XGS-4728F
Intelligent Layer 3+ Switch
Default Login Details
IP Address http://192.168.0.1
(Out-of-band
MGMT port)
http://192.168.1.1
(In-band ports)
User Name admin
Password 1234
Firmware Version 3.90
Edition 2, 04/2010
www.zyxel.com
www.zyxel.com
Copyright © 2010
ZyXEL Communications Corporation
About This User's Guide
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the Switch using the
web configurator.
Related Documentation
• Web Configurator Online Help
The embedded Web Help contains descriptions of individual screens and
supplementary information.
• Command Reference Guide
The Command Reference Guide explains how to use the Command-Line
Interface (CLI) and CLI commands to configure the Switch.
Note: It is recommended you use the web configurator to configure the Switch.
• Support Disc
Refer to the included CD for support documents.
Documentation Feedback
Send your comments, questions or suggestions to: techwriters@zyxel.com.tw
Thank you!
The Technical Writing Team , ZyXEL Communications Corp.,
6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan.
Need More Help?
More help is available at www.zyx el.com.
XGS-4728F User’s Guide
3
About This User's Guide
• Download Library
Search for the latest product updates and documentation from this link. Read
the Tech Doc Overview to find out how to efficiently use the User Guide, Quick
Start Guide and Command Line Interface Reference Guide in order to better
understand how to use your product.
• Knowledge Base
If you have a specific question about your product, the answer may be here.
This is a collection of answers to previously asked questions about ZyXEL
products.
•Forum
This contains discussions on ZyXEL prod ucts. Learn from others who use ZyXEL
products and share your experiences as well.
Customer Support
Should problems arise that cannot be solved by the methods listed above, you
should conta ct your vendor. If you cannot contact your vendor, then contact a
ZyXEL office for the region in which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please
have the following informatio n ready when you contact an office.
• Product model and serial number.
•Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
4
XGS-4728F User’s Guide
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The XGS-4728F may be referred to as the “Switch”, the “device”, the “system”
or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example,
[ENTER] means the “enter” or “ret urn” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the
[ENTER] key. “Select” or “choose” means for you to use one of the predefined
choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For
example, Maintenance > Log > Log Setting means you first click
Maintenance in the navigation panel, then the Log sub menu and finally the
Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value.
For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may
denote “1000000” or “1048576” and so on.
XGS-4728F User’s Guide
5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The S witch icon is
not an exact representation of your device.
The Switch Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router
6
XGS-4728F User’s Guide
Safety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• For continued protection against risk of fire replace only with same type and rating of
fuse.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power
source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
Your product is m arked with this symbol, which is known as the WEEE mark. WEEE
stands for Waste Electronics and Electrical Equipment. It means that used electrical
and electronic products should not be mixed with general waste. Used electrical
and electronic equipment should be treated separately.
XGS-4728F User’s Guide
7
Safety Warnings
8
XGS-4728F User’s Guide
Contents Overview
Contents Overview
Introduction ............................................................................................................................23
Getting to Know Your Switch .....................................................................................................25
Hardware Installation and Connection ................................... ................................. ................... 31
Hardware Overview ................................................................................................................... 35
Basic Configuration ...............................................................................................................43
The Web Configurator ............................................................................................................... 45
Initial Setup Example ................................................................................................................. 55
Tutorials ..................................................................................................................................... 61
System Status and Port Statistics .................................... ..........................................................71
Basic Setting ............................................................................................................................. 77
Advanced Setup .....................................................................................................................93
VLAN ......................................................................................................................................... 95
Static MAC Forward Setup .......................................................................................................115
Static Multicast Forward Setup .................................................................................................119
Filtering ..................................... .................................................... ........................................... 123
Spanning Tree Protocol ................... ... ... ... ... .... ........................................................................ 125
Bandwidth Control .... ... ... .... ... ... ... ............................................................................................ 145
Broadcast Storm Control ......................................................................................................... 149
Mirroring .................................................................................................................................. 151
Link Aggregation ................. .....................................................................................................153
Port Authentication ...... ... .... ... ..................................................................................................163
Port Security .................................... ... ... ... ............................................. .... ... ... ... .... ... ..............169
Classifier ................................... .................................................... ........................................... 173
Policy Rule .............................................................................................................................. 179
Queuing Method ...................................................................................................................... 187
VLAN Stacking ......................................................................................................................... 191
Multicast ..................................................................................................................................199
AAA ......................................................................................................................................... 215
IP Source Guard ...................................................................................................................... 231
Loop Guard ..................... .... ... ... ............................................. .... ... ... ... ... .... ... ... ... .... .................255
VLAN Mapping ........................................................................................................................ 259
Layer 2 Protocol Tunneling .............. ... ... ... ... .... ... ... ... .... ... ... ... .................................................. 263
Private VLAN ............................ ... .... ... ... ... ............................................. .... ... ... ... ..................... 267
XGS-4728F User’s Guide
9
Contents Overview
IP Application .......................................................................................................................271
Static Route ............................................................................................................................. 273
RIP ............................... .................... ................... ................... .................... ..............................275
OSPF .............................. .................................................... ..................................................... 277
IGMP .......................................................................................................................................291
DVMRP ..................................... ....................... ...................... ....................... ........................... 295
Differentiated Services ........................................ ... ... .... ... ... ... .... ... ........................................... 299
DHCP ...................................................................................................................................... 307
VRRP .............................. .................... ................... .................... ................... ........................... 317
Management .........................................................................................................................327
Maintenance ............................................................................................................................ 329
Access Control ........................................................................................................................ 337
