ZyXEL xg3700, gs3700 User Manual

Quick Start Guide

GS3700/XGS3700 Series

GbE L2+ Switch
Version 4.30 Edition 1, 10/2015
Default Login Details
IP Address http://192.168.0.1 (Out-
of-band MGMT port)
www.zyxel.com
User Name admin Password 1234
http://192.168.1.1 (In-
band ports)
Copyright © 2015 ZyXEL Communications Corporation
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE.
Note: This guide is a reference for a series of products. Therefore some features or
options in this guide may not be available in your product.
Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Related Documentation
• CLI Reference Guide This guide explains how to use the Command-Line Interface (CLI) to configure the Switch.
Note: It is recommended you use the Web Configurator to configure the Switch.
• Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary
information.
•More Information Go to support.zyxel.com to find other information on the Switch
.
GS3700/XGS3700 Series User’s Guide
2

Contents Overview

Contents Overview
User’s Guide .......................................................................................................................................20
Getting to Know Your Switch ...................................................................................................................21
Hardware Installation and Connection ....................................................................................................26
Hardware Overview .................................................................................................................................30
The Web Configurator ............................................................................................................................. 37
Technical Reference ..........................................................................................................................46
ZON Utility, ZON Neighbor Management and Port Status ...................................................................... 47
Basic Setting ..........................................................................................................................................56
VLAN .....................................................................................................................................................101
Static MAC Forward Setup ....................................................................................................................124
Static Multicast Forward Setup ..............................................................................................................127
Filtering .................................................................................................................................................130
Spanning Tree Protocol .........................................................................................................................132
Bandwidth Control ................................................................................................................................. 157
Broadcast Storm Control ....................................................................................................................... 160
Mirroring ................................................................................................................................................162
Link Aggregation ...................................................................................................................................175
Port Authentication ................................................................................................................................ 185
Port Security ..........................................................................................................................................195
Time Range ...........................................................................................................................................199
Classifier ...............................................................................................................................................201
Policy Rule ...........................................................................................................................................210
Queuing Method ....................................................................................................................................215
VLAN Stacking ...................................................................................................................................... 219
Multicast ................................................................................................................................................227
AAA .......................................................................................................................................................253
IP Source Guard ...................................................................................................................................265
Loop Guard ...........................................................................................................................................299
VLAN Mapping ......................................................................................................................................303
Layer 2 Protocol Tunneling ................................................................................................................... 307
sFlow .....................................................................................................................................................312
PPPoE ................................................................................................................................................... 316
Error Disable .........................................................................................................................................325
MAC Pinning .........................................................................................................................................333
Private VLAN .........................................................................................................................................336
Green Ethernet ......................................................................................................................................340
Link Layer Discovery Protocol (LLDP) ..................................................................................................343
GS3700/XGS3700 Series User’s Guide
3
Contents Overview
Anti-Arpscan ..........................................................................................................................................372
BPDU Guard .........................................................................................................................................378
OAM ......................................................................................................................................................381
ZULD .....................................................................................................................................................390
Static Route ...........................................................................................................................................396
Policy Routing .......................................................................................................................................400
Differentiated Services ..........................................................................................................................404
DHCP ....................................................................................................................................................413
VRRP ....................................................................................................................................................430
Load Sharing ......................................................................................................................................... 439
ARP Setup ............................................................................................................................................441
Maintenance ..........................................................................................................................................447
Access Control ...................................................................................................................................... 458
Diagnostic .............................................................................................................................................482
System Log ...........................................................................................................................................485
Syslog Setup ......................................................................................................................................... 486
Cluster Management ............................................................................................................................. 489
MAC Table .............................................................................................................................................495
IP Table .................................................................................................................................................498
ARP Table .............................................................................................................................................500
Routing Table ........................................................................................................................................ 502
Path MTU Table ....................................................................................................................................503
Configure Clone ....................................................................................................................................504
IPv6 Neighbor Table ..............................................................................................................................508
Troubleshooting ....................................................................................................................................510
GS3700/XGS3700 Series User’s Guide
4

