IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots
and graphics in this book may differ slightly from your product due to differences in your product
firmware or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•CLI Reference Guide
This guide explains how to use the Command-Line Interface (CLI) to configure the Switch.
Note: It is recommended you use the Web Configurator to configure the Switch.
• Online Help
Click the help link for a description of the fields in the Switch menus.
• Nebula Control Center (NCC) User’s Guide
Go to nebula.zyxel.com or support.zyxel.com to get this User’s Guide on how to configure the Switch
using Nebula.
More Information
Go to https://businessforum.zyxel.com for product discussions.
Go to support.zyxel.com to find other information on the Switch.
GS2220 Series User’s Guide
2
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to
configure or helpful tips) or recommendations.
Syntax Conventions
• All models may be referred to as the “Switch” in this guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Basic Setting >
IP Setup > IP Configuration > Network Proxy Configuration means you first click Basic Setting in the
navigation panel, then the IP Setup sub menu, then IP Configuration and finally Network Proxy
Configuration to get to that screen.
Icons Used in Figures
Figures in this user guide may use the following generic icons. The Switch icon is not an exact
representation of your device.
SwitchGeneric RouterWireless Router / Access Point
Status ...................................................................................................................................................... 96
Link Aggregation ................................................................................................................................ 188
Port Authentication ............................................................................................................................ 195
Port Security ......................................................................................................................................... 204
Time Range ......................................................................................................................................... 207
Access Control .................................................................................................................................... 407
System Log .......................................................................................................................................... 434
MAC Table ........................................................................................................................................... 444
Port Status ............................................................................................................................................ 455
Networked AV Mode ......................................................................................................................... 462
System .................................................................................................................................................. 465
Port ....................................................................................................................................................... 470
4.2 System Login .................................................................................................................................... 51
4.3 Zyxel One Network (ZON) Utility .................................................................................................... 55
4.8.3 Reboot the Switch ................................................................................................................ 78
4.9 Log Out of the Web Configurator ................................................................................................ 78
4.10 Help ................................................................................................................................................ 78
7.1.1 What You Can Do ................................................................................................................. 96
7.2 Status ................................................................................................................................................ 96
8.4.1 Introduction to VLANs ......................................................................................................... 106
8.4.2 Setting up ............................................................................................................................. 107
8.5 IP Setup .......................................................................................................................................... 108
8.5.1 IP Status ................................................................................................................................ 109
8.5.2 IP Status Details .................................................................................................................... 109
8.5.3 IP Configuration .................................................................................................................. 110
8.6 Port Setup ...................................................................................................................................... 113
8.7 PoE Status ...................................................................................................................................... 115
8.7.1 PoE Time Range Setup ....................................................................................................... 117
9.1.1 What You Can Do ............................................................................................................... 134
9.1.2 What You Need to Know ................................................................................................... 135
9.2 Introduction to IEEE 802.1Q Tagged VLANs ............................................................................... 135
9.3 VLAN Status ................................................................................................................................... 138
21.1.1 What You Can Do ............................................................................................................. 209
21.1.2 What You Need to Know ................................................................................................. 209
21.2 Classifier Status ............................................................................................................................ 209
40.1.1 What You Can Do ............................................................................................................. 360
40.1.2 What You Need to Know ................................................................................................. 360
40.2 ZULD Status .................................................................................................................................. 361
56.2 Viewing the IPv6 Neighbor Table ............................................................................................. 453
Chapter 57
Port Status .........................................................................................................................................455
57.2 Port Status .................................................................................................................................... 455
57.2.1 Port Details ......................................................................................................................... 456
Port ....................................................................................................................................................470
60.1 What You Can Do ...................................................................................................................... 470
60.2 PoE Status .................................................................................................................................... 470
60.4 Port Setup .................................................................................................................................... 474
62.1 IP Setup ........................................................................................................................................ 502
64.8 Port Mirroring ............................................................................................................................... 520
Part III: Troubleshooting and Appendices..................................................522
This chapter introduces the main features and applications of the Switch.
The GS2220 Series consists of the following models:
• GS2220-10
• GS2220-10HP
• GS2220-28
• GS2220-28HP
• GS2220-50
• GS2220-50HP
References to PoE models in this User's Guide only apply to GS2220-10HP, GS2220-28HP and GS222050HP.
The Switch is a layer-2 Ethernet switch that only does switching.
The Switch supports NebulaFlex which can set the Switch to operate in either standalone or Nebula
cloud management mode. When the Switch is in standalone mode, it can be configured and
managed by the Web Configurator, through Telnet, any terminal emulator program using the
Command Line Interface (CLI), or through third-party SNMP management. When the Switch is in Nebula
cloud management mode, it can be managed and provisioned by the Zyxel Nebula Control Center
(NCC).
All models are referred to as the “Switch” in this guide.
The following table describes the hardware features of the Switch by model.
With its built-in Web Configurator, managing and configuring the Switch is easy. In addition, the Switch
can also be managed through Telnet, any terminal emulator program using the Command Line
Interface (CLI), or third-party SNMP management.
1.1.2 Management Modes
NebulaFlex means you can set the Switch to operate in either standalone or cloud mode (but not both
at the same time).
Use the Web Configurator to configure and manage the Switch directly in standalone mode or use
Nebula Control Center (NCC) to configure and manage the Switch in cloud mode. The Nebula Control
Center (NCC) is an alternative cloud-based network management system that allows you to remotely
manage and monitor the Switch. You may also access a minimized version of the Web Configurator in
cloud mode.
Nebula Cloud Management
To have Nebula manage the Switch, you must first register it at the Nebula web portal at https://
nebula.zyxel.com, and ensure that Nebula Control Center Discovery is enabled in Basic Setting > Cloud Management > Nebula Control Center Discovery in the Switch Web Configurator.
Note: See the Switch’s datasheet for the feature differences between standalone and
Nebula cloud management modes. You can find the Switch’s datasheet at the Zyxel
website.
See the NCC (Nebula Control Center) User’s Guide for how to configure the Switch using Nebula.
GS2220 Series User’s Guide
25
1.1.3 Mode Changing
This section describes how to change the Switch’s management mode.
Note: If you change the Switch’s management mode from standalone mode to Nebula-
managed mode, the configuration settings of the
you have configured in Nebula.
Chapter 1 Getting to Know Your Switch
Switch will be overwritten with what
Note: If you change the
standalone mode, the
Switch’s management mode from Nebula-managed mode to
Switch will reset to its factory-default settings.
From Standalone to Nebula Cloud Management
To manage your Switch through Nebula, connect the Switch to the Internet, and register it to a site and
organization at the Nebula web portal (https://nebula.zyxel.com).
See the following steps or the Switch Quick Start Guide for how to do device registration.
Go to the NCC to Register the Switch
1Go to the Nebula web portal in one of three ways.
• Type https://nebula.zyxel.com in a supported web browser. See the Nebula User’s Guide for more
information about supported browsers.
• Click Visit Nebula in the Switch’s login page.
• Click the Nebula icon in the upper right of the Switch’s Web Configurator.
2Click Get Started in the Nebula web portal. Enter your myZyxel account information. You will be
redirected to another screen where you can sign up for a myZyxel account if you do not have one.
3Create an organization and a site or select an existing site using the Nebula setup wizard.
4Register the Switch by entering its MAC address and serial number and assign it to the site. The serial
number and MAC address can be found in the Status screen or the device back label on the Switch.
Use the Zyxel Nebula Mobile App to Register the Switch
1Download and open the Zyxel Nebula Mobile app in your mobile device. Click Sign Up to create a
myZyxel account or enter your existing account information to log in.
2Create an organization and site, or select an existing site using the Zyxel Nebula Mobile app.
3Select a site and scan the Switch's QR code to add it to the site. You can find the QR code:
• On a label on the Switch or
• On its box or
• In the Web Configurator at Basic > Cloud Management > Nebula Switch Registration.
See Section 3.3 on page 48 for more information about the CLOUD LED or Section 7.2 on page 96 for
more information about the Hybrid Mode field in the Status screen to see if the Switch goes into Nebula
cloud management mode successfully.
GS2220 Series User’s Guide
26
Chapter 1 Getting to Know Your Switch
Note: The Switch goes into Nebula-managed mode automatically after it can access the
Nebula web portal and is successfully registered there. Its login password and settings
are then overwritten with what you have configured in the Nebula web portal.
From Nebula-managed to Standalone
To return to direct management standalone mode, just remove (unregister) the Switch from the
organization or site in the Nebula web portal. The
settings.
Switch will reboot and restore the factory default
1.1.4 ZON Utility
With its built-in Web Configurator, including the Neighbor Management feature (Section 7.2.1 on page
98), viewing, managing and configuring the Switch and its neighboring devices is simplified.
In addition, Zyxel offers a proprietary software program called Zyxel One Network (ZON) Utility, it is a
utility tool that assists you to set up and maintain network devices in a more simple and efficient way.
You can download the ZON Utility at www.zyxel.com and install it on a PC (Windows operation system).
For more information on ZON Utility see Section 4.3 on page 55.
1.1.5 Web Configurator Networked AV Mode
Aside from the Web Configurator in Standard mode, you can switch to Networked AV mode that is
specifically designed to simplify configuration and management of the Switch for AVoIP (Audio-Video
over Internet Protocol) application. In AV over IP, the AV transmitter is the transmitter, the AV receiver is
the receiver, and the matrix switch is a standard IP Switch. See Section 4.4 on page 59 for details on
using the Setup Wizard screen for configuring the Switch’s Networked AV mode’s basic and advanced
settings.
Figure 2 Comparison Between Traditional AV and AVoIP Setups
GS2220 Series User’s Guide
27
1.1.6 PoE
The Switch is a Power Sourcing Equipment (PSE) because it provides a source of power through its
Ethernet ports. Each device that receives power through an Ethernet port is a Powered Device (PD).
The Switch can adjust the power supplied to each PD according to the PoE standard the PD supports.
PoE standards are:
• IEEE 802.3af Power over Ethernet (PoE)
• IEEE 802.3at Power over Ethernet (PoE) +
• IEEE 802.3bt Power over Ethernet (PoE) ++
The following table describes the PoE features of the Switch by model.
Table 2 GS2220 Series Models and PoE Features
Chapter 1 Getting to Know Your Switch
POE FEATURESGS2220-10HPGS2220-28HPGS2220-50HP
IEEE 802.3af PoEYesYesYes
IEEE 802.3at PoE+YesYesYes
Power Management ModeConsumption
Classification (default)
PoE Power Budget180 W375 W375 W
Consumption
Classification (default)
Consumption
Classification (default)
1.2 Example Applications
This section shows a few examples of using the Switch in various network environments. Note that the
Switch in the figure is just an example Switch and not your actual Switch.
1.2.1 PoE Example Application
The following example figure shows a Switch supplying PoE (Power over Ethernet) to Powered Devices
(PDs) such as an IP camera, a wireless router, an IP telephone and a general outdoor router that are not
within reach of a power outlet.
GS2220 Series User’s Guide
28
Chapter 1 Getting to Know Your Switch
Figure 3 PoE Example Application
1.2.2 Backbone Example Application
The Switch is an ideal solution for small networks where rapid growth can be expected in the near future.
The Switch can be used standalone for a group of heavy traffic users. You can connect computers and
servers directly to the Switch’s port or connect other switches to the Switch.
In this example, all computers can share high-speed applications on the server. To expand the network,
simply add more networking devices such as switches, routers, computers, print servers, and so on.
