot), with one port or
transceiver active at a time.
Note: The ports change to fiber mode directly when inserting the fiber
module.
• Four 100/1000 Mbps RJ-45 Ports:
Connect these ports to high-bandwidth backbone network Ethernet
switches using 1000BASE-T compatible Category 5/5e/6 copper cables.
•Four Mini-GBIC Slots:
Use mini-GBIC transceivers in these slots for connections to backbone
Ethernet switches.
Figure 8 Front Panel (GS200-24P)
LEDs
Ethernet Ports
Dual Personality Interfaces
The following table describes the port labels on the front panel.
Table 2 Front Panel Connections (GS200-24P)
LABEL DESCRIPTION
24 100/1000
BASE-T PoE
Ports
Connect these ports to a computer, a hub, an Ethernet switch or router.
Console Port
34
GS2200-24 User’s Guide
Page 35
Table 2 Front Panel Connections (GS200-24P)
LABEL DESCRIPTION
Four Dual
Personality
Interfaces
Each interface has one 1000BASE-T RJ-45 port and one Small Form-F actor
Pluggable (SFP) slot (also called a mini-GBIC slot), with one port or
transceiver active at a time.
Note: The ports change to fiber mode directly when inserting the fiber
• Four GE PoE Ethernet 100/1000 Mbps RJ-45 Ports:
•Four Mini-GBIC Slots:
Console Port The console port is for local configuration of the Switch.
3.2.1 Console Port
For local management, you can use a computer with terminal emulation software
configured to the following parameters:
Chapter 3 Hardware Panels
module.
Connect these ports to high-bandwidth backbone network Ethernet
switches using 1000BASE-T compatible Category 5/5e/6 copper cables.
Use mini-GBIC transceivers in these slots for connections to backbone
Ethernet switches.
• VT100
• Terminal emulation
• 9600 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
Connect the male 9-pin end of the console cable to the console port of the Switch.
Connect the female end to a serial port (COM1, COM2 or other COM port) of your
computer.
3.2.2 Gigabit Ethernet Ports
The Switch has 1000Base-T auto-negotiating, auto-crossover Ethernet ports. In
10/100/1000 Mbps Gigabit, the speed can be 10 Mbps, 100 Mbps or 1000 Mbps
and the duplex mode can be half duplex or full duplex.
An auto-negotiating port can detect and adjust to the optimum Ethernet speed
(10/100/1000 Mbps) and duplex mode (full duplex or half duplex) of the
connected device.
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straightthrough or crossover Ethernet cable.
GS2200-24 User’s Guide
35
Page 36
Chapter 3 Hardware Panels
Four 1000Base-T Ethernet ports are paired with a mini-GBIC slot to create a dual
personality interface. The Switch uses up to one connection for each mini-GBIC
and 1000Base-T Ethernet pair. The mini-GBIC slots have priority over the Gigabit
ports. This means that if a mini-GBIC slot and the corresponding GbE port are
connected at the same time, the GbE port will be disabled.
Note: The dual personality ports change to fib er mode directly when inserting the fiber
module.
When auto-negotiation is turned on, an Ethernet port negotiates with the peer
automatically to determine the connection speed and duplex mode. If the peer
Ethernet port does not support auto-negotiation or turns off this feature, the
Switch determines the connection speed by detecting the signal on the cable and
using half duplex mode. When the Switch’s auto-negotiation is turned off, an
Ethernet port uses the pre-configured speed and duplex mode when making a
connection, thus requiring you to make sure that the settings of the peer Ethernet
port are the same in order to connect.
3.2.2.1 Default Ethernet Negotiation Settings
The factory default negotiation settings for the Gigabit ports on the Switch are:
• Speed: Auto
•Duplex: Auto
• Flow control: Off
•Link Aggregation: Disabled
3.2.2.2 Auto-crossover
All ports are auto-crossover, that is auto-MDIX ports (Media Dependent Interface
Crossover), so you may use either a straight-through Ethernet cable or crossover
Ethernet cable for all Gigabit port connections. Auto-crossover ports automatically
sense whether they need to function as crossover or straight ports, so crossover
cables can connect both computers and switches/hubs.
3.2.3 Mini-GBIC Slots
These are slots for mini-GBIC (Gigabit Interface Converter) transceivers. A
transceiver is a single unit that houses a transmitter and a receiver. The Switch
does not come with transceivers. You must use transceivers that comply with the
Small Form-factor Pluggable (SFP) Transceiver MultiSource Agreement (MSA). See
the SFF committee’s INF-8074i specification Rev 1.0 for details.
36
You can change transceivers while the Switch is operating. You can use different
transceivers to connect to Ethernet switches with different t ypes of fiber-optic or
even copper cable connectors.
GS2200-24 User’s Guide
Page 37
To avoid possible eye injury, do not look into an operating fiberoptic module’s connectors.
• Type: SFP connection interface
• Connection speed: 1 Gigabit per second (Gbps)
3.2.3.1 Transceiver Installation
Use the following steps to install a mini-GBIC transceiver (SFP module).
1 Insert the transceiver into the slot with the exposed section of PCB board facing
down.
2 Press the transceiver firmly until it clicks into place.
3 The Switch automatically detects the installed transceiver. Check the LEDs to
verify that it is functioning properly.
4 Close the transceiver’s latch (latch styles vary).
Chapter 3 Hardware Panels
5 Connect the fiber optic cables to the transceiver.
Figure 9 Transceiver Installation Example
Figure 10 Connecting the Fiber Optic Cables
3.2.3.2 Transceiver Removal
Use the following steps to remove a mini-GBIC transceiver (SFP module).
1 Remove the fiber optic cables from the transceiver.
2 Open the transceiver’s latch (latch styles vary).
GS2200-24 User’s Guide
37
Page 38
Chapter 3 Hardware Panels
3 Pull the transceiver out of the slot.
Figure 11 Removing the Fiber Optic Cables
Figure 12 Opening the Transceiver’s Latch Example
Figure 13 Transceiver Removal Example
3.2.4 Power Connector
Note: Make sure you are using the correct power source as shown on the panel.
To connect power to the Switch, insert the female end of the power cord to the AC
power receptacle on the front panel. Connect the other end of the supplied power
cord to a power outlet. Make sure that no objects obstruct the airfl ow of the fans
(located on the side of the unit).
See Chapter 40 on page 333 for information on the Switch’s power supply
requirements.
3.3 LEDs
After you connect the power to the Switch, view the LEDs to ensure proper
functioning of the Switch and as an aid in troubleshooting.
Table 3 LED Descriptions
LED COLOR STATUS DESCRIPTION
PWR Green On The system is turned on.
Off The system is off or has failed.
38
GS2200-24 User’s Guide
Page 39
Chapter 3 Hardware Panels
Table 3 LED Descriptions (continued)
LED COLOR STATUS DESCRIPTION
SYS Green On The system is on and functioning properly.
Blinking The system is rebooting and performing self-diagnostic
tests.
Off The power is off or the system is not ready/
malfunctioning.
PPS
(GS2200-24P
only)
ALM Red On A hardware failure is detected.
Ethernet Ports
LNK/ACT Green Blinking The system is transmitting/receiving to/from a 10 Mbps
PoE
(GS2200-24P
only)
FDX Amber
Mini-GBIC Slots
LNK Green On The link to this port is up.
ACT Green Blinking This port is receiving or transmitting data.
Green On External power supply is turned on.
Off External power supply is turned off or has failed.
Off The system is functioning normally.
or a 1000 Mbps Ethernet network.
On The link to a 10 Mbps or a 1000 Mbps Ethernet network is
up.
Amber Blinking The system is transmitting/receiving to/from a 100 Mbps
Ethernet network.
On The link to a 100 Mbps Ethernet network is up.
Off The link to an Ethernet network is down.
Amber
(for 1~24
copper ports)
(GS2200-24P:
for 25~28
copper ports
only)
On Power is supplied to all ports.
Off There is no power supply.
On The Gigabit port is negotiating in full-duplex mode.
Off The Gigabit port is negotiating in half-duplex mode.
Off The link to this port is not connected.
GS2200-24 User’s Guide
39
Page 40
Chapter 3 Hardware Panels
40
GS2200-24 User’s Guide
Page 41
PART II
Basic Configuration
The Web Configurator (43)
Initial Setup Example (53)
System Status and Port Statistics (67)
Basic Setting (73)
41
Page 42
42
Page 43
CHAPTER 4
The Web Configurator
4.1 Overview
This section introduces the configuration and functions of the web configurator.