Diagnostic .................................... ....................................................... ..................................... 357
Syslog ....................................... .................................................... ........................................... 359
Cluster Management .......... ... ................................................ .... ... ... ........................................ 363
MAC Table ............................................................................................................................... 371
IP Table .................................. ... ... .... ... ... ... ............................................. .... ... ... ... .... .................375
ARP Table .............................. ... ... .... ... ... ... ............................................. .... ... ... ... .... ... ..............379
Routing Table ........................................................................................................................... 381
Configure Clone ....................................................................................................................... 383
Troubleshooting & Product Specifications .......................................................................385
Troubleshooting ..................................................... .................................................................. 387
Product Specifications ............................................................................................................. 393
Appendices and Index .........................................................................................................403
10
XGS-4728F User’s Guide
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
Part I: Introduction................................................................................. 23
Chapter 1
Getting to Know Your Switch.................................................................................................25
1.1 Introduction ......................... ... .... ... ... ... ............................................. .... ... ... ... .... ... ... .............25
1.1.1 Bridging Example ......... .... ... ... ... ... .... ... ... ... .... ................................................ ... ... .... ... 25
1.1.2 High Performance Switching Example .......................................................................26
1.1.3 Gigabit Ethernet to the Desktop ................................................................................. 27
1.1.4 IEEE 802.1Q VLAN Application Example .................................................................. 27
1.2 Ways to Manage the Switch ............................ ... .............................................. ... ... ... ... .... ... 28
1.3 Good Habits for Managing the Switch ................................................................................. 28
Chapter 2
Hardware Installation and Connection .................................................................................31
2.1 Freestanding Installation ..................................................................................................... 31
2.2 Mounting the Switch on a Rack .......................................................................................... 32
2.2.1 Rack-mounted Installation Requirements .................................................................. 32
2.2.2 Attaching the Mounting Brackets to the Switch ................................ .......................... 32
2.2.3 Mounting the Switch on a Rack .................................................................................. 33
Chapter 3
Hardware Overview.................................................................................................................35
3.1 Front Panel Connections ... ... .... ... ... ... ... .... ... ................................................ .... ... ................ 35
3.1.1 Dual Personality Interfaces ........................................................................................ 35
3.1.2 1000Base-T Ports ...................................................................................................... 36
3.1.3 Mini-GBIC Slots .........................................................................................................36
3.2 Rear Panel .................... ... ............................................. ... .... ... ... ... ... .................................... 38
3.2.1 Power Connector ................................................... .... ... ... ... ... .... ... ... .......................... 39
XGS-4728F User’s Guide
11
Table of Contents
3.2.2 External Backup Power Supply Connector ................................................................ 41
3.2.3 Console Port ......................................................... .... ... ... ... ... .... ... ... .......................... 41
3.3 LEDs ................................................................................................................................ 41
Part II: Basic Configuration................................................................... 43
Chapter 4
The Web Configurator............................................................................................................45
4.1 Introduction ......................... ... .... ... ... ... ............................................. .... ... ... ... .... ... ... .............45
4.2 System Login ....................................................................................................................45
4.3 The Status Screen .......................................................................................................... 46
4.3.1 Change Your Password .......................................................................................... 51
4.4 Saving Your Configuration ...................................................................................................51
4.5 Switch Lockout .............................................. ... .... ... ... ............................................. .......... 52
4.6 Resetting the Switch ............................... ... ... ... .............................................. ... ... ... ... ....... 52
4.6.1 Reload the Configuration File .................................................................................... 52
4.7 Logging Out of the Web Configurator ................................................................................. 54
4.8 Help ................................................... ... .... ... ... ............................................. .... ... ................54
Chapter 5
Initial Setup Example..............................................................................................................55
5.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 55
5.1.1 Configuring an IP Interface ........................................................................................55
5.1.2 Configuring DHCP Server Settings .. ... ....................................................................... 57
5.1.3 Creating a VLAN ........................................................................................................ 57
5.1.4 Setting Port VID .................................................. ... .... ... ... ..........................................59
5.1.5 Enabling RIP ................ .... ... ... ............................................. ... .... ... ... ... .... ... ... ... ... .......60
Chapter 6
Tutorials...................................................................................................................................61
6.1 How to Use DHCP Snooping on the Switch ........................................................................ 61
6.2 How to Use DHCP Relay on the Switch .............................................................................. 65
6.2.1 DHCP Relay Tutorial Introduction .............................................................................. 65
6.2.2 Creating a VLAN ........................................................................................................ 66
6.2.3 Configuring DHCP Relay .............................................. ... ... ....................................... 69
6.2.4 Troubleshooting ............................................... ... ... .... ... ... ... ....................................... 69
Chapter 7
System Status and Port Statistics.........................................................................................71
12
7.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 71
7.2 Port Status Summary ............................................................................................ ... ....... 71
XGS-4728F User’s Guide
Table of Contents
7.2.1 Status: Port Details ................................................................................................73
Chapter 8
Basic Setting ..........................................................................................................................77
8.1 Overview ............. ............................................. ... .... ... ... ... .... ................................................ 77
8.2 System Information ........................................................................................................... 78
8.3 General Setup ................................................................................................. ... ... .......... 80
8.4 Introduction to VLANs ........... .... ... ....................................................................................... 82
8.4.1 Smart Isolation ................. ... ... ............................................. ... .... ... ... ... .... ... ... ... ... .......83
8.5 Switch Setup Screen ... ... ... ... .... .......................................................................................... 84
8.6 IP Setup ............................................................................................................................ 86