Table of Contents

Table of Contents
Contents Overview ..............................................................................................................................3
Table of Contents .................................................................................................................................5
Part I: User’s Guide .........................................................................................20
Chapter 1
Getting to Know Your Switch.............................................................................................................21
1.1 Introduction .......................................................................................................................................21
1.1.1 Bridging Example ....................................................................................................................22
1.1.2 High Performance Switching Example ....................................................................................22
1.1.3 Gigabit Ethernet to the Desktop ..............................................................................................23
1.1.4 IEEE 802.1Q VLAN Application Example ................................................................................23
1.1.5 IPv6 Support ............................................................................................................................24
1.2 Ways to Manage the Switch ..............................................................................................................24
1.3 Good Habits for Managing the Switch ...............................................................................................25
Chapter 2
Hardware Installation and Connection.............................................................................................26
2.1 Freestanding Installation ..................................................................................................................26
2.2 Mounting the Switch on a Rack ........................................................................................................27
2.3 Installation Requirements .................................................................................................................. 27
2.3.1 Precautions ............................................................................................................................. 27
2.4 Attaching the Brackets to the Switch ................................................................................................. 27
2.5 Mounting the Switch on a Rack .........................................................................................................28
2.6 Power Module Installation .................................................................................................................29
Chapter 3
Hardware Overview ............................................................................................................................30
3.1 Front Panel Connections .................................................................................................................. 30
3.1.1 Ethernet Ports ..........................................................................................................................31
3.1.2 SFP/SFP+ Slots ......................................................................................................................32
3.1.3 Management Port ....................................................................................................................33
3.1.4 Console Port ...........................................................................................................................33
3.2 Rear Panel ........................................................................................................................................34
3.2.1 Removing and Installing the Fan Module ................................................................................34
3.2.2 Power Connection ...................................................................................................................34
3.3 LEDs .............................................................................................................................................35
GS3700/XGS3700 Series User’s Guide
5
Table of Contents
Chapter 4
The Web Configurator........................................................................................................................37
4.1 Introduction .......................................................................................................................................37
4.2 System Login ................................................................................................................................. 37
4.3 The Web Configurator Layout .........................................................................................................38
4.3.1 Change Your Password ........................................................................................................42
4.4 Saving Your Configuration ................................................................................................................43
4.5 Switch Lockout ................................................................................................................................43
4.6 Resetting the Switch ......................................................................................................................44
4.6.1 Reload the Configuration File .................................................................................................44
4.7 Logging Out of the Web Configurator .............................................................................................. 45
4.8 Help ..................................................................................................................................................45
Part II: Technical Reference............................................................................46
Chapter 5
ZON Utility, ZON Neighbor Management and Port Status...............................................................47
5.1 Overview ...........................................................................................................................................47
5.2 Status ................................................................................................................................................47
5.3 ZyXEL One Network (ZON) Utility Screen .......................................................................................49
5.4 ZON Neighbor Management Screen ................................................................................................49
5.5 Port Status .......................................................................................................................................51
5.5.1 Port Details ...........................................................................................................................52
Chapter 6
Basic Setting ......................................................................................................................................56
6.1 System Information ........................................................................................................................56
6.1.1 System Information Stacking Hardware Monitor ....................................................................59
6.2 General Setup .................................................................................................................................61
6.3 Introduction to VLANs ......................................................................................................................63
6.4 Switch Setup ....................................................................................................................................63
6.5 IP Setup .........................................................................................................................................65
6.5.1 IP Interfaces ........................................................................................................................... 65
6.5.2 IP Status Details .....................................................................................................................66
6.5.3 IP Configuration ......................................................................................................................67
6.6 Port Setup ........................................................................................................................................ 69
6.7 PoE .................................................................................................................................................. 72
6.7.1 PoE Time Range Status ..........................................................................................................75
6.7.2 PoE Setup ...............................................................................................................................76
6.8 Interface Setup ..................................................................................................................................79
6.9 IPv6 ...................................................................................................................................................80
GS3700/XGS3700 Series User’s Guide
6
Table of Contents
6.9.1 IPv6 Interface Status ...............................................................................................................80
6.9.2 IPv6 Configuration ................................................................................................................... 83
6.9.3 IPv6 Global Setup .................................................................................................................... 83
6.9.4 IPv6 Interface Setup ................................................................................................................84
6.9.5 IPv6 Link-Local Address Setup ...............................................................................................85
6.9.6 IPv6 Global Address Setup .....................................................................................................86
6.9.7 IPv6 Neighbor Discovery Setup ............................................................................................... 87
6.9.8 IPv6 Router Discovery Setup ..................................................................................................88
6.9.9 IPv6 Prefix Setup .....................................................................................................................89
6.9.10 IPv6 Neighbor Setup ............................................................................................................. 91
6.9.11 DHCPv6 Client Setup ............................................................................................................ 92
6.10 Stacking ...........................................................................................................................................93
6.10.1 Stacking Status ...................................................................................................................... 94
6.10.2 Stacking Slot ......................................................................................................................... 95
6.10.3 Stacking Configuration ...........................................................................................................97
6.11 DNS ................................................................................................................................................. 99
Chapter 7
VLAN..................................................................................................................................................101
7.1 Introduction to IEEE 802.1Q Tagged VLANs .............................................................................101
7.1.1 Forwarding Tagged and Untagged Frames ...........................................................................101
7.2 Automatic VLAN Registration .........................................................................................................102
7.2.1 GARP ....................................................................................................................................102
7.2.2 GVRP ....................................................................................................................................102
7.3 Port VLAN Trunking ....................................................................................................................... 103
7.4 Select the VLAN Type ....................................................................................................................103
7.5 802.1Q Static VLAN ........................................................................................................................103
7.5.1 VLAN Status .........................................................................................................................104
7.5.2 VLAN Details ......................................................................................................................... 105
7.6 Private VLAN Status .......................................................................................................................106
7.7 VLAN Configuration .......................................................................................................................106
7.7.1 Configure a Static VLAN ...................................................................................................107
7.7.2 Configure VLAN Port Settings ...........................................................................................109
7.7.3 Subnet Based VLANs ........................................................................................................... 111