The web configurator is an HTML-based managem ent interface that allows easy
Switch setup and management via Inter n et br ows e r. Use Internet Explorer 6.0
and later, Netscape Navigator 7.0 and later, Mozilla Firefox 3.0 and later versions.
The recommended screen resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop -up windows from your device. W eb pop-up blocking i s enabled
by default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
4.2 System Login
1 Start your web browser.
2 Type “http://” and the IP address of the Switch (for example, the default
management IP address is 192.168.1.1) in the Location or Address field. Press
[ENTER].
GS2200-24 User’s Guide
43
Page 44
Chapter 4 The Web Configurator
3 The login screen appears. The default username is admin and associated default
password is 1234. The date and time display as shown if you hav e not configured
a time server nor manually entered a time and date in the General Setup screen.
Figure 14 Web Configurator: Login
4 Click OK to view the first web configurator screen.
4.3 The Status Screen
The Status screen is the first screen that displays when you access the web
configurator.
The following figure shows the navigating components of a web configurator
screen.
Figure 15 Web Configurator Home Screen for GS2200-24 (Status)
BDE
C
A
44
GS2200-24 User’s Guide
Page 45
Chapter 4 The Web Configurator
Figure 16 Web Configurator Home Screen for GS2200-24P (Status)
A
BDE
C
A - Click the menu items to open submenu links, and then click on a submenu link
to open the screen in the main window.
B, C, D, E - These are quick links which allow you to perform certain tasks no
matter which screen you are currently working in.
B - Click this link to save your configuration into the Switch’s nonvolatile memory.
Nonvolatile memory is the configuration of y our Switch that stays the same even if
the Switch’s power is turned off.
C - Click this link to go to the status page of the Switch.
D - Click this link to logout of the web configurator.
E - Click this link to display web help pages. The help pages provide descriptions
for all of the configuration screens.
GS2200-24 User’s Guide
45
Page 46
Chapter 4 The Web Configurator
In the navigation panel, click a main link to reveal a list of submenu links.
Table 4 Navigation Panel Sub-links Overview (GS2200-24)
BASIC SETTING
GS2200-24
GS2200-24P
ADVANCED
APPLICATION
IP APPLICATION MANAGEMENT
46
The following table describes the links in the navigation panel.
Table 5 Navigation Panel Links
LINK DESCRIPTION
Basic Settings
System Info This link takes you to a screen that displays general system information.
General Setup This link takes you to a screen where you can configure general
identification information about the Switch.
Switch Setup This link takes you to a screen where you can set up global Switch
parameters such as VLAN type, GARP and priority queues.
IP Setup This link takes you to a screen where you can configure the IP address,
subnet mask (necessary for Switch management) and DNS (domain
name server) and set up to 64 IP routing domains.
Port Setup This link takes you to a screen where you can configure settings for
individual Switch ports.
PoE Setup (For GS2200-24P only) This link takes you to a screen where you can
set priorities so that the Switch is able to reserve and allocate
power to certain PDs.
GS2200-24 User’s Guide
Page 47
Chapter 4 The Web Configurator
Table 5 Navigation Panel Links (continued)
LINK DESCRIPTION
Advanced Application
VLAN This link takes you to screens where you can configure port-based or
802.1Q VLAN (depending on what you configured in the Switch Setup
menu). You can also configure a protocol based VLAN or a subnet based
VLAN in these screens.
Static MAC
Forwarding
Static
Multicast
Forwarding
Filtering This link takes you to a screen to set up filtering rules.
Spanning Tree
Protocol
Bandwidth
Control
Broadcast
Storm Control
Mirroring This link takes you to screens where you can copy traffic from one port
Link
Aggregation
Port
Authentication
Port Security This link takes you to screens where you can activate MAC address
Classifier This link takes you to a screen where you can configure the Switch to
Policy Rule This link takes you to a screen where you can configure the Switch to
Queuing
Method
Multicast This link tak es you to screens where you can configure v arious multicast
AAA This link takes you to a screen where you can configure authentication,
IP Source
Guard
Loop Guard This link takes you to a screen where you can configure protection
Layer 2
Protocol
Tunneling
This link takes you to a screen where you can configure static MAC
addresses for a port. These static MAC addresses do not age out.
This link takes you to a screen where you can configure static multicast
MAC addresses for port(s). These static multicast MAC addresses do not
age out.
This link takes you to screens where you can configure the RSTP/MRSTP/
MSTP to prevent network loops.
This link takes you to a screen where you can configure bandwidth limits
on the Switch.
This link takes you to a screen to set up broadcast filters.
or ports to another port in order that you can examine the traffic from
the first port without interference.
This link takes you to screens where you can logically aggregate physical
links to form one logical, higher-bandwidth link.
This link takes you to a screen where you can configure IEEE 802.1x port
authentication for clients communicating via the Switch.
learning and set the maximum number of MAC addresses to learn on a
port.
group packets based on the specified criteria.
perform special treatment on the grouped packets.
This link takes you to a screen where you can configure queuing with
associated queue weights for each port.
features, IGMP snooping and create multicast VLANs.
authorization services via external servers. The external servers can be
either RADIUS (Remote Authentication Dial-In User Service) or
TACACS+ (Terminal Access Controller Access-Control System Plus).
This link takes you to screens where you can configure filtering of
unauthorized DHCP and ARP packets in your network.
against network loops that occur on the edge of your network.
This link takes you to a screen where you can configure L2PT (Layer 2
Protocol Tunneling) settings on the Switch.
GS2200-24 User’s Guide
47
Page 48
Chapter 4 The Web Configurator
Table 5 Navigation Panel Links (continued)
LINK DESCRIPTION
IP Application
Static Routing This link takes you to a screen where you can configure static routes. A
static route defines how the Switch should forward traffic by configuring
the TCP/IP parameters manually.
DiffServ This link takes you to screens where you can enable DiffServ, configure
marking rules and set DSCP-to-IEEE802.1p mappings.
DHCP This link takes you to screens where you can configure the DHCP
settings.
Management
Maintenance This link takes you to screens where you can perform firmware and
configuration file maintenance as well as reboot the system.
Access Control This link takes you to screens where you can change the system login
password and configure SNMP and remote management.
Diagnostic This link takes you to a screen where you can view system logs and test
port(s).
Syslog This link takes you to screens where you can setup system logs and a
system log server.
Cluster
Management
MAC Table This link takes you to a screen where you can view the MAC addresses
ARP T able This link takes you to a screen where you can view the MAC addresses –
Configure
Clone
This link takes you to screens where you can configure clustering
management and view its status.
(and types) of devices attached to what ports and VLAN IDs.
IP address resolution table.
This link takes you to a screen where you can copy attributes of one port
to other ports.
48
GS2200-24 User’s Guide
Page 49
4.3.1 Change Your Password
After you log in for the first time, it is recommended you change the default
administrator password. Click Management > Access Control > Logins to
display the next screen.
Figure 17 Change Administrator Login Password
Chapter 4 The Web Configurator
4.4 Saving Your Configuration
When you are done modifying the settings in a screen, click Apply to save your
changes back to the run-time memory. Settings in the run-time memory are lost
when the Switch’s power is turned off.
Click the Save link in the upper right hand corner of the web configur ator to save
your configuration to nonvolatile memory. Nonvolatile memory refers to the
Switch’s storage that remains even if the Switch’s power is turned off.
Note: Use the Save link when you are done with a configuration session.
GS2200-24 User’s Guide
49
Page 50
Chapter 4 The Web Configurator
4.5 Switch Lockout
You could block yourself (and all others) from managing the Switch if you do one
of the following:
1 Delete the management VLAN (default is VLAN 1).
2 Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the
management port of the Switch.
3 Filter all traffic to the CPU port.
4 Disable all ports.
5 Misconfigure the text configuration file.
6 Forget the password and/or IP address.
7 Prevent all services from accessing the Switch.
8 Change a service port number but forget it.
Note: Be careful not to lock yourself and others out of the Switch.
4.6 Resetting the Switch
If you lock yourself (and others) from the Switch or forget the administrator
password, you will need to reload the factory-default configur ation file or reset the
Switch back to the factory defaults.
