The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval
system, translated into any language, or transmitted in any form or by any means, electronic, mechanical,
magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL
Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or software described
herein. Neither does it convey any license under its patent rights nor the patents rights of others. ZyXEL further
reserves the right to make changes in any products described herein without notice. This publication is subject to
change without notice.
Trademarks
Trademarks mentioned in this publication are used for identification purposes only and may be properties of their
respective owners.
ii Copyright
GS-3012F User’s Guide
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or
workmanship for a period of up to two (2) years from the date of purchase. During the warranty period and upon
proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials,
ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either
parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper
operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of
equal value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product is
modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is
in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for
a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any
kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization
number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when
shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or
replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced
products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you
specific legal rights, and you may also have other rights that vary from country to country.
ZyXEL Limited Warranty iii
GS-3012F User’s Guide
Interference Statements and Warnings
FCC Interference Statement
This switch complies with Part 15 of the FCC rules. Operation is subject to the following two conditions:
(1) This switch may not cause harmful interference.
(2) This switch must accept any interference received, including interference that may cause undesired operations.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class A digital switch, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not
installed and used in accordance with the instruction manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause harmful interference in which
case the user will be required to correct the interference at his own expense.
CE Mark Warning:
This is a class A product. In a domestic environment this product may cause radio interference in which case the
user may be required to take adequate measures.
Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:
Certifications
Go to www.zyxel.com
Select your product from the drop-down list box on the ZyXEL home page to go to that product's page.
Select the certification you wish to view from this page.
Registration
Register your product online for free future product updates and information at www.zyxel.com for global
products, or at www.us.zyxel.com
for North American products.
iv Interference Statements and Warnings
GS-3012F User’s Guide
Customer Support
If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications
Corporation offices worldwide, in one of the following ways:
Contacting Customer Support
When you contact your customer support representative, have the following information ready:
♦ Product model and serial number.
♦ Firmware version information.
♦ Warranty information.
♦ Date you received your product.
♦ Brief description of the problem and the steps you took to solve it.
ZyXEL Limited Warranty........................................................................................................................................... iii
Interference Statements and Warnings....................................................................................................................iv
Customer Support ....................................................................................................................................................vi
List of Figures ......................................................................................................................................................... xiii
List of Tables.......................................................................................................................................................... xvii
Part I.............................................................................................................................................................................. I
Chapter 1 Getting to Know the GS-3012F ..................................................................................................... 1-1
1.2 Features ................................................................................................................................................ 1-1
Part II............................................................................................................................................................................ II
3.2 Front Panel ............................................................................................................................................ 3-1
3.4 Front Panel LEDs ..................................................................................................................................3-5
3.5 Configuring the GS-3012F .................................................................................................................... 3-7
Part III.......................................................................................................................................................................... III
Chapter 4 Introducing the Web Configurator ................................................................................................. 4-1
4.2 System Login......................................................................................................................................... 4-1
4.3 Status Screen ........................................................................................................................................ 4-1
4.5 Resetting the Switch.............................................................................................................................. 4-6
Chapter 5 System Status and Port Details..................................................................................................... 5-1
5.1 About System Statistics and Information .............................................................................................. 5-1
5.2 Port Status Summary ............................................................................................................................ 5-1
6.1 Introducing the Basic Setting Screens................................................................................................... 6-1
6.2 System Information................................................................................................................................ 6-1
6.3 General Setup........................................................................................................................................ 6-3
6.4 Introduction to VLANs............................................................................................................................ 6-5
6.7 IP Setup .................................................................................................................................................6-8
6.8 Port Setup............................................................................................................................................6-10
Part IV .........................................................................................................................................................................IV
9.1 Introduction to Filtering ..........................................................................................................................9-1
9.2 Configuring a Filtering Rule ...................................................................................................................9-1
9.3 Viewing and Editing Filter Rules............................................................................................................ 9-2
Chapter 10 Spanning Tree Protocol ...............................................................................................................10-1
10.1 Introduction to Spanning Tree Protocol (STP) ....................................................................................10-1
Chapter 11 Bandwidth Control ....................................................................................................................... 11-1
11.1 Introduction to Bandwidth Control .......................................................................................................11-1
