GS2200-48
Intelligent Layer 2 Switch
Default Login Details
IP Address http://192.168.0.1
(Out-of-band
MGMT port)
http://192.168.1.1
(In-band ports)
User Name admin
Password 1234
www.zyxel.com
Firmware Version 3.80
Edition 1, 7/2009
www.zyxel.com
Copyright © 2009
ZyXEL Communications Corporation
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the Switch using the
web configurator or via commands.
Related Documentation
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
• Command Reference Guide
The Command Reference Guide explains how to use the Command-Line
Interface (CLI) and CLI commands to configure the Switch.
Note: It is recommended you use the web configurator to configure the Switch.
• Supporting Disc
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
product certifications.
for additional support documentation and
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team, ZyXEL Communications Corp.,
6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
Disclaimer
Graphics in this book may differ slightly from the product due to differences in
operating systems, operating system versions, or if you installed updated
firmware/software fo r y our dev ice. Ev ery effort has been made to ensur e that the
information in this manual is accurate.
GS2200-48 User’s Guide
3
About This User's Guide
Need More Help?
More help is available at www.zyx el.com.
• Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide, Quick
Start Guide and Command Line Interface Reference Guide in order to better
understand how to use your product.
• Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
•Forum
This contains discussions on ZyXEL prod ucts. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should conta ct your vendor. If you cannot contact your vendor, then contact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following informatio n ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
4
• Brief description of the problem and the steps you took to solve it.
GS2200-48 User’s Guide
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The GS2200-48 may be referred to as the “Switch”, the “device”, the “system”
or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “ret urn” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
GS2200-48 User’s Guide
5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The S witch icon is
not an exact representation of your device.
The Switch Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
6
GS2200-48 User’s Guide
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• For continued protection against risk of fire replace only with same type and rating of
fuse.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power
source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
Your product is marked with this symbol, which is known as the WEEE mark. WEEE
stands for Waste Electronics and Electrical Equipment. It means that used electrical
and electronic products should not be mixed with general waste. Used electrical and
electronic equipment should be treated separately.
GS2200-48 User’s Guide
7
Safety Warnings
8
GS2200-48 User’s Guide
Contents Overview
Contents Overview
Introduction ............................................................................................................................21
Getting to Know Your Switch .....................................................................................................23
Hardware Installation and Connection ................................... ................................. ................... 29
Hardware Overview ................................................................................................................... 33
Basic Configuration ...............................................................................................................39
The Web Configurator ............................................................................................................... 41
Initial Setup Example ................................................................................................................. 51
System Status and Port Statistics ................................. ... ... ... .... ................................................57
Basic Setting ............................................................................................................................. 63
Advanced Setup .....................................................................................................................77
VLAN ......................................................................................................................................... 79
Static MAC Forward Setup ........................................................................................................ 99
Filtering ..................................... .................................................... ........................................... 103
Spanning Tree Protocol ................................................ ... ... ... .... ... ... ... ... .................................. 105
Bandwidth Control .... ... ... .... ... ... ... ............................................................................................ 123
Broadcast Storm Control ......................................................................................................... 127
Mirroring .................................................................................................................................. 129
Link Aggregation ................. .....................................................................................................131
Port Authentication ...... ... .... ... ..................................................................................................139
Port Security .................................... ... ... ... ............................................. .... ... ... ... .... ... ..............145
Classifier ................................... .................................................... ........................................... 149
Policy Rule .............................................................................................................................. 157
Queuing Method ...................................................................................................................... 165
VLAN Stacking ......................................................................................................................... 169
Multicast ..................................................................................................................................175
Authentication & Accounting .................. ... ... .... ... ... ... .... ................................................ ... ... .....191
IP Source Guard ...................................................................................................................... 205
Loop Guard ..................... .... ... ... ............................................. .... ... ... ... ... .... ... ... ... .... .................231
IP Application .......................................................................................................................235
Static Routing ..........................................................................................................................237
RIP .......................................................................................................................................... 239
Differentiated Services ........................................ ... ... .... ... ... ... .... ... ........................................... 241
DHCP ...................................................................................................................................... 249
VRRP .............................. .................... ................... .................... ................... ........................... 259
GS2200-48 User’s Guide
9
Contents Overview
Management .........................................................................................................................269
Maintenance ............................................................................................................................ 271
Access Control ........................................................................................................................ 279
Diagnostic .................................... ....................................................... ..................................... 299
Syslog ....................................... .................................................... ........................................... 301
Cluster Management .......... ... ................................................ .... ... ... ........................................ 305
MAC Table ............................................................................................................................... 313
IP Table .. ... ... ............................................. ... .... ... ... ... .... ...........................................................317
ARP Table ........................................ ............................................. ... ... ... .... ... ... ... ..................... 321
Routing Table ........................................................................................................................... 323
Configure Clone ....................................................................................................................... 325
Product Specifications ........................................................................................................327
Product Specifications ............................................................................................................. 329
Appendices and Index .........................................................................................................337
10
GS2200-48 User’s Guide
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: Introduction................................................................................. 21
Chapter 1
Getting to Know Your Switch.................................................................................................23
1.1 Introduction ......................... ... .... ... ... ... ............................................. .... ... ... ... .... ... ... .............23
1.1.1 Bridging Example ......... .... ... ... ... ... .... ... ... ... .... ................................................ ... ... .... ... 23
1.1.2 High Performance Switching Example .......................................................................24
1.1.3 Gigabit Ethernet to the Desktop ................................................................................. 25
1.1.4 IEEE 802.1Q VLAN Application Example .................................................................. 25
1.2 Ways to Manage the Switch ............................ ... .............................................. ... ... ... ... .... ... 26
1.3 Good Habits for Managing the Switch ................................................................................. 26
Chapter 2
Hardware Installation and Connection .................................................................................29
2.1 Freestanding Installation ..................................................................................................... 29
2.2 Mounting the Switch on a Rack .......................................................................................... 30
2.2.1 Rack-mounted Installation Requirements .................................................................. 30
2.2.2 Attaching the Mounting Brackets to the Switch ................................ .......................... 30
2.2.3 Mounting the Switch on a Rack .................................................................................. 31
Chapter 3
Hardware Overview.................................................................................................................33
3.1 Front Panel Connections ... ... .... ... ... ... ... .... ... ................................................ .... ... ................ 33
3.1.1 1000Base-T Ports ...................................................................................................... 34
3.1.2 Dual Personality Interfaces ........................................................................................ 34
3.1.3 Mini-GBIC Slots .........................................................................................................34
3.2 Rear Panel .................... ... ............................................. ... .... ... ... ... ... .................................... 36
3.2.1 Power Connector ................................................... .... ... ... ... ... .... ... ... .......................... 37
GS2200-48 User’s Guide
11
Table of Contents
3.2.2 External Backup Power Supply Connector ................................................................ 37
3.2.3 Console Port ......................................................... .... ... ... ... ... .... ... ... .......................... 37
3.3 LEDs ................................................................................................................................ 38
Part II: Basic Configuration................................................................... 39
Chapter 4
The Web Configurator............................................................................................................41
4.1 Introduction ......................... ... .... ... ... ... ............................................. .... ... ... ... .... ... ... .............41
4.2 System Login ....................................................................................................................41
4.3 The Status Screen .......................................................................................................... 42
4.3.1 Change Your Password .......................................................................................... 47
4.4 Saving Your Configuration ...................................................................................................48
4.5 Switch Lockout .............................................. ... .... ... ... ............................................. .......... 48
4.6 Resetting the Switch ............................... ... ... ... .............................................. ... ... ... ... ....... 48
4.6.1 Reload the Configuration File .................................................................................... 49
4.7 Logging Out of the Web Configurator ................................................................................. 50
4.8 Help ................................................... ... .... ... ... ............................................. .... ... ................50
Chapter 5
Initial Setup Example..............................................................................................................51
5.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 51
5.1.1 Configuring an IP Interface ........................................................................................51
5.1.2 Configuring DHCP Server Settings .. ... ....................................................................... 53
5.1.3 Creating a VLAN ........................................................................................................ 53
5.1.4 Setting Port VID .................................................. ... .... ... ... ..........................................55
5.1.5 Enabling RIP ................ .... ... ... ............................................. ... .... ... ... ... .... ... ... ... ... .......56
Chapter 6
System Status and Port Statistics.........................................................................................57
6.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 57
6.2 Port Status Summary ............................................................................................ ... ....... 58
6.2.1 Status: Port Details ................................................................................................59
Chapter 7
Basic Setting ..........................................................................................................................63
7.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 63
7.2 System Information ........................................................................................................... 64
7.3 General Setup ................................................................................................. ... ... .......... 66
7.4 Introduction to VLANs ........... .... ... ....................................................................................... 68
7.5 Switch Setup Screen .... ... ... .... ... ....................................................................................... 69
12
GS2200-48 User’s Guide
Table of Contents
7.6 IP Setup ............................................................................................................................ 71
7.6.1 IP Interfaces .......... ... ... .... ... ... ............................................. ... .... ... ... ... .... ... ................ 71
7.7 Port Setup ................ .... ... ... ............................................. .... ... ... ... ... .... ................................ 73
Part III: Advanced Setup........................................................................ 77
Chapter 8
VLAN........................................................................................................................................79
8.1 Introduction to IEEE 802.1Q Tagged VLANs .................................................................. 79
8.1.1 Forwarding Tagged and Untagged Frames ................................................................ 79
8.2 Automatic VLAN Registration ................................ ... ... ... .... ... ... ... ... .................................... 80
8.2.1 GARP . .... ... ... ... .... ... ... ............................................. .... ... ... .......................................... 80
8.2.2 GVRP . .... ... ... ... .... ... ... ............................................. .... ... ... .......................................... 80
8.3 Port VLAN Trunking ........... ............................................. .... ... ... ... ... .... ................................ 81
8.4 Select the VLAN Type .... ... ... .... ... ............................................. ... ... .... ... ... ... .... ... ... ... ..........82
8.5 Static VLAN . .... ... ... ... .............................................. ... ... ... .... ................................................ 82
8.5.1 Static VLAN Status .......................................................... ... ... .... ................................ 83
8.5.2 Static VLAN Details .................................. .... ... ... ... .... ... ............................................. 84
8.5.3 Configure a Static VLAN ........................................................................................ 84
8.5.4 Configure VLAN Port Settings ................................................................................ 87
8.6 Subnet Based VLANs .........................................................................................................88
8.7 Configuring Subnet Based VLAN ..... ................................................. ... ... .......................... 89
8.8 Protocol Based VLANs ...................................... .... ... .......................................................... 91
8.9 Configuring Protocol Based VLAN ............................................. ... .... ... ... ... .... ... ... ... .......... 92
8.10 Create an IP-based VLAN Example .................................................................................. 94
8.11 Port-based VLAN Setup ................................................................................................95
8.11.1 Configure a Port-based VLAN ................................................................................. 95
Chapter 9
Static MAC Forward Setup.....................................................................................................99
9.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 99
9.2 Configuring Static MAC Forwarding ............................................................................... 99
Chapter 10
Filtering..................................................................................................................................103
10.1 Configure a Filtering Rule .............................................................................................103
Chapter 11
Spanning Tree Protocol........................................................................................................105
11.1 STP/RSTP Overview ..................................................................................................... 105
11.1.1 STP Terminology ...................................................................................................105
GS2200-48 User’s Guide
13
Table of Contents
11.1.2 How STP Works .................................................................................................... 106
11.1.3 STP Port States .....................................................................................................107
11.1.4 Multiple STP ........................................................................................................... 107
11.2 Spanning Tree Protocol Status Screen .............................................................................110
11.3 Spanning Tree Configuration ...........................................................................................111
11.4 Configure Rapid Spanning Tree Protocol ......................................................................112
11.5 Rapid Spanning Tree Protocol Status .........................................................................114
11.6 Configure Multiple Spanning Tree Protocol ...................................................................116
11.7 Multiple Spanning Tree Protocol Status ......................................................................119
Chapter 12
Bandwidth Control................................................................................................................123
12.1 Bandwidth Control Overview ......................................................................................... 123
12.1.1 CIR and PIR ........................................................................................................... 123
12.2 Bandwidth Control Setup ................................................................................................. 124
Chapter 13
Broadcast Storm Control.....................................................................................................127
13.1 Broadcast Storm Control Setup ...................................................................................... 127
Chapter 14
Mirroring................................................................................................................................129
14.1 Port Mirroring Setup ....................................................................................................... 129
Chapter 15
Link Aggregation ..................................................................................................................131
15.1 Link Aggregation Overview ........................ ....................... ...................... ....................... . 131
15.2 Dynamic Link Aggregation ..............................................................................................131
15.2.1 Link Aggregation ID ............................................................................................... 132
15.3 Link Aggregation Status ....................................................... .......................... .................132
15.4 Link Aggregation Setting ................................................................................................ 134
15.5 Link Aggregation Control Protocol ................................................................................ 135
15.6 Static Trunking Example ..................................................................................................136
Chapter 16
Port Authentication...............................................................................................................139
16.1 Port Authentication Overview ......................................................................................... 139
16.1.1 IEEE 802.1x Authentication ................................................................................... 139
16.1.2 MAC Authentication ............................................................................................... 140