4.6.1 Reload the Configuration File
Uploading the factory-default configuration file replaces the current configuration
file with the factory-default configuration file. This means that you will lose all
previous configurations and the speed of the console port will be reset to the
default of 9600 bps with 8 data bits, no parity, one stop bit and flow control set to
none. The password will also be reset to “1234” and the IP address to
192.168.1.1.
50
To upload the configuration file, do the following:
1 Connect to the console port using a computer with terminal emulation software.
GS2200-24 User’s Guide
Page 51
Chapter 4 The Web Configurator
2 Disconnect and reconnect the Switch’s power to begin a session. When you
reconnect the Switch’s power, you will see the initial screen.
3 When you see the message “Press any key to enter Debug Mode within 3
seconds ...” press any key to enter debug mode.
4 Type atlc after the “Enter Debug Mode” message.
5 Wait for the “Starting XMODEM upload” message before activating XMODEM
upload on your terminal.
6 After a configuration file upload, type atgo to restart the Switch.
The Switch is now reinitialized with a default configuration file including the default
password of “1234”.
4.7 Logging Out of the Web Configurator
Click Logout in a screen to exit the web configurator. Y ou hav e to log in with your
password again after you log out. This is recommended after you finish a
management session for security reasons.
Figure 18 Web Configurator: Logout Screen
4.8 Help
The web configurator’s online help has descriptions of individual screens and some
supplementary information.
Click the Help link from a web configurator screen to view an online help
description of that screen.
GS2200-24 User’s Guide
51
Page 52
Chapter 4 The Web Configurator
52
GS2200-24 User’s Guide
Page 53
CHAPTER 5
Initial Setup Example
5.1 Overview
This chapter shows how to set up the Switch for an example network.
The following lists the configuration steps for the initial setup:
• Create a VLAN
• Set port VLAN ID
• Configure the Switch IP management address
5.1.1 Creating a VLAN
VLANs confine broadcast frames to the VLAN group in which the port(s) belongs.
You can do this with port-based VLAN or tagged static VLAN with fixed port
members.
In this example, you want to configure port 1 as a member of VLAN 2.
Figure 19 Initial Setup Network Example: VLAN
GS2200-24 User’s Guide
53
Page 54
Chapter 5 Initial Setup Example
1 Click Advanced Application > VLAN in the navigation panel and click the Static
VLAN link.
2 In the Static VLAN screen,
select ACTIVE, enter a
descriptive name in the Name
field and enter 2 in the VLAN
Group ID field for the VLAN2
network.
54
Note: The VLAN Group ID field in this screen and the VID field in the IP Setup
screen refer to the same VLAN ID.
3 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to
configure port 1 to be a permanent member of the VLAN only.
4 To ensure that VLAN-unaware devices (such as computers and hubs) can receive
frames properly, clear the TX Tagging check box to set the Switch to remove
VLAN tags before sending.
5 Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
GS2200-24 User’s Guide
Page 55
5.1.2 Setting Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that
the frames are forwarded to the VLAN group that the tag defines.
In the example network, configure 2 as the port VID on port 1 so that any
untagged frames received on that port get sent to VLAN 2.
Figure 20 Initial Setup Network Example: Port VID
Chapter 5 Initial Setup Example
1 Click Advanced
Applications > VLAN in
the navigation panel. Then
click the VLAN Port
Setting link.
2 Enter 2 in the PVID field
for port 1 and click Apply
to save your changes back
to the run-time memory.
Settings in the run-time
memory are lost when the
Switch’s power is turned
off.
GS2200-24 User’s Guide
55
Page 56
Chapter 5 Initial Setup Example
5.2 Configuring Switch Management IP Address
The default management IP address of the Switch is 192.168.1.1. You can
configure another IP address in a different subnet for management purposes. The
following figure shows an example.
Figure 21 Initial Setup Example: Management IP Address
1 Connect your computer to any Ethernet port on the Switch. Make sure your
computer is in the same subnet as the Switch.
2 Open your web browser and enter 192.168.1.1 (the default IP address) in the
address bar to access the web configurator. See Section 4.2 on page 43 for more
information.
3 Click Basic Setting > IP Setup in
the navigation panel.
4 Configure the related fields in the IP
Setup screen.
5 For the VLAN2 network, enter
192.168.2.1 as the IP address and
255.255.255.0 as the subnet mask.
6 In the VID field, enter the ID of the
VLAN group to which you want this
management IP address to belong.
This is the same as the VLAN ID you
configure in the Static VLAN screen.
7 Click Add to save your changes back
to the run-time memory. Settings in
the run-time memory are lost when
the Switch’s power is turned off.
56
GS2200-24 User’s Guide
Page 57
CHAPTER 6
Tutorials
6.1 Overview
This chapter provides some examples of using the web configurator to set up and
use the Switch. The tutorials include:
• How to Use DHCP Snooping on the Switch
• How to Use DHCP Relay on the Switch
6.2 How to Use DHCP Snooping on the Switch
You only wan t DHCP server A connected to port 5 to assign IP addresses to all
devices in VLAN network (V). Create a VLAN containing ports 5, 6 and 7. Con nect
a computer M to the Switch for management.
Figure 22 Tutorial: DHCP Snooping Tutorial Overview
M
V
C
Note: For related information about DHCP snooping, see Section 25.1 on page 221.
The settings in this tutorial are as the following.
Table 6 Tutorial: Settings in this Tutorial
HOST
DHCP Server (A) 5 1 and 100 100 Yes
PORT
CONNECTED
B
VLAN PVID
A
DHCP SNOOPING
PORT TRUSTED
GS2200-24 User’s Guide
57
Page 58
Chapter 6 Tutorials
Table 6 Tutorial: Settings in this Tutorial
HOST
DHCP Client (B) 6 1 and 100 100 No
DHCP Client (C) 7 1 and 100 100 No
1 Access the Switch through http://192.168.1.1 by default. Log into the Switch
by entering the username (default: admin) and password (default: 1234).
2 Go to Advanced Application > VLAN > Static VLAN, and create a VLAN with ID
of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as
shown.
Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN
tag.
Click Add.
Figure 23 Tutorial: Create a VLAN and Add Ports to It
PORT
CONNECTED
VLAN PVID
DHCP SNOOPING
PORT TRUSTED
58
GS2200-24 User’s Guide
Page 59
Chapter 6 Tutorials
3 Go to Advanced Application > VLAN > VLAN Port Setting, and set the PVID
of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6
and 7 with the tag 100.
Figure 24 Tutorial: Tag Untagged Frames
4 Go to Advanced Application > IP Source Guard > DHCP snooping >
Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click
Apply.
Figure 25 Tutorial: Specify DHCP VLAN
GS2200-24 User’s Guide
59
Page 60
Chapter 6 Tutorials
5 Click the Port link at the top right corner.
6 The DHCP Snooping Port Configure screen appears. Select Trusted in the
Server Trusted state field for port 5 because the DHCP server is connected to
port 5. Keep ports 6 and 7 Untrusted because they are connected to DHCP
clients. Click Apply.
Figure 26 Tutorial: Set the DHCP Server Port to Trusted
7 Go to Advanced Application > IP Source Guard > DHCP snooping >
Configure > VLAN, show VLAN 100 by entering 100 in the Start VID and End
VID fields and click Apply. Then select Yes in the Enabled field of the VLAN 100
entry shown at the bottom section of the screen.
If you want to add more information in the DHCP request packets such as source
VLAN ID or system name, you can also select the Option82 and Information
fields in the entry. See Section 25.10.1.3 on page 243.
Figure 27 Tutorial: Enable DHCP Snooping on this VLAN
60
GS2200-24 User’s Guide
Page 61
Chapter 6 Tutorials
8 Click Save at the top right corner of the web
configurator to save the configuration permanently.
9 Connect your DHCP server to port 5 and a computer (as DHCP client) to either
port 6 or 7. The computer should be able to get an IP address from the DHCP
server. If you put the DHCP server on port 6 or 7, the computer will not able to get
an IP address.
10 To check if DHCP snooping works, go to Advanced Application > IP Source
Guard, you should see an IP assignment with the type dhcp-snooping as shown.
Figure 28 Tutorial: Check the Binding If DHCP Snooping Works
You can also telnet or log into the Switch’s console. Use the command “ show dhcp
snooping binding” to see the DHCP snooping binding table as shown next.
sysname# show dhcp snooping binding
MacAddress IpAddress Lease Type VLAN Port
----------------- --------------- ------------ ------------- ---- ---- 00:02:00:00:00:1c 10.10.1.16 6d23h59m20s dhcp-snooping 100 7
Total number of bindings: 1
6.3 How to Use DHCP Relay on the Switch
This tutorial describes how to configure your Switch to forward DHCP client
requests to a specific DHCP server. The DHCP server can then assign a specific IP
address based on the information in the DHCP requests.