7.7.4 Protocol Based VLANs ......................................................................................................... 114
7.8 Port-based VLAN Setup (Standalone Mode) .............................................................................. 117
7.8.1 Configure a Port-based VLAN .............................................................................................. 117
7.9 Voice VLAN ....................................................................................................................................120
7.10 MAC Based VLAN .........................................................................................................................122
Chapter 8
Static MAC Forward Setup...............................................................................................................124
8.1 Overview .........................................................................................................................................124
GS3700/XGS3700 Series User’s Guide
7
Table of Contents
8.2 Configuring Static MAC Forwarding ...........................................................................................124
Chapter 9
Static Multicast Forward Setup .......................................................................................................127
9.1 Static Multicast Forwarding Overview .............................................................................................127
9.2 Configuring Static Multicast Forwarding ..........................................................................................128
Chapter 10
Filtering..............................................................................................................................................130
10.1 Configure a Filtering Rule ...........................................................................................................130
Chapter 11
Spanning Tree Protocol....................................................................................................................132
11.1 STP/RSTP Overview ...................................................................................................................132
11.1.1 STP Terminology .................................................................................................................132
11.1.2 How STP Works ..................................................................................................................133
11.1.3 STP Port States .................................................................................................................. 133
11.1.4 Multiple RSTP ....................................................................................................................133
11.1.5 Multiple STP ......................................................................................................................... 134
11.2 Spanning Tree Protocol Status Screen ..........................................................................................136
11.3 Spanning Tree Configuration ........................................................................................................137
11.4 Configure Rapid Spanning Tree Protocol ...................................................................................138
11.5 Rapid Spanning Tree Protocol Status .........................................................................................141
11.6 Configure Multiple Rapid Spanning Tree Protocol ......................................................................142
11.7 Multiple Rapid Spanning Tree Protocol Status ........................................................................145
11.8 Configure Multiple Spanning Tree Protocol ................................................................................147
11.8.1 Multiple Spanning Tree Protocol Port Configuration ...........................................................151
11.9 Multiple Spanning Tree Protocol Status ...................................................................................154
Chapter 12
Bandwidth Control............................................................................................................................157
12.1 Bandwidth Control Overview .......................................................................................................157
12.1.1 CIR and PIR ........................................................................................................................ 157
12.2 Bandwidth Control Setup .............................................................................................................. 157
Chapter 13
Broadcast Storm Control.................................................................................................................160
13.1 Broadcast Storm Control Setup .................................................................................................... 160
Chapter 14
Mirroring............................................................................................................................................162
14.1 Port Mirroring ...............................................................................................................................162
14.1.1 Local Port Mirroring .............................................................................................................165
GS3700/XGS3700 Series User’s Guide
8
Table of Contents
14.1.2 Remote Port Mirroring .........................................................................................................167
14.1.3 Source .................................................................................................................................168
14.1.4 Destination ...........................................................................................................................170
14.1.5 Connected Port ....................................................................................................................171
Chapter 15
Link Aggregation..............................................................................................................................175
15.1 Link Aggregation Overview .......................................................................................................... 175
15.2 Dynamic Link Aggregation ...........................................................................................................175
15.2.1 Link Aggregation ID ............................................................................................................176
15.3 Link Aggregation Status ...............................................................................................................176
15.4 Link Aggregation Setting .............................................................................................................. 177
15.5 Link Aggregation Control Protocol .............................................................................................180
15.6 Static Trunking Example ...............................................................................................................183
Chapter 16
Port Authentication ..........................................................................................................................185
16.1 Port Authentication Overview .......................................................................................................185
16.1.1 IEEE 802.1x Authentication .................................................................................................185
16.1.2 MAC Authentication .............................................................................................................186
16.2 Port Authentication Configuration ................................................................................................. 187
16.2.1 Activate IEEE 802.1x Security .........................................................................................187
16.2.2 Guest VLAN ........................................................................................................................189
16.2.3 Activate MAC Authentication ..............................................................................................192
Chapter 17
Port Security .....................................................................................................................................195
17.1 About Port Security .......................................................................................................................195
17.2 Port Security Setup .......................................................................................................................195
17.3 VLAN MAC Address Limit ............................................................................................................197
Chapter 18
Time Range .......................................................................................................................................199
18.1 About Time Range ........................................................................................................................199
18.2 Time Range Setup ........................................................................................................................ 199
Chapter 19
Classifier............................................................................................................................................201
19.1 About the Classifier and QoS ........................................................................................................201
19.2 Classifier Status ............................................................................................................................201
19.3 Classifier Configuration .................................................................................................................202
19.3.1 Viewing and Editing Classifier Configuration .......................................................................206
19.4 Classifier Global Setting Configuration .........................................................................................207
GS3700/XGS3700 Series User’s Guide
9
Table of Contents
19.5 Classifier Example ........................................................................................................................208
Chapter 20
Policy Rule .......................................................................................................................................210
20.1 Policy Rules Overview .................................................................................................................210
20.1.1 DiffServ ................................................................................................................................210
20.1.2 DSCP and Per-Hop Behavior ..............................................................................................210
20.2 Configuring Policy Rules ...............................................................................................................210
20.3 Policy Example ..............................................................................................................................213
Chapter 21
Queuing Method ...............................................................................................................................215
21.1 Queuing Method Overview ...........................................................................................................215
21.1.1 Strictly Priority ......................................................................................................................215
21.1.2 Weighted Fair Queuing ........................................................................................................215
21.1.3 Weighted Round Robin Scheduling (WRR) .........................................................................216
21.2 Configuring Queuing .....................................................................................................................216
Chapter 22
VLAN Stacking..................................................................................................................................219
22.1 VLAN Stacking Overview .............................................................................................................219
22.1.1 VLAN Stacking Example ......................................................................................................219
22.2 VLAN Stacking Port Roles ............................................................................................................220
22.3 VLAN Tag Format ..........................................................................................................................220
22.3.1 Frame Format ......................................................................................................................221
22.4 Configuring VLAN Stacking ........................................................................................................... 221
22.4.1 Port-based Q-in-Q ...............................................................................................................223
22.4.2 Selective Q-in-Q .................................................................................................................225
Chapter 23
Multicast ............................................................................................................................................227
23.1 Multicast Overview ....................................................................................................................... 227
23.1.1 IP Multicast Addresses ........................................................................................................227
23.1.2 IGMP Filtering ......................................................................................................................227
23.1.3 IGMP Snooping .................................................................................................................. 228