16.2 Port Authentication Configuration ............................ ....................................................... .141
16.2.1 Activate IEEE 802.1x Security ........................................................................... 142
16.2.2 Activate MAC Authentication ................................................................................. 143
14
GS2200-48 User’s Guide
Table of Contents
Chapter 17
Port Security..........................................................................................................................145
17.1 About Port Security .........................................................................................................145
17.2 Port Security Setup .............................. ....................... ....................... ................... ........... 146
Chapter 18
Classifier................................................................................................................................149
18.1 About the Classifier and QoS .......................................................................................... 149
18.2 Configuring the Classifier ...............................................................................................149
18.3 Viewing and Editing Classifier Configuration ................................. .................................. 152
18.4 Classifier Example ...........................................................................................................155
Chapter 19
Policy Rule............................................................................................................................157
19.1 Policy Rules Overview ....................................................................................................157
19.1.1 DiffServ .................................................................................................................. 157
19.1.2 DSCP and Per-Hop Behavior ................................................................................. 157
19.2 Configuring Policy Rules ................................................................................................. 158
19.3 Viewing and Editing Policy Configuration ........................................................................ 161
19.4 Policy Example ................................................................................................................ 163
Chapter 20
Queuing Method....................................................................................................................165
20.1 Queuing Method Overview ............................................................................................. 165
20.1.1 Strictly Priority ........................................................................................................165
20.1.2 Weighted Fair Queuing .......................................................................................... 165
20.1.3 Weighted Round Robin Scheduling (WRR) ........................................................... 166
20.2 Configuring Queuing ........................................................................................................ 167
Chapter 21
VLAN Stacking......................................................................................................................169
21.1 VLAN Stacking Overview ................................................................................................ 169
21.1.1 VLAN Stacking Example ........................................................................................ 169
21.2 VLAN Stacking Port Roles ................ ... .... ........................................................................ 170
21.3 VLAN Tag Format ............................................................................................................171
21.3.1 Frame Format ........................................................................................................171
21.4 Configuring VLAN Stacking ............................................................................................. 173
Chapter 22
Multicast ................................................................................................................................175
22.1 Multicast Overview ......................................................................................................... 175
22.1.1 IP Multicast Addresses ........................................................................................... 175
22.1.2 IGMP Filtering ........................................................................................................ 175
GS2200-48 User’s Guide
15
Table of Contents
22.1.3 IGMP Snooping ..................................................................................................... 176
22.1.4 IGMP Snooping and VLANs ................................................................................... 176
22.2 Multicast Status .............................................................................................................. 176
22.3 Multicast Setting .............. ... .... ... ................................................ ... .... .............................. 177
22.4 IGMP Snooping VLAN .................................................................................................... 179
22.5 IGMP Filtering Profile ..................................................................................................... 181
22.6 MVR Overview ................................................................................................................ 183
22.6.1 Types of MVR Ports ............................................................................................... 183
22.6.2 MVR Modes ........................................................................................................... 184
22.6.3 How MVR Works .................................................................................................... 184
22.7 General MVR Configuration ............................................................................................ 185
22.8 MVR Group Configuration ..............................................................................................187
22.8.1 MVR Configuration Example ... ... .... ... ..................................................................... 188
Chapter 23
Authentication & Accounting ........................................................................................ ......191
23.1 Authentication, Authorization and Accounting ................................................................191
23.1.1 Local User Accounts .................. .... ... ... ... .... ... ................................................ ... .... . 192
23.1.2 RADIUS and TACACS+ ........................................................................................ 192
23.2 Authentication and Accounting Screens .......................................................................... 192
23.2.1 RADIUS Server Setup ........................................................................................ 193
23.2.2 TACACS+ Server Setup ..................................................................................... 195
23.2.3 Authentication and Accounting Setup ................................................................ 197
23.2.4 Vendor Specific Attribute ........................................................................................ 199
23.2.5 Tunnel Protocol Attribute ........................................................................................ 200
23.3 Supported RADIUS Attributes ......................................................................................... 201
23.3.1 Attributes Used for Authentication ............................ ............ .......... .......... ......... ..... 201
23.3.2 Attributes Used for Accounting ............................................................................... 202
Chapter 24
IP Source Guard ....................................................................................................................205
24.1 IP Source Guard Overview .............................................................................................. 205
24.1.1 DHCP Snooping Overview ..................................................................................... 206
24.1.2 ARP Inspection Overview ...................................................................................... 208
24.2 IP Source Guard .............................................................................................................. 209
24.3 IP Source Guard Static Binding ....................................................................................... 210
24.4 DHCP Snooping .............................................................................................................. 213
24.5 DHCP Snooping Configure ...................... ........................................................................ 217
24.5.1 DHCP Snooping Port Configure ............................................................................. 219
24.5.2 DHCP Snooping VLAN Configure .......................................................................... 220
24.6 ARP Inspection Status .....................................................................................................222
24.6.1 ARP Inspection VLAN Status .................................................................................223
24.6.2 ARP Inspection Log Status .................................................................................... 224
16
GS2200-48 User’s Guide
Table of Contents
24.7 ARP Inspection Configure ............................................................................................... 225
24.7.1 ARP Inspection Port Configure .............................................................................. 227
24.7.2 ARP Inspection VLAN Configure ........................................................................... 229
Chapter 25
Loop Guard............................................................................................................................231
25.1 Loop Guard Overview .....................................................................................................231
25.2 Loop Guard Setup ...........................................................................................................233
Part IV: IP Application.......................................................................... 235
Chapter 26
Static Routing........................................................................................................................237
26.1 Configuring Static Routing ............................................................................................. 237
Chapter 27
RIP .........................................................................................................................................239
27.1 RIP Overview ................................................................................................................... 239
27.2 Configuring RIP ............................................................................................................... 239
Chapter 28
Differentiated Services.........................................................................................................241
28.1 DiffServ Overview ...........................................................................................................241
28.1.1 DSCP and Per-Hop Behavior ................................................................................ 241
28.1.2 DiffServ Network Example .................................................................................... 242
28.2 Two Rate Three Color Marker Traffic Policing ................................................................. 242
28.2.1 TRTCM - Color-blind Mode .................................................................................... 243
28.2.2 TRTCM - Color-aware Mode .......................................... ........................................ 243
28.3 Activating DiffServ .......................................................................................................... 244
28.3.1 Configuring 2-Rate 3 Color Marker Settings ......................................................... 245
28.4 DSCP-to-IEEE 802.1p Priority Settings ....... .............................................. ... ... ... ... .....247
28.4.1 Configuring DSCP Settings ............................ .......................................... .............. 248
Chapter 29
DHCP......................................................................................................................................249
29.1 DHCP Overview ............................................................................................................. 249
29.1.1 DHCP Modes ........................................................................................................249
29.1.2 DHCP Configuration Options ................................................................................. 249
29.2 DHCP Status ................................................................................................................... 250
29.3 DHCP Server Status Detail ............................................................................................. 250
29.4 DHCP Relay ....... ... .... ... ... ... .... ... ... ... ... ............................................................................ 252
GS2200-48 User’s Guide
17
Table of Contents
29.4.1 DHCP Relay Agent Information ............................................................................. 252
29.4.2 Configuring DHCP Global Relay ............................................................................ 253
29.4.3 Global DHCP Relay Configuration Example .......................................................... 254
29.5 Configuring DHCP VLAN Settings ................................................................................ 255
29.5.1 Example: DHCP Relay for Two VLANs .................................................................. 257
Chapter 30
VRRP......................................................................................................................................259
30.1 VRRP Overview .............................................................................................................. 259
30.2 VRRP Status .................................................................................................................. 260
30.3 VRRP Configuration .......................................................................................................261
30.3.1 IP Interface Setup ................................................................................................. 261
30.3.2 VRRP Parameters ................................................................................................. 263
30.3.3 Configuring VRRP Parameters .............................................................................. 264
30.3.4 Configuring VRRP Parameters .............................................................................. 265
30.4 VRRP Configuration Examples ...................................................................................... 265
30.4.1 One Subnet Network Example ..............................................................................266
30.4.2 Two Subnets Example .......................................................................................... 267
Part V: Management............................................................................. 269
Chapter 31
Maintenance..........................................................................................................................271
31.1 The Maintenance Screen .................................... ... ... ... .... ... ........................................... 271
31.2 Load Factory Default ...................................................................................................... 272
31.3 Save Configuration .......................................................................................................... 273
31.4 Reboot System ................................................................................................................ 273
31.5 Firmware Upgrade ........................................................................................................ 273
31.6 Restore a Configuration File .........................................................................................274
31.7 Backup a Configuration File ......................................................................................... 275
31.8 FTP Command Line ........................................................................................................ 275
31.8.1 Filename Conventions .......................................................................................... 275
31.8.2 FTP Command Line Procedure ............................................................................ 276
31.8.3 GUI-based FTP Clients .......................................................................................... 277
31.8.4 FTP Restrictions .................................................................................................... 277
Chapter 32
Access Control......................................................................................................................279
18
32.1 Access Control Overview ............................................................................................ 279
32.2 The Access Control Main Screen .................................................................................... 279
32.3 About SNMP .................................................................................................................. 280
GS2200-48 User’s Guide
Table of Contents
32.3.1 SNMP v3 and Security ........................................................................................... 281
32.3.2 Supported MIBs ................................................................................................... 281
32.3.3 SNMP Traps .......................................................................................................... 282
32.3.4 Configuring SNMP .............................................................................................. 285
32.3.5 Configuring SNMP Trap Group ...........................................................................288
32.3.6 Setting Up Login Accounts .................................................................................288
32.4 SSH Overview ................................................................................................................. 290
32.5 How SSH works ................ ... ............................................................................................ 291
32.6 SSH Implementation on the Switch ................................................................................. 292
32.6.1 Requirements for Using SSH .................................................................................292
32.7 Introduction to HTTPS .....................................................................................................292
32.8 HTTPS Example .............................................................................................................. 293
32.8.1 Internet Explorer Warning Messages ..................................................................... 293
32.8.2 Netscape Navigator Warning Messages ................................................................ 294
32.8.3 The Main Screen .................................................................................................... 296
32.9 Service Port Access Control ......................................................................................... 296
32.10 Remote Management ............................................................................................... 297
Chapter 33
Diagnostic..............................................................................................................................299
33.1 Diagnostic ....................................................................................................................... 299
Chapter 34
Syslog....................................................................................................................................301
34.1 Syslog Overview .............................................................................................................. 301
34.2 Syslog Setup .................................................................................................................. 302
34.3 Syslog Server Setup ....................................................................................................... 303
Chapter 35
Cluster Management.............................................................................................................305
35.1 Clustering Management Status Overview ...................................................................... 305
35.2 Cluster Management Status ........................................................................................... 306
35.2.1 Cluster Member Switch Management ................................................................... 307
35.3 Clustering Management Configuration .......................................................................... 310
Chapter 36
MAC Table..............................................................................................................................313
36.1 MAC Table Overview ...................................................................................................... 313
36.2 Viewing the MAC Table ...................................................................................................314
Chapter 37
IP Table ..................................................................................................................................317
37.1 IP Table Overview ........................................................................................................... 317
GS2200-48 User’s Guide
19
Table of Contents
37.2 Viewing the IP Table ........................................................................................................318
Chapter 38
ARP Table..............................................................................................................................321
38.1 ARP Table Overview .......................................................................................................321
38.1.1 How ARP Works ......................................................... ... ... ... .... ... ... ........................ 321
38.2 Viewing the ARP Table ................................................................................................... 322
Chapter 39
Routing Table........................................................................................................................323
39.1 Overview .......................................................................................................................... 323
39.2 Viewing the Routing Table Status ...................................................................................323
Chapter 40
Configure Clone....................................................................................................................325
40.1 Configure Clone ..............................................................................................................325
Part VI: Product Specifications .......................................................... 327
Chapter 41
Product Specifications.........................................................................................................329
Part VII: Appendices and Index.......................................................... 337
Appendix A Legal Information..............................................................................................339
Index.......................................................................................................................................343
20
GS2200-48 User’s Guide
PART I
Introduction
Getting to Know Your Switch (23)
Hardware Installation and Connection
(29)
Hardware Overview (33)
21
22
CHAPTER 1
Getting to Know Your Switch
This chapter introduces the main applications and features of the Switch. It also
introduces the ways you can manage the Switch.
1.1 Introduction
The GS2200-48 is a stand-alone layer 2 Gigabit Ethernet (GbE) switch. It comes
with 44 100/1000 Mbps Ethernet ports, 4 Dual Personality interfaces (each
consisting of one RJ-45 Gigabit port and one slot for a mini-GBIC tr ansc eiver (SFP
module) with one port active at a time) and two mini-GBIC transceivers for fiberoptic uplink connections.
This section shows a few examples of using the Switch in various network
environments.
See Chapter 41 on page 329 for a full list of software features available on the
Switch.