6.3.1 DHCP Relay Tutorial Introduction
In this example, you have configured your DHCP server (192.168.2.3) and want to
have it assign a specific IP address (say 172.16.1.18) to DHCP client A based on
GS2200-24 User’s Guide
61
Page 62
Chapter 6 Tutorials
the system name, VLAN ID and port number in the DHCP request. Client A
connects to the Switch’s port 2 in VLAN 102.
Figure 29 Tutorial: DHCP Relay Scenario
DHCP Server
192.168.2.3
Port 2
PVID=102
A
VLAN 102
172.16.1.18
6.3.2 Creating a VLAN
Follow the steps below to configure port 2 as a member of VLAN 102.
1 Access the web configurator through the Switch’s management port.
2 Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click
Apply to save the settings to the run-time memory.
Figure 30 Tutorial: Set VLAN Type to 802.1Q
62
GS2200-24 User’s Guide
Page 63
Chapter 6 Tutorials
3 Click Advanced Application > VLAN > Static VLAN.
4 In the Static VLAN screen, select ACTIVE, enter a descriptive name (VLAN 102
for example) in the Name field and enter 102 in the VLAN Group ID field.
5 Select Fixed to configure port 2 to be a permanent member of this VLAN.
6 Clear the TX Tagging check box to set the Switch to remove VLAN tags before
sending.
7 Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
Figure 31 Tutorial: Create a Static VLAN
GS2200-24 User’s Guide
63
Page 64
Chapter 6 Tutorials
8 Click the VLAN Status link in the Static VLAN screen and then the VLAN Port
Setting link in the VLAN Status screen.
Figure 32 Tutorial: Click the VLAN Port Setting Link
9 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames
received on that port so that the frames are forwarded to the VLAN group that the
tag defines.
10 Click Apply to save your changes back to the run-time memory.
Figure 33 Tutorial: Add Tag for Frames Received on Port 2
64
GS2200-24 User’s Guide
Page 65
11 Click the Save link in the upper right corner of the web configurator to save your
configuration permanently.
6.3.3 Configuring DHCP Relay
Follow the steps below to enable DHCP relay on the Switch and allow the Switch to
add relay agent information (such as the VLAN ID) to DHCP requests.
1 Click IP Application > DHCP and then the Global link to open the DHCP Relay
screen.
2 Select the Active check box.
3 Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote
DHCP Server 1 field.
4 Select the Option 82 and the Information check boxes.
Chapter 6 Tutorials
5 Click Apply to save your changes back to the run-time memory.
Figure 34 Tutorial: Set DHCP Server and Relay Information
6 Click the Save link in the upper right corner of the web configurator to save your
configuration permanently.
7 The DHCP server can then assign a specific IP address based on the DHCP
request.
6.3.4 Troubleshooting
Check the client A’s IP address. If it did not receive the IP address 172.16.1.18,
make sure:
GS2200-24 User’s Guide
65
Page 66
Chapter 6 Tutorials
1 Client A is connected to the Switch’s port 2 in VLAN 102.
2 You configured the correct VLAN ID, port number and system name for DHCP relay
on both the DHCP server and the Switch.
3 You clicked the Save link on the Switch to have your settings take effect.
66
GS2200-24 User’s Guide
Page 67
CHAPTER 7
System Status and Port
Statistics
7.1 Overview
This chapter describes the screens for system status (web configurator home
page), port details and PoE status.
The home screen of the web configurator displays a port stati stical summary with
links to each port showing statistical details.
7.1.1 What You Can Do
•Use the Port Status Summary screen (Section 7.2 on page 68) to view the
port statistics.
•Use the Port Details screen (Section 7.2.1 on page 70) to display individual
port statistics.
GS2200-24 User’s Guide
67
Page 68
Chapter 7 System Status and Port Statistics
7.2 Port Status Summary
To view the port statistics, click Status in all web configurator screens to display
the Status screen as shown next.
Figure 35 Status (GS2200-24)
Figure 36 Status (GS2200-24P)
68
GS2200-24 User’s Guide
Page 69
Chapter 7 System Status and Port Statistics
The following table describes the labels in this screen.
Table 7 Status
LABEL DESCRIPTION
Port This identifies the Ethernet port. Click a port number to display the Port
Details screen (refer to Figure 37 on page 70).
Name This is the name you assigned to this port in the Basic Setting > Port
Setup screen.
Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps
or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half).
It also shows the cable type (Copper or Fiber) for the combo ports.
State If STP (Spanning Tree Protocol) is enabled, this field displays the STP
state of the port (see Section 13.1 on page 123 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
PD (for GS2200-24P only) This field displays whether or not a powered
device (PD) is allowed to receive power from the Switch on this port.
LACP This fields displays whether LACP (Link Aggregation Control Protocol) has
been enabled on the port.
TxPkts This field shows the number of transmitted frames on this port.
RxPkts This field shows the number of received frames on this port.
Errors This field shows the number of received errors on this port.
Tx KB/s This field shows the number of kilobytes per second transmitted on this
port.
Rx KB/s This field shows the number of kilobytes per second received on this port.
Up Time This field shows the total amount of time in hours, minutes and seconds
the port has been up.
Clear Counter Enter a port number and then click Clear Counter to erase the recorded
statistical information for that port, or select Any to clear statistics for all
ports.
GS2200-24 User’s Guide
69
Page 70
Chapter 7 System Status and Port Statistics
7.2.1 Status: Port Details
Click a number in the Port column in the Status screen to display individual port
statistics. Use this screen to check status and detailed perf ormance data about an
individual port on the Switch.
Figure 37 Status > Port Details
70
The following table describes the labels in this screen.
Table 8 Status: Port Details
LABEL DESCRIPTION
Port Info
Port NO. This field displays the port number you are viewing.
Name This field displays the name of the port.
Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps
or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half
duplex). It also shows the cable type (Copper or Fiber).
GS2200-24 User’s Guide
Page 71
Chapter 7 System Status and Port Statistics
Table 8 Status: Port Details (continued)
LABEL DESCRIPTION
Status If STP (Spanning Tree Protocol) is enabled, this field displays the STP state
of the port (see Section 13.1 on page 123 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
LACP This field shows if LACP is enabled on this port or not.
TxPkts This field shows the number of transmitted frames on this port
RxPkts This field shows the number of received frames on this port
Errors This field shows the number of received errors on this port.
Tx KB/s This field shows the number kilobytes per second transmitted on this port.
Rx KB/s This field shows the number of kilobytes per second received on this port.
Up Time This field shows the total amount of time the connection has been up.
Tx Packet
The following fields display detailed information about packets transmitted.
TX
Packets
Multicast This field shows the number of good multicast packets transmitted.
BroadcastThis field shows the number of good broadcast packets transmitted.
This field shows the number of good packets (unicast, multicast and
broadcast) transmitted.
Pause This field shows the number of 802.3x Pause packets transmitted.
Rx Packet
The following fields display detailed information about packets received.
RX
Packets
Multicast This field shows the number of good multicast packets received.
BroadcastThis field shows the number of good broadcast packets received.
Pause This field shows the number of 802.3x Pause packets received.
TX Collision
The following fields display information on collisions while transmitting.
Single This is a count of successfully transmitted packets for which tr ansmission is
Multiple This is a count of successfully transmitted packets for which transmission
ExcessiveThis is a count of packets for which transmission failed due to excessive
Late This is the number of times a late collision is detected, that is, after 512
Error Packet The following fields display detailed information about packets received
RX CRC This field shows the number of packets received with CRC (Cyclic
This field shows the number of good packets (unicast, multicast and
broadcast) received.
inhibited by exactly one collision.
was inhibited by more than one collision.
collisions. Excessive collision is defined as the number of maximum
collisions before the retransmission count is reset.
bits of the packets have already been transmitted.
that were in error.
Redundant Chec k) error(s).
GS2200-24 User’s Guide
71
Page 72
Chapter 7 System Status and Port Statistics
Table 8 Status: Port Details (continued)
LABEL DESCRIPTION
Runt This field shows the number of packets received that were too short
(shorter than 64 octets), including the ones with CRC errors.