Part V ...........................................................................................................................................................................V
Chapter 12 Broadcast Storm Control .............................................................................................................12-1
12.1 Introducing Broadcast Storm Control ..................................................................................................12-1
13.1 Introduction to Port Mirroring............................................................................................................... 13-1
13.2 Port Mirroring Configuration ................................................................................................................ 13-1
Chapter 14 Link Aggregation.......................................................................................................................... 14-1
14.1 Introduction to Link Aggregation.......................................................................................................... 14-1
14.2 Link Aggregation Protocol Status ........................................................................................................ 14-2
14.3 Link Aggregation Setup ....................................................................................................................... 14-3
Chapter 15 Port Authentication ...................................................................................................................... 15-1
15.1 Introduction to Authentication.............................................................................................................. 15-1
15.2 Configuring Port Authentication........................................................................................................... 15-1
Chapter 16 Port Security ................................................................................................................................ 16-1
16.1 About Port Security ............................................................................................................................. 16-1
16.2 Port Security Setup ............................................................................................................................. 16-1
Chapter 17 Access Control ............................................................................................................................ 17-1
17.1 About Access Control.......................................................................................................................... 17-1
17.2 Access Control Overview .................................................................................................................... 17-1
17.3 About SNMP........................................................................................................................................ 17-2
17.5 How SSH works................................................................................................................................... 17-6
17.7 Introduction to HTTPS......................................................................................................................... 17-7
17.8 Service Access Control ..................................................................................................................... 17-10
20.1 About Policy Rules ..............................................................................................................................20-1
20.3 Viewing and Editing Policy Configuration............................................................................................ 20-4
20.4 Policy Example ....................................................................................................................................20-5
Part VI .........................................................................................................................................................................VI
23.6 Reboot System ....................................................................................................................................23-3
23.7 Command Line FTP.............................................................................................................................23-3
Chapter 26 MAC Table ...................................................................................................................................26-1
26.1 Introduction to MAC Table...................................................................................................................26-1
26.2 Viewing MAC Table .............................................................................................................................26-2
Part VII .......................................................................................................................................................................VII
Chapter 28 Introducing the Commands .........................................................................................................28-1
28.2 Accessing the CLI................................................................................................................................ 28-1
28.3 The Login Screen ................................................................................................................................ 28-2
29.2 show Commands................................................................................................................................. 29-1
30.8 Show VLAN Setting............................................................................................................................. 30-7
Part VIII .....................................................................................................................................................................VIII
Figure 3-6 GS-3012F Rear Panel: AC Model............................................................................................................ 3-5
Figure 3-7 GS-3012F Rear Panel: DC Model ........................................................................................................... 3-5
Figure 3-8 Front Panel LEDs..................................................................................................................................... 3-6
Figure 4-1 Web Configurator: login ........................................................................................................................... 4-1
Figure 4-2 Web Configurator Home Screen (Status) ................................................................................................ 4-2
Figure 4-3 Web Configurator: Change Password at Login ....................................................................................... 4-6
Figure 4-4 Resetting the Switch: Via Console Port................................................................................................... 4-7
Figure 4-5 Web Configurator: Logout Screen ........................................................................................................... 4-7
Figure 5-2 Status: Port Details ..................................................................................................................................5-3
Figure 6-1 System Info .............................................................................................................................................. 6-1
Figure 6-2 General Setup.......................................................................................................................................... 6-3
Figure 10-1 Spanning Tree Protocol: Status ........................................................................................................... 10-3
Figure 10-2 Spanning Tree Protocol: Configuration................................................................................................ 10-4
Figure 14-1 Aggregation ID .....................................................................................................................................14-2
Figure 14-2 Link Aggregation: Link Aggregation Protocol Status............................................................................14-2
Figure 14-3 Link Aggregation: Configuration........................................................................................................... 14-4
Figure 15-1 RADIUS Server .................................................................................................................................... 15-1
Figure 15-2 Port Authentication............................................................................................................................... 15-1
Figure 15-3 Port Authentication: RADIUS ............................................................................................................... 15-2
Figure 15-4 Port Authentication: 802.1x..................................................................................................................15-3
Figure 16-1 Port Security......................................................................................................................................... 16-1