23.1.4 IGMP Snooping and VLANs ................................................................................................228
23.1.5 MLD Snooping-Proxy ..........................................................................................................228
23.1.6 MLD Messages ....................................................................................................................229
23.2 Multicast Setup .............................................................................................................................229
23.3 IPv4 Multicast Status ....................................................................................................................230
23.3.1 IGMP Snooping .................................................................................................................. 230
23.3.2 IGMP Snooping VLAN ........................................................................................................234
23.3.3 IGMP Filtering Profile .........................................................................................................235
GS3700/XGS3700 Series User’s Guide
10
Table of Contents
23.4 IPv6 Multicast Status ....................................................................................................................236
23.4.1 MLD Snooping-proxy ..........................................................................................................237
23.4.2 MLD Snooping-proxy VLAN ...............................................................................................237
23.4.3 MLD Snooping-proxy VLAN Port Role Setting ...................................................................239
23.4.4 MLD Snooping-proxy Filtering ............................................................................................241
23.4.5 MLD Snooping-proxy Filtering Profile .................................................................................243
23.5 MVR Overview .............................................................................................................................244
23.5.1 Types of MVR Ports .............................................................................................................245
23.5.2 MVR Modes .........................................................................................................................245
23.5.3 How MVR Works .................................................................................................................245
23.6 General MVR Configuration ..........................................................................................................246
23.6.1 MVR Group Configuration ..................................................................................................248
23.6.2 MVR Configuration Example ...............................................................................................250
Chapter 24
AAA....................................................................................................................................................253
24.1 Authentication, Authorization and Accounting (AAA) ....................................................................253
24.1.1 Local User Accounts ............................................................................................................253
24.1.2 RADIUS and TACACS+ ......................................................................................................254
24.2 AAA Screens ................................................................................................................................. 254
24.2.1 RADIUS Server Setup .......................................................................................................254
24.2.2 TACACS+ Server Setup ..................................................................................................256
24.2.3 AAA Setup ........................................................................................................................... 257
24.2.4 Vendor Specific Attribute .....................................................................................................260
24.2.5 Tunnel Protocol Attribute .....................................................................................................261
24.3 Supported RADIUS Attributes .......................................................................................................261
24.3.1 Attributes Used for Authentication .......................................................................................262
24.3.2 Attributes Used for Accounting ............................................................................................262
Chapter 25
IP Source Guard................................................................................................................................265
25.1 IP Source Guard Overview ...........................................................................................................265
25.1.1 What You Can Do ................................................................................................................265
25.1.2 What You Need to Know .....................................................................................................266
25.2 IP Source Guard ...........................................................................................................................267
25.3 IPv4 Source Guard Setup ............................................................................................................ 268
25.4 IPv4 Source Guard Static Binding .................................................................................................269
25.5 DHCP Snooping ............................................................................................................................271
25.6 DHCP Snooping Configure ...........................................................................................................273
25.6.1 DHCP Snooping Port Configure ..........................................................................................275
25.6.2 DHCP Snooping VLAN Configure .......................................................................................277
25.6.3 DHCP Snooping VLAN Port Configure ................................................................................278
25.7 ARP Inspection Status ..................................................................................................................279
GS3700/XGS3700 Series User’s Guide
11
Table of Contents
25.7.1 ARP Inspection VLAN Status ..............................................................................................280
25.7.2 ARP Inspection Log Status ..................................................................................................281
25.8 ARP Inspection Configure .............................................................................................................282
25.8.1 ARP Inspection Port Configure ............................................................................................284
25.8.2 ARP Inspection VLAN Configure .........................................................................................286
25.9 IPv6 Source Guard Overview .......................................................................................................287
25.10 IPv6 Source Binding Status ......................................................................................................... 287
25.11 IPv6 Static Binding Setup ...........................................................................................................288
25.12 IPv6 Source Guard Policy Setup ................................................................................................290
25.13 IPv6 Source Guard Port Setup ...................................................................................................291
25.14 IPv6 Snooping Policy Setup .......................................................................................................292
25.15 IPv6 Snooping VLAN Setup ....................................................................................................... 293
25.16 IPv6 DHCP Trust Setup .............................................................................................................294
25.17 Technical Reference ....................................................................................................................295
25.17.1 DHCP Snooping Overview ................................................................................................295
25.17.2 ARP Inspection Overview ..................................................................................................297
Chapter 26
Loop Guard .......................................................................................................................................299
26.1 Loop Guard Overview ..................................................................................................................299
26.2 Loop Guard Setup .........................................................................................................................301
Chapter 27
VLAN Mapping ..................................................................................................................................303
27.1 VLAN Mapping Overview .............................................................................................................303
27.1.1 VLAN Mapping Example .....................................................................................................303
27.2 Enabling VLAN Mapping ...............................................................................................................303
27.3 Configuring VLAN Mapping ...........................................................................................................305
Chapter 28
Layer 2 Protocol Tunneling..............................................................................................................307
28.1 Layer 2 Protocol Tunneling Overview ..........................................................................................307
28.1.1 Layer-2 Protocol Tunneling Mode ........................................................................................308
28.2 Configuring Layer 2 Protocol Tunneling ........................................................................................308
Chapter 29
sFlow..................................................................................................................................................312
29.1 sFlow Overview .............................................................................................................................312
29.2 sFlow Port Configuration ............................................................................................................... 312
29.2.1 sFlow Collector Configuration ..............................................................................................314
Chapter 30
PPPoE................................................................................................................................................316
GS3700/XGS3700 Series User’s Guide
12
Table of Contents
30.1 PPPoE Intermediate Agent Overview ..........................................................................................316
30.1.1 PPPoE Intermediate Agent Tag Format ..............................................................................316
30.1.2 Sub-Option Format .............................................................................................................. 316
30.1.3 Port State .............................................................................................................................317
30.2 The PPPoE Screen .......................................................................................................................318
30.3 PPPoE Intermediate Agent ..........................................................................................................318
30.3.1 PPPoE IA Per-Port .............................................................................................................320
30.3.2 PPPoE IA Per-Port Per-VLAN ............................................................................................322
30.3.3 PPPoE IA for VLAN ............................................................................................................323
Chapter 31
Error Disable.....................................................................................................................................325
31.1 Error Disable Overview ................................................................................................................325
31.1.1 CPU Protection Overview ....................................................................................................325
31.1.2 Error-Disable Recovery Overview .......................................................................................325
31.1.3 What You Can Do ................................................................................................................325
31.2 The Error Disable Screen .............................................................................................................. 326
31.3 Error-Disable Status .....................................................................................................................326
31.4 CPU Protection Configuration ......................................................................................................328
31.5 Error-Disable Detect Configuration ..............................................................................................330
31.6 Error-Disable Recovery Configuration .........................................................................................331
Chapter 32
MAC Pinning .....................................................................................................................................333