Distribution
64 This field shows the number of packets (including bad packets) received
that were 64 octets in length.
65-127 This field shows the number of packets (including bad packets) received
that were between 65 and 127 octets in length.
128-255 This field shows the number of packets (including bad packets) received
that were between 128 and 255 octets in length.
256-511 This field shows the number of packets (including bad packets) received
that were between 256 and 511 octets in length.
512-
1023
1024-
1518
Giant This field shows the number of packets (including bad packets) received
This field shows the number of packets (including bad packets) received
that were between 512 and 1023 octets in length.
This field shows the number of packets (including bad packets) received
that were between 1024 and 1518 octets in length.
that were between 1519 octets and the maximum frame size.
The maximum frame size varies depending on your switch model. See
Chapter 40 on page 333.
72
GS2200-24 User’s Guide
Page 73
CHAPTER 8
Basic Setting
8.1 Overview
This chapter describes how to configure the System Info, General Setup,
Switch Setup, IP Setup and Port Setup screens.
The System Info screen displays general Switch information (such as firmware
version number). The General Setup screen allows you to configure general
Switch identification information. The General Setup screen also allows you to
set the system time manually or get the current time and date from an external
server when you turn on your Switch. The real time is then displayed in the Switch
logs. The Switch Setup screen allows you to set up and configure global Switch
features. The IP Setup screen allows you to configure a Switch IP address in each
routing domain, subnet mask(s) and DNS (domain name server) for management
purposes.
8.1.1 What You Can Do
•Use the System Info screen (Section 8.2 on page 74) to check the firmware
version number.
•Use the General Setup screen (Section 8.3 on page 76) to configure general
settings such as the system name and time.
•Use the Switch Setup screen (Section 8.5 on page 79) to choose your VLAN
type, set the GARP timers and assign priorities to queues.
•Use the IP Setup screen (Section 8.6.1 on page 81) to configure the Switch IP
address, default gateway device, the default domain name server and the
management VLAN ID.
•Use the Port Setup screen (Section 8.7 on page 83) to configure S wi tch port
settings.
•Use the PoE Status screens (Section 8.8 on page 85) to view the current
amount of power that PDs are receiving from the Switch and set the priority
levels for the Switch in distributing power to PDs. (This screen is available to
GS2200-24P only.)
GS2200-24 User’s Guide
73
Page 74
Chapter 8 Basic Setting
8.2 System Information
In the navigation panel, click Basic Setting > System Info to displa y the screen
as shown. You can check the firmware version number.
Figure 38 Basic Setting > System Info (GS2200-24)
Figure 39 Basic Setting > System Info (GS2200-24P)
74
GS2200-24 User’s Guide
Page 75
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 9 Basic Setting > System Info
LABEL DESCRIPTION
System
Name
Product
Model
ZyNOS F/W
Version
Ethernet
Address
Hardware Monitor
Temperature
Unit
Temperature BOARD, MAC and PHY refer to the location of the temperature sensors on
Current This shows the current temperature at this sensor.
MAX This field displays the maximum temperature measured at this sensor.
MIN This field displays the minimum temperature measured at this sensor.
Threshold This field displays the upper temperature limit at this sensor.
Status This field displays Normal for temperatures below the threshold and Error
Fan Speed
(RPM)
Current This field displays this fan's current speed in Revolutions Per Minute (RPM).
MAX This field displays this fan's maximum speed measured in Revolutions Per
MIN This field displays this fan's minimum speed measured in Revolutions Per
Threshold This field displays the minimum speed at which a normal fan should work.
Status Normal indicates that this fan is functioning above the minimum speed.
Voltage(V) The power supply for each voltage has a sensor that is capable of
Current This is the current voltage reading.
MAX This field displays the maximum voltage measured at this point.
MIN This field displays the minimum voltage measured at this point.
This field displays the descriptive name of the Switch for identification
purposes.
This field displays the product model of the Switch. Use this information
when searching for firmware upgrade or looking for other support
information in the website.
This field displays the version number of the Switch 's current firmware
including the date created.
This field refers to the Ethernet MAC (Media Access Control) address of the
Switch.
The Switch has temperature sensors that are capable of detecting and
reporting if the temperature rises above the threshold. You may choose
the temperature unit (Centigrade or Fahrenheit) in this field.
the Switch printed circuit board.
for those above.
A properly functioning fan is an essential component (along with a
sufficiently ventilated, cool operating environment) in order for the device
to stay within the temperature threshold. Each fan has a sensor that is
capable of detecting and reporting if the fan speed falls below the
threshold shown.
Minute (RPM).
Minute (RPM). "<41" is displayed for speeds too small to measure (under
2000 RPM).
Error indicates that this fan is functioning below the minimum speed.
detecting and reporting if the voltage falls out of the tolerance range.
GS2200-24 User’s Guide
75
Page 76
Chapter 8 Basic Setting
Table 9 Basic Setting > System Info (continued)
LABEL DESCRIPTION
Threshold This field displays the percentage tolerance of the voltage with which the
Switch still works.
Status Normal indicates that the voltage is within an acceptable operating range
at this point; otherwise Error is displayed.
8.3 General Setup
Use this screen to configure general settings such as the system name and time.
Click Basic Setting > General Setup in the navigation panel to display the
screen as shown.
Figure 40 Basic Setting > General Setup
76
The following table describes the labels in this screen.
Table 10 Basic Setting > General Setup
LABEL DESCRIPTION
System Name Choose a descriptive name for identification purposes. This name
consists of up to 64 printable characters; spaces are allowed.
Location Enter the geographic location of your Switch. You can use up to 32
printable ASCII characters; spaces are allowed.
Contact
Person's Name
Enter the name of the person in charge of this Switch. You can use up to
32 printable ASCII characters; spaces are allowed.
GS2200-24 User’s Guide
Page 77
Chapter 8 Basic Setting
Table 10 Basic Setting > General Setup (continued)
LABEL DESCRIPTION
Use Time
Server when
Bootup
Time Server IP
Address
Current Time This field displays the time you open this menu (or refresh the menu).
New Time
(hh:min:ss)
Current Date This field displays the date you open this menu.
New Date
(yyyy-mm-dd)
Time Zone Select the time difference between UTC (Universal Time Coordinated,
Daylight
Saving Time
Enter the time service protocol that your timeserver uses. Not all time
servers support all protocols, so you may have to use trial and error to
find a protocol that works. The main differences between them are the
time format.
When you select the Daytime (RFC 867) format, the Switch displays
the day, month, year and time with no time zone adjustment. When you
use this format it is recommended that you use a Daytime timeserver
within your geographical time zone.
Time (RFC-868) format displays a 4-byte integer giving the total
number of seconds since 1970/1/1 at 0:0:0.
NTP (RFC-1305) is similar to Time (RFC-868).
None is the default value. Enter the time manually. Each time you turn
on the Switch, the time and date will be reset to 1970-1-1 0:0:0.
Enter the IP address of your timeserver. The Switch searches for the
timeserver for up to 60 seconds. If you select a timeserver that is
unreachable, then this screen will appear locked for 60 seconds. Please
wait.
Enter the new time in hour, minute and second format. The new time
then appears in the Current Time field after you click Apply.
Enter the new date in year, month and day format. The new date then
appears in the Current Date field after you click Apply.
formerly known as GMT, Greenwich Mean Time) and your time zone from
the drop-down list box.
Daylight saving is a period from late spring to early fall when many
countries set their clocks ahead of normal local time by one hour to give
more daytime light in the evening.
Start Date Configure the day and time when Daylight Saving Time starts if you
GS2200-24 User’s Guide
Select this option if you use Daylight Saving Time.
selected Daylight Saving Time. The time is displayed in the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time starts in most parts of the United States on the
second Sunday of March. Each time zone in the United States starts
using Daylight Saving Time at 2 A.M. local time. So in the United States
you would select Second, Sunday, March and 2:00.
Daylight Saving Time starts in the European Union on the last Sunday of
March. All of the time zones in the European Union start using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, March and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
77
Page 78
Chapter 8 Basic Setting
Table 10 Basic Setting > General Setup (continued)
LABEL DESCRIPTION
End Date Configure the day and time when Daylight Saving Time ends if you
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
selected Daylight Saving Time. The time field uses the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time ends in the United States on the first Sunday of
November. Each time zone in the United States stops using Daylight
Saving Time at 2 A.M. local time. So in the United States you would
select First, Sunday, November and 2:00.