Figure 17-1 Access Control ..................................................................................................................................... 17-1
Figure 17-2 Console Port Priority ............................................................................................................................17-1
Figure 17-6 SSH Communication Example............................................................................................................. 17-6
Figure 17-7How SSH Works ...................................................................................................................................17-6
Figure 28-3 CLI Help: List of Commands: Example 1............................................................................................. 28-4
Figure 28-4 CLI Help: List of Commands: Example 2............................................................................................. 28-4
Figure 28-5 CLI Help: Detailed Command Information: Example 1........................................................................ 28-4
Figure 28-6 CLI: Help: Detailed Command Information: Example 2....................................................................... 28-4
Figure 28-7 CLI: History Command Example ......................................................................................................... 28-5
Figure 29-1 show system-information Command Example .................................................................................... 29-1
Figure 29-2 show hardware-monitor Command Example ...................................................................................... 29-2
Figure 29-3 show ip Command Example ................................................................................................................ 29-2
Figure 29-4 show logging Command Example ....................................................................................................... 29-3
Figure 29-5 show interface Command Example..................................................................................................... 29-3
Figure 29-6 show mac address-table Command Example ..................................................................................... 29-4
Figure 29-7 ping Command Example ..................................................................................................................... 29-4
Figure 29-8 traceroute Command Example ............................................................................................................ 29-5
Figure 29-9 Enable RSTP Command Example ...................................................................................................... 29-5
Figure 29-14 CLI: Reset to the Factory Default Example ....................................................................................... 29-7
Figure 29-15 no mirror-port Command Example .................................................................................................... 29-8
Figure 29-16 no https timeout Command Example................................................................................................. 29-8
Figure 29-17 no trunk Command Example .............................................................................................................29-9
Figure 29-18 no port-access-authenticator Command Example ............................................................................ 29-9
Figure 29-19 no ssh Command Example.............................................................................................................. 29-10
Figure 29-20 interface Command Example .......................................................................................................... 29-10
Figure 29-21 interface bpdu-control Command Example ..................................................................................... 29-11
Figure 30-1 Tagged VLAN Configuration and Activation Example..........................................................................30-2
Figure 30-2 CPU VLAN Configuration and Activation Example..............................................................................30-2
Figure 30-3 GARP STATUS Command Example....................................................................................................30-3
Figure 30-4 garp status Command Example...........................................................................................................30-4
Figure 30-5 vlan1q port default vid Command Example ......................................................................................... 30-4
Figure 30-6 frame type Command Example ...........................................................................................................30-5
Figure 30-7 no gvrp Command Example ................................................................................................................30-5
Figure 30-8 Modifying Static VLAN Example ..........................................................................................................30-6
Figure 30-9 no vlan Command Example.................................................................................................................30-7
Figure 30-10 show vlan Command Example ..........................................................................................................30-8
xvi Lists of Figures
GS-3012F User’s Guide
List of Tables
Table 3-1 GS-3012F: Front Panel ............................................................................................................................. 3-1
Table 3-2 Front Panel LED Descriptions ................................................................................................................... 3-6
Table 5-2 Status: Port Details.................................................................................................................................... 5-3
Table 6-1 System Info................................................................................................................................................ 6-2
Table 6-2 General Setup ........................................................................................................................................... 6-3
Table 6-4 IP Setup ..................................................................................................................................................... 6-8
Table 6-5 Port Setup................................................................................................................................................ 6-11
Table 7-6 Port Based VLAN Setup .......................................................................................................................... 7-11
Table 8-1 Static MAC Forwarding.............................................................................................................................. 8-1
Table 8-2 Static MAC Forwarding: Summary Table................................................................................................... 8-2
Table 10-2 STP Port States..................................................................................................................................... 10-2
Table 10-3 Spanning Tree Protocol: Status ............................................................................................................. 10-3
Table 10-4 Spanning Tree Protocol: Configuration.................................................................................................. 10-5
Table 11-1 Bandwidth Control ................................................................................................................................. 11-1
Table 12-1 Broadcast Storm Control ....................................................................................................................... 12-2
Table 19-3 Common Ethernet Types and Protocol Number.................................................................................... 19-5
Table 19-4 Common IP Ports ..................................................................................................................................19-5
Table 26-1 MAC Table .............................................................................................................................................26-2
Congratulations on your purchase from the Dimension series of switches.
This preface introduces you to the GS-3012F and discusses the conventions of this User’s Guide. It also provides
information on other related documentation.
About the GS-3012F
There are two GS-3012F models. The GS-3012F DC model requires DC power supply input of -48 VDC to -60
VDC, 1.2A Max. The GS-3012F AC model requires 100~240VAC/1.5A power.
All figures in this guide display the GS-3012F AC model unless specifically noted otherwise.
The GS-3012F Gigabit Ethernet Switch is a managed switch with features ideally suited in an enterprise
environment. It can deliver broadband IP services to:
Public facilities (convention centers, airports, plazas, train stations, etc.)
Enterprises.