1.1.1 Bridging Example
In this example the Switch connects different company departments (RD and
Sales) to the corporate backbone. It can alleviate bandwidth contention and
eliminate server and network bottlenecks. All users that need high bandwidth can
GS2200-48 User’s Guide
23
Chapter 1 Getting to Know Your Switch
connect to high-speed department servers via the Switch. You can provide a fast
uplink connection by using the Gigabit uplink ports on the Switch.
Figure 1 Bridging Application
Backbone
RD
Sales
1.1.2 High Performance Switching Example
The Switch is ideal for connecting two geographically dispersed networks that
need high bandwidth. In the following example, a company uses the Gigabit uplink
ports to connect the headquarters to a branch office network. Within the
headquarters network, a company can use trunking to group several physical
ports into one logical higher-capacity link. Trunking can be used with copper
cabling over relatively shorter distances than fiber-optic connections.
Figure 2 High Performance Switching
1 Gbps
Trunk
24
Branch
HQ
GS2200-48 User’s Guide
1.1.3 Gigabit Ethernet to the Desktop
The Switch is an ideal solution for small networks which demand high bandwidth
for a group of heavy traffic users. Y ou can conn ect computers an d servers directly
to the Switch’s port or connect other switches to the Swit ch. Use the Gigabit uplink
ports to provide high speed access to a data server and the Internet. The uplink
ports support a fiber-optic connection which alleviate the distance limitations of
copper cabling.
In this example, all computers can share high-speed applications on the server
and access the Internet. To expand the network, simply add more networking
devices such as switches, routers, computers, print servers and so on.
Figure 3 Gigabit to the Desktop
Internet
Chapter 1 Getting to Know Your Switch
1.1.4 IEEE 802.1Q VLAN Application Example
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Stations on a logical network belong to one or more
groups. With VLAN, a station cannot directly talk to or hear from stations that are
not in the same group(s) unless such traffic first goes through a router.
For more information on VLANs, refer to Chapter 8 on page 79.
1.1.4.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain, thus
increasing network performance by reducing broadcast traffic. VLAN groups can
be modified at any time by adding, moving or changing ports without any recabling.
GS2200-48 User’s Guide
25
Chapter 1 Getting to Know Your Switch
Shared resources such as a server can be used by all ports in the same VLAN as
the server. In the following figure only ports that need access to the server need
to be part of VLAN 1. Ports on the Switch can belong to other VLAN groups too.
Figure 4 Shared Server Using VLAN Example
1.2 Ways to Manage the Switch
Use any of the following methods to manage the Switch.
• Web Co nfigurator. This is recommended for everyday management of the S witch
using a (supported) web browser. See Chapter 4 on page 41.
• Command Line Interface. Line commands offer an alternative to the Web
Configurator and may be necessary to configure advanced features. See the CLI
Reference Guide.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/
restore. See Section 31.8 on page 275.
• SNMP. The device can be monitored and/or managed by an SNMP manager. See
Section 32.3 on page 280.
1.3 Good Habits for Managing the Switch
Do the following things regularly to make the Switch more secure and to manage
the Switch more effectively.
26
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
GS2200-48 User’s Guide
Chapter 1 Getting to Know Your Switch
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget y our password, you will hav e to reset the
Switch to its factory default settings. If you backed up an earlier configuration
file, you would not have to totally re-configure the Switch. You could simply
restore your last configuration.
GS2200-48 User’s Guide
27
Chapter 1 Getting to Know Your Switch
28
GS2200-48 User’s Guide
CHAPTER 2
Hardware Installation and
Connection
This chapter shows you how to install and connect the Switch.
2.1 Freestanding Installation
1 Make sure the Switch is clean and dry.
2 Set the Switch on a smooth, level surface strong enough to support the weight of
the Switch and the connected cables. Make sure there is a power outlet nearby.
3 Make sure there is enough clearance around the Switch to allow air circulation and
the attachment of cables and the power cord.
4 Remove the adhesive backing from the rubber feet.
5 Attach the rubber feet to each corner on the bottom of the Switch. These rubber
feet help protect the Switch from shock or vibration and ensure space between
devices when stacking.
Figure 5 Attaching Rubber Feet
Note: Do NOT block the ventilation holes. Leave space between devices when
stacking.
GS2200-48 User’s Guide
29
Chapter 2 Hardware Installation and Connection
Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front
and 3.4 inches (8 cm) at the back of the Switch. This is especially important for
enclosed rack installations.
2.2 Mounting the Switch on a Rack
This section lists the rack mounting requirements and precautions and describes
the installation steps.
2.2.1 Rack-mounted Installation Requirements
• Two mounting brackets.
• Eight M3 flat head screws and a #2 Philips screwdriver.
• Four M5 flat head screws and a #2 Philips screwdriver.
Failure to use the proper screws may damage the unit.
2.2.1.1 Precautions
• Make sure the rack will safely sup port the combined weight of all the equipment
it contains.
• Make sure the position of the Switch does not make the rack unstable or topheavy. Take all necessary precautions to anchor the rack securely before
installing the unit.
2.2.2 Attaching the Mounting Brackets to the Switch
1 Position a mounting bracket on one side of the Switch, lining up the four screw
holes on the bracket with the screw holes on the side of the Switch.
Figure 6 Attaching the Mounting Brackets
30
2 Using a #2 Philips screwdriver, install the M3 flat head screws through the
mounting bracket holes into the Switch.
GS2200-48 User’s Guide
Chapter 2 Hardware Installation and Conn ec t ion
3 Repeat steps 1 and 2 to install the second mounting bracket on the other side of
the Switch.
4 You may now mount the Switch on a rack. Proceed to the next section.
2.2.3 Mounting the Switch on a Rack
1 Position a mounting br acket (that is already attached to the Switch) on one s ide of
the rack, lining up the two screw holes on the br ack et with the screw holes on the
side of the rack.
Figure 7 Mounting the Switch on a Rack
2 Using a #2 Philips screwdriver, install the M5 flat head screws through the
mounting bracket holes into the rack.
3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of
the rack.
GS2200-48 User’s Guide
31
Chapter 2 Hardware Installation and Connection
32
GS2200-48 User’s Guide
CHAPTER 3
Hardware Overview
This chapter describes the front panel and rear panel of the Switch and shows y ou
how to make the hardware connections.
3.1 Front Panel Connections
The figure below shows the front panel of the Switch.
Figure 8 Front Panel
100/1000 Mbps RJ-45
Ethernet Ports
The following table describes the ports.
Table 1 Panel Connections
CONNECTO
R
44 100/1000
Mbps RJ-45
Ethernet
Ports
Four Dual
Personality
Interfaces
4 100/
1000
Mbps RJ45 Ports
4 MiniGBIC
Slots
DESCRIPTION
Connect these ports to a computer, a hub, an Ethernet switch or router.
Each interface has one 1000 Base-T RJ-45 port and one Small F orm-F actor
Pluggable (SFP) slot (also called a mini-GBIC slot), with one port or
transceiver active at a time.
Connect these ports to high-bandwidth backbone network Ethernet
switches using 1000Base-T compatible Category 5/5e/6 copper cables.
Use mini-GBIC transceivers in these slots for fiber-optic connections to
backbone Ethernet switches.
RJ-45 Gigabit / MiniGBIC Dual Personality
GS2200-48 User’s Guide
33
Chapter 3 Hardware Overview
3.1.1 1000Base-T Ports
The Switch has 48 1000Base- T auto-negotiating, auto-crossov er Ethernet ports (4
of which are part of the Dual Personality interfaces). In 100/1000 Mbps Gigabit
Ethernet, the speed can be 100 Mbps or 1000 Mbps. The duplex mode can be both
half or full duplex at 100 Mbps and full duplex only at 1000 Mbps.
An auto-negotiating Gigabit Ethernet port can detect and adjust to the optimum
Ethernet speed (100/1000 Mbps) and duplex mode (full duplex or half duplex) of
the connected device.
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straightthrough or crossover Ethernet cable.
3.1.1.1 Default Ethernet Settings
The factory default negotiation settings for the Ethernet ports on the Switch are:
• Speed: Auto
•Duplex: Auto
• Flow control: Off
3.1.2 Dual Personality Interfaces
There are 4 Dual Personality interfaces, comprising 4 1000Base-T/mini-GBIC
combo ports. For each interface y ou c an co nnect either to the 1000Base-T port or
the mini-GBIC port. The mini-GBIC ports have priori ty ov er the 1000Base-T ports.
This means that if a mini-GBIC port and the corresponding 1000Base-T port are
connected at the same time, the 1000Base-T port will be disabled.
3.1.3 Mini-GBIC Slots
These are 6 slots for Small Form-Factor Pluggable (SFP) transceivers. Four of
them are part of the Dual Personality interfaces and two are used for high speed
uplink.
A transceiver is a single unit that houses a transmitter and a receiver. Use a
transceiver to connect a fiber-optic cable to the Switch. The Switch does not come
with transceivers. You must use transceivers that comply with the Small FormFactor Pluggable (SFP) Transceiver MultiSource Agreement (MSA). See the SFF
committee’s INF-8074i specification Rev 1.0 for details.
34
You can change transceivers while the Switch is operating. You can use different
transceivers to connect to Ethernet switches with different types of fiber-optic
connectors.
GS2200-48 User’s Guide
• Type: SFP connection interface
• Connection speed: 1 Gigabit per second (Gbps)
To avoid possible eye injury, do not look into an operating fiberoptic module’s connectors.
3.1.3.1 Transceiver Installation
Use the following steps to install a mini GBIC transceiver (SFP or XFP module).
1 Insert the transceiver into the slot with the exposed section of PCB board facing
down.
Figure 9 Transceiver Installation Example
Chapter 3 Hardware Overview
2 Press the transceiver firmly until it clicks into place.
3 The Switch automatically detects the installed transceiver. Check the LEDs to
verify that it is functioning properly.
Figure 10 Installed Transceiver
3.1.3.2 Transceiver Removal
Use the following steps to remove a mini GBIC transceiver (SFP module).
GS2200-48 User’s Guide
35
Chapter 3 Hardware Overview
1 Open the transceiver’s latch (latch styles vary).
Figure 11 Opening the Transceiver’s Latch Example
2 Pull the transceiver out of the slot.
Figure 12 Transceiver Removal Example
3.2 Rear Panel
The following figures show the rear panel of the switch. The rear panel contains:
• Two Mini-GBIC uplink slots (A)
• An RS-232 management console port (B)
• An RJ-45 out-of-band management port (C)
• A connector for the backup power supply (D)
• A connector for the power receptacle (E)
Figure 13 Rear Panel
AC
BD
E
36
GS2200-48 User’s Guide
The following table describes the ports on the rear panel.
Table 2 Panel Connections
CONNECTO
R
2 Mini-GBIC
Slots
Console Port Only connect this port to your computer (using an RS-232 cable) if you
Management
Port
DESCRIPTION
Use mini-GBIC transceivers in these slots for fiber-optic connections to
backbone Ethernet switches.
want to configure the Switch using the command line interface (CLI) via
the console port.
Connect to a computer using an RJ-45 Ethernet cable for local
configuration of the Switch.
3.2.1 Power Connector
Make sure you are using the correct power source as shown on the panel.
Chapter 3 Hardware Overview
To connect the power to the Switch, insert the female end of power cord to the
power receptacle on the rear panel. Connect the other end of the supplied power
cord to a power outlet. Make sure that no objects obstruct the airflow of the fans.
The Switch requires a power supply of 100-240 VAC, 1.2 A.
3.2.2 External Backup Power Supply Connector
The Switch supports external backup power supply (BPS).
The Switch constantly monitors the sta tus of the internal power supply. The
backup power supply automatically provides power to the S witch in the event of a
power failure. Once the Switch receives power from the backup power supply, it
will not automatically switch back to using the internal power supply even when
the power is resumed.
3.2.3 Console Port
For local management, you can use a computer with terminal emulation software
configured to the following parameters:
• VT100 terminal emulation
• 9600 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
GS2200-48 User’s Guide
37
Chapter 3 Hardware Overview
Connect the male 9-pin end of the RS-232 console cable to the console port of the
Switch. Connect the female end to a serial port (COM1, COM2 or other COM port)
of your computer.
3.3 LEDs
The following table describes the LEDs.
Table 3 LEDs
LED COLOR STATUS DESCRIPTION
BPS Green Blinking The system is receiving power from the backup power
PWR Green On The system is turned on.
SYS Green Blinking The system is rebooting and performing self-diagnostic
ALM Red On There is a hardware failure.
100/1000 Mbps RJ-45 Ethernet Ports
Link and
Active
Mini-GBIC Slot
LNK Green On The port has a successful connection.
ACT Green Blinking The port is receiving or transmitting data.
Green Blinking The system is transmitting/receiving to/from a 1000 Mbps
Amber Blinking The system is transmitting/receiving to/from a 100 Mbps
supply.
On The backup power supply is connected and active.
Off The backup power supply is not ready or not active.
Off The system is off.
tests.
On The system is on and functioning properly.