8.6.1 IP Interfaces .......... ... ... .... ... ... ............................................. ... .... ... ... ... .... ... ................ 86
8.7 Port Setup ................ .... ... ... ............................................. .... ... ... ... ... .... ................................ 89
Part III: Advanced Setup........................................................................ 93
Chapter 9
VLAN........................................................................................................................................95
9.1 Introduction to IEEE 802.1Q Tagged VLANs .................................................................. 95
9.1.1 Forwarding Tagged and Untagged Frames ................................................................ 95
9.2 Automatic VLAN Registration ................................ ... ... ... .... ... ... ... ... .................................... 96
9.2.1 GARP . .... ... ... ... .... ... ... ............................................. .... ... ... .......................................... 96
9.2.2 GVRP . .... ... ... ... .... ... ... ............................................. .... ... ... .......................................... 96
9.3 Port VLAN Trunking ........... ............................................. .... ... ... ... ... .... ................................ 97
9.4 Select the VLAN Type .... ... ... .... ... ............................................. ... ... .... ... ... ... .... ... ... ... ..........98
9.5 Static VLAN . .... ... ... ... .............................................. ... ... ... .... ................................................ 98
9.5.1 VLAN Status ..............................................................................................................99
9.5.2 VLAN Details ................................ .... ... ... ... .... ... ... ............................................. ... .... . 100
9.5.3 Configure a Static VLAN ...................................................................................... 100
9.5.4 Configure VLAN Port Settings .............................................................................. 102
9.6 Subnet Based VLANs .......................................................................................................103
9.7 Configuring Subnet Based VLAN ..... ................................................. ... ... ........................ 104
9.8 Protocol Based VLANs ...................................... .... ... ........................................................106
9.9 Configuring Protocol Based VLAN ............................................. ... .... ... ... ... .... ... ... ... ........107
9.10 Create an IP-based VLAN Example ................................................................................ 109
9.11 Port-based VLAN Setup ................................................................................................110
9.11.1 Configure a Port-based VLAN ................................................................................110
Chapter 10
Static MAC Forward Setup...................................................................................................115
10.1 Overview ...........................................................................................................................115
XGS-4728F User’s Guide
13
Table of Contents
10.2 Configuring Static MAC Forwarding ............................................................................115
Chapter 11
Static Multicast Forward Setup............................................................................................119
11.1 Static Multicast Forwarding Overview ...............................................................................119
11.2 Configuring Static Multicast Forwarding ........................................................................... 120
Chapter 12
Filtering..................................................................................................................................123
12.1 Configure a Filtering Rule ..............................................................................................123
Chapter 13
Spanning Tree Protocol........................................................................................................125
13.1 STP/RSTP Overview ..................................................................................................... 125
13.1.1 STP Terminology ................................................................................................... 125
13.1.2 How STP Works .................................................................................................... 126
13.1.3 STP Port States .....................................................................................................127
13.1.4 Multiple RSTP ......................................................................................................127
13.1.5 Multiple STP ........................................................................................................... 128
13.2 Spanning Tree Protocol Status Screen ............................................................................ 131
13.3 Spanning Tree Configuration ..........................................................................................131
13.4 Configure Rapid Spanning Tree Protocol ..................................................................... 132
13.5 Rapid Spanning Tree Protocol Status ........................................................................... 134
13.6 Configure Multiple Rapid Spanning Tree Protocol ........................................................ 136
13.7 Multiple Rapid Spanning Tree Protocol Status .......................................................... 138
13.8 Configure Multiple Spanning Tree Protocol .................................................................. 140
13.9 Multiple Spanning Tree Protocol Status .....................................................................143
Chapter 14
Bandwidth Control................................................................................................................145
14.1 Bandwidth Control Overview ......................................................................................... 145
14.1.1 CIR and PIR ........................................................................................................... 145
14.2 Bandwidth Control Setup ................................................................................................. 146
Chapter 15
Broadcast Storm Control.....................................................................................................149
15.1 Broadcast Storm Control Setup ...................................................................................... 149
Chapter 16
Mirroring................................................................................................................................151
16.1 Port Mirroring Setup ....................................................................................................... 151
Chapter 17
Link Aggregation ..................................................................................................................153
14
XGS-4728F User’s Guide
Table of Contents
17.1 Link Aggregation Overview ........................ ....................... ...................... ....................... . 153
17.2 Dynamic Link Aggregation ..............................................................................................153
17.2.1 Link Aggregation ID ............................................................................................... 154
17.3 Link Aggregation Status ....................................................... .......................... .................155
17.4 Link Aggregation Setting ................................................................................................ 157
17.5 Link Aggregation Control Protocol ................................................................................ 159
17.6 Static Trunking Example ..................................................................................................160
Chapter 18
Port Authentication...............................................................................................................163
18.1 Port Authentication Overview ......................................................................................... 163
18.1.1 IEEE 802.1x Authentication ................................................................................... 163
18.1.2 MAC Authentication ............................................................................................... 164
18.2 Port Authentication Configuration ............................ ....................................................... .165
18.2.1 Activate IEEE 802.1x Security ........................................................................... 166
18.2.2 Activate MAC Authentication ................................................................................. 167
Chapter 19
Port Security..........................................................................................................................169
19.1 About Port Security ..........................................................................................................169
19.2 Port Security Setup .............................. ....................... ....................... ................... ........... 170
19.3 VLAN MAC Address Limit .............................................................................................. 171
Chapter 20
Classifier................................................................................................................................173
20.1 About the Classifier and QoS .......................................................................................... 173
20.2 Configuring the Classifier ...............................................................................................173
20.3 Viewing and Editing Classifier Configuration ................................. .................................. 176
20.4 Classifier Example ...........................................................................................................178