Figure 4 Backbone Application
GS2220 Series User’s Guide
29
Chapter 1 Getting to Know Your Switch
1.2.3 Bridging or Fiber Uplink Example Application
In this example, the Switch connects different company departments (RD and Sales) to the corporate
backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All
users that need high bandwidth can connect to high-speed department servers through the Switch.
You can provide a super-fast uplink connection by using a Gigabit Ethernet or SFP port on the Switch.
Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize
multiple servers at a single location.
Figure 5 Bridging or Fiber Uplink Example Application
1.2.4 High Performance Switching Example
The Switch is ideal for connecting two networks that need high bandwidth. In the following example, use
link aggregation (trunking) to connect these two networks.
Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most
people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring
your network and complex maintenance. The Switch can provide the same bandwidth as ATM at much
lower cost while still being able to use existing adapters and switches. Moreover, the current LAN
structure can be retained as all ports can freely communicate with each other.
This helps you switch to higher-speed LANs without the need for replacing all existing Ethernet cables
and adapter cards, restructuring your network and complex maintenance.
GS2220 Series User’s Guide
30
Chapter 1 Getting to Know Your Switch
Figure 6 High Performance Switched Workgroup Application
1.2.5 IEEE 802.1Q VLAN Application Examples
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical
networks. Stations on a logical network belong to one or more groups. With VLAN, a station cannot
directly talk to or hear from stations that are not in the same groups unless such traffic first goes through
a router.
1.2.5.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain thereby increase network
performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding,
moving or changing ports without any re-cabling.
Shared resources such as a server can be used by all ports in the same VLAN as the server. In the
following figure only ports that need access to the server need to be part of VLAN 1. Ports can belong to
other VLAN groups too.
Figure 7 Shared Server Using VLAN Example
1.2.6 IPv6 Support
IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in
IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10
of writing, the Switch supports the following features.
• Static address assignment
• Neighbor Discovery Protocol (a protocol used to discover other IPv6 devices in a network)
• Remote Management using ping, SNMP, SSH, telnet, HTTP and FTP services
GS2220 Series User’s Guide
38
IP addresses. At the time
31
Chapter 1 Getting to Know Your Switch
• ICMPv6 to report errors encountered in packet processing and perform diagnostic functions, such as
"ping”
• IPv4/IPv6 dual stack; the Switch can run IPv4 and IPv6 at the same time
• DHCPv6 client and relay
• Multicast Listener Discovery (MLD) snooping and proxy
For more information on IPv6, refer to Appendix C on page 535 and the CLI Reference Guide.
1.3 Ways to Manage the Switch
Use any of the following methods to manage the Switch.
• NCC (Zyxel Nebula Control Center). With the NCC, you can remotely manage and monitor the
Switch through a cloud-based network management system. See the NCC User’s Guide for detailed
information about how to access the NCC and manage your Switch through the NCC. See the NCC
User’s Guide for how to configure Nebula managed devices.
• Web Configurator. This is recommended for everyday management of the Switch using a (supported)
web browser. See Chapter 4 on page 51.
• Command Line Interface. Line commands offer an alternative to the Web Configurator and in some
cases are necessary to configure advanced features. See the CLI Reference Guide.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup or restore. See Section
46.9.1 on page 404.
• SNMP. The Switch can be monitored and/or managed by an SNMP manager. See Section 47.7.1 on
page 417.
• Cluster Management. Cluster Management allows you to manage multiple switches through one
switch, called the cluster manager. See Chapter 51 on page 438.
• ZON Utility. ZON Utility is a program designed to help you deploy and perform initial setup on a
network more efficiently. See Section 4.3 on page 55.
1.4 Good Habits for Managing the Switch
Do the following regularly to make the Switch more secure and to manage the Switch more effectively.
• Change the password. Use a password that is not easy to guess and that consists of different types of
characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the Switch to its factory default settings. If you backed up an earlier
configuration file, you would not have to totally re-configure the Switch. You could simply restore your
last configuration.
GS2220 Series User’s Guide
32
Hardware Installation and
2.1 Installation Scenarios
This chapter shows you how to install and connect the Switch.
The Switch can be:
• Placed on a desktop.
• Wall-mounted on a wall.
• Rack-mounted on a standard EIA rack.
CHAPTER 2
Connection
2.2 Safety Precautions
Please observe the following before using the Switch:
• It is recommended to ask an authorized technician to attach the Switch on a desk or to the rack or
wall. Use the proper screws to prevent damage to the Switch. See the Installation Requirements
sections in this chapter to know the types of screws and screwdrivers for each mounting method.
• Make sure there is at least 2 cm of clearance on the top and bottom of the Switch, and at least 5 cm
of clearance on all four sides of the Switch. This allows air circulation for cooling.
• Do NOT block the ventilation holes nor store cables or power cords on the Switch. Allow clearance for
the ventilation holes to prevent your Switch from overheating. This is especially crucial when your
Switch does not have fans. Overheating could affect the performance of your Switch, or even
damage it.
• The surface of the Switch could be hot when it is functioning. Do NOT put your hands on it. You may
get burned. This could happen especially when you are using a fanless Switch.
• The Switches with fans are not suitable for use in locations where children are likely to be present.
To start using the Switch, simply connect the power cables to turn it on.
2.3 Desktop Installation Procedure
1Make sure the Switch is clean and dry.
2Remove the adhesive backing from the rubber feet.
GS2220 Series User’s Guide
33
Chapter 2 Hardware Installation and Connection
3Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the
Switch from shock or vibration and ensure space between devices when stacking.
Figure 8 Attaching Rubber Feet
4Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and the
connected cables. Make sure there is a power outlet nearby.
Cautions:
• Avoid stacking fanless Switches to prevent overheating.
• Ensure enough clearance around the Switch to allow air circulation for cooling.
• Do NOT remove the rubber feet as it provides space for air circulation.
2.4 Wall Mounting (GS2220-10 and GS2220-10HP Only)
The Switch can be mounted on a wall. You may need screw anchors if mounting on a concrete or brick
wall.
2.4.1 Installation Requirements
• Distance above the floor: At least 1.8 m (5.9 feet)
• Distance between holes: 78 mm (3.071 inches)
• Two M4 screws and a #2 Philips screwdriver
• Two screw anchors (optional)
GS2220 Series User’s Guide
34
Chapter 2 Hardware Installation and Connection
Do the following to attach your Switch to a wall.
1Select a position free of obstructions on a wall strong enough to hold the weight of the Switch.
2Mark two holes on the wall at the appropriate distance apart for the screws.
WARNING! Be careful to avoid damaging pipes or cables located inside
the wall when drilling holes for the screws.
3If using screw anchors, drill two holes for the screw anchors into the wall. Push the anchors into the full
depth of the holes, then insert the screws into the anchors. Do NOT insert the screws all the way in –
leave a small gap of about 0.5 cm.
If not using screw anchors, use a screwdriver to insert the screws into the wall. Do NOT insert the screws
all the way in – leave a gap of about 0.5 cm.
4Make sure the screws are fastened well enough to hold the weight of the Switch with the connection
cables.
5Align the holes on the back of the Switch with the screws on the wall. Hang the Switch on the screws.
Note: Make sure there is enough clearance between the wall and the Switch to allow
ventilation.
GS2220 Series User’s Guide
35
Chapter 2 Hardware Installation and Connection
WARNING! The Switch should be wall-mounted horizontally, and make sure
the front panel is facing down. The Switch's side panels with ventilation slots
should not be facing up or down as this position is less safe.
2.5 Mounting the Switch on a Rack
The Switch can be mounted on an EIA standard size, 19-inch rack or in a wiring closet with other
equipment. Follow the steps below to mount your Switch on a standard EIA rack using a rack-mounting
kit.
Note: Make sure there is enough clearance between each equipment on the rack for air
circulation.
2.5.1 Installation Requirements
• Two mounting brackets.
GS2220 Series User’s Guide
36
Chapter 2 Hardware Installation and Connection
• Eight M3 flat head screws and a #2 Philips screwdriver.
• Four M5 flat head screws and a #2 Philips screwdriver.
2.5.2 Precautions
• Make sure the rack will safely support the combined weight of all the equipment it contains. The
maximum weight a bracket can hold is 21.5 kg.
• Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all
necessary precautions to anchor the rack securely before installing the unit.
2.5.3 Attaching the Mounting Brackets to the Switch
1Position a mounting bracket on one side of the Switch, lining up the four screw holes on the bracket with
the screw holes on the side of the Switch.
Figure 9 Attaching the Mounting Brackets
2Using a #2 Philips screwdriver, install the M3 flat head screws through the mounting bracket holes into
the Switch.
3Repeat steps 1 and 2 to install the second mounting bracket on the other side of the Switch.
4You may now mount the Switch on a rack. Proceed to the next section.
2.5.4 Mounting the Switch on a Rack
1Position a mounting bracket (that is already attached to the Switch) on one side of the rack, lining up
the two screw holes on the bracket with the screw holes on the side of the rack.
GS2220 Series User’s Guide
37
Chapter 2 Hardware Installation and Connection
Figure 10 Mounting the Switch on a Rack
Figure 11 Mounting the Switch on a Rack
2Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into
the rack.
Note: Make sure you tighten all the four screws to prevent the Switch from getting slanted.
3Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack.
GS2220 Series User’s Guide
38
Hardware Panels
This chapter describes the front panel and rear panel of the Switch and shows you how to make the
hardware connections.
3.1 Front Panel Connections
The following figures show the front panels of the Switch.
Figure 12 Front Panel: GS2220-10
Figure 13 Front Panel: GS2220-10HP
CHAPTER 3
Figure 14 Front Panel: GS2220-28
Figure 15 Front Panel: GS2220-28HP
Figure 16 Front Panel: GS2220-50
Figure 17 Front Panel: GS2220-50HP
GS2220 Series User’s Guide
39
Chapter 3 Hardware Panels
The following table describes the ports.
Table 3 Panel Connections
CONNECTORDESCRIPTION
8/24/48 1000Base-T
RJ-45 Ethernet Ports
2 SFP Slots
(only available for
GS2220-50/50HP)
2/4 GbE Combo
Ports (Dual
Personality
Interfaces)
ResetPress the RESET button to reboot the Switch without turning the power off. See Section 3.3 on
RestorePress the RESTORE button for 3 to 7 seconds to have the Switch automatically reboot and
PoE Mode
These are 10/100/1000Base-T auto-negotiating and auto-crossover Ethernet ports.
Connect these ports to a computer, a hub, a router, or an Ethernet switch.
Use SFP transceivers in these ports for high-bandwidth backbone connections.
Each interface has one 10/100/1000Base-T copper RJ-45 port and one SFP slot, with one port
active at a time.
• 10/100/1000Base-T Ports:
Connect these ports to a computer, an Ethernet switch or router.
•SFP Slots:
Use Small Form-Factor Pluggable (SFP) transceivers in these ports for fiber connections to
an Ethernet switch or router.
page 48 for more information about the LED behavior.
restore the last-saved custom default file. See Section 3.3 on page 48 for more information
about the LED behavior.
Press the RESTORE button for more than 7 seconds to have the Switch automatically reboot
and restore the factory default file. See Section 3.3 on page 48 for more information about
the LED behavior.
Push or release this button to change how the Link/ACT LED works.