Off The power is off or the system is not ready/
malfunctioning.
Off The system is functioning normally.
Ethernet network.
On The link to a 1000 Mbps Ethernet network is up.
Ethernet network.
On The link to a 100 Mbps Ethernet network is up.
Off The link to an Ethernet network is down.
Off No Ethernet device is connected to this port.
38
GS2200-48 User’s Guide
PART II
Basic Configuration
The Web Configurator (41)
Initial Setup Example (51)
System Status and Port Statistics (57)
Basic Setting (63)
39
40
CHAPTER 4
The Web Configurator
This section introduces the configuration and functions of the web configurator.
4.1 Introduction
The web configurator is an HTML-based management interface that allows easy
Switch setup and management via Inter n et br ows e r. Use Internet Explorer 6.0
and later or Netscape Navigator 7.0 and later versions. The recommended screen
resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web brows er pop-up windows from your device. W eb pop-up blocking i s enabled
by default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
4.2 System Login
1 Start your web browser.
2 Type “http://” and the IP address of the Switch (for example, the default
management IP address is 192.168.1.1 through an in-band (non-MGMT) port and
192.168.0.1 through the MGMT port) in the Location or Address field. Press
[ENTER].
GS2200-48 User’s Guide
41
Chapter 4 The Web Configurator
3 The login screen appears. The default username is admin and associated default
password is 1234. The date and time display as shown if you hav e not configured
a time server nor manually entered a time and date in the General Setup screen.
Figure 14 Web Configurator: Login
4 Click OK to view the first web configurator screen.
4.3 The Status Screen
The Status screen is the first screen that displays when you access the web
configurator.
The following figure shows the navigating components of a web configurator
screen.
Figure 15 Web Configurator Home Screen (Status)
A
BDC
E
42
GS2200-48 User’s Guide
Chapter 4 The Web Configurator
A - Click the menu items to open submenu links, and then click on a submenu link
to open the screen in the main window.
B, C, D, E - These are quick links whi ch allow you to perform certain tasks no
matter which screen you are currently working in.
B - Click this link to save your configuration into the Switch’s nonvolatile memory.
Nonvolatile memory is saved in the configuration file from which the Switch
booted from and it stays the same even if the Switch’s power is turned off. See
Section 31.3 on page 273 for information on saving your settings to a specific
configuration file.
C - Click this link to go to the status page of the Switch.
D - Click this link to log out of the web config urator.
E - Click this link to display web help pages. The help pages provide descriptions
for all of the configuration screens.
In the navigation panel, click a main link to reveal a list of submenu links.
Table 4 Navigation Panel Sub-links Overview
BASIC SETTING
ADVANCED
APPLICATION
IP APPLICATION MANAGEMENT
GS2200-48 User’s Guide
43
Chapter 4 The Web Configurator
The following table lists the various web configurator screens within the sub-links.
Table 5 Web Configurator Screen Sub-links Details
BASIC
SETTING
System Info
ADVANCED APPLICATION IP APPLICATION MANAGEMENT
VLAN (Status)
Static Routing
Maintenance
General Setup
Switch Set up
IP Setup
Port Setup
VLAN Port Setting
- Subnet Based VLAN
- Protocol Based VLAN
Static VLAN
Static MAC Forwarding
Filtering
Spanning Tree Protocol
(Status)
Configuration
RSTP
MSTP
Bandwidth Control
Broadcast Storm Control
Mirroring
Link Aggregation (Status)
Link Aggregation Setting
- Link Aggregation Control
Protocol
Port Authentication
802.1x
MAC Authentication
Port Security
RIP
DiffServ
2-Rate 3 Color
Marker
DSCP Setting
DHCP (Status)
DHCP Relay
VLAN Setting
VRRP (Status)
VRRP
Configuration
Firmware Upgrade
Restore Configuration
Backup Configuration
Access Control
SNMP
- Trap Group
Logins
Service Access
Control
Remote Management
Diagnostic
Syslog (Setup)
Syslog Server Setup
Cluster Management
(Status)
Configuration
MAC Table
IP Table
ARP Table
Routing Table (Status)
Configure Clone
44
Classifier
Policy Rule
Queuing Method
VLAN Stacking
Multicast (Status)
Multicast Setting
- IGMP Snooping VLAN
- IGMP Filtering Profile
- MVR
-- Group Configuration
Authentication and
Accounting
RADIUS Server Setup
TACACS+ Server Setup
Auth and Acct Setup
GS2200-48 User’s Guide
Table 6 Web Configurator Screen Sub-links Details
BASIC
SETTING
ADVANCED APPLICATION IP APPLICATION MANAGEMENT
IP Source Guard
IP Source Guard Static
Binding
DHCP Snooping
- DHCP Snooping
Configure
-- DHCP Snooping Port
Configure
-- DHCP Snooping VLAN
Configure
ARP Inspection Status
- ARP Inspection VLAN
Status
- ARP Inspection Log
Status
- ARP Inspection Configure
-- ARP Inspection Port
Configure
-- ARP Inspection VLAN
Configure
Loop Guard
Chapter 4 The Web Configurator
The following table describes the links in the navigation panel.
Table 7 Navigation Panel Links
LINK DESCRIPTION
Basic Settings
System Info This link takes you to a screen that displays general system and
hardware monitoring information.
General Setup This link takes you to a screen where you can configure general
identification information and time settings for the Switch.
Switch Setup This link takes you to a screen where you can set up global Switch
parameters such as VLAN type, MAC address learning, IGMP snooping,
GARP and priority queues.
IP Setup This link takes you to a screen where you can configure the IP address,
subnet mask (necessary for Switch management) and DNS (domain
name server) and set up to 64 IP routing domains.
Port Setup This link takes you to screens where you can configure speed, flow
control and priority settings for individual Switch ports.
Advanced Application
VLAN This link takes you to screens where you can configure port-based or
802.1Q VLAN (depending on what you configured in the Switch Setup
menu). You can also configure a protocol based VLAN or a subnet based
VLAN in these screens.
Static MAC
Forwarding
Filtering This link takes you to a screen to set up filtering rules.
Spanning Tree
Protocol
This link takes you to screens where you can configure static MAC
addresses for a port. These static MAC addresses do not age out.
This link takes you to screens where you can configure the RSTP/MSTP
to prevent network loops.
GS2200-48 User’s Guide
45
Chapter 4 The Web Configurator
Table 7 Navigation Panel Links (continued)
LINK DESCRIPTION
Bandwidth
Control
Broadcast
Storm Control
Mirroring This link takes you to screens where you can copy traffic from one port
Link
Aggregation
Port
Authentication
Port Security This link takes you to a screen where you can activate MAC address
Classifier This link takes you to a screen where you can configure the Switch to
Policy Rule This link takes you to a screen where you can configure the Switch to
Queuing
Method
VLAN Stacking This link takes you to a screen where you can activate and configure
Multicast This link takes you to screen where you can configure various multicast
Auth and Acct This link takes you to screens where you can configure authentication
IP Source
Guard
Loop Guard This link takes you to a screen where you can configure protection
IP Application
Static Routing This link takes you to a screen where you can configure static routes. A
RIP This link takes you to a screen where you can configure the RIP (Routing
DiffServ This link takes you to screens where you can enable DiffServ, configure
DHCP This link takes you to screens where you can configure the DHCP
VRRP This link takes you to screens where you can configure redundant virtual
Management
This link takes you to screens where you can cap the maximum
bandwidth allowed from specified source(s) to specified destination(s).
This link takes you to a screen to set up broadcast filters.
or ports to another port in order that you can examine the traffic from
the first port without interference.
This link takes you to screen where you can logically aggregate physical
links to form one logical, higher-bandwidth link.
This link takes you to a screen where you can configure IEEE 802.1x port
authentication as well as MAC authentication for clients communicating
via the Switch.
learning and set the maximum number of MAC addresses to learn on a
port.
group packets based on the specified criteria.
perform special treatment on the grouped packets.
This link takes you to a screen where you can configure queuing with
associated queue weights for each port.
VLAN stacking.
features and create multicast VLANs.
and accounting services via external servers. The external servers can
be either RADIUS (Remote Authentication Dial-In User Service) or
TACACS+ (Terminal Access Controller Access-Control System Plus).
This link takes you to screens where you can configure filtering of
unauthorized DHCP and ARP packets in your network.
against network loops that occur on the edge of your network.
static route defines how the Switch should forward traffic by configuring
the TCP/IP parameters manually.
Information Protocol) direction and versions.
marking rules and set DSCP-to-IEEE802.1p mappings.
settings.
router for your network.
46
GS2200-48 User’s Guide
Chapter 4 The Web Configurator
Table 7 Navigation Panel Links (continued)
LINK DESCRIPTION
Maintenance This link takes you to screens where you can perform firmware and
configuration file maintenance as well as reboot the system.
Access Control This link takes you to screens where you can change the system login
password and configure SNMP and remote management.
Diagnostic This link takes you to screens where you can view system logs and can
test port(s).
Syslog This link takes you to screens where you can setup system logs and a
system log server.
Cluster
Management
MAC T able This link takes you to a screen where you can view the MAC address and
IP T able This link takes you to a screen where you can view the IP addresses and
ARP T able This link takes you to a screen where you can view the MAC address – IP
Routing Table This link takes you to a screen where you can view the routing table.
Configure
Clone
This link takes you to a screen where you can configure clustering
management and view its status.
VLAN ID of a device attach to a port. You can also view what kind of
device it is.
VLAN ID of a device attached to a port.You can also view what kind of
device it is.
address resolution table.
This link takes you to a screen where you can copy attributes of one port
to (an)other port(s).
4.3.1 Change Your Password
After you log in for the first time, it is recommended you change the default
administrator password. Click Management > Access Control > Logins to
display the next screen.
Figure 16 Change Administrator Login Password
GS2200-48 User’s Guide
47
Chapter 4 The Web Configurator
4.4 Saving Your Configuration
When you are done modifying the settings in a screen, click Apply to save your
changes back to the run-time memory. Settings in the run-time memory are lost
when the Switch’s power is turned off.
Click the Save link in the upper right hand corner of the web configur ator to save
your configuration to nonvolatile memory. Nonvolatile memory refers to the
Switch’s storage that remains even if the Switch’s power is turned off.
Note: Use the Save link when you are done with a configuration session.
4.5 Switch Lockout
You could block yourself (and all others) from using in-band-management
(managing through the data ports) if you do one of the following:
1 Delete the management VLAN (default is VLAN 1).
2 Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the
management port of the Switch.
3 Filter all traffic to the CPU port.
4 Disable all ports.
5 Misconfigure the text configuration file.
6 Forget the password and/or IP address.
7 Prevent all services from accessing the Switch.
8 Change a service port number but forget it.
Note: Be careful not to lock yourself and others out of the Switch. If you do lock
yourself out, try using out-of-band management (via the management port) to
configure the Switch.
4.6 Resetting the Switch
If you lock yourself (and others) from the Switch or forget the administrator
password, you will need to reload the factory-default configur ation file or reset the
Switch back to the factory defaults.
48
GS2200-48 User’s Guide
4.6.1 Reload the Configuration File
Uploading the factory-default configuration file replaces the current configuration
file with the factory-default configuration file. This means that you will lose all
previous configurations and the speed of the console port will be reset to the
default of 9600bps with 8 data bit, no parity, one stop bit and flow control set to
none. The password will also be reset to “1234” and the IP address to
192.168.1.1.
To upload the configuration file, do the following:
1 Connect to the console port using a computer with terminal emulation software.
See Section 3.2 on page 36 for details.
2 Disconnect and reconnect the Switch’s power to begin a session. When you
reconnect the Switch’s power, you will see the initial screen.
3 When you see the message “Press any key to enter Debug Mode within 3
seconds ...” press any key to enter debug mode.
Chapter 4 The Web Configurator
4 Type atlc after the “Enter Debug Mode” message.
5 Wait for the “Starting XMODEM upload” message before activating XMODEM
upload on your terminal.
6 After a configuration file upload, type atgo to restart the Switch.
Figure 17 Resetting the Switch: Via the Console Port
Bootbase Version: V1.0 | 04/21/2009 16:27:22
RAM:Size = 64 Mbytes
DRAM POST: Testing: 65536K OK
DRAM Test SUCCESS !
FLASH: Intel 64M
ZyNOS Version: V3.80(BPR.0)b4 | 6/9/2009 11:48:47
Press any key to enter debug mode within 3 seconds.
..............................
Enter Debug Mode
GS2200-48> atlc
Starting XMODEM upload (CRC mode)....
CCCCCCCCCCCCCCCC
Total 393216 bytes received.
Erasing..
................................................................
OK
GS2200-48> atgo
GS2200-48 User’s Guide
49
Chapter 4 The Web Configurator
The Switch is now reinitialized with a default configuration file including the default
password of “1234”.
4.7 Logging Out of the Web Configurator
Click Logout in a screen to exit the web configurator. You have to log in with your
password again after you log out. This is recommended after you finish a
management session for security reasons.