32.1 MAC Pinning Overview ................................................................................................................ 333
32.2 MAC Pinning Configuration ...........................................................................................................333
Chapter 33
Private VLAN.....................................................................................................................................336
33.1 Private VLAN Overview ................................................................................................................ 336
33.1.1 Configuration ....................................................................................................................... 337
Chapter 34
Green Ethernet..................................................................................................................................340
34.1 Green Ethernet Overview .............................................................................................................340
34.2 Configuring Green Ethernet .......................................................................................................... 340
Chapter 35
Link Layer Discovery Protocol (LLDP)...........................................................................................343
35.1 LLDP Overview .............................................................................................................................343
35.2 LLDP-MED Overview ....................................................................................................................344
35.3 LLDP Screens ...............................................................................................................................345
35.4 LLDP Local Status ........................................................................................................................346
GS3700/XGS3700 Series User’s Guide
13
Table of Contents
35.4.1 LLDP Local Port Status Detail ............................................................................................348
35.5 LLDP Remote Status ....................................................................................................................352
35.5.1 LLDP Remote Port Status Detail ........................................................................................352
35.6 LLDP Configuration ......................................................................................................................358
35.6.1 LLDP Configuration Basic TLV Setting ............................................................................... 361
35.6.2 LLDP Configuration Basic Org-specific TLV Setting ........................................................... 362
35.7 LLDP-MED Configuration .............................................................................................................364
35.8 LLDP-MED Network Policy .........................................................................................................366
35.9 LLDP-MED Location ...................................................................................................................368
Chapter 36
Anti-Arpscan .....................................................................................................................................372
36.1 Anti-Arpscan Overview .................................................................................................................372
36.1.1 What You Can Do ................................................................................................................372
36.1.2 What You Need to Know ......................................................................................................372
36.2 Anti-Arpscan Status ......................................................................................................................373
36.3 Anti-Arpscan Host Status .............................................................................................................374
36.4 Anti-Arpscan Trust Host ...............................................................................................................374
36.5 Anti-Arpscan Configure ................................................................................................................375
Chapter 37
BPDU Guard......................................................................................................................................378
37.1 BPDU Guard Overview ................................................................................................................378
37.1.1 What You Can Do ................................................................................................................378
37.2 BPDU Guard Status ......................................................................................................................378
37.3 BPDU Guard Configuration ........................................................................................................... 379
Chapter 38
OAM ...................................................................................................................................................381
38.1 OAM Overview .............................................................................................................................381
38.1.1 What You Can Do ................................................................................................................381
38.2 OAM Status ...................................................................................................................................381
38.2.1 OAM Details ........................................................................................................................ 383
38.3 OAM Configuration ........................................................................................................................ 387
38.4 OAM Remote Loopback ................................................................................................................ 389
Chapter 39
ZULD ..................................................................................................................................................390
39.1 ZULD Overview ............................................................................................................................390
39.1.1 What You Can Do ................................................................................................................390
39.1.2 What You Need to Know ......................................................................................................390
39.2 ZULD Status ..................................................................................................................................391
39.3 ZULD Configuration ..................................................................................................................... 393
GS3700/XGS3700 Series User’s Guide
14
Table of Contents
Chapter 40
Static Route.......................................................................................................................................396
40.1 Static Routing Overview .............................................................................................................. 396
40.2 Static Routing ................................................................................................................................396
40.3 Configuring IPv4 Static Routing ..................................................................................................397
40.4 Configuring IPv6 Static Routing ..................................................................................................398
Chapter 41
Policy Routing...................................................................................................................................400
41.1 Policy Route Overview .................................................................................................................400
41.1.1 Benefits ................................................................................................................................400
41.2 Configuring Policy Routing Profile .................................................................................................400
41.2.1 Policy Routing Rule Configuration ......................................................................................401
Chapter 42
Differentiated Services.....................................................................................................................404
42.1 DiffServ Overview ........................................................................................................................404
42.1.1 DSCP and Per-Hop Behavior ..............................................................................................404
42.1.2 DiffServ Network Example ..................................................................................................404
42.2 Two Rate Three Color Marker Traffic Policing ..............................................................................405
42.2.1 TRTCM - Color-blind Mode ..................................................................................................406
42.2.2 TRTCM - Color-aware Mode ...............................................................................................406
42.3 Activating DiffServ ........................................................................................................................406
42.3.1 Configuring 2-Rate 3 Color Marker Settings .......................................................................408
42.3.2 DSCP Profile ...................................................................................................................... 410
42.4 DSCP-to-IEEE 802.1p Priority Settings ................................................................................... 411
42.4.1 Configuring DSCP Settings .................................................................................................412
Chapter 43
DHCP..................................................................................................................................................413
43.1 DHCP Overview ...........................................................................................................................413
43.1.1 DHCP Modes ......................................................................................................................413
43.1.2 DHCP Configuration Options ...............................................................................................413
43.2 DHCP Configuration ......................................................................................................................413
43.3 DHCPv4 Status ............................................................................................................................414
43.3.1 DHCPv4 Server Status Detail .............................................................................................414
43.4 DHCPv4 Relay .............................................................................................................................415
43.4.1 DHCPv4 Relay Agent Information .......................................................................................416
43.4.2 DHCPv4 Option 82 Profile ...................................................................................................416
43.4.3 Configuring DHCPv4 Global Relay ...................................................................................... 418
43.4.4 DHCPv4 Global Relay Port Configure ................................................................................ 418
43.4.5 Global DHCP Relay Configuration Example .......................................................................420
43.5 Configuring DHCP VLAN Settings ............................................................................................. 420
GS3700/XGS3700 Series User’s Guide
15
Table of Contents
43.5.1 DHCPv4 VLAN Port Configure ...........................................................................................422
43.5.2 Example: DHCP Relay for Two VLANs ...............................................................................423
43.6 DHCPv6 Status ............................................................................................................................424
43.7 DHCPv6 Information .....................................................................................................................425
43.8 DHCPv6 Prefix Delegation ............................................................................................................ 426
43.9 DHCPv6 Relay ..............................................................................................................................428
Chapter 44
VRRP..................................................................................................................................................430
44.1 VRRP Overview ...........................................................................................................................430
44.2 VRRP Status ................................................................................................................................. 431
44.3 VRRP Configuration ..................................................................................................................... 431
44.3.1 IP Interface Setup ...............................................................................................................431
44.3.2 VRRP Parameters ..............................................................................................................433
44.3.3 Configuring VRRP Parameters ............................................................................................433