(only available for
GS2220-50HP)
Console PortOnly connect this port to your computer (using an RS-232 cable) if you want to configure the
• Each Ethernet port’s LED is changed to act as a PoE Mode LED by pushing the PoE MODE
button on the front panel.
• Each Ethernet port’s LED is changed back to act as a Link/ACT LED by releasing the PoE
MODE button on the front panel.
View the LEDs to ensure proper functioning of the Switch and as an aid in troubleshooting
(see Section 3.3 on page 48).
Switch using the command line interface (CLI) through the console port.
3.1.1 Gigabit Ethernet Ports
The Switch has 1000Base-T auto-negotiating, auto-crossover Ethernet ports. In 10/100/1000 Mbps Gigabit
Ethernet, the speed can be 10 Mbps, 100 Mbps or 1000 Mbps. The duplex mode can be half duplex or
full duplex.
An auto-negotiating port can detect and adjust to the optimum Ethernet speed (10/100/1000 Mbps)
and duplex mode (full duplex or half duplex) of the connected device.
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight-through or crossover
Ethernet cable.
Four 1000Base-T Ethernet ports are paired with an SFP slot to create a dual personality interface. The
Switch uses up to one connection for each SFP and 1000Base-T Ethernet pair. The SFP slots have priority
over the Gigabit ports. This means that if an SFP slot and the corresponding GbE port are connected at
the same time, the GbE port will be disabled.
GS2220 Series User’s Guide
40
Chapter 3 Hardware Panels
Note: The dual personality ports change to fiber mode directly when inserting the fiber
module.
When auto-negotiation is turned on, an Ethernet port negotiates with the peer automatically to
determine the connection speed and duplex mode. If the peer Ethernet port does not support autonegotiation or turns off this feature, the Switch determines the connection speed by detecting the signal
on the cable and using half duplex mode. When the Switch’s auto-negotiation is turned off, an Ethernet
port uses the pre-configured speed and duplex mode when making a connection, thereby requiring
you to make sure that the settings of the peer Ethernet port are the same in order to connect.
3.1.1.1 Default Ethernet Negotiation Settings
The factory default negotiation settings for the Gigabit ports on the Switch are:
• Speed: Auto
•Duplex: Auto
• Flow control: Off
• Dual Personality Interface: Fiber module first
3.1.1.2 Auto-crossover
All ports support auto-crossover, that is auto-MDIX ports (Media Dependent Interface Crossover), so you
may use either a straight-through Ethernet cable or crossover Ethernet cable for all Gigabit port
connections. Auto-crossover ports automatically sense whether they need to function as crossover or
straight ports, so crossover cables can connect both computers and switches or hubs.
3.1.2 PoE (GS2220-10HP, GS2220-28HP and GS2220-50HP)
The Switch supports the IEEE 802.3af Power over Ethernet (PoE), IEEE 802.3at Power over Ethernet (PoE)
plusPower over Ethernet (PoE) plus plus . The Switch is a Power Sourcing Equipment (PSE) because it
provides a source of power through its Ethernet ports. Each device that receives power through an
Ethernet port is a Powered Device (PD).
3.1.3 SFP Slots
These are slots for SFP (Small Form-Factor Pluggable) transceivers. A transceiver is a single unit that
houses a transmitter and a receiver. The Switch does not come with transceivers. You must use
transceivers that comply with the Small Form-factor Pluggable (SFP) Transceiver MultiSource Agreement
(MSA). See the SFF committee’s INF-8074i specification Rev 1.0 for details.
You can change transceivers while the Switch is operating. You can use different transceivers to
connect to Ethernet switches with different types of fiber or even copper cable connectors.
• Type: SFP connection interface
• Connection speed: 100/1000 Mbps
WARNING! To avoid possible eye injury, do not look into an operating
fiber module’s connectors.
HANDLING! All transceivers are static sensitive. To prevent damage from
electrostatic discharge (ESD), it is recommended you attach an ESD
GS2220 Series User’s Guide
41
preventive wrist strap to your wrist and to a bare metal surface when
you install or remove a transceiver.
STORAGE! All modules are dust sensitive. When not in use, always keep
the dust plug on. Avoid getting dust and other contaminant into the
optical bores, as the optics do not work correctly when obstructed with
dust.
3.1.3.1 Transceiver Installation
Use the following steps to install a transceiver.
1Attach an ESD preventive wrist strap to your wrist and to a bare metal surface.
2Align the transceiver in front of the slot opening.
3Make sure the latch is in the lock position (latch styles vary), then insert the transceiver into the slot with
the exposed section of PCB board facing down.
4Press the transceiver firmly until it clicks into place.
5The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning
properly.
Chapter 3 Hardware Panels
6Remove the dust plugs from the transceiver and cables (dust plug styles vary).
7Identify the signal transmission direction of the fiber cables and the transceiver. Insert the fiber cable into
the transceiver.
Figure 18 Latch in the Lock Position
Figure 19 Transceiver Installation Example
Figure 20 Connecting the Fiber Cables
GS2220 Series User’s Guide
42
3.1.3.2 Transceiver Removal
Use the following steps to remove an SFP transceiver.
1Attach an ESD preventive wrist strap to your wrist and to a bare metal surface on the chassis.
2Remove the fiber cables from the transceiver.
3Pull out the latch and down to unlock the transceiver (latch styles vary).
Note: Make sure the transceiver’s latch is pushed all the way down, so the transceiver can be
pulled out successfully.
4Pull the latch, or use your thumb and index finger to grasp the tabs on both sides of the transceiver, and
carefully slide it out of the slot.
Note: Do NOT pull the transceiver out by force. You could damage it. If the transceiver will not
slide out, grasp the tabs on both sides of the transceiver with a slight up or down motion
and carefully slide it out of the slot. If unsuccessful, contact Zyxel Support to prevent
damage to your Switch and transceiver.
5Insert the dust plug into the ports on the transceiver and the cables.
Figure 21 Removing the Fiber Cables
Chapter 3 Hardware Panels
Figure 22 Opening the Transceiver’s Latch Example
Figure 23 Transceiver Removal Example
3.1.4 Dual Personality Interfaces
A combo port is for uplink connections. It consists of a Gigabit Ethernet port for Ethernet connection,
and a SFP transceiver slot for fiber connection. The fiber connection takes priority if the corresponding
Gigabit port is also connected.
• 100 Mbps/1 Gbps – Connect these ports to high-bandwidth backbone network Ethernet switches.
• Transceiver Slots – Use SFP transceivers in these slots for connections to backbone Ethernet switches.
GS2220 Series User’s Guide
43
Figure 24 Combo Port Example: Gigabit Port and SFP Transceiver Slot
3.1.5 Console Port
This console port is for troubleshooting only. With instructions from customer support, connect the male 9pin end of the RS-232 console cable to the console port of the Switch. Connect the female end to a
serial port (COM1, COM2 or other COM port) of your computer. You can use a computer with terminal
emulation software configured to the following parameters:
• VT100 terminal emulation
• 115200 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
Chapter 3 Hardware Panels
3.2 Rear Panel
The following figures show the rear panels of the Switch. The rear panels contain:
Figure 25 Rear Panel: GS2220-10
Figure 26 Rear Panel: GS2220-10HP
Figure 27 Rear Panel: GS2220-28
Figure 28 Rear Panel: GS2220-28HP
GS2220 Series User’s Guide
44
Figure 29 Rear Panel: GS2220-50
Figure 30 Rear Panel: GS2220-50HP
3.2.1 Grounding
Grounding is a safety measure to direct excess electric charge to the ground. It prevents damage to
the Switch, and protects you from electrocution. Use the grounding screw on the rear panel and the
ground wire of the AC power supply to ground the Switch.
The grounding terminal and AC power ground where you install the Switch must follow your country’s
regulations. Qualified service personnel must ensure the building’s protective earthing terminals are
valid terminals.
Chapter 3 Hardware Panels
Installation of Ethernet cables must be separate from AC power lines. To avoid electric surge and
electromagnetic interference, use a different electrical conduit or raceway (tube/trough or enclosed
conduit for protecting electric wiring) that is 15 cm apart, or as specified by your country’s electrical
regulations.
Any device that is located outdoors and connected to this product must be properly grounded and
surge protected. To the extent permissible by your country’s applicable law, failure to follow these
guidelines could result in damage to your Switch which may not be covered by its warranty.
Note: The specification for surge or ESD protection assumes that the Switch is properly
grounded.
1Remove the M4 ground screw from the Switch’s rear panel.
2Secure a green or yellow ground cable (16 AWG or smaller) to the Switch's rear panel using the M4
ground screw.
Figure 31 Grounding
GS2220 Series User’s Guide
45
Chapter 3 Hardware Panels
3Attach the other end of the ground cable to a grounding bar located on the rack where you install the
Switch or to an on-site grounding terminal.
Figure 32 Attach Ground Cable to Grounding Bar or On-site Grounding Terminal
4The grounding terminal of the server rack or on-site grounding terminal must also be grounded and
connected to the building’s main grounding electrode. Make sure the grounding terminal is connected
to the buildings grounding electrode and has an earth resistance of less than 10 ohms, or according to
your country’s electrical regulations.
Figure 33 Connecting to the Building’s Main Grounding Electrode
If you are uncertain that suitable grounding is available, contact the appropriate electrical inspection
authority or an electrician.
This device must be grounded. Do this before you make other
connections.
3.2.2 AC Power Connection
Note: Make sure you are using the correct power source as shown on the panel and that no
objects obstruct the airflow of the fans (located on the side of the unit).
To connect power to the Switch, insert the female end of the power cord to the AC power receptacle
on the rear panel. Connect the other end of the supplied power cord to a power outlet.
GS2220 Series User’s Guide
46
3.2.3 Power Connection
Make sure you are using the correct power source and that no objects obstruct the airflow of the fans.
The Switch uses two power supply modules, one of which is redundant, so if one power module fails the
system can operate on the remaining module.
Rear Panel Power Connection
Connect one end of the supplied power cord or power adapter to the power receptacle on the back
of the Switch and the other end to the appropriate power source.
Connecting the Power
Use the following procedures to connect the Switch to a power source after you have installed it in a
rack.
Note: Use the included power cord for the AC power connection.
1Connect the female end of the power cord to the AC power socket.
Chapter 3 Hardware Panels
2Connect the other end of the cord to a power outlet.
Disconnecting the Power
The power input connectors can be disconnected from the power source individually.
1Disconnect the power cord from the power outlet.
2Disconnect the power cord from the AC power socket.
GS2220 Series User’s Guide
47
3.3 LEDs
After you connect the power to the Switch, view the LEDs to ensure proper functioning of the Switch
and as an aid in troubleshooting.
Table 4 LED Descriptions
LEDCOLORSTATUSDESCRIPTION
PWRGreenOnThe Switch is receiving power from the power module in the
SYSGreenOn The Switch is on and functioning properly.
CLOUDGreenOnThe Switch has successfully connected to the NCC (Nebula
LOCATORBlueOnThe Switch is uploading firmware. While the Switch is doing this,
Chapter 3 Hardware Panels
power slot.
BlinkingThe Switch is returning to the last-saved custom default
configuration settings.
AmberOnThe Switch is returning to its factory default configuration
settings.
OffThe Switch is not receiving power from the power module in
the power slot.
BlinkingThe Switch is rebooting and performing self-diagnostic tests.
RedOnThe Switch is functioning abnormally.
OffThe power is off or the Switch is not ready or malfunctioning.
Control Center).