Chapter 21
Policy Rule............................................................................................................................179
21.1 Policy Rules Overview ....................................................................................................179
21.1.1 DiffServ .................................................................................................................. 179
21.1.2 DSCP and Per-Hop Behavior ................................................................................. 179
21.2 Configuring Policy Rules ................................................................................................. 180
21.3 Viewing and Editing Policy Configuration ........................................................................ 183
21.4 Policy Example ................................................................................................................ 185
Chapter 22
Queuing Method....................................................................................................................187
22.1 Queuing Method Overview ............................................................................................. 187
22.1.1 Strictly Priority ........................................................................................................187
XGS-4728F User’s Guide
15
Table of Contents
22.1.2 Weighted Fair Queuing .......................................................................................... 187
22.1.3 Weighted Round Robin Scheduling (WRR) ........................................................... 188
22.2 Configuring Queuing ........................................................................................................ 189
Chapter 23
VLAN Stacking......................................................................................................................191
23.1 VLAN Stacking Overview ................................................................................................ 191
23.1.1 VLAN Stacking Example ........................................................................................ 191
23.2 VLAN Stacking Port Roles ................ ... .... ........................................................................ 192
23.3 VLAN Tag Format .......... ..................................................................................................193
23.3.1 Frame Format ........................................................................................................193
23.4 Configuring VLAN Stacking ............................................................................................. 194
23.4.1 Port-based Q-in-Q .................................................................................................. 195
23.4.2 Selective Q-in-Q .................................................................................................... 196
Chapter 24
Multicast ................................................................................................................................199
24.1 Multicast Overview ......................................................................................................... 199
24.1.1 IP Multicast Addresses ........................................................................................... 199
24.1.2 IGMP Filtering ........................................................................................................ 199
24.1.3 IGMP Snooping ..................................................................................................... 200
24.1.4 IGMP Snooping and VLANs ................................................................................... 200
24.2 Multicast Status .............................................................................................................. 200
24.3 Multicast Setting .............. ... .... ... ................................................ ... .... .............................. 201
24.4 IGMP Snooping VLAN .................................................................................................... 203
24.5 IGMP Filtering Profile ..................................................................................................... 205
24.6 MVR Overview ................................................................................................................ 207
24.6.1 Types of MVR Ports ............................................................................................... 207
24.6.2 MVR Modes ........................................................................................................... 208
24.6.3 How MVR Works .................................................................................................... 208
24.7 General MVR Configuration ............................................................................................ 209
24.8 MVR Group Configuration ...............................................................................................211
24.8.1 MVR Configuration Example ... ... .... ... ..................................................................... 212
Chapter 25
AAA........................................................................................................................................215
25.1 Authentication, Authorization and Accounting (AAA) ...................................................... 215
25.1.1 Local User Accounts .................. .... ... ... ... .... ... ................................................ ... .... . 216
25.1.2 RADIUS and TACACS+ ........................................................................................ 216
25.2 AAA Screens ................................................................................................................... 216
25.2.1 RADIUS Server Setup .......................................................................................... 217
25.2.2 TACACS+ Server Setup ..................................................................................... 219
25.2.3 AAA Setup .............................................................................................................. 221
16
XGS-4728F User’s Guide
Table of Contents
25.2.4 Vendor Specific Attribute ........................................................................................ 224
25.2.5 Tunnel Protocol Attribute ........................................................................................ 225
25.3 Supported RADIUS Attributes ......................................................................................... 226
25.3.1 Attributes Used for Authentication ............................ ............ .......... .......... ......... ..... 226
25.3.2 Attributes Used for Accounting ............................................................................... 227
Chapter 26
IP Source Guard ....................................................................................................................231
26.1 IP Source Guard Overview .............................................................................................. 231
26.1.1 DHCP Snooping Overview ..................................................................................... 232
26.1.2 ARP Inspection Overview ...................................................................................... 234
26.2 IP Source Guard .............................................................................................................. 235
26.3 IP Source Guard Static Binding ....................................................................................... 236
26.4 DHCP Snooping .............................................................................................................. 238
26.5 DHCP Snooping Configure ...................... ........................................................................ 241
26.5.1 DHCP Snooping Port Configure ............................................................................. 243
26.5.2 DHCP Snooping VLAN Configure .......................................................................... 244
26.6 ARP Inspection Status .....................................................................................................246
26.6.1 ARP Inspection VLAN Status .................................................................................247
26.6.2 ARP Inspection Log Status .................................................................................... 248
26.7 ARP Inspection Configure ............................................................................................... 249
26.7.1 ARP Inspection Port Configure .............................................................................. 251
26.7.2 ARP Inspection VLAN Configure ........................................................................... 253
Chapter 27
Loop Guard............................................................................................................................255
27.1 Loop Guard Overview .....................................................................................................255
27.2 Loop Guard Setup ...........................................................................................................257
Chapter 28
VLAN Mapping ......................................................................................................................259
28.1 VLAN Mapping Overview ............................................................................................... 259
28.1.1 VLAN Mapping Example ........................................................................................ 259
28.2 Enabling VLAN Mapping ................................................................................................. 260
28.3 Configuring VLAN Mapping ............................................................................................. 261
Chapter 29
Layer 2 Protocol Tunneling..................................................................................................263
29.1 Layer 2 Protocol Tunneling Overview ............................................................................. 263