44.3.4 Viewing VRRP Summary .....................................................................................................434
44.4 VRRP Configuration Examples ....................................................................................................435
44.4.1 One Subnet Network Example ...........................................................................................435
44.4.2 Two Subnets Example .........................................................................................................436
Chapter 45
Load Sharing.....................................................................................................................................439
45.1 Load Sharing Overview ................................................................................................................439
45.2 Configuring Load Sharing .............................................................................................................439
Chapter 46
ARP Setup .........................................................................................................................................441
46.1 ARP Overview ..............................................................................................................................441
46.1.1 How ARP Works .................................................................................................................. 441
46.1.2 ARP Learning Mode ............................................................................................................441
46.2 ARP Setup ....................................................................................................................................443
46.2.1 ARP Learning ..................................................................................................................... 443
46.2.2 Static ARP ...........................................................................................................................445
Chapter 47
Maintenance...................................................................................................................................... 447
47.1 The Maintenance Screen ..............................................................................................................447
47.2 Firmware Upgrade ........................................................................................................................448
47.3 Restore a Configuration File .........................................................................................................450
47.4 Backup a Configuration File ..........................................................................................................451
47.5 Erase Running-Configuration ......................................................................................................451
47.6 Save Configuration ........................................................................................................................ 452
47.7 Reboot System ..............................................................................................................................452
GS3700/XGS3700 Series User’s Guide
16
Table of Contents
47.7.1 Load Stacking Default .........................................................................................................452
47.7.2 Load Factory Default ..........................................................................................................453
47.8 Tech-Support ................................................................................................................................453
47.9 FTP Command Line ......................................................................................................................455
47.9.1 Filename Conventions ........................................................................................................455
47.9.2 FTP Command Line Procedure .......................................................................................... 456
47.9.3 GUI-based FTP Clients ........................................................................................................456
47.9.4 FTP Restrictions .................................................................................................................457
Chapter 48
Access Control .................................................................................................................................458
48.1 Access Control Overview ..........................................................................................................458
48.1.1 What You Can Do ................................................................................................................458
48.2 The Access Control Main Screen .................................................................................................. 458
48.3 About SNMP ...............................................................................................................................459
48.3.1 SNMP v3 and Security ........................................................................................................460
48.3.2 Supported MIBs .................................................................................................................460
48.3.3 SNMP Traps ........................................................................................................................ 461
48.3.4 Configuring SNMP ............................................................................................................465
48.3.5 Configuring SNMP Trap Group .........................................................................................466
48.3.6 Enabling/Disabling Sending of SNMP Traps on a Port ........................................................467
48.3.7 Configuring SNMP User ...................................................................................................469
48.4 Setting Up Login Accounts ..........................................................................................................471
48.5 SSH Overview ...............................................................................................................................472
48.6 How SSH works ............................................................................................................................473
48.7 SSH Implementation on the Switch ...............................................................................................474
48.7.1 Requirements for Using SSH ...............................................................................................474
48.8 Introduction to HTTPS ................................................................................................................... 474
48.9 HTTPS Example ...........................................................................................................................475
48.9.1 Internet Explorer Warning Messages ..................................................................................475
48.9.2 Mozilla Firefox Warning Messages ......................................................................................477
48.9.3 The Main Screen .................................................................................................................478
48.10 Service Access Control ............................................................................................................479
48.11 Remote Management .............................................................................................................480
Chapter 49
Diagnostic .........................................................................................................................................482
49.1 Diagnostic ....................................................................................................................................482
Chapter 50
System Log .......................................................................................................................................485
50.1 Overview .......................................................................................................................................485
50.2 System Log ...................................................................................................................................485
GS3700/XGS3700 Series User’s Guide
17
Table of Contents
Chapter 51
Syslog Setup..................................................................................................................................... 486
51.1 Syslog Overview ...........................................................................................................................486
51.2 Syslog Setup ................................................................................................................................ 486
Chapter 52
Cluster Management ........................................................................................................................489
52.1 Clustering Management Status Overview ....................................................................................489
52.2 Cluster Management Status .........................................................................................................490
52.2.1 Cluster Member Switch Management ................................................................................ 491
52.3 Clustering Management Configuration ........................................................................................493
Chapter 53
MAC Table .........................................................................................................................................495
53.1 MAC Table Overview ....................................................................................................................495
53.2 Viewing the MAC Table ................................................................................................................. 496
Chapter 54
IP Table ..............................................................................................................................................498
54.1 IP Table Overview ........................................................................................................................ 498
54.2 Viewing the IP Table ......................................................................................................................499
Chapter 55
ARP Table..........................................................................................................................................500
55.1 ARP Table Overview ....................................................................................................................500
55.1.1 How ARP Works .................................................................................................................. 500
55.2 The ARP Table Screen .................................................................................................................500
Chapter 56
Routing Table....................................................................................................................................502
56.1 Overview .......................................................................................................................................502
56.2 Viewing the Routing Table Status .................................................................................................502
Chapter 57
Path MTU Table................................................................................................................. ................503
57.1 Path MTU Overview .....................................................................................................................503
57.2 Viewing the Path MTU Table .........................................................................................................503
Chapter 58
Configure Clone................................................................................................................................504
58.1 Configure Clone ...........................................................................................................................504
GS3700/XGS3700 Series User’s Guide
18
Table of Contents
Chapter 59
IPv6 Neighbor Table..........................................................................................................................508
59.1 IPv6 Neighbor Table Overview .....................................................................................................508
59.2 Viewing the IPv6 Neighbor Table ..................................................................................................508
Chapter 60
Troubleshooting................................................................................................................................510
60.1 Power, Hardware Connections, and LEDs ....................................................................................510
60.2 Switch Access and Login .............................................................................................................. 511
60.3 Switch Configuration .....................................................................................................................513
Appendix A Common Services ........................................................................................................514
Appendix B IPv6 ..............................................................................................................................517
Appendix C Customer Support ........................................................................................................526
Appendix D Legal Information .........................................................................................................533
Index ..................................................................................................................................................539
GS3700/XGS3700 Series User’s Guide
19
PART I