BlinkingThe Switch cannot connect to the NCC because it is not
registered.
AmberOnThe Switch is registered at NCC but cannot connect to the
NCC. Please check the Internet connection of the Switch.
BlinkingThe Switch is not registered at NCC and cannot connect to the
NCC. Please check the Internet connection of the Switch and
register the Switch at NCC.
OffThe Switch is operating in standalone mode. Nebula Control
Center Discovery is disabled in Basic > Cloud Management >
Nebula Control Center Discovery in the Switch’s Web
Configurator.
do NOT turn off the power.
BlinkingShows the actual location of the Switch between several
devices in a rack. The default timer is 30 minutes when you are
configuring the Switch.
OffThe locator is not functioning or malfunctioning.
GS2220 Series User’s Guide
48
Chapter 3 Hardware Panels
Table 4 LED Descriptions (continued)
LEDCOLORSTATUSDESCRIPTION
PoE Usage MAX
Green
OnEach bar represents 20 percent of PoE Power consumption.
(GS2220-10HP)
Bar1 is the bar at
the bottom; bar
5 is the bar at
the top.
PoE MAX
(GS2220-28HP
and GS222050HP)
Ethernet Ports and PoE
LNK/ACTGreenBlinkingThe Switch is transmitting or receiving to or from a 1000 Mbps
PoE Mode
(GS2220-10HP,
GS2220-28HP
and GS222050HP)
SFP Slots
LINK/ACTGreenOnThe uplink port is linking at 1000 Mbps.
(Bar1 – Bar3)
Yellow
(Bar4)
Red
(Bar5)
AmberOnLess than five percent of the power supplied budget remains.
AmberBlinkingThe Switch is transmitting or receiving to or from a 10 Mbps or a
GreenOnPower supplied to all PoE Ethernet ports meets the IEEE 802.3at
AmberOnPower supplied to all PoE Ethernet ports meets the IEEE 802.3af
AmberOnThe uplink port is linking at 100 Mbps.
OnPoE power usage is below 80 percent of the power supplied
OnPoE power usage is more than 80 percent of the power
BlinkingLess than 5 percent of the power supplied budget remains. 5
OffPoE power usage is 0 percent of the power supplied budget.
OffThe Switch has a sufficient power supplied budget.
OnThe link to a 1000 Mbps Ethernet network is up.
OnThe link to a 10 Mbps or a 100 Mbps Ethernet network is up.
OffThe link to an Ethernet network is down.
OffThere is no power supplied.
BlinkingThe Switch is transmitting or receiving data at 1000 Mbps.
BlinkingThe Switch is transmitting or receiving data at 100 Mbps.
OffThere is no link or port, or the uplink port is shut down.
Bar 1: PoE power usage is below 20 percent of the power
supplied budget.
Bar 2: PoE power usage is below 40 percent of the power
supplied budget, but over 20 percent of the power supplied
budget.
Bar 3: PoE power usage is below 60 percent of the power
supplied budget, but over 40 percent of the power supplied
budget.
budget, but over 60 percent of the power supplied budget.
supplied budget.
percent is the default value.
Five percent is the default value.
Ethernet network.
100 Mbps Ethernet network.
standard.
standard.
GS2220 Series User’s Guide
49
PART II
Technical Reference
50
4.1 Overview
This section introduces the configuration and functions of the Web Configurator.
The Web Configurator is an HTML-based management interface that allows easy system setup and
management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge,
Internet Explorer 11, Mozilla Firefox, or Google Chrome. The recommended minimum screen resolution is
1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
• Web browser pop-up windows on your computer.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
CHAPTER 4
Web Configurator
4.2 System Login
1Start your web browser.
2The Switch is a DHCP client by default. Type “http://DHCP-assigned IP” in the Location or Address field.
Press [ENTER].
If the Switch is not connected to a DHCP server, type “http://” and the static IP address of the Switch (for
example, the default management IP address is 192.168.1.1 through an in-band port) in the Location or
Address field. Press [ENTER]. Your computer must be in the same subnet in order to access this website
address.
Also, you can use the ZON Utility to check your Switch’s IP address. See Section 4.3 on page 55 for more
information on the ZON utility.
3The following screen appears.
GS2220 Series User’s Guide
51
Chapter 4 Web Configurator
Figure 34 Web Configurator: Login
4Click Login to log into the Web Configurator to manage the Switch directly. The default user name is
admin and associated default password is 1234.
5The following screen appears.
Figure 35 Select Mode
6Select the Web Configurator in Standard Mode that has a complete set of configuration for network
installation. Or select the Web Configurator in Networked AV Mode that has a set of menus specifically
designed to simplify configuration and management of the Switch for AVoIP (Audio-Video over Internet
Protocol) application.
GS2220 Series User’s Guide
52
Chapter 4 Web Configurator
7If you select Standard Mode, go directly to step 9.
8The SetupWizard screen will appear after selecting the Networked AV Mode. You can use the Setup
Wizard screen to configure the Switch’s Networked AV mode’s basic or advanced settings (see Section
4.4 on page 59 for details).
• Use the Basic Settings to configure networked AV operation on management VLAN. Such as the
Switches’ IP address, DNS server, system password, SNMP community, accept or skip the default
Networked AV mode settings, and view a summary of the basic settings.
• Use the Advanced Settings for networks that wants to separate networked AV VLAN from
management VLAN, specify which ports connect to AVoIP application, and for setting link
aggregation across switches.
Once you click the Finish button, the settings configured in the Setup Wizard screen will overwrite the
existing settings.
Otherwise, click the Exit button. If you want to open the Setup Wizard screen later, click the Wizard icon
in the upper right hand corner of the Web Configurator in Networked AV mode.
Figure 36 Web Configurator: Wizard
9If you did not change the default administrator password and/or SNMP community values, a warning
screen displays each time you log into the Web Configurator and select Standard Mode. Click Password / SNMP to open a screen where you can change the administrator password and SNMP community
string simultaneously. Otherwise, click Ignore to close it.
If you log into the Web Configurator and select Networked AV Mode, open the screen in the Wizard >
Step 2 Password to change the administrator password and SNMP community string. Click Finish on the
last step of the Wizard to save your settings.
GS2220 Series User’s Guide
53
Chapter 4 Web Configurator
Password/SNMP Setting
Figure 37 Web Configurator: Warning
Figure 38 Web Configurator: Password
Change the default administrator and/or SNMP passwords, and then click Apply to save your changes.
Table 5 Web Configurator: Password/SNMP
LABELDESCRIPTION
Administrator
This is the default administrator account with the “admin” user name. You cannot change the default administrator
user name.
Old PasswordEnter the existing system password (1234 is the default password when shipped).
New PasswordEnter your new system password. Up to 32 characters are allowed for the new password
Retype to confirmRe-enter your new system password for confirmation.
General Setting
Use this section to specify the SNMP version and community (password) values.
VersionSelect the SNMP version for the Switch. The SNMP version on the Switch must match the version
except [ ? ], [ | ], [ ' ], [ " ], [ space ], or [ , ].
on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both (v3v2c).
Note: SNMP version 2c is backwards compatible with SNMP version 1.
Get CommunityEnter the Get Community string, which is the password for the incoming Get- and GetNext-
requests from the management station. The Get Community string is only used by SNMP
managers using SNMP version 2c or lower.
GS2220 Series User’s Guide
54
Chapter 4 Web Configurator
Table 5 Web Configurator: Password/SNMP (continued)
LABELDESCRIPTION
Set CommunityEnter the Set Community string, which is the password for the incoming Set- requests from the
management station.
The Set Community string is only used by SNMP managers using SNMP version 2c or lower.
Trap CommunityEnter the Trap Community string, which is the password sent with each trap to the SNMP
manager.
The Trap Community string is only used by SNMP managers using SNMP version 2c or lower.
ApplyClick Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
CancelClick Cancel to begin configuring this screen afresh.
4.3 Zyxel One Network (ZON) Utility
ZON Utility is a program designed to help you deploy and manage a network more efficiently. It detects
devices automatically and allows you to do basic settings on devices in the network without having to
be near it.
The ZON Utility issues requests through Zyxel Discovery Protocol (ZDP) and in response to the query, the
device responds back with basic information including IP address, firmware version, location, system
and model name in the same broadcast domain. The information is then displayed in the ZON Utility
screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade
in it. You can download the ZON Utility at www.zyxel.com and install it in a computer (Windows
operating system).
4.3.1 Requirements
Before installing the ZON Utility in your computer, please make sure it meets the requirements listed
below.
Operating System
At the time of writing, the ZON Utility is compatible with:
• Windows 7 (both 32-bit / 64-bit versions)
• Windows 8 (both 32-bit / 64-bit versions)
• Windows 8.1 (both 32-bit / 64-bit versions)
• Windows 10 (both 32-bit / 64-bit versions)
Note: To check for your Windows operating system version, right-click on My Computer >
Properties on your computer. You should see this information in the General tab.
Hardware
Here are the minimum hardware requirements to use the ZON Utility on your computer.
• Core i3 processor
GS2220 Series User’s Guide
55
•2 GB RAM
• 100 MB free hard disk
• WXGA (Wide XGA 1280 by 800)
4.3.2 Run the ZON Utility
1Double-click the ZON Utility to run it.
2The first time you run the ZON Utility, you will see if your device and firmware version support the ZON
Utility. Click the OK button to close this screen.
Figure 39 Supported Devices and Versions
Chapter 4 Web Configurator
If you want to check the supported models and firmware versions later, you can click the Show
information about ZON icon in the upper right of the screen. Then select the Supported model and
firmware version link. If your device is not listed here, see the device release notes for ZON Utility support.
The release notes are in the firmware zip file on the Zyxel web site.
GS2220 Series User’s Guide
56
Chapter 4 Web Configurator
Figure 40 ZON Utility Screen
3Select a network adapter to which your supported devices are connected.
Figure 41 Network Adapter
4Click the Go button for the ZON Utility to discover all supported devices in your network.
Figure 42 Discovery
5The ZON Utility screen shows the devices discovered.
GS2220 Series User’s Guide
57
Chapter 4 Web Configurator
1
2
3
4
5
6
7
8
9
1011
12
13
Figure 43 ZON Utility Screen
6Select a device and then use the icons to perform actions. Some functions may not be available for
your devices.
Note: You must know the selected device admin password before taking actions on the
device using the ZON Utility icons.
Figure 44 Password Prompt
The following table describes the icons numbered from left to right in the ZON Utility screen.
Table 6 ZON Utility Icons
ICONDESCRIPTION
1 IP ConfigurationChange the selected device’s IP address.
2 Renew IP AddressUpdate a DHCP-assigned dynamic IP address.
3 Reboot DeviceUse this icon to restart the selected devices. This may be useful when troubleshooting
or upgrading new firmware.
4 Reset Configuration to
Default
5 Locator LEDUse this icon to locate the selected device by causing its Locator LED to blink.
6 Web GUIUse this to access the selected device Web Configurator from your browser. You will
7 Firmware UpgradeUse this icon to upgrade new firmware to selected devices of the same model. Make
Use this icon to reload the factory-default configuration file. This means that you will
lose all previous configurations.
need a user name and password to log in.
sure you have downloaded the firmware from the Zyxel website to your computer and
unzipped it in advance.
GS2220 Series User’s Guide
58
Chapter 4 Web Configurator
Table 6 ZON Utility Icons (continued)
ICONDESCRIPTION
8 Change PasswordUse this icon to change the admin password of the selected device. You must know
the current admin password before changing to a new one.