Daylight Saving Time ends in the European Union on the last Sunday of
October. All of the time zones in the European Union stop using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, October and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
8.4 Introduction to VLANs
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the netw ork resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user in the same
building.
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. Wit h VLAN, all
broadcasts are confined to a specific broadcast domain.
Note: VLAN is unidirectional; it only governs outgoing traffic.
See Chapter 9 on page 93 for information on port-based and 802.1Q tagged
VLANs.
78
GS2200-24 User’s Guide
Page 79
8.5 Switch Setup Screen
Click Basic Setting > Switch Setup in the navigation panel to display the screen
as shown. The VLAN setup screens change depending on whether you choose
802.1Q or Port Based in the VLAN Type field in this screen. Refer to Chapter 9
on page 93 for more information on VLAN.
Figure 41 Basic Setting > Switch Setup
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 11 Basic Setting > Switch Setup
LABEL DESCRIPTION
VLAN Ty pe Choose 802.1Q or Port Based. The VLAN Setup screen changes
depending on whether you choose 802.1Q VLAN type or Port Based
VLAN type in this screen. See Chapter 9 on page 93 for more
information.
GARP Timer: Switches join VLANs by making a declaration. A declaration is made by
issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set declaration
timeout values. See the chapter on VLAN setup for more background information.
Join Timer Join Timer sets the duration of the Join Period timer for GVRP in
milliseconds. Each port has a Join Period timer. The allowed Join Time
range is between 100 and 65535 milliseconds; the default is 200
milliseconds. See the chapter on VLAN setup for more background
information.
Leave Timer Leave Time sets the duration of the Leave Period timer for GVRP in
milliseconds. Each port has a single Leave Period timer. Leave Time
must be two times larger than Join Timer; the default is 600
milliseconds.
GS2200-24 User’s Guide
79
Page 80
Chapter 8 Basic Setting
Table 11 Basic Setting > Switch Setup (continued)
LABEL DESCRIPTION
Leave All
Timer
Priority Queue Assignment
IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-layer
frame that contains bits to define class of service. Frames without an explicit priority tag
are given the default priority of the ingress port. Use the next fields to configure the
priority level-to-physical queue mapping.
The Switch has eight physical queues that you can map to the 8 priority levels. On the
Switch, traffic assigned to higher index queues gets through faster while traffic in lower
index queues is dropped if the network is congested.
Priority Level (The following descriptions are based on the traffic types defined in the IEEE
802.1d standard (which incorporates the 802.1p).
Level 7 Typically used for network control traffic such as router configuration
Level 6 Typically used for v oice traffic that is especially sensitive to jitter (jitter is
Level 5 Typically used for video that consumes high bandwidth and is sensitive to
Level 4 Typically used for controlled load, latency-sensitive traffic such as SNA
Level 3 Typically used for “excellent effort” or better than best effort and would
Level 2 This is for “spare bandwidth”.
Level 1 This is typically used for non-critical “background” traffic such as bulk
Level 0 Typically used for best-effort traffic.
Apply Click Apply to save your changes to the Switch’s run-time memory . Th e
Cancel Click Cancel to reset the fields.
Leave All Timer sets the duration of the Leave All P eriod timer for GVRP in
milliseconds. Each port has a single Leave All Period timer. Leave All
Timer must be larger than Leave Timer.
messages.
the variations in delay).
jitter.
(Systems Network Architecture) transactions.
include important business traffic that can tolerate some delay.
transfers that are allowed but that should not affect other applications
and users.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
8.6 IP Setup
Use the IP Setup screen to configure the Switch IP address, default gateway
device, the default domain name server and the management VLAN ID. The
default gateway specifies the IP address of the default gateway (next hop) for
outgoing traffic.
80
GS2200-24 User’s Guide
Page 81
8.6.1 Management IP Addresses
The Switch needs an IP address for it to be managed over the network. The
factory default IP address is 192.168.1.1. The subnet mask specifies the network
number portion of an IP address. The factory default subnet mask is
255.255.255.0.
You can config ure up to 64 IP addresses which are used to access and manage the
Switch from the ports belonging to the pre-defined VLAN(s).
Note: You must configure a VLAN first.
Figure 42 Basic Setting > IP Setup
Chapter 8 Basic Setting
GS2200-24 User’s Guide
81
Page 82
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 12 Basic Setting > IP Setup
LABEL DESCRIPTION
Domain Name
Server
Default Management IP Address
DHCP Client Select this option if you have a DHCP server that can assign the
Static IP Address Select this option if you don’t have a DHCP server or if you wish to
IP Address Enter the IP address of your Switch in dotted decimal notation for
IP Subnet Mask Enter the IP subnet mask of your Switch in dotted decimal notation
Default Gateway Enter the IP address of the default outgoing gateway in dotted
VID Enter the VLAN identification number associated with the Switch IP
Management IP Addresses
DNS (Domain Name System) is for mapping a domain name to its
corresponding IP address and vice versa. Enter a domain name server
IP address in order to be able to use a domain name instead of an IP
address.
Switch an IP address, subnet mask, a default gateway IP address and
a domain name server IP address automatically.
assign static IP address information to the Switch. You need to fill in
the following fields when you select this option.
example 192.168.1.1.
for example 255.255.255.0.
decimal notation, for example 192.168.1.254.
address. This is the VLAN ID of the CPU and is used for management
only. The default is "1". All ports, by default, are fixed members of
this "management VLAN" in order to manage the device from any
port. If a port is not a member of this VLAN, then users on that port
cannot access the device. To access the Switch make sure the port
that you are connected to is a member of Management VLAN.
You can create up to 64 IP addresses, which are used to access and manage the Switch
from the ports belonging to the pre-defined VLAN(s). You must configure a VLAN first.
IP Address Enter the IP address for managing the Switch by the members of th e
VLAN specified in the VID field below.
IP Subnet Mask Enter the IP subnet mask in dotted decimal notation.
VID Type the VLAN group identification number.
Default Gateway Enter the IP address of the default outgoing gateway in dotted
decimal notation.
Add Click Add to insert the entry to the summary table below and save
your changes to the Switch’s run-time memory. The Switch loses
these changes if it is turned off or loses power, so use the Save link
on the top navigation panel to save your changes to the non-volatile
memory when you are done configuring.
Cancel Click Cancel to reset the fields to your previous configuration.
Index This field displays the index number of the rule. Click an index
number to edit the rule.
IP Address This field displays the IP address.
IP Subnet Mask This field displays the subnet mask.
VID This field displays the ID number of the VLAN group.
82
GS2200-24 User’s Guide
Page 83
Table 12 Basic Setting > IP Setup (continued)
LABEL DESCRIPTION
Default Gateway This field displays the IP address of the default gateway.
Delete Check the management IP addresses that you want to remove in the
Cancel Click Cancel to clear the selected check boxes in the Delete column.
8.7 Port Setup
Use this screen to configure Switch port settings. Click Basic Setting > Port
Setup in the navigation panel to display the configuration screen.
Figure 43 Basic Setting > Port Setup
Chapter 8 Basic Setting
Delete column, then click the Delete button.
GS2200-24 User’s Guide
83
Page 84
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 13 Basic Setting > Port Setup
LABEL DESCRIPTION
Port This is the port index number.
* Settings in this row apply to all ports.
Active Select this check box to enable a port. The factory default for all ports is
Name Enter a descriptive name that identifies this port. You can enter up to 64
Type This field displays 10/100M for Fast Ethernet connections and 10/100/
Speed/
Duplex
Use this row only if you want to make some settings the same fo r all ports.
Use this row first to set the common settings and then make adjustments
on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
enabled. A port must be enabled for data transmission to occur.
alpha-numerical characters.
Note: Due to space limitation, the port name may be truncated in
some web configurator screens.
1000M for Gigabit connections.
Select the speed and the duplex mode of the Ethernet connection on this
port. Choices are Auto, 10M/Half Duplex, 10M/Full Duplex, 100M/
Half Duplex, 100M/Full Duplex and 1000M/Full Duplex (Gigabit
connections only).
Selecting Auto (auto-negotiation) allows one port to negotiate with a peer
port automatically to obtain the connection speed and duplex mode that
both ends support. When auto-negotiation is turned on, a port on the
Switch negotiates with the peer automatically to determine the connection
speed and duplex mode. If the peer port does not support auto-negotiation
or turns off this feature, the Switch determines the connection speed by
detecting the signal on the cable and using half duplex mode. When the
Switch’s auto-negotiation is turned off, a port uses the pre-configured
speed and duplex mode when making a connection, thus requiring you to
make sure that the settings of the peer port are the same in order to
connect.