User’s Guide

20
This chapter introduces the main features and applications of the Switch.

1.1 Introduction

Your Switch is a layer 2+, Gigabit Ethernet (GbE) switch with two power slots for hot-swappable RPS300 or RPS600-HP power modules. The Switch provides four SFP or SFP+ slots for uplink. By integrating router functions, the Switch performs wire-speed layer -3 routing in addition to layer-2 switching.
This User’s Guide covers the following models: GS3700-24, GS3700-24HP, GS3700-48, GS3700­48HP, XGS3700-24, XGS3700-24HP, XGS3700-48, and XGS3700-48HP.
Table 1 Switch Comparison Table
PORT/SWITCH DETAILS
24 10/100/1000Base-T Ethernet ports
48 10/100/1000Base-T Ethernet ports
4 1GbE SFP slots 4 10GbE SFP+ slots Supports IEEE 802.3af and
IEEE 802.3at PoE standards Supports IEEE 802.3az EEE
Energy Efficient Ethernet (EEE)
GS3700-24GS3700-
CHAPTER 1

Getting to Know Your Switch

24HP
GS3700-48GS3700-
48HP
XGS3700
-24
XGS3700
-24HP
XGS3700
-48
XGS3700
-48HP
With its built-in web configurator, including the ZyXEL One Network (ZON) Neighbor Management feature (Section 5.4 on page 49), viewing, managing and configuring the Switch and its neighboring devices is easy. In addition, the Switch can also be managed via Telnet, any terminal emulator program on the console port, or third-party SNMP management.
In addition, ZyXEL offers a proprietary software progr am called Z yXEL One Network (ZON) Utility, it is a utility tool that assists you to set up and maintain network devices in a more simple and efficient way. You can download the ZON Utility at www.zyxel.com and install it on a PC. For more information on ZON Utility see Section 5.3 on page 49.
See the datasheet for a full list of software features available on the Switch.
GS3700/XGS3700 Series User’s Guide
21
1.1.1 Bridging Example
Backbone
RD
Sales
In this example the Switch connects different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the Switch. You can provide a super-fast uplink connection by using the optional 10 Gigabit uplink module on the Switch.
Figure 1 Bridging Application
Chapter 1 Getting to Know Your Switch
1.1.2 High Performance Switching Example
The Switch is ideal for connecting two geographically dispersed networks that need high bandwidth. In the following example, a company uses the optional 10 Gigabit uplink modules to connect the headquarters to a branch office network. Within the headquarters network, a company can use trunking to group several physical ports into one logical higher-capacity link. Trunking can be used if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.
GS3700/XGS3700 Series User’s Guide
22
Chapter 1 Getting to Know Your Switch
HQ
Branch
10 Gbps
Trunk
Internet
Figure 2 High Performance Switching
1.1.3 Gigabit Ethernet to the Desktop
The Switch is an ideal solution for small networks which demand high bandwidth for a group of heavy traffic users. You can connect computers and servers directly to the Switch’s port or connect other switches to the Switch. Use the optional 10 Gigabit uplink module to provide high speed access to a data server and the Internet. The uplink module supports a fiber-optic connection which alleviates the distance limitations of copper cabling.
In this example, all computers can share high-speed applications on the server and access the Internet. To expand the network, simply add more networking devices such as switches, routers, computers, print servers and so on.
Figure 3 Gigabit to the Desktop
1.1.4 IEEE 802.1Q VLAN Application Example
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network belong to one or more groups. With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router.
GS3700/XGS3700 Series User’s Guide
23
Chapter 1 Getting to Know Your Switch
For more information on VLANs, refer to Chapter 7 on page 101.
1.1.4.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain, thus increasing network performance by reducing broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re-cabling.
Shared resources such as a server can be used by all ports in the same VLAN as the server. In the following figure only ports that need access to the server need to be part of VLAN 1. Ports can belong to other VLAN groups too.
Figure 4 Shared Server Using VLAN Example
1.1.5 IPv6 Support
IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 addresses. At the time of writing, the Switch supports the following features.
• Static address assignment and stateless auto-configuration
• Neighbor Discovery Protocol (a protocol used to discover other IPv6 devices in a network)
• Remote Management using ping SNMP, telnet, HTTP and FTP services
• ICMPv6 to report errors encountered in packet processing and perform diagnostic functions, such as "ping”
• IPv4/IPv6 dual stack; the Switch can run IPv4 and IPv6 at the same time
• DHCPv6 client and relay
• Multicast Listener Discovery (MLD) snooping and proxy
For more information on IPv6, refer to Appendix B on page 517 and the CLI Reference Guide.