Figure 18 Web Configurator: Logout Screen
4.8 Help
The web configurator’s online help has descriptions of individual screens and some
supplementary information.
Click the Help link from a web configurator screen to view an online help
description of that screen.
50
GS2200-48 User’s Guide
CHAPTER 5
Initial Setup Example
This chapter shows how to set up the Switch for an example network.
5.1 Overview
The following lists the configuration steps for the example network:
• Configure an IP interface
• Configure DHCP server settings
• Create a VLAN
• Set port VLAN ID
•Enable RIP
5.1.1 Configuring an IP Interface
On a switch, an IP interface (also known as an IP routing domain) is not bound to
a physical port. The default IP address of the Switch is 192.168 .1.1 wit h a subnet
mask of 255.255.255.0.
In the example network, since the RD network is already in the same IP interface
as the Switch, you don’t need to create an IP interface for it. However , if you want
to have the Sales network on a different routing domain, you need to create a
GS2200-48 User’s Guide
51
Chapter 5 Initial Setup Example
new IP interface. This allows the Switch to route traffic between the RD and Sales
networks.
Figure 19 Initial Setup Network Example: IP Interface
1 Connect your computer to the MGMT port that is used only for management.
Make sure your computer is in the same subnet as the MGMT port.
2 Open your web browser and enter 192.168.0.1 (the default MGMT port IP
address) in the address bar to access the web configurator. See Section 4.2 on
page 41 for more information.
3 Click Basic Setting and IP Setup
in the navigation panel.
4 Configure the related fields in the
IP Setup screen.
52
example
For the Sales network, enter 192.168.2.1 as the IP address and 255.255.255.0 as
the subnet mask.
GS2200-48 User’s Guide
5 In the VID field, enter the ID of the VLAN group to which you want this IP
interface to belong. This is the same as the VLAN ID you configure in the Static
VLAN screen.
6 Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
5.1.2 Configuring DHCP Server Settings
You can set the Switch to assign network information (such as the IP address,
DNS server, etc.) to DHCP clients on the network.
For the example network, configure two DHCP client pools on the Switch for the
DHCP clients in the RD and Sales networks.
1 In the web configurator, click IP
Application and DHCP in the
navigation panel and click the
VLAN link.
Chapter 5 Initial Setup Example
2 In the VLAN Setting screen,
specify the ID of the VLAN to
which the DHCP clients belong,
the starting IP address pool,
subnet mask, default gateway
address and the DNS server
address(es).
3 Click Add to save the settings to
the run-time memory. Settings in
the run-time memory are lost when the Switch’s power is turned off.
5.1.3 Creating a VLAN
VLANs confine broadcast frames to the VLAN group in which the port(s) belongs.
You can do this with port-based VLAN or tagged static VLAN with fixed port
members.
example
GS2200-48 User’s Guide
53
Chapter 5 Initial Setup Example
In this example, you want to configure port 1 as a member of VLAN 2.
Figure 20 Initial Setup Network Example: VLAN
1 Click Advanced Application > VLAN in the navigation panel and click the Static
VLAN link.
54
2 In the Static VLAN screen, select
ACTIVE, enter a descriptive name
in the Name field and enter 2 in
the VLAN Group ID field for the
VLAN2 network.
example
Note: The VLAN Group ID field in this screen and the VID field in the IP Setup
screen refer to the same VLAN ID.
GS2200-48 User’s Guide
3 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to
configure port 1 to be a permanent member of the VLAN only.
4 To ensure that VLAN-unaware devices (such as computers and hubs) can receive
frames properly, clear the TX Tagging check box to set the Switch to remove
VLAN tags before sending.
5 Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
5.1.4 Setting Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that
the frames are forwarded to the VLAN group that the tag defines.
In the example network, configure 2 as the port VID on port 1 so that any
untagged frames received on that port get sent to VLAN 2.
Figure 21 Initial Setup Network Example: Port VID
Chapter 5 Initial Setup Example
1 Click Advanced Applications
and VLAN in the navigation
panel. Then click the VLAN Port
Setting link.
2 Enter 2 in the PVID field for port
1 and click Apply to save your
changes back to the run-time
memory . Settings in the run-time
memory are lost when the
Switch’s power is turned off.
GS2200-48 User’s Guide
example
55
Chapter 5 Initial Setup Example
5.1.5 Enabling RIP
To exchange routing information with other routing devices across different
routing domains, enable RIP (Routing Information Protocol) in the RIP screen.
1 Click IP Application and RIP in the navigation panel.
2 Select Both in the Direction
field to set the Switch to
broadcast and receive routing
information.
3 In the Version field, select
RIP-1 for the RIP packet
format that is universa lly
supported.
4 Click Apply to save your changes back to the run-time memory. Settings in the
run-time memory are lost when the Switch’s power is turned off.
example
56
GS2200-48 User’s Guide
CHAPTER 6
System Status and Port
Statistics
This chapter describes the system status (web configurator home page) and port
details screens.
6.1 Overview
The home screen of the web configurator displays a port stati stical summary with
links to each port showing statistical details.
GS2200-48 User’s Guide
57
Chapter 6 System Status and Port Statistics
6.2 Port Status Summary
To view the port statistics, click Status in all web configurator screens to display
the Status screen as shown next.
Figure 22 Status
The following table describes the labels in this screen.
Table 8 Status
LABEL DESCRIPTION
Port This identifies the Ethernet port. Click a port number to display the Port
Details screen (refer to Figure 23 on page 59).
Name This is the name you assigned to this port in the Basic Setting > Port
Setup screen.
Link This field displays the speed (either 10M for 10 Mbps, 100M for 100
Mbps and 1000M for 1000 Mbps) and the duplex (F for full duplex or H
for half). It also shows the cable type (Copper or Fiber) for the combo
ports.
State If STP (Spanning Tree Protocol) is enabled, this field displays the STP
state of the port. (see Section 11.1.3 on page 107 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
LACP This fields displays whether LACP (Link Aggregation Control Protocol) has
been enabled on the port.
TxPkts This field shows the number of transmitted frames on this port.
RxPkts This field shows the number of received frames on this port.
Errors This field shows the number of received errors on this port.
58
GS2200-48 User’s Guide
Table 8 Status (continued)
LABEL DESCRIPTION
Tx KB/s This field shows the transmission speed of data sent on this port in
kilobytes per second.
Rx KB/s This field shows the transmission speed of data received on this port in
kilobytes per second.
Up Time This field shows the total amount of time in hours, minutes and seconds
the port has been up.
Clear Counter Type a port number, select Port and then click Clear Counter to erase
the recorded statistical information for that port, or select Any to clear
statistics for all ports.
6.2.1 Status: Port Details
Click a number in the Port column in the Status screen to display individual port
statistics. Use this screen to check status and detailed perf ormance data about an
individual port on the Switch.
Chapter 6 System Status and Port Statistics
Figure 23 Status: Port Details
GS2200-48 User’s Guide
59
Chapter 6 System Status and Port Statistics
The following table describes the labels in this screen.
Table 9 Status > Port Details
LABEL DESCRIPTION
Port Info
Port NO. This field displays the port number you are viewing.
Name This field displays the name of the port.
Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbpsl,
1000M for 1000 Mbps, and 10G for 10 Gbps) and the duplex (F for full
duplex or H for half duplex). It also shows the cable type (Copper or
Fiber).
Status If STP (Spanning Tree Protocol) is enabled, this field displays the STP state
of the port (see Section 11.1.3 on page 107 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
LACP This field shows if LACP is enabled on this port or not.
TxPkts This field shows the number of transmitted frames on this port
RxPkts This field shows the number of received frames on this port
Errors This field shows the number of received errors on this port.
Tx KB/s This field shows the transmission speed of data sent on this port in
kilobytes per second.
Rx KB/s This field shows the transmission speed of data received on this port in
kilobytes per second.
Up Time This field shows the total amount of time the connection has been up.
Tx Packet
The following fields display detailed information about packets transmitted.
TX Packets This field shows the number of good packets (unicast, multicast and
broadcast) transmitted.
Multicast This field shows the number of good multicast packets transmitted.
BroadcastThis field shows the number of good broadcast packets transmitted.
Pause This field shows the number of 802.3x Pause packets transmitted.
Rx Packet
The following fields display detailed information about packets received.
RX
Packets
Multicast This field shows the number of good multicast packets received.
BroadcastThis field shows the number of good broadcast packets received.
Pause This field shows the number of 802.3x Pause packets received.
Control This field shows the number of control packets received (including those
TX Collision
The following fields display information on collisions while transmitting.
This field shows the number of good packets (unicast, multicast and
broadcast) received.
with CRC error) but it does not include the 802.3x Pause packets.
60
GS2200-48 User’s Guide
Chapter 6 System Status and Port Statistics
Table 9 Status > Port Details (continued)
LABEL DESCRIPTION
Single This is a count of successfully tr ansmitted packets for which transmission is
inhibited by exactly one collision.
Multiple This is a count of successfully transmitted packets for which transmission
was inhibited by more than one collision.
ExcessiveThis is a count of packets for which transmission failed due to excessive
collisions. Excessive collision is defined as the number of maximum
collisions before the retransmission count is reset.
Late This is the number of times a late collision is detected, that is, after 512
bits of the packets have already been transmitted.
Error Packet The following fields display detailed information about packets received
that were in error.
RX CRC This field shows the number of packets received with CRC (Cyclic
Redundant Chec k) error(s).
Length This field shows the number of packets received with a length that was out
of range.
Runt This field shows the number of packets received that were too short
(shorter than 64 octets), including the ones with CRC errors.
Distribution
64 This field shows the number of packets (including bad packets) received
that were 64 octets in length.
65 to
127
128 to
255
256 to
511
512 to
1023
1024 to
1518
Giant This field shows the number of packets dropped because they were bigger
This field shows the number of packets (including bad packets) received
that were between 65 and 127 octets in length.
This field shows the number of packets (including bad packets) received
that were between 128 and 255 octets in length.
This field shows the number of packets (including bad packets) received
that were between 256 and 511 octets in length.
This field shows the number of packets (including bad packets) received
that were between 512 and 1023 octets in length.
This field shows the number of packets (including bad packets) received
that were between 1024 and 1518 octets in length.
than the maximum frame size.
GS2200-48 User’s Guide
61
Chapter 6 System Status and Port Statistics
62
GS2200-48 User’s Guide
CHAPTER 7
Basic Setting
This chapter describes how to configure the System Info, General Setup,
Switch Setup, IP Setup and Port Setup screens.
7.1 Overview
The System Info screen displays general Switch information (such as firmware
version number) and hardware polling information (such as fan speeds). The
General Setup screen allows you to configure general Switch identification
information. The General Setup screen also allows you to set the system time
manually or get the current time and date from an external server when you turn
on your Switch. The real time is then displayed in the Switch logs. The Switch
Setup screen allows you to set up and configure global Switch features. The IP
Setup screen allows you to configure a Switch IP address in each routing domain,
subnet mask(s) and DNS (domain name server) for management purposes.
GS2200-48 User’s Guide
63
Chapter 7 Basic Setting
7.2 System Information
In the navigation panel, click Basic Setting > System Info to displa y the screen
as shown. You can check the firmware version number and monitor the Switch
temperature, fan speeds and voltage in this screen.
Figure 24 Basic Setting > System Info
64
The following table describes the labels in this screen.
Table 10 Basic Setting > System Info
LABEL DESCRIPTION
System
Name
Product
Model
ZyNOS F/W
Version
Ethernet
Address
Hardware Monitor
Temperature
Unit
This field displays the descriptive name of the Switch for identification
purposes. You can configure this name in the Basic Setting > General
Setup screen.
This field displays the model name of the Switch.
This field displays the version number of the Switch 's current firmware
including the date created.
This field refers to the Ethernet MAC (Media Access Control) address of the
Switch.
The Switch has temperature sensors that are capable of detecting and
reporting if the temperature rises above the threshold. You may choose
the temperature unit (Centigrade or Fahrenheit) in this field.
GS2200-48 User’s Guide
Chapter 7 Basic Setting
Table 10 Basic Setting > System Info (continued)
LABEL DESCRIPTION
Temperature MAC, CPU, and PHY refer to the location of the temperature sensors on
the Switch printed circuit board.
Current This shows the current temperature at this sensor.
MAX This field displays the maximum temperature measured at this sensor.
MIN This field displays the minimum temperature measured at this sensor.
Threshold This field displays the upper temperature limit at this sensor.
Status This field displays Normal for temper atures below the threshold and Error
for those above.
Fan Speed
(RPM)
Current This field displays this fan's current speed in Revolutions P er Minute (RPM).
MAX This field displays this fan's maximum speed measured in RPM.
MIN This field displays this fan's minimum speed measured in RPM. “<41" is
Threshold This field displays the minimum speed at which a normal fan should work.
Status Normal indicates that this fan is functioning above the minimum speed.
Voltage (V) The power supply for each voltage has a sensor that is capable of
Current This is the current voltage reading.
MAX This field displays the maximum voltage measured at this point.
MIN This field displays the minimum voltage measured at this point.