9 Configure NCC
Discovery
10 ZACUse this icon to run the Zyxel AP Configurator of the selected AP.
11 Clear and RescanUse this icon to clear the list and discover all devices on the connected network again.
12 Save ConfigurationUse this icon to save configuration changes to permanent memory on a selected
13 SettingsUse this icon to select a network adapter for the computer on which the ZON utility is
You must have Internet access to use this feature. Use this icon to enable or disable the
Nebula Control Center (NCC) discovery feature on the selected device. If it is
enabled, the selected device will try to connect to the NCC. Once the selected
device is connected to and has registered in the NCC, it will go into the Nebula cloud
management mode.
device.
installed, and the utility language.
The following table describes the fields in the ZON Utility main screen.
Table 7 ZON Utility Fields
LABELDESCRIPTION
TypeThis field displays an icon of the kind of device discovered.
ModelThis field displays the model name of the discovered device.
Firmware VersionThis field displays the firmware version of the discovered device.
MAC AddressThis field displays the MAC address of the discovered device.
IP AddressThis field displays the IP address of an internal interface on the discovered device that
first received a ZDP discovery request from the ZON Utility.
System NameThis field displays the system name of the discovered device.
LocationThis field displays where the discovered device is.
StatusThis field displays whether changes to the discovered device have been done
Controller DiscoveryThis field displays if the discovered device supports the Nebula Control Center (NCC)
Serial NumberEnter the admin password of the discovered device to display its serial number.
Hardware VersionThis field displays the hardware version of the discovered device.
IPv6 AddressThis field displays the IPv6 address on the discovered device that first received a ZDP
successfully. As the Switch does not support IP Configuration, Renew IP address and
Flash Locator LED, this field displays “Update failed”, “Not support Renew IP address”
and “Not support Flash Locator LED” respectively.
discovery feature. If it is enabled, the selected device will try to connect to the NCC.
Once the selected device is connected to and has registered in the NCC, it will go
into the Nebula cloud management mode.
discovery request from the ZON Utility.
4.4 Networked AV Mode Wizard
The Setup Wizard can be accessed using the following methods:
• When the Switch is in its factory-default state, selecting Networked AV mode will automatically
access the Setup Wizard.
• When in Networked AV mode, click the Wizard link to access the Setup Wizard.
GS2220 Series User’s Guide
59
Figure 45 Wizard Link in Networked AV Mode
The Setup Wizard contains the following parts:
• Use the Basic Settings when networked AV service runs on management VLAN, using the combo/
fiber port for inter-switch connection.
• Use the Advanced Settings when you need to specify the VLAN for networked AV service and
configure the port’s role manually.
4.4.1 Basic Settings
In Basic Settings, you can set up IP or DNS, set up your password, SNMP community, accept or skip the
default Networked AV mode settings, and view finished results.
In order to set up your IP or DNS, please do the following. Click Wizard > Basic Settings > Step 1 IP to
access this screen.
Figure 46 Wizard > Basic Settings > Step 1 IP
Chapter 4 Web Configurator
GS2220 Series User’s Guide
60
Chapter 4 Web Configurator
Each field is described in the following table.
Table 8 Wizard > Basic Settings > Step 1 IP
LABELDESCRIPTION
Host NameThis field displays a host name.
IP InterfaceSelect DHCP Client if the Switch is connected to a router with the DHCP server enabled. You
VIDThis field displays the VLAN ID.
IP AddressThe Switch needs an IP address for it to be managed over the network.
IP Subnet MaskThe subnet mask specifies the network number portion of an IP address.
Default GatewayType the IP address of the default outgoing gateway in dotted decimal notation, for
DNS ServerDNS (Domain Name System) is for mapping a domain name to its corresponding IP address
NextClick Next to show the next screen.
CancelClick Cancel to exit this screen without saving.
then need to check the router for the IP address assigned to the Switch in order to access
the Switch’s Web Configurator again.
Select Static IP Interface when the Switch is NOT connected to a router or you want to
assign it a fixed IP address.
example 192.168.1.254.
and vice versa. Enter a domain name server IP address in order to be able to use a domain
name instead of an IP address.
Current passwordType the existing system password (1234 is the default password when shipped).
New passwordEnter your new system password. Up to 32 characters are allowed for the new password
Confirm passwordRetype your new system password for confirmation.
SNMP
SNMPSelect Enabled to let the Switch act as an SNMP agent, which allows a manager station to
VersionSelect the SNMP version for the Switch. The SNMP version on the Switch must match the
except [ ? ], [ | ], [ ' ], [ " ], [ space ], or [ , ].
manage and monitor the Switch through the network. Select Disabled to turn this feature
off.
version on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both
(v3v2c).
Note: SNMP version 2c is backwards compatible with SNMP version 1.
Get CommunityEnter the Get Community string, which is the password for the incoming Get- and
GetNextrequests from the management station.
The Get Community string is only used by SNMP managers using SNMP version 2c or lower.
Set CommunityEnter the Set Community string, which is the password for the incoming Set- requests from
the management station.
The Set Community string is only used by SNMP managers using SNMP version 2c or lower.
Trap CommunityEnter the Trap Community string, which is the password sent with each trap to the SNMP
manager.
The Trap Community string is only used by SNMP managers using SNMP version 2c or lower.
PreviousClick Previous to show the previous screen.
NextClick Next to show the next screen.
CancelClick Cancel to exit this screen without saving.
After clicking Next, the Networked AV screen appears.
IP InterfaceThis field displays whether the WAN interface is using a DHCP IP address or a static IP
address.
VIDThis field displays the VLAN ID.
IP AddressThis field displays the Switches’ IP address for it to be managed over the network.
IP Subnet MaskThis field displays the subnet mask that specifies the network number portion of an IP
address.
Default GatewayThis field displays the IP address of the default outgoing gateway in dotted decimal
DNS ServerThis field displays the DNS (Domain Name System) for mapping a domain name to its
Change administrator's password and activate SNMP
New PasswordThis field displays asterisks when a new password has been created.
SNMPThis field displays whether the Switch acts as an SNMP agent.
VersionThis field displays the SNMP version for the Switch.
Get CommunityThis field displays the Get Community string.
Set CommunityThis field displays the Set Community string.
Trap CommunityThis field displays the Trap Community string.
Networked AV – Basic Settings
Networked AV VLANThis field displays the VLAN ID for the AVoIP network.
Networked AV VLAN IPThis field displays the Switches’ IP address for it to be managed over the AVoIP network.
IGMP SnoopingThis field displays Active when IGMP Snooping is enabled to forward group multicast traffic
only to ports that are members of that group.
Otherwise, it displays Inactive.
IGMP Snooping
Querier
Unknown Multicast
Frame
Transmitter/Receiver
Connected Port
Inter-switch
Connected Port
PreviousClick Previous to show the previous screen.
FinishReview the information and click Finish to create the task.
CancelClick Cancel to exit this screen without saving.
This field displays Active when the Switch is allowed to send IGMP General Query messages
to the VLANs with the multicast hosts attached.
Otherwise, it displays Inactive.
This field displays the action to perform when the Switch receives an unknown multicast
frame. It displays Drop when the frames are discarded. It displays Flooding when the frames
are sent to all ports.
This field shows the Switches’ port numbers for connection to networked audio and video
equipment.
This field shows the Switches’ port numbers for connection to another switch.
4.4.2 Advanced Settings
In Advanced Settings, you can set up IP or DNS, set up your password, SNMP community, configure
Networked AV service to a VLAN, select and assign port role, link aggregation (trunking), and view
finished results.
In order to set up your IP or DNS, please do the following. Click Wizard > Advanced Settings > Step 1 IP to
access this screen.
GS2220 Series User’s Guide
65
Chapter 4 Web Configurator
Figure 50 Wizard > Advanced Settings > Step 1 IP
Each field is described in the following table.
Table 12 Wizard > Advanced Settings > Step 1 IP
LABELDESCRIPTION
Host NameThis field displays a host name.
IP InterfaceSelect DHCP Client if the Switch is connected to a router with the DHCP server enabled. You
then need to check the router for the IP address assigned to the Switch in order to access
the Switch’s Web Configurator again.
Select Static IP Interface when the Switch is NOT connected to a router or you want to
assign it a fixed IP address.
VIDThis field displays the VLAN ID.
IP AddressThe Switch needs an IP address for it to be managed over the network.
IP Subnet MaskThe subnet mask specifies the network number portion of an IP address.
Default GatewayType the IP address of the default outgoing gateway in dotted decimal notation, for
example 192.168.1.254.
DNS ServerDNS (Domain Name System) is for mapping a domain name to its corresponding IP address
and so forth. Enter a domain name server IP address in order to be able to use a domain
name instead of an IP address.
NextClick Next to show the next screen.
CancelClick Cancel to exit this screen without saving.
Current passwordType the existing system password (1234 is the default password when shipped).
New passwordEnter your new system password. Up to 32 characters are allowed for the new password
except [ ? ], [ | ], [ ' ], [ " ], [ space ], or [ , ].
Confirm passwordRetype your new system password for confirmation.
SNMP
SNMPSelect Enabled to let the Switch act as an SNMP agent, which allows a manager station to
manage and monitor the Switch through the network. Select Disabled to turn this feature
off.
VersionSelect the SNMP version for the Switch. The SNMP version on the Switch must match the
version on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both
(v3v2c).
Note: SNMP version 2c is backwards compatible with SNMP version 1.
Get CommunityEnter the Get Community string, which is the password for the incoming Get- and
GetNextrequests from the management station.
The Get Community string is only used by SNMP managers using SNMP version 2c or lower.
Set CommunityEnter the Set Community string, which is the password for the incoming Set- requests from
the management station.
The Set Community string is only used by SNMP managers using SNMP version 2c or lower.
Trap CommunityEnter the Trap Community string, which is the password sent with each trap to the SNMP
manager.
The Trap Community string is only used by SNMP managers using SNMP version 2c or lower.
PreviousClick Previous to show the previous screen.
NextClick Next to show the next screen.
CancelClick Cancel to exit this screen without saving.
After clicking Next, the Networked AV screen appears.
IP InterfaceThis field displays whether the WAN interface is using a DHCP IP address or a static IP
address.
VIDThis field displays the VLAN ID.
IP AddressThis field displays the Switches’ IP address for it to be managed over the network.
IP Subnet MaskThis field displays the subnet mask that specifies the network number portion of an IP
address.
Default GatewayThis field displays the IP address of the default outgoing gateway in dotted decimal
DNS ServerThis field displays the DNS (Domain Name System) for mapping a domain name to its
Change administrator's password and activate SNMP
New PasswordThis field displays asterisks when a new password has been created.
SNMPThis field displays whether the Switch acts as an SNMP agent.
VersionThis field displays the SNMP version for the Switch.
Get CommunityThis field displays the Get Community string.
Set CommunityThis field displays the Set Community string.
Trap CommunityThis field displays the Trap Community string.
Networked AV – Advanced Settings
Networked AV VLANThis field displays the VLAN ID for the AVoIP network.
Networked AV VLAN IPThis field displays the corresponding VLAN ID’s IP address for the AVoIP network.
notation, for example 192.168.1.254.
corresponding IP address and so forth.
IGMP SnoopingThis field displays Active when IGMP Snooping is enabled to forward group multicast traffic
only to ports that are members of that group.