29.1.1 Layer 2 Protocol Tunneling Mode .......................................................................... 264
29.2 Configuring Layer 2 Protocol Tunneling .................................................................. ... .... . 265
Chapter 30
Private VLAN.........................................................................................................................267
XGS-4728F User’s Guide
17
Table of Contents
30.1 Private VLAN Overview .................................................................................................. 267
30.2 Configuring Private VLAN ................................................................................................ 268
Part IV: IP Application.......................................................................... 271
Chapter 31
Static Route...........................................................................................................................273
31.1 Configuring Static Routing ............................................................................................. 273
Chapter 32
RIP..........................................................................................................................................275
32.1 RIP Overview ................................................................................................................... 275
32.2 Configuring RIP ............................................................................................................... 275
Chapter 33
OSPF......................................................................................................................................277
33.1 OSPF Overview .............................................................................................................. 277
33.1.1 OSPF Autonomous Systems and Areas . .... ... ... ... .... .............................................. 277
33.1.2 How OSPF Works ... ............................................. .... ... ... ... ... .... ... ........................... 278
33.1.3 Interfaces and Virtual Links .................................................................................... 278
33.1.4 OSPF and Router Elections ...................................................................................279
33.1.5 Configuring OSPF .................................................................................................279
33.2 OSPF Status ................................................................................................................. 280
33.3 OSPF Configuration .......................................................................................................282
33.4 Configure OSPF Areas ................................................................................................... 283
33.4.1 View OSPF Area Information Table ....................................................................... 284
33.5 Configuring OSPF Redistribution ................................................................................... 285
33.6 Configuring OSPF Interfaces .......................................................................................... 286
33.7 OSPF Virtual-Links ....................................................................................................... 288
Chapter 34
IGMP.......................................................................................................................................291
34.1 IGMP Overview ............................................................................................................... 291
34.1.1 How IGMP Works ................. ... ... .... ... ... ... .... ... ............................................. ... ... .... . 292
34.2 Port-based IGMP ............................................................................................................. 293
34.3 Configuring IGMP ............................................................................................................ 294
Chapter 35
DVMRP...................................................................................................................................295
35.1 DVMRP Overview ............................................................................................................295
35.2 How DVMRP Works ... ... ... ... .... ... ... ... ... .... ... ... ... .... ................................................ ... ... .....295
18
XGS-4728F User’s Guide
Table of Contents
35.2.1 DVMRP Terminology ............................................................................................. 296
35.3 Configuring DVMRP ....................................................................................................... 296
35.3.1 DVMRP Configuration Error Messages ........................................... .... ... ... ... ........297
35.4 Default DVMRP Timer Values ........................................................................................ 298
Chapter 36
Differentiated Services.........................................................................................................299
36.1 DiffServ Overview ...........................................................................................................299
36.1.1 DSCP and Per-Hop Behavior ................................................................................. 299
36.1.2 DiffServ Network Example .................................................................................... 300
36.2 Two Rate Three Color Marker Traffic Policing ................................................................. 300
36.2.1 TRTCM - Color-blind Mode .................................................................................... 301
36.2.2 TRTCM - Color-aware Mode .......................................... ........................................ 301
36.3 Activating DiffServ .......................................................................................................... 302
36.3.1 Configuring 2-Rate 3 Color Marker Settings ......................................................... 303
36.4 DSCP-to-IEEE 802.1p Priority Settings ....... .............................................. ... ... ... ... .....305
36.4.1 Configuring DSCP Settings ............................ .......................................... .............. 306
Chapter 37
DHCP......................................................................................................................................307
37.1 DHCP Overview ............................................................................................................. 307
37.1.1 DHCP Modes ........................................................................................................307
37.1.2 DHCP Configuration Options ................................................................................. 307
37.2 DHCP Status ................................................................................................................... 308
37.3 DHCP Server Status Detail ............................................................................................. 308
37.4 DHCP Relay ....... ... .... ... ... ... .... ... ... ... ... ............................................................................ 310
37.4.1 DHCP Relay Agent Information ............................................................................. 310
37.4.2 Configuring DHCP Global Relay .............................................................................311
37.4.3 Global DHCP Relay Configuration Example .......................................................... 312
37.5 Configuring DHCP VLAN Settings ................................................................................ 313
37.5.1 Example: DHCP Relay for Two VLANs .................................................................. 315
Chapter 38
VRRP......................................................................................................................................317
38.1 VRRP Overview .............................................................................................................. 317
38.2 VRRP Status .................................................................................................................... 318
38.3 VRRP Configuration .......................................................................................................319
38.3.1 IP Interface Setup ................................................................................................. 319
38.3.2 VRRP Parameters ................................................................................................. 321
38.3.3 Configuring VRRP Parameters .............................................................................. 322
38.3.4 Configuring VRRP Parameters .............................................................................. 323
38.4 VRRP Configuration Examples ...................................................................................... 323
38.4.1 One Subnet Network Example ..............................................................................324
XGS-4728F User’s Guide
19
Table of Contents
38.4.2 Two Subnets Example ........................................................................................... 325
Part V: Management............................................................................. 327
Chapter 39
Maintenance..........................................................................................................................329
39.1 The Maintenance Screen ................................. .... ... ... ... .... ............................................. . 329
39.2 Load Factory Default ...................................................................................................... 330
39.3 Save Configuration .......................................................................................................... 330
39.4 Reboot System ................................................................................................................ 331
39.5 Firmware Upgrade ........................................................................................................... 331