Threshold This field displays the percentage tolerance of the voltage with which the
Status Normal indicates that the voltage is within an acceptable operating range
A properly functioning fan is an essential component (along with a
sufficiently ventilated, cool operating environment) in order for the device
to stay within the temperature threshold. Each fan has a sensor that is
capable of detecting and reporting if the fan speed falls below the
threshold shown.
displayed for speeds too small to measure (under 2000 RPM).
Error indicates that this fan is functioning below the minimum speed.
detecting and reporting if the voltage falls out of the tolerance range.
Switch still works.
at this point; otherwise Error is displayed.
GS2200-48 User’s Guide
This field may also display Absent in the field corresponding to the backup
power supply (BPS_12V), if the backup power supply is not in use.
65
Chapter 7 Basic Setting
7.3 General Setup
Use this screen to configure general settings such as the system name and time.
Click Basic Setting and General Setup in the navigation panel to display the
screen as shown.
Figure 25 Basic Setting > General Setup
The following table describes the labels in this screen.
Table 11 Basic Setting > General Setup
LABEL DESCRIPTION
System Name Type a descriptive name for identification purposes. This name consists
of up to 64 printable characters; spaces are allowed.
Location Type the geographic location of your Switch. You can use up to 32
printable ASCII characters; spaces are allowed.
Contact
Person's Name
Type the name of the person in charge of this Switch. You can use up to
32 printable ASCII characters; spaces are allowed.
66
GS2200-48 User’s Guide
Chapter 7 Basic Setting
Table 11 Basic Setting > General Setup (continued)
LABEL DESCRIPTION
Use Time
Server when
Bootup
Time Server IP
Address
Current Time This field displays the time you open this menu (or refresh the menu).
New Time
(hh:min:ss)
Current Date This field displays the date you open this menu.
New Date
(yyyy-mm-dd)
Time Zone Select the time difference between UTC (Universal Time Coordinated,
Daylight
Saving Time
Type the time service protocol that your timeserver uses. Not all time
servers support all protocols, so you may have to use trial and error to
find a protocol that works. The main differences between them are the
time format.
When you select the Daytime (RFC 867) format, the Switch displays
the day, month, year and time with no time zone adjustment. When you
use this format, it is recommended that you use a Daytime timeserver
within your geographical time zone.
Time (RFC-868) format displays a 4-byte integer giving the total
number of seconds since 1970/1/1 at 0:0:0.
NTP (RFC-1305) is similar to Time (RFC-868).
None is the default value. Enter the time manually. Each time you turn
on the Switch, the time and date will be reset to 1970-1-1 0:0.
Type the IP address of your timeserver. The Switch searches for the
timeserver for up to 60 seconds. If you select a timeserver that is
unreachable, then this screen will appear locked for 60 seconds. Please
wait.
Enter the new time in hour, minute and second format. The new time
then appears in the Current Time field after you click Apply.
Enter the new date in year, month and day format. The new date then
appears in the Current Date field after you click Apply.
formerly known as GMT, Greenwich Mean Time) and your time zone from
the drop-down list box.
Daylight saving is a period from late spring to early fall when many
countries set their clocks ahead of normal local time by one hour to give
more daytime light in the evening.
Start Date Configure the day and time when Daylight Saving Time starts if you
GS2200-48 User’s Guide
Select this option if you use Daylight Saving Time.
selected Daylight Saving Time. The time is displayed in the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time starts in most parts of the United States on the
second Sunday of March. Each time zone in the United States starts
using Daylight Saving Time at 2 A.M. local time. So in the United States
you would select Second, Sunday, March and 2:00.
Daylight Saving Time starts in the European Union on the last Sunday of
March. All of the time zones in the European Union start using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, March and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
67
Chapter 7 Basic Setting
Table 11 Basic Setting > General Setup (continued)
LABEL DESCRIPTION
End Date Configure the day and time when Daylight Saving Time ends if you
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
selected Daylight Saving Time. The time field uses the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time ends in the United States on the first Sunday of
November. Each time zone in the United States stops using Daylight
Saving Time at 2 A.M. local time. So in the United States you would
select First, Sunday, November and 2:00.
Daylight Saving Time ends in the European Union on the last Sunday of
October. All of the time zones in the European Union stop using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, October and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
7.4 Introduction to VLANs
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the netw ork resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user on the same
network.
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. Wit h VLAN, all
broadcasts are confined to a specific broadcast domain.
Note: VLAN is unidirectional; it only governs outgoing traffic.
See Chapter 8 on page 79 for information on port-based and 802.1Q tagged
VLANs.
68
GS2200-48 User’s Guide
7.5 Switch Setup Screen
Click Basic Setting and then Switch Setup in the navigation panel to display the
screen as shown. The VLAN setup screens change depending on whether you
choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to the
chapter on VLAN.
Figure 26 Basic Setting > Switch Setup
Chapter 7 Basic Setting
The following table describes the labels in this screen.
Table 12 Basic Setting > Switch Setup
LABEL DESCRIPTION
VLAN Type Choose 802.1Q or Port Based. The VLAN Setup screen changes
depending on whether you choose 802.1Q VLAN type or Port Based
VLAN type in this screen. See Chapter 8 on page 79 for more
information.
Bridge Control
Protocol
Transparency
MAC Address
Learning
Aging Time Enter a time from 10 to 3000 seconds. This is how long all dynamically
GARP Timer: Switches join VLANs by making a declaration. A declaration is made by
issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set declaration
timeout values. See Section 8.1 on page 79 for more background information.
Select Active to allow the Switch to handle bridging control protocols
(STP, for example). You also need to define how to treat a BPDU in the
Port Setup screen.
MAC address learning reduces outgoing traffic broadcasts. For MAC
address learning to occur on a port, the port must be active.
learned MAC addresses remain in the MAC address table before they age
out (and must be relearned).
GS2200-48 User’s Guide
69
Chapter 7 Basic Setting
Table 12 Basic Setting > Switch Setup (continued)
LABEL DESCRIPTION
Join Timer Join Timer sets the duration of the Join Period timer for GVRP in
Leave Timer Leave Time sets the dur ation of the Leave Period timer for GVRP in
Leave All
Timer
Priority Queue Assignment
IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-layer
frame that contains bits to define class of service. Frames without an explicit priority tag
are given the default priority of the ingress port. Use the following fields to configure the
priority level-to-physical queue mapping.
The Switch has eight physical queues that you can map to the 8 priority levels. On the
Switch, traffic assigned to higher index queues gets through faster while traffic in lower
index queues is dropped if the network is congested.
Priority Level (The following descriptions are based on the traffic types defined in the IEEE
802.1d standard (which incorporates the 802.1p).
Level 7 Typically used for network control traffic such as router configuration
Level 6 Typically used for v oice traffic that is especially sensitive to jitter (jitter is
Level 5 Typically used for video that consumes high bandwidth and is sensitive to
Level 4 Typically used for controlled load, latency-sensitive traffic such as SNA
Level 3 Typically used for “excellent effort” or better than best effort and would
Level 2 This is for “spare bandwidth”.
Level 1 This is typically used for non-critical “background” traffic such as bulk
Level 0 Typically used for best-effort traffic.
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
milliseconds. Each port has a Join Period timer. The allowed Join Time
range is between 100 and 65535 milliseconds; the default is 200
milliseconds. See Section 8.1 on page 79 for more background
information.
milliseconds. Each port has a single Leave Period timer. Leave Time
must be two times larger than Join Timer; the default is 600
milliseconds.
Leave All Timer sets the duration of the Leave All P eriod timer for GVRP in
milliseconds. Each port has a single Leave All Period timer. Leave All
Timer must be larger than Leave Timer.
messages.
the variations in delay).
jitter.
(Systems Network Architecture) transactions.
include important business traffic that can tolerate some delay.
transfers that are allowed but that should not affect other applications
and users.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
70
GS2200-48 User’s Guide
7.6 IP Setup
Use the IP Setup screen to configure the default gateway device, the default
domain name server and add IP domains.
7.6.1 IP Interfaces
The Switch needs an IP address for it to be managed over the network. The
factory default in-band IP address is 192.168.1.1. The subnet mask specifies the
network number portion of an IP address. The factory default subnet mask is
255.255.255.0.
On the Switch, an IP address is not bound to any physical ports. Since each IP
address on the Switch must be in a separate subnet, the configured IP address is
also known as IP interface (or routing domain). In addition, this allows routing
between subnets based on the IP address without additional routers.
You can configure multiple routing domains on the same VLAN as long as the IP
address ranges for the domains do not overlap. To change the IP address of the
Switch in a routing domain, simply add a new routing domain entry with a
different IP address in the same subnet.
Chapter 7 Basic Setting
Figure 27 Basic Setting > IP Setup
GS2200-48 User’s Guide
71
Chapter 7 Basic Setting
The following table describes the labels in this screen.
Table 13 Basic Setting > IP Setup
LABEL DESCRIPTION
Default
Gateway
Domain
Name Server
Default
Management
Management IP Address
Type the IP address of the default outgoing gateway in dotted decimal
notation, for example 192.168.1.254.
DNS (Domain Name System) is for mapping a domain name to its
corresponding IP address and vice versa. Enter a domain name server IP
address in order to be able to use a domain name instead of an IP address.
Specify which traffic flow (In-Band or Out-of-band) the Switch is to send
packets originating from itself (such as SNMP traps) or packets with
unknown source.
Select Out-of-band to have the Switch send the packets to the
management port labelled MGMT. This means that device(s) connected to
the other port(s) do not receive these packets.
Select In-Band to have the Switch send the packets to all ports except the
management port (labelled MGMT) to which connected device(s) do not
receive these packets.
Use these fields to set the settings for the out-of-band management port.
IP
Address
IP Subnet
Mask
Default
Gateway
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to reset the fields to your previous configuration.
IP Interface
Use these fields to create or edit IP routing domains on the Switch.
IP
Address
IP Subnet
Mask
VID Enter the VLAN identification number to which an IP routing domain
Add Click Add to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to reset the fields to your previous configuration.
Index This field displays the index number of an entry.
IP Address This field displays IP address of the Switch in the IP domain.
Enter the out-of-band management IP address of your Switch in dotted
decimal notation. For example, 192.168.0.1.
Enter the IP subnet mask of your Switch in dotted decimal notation, for
example, 255.255.255.0.
Enter the IP address of the default outgoing gateway in dotted decimal
notation, for example, 192.168.0.254
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Enter the IP address of your Switch in dotted decimal notation, for
example, 192.168.1.1. This is the IP address of the Switch in an IP routing
domain.
Enter the IP subnet mask of an IP routing domain in dotted decimal
notation, for example, 255.255.255.0.
belongs.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
72
GS2200-48 User’s Guide
Table 13 Basic Setting > IP Setup (continued)
LABEL DESCRIPTION
IP Subnet
Mask
VID This field displays the VLAN identification number of the IP domain on the
Delete Click Delete to remove the selected entry from the summary table.
This field displays the subnet mask of the Switch in the IP domain.
Switch.
Note: Deleting all IP subnets locks you out of the Switch.
Cancel Click Cancel to clear the Delete check boxes.
7.7 Port Setup
Use this screen to configure Switch port settings.Click Basic Setting > Port
Setup in the navigation panel to display the configuration screen.
Chapter 7 Basic Setting
Figure 28 Basic Setting > Port Setup
GS2200-48 User’s Guide
73
Chapter 7 Basic Setting
The following table describes the labels in this screen.
Table 14 Basic Setting > Port Setup
LABEL DESCRIPTION
Port This is the port index number.
* Settings in this row apply to all ports.
Active Select this check box to enable a port. The factory default for all ports is
Name Type a descriptive name that identifies this port. You can enter up to 64
Type This field displays 10/100/1000M for a 1000Base-T connection and the
Speed/
Duplex
Use this row only if you want to make some settings the same fo r all ports.
Use this row first to set the common settings and then make adjustments
on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
enabled. A port must be enabled for data transmission to occur.
alpha-numerical characters.
Note: Due to space limitations, the port name may be truncated in
some web configurator screens.
Dual Personality interfaces, and 1000M for Mini-GBIC uplink ports.
Select the speed and the duplex mode of the Ethernet connection on this
port. The choices are Auto, 10M/Half Duplex, 10M/Full Duplex,
100M/Half Duplex and 100M/Full Duplex for a 1000Base-T
connection. 1000M/Full Duplex is supported by both 1000Base-T
(copper) and 1000Base-X (fiber-optic) connections.
Selecting Auto (auto-negotiation) allows one port to negotiate with a peer
port automatically to obtain the connection speed and duplex mode that
both ends support. When auto-negotiation is turned on, a port on the
Switch negotiates with the peer automatically to determine the connection
speed and duplex mode. If the peer port does not support auto-negotiation
or turns off this feature, the Switch determines the connection speed by
detecting the signal on the cable and using half duplex mode. When the
Switch’s auto-negotiation is turned off, a port uses the pre-configured
speed and duplex mode when making a connection, thus requiring you to
make sure that the settings of the peer port are the same in order to
connect.