Otherwise, it displays Inactive.
IGMP Snooping
Querier
Unknown Multicast
Frame
Transmitter/Receiver
Connected Port
Inter-switch
Connected Port (Link
Aggregation)
PreviousClick Previous to show the previous screen.
FinishReview the information and click Finish to create the task.
CancelClick Cancel to exit this screen without saving.
This field displays Active when the Switch is allowed to send IGMP General Query messages
to the VLANs with the multicast hosts attached.
Otherwise, it displays Inactive.
This field displays the action to perform when the Switch receives an unknown multicast
frame. It displays Drop when the frames are discarded. It displays Flooding when the frames
are sent to all ports.
This field shows the Switches’ port numbers for connection to networked audio and video
equipment.
This field shows the Switches’ port numbers for connection to another switch.
4.5 Web Configurator Layout
The Status screen is the first screen that displays when you access the Web Configurator.
GS2220 Series User’s Guide
70
Chapter 4 Web Configurator
This guide uses GS2220-10HP and GS2220-50HP screens as examples. The screens may very slightly for
different models.
The following figure shows the navigating components of a Web Configurator screen.
A
– Click the menu items to open sub-menu links, and then click on a sub-menu link to open the screen
in the main window.
B, C, D, E, F
– These are quick links which allow you to perform certain tasks no matter which screen you
are currently working in.
B
– Click this link to update the information in the screen you are viewing currently.
C– Click this link to save your configuration into the Switch’s non-volatile memory. Non-volatile memory
is the configuration of your Switch that stays the same even if the Switch’s power is turned off.
D
– Click this link to go to the status page of the Switch.
E
– Click this link to log out of the Web Configurator.
F– Click this link to display web help pages. The help pages provide descriptions for all of the
configuration screens.
G
– Click this link to go to the Zyxel Community Biz Forum.
H
– Click this icon to switch between the Web Configurator’s Standard or Networked AV mode.
I – Click this link to go to the NCC (Nebula Control Center) portal website.
J
– Click this link to go to the Neighbor screen where you can see and manage neighbor devices
learned by the Switch.
In the navigation panel, click a main link to reveal a list of sub-menu links.
The following table describes the links in the navigation panel.
Table 17 Navigation Panel Links (Standard Mode)
LINKDESCRIPTION
Basic Setting
System InfoThis link takes you to a screen that displays general system information.
General SetupThis link takes you to a screen where you can configure general identification information
about the Switch.
Switch SetupThis link takes you to a screen where you can set up global Switch parameters such as VLAN
type and priority queues.
IP SetupThis link takes you to a screen where you can configure the IP address and subnet mask
Port SetupThis link takes you to a screen where you can configure settings for individual Switch ports.
PoE SetupFor PoE models.
Interface SetupThis link takes you to a screen where you can configure settings for individual interface type
IPv6This link takes you to a screen where you can view IPv6 status and configure IPv6 settings.
(necessary for Switch management) and set up to 64 IP routing domains.
This link takes you to a screen where you can set priorities, PoE power-up settings and schedule
so that the Switch is able to reserve and allocate power to certain PDs.
VLANThis link takes you to screens where you can configure port-based or 802.1Q VLAN (depending
Static MAC
Forwarding
Static Multicast
Forwarding
FilteringThis link takes you to a screen to set up filtering rules.
Spanning Tree
Protocol
Bandwidth
Control
Broadcast Storm
Control
MirroringThis link takes you to screens where you can copy traffic from one port or ports to another port
Link AggregationThis link takes you to screens where you can logically aggregate physical links to form one
Port
Authentication
Port SecurityThis link takes you to a screen where you can activate MAC address learning and set the
Time RangeThis link takes you to a screen where you can define different schedules.
ClassifierThis link takes you to screens where you can configure the Switch to group packets based on
Policy RuleThis link takes you to a screen where you can configure the Switch to perform special treatment
Queuing Method This link takes you to a screen where you can configure queuing with associated queue
MulticastThis link takes you to screens where you can configure various multicast features and IGMP
AAAThis link takes you to a screen where you can configure authentication, authorization and
IP Source GuardThis link takes you to screens where you can configure filtering of unauthorized DHCP and ARP
Loop GuardThis link takes you to a screen where you can configure protection against network loops that
VLAN MappingThis link takes you to screens where you can configure VLAN mapping settings on the Switch.
Layer 2 Protocol
Tunneling
PPPoEThis link takes you to screens where you can configure how the Switch gives a PPPoE
This screen displays a link to a screen where you can enable or disable the Nebula Control Center Discovery feature. If it is enabled, you can have the Switch search for the NCC (Nebula
Control Center). Another link takes you to the Nebula Switch Registration screen which has a
QR code containing the Switch’s serial number and MAC address for handy registration of the
Switch at NCC.
on what you configured in the Switch Setup menu). You can also configure a voice VLAN, a
MAC based VLAN or a vendor ID based VLAN in these screens.
This link takes you to a screen where you can configure static MAC addresses for a port. These
static MAC addresses do not age out.
This link takes you to a screen where you can configure static multicast MAC addresses for
ports. These static multicast MAC addresses do not age out.
This link takes you to screens where you can configure the RSTP to prevent network loops.
This link takes you to a screen where you can configure bandwidth limits on the Switch.
This link takes you to a screen to set up broadcast filters.
in order that you can examine the traffic from the first port without interference.
logical, higher-bandwidth link.
This link takes you to a screen where you can configure IEEE 802.1x port authentication as well
as MAC authentication for clients communicating through the Switch.
maximum number of MAC addresses to learn on a port.
the specified criteria.
on the grouped packets.
weights for each port.
snooping.
accounting services through external servers. The external servers should be RADIUS (Remote
Authentication Dial-In User Service).
packets in your network.
occur on the edge of your network.
This link takes you to a screen where you can configure L2PT (Layer 2 Protocol Tunneling)
settings on the Switch.
termination server additional subscriber information that the server can use to identify and
authenticate a PPPoE client.
ErrdisableThis link takes you to screens where you can view errdisable status and configure errdisable
settings in CPU protection, errdisable detect, and errdisable recovery.
Vlan IsolationThis link takes you to a screen where you can block traffic between ports in a VLAN on the
Switch.
Green EthernetThis link takes you to a screen where you can configure green Ethernet settings in EEE, auto
LLDPThis link takes you to screens where you can configure LLDP settings.
Anti-ArpscanThis link takes you to screens where you can enable anti-arpscan on the Switch and ports, and
BPDU GuardThis link takes you to screens where you can enable BPDU guard on the Switch and ports, and
OAMThis link takes you to screens where you can enable Ethernet OAM on the Switch, view the
ZULDThis link takes you to screens where you can enable ZULD on a port and configure related
Auto PD
Recovery
IP Application
Static RoutingThis link takes you to a screen where you can configure static routes. A static route defines how
DiffServThis link takes you to screens where you can enable DiffServ, configure marking rules and set
DHCPThis link takes you to screens where you can configure the DHCP settings.
ARP SetupThis link takes you to screens where you can configure the ARP learning settings for each port.
Management
MaintenanceThis link takes you to screens where you can perform firmware and configuration file
Access ControlThis link takes you to screens where you can change the system login password and configure
DiagnosticThis link takes you to a screen where you can ping IP addresses, run traceroute, test ports and
System LogThis link takes you to a screen where you can view system logs.
Syslog SetupThis link takes you to a screen where you can setup system logs and a system log server.
Cluster
Management
MAC TableThis link takes you to a screen where you can view the MAC addresses (and types) of devices
ARP TableThis link takes you to a screen where you can view the MAC addresses – IP address resolution
Path MTU TableThis link takes you to a screen where you can view the path MTU aging time, index, destination
Configure CloneThis link takes you to a screen where you can copy attributes of one port to other ports.
IPv6 Neighbor
Table
Port StatusThis link takes you to a screen where you can view the port statistics.
power down, and short reach for each port.
view the port state. You can also create trusted hosts, view blocked hosts and unblock them.
view the port state.
configuration of ports on which Ethernet OAM is enabled and perform remote-loopback tests.
settings.
For PoE models.
This link takes you to a screen where you can enable and configure Auto PD Recovery on the
Switch.
the Switch should forward traffic by configuring the TCP/IP parameters manually.
DSCP-to-IEEE802.1p mappings.
maintenance as well as reboot the system.
SNMP and remote management.
show the Switch’s location.
This link takes you to screens where you can configure clustering management and view its
status.
attached to what ports and VLAN IDs.
table.
address, MTU, and expire settings.
This link takes you to a screen where you can view the IPv6 neighbor table which includes
index, interface, neighbor address, MAC address, status and type.
GS2220 Series User’s Guide
74
Table 18 Navigation Panel Sub-links Overview (Networked AV Mode)
Table 19 Navigation Panel Links (Networked AV Mode)
LINKDESCRIPTION
SummaryThis screen displays the Switch’s front panel port status, connected ports, used power, Nebula
Cloud Control status, and Networked AV status.
SYSTEM
System
Information
General SetupThis link takes you to a screen where you can configure general identification information
Cloud
Management
PORT
PoE SetupFor PoE models.
Port SetupThis screen allows you to configure settings for individual Switch ports.
SWITCHING
Broadcast Storm
Control
Link AggregationThis link takes you to screens where you can logically aggregate physical links to form one
VLANThis link takes you to screens where you can view and search all static VLAN groups, view
MulticastThis link takes you to screens where you can view multicast group information, configure various
NETWORKING
This link takes you to a screen that displays general system information.
about the Switch.
This screen displays a link to a screen where you can enable or disable the Nebula Control
Center Discovery feature. If it is enabled, you can have the Switch search for the NCC (Nebula
Control Center). Another link takes you to the Nebula Switch Registration screen which has a
QR code containing the Switch’s serial number and MAC address for handy registration of the
Switch at NCC.
This screen allows you to set priorities, PoE power-up settings and schedule so that the Switch is
able to reserve and allocate power to certain PDs.
This link takes you to a screen to set up broadcast filters.
logical, higher-bandwidth link.
detailed port settings and status of the static VLAN group, configure a static VLAN for the
Switch, and configure the static VLAN (IEEE 802.1Q) settings on a port.
multicast features like IGMP snooping and filtering profile, and create multicast VLANs.
GS2220 Series User’s Guide
75
Chapter 4 Web Configurator
Table 19 Navigation Panel Links (Networked AV Mode) (continued)
LINKDESCRIPTION
IP SetupThis screen allows you to configure the IP address and subnet mask (necessary for Switch
management) and set up to 64 IP routing domains.
SECURITY
Access Control
LoginsThis link takes you to a screen where you can change the system login password, as well as
configure up to four login details.
Remote
Management
SNMPThis link takes you to screens where you can specify the SNMP version and community
Service
Access
Control
Maintenance
Backup
Configuration
Firmware
Upgrade
Reboot
System
Restore
Configuration
Save
Configuration
Tech-SupportThis link takes you to a screen where you can download related log reports for issue analysis.
Port MirrorThis link takes you to screens where you can copy traffic from one port or ports to another port
This link takes you to a screen where you can specify a group of one or more “trusted
computers” from which an administrator may use a service to manage the Switch.
(password) values, configure where to send SNMP traps from the Switch, enable loopguard/
errdisable/poe/linkup/linkdown/lldp/transceiver-ddm/storm-control on the Switch, specify the
types of SNMP traps that should be sent to each SNMP manager, and add/edit user
information.