Flow Control A concentration of traffic on a port decreases port bandwidth and overflows
buffer memory causing packet discards and frame losses. Flow Control is
used to regulate transmission of signals to match the bandwidth of the
receiving port.
The Switch uses IEEE802.3x flow control in full duplex mode and
backpressure flow control in half duplex mode.
IEEE802.3x flow control is used in full duplex mode to send a pause signal
to the sending port, causing it to temporarily stop sending signals when
the receiving port memory buffers fill.
Back Pressure flow control is typically used in half duplex mode to send a
"collision" signal to the sending port (mimicking a state of packet collision)
causing the sending port to temporarily stop sending signals and resend
later. Select Flow Control to enable it.
84
GS2200-24 User’s Guide
Page 85
Table 13 Basic Setting > Port Setup (continued)
LABEL DESCRIPTION
802.1p
Priority
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
This priority value is added to incoming frames without a (802.1p) priority
queue tag. See Priority Queue Assignment in Table 11 on page 79 for
more information.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
8.8 PoE Status
Note: The following screens are available for the GS2200-24P model only. Some
features are only available for the Fast Ethernet ports (1 to 24).
Your Switch supports IEEE 802.3af Power over Ethernet (PoE).
Chapter 8 Basic Setting
A powered device (PD) is a device such as an access point or a switch, that
supports PoE (Power over Ethernet) so that it can receive power from another
device through a 10/100Mbps Ethernet port.
In the figure below, the IP camer a and IP phone get their power directly from the
Switch. Aside from minimizing the need for cables and wires, PoE removes the
hassle of trying to find a nearby electric outlet to power up devices.
Figure 44 Powered Device Examples
You can also set priorities so that the Switch is able to reserve and allocat e power
to certain PDs.
Note: The GS2200-24P is compatible with ZyXEL’s PPS250 power module. The
PPS250 provides additional external PoE power budget on top of the internal
power budget of the GS2200-24P. Refer to the User’s Guide of the PPS250 for
more information.
Note: The POE (Power over Ethernet) devices that supply or receive power and their
connected Ethernet cables must all be completely indoors.
GS2200-24 User’s Guide
85
Page 86
Chapter 8 Basic Setting
Note: The RPS connector port at the back panel of the GS2200-24P should only be
used with the PPS250. Do not insert other connector cables to the RSP
connector port of the GS2200-24P or the PPS250.
To view the current amount of power that PDs are receiving from the Switch, click
Basic Setting > PoE Setup.
Figure 45 Basic Setting > PoE Status
The following table describes the labels in this screen.
Table 14 Basic Setting > PoE Status
LABEL DESCRIPTION
PoE Status
PoE Mode This field displays the power management mode used by the Switch,
whether it is in Classification or Consumption mode.
Total Power This field displays the total power the Switch can provide to the connected
PoE-enabled devices on the PoE ports.
Consuming
Power (W)
Allocated
Power (W)
Remaining
Power (W)
This field displays the amount of power the Switch is currently supplying to
the connected PoE-enabled devices.
This field displays the total amount of power the Switch has reserved for
PoE after negotiating with the connected PoE device(s).
Consuming Power (W) can be less than or equal but not more than the
Allocated Power (W).
This field displays the amount of power the Switch can still provide for PoE.
Note: The Switch must have at least 16 W of remaining power in order
to supply power to a PoE device, even if the PoE device needs
less than 16W.
Port This is the port index number.
86
GS2200-24 User’s Guide
Page 87
Chapter 8 Basic Setting
Table 14 Basic Setting > PoE Status (continued)
LABEL DESCRIPTION
State This field shows which ports can receive power from the Switch. You can
set this in Section 8.8.1 on page 87.
• Disable - The PD connected to this port cannot get power supply.
• Enable - The PD connected to this port can receive power.
Class This shows the IEEE 802.3af power classification of the PD.
This is a number from 0 to 4, where each value represents a range of
power (W) and power current (mA) that the PD requires to function. The
ranges are as follows.
• Class 0 - Default, 0.44 to 12.94
• Class 1 - Optional, 0.44 to 3.84
• Class 2 - Optional , 3.84 to 6.49
• Class 3 - Optional, 6.49 to 12.95
• Class 4 - Reserved (PSEs classify as Class 0)
PD Priority When the total power requested by the PDs exceeds the total PoE power
budget on the Switch, you can set the PD priority to allow the Switch to
provide power to ports with higher priority first.
Consuming
Power (mW)
Max Power
(mW)
Max Current
(mA)
8.8.1 PoE Setup
Use this screen to set the priority levels for the Switch in distributing power to
PDs.
• Critical has the highest priority.
• High has the Switch assign power to the port after all critical priority
ports are served.
• Low has the Switch assign power to the port after all critical and high
priority ports are served.
This field displays the current amount of power consumed by the PD from
the Switch on this port.
This field displays the maximum amount of power the PD could use from
the Switch on this port.
This field displays the maximum amount of current drawn by the PD from
the Switch on this port.
GS2200-24 User’s Guide
87
Page 88
Chapter 8 Basic Setting
Click the PoE Setup link in the Basic Setting > PoE Status screen. The
following screen opens.
Figure 46 Basic Setting > PoE Setup
The following table describes the labels in this screen.
Table 15 Basic Setting > PoE Setup
LABEL DESCRIPTION
PoE Mode Select the power management mode you want the Switch to use.
• Classification - Select this if you want the Switch to reserve the Max
Power (mW) to each PD according to the priority level. If the total
power supply runs out, PDs with lower priority do not get power to
function.
• Consumption - Select this if you want the Switch to manage the total
power supply so that each connected PD gets a resource. However, the
power allocated by the Switch may be less than the Max Power (mW) of
the PD. PDs with higher priority also get more power than those with
lower priority levels.
Port This is the port index number.
PD Select this to provide power to a PD connected to the port.
If left unchecked, the PD connected to the port cannot receive power from
the Switch.
88
GS2200-24 User’s Guide
Page 89
Chapter 8 Basic Setting
Table 15 Basic Setting > PoE Setup (continued)
LABEL DESCRIPTION
PD Priority This field is only available on the PWR model but not available for the
Gigabit or mini-GBIC ports.
When the total power requested by the PDs exceeds the total PoE power
budget on the Switch, you can set the PD priority to allow the Switch to
provide power to ports with higher priority.
Select Critical to give the highest PD priority on the port.
Select High to set the Switch to assign the remaining power to the port
after all critical priority ports are served.
Select Low to set the Switch to assign the remaining power to the port
after all critical and high priority ports are served.
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
GS2200-24 User’s Guide
89
Page 90
Chapter 8 Basic Setting
90
GS2200-24 User’s Guide
Page 91
PART III
Advanced
VLAN (93)
Static MAC Forward Setup (113)
Filtering (121)
Spanning Tre e Protocol (123)
Bandwidth Control (145)
Broadcast Storm Control (149)
Mirroring (153)
Link Aggregation (157)
Port Authentication (167)
Port Security (171)
Classifier (175)
Policy Rule (181)
Queuing Method (187)
(190)
AAA (209)
IP Source Guard (221)
Loop Guard (247)
Layer 2 Protocol Tunneling (251)
91
Page 92
92
Page 93
CHAPTER 9
VLAN
9.1 Overview
This chapter shows you how to configure 802.1Q tagged and port-based VLANs.
The type of screen you see here depends on the VLAN Type you selected in the
Switch Setup screen.
9.1.1 What You Can Do
•Use the VLAN Status screen (Section 9.2 on page 97) to view all VLAN groups.
•Use the VLAN Detail screen (Section 9.2.1 on page 98) to view detailed port
settings and status of the VLAN group.
•Use the Static VLAN screen (Section 9.3 on page 99) to configure and view
802.1Q VLAN parameters for the Switch.
•Use the VLAN Port Setting screen (Section 9.4 on page 101) to configure the
static VLAN (IEEE 802.1Q) settings on a port.
•Use the Subnet Based VLAN screen (Section 9.5 on page 102) to set up
VLANs that allow you to group traffic into logical VLANs based on the source IP
subnet you specify.