39.6 Restore a Configuration File ....................... ....................................................... ..............332
39.7 Backup a Configuration File ............................................................................................ 333
39.8 FTP Command Line ........................................................................................................ 333
39.8.1 Filename Conventions .......................................................................................... 333
39.8.2 FTP Command Line Procedure ............................................................................ 334
39.8.3 GUI-based FTP Clients .......................................................................................... 335
39.8.4 FTP Restrictions .................................................................................................... 335
Chapter 40
Access Control......................................................................................................................337
40.1 Access Control Overview ............................................................................................ 337
40.2 The Access Control Main Screen .................................................................................... 337
40.3 About SNMP .................................................................................................................. 338
40.3.1 SNMP v3 and Security ........................................................................................... 339
40.3.2 Supported MIBs ................................................................................................... 339
40.3.3 SNMP Traps .......................................................................................................... 340
40.3.4 Configuring SNMP .............................................................................................. 344
40.3.5 Configuring SNMP Trap Group ...........................................................................346
40.3.6 Setting Up Login Accounts ...................................................................................347
40.4 SSH Overview ................................................................................................................. 348
40.5 How SSH works ................ ... ............................................................................................ 349
40.6 SSH Implementation on the Switch ................................................................................. 350
40.6.1 Requirements for Using SSH .................................................................................350
40.7 Introduction to HTTPS .....................................................................................................350
40.8 HTTPS Example .............................................................................................................. 351
40.8.1 Internet Explorer Warning Messages ..................................................................... 351
40.8.2 Netscape Navigator Warning Messages ................................................................ 352
40.8.3 The Main Screen .................................................................................................... 354
40.9 Service Port Access Control ......................................................................................... 354
40.10 Remote Management ............................................................................................... 355
20
XGS-4728F User’s Guide
Table of Contents
Chapter 41
Diagnostic..............................................................................................................................357
41.1 Diagnostic ....................................................................................................................... 357
Chapter 42
Syslog....................................................................................................................................359
42.1 Syslog Overview .............................................................................................................. 359
42.2 Syslog Setup .................................................................................................................. 360
42.3 Syslog Server Setup ....................................................................................................... 361
Chapter 43
Cluster Management.............................................................................................................363
43.1 Clustering Management Status Overview ...................................................................... 363
43.2 Cluster Management Status ........................................................................................... 364
43.2.1 Cluster Member Switch Management ................................................................... 365
43.3 Clustering Management Configuration .......................................................................... 368
Chapter 44
MAC Table..............................................................................................................................371
44.1 MAC Table Overview ...................................................................................................... 371
44.2 Viewing the MAC Table ....................................................................................................372
Chapter 45
IP Table ..................................................................................................................................375
45.1 IP Table Overview ...........................................................................................................375
45.2 Viewing the IP Table ........................................................................................................376
Chapter 46
ARP Table..............................................................................................................................379
46.1 ARP Table Overview .......................................................................................................379
46.1.1 How ARP Works ......................................................... ... ... ... .... ... ... ........................ 379
46.2 Viewing the ARP Table ................................................................................................... 380
Chapter 47
Routing Table........................................................................................................................381
47.1 Overview .......................................................................................................................... 381
47.2 Viewing the Routing Table Status ................................................................................... 381
Chapter 48
Configure Clone....................................................................................................................383
48.1 Configure Clone ..............................................................................................................383
XGS-4728F User’s Guide
21
Table of Contents
Part VI: Troubleshooting & Product Specifications.......................... 385
Chapter 49
Troubleshooting....................................................................................................................387
49.1 Power, Hardware Connections, and LEDs .............................. ... ... .... ... ... ... .... ... ... ... ........387
49.2 Switch Access and Login .................................................................................................388
49.3 Switch Configuration ........................................................................................................391
Chapter 50
Product Specifications.........................................................................................................393
Part VII: Appendices and Index.......................................................... 403
Appendix A Common Services.............................................................................................405
Appendix B Legal Information..............................................................................................409
Index.......................................................................................................................................413
22
XGS-4728F User’s Guide
PART I
Introduction
Getting to Know Your Switch (25)
Hardware Installation and Connection
(31)
Hardware Overview (35)
23
24
CHAPTER 1
Getting to Know Your Switch
This chapter introduces the main features and applications of the Switch.
1.1 Introduction
Your Switch is a stand-alone, layer-3, Gigabit Ethernet (GbE) switch with two 12
Gigabit stacking ports as well as support for an optional 2-port 10 Gigabit uplink
module. By integrating router functions, the Switch performs wire-speed layer-3
routing in addition to layer-2 switching.
The Switch comes with 24 GbE dual personality interfaces. A dual personality
interface includes one Gigabit port and one slot for a mini-GBIC transceiver (SFP
module) with one port active at a time.
There are two XGS-4728F models. The XGS-4728F DC model requires DC power
supply input of -36 VDC to -72 VDC, 1.5 A Max no tolerance. The XGS-4728F AC
model requires 100 VAC to 240 VAC, 0.8 A power.
With its built-in web configurat or, managing and configuring the Switch is easy. In
addition, the Switch can also be managed via Telnet, any terminal emulator
program on the console port, or third-party SNMP management.
See Chapter 50 on page 393 for a full list of software features available on the
Switch.
1.1.1 Bridging Example
In this example the Switch connects different company departments (RD and
Sales) to the corporate backbone. It can alleviate bandwidth contention and
eliminate server and network bottlenecks. All users that need high bandwidth can
connect to high-speed department servers via the Switch. You can provide a
XGS-4728F User’s Guide
25
Chapter 1 Getting to Know Your Switch
super-fast uplink connection by using the optional 10 Gigabit uplink module on the
Switch.