Flow Control A concentration of traffic on a port decreases port bandwidth and ov erflows
buffer memory causing packet discards and frame losses. Flow Control is
used to regulate transmission of signals to match the bandwidth of the
receiving port.
The Switch uses IEEE 802.3x flow control in full duplex mode and
backpressure flow control in half duplex mode.
IEEE 802.3x flow control is used in full duplex mode to send a pause signal
to the sending port, causing it to temporarily stop sending signals when
the receiving port memory buffers fill.
Back Pressure flow control is typically used in half duplex mode to send a
"collision" signal to the sending port (mimicking a state of packet collision)
causing the sending port to temporarily stop sending signals and resend
later. Select Flow Control to enable it.
74
GS2200-48 User’s Guide
Chapter 7 Basic Setting
Table 14 Basic Setting > Port Setup (continued)
LABEL DESCRIPTION
802.1p
Priority
BPDU
Control
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
This priority value is added to incoming frames without a (802.1p) priority
queue tag. See Priority Queue Assignment in Table 12 on page 69 for
more information.
Configure the way to treat BPDUs received on this port. You must activate
bridging control protocol transparency in the Switch Setup screen first.
Select Peer to process any BPDU (Bridge Protocol Data Units) received on
this port.
Select Tunnel to forward BPDUs received on this port.
Select Discard to drop any BPDU received on this port.
Select Network to process a BPDU with no VLAN tag and forward a tagged
BPDU.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
GS2200-48 User’s Guide
75
Chapter 7 Basic Setting
76
GS2200-48 User’s Guide
PART III
Advanced Setup
VLAN (79)
Static MAC Forward Setup (99)
Filtering (103)
Spanning Tree Protocol (105)
Bandwidth Control (123)
Broadcast Storm Control (127)
Mirroring (129)
Link Aggregation (131)
Port Authentication (139)
Port Security (145)
Classifier (149)
Policy Rule (157)
Queuing Method (165)
VLAN Stacking (169)
Multicast (175)
Authentication & Accounting (191)
IP Source Guard (205)
Loop Guard (231)
77
78
CHAPTER 8
VLAN
The type of screen you see here depends on the VLAN Type you selected in the
Switch Setup screen. This chapter shows you how to configure 802.1Q tagged
and port-based VLANs.
8.1 Introduction to IEEE 802.1Q Tagged VLANs
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
contains two bytes for the TPID (Tag Protocol Identifier, residing within the type/
length field of the Ethernet frame) and two bytes for the TCI (Tag Control
Information, starting after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a pr iority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and the value 4095 (FFF) is reserved, so the maximum possible
number of VLAN configurations is 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 bits
8.1.1 Forwarding Tagged and Untagged Frames
Each port on the Switch is capable of passing tagged or untagged frames. To
forward a frame from an 802.1Q VLAN-a ware switch to an 802.1Q VLAN-unaware
GS2200-48 User’s Guide
79
Chapter 8 VLAN
switch, the Switch first decides where to forward the fr ame and then strips off the
VLAN tag. To forward a frame from an 802.1Q VLAN-unaware switch to an 802.1Q
VLAN-aware switch, the Switch first decides where to forward the frame, and then
inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is
VLAN 1 for all ports, but this can be changed.
A broadcast frame (or a multicast frame for a multicast group that is known by the
system) is duplicated only on ports that are members of the VID (except the
ingress port itself), thus confining the broadcast to a specific domain.
8.2 Automatic VLAN Registration
GARP and GVRP are the protocols used to automatically register VLAN
membership across switches.
8.2.1 GARP
GARP (Generic Attribute Registration Protocol) allows network switches to register
and de-register attribute values with other GARP participants within a bridged
LAN. GARP is a protocol that provides a generic mechanism for protocols that
serve a more specific application, for example, GVRP.
8.2.1.1 GARP Timers
Switches join VLANs by making a declaration. A declaration is made by issuing a
Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set
declaration timeout values.
8.2.2 GVRP
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a
way for switches to register necessary VLAN members on ports across the
network. Enable this function to permit VLAN groups beyond the local Switch.
Please refer to the following table for common IEEE 802.1Q VLAN terminology.
Table 15 IEEE 802.1Q VLAN Terminology
VLAN
PARAMETER
VLAN Type Permanent VLAN This is a static VLAN created manually.
TERM DESCRIPTION
80
Dynamic VLAN This is a VLAN configured by a GVRP registration/
deregistration process.
GS2200-48 User’s Guide
Chapter 8 VLAN
Table 15 IEEE 802.1Q VLAN Terminology (continued)
VLAN
PARAMETER
VLAN
Administrative
Control
VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all
VLAN Port Port VID This is the VLAN ID assigned to untagged frames
TERM DESCRIPTION
Registration Fixed Fixed registration ports are permanent VLAN
members.
Registration
Forbidden
Normal
Registration
Untagged Ports belonging to the specified VLAN don't tag all
Acceptable Frame
Type
Ingress filtering If set, the Switch discards incoming frames for
Ports with registration forbidden are forbidden to
join the specified VLAN.
Ports dynamically join a VLAN using GVRP.
outgoing frames transmitted.
outgoing frames transmitted.
that this port received.
You may choose to accept both tagged and
untagged incoming frames, just tagged incoming
frames or just untagged incoming frames on a
port.
VLANs that do not have this port as a member.
8.3 Port VLAN Trunking
Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN
groups to pass through that port. This is useful if you w ant to set up VL AN groups
on end devices without having to configure the same VLAN groups on
intermediary devices.
The following figure describes VLAN Trunking. Suppose you want to create VLAN
groups 1 and 2 (V1 and V2) on devices A and B. Without VLAN Trunking, you
must configure VLAN groups 1 and 2 on all intermediary switches C, D and E;
otherwise they will drop frames with unknown VLAN group tags. However, with
VLAN Trunking enabled on a port(s) in each intermediary switch you only need
to create VLAN groups in the end devices (A and B). C, D and E automatically
GS2200-48 User’s Guide
81
Chapter 8 VLAN
allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to
those switches) to pass through their VLAN trunking port(s).
Figure 29 Port VLAN Trunking
8.4 Select the VLAN Type
Select a VLAN type in the Basic Setting > Switch Setup screen.
Figure 30 Switch Setup: Select VLAN Type
8.5 Static VLAN
Use a static VLAN to decide whether an incoming frame on a port should be
• sent to a VLAN group as normal depending on its VLAN tag.
• sent to a group whether it has a VLAN tag or not.
• blocked from a VLAN group regardless of its VLAN tag.
You can also tag all outgoing frames (that were previously untagged) from a port
with the specified VID.
82
GS2200-48 User’s Guide
8.5.1 Static VLAN Status
See Section 8.1 on page 79 for more information on Static VLAN. Click Advanced
Application > VLAN from the navigation panel to display the VLAN Status
screen as shown next.
Figure 31 Advanced Application > VLAN: VLAN Status
The following table describes the labels in this screen.
Chapter 8 VLAN
Table 16 Advanced Application > VLAN: VLAN Status
LABEL DESCRIPTION
The Number
of VLAN
Index This is the VLAN index number. Click on an index number to view more
VID This is the VLAN identification number that was configured in the Static
Elapsed Time This field shows how long it has been since a normal VLAN was registered
Status This field shows how this VLAN was added to the Switch; dynamic -
Change Pages Click Previous or Next to show the previous/next screen if all status
This is the number of VLANs configured on the Switch.
VLAN details.
VLAN screen.
or a static VLAN was set up.
using GVRP, static - added as a permanent entry or other - added in
another way such as via Multicast VLAN Registration (MVR).
information cannot be seen in one screen.
GS2200-48 User’s Guide
83
Chapter 8 VLAN
8.5.2 Static VLAN Details
Use this screen to view detailed port settings and status of the VLAN group. See
Section 8.1 on page 79 for more information on static VLAN. Click on an index
number in the VLAN Status screen to display VLAN details.
Figure 32 Advanced Application > VLAN > VLAN Detail
The following table describes the labels in this screen.
Table 17 Advanced Application > VLAN > VLAN Detail
LABEL DESCRIPTION
VLAN Status Click this to go to the VLAN Status screen.
VID This is the VLAN identification number that was configured in the Static
VLAN screen.
Port Number This column displays the ports that are participating in a VLAN. A tagged
port is marked as T, an untagged port is marked as U and ports not
participating in a VLAN are marked as “–“.
Elapsed Time This field shows how long it has been since a normal VLAN was registered
or a static VLAN was set up.
Status This field shows how this VLAN was added to the Switch; dynamic -
using GVRP, static - added as a permanent entry or other - added in
another way such as via Multicast VLAN Registration (MVR).
8.5.3 Configure a Static VLAN
Use this screen to configure and view 802.1Q VLAN parameters for the Switch.
See Section 8.1 on page 79 for more information on static VLAN. To configure a
84
GS2200-48 User’s Guide
Chapter 8 VLAN
static VLAN, click Static VLAN in the VLAN Status screen to display the screen
as shown next.
Figure 33 Advanced Application > VLAN > Static VLAN
The following table describes the related labels in this screen.
Table 18 Advanced Application > VLAN > Static VLAN
LABEL DESCRIPTION
ACTIVE Select this check box to activate the VLAN settings.
Name Enter a descriptive name for the VLAN group for identification purposes.
This name consists of up to 64 printable characters; spaces are allowed.
VLAN Group IDEnter the VLAN ID for this static entry; the valid range is between 1 and
4094.
Port The port number identifies the port you are configuring.
* Settings in this row apply to all ports.
Use this row only if you want to make some settings the same for all
ports. Use this row first to set the common settings and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
GS2200-48 User’s Guide
85
Chapter 8 VLAN
Table 18 Advanced Application > VLAN > Static VLAN (continued)
LABEL DESCRIPTION
Control Select Normal for the port to dynamically join this VLAN group using
Tagging Select TX Tagging if you want the port to tag all outgoing frames
Add Click Add to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
Clear Click Clear to start configuring the screen again.
VID This field displays the ID number of the VLAN group. Click the number to
Active This field indicates whether the VLAN settings are enabled (Yes) or
Name This field displays the descriptive name for this VLAN group.
Delete Click Delete to remove the selected entry from the summary table.
Cancel Click Cancel to clear the Delete check boxes.
GVRP. This is the default selection.
Select Fixed for the port to be a permanent member of this VLAN group.
Select Forbidden if you want to prohibit the port from joining this VLAN
group.
transmitted with this VLAN Group ID.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
edit the VLAN settings.
disabled (No).
86
GS2200-48 User’s Guide
8.5.4 Configure VLAN Port Settings
Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q)
settings on a port. See Section 8.1 on page 79 for more information on static
VLAN. Click the VLAN Port Setting link in the VLAN Status screen.
Figure 34 Advanced Application > VLAN > VLAN Port Setting
Chapter 8 VLAN
The following table describes the labels in this screen.
Table 19 Advanced Application > VLAN > VLAN Port Setting
LABEL DESCRIPTION
GVRP GVRP (GARP VLAN Registration Protocol) is a registration protocol that
defines a way for switches to register necessary VLAN members on
ports across the network.
Select this check box to permit VLAN groups beyond the local Switch.
Port Isolation Port Isolation allows each port to communicate only with the CPU
management port and the uplink ports but not communicate with each
other. This option is the most limiting but also the most secure.
Port This field displays the port number.
* Settings in this row apply to all ports.
Use this row only if you want to make some settings the same for all
ports. Use this row first to set the common settings and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the port s as soon as yo u
make them.
GS2200-48 User’s Guide
87
Chapter 8 VLAN
Table 19 Advanced Application > VLAN > VLAN Port Setting (continued)
LABEL DESCRIPTION
Ingress Check If this check box is selected for a port, the Switch discards incoming
PVID Enter a number between 1and 4094 as the port VLAN ID.
GVRP Select this check box to allow GVRP on this port.
Acceptable
Frame Type
VLAN Trunking Enable VLAN Trunking on ports connected to other switches or routers
Apply Click Apply to save your changes to the Switch’ s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
frames for VLANs that do not include this port in its member set.
Clear this check box to disable ingress filtering.
Specify the type of frames allowed on a port. Choices are All, Tag Only
and Untag Only.
Select All from the drop-down list box to accept both untagged or
tagged frames on this port. This is the default setting.
Select Tag Only to accept only tagged frames on this port. All untagged
frames will be dropped.
Select Untag Only to accept only untagged frames on this port.
(but not ports directly connected to end users) to allow frames
belonging to unknown VLAN groups to pass through the Switch.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
8.6 Subnet Based VLANs
Subnet based VLANs allow you to group traffic into logical VLANs based on the
source IP subnet you specify. When a frame is received on a port, the Switch
checks if a tag is added already and the IP subnet it came from. The untagged
packets from the same IP subnet are then pl aced in the same subnet based VLAN.
One advantage of using subnet based VLANs is that priority can be assigned to
traffic from the same IP subnet.