This link takes you to a screen where you can decide what services you may use to access the
Switch.
This link takes you to a screen where you can save your Switch’s configurations (settings) for
later use.
This link takes you to a screen to upload firmware to your Switch.
This link takes you to a screen to reboot the Switch without turning the power off.
This link takes you to a screen where you can upload a stored device configuration file.
This link takes you to a screen where you can save the current configuration (settings) to a
specific configuration file on the Switch.
Log reports include CPU history and utilization, crash and memory.
in order that you can examine the traffic from the first port without interference.
4.5.1 Change Your Password
After you log in for the first time, it is recommended you change the default administrator password.
Click Management > Access Control > Logins to display the next screen.
GS2220 Series User’s Guide
76
Chapter 4 Web Configurator
Figure 54 Change Administrator Login Password
4.6 Save Your Configuration
When you are done modifying the settings in a screen, click Apply to save your changes back to the
run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off.
Click the Save link in the upper right of the Web Configurator to save your configuration to non-volatile
memory. Non-volatile memory refers to the Switch’s storage that remains even if the Switch’s power is
turned off.
Note: Use the Save link when you are done with a configuration session.
4.7 Switch Lockout
You could block yourself (and all others) from using in-band-management (managing through the data
ports) if you do one of the following:
1Delete the management VLAN (default is VLAN 1).
2Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management port of
the Switch.
3Filter all traffic to the CPU port.
4Disable all ports.
5Misconfigure the text configuration file.
6Forget the password and/or IP address.
7Prevent all services from accessing the Switch.
GS2220 Series User’s Guide
77
8Change a service port number but forget it.
9You forgot to log out of the Switch from a computer before logging in again on another computer.
Note: Be careful not to lock yourself and others out of the Switch.
4.8 Reset the Switch
If you lock yourself (and others) from the Switch or forget the administrator password, you will need to
reload the factory-default configuration file or reset the Switch back to the factory defaults.
4.8.1 Restore Button
Press the RESTORE button for more than 7 seconds to have the Switch automatically reboot and restore
the factory default file. See Section 3.3 on page 48 for more information about the LED behavior. See
also Table 3 on page 40 to see how to use the RESTORE button to restore the factory default file.
4.8.2 Restore Custom Default
Chapter 4 Web Configurator
Press the RESTORE button for 3 to 7 seconds to have the Switch automatically reboot and restore the lastsaved custom default file. See Section 3.3 on page 48 for more information about the LED behavior.
4.8.3 Reboot the Switch
Press the RESET button to reboot the Switch without turning the power off. See Section 3.3 on page 48 for
more information about the LED behavior.
4.9 Log Out of the Web Configurator
Click Logout in a screen to exit the Web Configurator. You have to log in with your password again after
you log out. This is recommended after you finish a management session for security reasons.
Figure 55 Web Configurator: Logout Screen
4.10 Help
The Web Configurator’s online help has descriptions of individual screens and some supplementary
information.
GS2220 Series User’s Guide
78
Click the Help link from a Web Configurator screen to view an online help description of that screen.
GS2220 Series User’s Guide
79
5.1 Overview
This chapter shows how to set up the Switch for an example network.
The following lists the configuration steps for the initial setup:
• Create a VLAN
• Set Port VID
• Configure Switch Management IP Address
Chapter 5 Initial Setup Example
CHAPTER 5
Initial Setup Example
5.1.1 Create a VLAN
VLANs confine broadcast frames to the VLAN group in which the ports belongs. You can do this with
port-based VLAN or tagged static VLAN with fixed port members.
In this example, you want to configure port 1 as a member of VLAN 2.
Figure 56 Initial Setup Network Example: VLAN
1Click Advanced Application > VLAN > VLAN Configuration in the navigation panel and click the Static
VLAN Setup link.
GS2220 Series User’s Guide
80
Chapter 5 Initial Setup Example
2In the Static VLAN screen, select ACTIVE, enter a descriptive name in the Name field and enter 2 in the
VLAN Group ID field for the VLAN2 network.
Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the
same VLAN ID.
3Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to configure port 1 to be a
permanent member of the VLAN only.
4To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, clear
the TX Tagging check box to set the Switch to remove VLAN tags before sending.
GS2220 Series User’s Guide
81
5Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the
Switch’s power is turned off.
5.1.2 Set Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that the frames are
forwarded to the VLAN group that the tag defines.
In the example network, configure 2 as the port VID on port 1 so that any untagged frames received on
that port get sent to VLAN 2.
Figure 57 Initial Setup Network Example: Port VID
Chapter 5 Initial Setup Example
1Click Advanced Application > VLAN > VLAN Configuration in the navigation panel. Then click the VLAN
Port Setup link.
GS2220 Series User’s Guide
82
Chapter 5 Initial Setup Example
2Enter 2 in the PVID field for port 1 and click Apply to save your changes back to the run-time memory.
Settings in the run-time memory are lost when the Switch’s power is turned off.
5.1.3 Configure Switch Management IP Address
If the Switch fails to obtain an IP address from a DHCP server, the Switch will use 192.168.1.1 as the
management IP address. You can configure another IP address in a different subnet for management
purposes. The following figure shows an example.
Figure 58 Initial Setup Example: Management IP Address
1Connect your computer to any Ethernet port on the Switch. Make sure your computer is in the same
subnet as the Switch.
2Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the
Web Configurator. See Section 4.2 on page 51 for more information.
3Click Basic Setting > IP Setup > IP Configuration in the navigation panel.
GS2220 Series User’s Guide
83
Chapter 5 Initial Setup Example
4Configure the related fields in the IP Setup screen.
5For the VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask.
6In the VID field, enter the ID of the VLAN group to which you want this management IP address to
belong. This is the same as the VLAN ID you configure in the Static VLAN screen.
7Click Add to save your changes back to the run-time memory. Settings in the run-time memory are lost
when the Switch’s power is turned off.
GS2220 Series User’s Guide
84
6.1 Overview
This chapter provides some examples of using the Web Configurator to set up and use the Switch. The
tutorials include:
• How to Use DHCPv4 Snooping on the Switch
• How to Use DHCPv4 Relay on the Switch
• How to Use Auto Configuration through a DHCP Server on the Switch
Chapter 6 Tutorials
CHAPTER 6
Tutorials
6.2 How to Use DHCPv4 Snooping on the Switch
You only want DHCP server A connected to port 4 to assign IP addresses to all devices in VLAN network
(V). Create a VLAN containing ports 4, 5 and 6. Connect a computer M to the Switch for management.
The settings in this tutorial are as the following.
Table 20 Tutorial: Settings in this Tutorial
HOSTPORT CONNECTEDVLANPVIDDHCP SNOOPING PORT TRUSTED
DHCP Server (A)41 and 100100Yes
DHCP Client (B)51 and 100100No
DHCP Client (C)61 and 100100No
1Access the Switch through http://192.168.1.1 by default. Log into the Switch by entering the user name
(default: admin) and password (default: 1234).
GS2220 Series User’s Guide
85
2Go to Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup, and create a VLAN with
ID of 100. Add ports 4, 5 and 6 in the VLAN by selecting Fixed in the Control field as shown.
De-select Tx Tagging because you do not want outgoing traffic to contain this VLAN tag.
Click Add.
Figure 60 Tutorial: Create a VLAN and Add Ports to It
3Go to Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup, and set the PVID of the
ports 4, 5 and 6 to 100. This tags untagged incoming frames on ports 4, 5 and 6 with the tag 100.
GS2220 Series User’s Guide
86
Chapter 6 Tutorials
Figure 61 Tutorial: Tag Untagged Frames
4Go to Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping >
Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply.
Figure 62 Tutorial: Specify DHCP VLAN
5Click the Port link at the top right.
6The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Tr usted state field for port
4 because the DHCP server is connected to port 4. Keep ports 5 and 6 Untrusted because they are
connected to DHCP clients. Click Apply.
GS2220 Series User’s Guide
87
Chapter 6 Tutorials
Figure 63 Tutorial: Set the DHCP Server Port to Trusted
7Go to Advanced Application > IP Source Guard > IPv4 Source Guard Setup > DHCP Snooping >
Configure > VLAN, show VLAN 100 by entering 100 in the VLAN Search by VID field and click Search.
Then select Yes in the Enabled field of the VLAN 100 entry shown at the bottom section of the screen.
Click Apply.
If you want to add more information in the DHCP request packets such as source VLAN ID or system
name, you can also select an Option82 Profile in the entry.
Figure 64 Tutorial: Enable DHCP Snooping on this VLAN
8Click Save at the top right of the Web Configurator to save the configuration permanently.
9Connect your DHCP server to port 4 and a computer (as DHCP client) to either port 5 or 6. The computer
should be able to get an IP address from the DHCP server. If you put the DHCP server on port 5 or 6, the
computer will NOT be able to get an IP address.
10 To check if DHCP snooping works, go to Advanced Application > IP Source Guard > IPv4 Source Guard
Setup, you should see an IP assignment with the type DHCP-Snooping as shown.
GS2220 Series User’s Guide
88
Chapter 6 Tutorials
Figure 65 Tutorial: Check the Binding If DHCP Snooping Works
You can also telnet. Use the command “show dhcp snooping binding” to see the DHCP snooping
binding table as shown next.
sysname# show dhcp snooping binding
MacAddress IpAddress Lease Type VLAN Port
----------------- --------------- ------------ ------------- ---- ---- 00:02:00:00:00:1c 10.10.1.16 6d23h59m20s dhcp-snooping 100 6
Total number of bindings: 1
6.3 How to Use DHCPv4 Relay on the Switch
This tutorial describes how to configure your Switch to forward DHCP client requests to a specific DHCP
server. The DHCP server can then assign a specific IP address based on the information in the DHCP
requests.
6.3.1 DHCP Relay Tutorial Introduction
In this example, you have configured your DHCP server (192.168.2.3) and want to have it assign a
specific IP address (say 172.16.1.18) to DHCP client A based on the system name, VLAN ID and port
number in the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102.
Figure 66 Tutorial: DHCP Relay Scenario
6.3.2 Create a VLAN
Follow the steps below to configure port 2 as a member of VLAN 102.
1Access the Web Configurator through the Switch’s management port.
2Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to
4In the Static VLAN screen, select ACTIVE, enter a descriptive name (VLAN 102 for example) in the Name
field and enter 102 in the VLAN Group ID field.
5Select Fixed to configure port 2 to be a permanent member of this VLAN.
6Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending.
7Click Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the
Switch’s power is turned off.
GS2220 Series User’s Guide
90
Chapter 6 Tutorials
Figure 68 Tutorial: Create a Static VLAN
8Click the VLAN Configuration link in the Static VLAN Setup screen and then the VLAN Port Setup link in the
VLAN Configuration screen.
Figure 69 Tutorial: Click the VLAN Port Setting Link
9Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so
that the frames are forwarded to the VLAN group that the tag defines.
10 Click Apply to save your changes back to the run-time memory.
GS2220 Series User’s Guide
91
Figure 70 Tutorial: Add Tag for Frames Received on Port 2
11 Click the Save link in the upper right of the Web Configurator to save your configuration permanently.
6.3.3 Configure DHCPv4 Relay
Follow the steps below to enable DHCP relay on the Switch and allow the Switch to add relay agent
information (such as the VLAN ID) to DHCP requests.
1Click IP Application > DHCP > DHCPv4 and then the Global link to open the DHCP Relay screen.
2Select the Active check box.
3Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote DHCP Server 1 field.
4Select default1 or default2 in the Option 82 Profile field.
5Click Apply to save your changes back to the run-time memory.
Figure 71 Tutorial: Set DHCP Server and Relay Information
6Click the Save link in the upper right of the Web Configurator to save your configuration permanently.
7The DHCP server can then assign a specific IP address based on the DHCP request.
6.3.4 Troubleshooting
Check client A’s IP address. If it did not receive the IP address 172.16.1.18, make sure:
GS2220 Series User’s Guide
92
Chapter 6 Tutorials
1Client A is connected to the Switch’s port 2 in VLAN 102.
2You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP
server and the Switch.
3You clicked the Save link on the Switch to have your settings take effect.
6.4 How to Use Auto Configuration through a DHCP Server
on the Switch
Follow the steps below to set up configurations on a DHCP server, TFTP server, and the Switch, so you
can load an auto configuration file automatically from a TFTP server when you reboot the Switch.
Note that you can set up a DHCP server and TFTP server either on the same device or different devices.
Also, make sure the Switch can communicate with the TFTP server.
Note: Steps order could vary according to different programs you use.
Note: You need to set up configurations on a DHCP server and TFTP server first to use auto
configuration.
Setting up a DHCP Server
1Set up a dynamic IP addresses pool so the DHCP server will assign an IP address to the Switch in that
range.
2Set up a TFTP server IP address, so the Switch will know where to load the auto configuration file.
3Set up the filename of the auto configuration file, so the Switch will know which file to load when you
reboot the Switch.
• Enter the filename of an auto configuration file. The Switch will load this auto configuration file
when rebooting with DHCP option 60 disabled.
• If you want to load the auto configuration file with DHCP option 60 enabled and a Vendor Class
Identifier assigned when you reboot the Switch, follow the instruction below. Otherwise, skip this
step.
Enter the filename of an auto configuration file. Set up a Vendor Class Identifier. To have the
Switch load this auto configuration file, two conditions listed above must be met. Please refer to
the following steps to see how to set up a Vendor Class Identifier on the Switch.
Setting up a TFTP Server
1Select a directory on the TFTP server.
2Put the configuration files in that directory.
GS2220 Series User’s Guide
93
Chapter 6 Tutorials
Setting up the Switch
1Open the Web Configurator. Go to the Management > Maintenance screen, and click the Click Here
button next to the Auto Configuration field.
Figure 72 Tutorial: Auto Configuration Screen
2Select the check box in the Active field to enable auto configuration. Select DHCP in the Mode field and
click Apply to save your changes.
Figure 73 Tutorial: Enable Auto Configuration
3You need to save the current configuration in a configuration file, so the Switch will load the auto
configuration file from the TFTP server automatically when rebooting. Go to the Management >
Maintenance screen. Click the Config 1, Config 2, or Custom Default button next to the Save
Configuration field.
4Click the same button next to Reboot System field to reboot the Switch, and load the auto configuration
setting as configured before. For example, if you save the auto configuration setting to Config 1, you
need to click the Config 1 button next to the Reboot System field.
GS2220 Series User’s Guide
94
Chapter 6 Tutorials
Figure 74 Tutorial: Save Configuration and Reboot System
5Go to the Management > System Log screen to see if auto configuration was performed successfully.
Figure 75 Tutorial: Log
6Check the screens to see if it is the configuration file you want to load. If it is not, go through the steps
above to check your configurations. If it is, click Save at the top right corner of the Web Configurator to
save the configuration permanently.
Figure 76 Tutorial: Save
GS2220 Series User’s Guide
95
7.1 Overview
This chapter describes the screens for System Status and Neighbor Details.
7.1.1 What You Can Do
• Use the Status screen (Section 7.2 on page 96) to see the Switch’s general device information, system
status, and IP addresses. You can also display other status screens for more information.
• Use the Neighbor screen (Section 7.2.1 on page 98) to view a summary and manage Switch’s
neighbor devices.
• Use the Neighbor Detail screen (Section 7.2.2 on page 100) to view more detailed information on the
Switch’s neighbor devices.
Chapter 7 Status
CHAPTER 7
Status
7.2 Status
The Status screen displays when you log into the Switch or click Status at the top right of the Web
Configurator. The Status screen displays general device information, system status, and its IP addresses.
GS2220 Series User’s Guide
96
Figure 77 Status
Chapter 7 Status
The following table describes the labels in this screen.
Table 21 Status
LABELDESCRIPTION
Device Information
Device TypeThis field displays the model name of this Switch.
System NameThis field displays the name used to identify the Switch on any network.
Boot VersionThis field displays the version number and date of the boot module that is currently on the
System Location This field displays the geographic location of your Switch. You can change the setting in the
Firmware
Version
System TimeThis field displays the current date and time in the UAG. The format is mm-dd-yyyy hh:mm:ss.
Hardware
Version
System Up TimeThis field displays how long the Switch has been running since it last restarted or was turned on.
MAC AddressThis field displays the MAC addresses of the Switch.
Login
Timeout(mins)
Serial NumberThis field displays the serial number of this Switch. The serial number is used for device tracking
Registration
MAC Address
Switch.
Basic Setting > General Setup screen.
This field displays the version number and date of the firmware the Switch is currently running.
This field displays the hardware version number of the Switch. The integer is the generation
number of the Switch series, and the decimal is the version of the hardware change. For
example, V1.0 is a hardware version for the Switch where 1 identifies the first generation of the
Switch series, and .0 is the first hardware change.
This field displays how many minutes a management session can be left idle before the session
times out. After it times out you have to log in with your password again.
and control.
This field displays the MAC address of the Switch that you must use to register at myZyxel.com or
the NCC (Nebula Control Center).
GS2220 Series User’s Guide
97
Chapter 7 Status
Table 21 Status (continued)
LABELDESCRIPTION
Hybrid ModeThis field displays whether the Switch is in Standalone mode or Cloud mode. In Standalone mode
you can see a link to a QR code to register the Switch to use NCC (Nebula Control Center).
Cloud Control
Status
PoE UsageThis field displays the amount of power the Switch is currently supplying to the connected PoE-
DetailClick this link to go to the Basic Setting > System Info screen to check other detailed information,
IP Address Information
IPv4 AddressThis field displays the current IPv4 address of the Switch.
Subnet MaskThis field displays the subnet mask of the Switch.
Default
Gateway
IP SetupClick the link to go to the Basic Setting > IP Setup screen.
IPV6 Global
Unicast Address
IPV6 Link-Local
Address
IPv6
configuration
Device Status
and Quick
Configuration
Quick LinksThis section provides the shortcut link to a specific configuration screen.
This field displays the registration and connection status between the Switch and the NCC
(Nebula Control Center).
In Standalone mode, the status will display Disconnected or Unregistered. In cloud mode the
status will display Connected or Disconnected.
Connected – The Switch is registered with and connected to the NCC.
Disconnected – The Switch is not connected to the NCC.
Unregistered – The Switch is not registered with the NCC.
enabled devices and the total power the Switch can provide to the connected PDs. It also
shows the percentage of PoE power usage.
When PoE usage reaches 100%, the Switch will shut down PDs one-by-one according to the PD
priority which you configured in Basic Setting > PoE Setup.
such as system resource usage and the Switch temperature, fan speeds or voltage.
This field displays the IP address of the default gateway of the Switch.
This field displays the IPv6 global unicast address of the Switch.
This field displays the IPv6 link-local address of the Switch.
Click the link to go to the Basic Setting > IPv6 screen.
This section shows whether a feature is enabled or not on the Switch. You can click a feature’s
Setting link to go to the configuration screen for the feature.
Hover your cursor over a red exclamation mark to display information about the feature.
7.2.1 Neighbor Screen
The Neighbor screen allows you to view a summary and manage the Switch’s neighboring devices. It
uses Layer Link Discovery Protocol (LLDP) to discover all neighbor devices connected to the Switch
including non-Zyxel devices. You can use this screen to perform tasks on the neighboring devices like
login, power cycle (turn the power off and then back on again), and reset to factory default settings.
This screen shows the neighboring device first recognized on an Ethernet port of the Switch. Device
information is displayed in gray when the neighboring device is offline.
Click Status > Neighbor to see the following screen.
GS2220 Series User’s Guide
98
Chapter 7 Status
Figure 78 Status > Neighbor
The following table describes the fields in the above screen.
Table 22 Status > Neighbor
LABELDESCRIPTION
PortThis shows the port of the Switch, on which the neighboring device is discovered.
Port NameThis shows the port description of the Switch.
PD HealthThis shows the status of auto PD recovery on this port.
• Red: The Switch failed to get information from the PD connected to the port using LLDP,
or the connected PD did not respond to the Switch’s ping requests.
• Yellow: The Switch is restarting the connected PD by turning the power off and turning it
on again.
• Green: The Switch successfully discovered the connected PD using LLDP or ping.
• –: Auto PD Recovery is not enabled on the Switch and the port, or the Switch does not
supply power to the connected PD.
Note: The status will NOT be updated instantaneously after enabling or disabling
the Active switch in the Advanced Application > Auto PD Recovery screen.
It will wait until the configured Resume Polling Interval (sec) has lapsed.
LinkThis shows the speed (either 10M for 10 Mbps, 100M for 100 Mbps, 1G for 1 Gbps, or 10G for
PoE Draw (W)This shows the consumption that the neighboring device connected to this port draws from
System NameThis shows the system name of the neighbor device.
IPv4This shows the IPv4 address of the neighbor device. The IPv4 address is a hyper link that you
IPv6This shows the IPv6 address of the neighbor device. The IPv6 address is a hyper link that you
PWR CycleClick the Cycle button to turn OFF the power of the neighbor device and turn it back ON
10 Gbps) and the duplex (F for full duplex or H for half). This field displays Down if the port is
not connected to any device.
the Switch. This allows you to plan and use within the power budget of the Switch.
can click to log into and manage the neighbor device through its Web Configurator.
can click to log into and manage the neighbor device through its Web Configurator.
again. A count down button (from 5 to 0) starts.
Note: The Switch must support power sourcing (PSE) or the network device is a
powered device (PD).
GS2220 Series User’s Guide
99
Table 22 Status > Neighbor (continued)
LABELDESCRIPTION
Reset to DefaultClick the Reset button to reset the neighboring device to its factory default settings. A
FlushClick the Flush button to remove information about neighbors learned on the selected
7.2.2 Neighbor Detail
Use this screen to view detailed information about the neighboring devices. Device information is
displayed in gray when the neighboring device is currently offline.
Chapter 7 Status
warning message “Are you sure you want to load factory default?” appears prompting you
to confirm the action. After confirming the action a count down button (from 5 to 0) starts.
Note:
• The Switch must support power sourcing (PSE) or the network device is a powered
device (PD).
• If multiple neighbor devices use the same port, the Reset button is not available.
• You can only reset Zyxel powered devices that support the ZON utility.
Select an entry’s check box to select a specific port. Otherwise, select the check box in the
table heading row to select all ports.
ports.
Up to 10 neighboring device records per Ethernet port can be retained in this screen even when the
devices are offline. When the maximum number of neighboring device records per Ethernet port is
reached, new device records automatically overwrite existing offline device records, starting with the
oldest existing offline device record first.
Click the Neighbor Detail link in the Status > Neighbor screen to see the following screen.
Figure 79 Status > Neighbor > Neighbor Detail
GS2220 Series User’s Guide
100
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.