Figure 1 Bridging Application
Backbone
RD
Sales
1.1.2 High Performance Switching Example
The Switch is ideal for connecting two geographically dispersed networks that
need high bandwidth. In the following example, a company uses the optional 10
Gigabit uplink modules to connect the headquarters to a branch office network.
Within the headquarters network, a company can use trunking to group several
physical ports into one logical hig h er-capacity link. Trunking can be used if for
example, it is cheaper to use multiple lower-speed links than to under-utilize a
high-speed, but more costly, single-port link.
Figure 2 High Performance Switching
10 Gbps
Trunk
26
Branch
HQ
XGS-4728F User’s Guide
1.1.3 Gigabit Ethernet to the Desktop
The Switch is an ideal solution for small networks which demand high bandwidth
for a group of heavy traffic users. Y ou can conn ect computers an d servers directly
to the Switch’s port or connect other switches to the Switch. Use the optional 10
Gigabit uplink module to provide high speed access to a data server and the
Internet. The uplink module supports a fiber-optic connection which alleviates the
distance limitations of copper cabling.
In this example, all computers can share high-speed applications on the server
and access the Internet. To expand the network, simply add more networking
devices such as switches, routers, computers, print servers and so on.
Figure 3 Gigabit to the Desktop
Internet
Chapter 1 Getting to Know Your Switch
1.1.4 IEEE 802.1Q VLAN Application Example
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Stations on a logical network belong to one or more
groups. With VLAN, a station cannot directly talk to or hear from stations that are
not in the same group(s) unless such traffic first goes through a router.
For more information on VLANs, refer to Chapter 9 on page 95.
1.1.4.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain, thus
increasing network performance by reducing broadcast traffic. VLAN groups can
be modified at any time by adding, moving or changing ports without any recabling.
XGS-4728F User’s Guide
27
Chapter 1 Getting to Know Your Switch
Shared resources such as a server can be used by all ports in the same VLAN as
the server. In the following figure only ports that need access to the server need
to be part of VLAN 1. Ports can belong to other VLAN groups too.
Figure 4 Shared Server Using VLAN Example
1.2 Ways to Manage the Switch
Use any of the following methods to manage the Switch.
• Web Co nfigurator. This is recommended for ev eryday management of the S witch
using a (supported) web browser. See Chapter 4 on page 45.
• Command Line Interface. Line commands offer an alternative to the Web
Configurator and may be necessary to configure advanced features. See the CLI
Reference Guide.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/
restore. See Section 39.8 on page 333.
• SNMP. The device can be monitored and/or managed by an SNMP manager. See
Section 40.3 on page 338.
1.3 Good Habits for Managing the Switch
Do the following things regularly to make the Switch more secure and to manage
the Switch more effectively.
28
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
XGS-4728F User’s Guide
Chapter 1 Getting to Know Your Switch
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget y our password, you will hav e to reset the
Switch to its factory default settings. If you backed up an earlier configuration
file, you would not have to totally re-configure the Switch. You could simply
restore your last configuration.
XGS-4728F User’s Guide
29
Chapter 1 Getting to Know Your Switch
30
XGS-4728F User’s Guide
CHAPTER 2
Hardware Installation and
Connection
This chapter shows you how to install and connect the Switch.
2.1 Freestanding Installation
1 Make sure the Switch is clean and dry.
2 Set the Switch on a smooth, level surface strong enough to support the weight of
the Switch and the connected cables. Make sure there is a power outlet nearby.
3 Make sure there is enough clearance around the Switch to allow air circulation and
the attachment of cables and the power cord.
4 Remove the adhesive backing from the rubber feet.
5 Attach the rubber feet to each corner on the bottom of the Switch. These rubber
feet help protect the Switch from shock or vibration and ensure space between
devices when stacking.
Figure 5 Attaching Rubber Feet
XGS-4728F User’s Guide
31
Chapter 2 Hardware Installation and Connection
Note: Do NOT block the ventilation holes. Leave space between devices when
stacking.
Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front
and 3.4 inches (8 cm) at the back of the Switch. This is especially important for
enclosed rack installations.
2.2 Mounting the Switch on a Rack
This section lists the rack mounting requirements and precautions and describes
the installation steps.
2.2.1 Rack-mounted Installation Requirements
• Two mounting brackets.
• Eight M3 flat head screws and a #2 Philips screwdriver.
• Four M5 flat head screws and a #2 Philips screwdriver.
Failure to use the proper screws may damage the unit.
2.2.1.1 Precautions
• Make sure the rack will safely sup port the combined weight of all the equipment
it contains.
• Make sure the position of the Switch does not make the rack unstable or topheavy. Tak e all necessary precautions to anchor the rack securely before
installing the unit.
2.2.2 Attaching the Mounting Brackets to the Switch
1 Position a mounting bracket on one side of the Switch, lining up the four screw
holes on the bracket with the screw holes on the side of the Switch.
Figure 6 Attaching the Mounting Brackets
32
XGS-4728F User’s Guide
Chapter 2 Hardware Installation and Conn ec t ion
2 Using a #2 Philips screwdriver, install the M3 flat head screws through the
mounting bracket holes into the Switch.
3 Repeat steps 1 and 2 to install the second mounting bracket on the other side of
the Switch.
4 You may now mount the Switch on a rack. Proceed to the next section.
2.2.3 Mounting the Switch on a Rack
1 Position a mounting br acket (that is already attached to the Switch) on one s ide of
the rack, lining up the two screw holes on the br ack et with the screw holes on the
side of the rack.