•Use the Port-Based VLAN screen (Section 9.7 on page 108) to set up VLANs
where the packet forwarding decision is based on the destination MAC address
and its associated port.
9.1.2 What You Need to Know
Read this section to know more about VLAN and how to configure the screens.
IEEE 802.1Q Tagged VLANs
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
contains two bytes of TPID (Tag Protocol Identifier , residing within the type/leng th
GS2200-24 User’s Guide
93
Page 94
Chapter 9 VLAN
field of the Ethernet frame) and two bytes of TCI (Tag Control Information, starts
after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a pr iority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN
configurations are 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 bits
Forwarding Tagged and Untagged Frames
Each port on the Switch is capable of passing tagged or untagged frames. To
forward a frame from an 802.1Q VLAN-a ware switch to an 802.1Q VLAN-unaware
switch, the Switch first decides where to forward the fr ame and then strips off the
VLAN tag. To forward a frame from an 802.1Q VLAN-unaware switch to an 802.1Q
VLAN-aware switch, the Switch first decides where to forward the frame, and then
inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is
VLAN 1 for all ports, but this can be changed.
A broadcast frame (or a multicast frame for a multicast group that is known by the
system) is duplicated only on ports that are members of the VID (except the
ingress port itself), thus confining the broadcast to a specific domain.
9.1.2.1 Automatic VLAN Registration
GARP and GVRP are the protocols used to automatically register VLAN
membership across switches.
94
GARP
GARP (Generic Attribute Registration Protocol) allows network switches to register
and de-register attribute values with other GARP participants within a bridged
LAN. GARP is a protocol that provides a generic mechanism for protocols that
serve a more specific application, for example, GVRP.
GS2200-24 User’s Guide
Page 95
Chapter 9 VLAN
GARP Timers
Switches join VLANs by making a declaration. A declaration is made by issuing a
Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set
declaration timeout values.
GVRP
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a
way for switches to register necessary VLAN members on ports across the
network. Enable this function to permit VLAN groups beyond the local Switch.
Please refer to the following table for common IEEE 802.1Q VLAN terminology.
Table 16 IEEE 802.1Q VLAN Terminology
VLAN
PARAMETER
VLAN Type Permanent VLAN This is a static VLAN created manually.
TERM DESCRIPTION
Dynamic VLAN This is a VLAN configured by a GVRP registration/
VLAN
Administrative
Control
VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all
VLAN Port Port VID This is the VLAN ID assigned to untagged frames
Registration Fixed Fixed registration ports are permanent VLAN
Registration
Forbidden
Normal
Registration
Untagged Ports belonging to the specified VLAN don't tag all
Acceptable Frame
Type
Ingress filtering If set, the Switch discards incoming frames for
9.1.2.2 Port VLAN Trunking
deregistration process.
members.
Ports with registration forbidden are forbidden to
join the specified VLAN.
Ports dynamically join a VLAN using GVRP.
outgoing frames transmitted.
outgoing frames transmitted.
that this port received.
You may choose to accept both tagged and
untagged incoming frames, just tagged incoming
frames or just untagged incoming frames on a
port.
VLANs that do not have this port as a member
Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN
groups to pass through that port. This is useful if you w ant to set up VL AN groups
on end devices without having to configure the same VLAN groups on
intermediary devices.
GS2200-24 User’s Guide
95
Page 96
Chapter 9 VLAN
Refer to the following figure. Suppose you want to create VLAN groups 1 and 2
(V1 and V2) on devices A and B. Without VLAN Trunking, you must configure
VLAN groups 1 and 2 on all intermediary switches C, D and E; otherwise they will
drop frames with unknown VLAN group tags. However, with VLAN Trunking
enabled on a port(s) in each intermediary switch you only need to create VLAN
groups in the end devices (A and B). C, D and E automatically allow frames with
VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to
pass through their VLAN trunking port(s).
Figure 47 Port VLAN Trunking
9.1.2.3 Select the VLAN Type
Select a VLAN type in the Basic Setting > Switch Setup screen.
Figure 48 Switch Setup > Select VLAN Type
Static VLAN
Use a static VLAN to decide whether an incoming frame on a port should be
• sent to a VLAN group as normal depending on its VLAN tag.
• sent to a group whether it has a VLAN tag or not.
• blocked from a VLAN group regardless of its VLAN tag.
You can also tag all outgoing frames (that were previously untagged) from a port
with the specified VID.
96
GS2200-24 User’s Guide
Page 97
9.2 VLAN Status
Click Advanced Application > VLAN from the navigation panel to display the
VLAN Status screen as shown next.
Figure 49 Advanced Application > VLAN: VLAN Status
Chapter 9 VLAN
The following table describes the labels in this screen.
Table 17 Advanced Application > VLAN: VLAN Status
LABEL DESCRIPTION
VLAN Search
by VID
The Number
of VLAN
The Number
of Search
Results
Index This is the VLAN index number. Click on an index number to view more
VID This is the VLAN identification number that was configured in the Static
Elapsed Time This field shows how long it has been since a normal VLAN was registered
Status This field shows how this VLAN was added to the Switch.
Enter an existing VLAN ID number(s) (separated by a comma) and click
Search to display only the specified VLAN(s) in the list below.
Leave this field blank and click Search to display all VLANs configured on
the Switch.
This is the number of VLANs configured on the Switch.
This is the number of VLANs that match the searching criteria and display
in the list below.
This field displays only when you use the Search button to look for
certain VLANs.
VLAN details.
VLAN screen.
or a static VLAN was set up.
Change Pages Click Previous or Next to show the previous/next screen if all status
GS2200-24 User’s Guide
dynamic: using GVRP
static: added as a permanent entry
information cannot be seen in one screen.
97
Page 98
Chapter 9 VLAN
9.2.1 VLAN Details
Use this screen to view detailed port settings and status of the VLAN group. Click
on an index number in the VLAN Status screen to display VLAN details.
Figure 50 Advanced Application > VLAN > VLAN Detail
The following table describes the labels in this screen.
Table 18 Advanced Application > VLAN > VLAN Detail
LABEL DESCRIPTION
VLAN Status Click this to go to the VLAN Status screen.
VID This is the VLAN identification number that was configured in the Static
VLAN screen.
Port Number This column displays the ports that are participating in a VLAN. A tagged
port is marked as T, an untagged port is marked as U and ports not
participating in a VLAN are marked as “–“.
Elapsed Time This field shows how long it has been since a normal VLAN was registered
or a static VLAN was set up.
Status This field shows how this VLAN was added to the Switch.
dynamic: using GVRP
static: added as a permanent entry
98
GS2200-24 User’s Guide
Page 99
9.3 Configure a Static VLAN
Use this screen to configure and view 802.1Q VLAN parameters for the Switch. To
configure a static VLAN, click Static VLAN in the VLAN Status screen to display
the screen as shown next.
Figure 51 Advanced Application > VLAN > Static VLAN
Chapter 9 VLAN
The following table describes the related labels in this screen.
Table 19 Advanced Application > VLAN > Static VLAN
LABEL DESCRIPTION
ACTIVE Select this check box to activate the VLAN settings.
Name Enter a descriptive name for the VLAN group for identification purposes.
VLAN Group IDEnter the VLAN ID for this static entry; the valid range is between 1 and
Port The port number identifies the port you are configuring.
GS2200-24 User’s Guide
This name consists of up to 64 printable characters.
4094.
99
Page 100
Chapter 9 VLAN
Table 19 Advanced Application > VLAN > Static VLAN (continued)
LABEL DESCRIPTION
* Settings in this row apply to all ports.
Control Select Normal for the port to dynamically join this VLAN group using
Tagging Select TX Tagging if you want the port to tag all outgoing frames
Add Click Add to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to change the fields back to their last saved values.
Clear Click Clear to start configuring the screen again.
VID This field displays the ID number of the VLAN group. Click the number to
Active This field indicates whether the VLAN settings are enabled (Yes) or
Name This field displays the descriptive name for this VLAN group.
Delete Click Delete to remove the selected entry from the summary table.
Cancel Click Cancel to clear the Delete check boxes.
Use this row only if you want to make some settings the same for all
ports. Use this row first to set the common settings and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
GVRP. This is the default selection.
Select Fixed for the port to be a permanent member of this VLAN group.
Select Forbidden if you want to prohibit the port from joining this VLAN
group.
transmitted with this VLAN Group ID.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
edit the VLAN settings.
disabled (No).
100
GS2200-24 User’s Guide
Loading...