It can also be deployed as a mini-POP (point-of-presence) in a building basement delivering 10/100/1000Mbps data
service over Category 5 wiring to each customer.
General Syntax Conventions
This guide shows you how to configure the switch using the web configurator and CLI commands. See the
online HTML help for information on individual web configurator screens.
Mouse action sequences are denoted using a comma. For example, click Start, Settings, Control Panel,
Network means first you click Start, click or move the mouse pointer over Settings, then click or move the mouse pointer over Control Panel and finally click (or double-click) Network.
“Enter” means for you to type one or more characters. “Select” or “Choose” means for you to use one of
the predefined choices.
Predefined choices are in Bold Arial font.
Button and field labels, links and screen names in are in Bold Times New Roman font.
For brevity’s sake, we will use “e.g.” as shorthand for “for instance”, and “i.e.” as shorthand for “that is” or
“in other words” throughout this manual.
The ZyXEL Dimension GS-3012F Gigabit Ethernet Switch will be referred to as the “GS-3012F”, the
“GS” or, simply, as “the switch” in this User’s Guide.
Firmware Naming Conventions
A firmware version includes the network operating system platform version, model code and release number as
shown in the following example.
Preface xix
GS-3012F User’s Guide
Firmware Version: V3.60(LR.0)
“V3.60” is the network operating system platform version.
“LR” is the model code.
“0” is this firmware’s release number. This varies as new firmware is released. Your firmware’s release
number may not match what is displayed in this User’s Guide.
Graphics Icons Key
The GS Switch Server
Computer Printer Gateway
Related Documentation
Web Configurator Online HTML help
The online HTML help shows you how to use the web configurator to configure individual screens. More
background information can be found in this UG.
ZyXEL Web Site
The ZyXEL download library at www.zyxel.com contains additional support documentation as well as an online
glossary of networking terms.
User Guide Feedback
Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to
techwriters@zyxel.com.tw
Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.
xx Preface
or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6
Features and Applications
Part I
Features and Applications
This part acquaints you with the features and applications of the GS-3012F.
I
GS-3012F User’s Guide
Chapter 1
Getting to Know the GS-3012F
This chapter describes the key features, benefits and applications of the GS-3012F.
1.1 Introduction
The GS-3012F is a layer 2 stand-alone Gigabit Ethernet switch with 12 mini GBIC slots for optical uplinking, four
10/100/1000Mbps ports and one console port and RJ-45 port for local management.
With its built-in web configurator, managing and configuring the switch is easy. From cabinet management to portlevel control and monitoring, you can visually configure and manage your network via the web browser. Just click
your mouse instead of typing cryptic command strings. In addition, the switch can also be managed via Telnet, the
console port, or third-party SNMP management.
1.2 Features
The next two sections describe the hardware and firmware features of the GS-3012F.
1.2.1 Hardware Features
Power
The GS-3012F DC model requires DC power supply input of -48 VDC to -60 VDC, 1.2A Max. The GS-3012F AC
model requires 100~240VAC/1.5A power.
12 Mini GBIC Slots
These are slots for mini GBIC (Gigabit Interface Converter) transceivers. These allow the GS-3012F to connect to
another WAN switch or daisy-chain to other switches.
Four 10/100/1000 Mbps Gigabit Ports (with four paired with the mini GBIC ports)
Connect up to four computers or switches directly to the 10/100/1000Mbps auto-negotiating, automatic cable
sensing (auto-MDIX) Gigabit ports. All ports support:
IEEE 802.3/3u/3z/3ab standards
Back pressure flow control in half duplex mode
IEEE 802.3x flow control in full duplex mode
Console Port
Use the console port for local management of the switch.
Getting to Know the GS-3012F 1-1
GS-3012F User’s Guide
One Management Port
Use the RJ-45 management port for local switch management only.
Fans
The fans cool the GS-3012F sufficiently to allow reliable operation of the switch in even poorly ventilated rooms or
basements.
1.2.2 Firmware Features
IP Protocols
IP Host (No routing)
Telnet for configuration and monitoring
SNMP for management
SNMP MIB II (RFC 1213)
SNMP v1 RFC 1157
Ethernet MIBs RFC 1643
Bridge MIBs RFC 1493
SMI RFC 1155
RMON RFC 1757
SNMPv2 or SNMPv2c
Bridge extension MIBs RFC 2674
Interface MIB RFC 2863
Ping and Trace Route RFC 2925
Management
Web configurator
Command-line interface locally via console port or remotely via Telnet
Out-of-band RJ-45 management port
SNMP
System Monitoring
System status (link status, rates, statistics counters)
SNMP
Temperatures, voltage, fan speed reports and alarms
Port Mirroring allows you to analyze one port’s traffic from another.