For example, an ISP (Internet Service Provider) may divide different types of
services it provides to customers into different IP subnets. Traffic for voice
services is designated for IP subnet 172.16.1.0/24, video for 192.168.1.0/24 and
data for 10.1.1.0/24. The Switch can then be configured to group incoming t r af fic
based on the source IP subnet of incoming frames.
You can then configure a subnet based VLAN with priority 6 and VID of 100 for
traffic received from IP subnet 172.16.1.0/24 (voice services). You can also have
a subnet based VLAN with priority 5 and VID of 200 for traffic received from IP
subnet 192.168.1.0/24 (video services). Lastly, you can configure VLAN with
priority 3 and VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data
88
GS2200-48 User’s Guide
Chapter 8 VLAN
services). All untagged incoming frames will be clas sified based on their source IP
subnet and prioritized accordingly. That is, video services receive the highest
priority and data the lowest.
Figure 35 Subnet Based VLAN Application Example
Tagged Frames
Internet
Untagged
Frames
172.16.1.0/24
VID = 100
192.168.1.0/24
VID = 200
10.1.1.0/24
VID = 300
8.7 Configuring Subnet Based VLAN
Click Subnet Based VLAN in the VLAN Port Setting screen to display the
configuration screen as shown.
GS2200-48 User’s Guide
89
Chapter 8 VLAN
Note: Subnet based VLAN applies to un-tagged packets and is applicable only when
Figure 36 Advanced Application > VLAN > VLAN Port Setting > Subnet Based
you use IEEE 802.1Q tagged VLAN.
VLAN
The following table describes the labels in this screen.
T able 20 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN
LABEL DESCRIPTION
Active Check this box to activate this subnet based VLANs on the Switch.
DHCP-Vlan
Override
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Active Check this box to activate the IP subnet VLAN you are creating or editing.
Name Enter up to 32 alphanumeric characters to identify this subnet based VLAN.
IP Enter the IP address of the subnet for which you want to configure this
Mask-Bits Enter the bit number of the subnet mask. To find the bit number, convert
When DHCP snooping is enabled DHCP clients can renew their IP address
through the DHCP VLAN or via another DHCP server on the subnet based
VLAN.
Select this checkbox to force the DHCP clients in this IP subnet to obtain
their IP addresses through the DHCP VLAN.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
subnet based VLAN.
the subnet mask to binary format and add all the 1’s together. Take
“255.255.255.0” for example. 255 converts to eight 1s in binary. There are
three 255s, so add three eights together and you get the bit number (24).
90
GS2200-48 User’s Guide
Chapter 8 VLAN
T able 20 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN
(continued)
LABEL DESCRIPTION
VID Enter the ID of a VLAN with which the untagged frames from the IP subnet
specified in this subnet based VLAN are tagged. This must be an existing
VLAN which you defined in the Advanced Applications > VLAN screens.
Priority Select the priority level that the Switch assigns to frames belonging to this
VLAN.
Add Click Add to save your changes to the Switch’s run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Index This is the index number identifying this subnet based VLAN. Click on any
of these numbers to edit an existing subnet based VLAN.
Active This field shows whether the subnet based VLAN is active or not.
Name This field shows the name the subnet based VLAN.
IP This field shows the IP address of the subnet for this subnet based VLAN.
Mask-Bits This field shows the subnet mask in bit number format for this subnet
based VLAN.
VID This field shows the VLAN ID of the frames which belong to this subnet
based VLAN.
Priority This field shows the priority which is assigned to frames belonging to this
subnet based VLAN.
Delete Click this to delete the subnet based VLANs which you marked for deletion.
Cancel Click Cancel to begin configuring this screen afresh.
8.8 Protocol Based VLANs
Protocol based VLANs allow you to group traffic into logical VLANs based on the
protocol you specify. When an upstream frame is received on a port (configured
for a protocol based VLAN), the Switch checks if a tag is added already and its
protocol. The untagged packets of the same protocol are then placed in the same
protocol based VLAN. One advantage of using protocol based VLANs is that priorit y
can be assigned to traffic of the same protocol.
Note: Protocol based VLAN applies to un-tagged packet s and is applicable only when
you use IEEE 802.1Q tagged VLAN.
For example, ports 1, 2, 3 and 4 belong to static VLAN 100, and ports 4, 5, 6, 7
belong to static VLAN 120. Y ou can configure a protocol based VLAN A wi th priority
3 for ARP traffic received on port 1, 2 and 3. You can also have a protocol based
VLAN B with priority 2 for Apple Talk traffic received on port 6 and 7. All upstream
ARP traffic from port 1, 2 and 3 will be grouped together, and all upstream Apple
GS2200-48 User’s Guide
91
Chapter 8 VLAN
Talk traffic from port 6 and 7 will be in another group and have higher priority than
ARP traffic when they go through the uplink port to a backbone switch C.
Figure 37 Protocol Based VLAN Application Example
8.9 Configuring Protocol Based VLAN
Click Protocol Based VLAN in the VLAN Port Setting screen to display the
configuration screen as shown.
Figure 38 Advanced Application > VLAN > VLAN Port Setting > Protocol Based
VLAN
92
GS2200-48 User’s Guide
Chapter 8 VLAN
The following table describes the labels in this screen.
Table 21 Advanced Application > VLAN > VLAN Port Setting > Protocol Based
VLAN Setup
LABEL DESCRIPTION
Active Check this box to activate this protocol based VLAN.
Port Type a port number to be included in this protocol based VLAN.
This port must belong to a static VLAN in order to participate in a protocol
based VLAN. See Chapter 8 on page 79 for more details on setting up
VLANs.
Name Enter up to 32 alphanumeric characters to identify this protocol based
VLAN.
Ethernet-
type
Use the drop down list box to select a predefined protocol to be included in
this protocol based VLAN or select Others and type the protocol number in
hexadecimal notation. For example, the IP protocol in hexadecimal
notation is 0800, and Novell IPX protocol is 8137.
Note: Protocols in the hexadecimal number range of 0x0000 to 0x05ff
are not allowed to be used for protocol based VLANs.
VID Enter the ID of a VLAN to which the port belongs. This must be an existing
VLAN which you defined in the Advanced Applications > VLAN screens.
Priority Select the priority level that the Switch will assign to frames belonging to
this VLAN.
Add Click Add to save your changes to the Switch’s run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Index This is the index number identifying this protocol based VLAN. Click on any
of these numbers to edit an existing protocol based VLAN.
Active This field shows whether the protocol based VLAN is active or not.
Port This field shows which port belongs to this protocol based VLAN.
Name This field shows the name the protocol based VLAN.
Ethernet-
type
VID This field shows the VLAN ID of the port.
Priority This field shows the priority which is assigned to frames belonging to this
Delete Click this to delete the protocol based VLANs which you marked for
Cancel Click Cancel to begin configuring this screen afresh.
This field shows which Ethernet protocol is part of this protocol based
VLAN.
protocol based VLAN.
deletion.
GS2200-48 User’s Guide
93
Chapter 8 VLAN
8.10 Create an IP-based VLAN Example
This example shows you how to create an IP VLAN which includes ports 1, 4 and
8. Follow these steps using the screen below:
1 Activate this protocol based VLAN.
2 Type the port number you want to include in this protocol based VLAN. Type 1.
3 Give this protocol-based VLAN a descriptive name. Type IP-VLAN.
4 Select the protocol. Leave the default value IP.
5 T ype the VLAN ID of an existing VLAN. In our example we already created a static
VLAN with an ID of 5. Type 5.
6 Leave the priority set to 0 and click Add.
Figure 39 Protocol Based VLAN Configuration Example
94
example
To add more ports to this protocol based VLAN.
1 Click the index number of the protocol based VLAN entry. Click 1
2 Change the value in the Port field to the next port you want to add.
3 Click Add.
GS2200-48 User’s Guide
8.11 Port-based VLAN Setup
Port-based VLANs are VLANs where the packet forwarding decision i s based on the
destination MAC address and its associated port.
Port-based VLANs require allowed outgoing ports to be defined for each port.
Therefore, if you wish to allow two subscriber ports to talk to each other, for
example, between conference rooms in a hotel, you must define the egress (an
egress port is an outgoing port, that is, a port through which a data packet leaves)
for both ports.
Port-based VLANs are specific only to the Switch on which they were created.
Note: When you activate port-based VLAN, the Switch uses a default VLAN ID of 1.
You cannot change it.
Note: In screens (such as IP Setup and Filtering) that require a VID, you must enter
1 as the VID.
Chapter 8 VLAN
The port-based VLAN setup screen is shown next. The CPU management port
forms a VLAN with all Ethernet ports.
8.11.1 Configure a Port-based VLAN
Select Port Based as the VLAN Type in the Switch Setup screen and then click
VLAN from the navigation panel to display the following screen. Select either All
Connected or Port Isolated from the drop-down list depending on your VLAN
and VLAN security requirements. If VLAN members need to communicate directly
with each other, then select All Connected. Select Port Isolated if you want to
restrict users from communicating directly. Click Apply to save your settings.
GS2200-48 User’s Guide
95
Chapter 8 VLAN
The following screen shows users on a port-based, all-connected VLAN
configuration.
Figure 40 Advanced Application > VLAN > Port Based VLAN Setup (All Connected)
96
GS2200-48 User’s Guide
Chapter 8 VLAN
The following screen shows users on a port-based, port-isolated VLAN
configuration.
Figure 41 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation)
GS2200-48 User’s Guide
97
Chapter 8 VLAN
The following table describes the labels in this screen.
Table 22 Advanced Application > VLAN: Port Based VLAN Setup
LABEL DESCRIPTION
Setting
Wizard
Incoming These are the ingress ports; an ingress port is an incoming port, that is, a
Outgoing These are the egress ports. An egress port is an outgoing port, that is, a
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
Choose All connected or Port isolation.
All connected means all ports can communicate with each other, that is,
there are no virtual LANs. All incoming and outgoing ports are selected.
This option is the most flexible but also the least secure.
Port isolation means that each port can only communicate with the CPU
management port and cannot communicate with each other. All incoming
ports are selected while only the CPU outgoing port is selected. This option
is the most limiting but also the most secure.
After you make your selection, click Apply (top right of screen) to display
the screens as mentioned above. You can still customize these settings by
adding/deleting incoming or outgoing ports, but you must also click Apply
at the bottom of the screen.
port through which a data packet enters. If you wish to allow two
subscriber ports to talk to each other, you must define the ingress port for
both ports. The numbers in the top row denote the incoming port for the
corresponding port listed on the left (its outgoing port). CPU refers to the
Switch management port. By default it forms a VLAN with all Ethernet
ports. If it does not form a VLAN with a particular port then the Switch
cannot be managed from that port.
port through which a data packet leaves. If you wish to allow two
subscriber ports to talk to each other, you must define the egress port for
both ports. CPU refers to the Switch management port. By default it forms
a VLAN with all Ethernet ports. If it does not form a VLAN with a particular
port then the Switch cannot be managed from that port.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the non-
volatile memory when you are done configuring.
98
GS2200-48 User’s Guide
CHAPTER 9
Static MAC Forward Setup
Use these screens to configure static MAC address forwarding.
9.1 Overview
This chapter discusses how to configure forwarding rules based on MAC addresses
of devices on your network.
9.2 Configuring Static MAC Forwarding
A static MAC address is an address that has been manually entered in the MAC
address table. Static MAC addresses do not age out. When you set up static MAC
address rules, you are setting static MAC addresses for a port. This may reduce
the need for broadcasting.
Static MAC address forwarding together with port security allows only computers
in the MAC address table on a port to access the Switch. See Chapter 17 on page
145 for more information on port security.
GS2200-48 User’s Guide
99
Chapter 9 Static MAC Forward Setup
Click Advanced Applications > Static MAC Forwarding in the navi gation panel
to display the configuration screen as shown.
Figure 42 Advanced Application > Static MAC Forwarding
The following table describes the labels in this screen.
Table 23 Advanced Application > Static MAC Forwarding
LABEL DESCRIPTION
Active Select this check box to activ ate your rule. Y ou may tempor arily deactivate
a rule without deleting it by clearing this check box.
Name Enter a descriptive name for identification purposes for this static MAC
address forwarding rule.
MAC Address Enter the MAC address in valid MAC address format, that is, six
hexadecimal character pairs.
Note: Static MAC addresses do not age out.
VID Enter the VLAN identification number.
Port Enter the port where the MAC address entered in the previous field will be
automatically forwarded.
Add Click Add to save your rule to the Switch’s run-time memory. The Switch
loses this rule if it is turned off or loses power, so use the Save link on the
top navigation panel to save your changes to the non-volatile memory
when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Clear Click Clear to reset the fields to the factory defaults.
Index C lick an index number to modify a static MAC address rule for a port.
Active This field displays whether this static MAC address forwarding rule is active
(Yes) or not (No). You may temporarily deactiv ate a rule without deleting
it.
Name This field displays the descriptive name for identification purposes for this
static MAC address-forwarding rule.
MAC Address This field displays the MAC address that will be forwarded and the VLAN
identification number to which the MAC address belongs.
VID This field displays the ID number of the VLAN group.
100
GS2200-48 User’s Guide
Loading...