1.2 Ways to Manage the Switch

Use any of the following methods to manage the Switch.
38
IP
GS3700/XGS3700 Series User’s Guide
24
Chapter 1 Getting to Know Your Switch
• Web Configurator. This is recommended for everyday management of the Switch using a (supported) web browser. See Chapter 4 on page 37.
• Command Line Interface. Line commands offer an alternative to the Web Configurator and may be necessary to configure advanced features. See the CLI Reference Guide.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/restore. See
Section 47.9 on page 455.
• SNMP. The device can be monitored and/or managed by an SNMP manager. See Section 48.3 on
page 459.

1.3 Good Habits for Managing the Switch

Do the following things regularly to make the Switch more secure and to manage the Switch more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Sw itch. Y ou could simply restore your last configuration.
GS3700/XGS3700 Series User’s Guide
25

Hardware Installation and Connection

This chapter shows you how to install and connect the Switch.

2.1 Freestanding Installation

1 Make sure the Switch is clean and dry.
2 Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and
the connected cables. Make sure there is a power outlet nearby.
3 Make sure there is enough clearance around the Switch to allow air circulation and the attachment
of cables and the power cord.
4 Remove the adhesive backing from the rubber feet.
CHAPTER 2
5 Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect
the Switch from shock or vibration and ensure space between devices when stacking. Figure 5 Attaching Rubber Feet
Note: Do NOT block the ventilation holes. Leave space between devices when stacking. Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and
3.4 inches (8 cm) at the back of the Switch. This is especially important for enclosed rack installations.
GS3700/XGS3700 Series User’s Guide
26
Chapter 2 Hardware Installation and Connection

2.2 Mounting the Switch on a Rack

This section lists the rack mounting requirements and precautions and describes the installation steps of how to mount the Switch in a 19-inch rack with the included rack mounting kit.
Note: ZyXEL provides extensible rear mounting brackets (RM400) to install the Swi tch in
a 21-inch, 23-inch or 24-inch rack. See the RM400 Hardware Installation Guide.

2.3 Installation Requirements

• Two front mounting brackets (short), two sliding rails and two rear mounting brackets.
• Eight M4 metric screws with large heads and a #2 Philips screwdriver for attaching the brackets to the Switch.
• Four M4 metric screws with small heads and a #2 Philips screwdriver for attaching the sliding rails to the Switch.
• Eight M6 metric rack screws and a screwdriver for attaching the Switch (with attached brackets) to the rack. Rack depth can be from 90 to 120 cm.
Note: Failure to use the proper screws may damage the unit.
2.3.1 Precautions
• Make sure the rack will safely support the combined weight of all the equipment it contains. The maximum weight a bracket can hold is 27 Kg.
• Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all necessary precautions to anchor the rack securely before installing the unit.

2.4 Attaching the Brackets to the Switch

Use the M4 screws (smaller than the rack screws) to attach the brackets to the Switch.
1 Position the smaller front mounting bracket on one si de of the Switch, lining up the four screw holes
on the bracket with the screw holes on the side of the Switch.
2 Use a #2 Philips screwdriver to install the M4 screws with large heads through the mounting
bracket holes into the Switch.
3 Repeat steps 1 and 2 to install the second front mounting bracket on the other side of the Switch.
4 Position a sliding rail on one side at the rear of the Switch, lining up the two screw holes on the
sliding rail with the screw holes on the side of the Switch.
5 Use a screwdriver to install the M4 screws with small heads through the sliding rail holes into the
Switch.
6 Repeat steps 1 and 2 to install the second sliding rail on the other side of the Switch.
GS3700/XGS3700 Series User’s Guide
27
Chapter 2 Hardware Installation and Connection
Front Bracket
Sliding Rail
Rear Bracket
7 Slide the rear bracket along the rail and set the bracke t in place depending on the depth of the r ack.
The rear brackets can be used with a 19-inch rack.
You may now mount the Switch on a rack. Proceed to the next section.

2.5 Mounting the Switch on a Rack

Use the M6 rack screws (larger than the M4 screws) to mount the S witch with brackets on the rack.
1 Position a front mounting bracket (that is already attached to the Switch) on one side of the rack,
lining up the two screw holes on the bracket with the screw holes at the front of the rack.
2 Use a screwdriver to install the rack screws through the mounting bracket holes into the rack.
3 Repeat steps 1 and 2 to attach the other front mounting bracket on the other side of the rack.
4 Position a rear mounting bracket (that is already attached to the Switch) on one side of the rack,
lining up the two screw holes on the bracket with the screw holes at the rear of the rack.
5 Use a screwdriver to install the rack screws through the mounting bracket holes into the rack.
6 Repeat steps 4 and 5 to attach the other rear mounting bracket on the other side of the rack.
GS3700/XGS3700 Series User’s Guide
28
Chapter 2 Hardware Installation and Connection
Rear
Front

2.6 Power Module Installation

There is one power module installed in the first power slot of the Switch by default. See the Power Module Hardware Installation Guide for how to install a second power module or remove the
power module.
GS3700/XGS3700 Series User’s Guide
29
This chapter describes the front panel and rear panel of the Switch and shows you how to make the hardware connections.

3.1 Front Panel Connections

The figure below shows the front panel of the Switch.
Figure 6 Front Panel: GS3700 Series
CHAPTER 3

Hardware Overview

GS3700/XGS3700 Series User’s Guide
30
Loading...
+ 518 hidden pages