1-2 Getting to Know the GS-3012F
GS-3012F User’s Guide
Security
System management password protection Port-based VLAN
IEEE 802.1Q VLAN 802.1x Authentication
Limit dynamic port MAC address learning Static MAC address filtering
Secure SHell communication protocol
Port Link Aggregation
The GS-3012F adheres to the 802.3ad standard for static and dynamic port link aggregation.
Bandwidth Control
The GS-3012F supports rate limiting in 1Mbps increments allowing you to create different service plans
The GS-3012F supports IGMP snooping enabling group multicast traffic to be only forwarded to ports that are
members of that group; thus allowing you to significantly reduce multicast traffic passing through your switch.
Broadcast storm control
Quality of Service
Eight priority queues so you can ensure mission-critical data gets delivered on time.
Follows the IEEE 802.1p priority setting.
Advanced policy-based traffic shaping.
STP (Spanning Tree Protocol) / RSTP (Rapid STP)
(R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows
a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists
between any two stations on the network.
Cluster Management
Cluster Management allows you to manage switches through one switch, called the cluster manager. The switches
must be directly connected and be in the same VLAN group so as to be able to communicate with one another.
1.3 Applications
This section shows a few examples of using the GS-3012F in various network environments.
1.3.1 Backbone Application
In this application, the switch is an ideal solution for small networks where rapid growth can be expected in the
near future.
The switch can be used standalone for a group of heavy traffic users. You can connect computers directly to the
switch’s ports or connect other switches to the GS-3012F.
In this example, all computers connected directly or indirectly to the GS-3012F can share super high-speed
applications on the Gigabit server.
Getting to Know the GS-3012F 1-3
GS-3012F User’s Guide
To expand the network, simply add more networking devices such as switches, routers, firewalls, print servers etc.
Figure 1-1 Backbone Application
1.3.2 Bridging Example
In this example application the switch is the ideal solution for different company departments to connect to the
corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users
that need high bandwidth can connect to high-speed department servers via the switch. You can provide a superfast uplink connection by installing the transceiver(s) in the mini GBIC slots on the GS-3012F.
Moreover, the switch eases supervision and maintenance by allowing network managers to centralize multiple
servers at a single location.
1-4 Getting to Know the GS-3012F
GS-3012F User’s Guide
Figure 1-2 Bridging Application
Full-duplex mode operation only applies to point-to-point access (for example, when attaching
the switch to a workstation, server, or another switch). When connecting to hubs, use a standard
cascaded connection set at half-duplex operation.
1.3.3 High Performance Switched Workgroup Example
The switch is ideal for connecting two power workgroups that need high bandwidth. In the following example, use
trunking to connect these two power workgroups.
Switching to higher-speed LANs such as FDDI or ATM is not feasible for most people due to the expense of
replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance.
The GS-3012F can provide the same bandwidth as FDDI and ATM at much lower cost while still being able to use
existing adapters and switches. Moreover, the current LAN structure can be retained as all ports can freely
communicate with each other.
Getting to Know the GS-3012F 1-5
GS-3012F User’s Guide
Figure 1-3 High Performance Switched Workgroup Application
1.3.4 IEEE 802.1Q VLAN Application Examples
This section shows a workgroup and a shared server example using 802.1Q tagged VLANs. For more information
on VLANs, see the Switch Setup section and the VLAN Setup chapter in this User’s Guide. A VLAN (Virtual Local
Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical
network belong to one group. A station can belong to more than one group. With VLAN, a station cannot directly
talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router.
Tag-based VLAN Workgroup Example
Ports in the same VLAN group share the same broadcast domain thus increase network performance through
reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without
any re-cabling.
1-6 Getting to Know the GS-3012F
GS-3012F User’s Guide
Figure 1-4VLAN Workgroup Application
VLAN Shared Server Example
Shared resources such as a server can be used by all ports in the same VLAN as the server, as shown in the
following example. In this example, only ports that need access to the server need belong to VLAN 3 while they
can belong to other VLAN groups too.
Getting to Know the GS-3012F 1-7
GS-3012F User’s Guide
Figure 1-5 Shared Server Using VLAN Example
1-8 Getting to Know the GS-3012F
Loading...
+ 205 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.