Figure 7 Mounting the Switch on a Rack
2 Using a #2 Philips screwdriver, install the M5 flat head screws through the
mounting bracket holes into the rack.
3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of
the rack.
XGS-4728F User’s Guide
33
Chapter 2 Hardware Installation and Connection
34
XGS-4728F User’s Guide
CHAPTER 3
Hardware Overview
This chapter describes the front panel and rear panel of the Switch and shows y ou
how to make the hardware connections.
3.1 Front Panel Connections
The figure below shows the front panel of the Switch.
Figure 8 Front Panel
The following table describes the ports.
Table 1 Panel Connections
CONNECTO
R
24 Dual
Personality
Interfaces
DESCRIPTION
Each interface has one 1000Base-T copper RJ-45 port and one mini-GBIC
(Gigabit Interface Converter) fiber port, with one port active at a time.
• 24 1000Base-T Ports:
Connect these ports to high-bandwidth backbone network Ethernet
switches using Category 5/5e/6 1000Base-T Ethernet cables.
Use an 8-wire Ethernet cable for Gigabit connections. Using a 4-wire
Ethernet cable limits your connection to 100 Mbps. Note that the
connection speed also depends on what the Ethernet device at the
other end can support.
• 24 Mini-GBIC Ports:
Use Small Form-Factor Pluggable (SFP) transceivers in these ports for
1000Base-X fiber-optic connections to backbone Ethernet switches.
3.1.1 Dual Personality Interfaces
There are 24 Dual Personality interfaces, comprising 24 1000Base-T/mini-GBIC
combo ports. For each interface y ou c an co nnect either to the 1000Base-T port or
the mini-GBIC port. The mini-GBIC ports have priori ty ov er the 1000Base-T ports.
XGS-4728F User’s Guide
35
Chapter 3 Hardware Overview
This means that if a mini-GBIC port and the corresponding 1000Base-T port are
connected at the same time, the 1000Base-T port will be disabled.
3.1.2 1000Base-T Ports
The Switch has 24 1000Base-T auto-negotiating, auto-crossover Ethernet ports.
In 100/1000 Mbps Gigabit Ethernet, the speed can be 100 Mbps or 1000 Mbps.
The duplex mode can be both half or full duplex at 100 Mbps and full duplex only
at 1000 Mbps.
An auto-negotiating port can detect and adjust to the optimum Ethernet speed
(100/1000 Mbps) and duplex mode (full duplex or half duplex) of the connected
device.
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straightthrough or crossover Ethernet cable.
3.1.2.1 Default Ethernet Settings
The factory default negotiation settings for the Ethernet ports on the Switch are:
• Speed: Auto
•Duplex: Auto
• Flow control: Off
3.1.3 Mini-GBIC Slots
These are 24 slots for Small Form-Factor Pluggable (SFP) transceivers. A
transceiver is a single unit that houses a transmitter and a receiver. Use a
transceiver to connect a fiber-optic cable to the Switch. The Switch does not come
with transceivers. You must use transceivers that comply with the Small FormFactor Pluggable (SFP) Transceiver MultiSource Agreement (MSA). See the SFF
committee’s INF-8074i specification Rev 1.0 for details.
You can change transceivers while the Switch is operating. You can use different
transceivers to connect to Ethernet switches with different types of fiber-optic
connectors.
• Type: SFP connection interface
36
• Connection speed: 1 Gigabit per second (Gbps)
To avoid possible eye injury, do not look into an operating fiberoptic module’s connectors.
XGS-4728F User’s Guide
3.1.3.1 Transceiver Installation
Use the following steps to install a mini GBIC transceiver (SFP or XFP module).
1 Insert the transceiver into the slot with the exposed section of PCB board facing
down.
Figure 9 Transceiver Installation Example
2 Press the transceiver firmly until it clicks into place.
Chapter 3 Hardware Overview
3 The Switch automatically detects the installed transceiver. Check the LEDs to
verify that it is functioning properly.
Figure 10 Installed Transceiver
3.1.3.2 Transceiver Removal
Use the following steps to remove a mini GBIC transceiver (SFP module).
1 Open the transceiver’s latch (latch styles vary).
Figure 11 Opening the Transceiver’s Latch Example
XGS-4728F User’s Guide
37
Chapter 3 Hardware Overview
2 Pull the transceiver out of the slot.
Figure 12 Transceiver Removal Example
3.2 Rear Panel
The following figures show the rear panels of the AC and DC power input model
switches. The rear panels contain:
• A connector for the backup power supply (A)
• An optional slot (B) for installing an EM-422 or EM-412 uplink module
• Two stacking ports (C)
• An RJ-45 out-of-band management port (D)
• An RS-232 management console port (E)
• A connector for the power receptacle (F)
•A power switch (G) (DC power input model only).
Figure 13 Rear Panel - AC Model
BDEFA
Figure 14 Rear Panel - DC Model
C
G
F
38
XGS-4728F User’s Guide
Chapter 3 Hardware Overview
The following figure shows the front panel of the EM-422 and EM-412 modules.
Figure 15 The Front Panel of the EM-422 and EM-412 Modules
EM-422
The following table describes the ports on the rear panel.
EM-412
Table 2 Panel Connections
CONNECTO
R
Optional two
XFP or CX4
Ports
Two stacking
ports
Management
Port
Console Port Only connect this port to your computer (using an RS-232 cable) if you
DESCRIPTION
These ports are available when you install an EM-422 or ES-412 in the
optional uplink module (B in the figure above). Both the EM-422 and ES412 are used to connect your switch to other high-speed Ethernet
switches for stacking in you network.
• For EM-422 connection: Use 10 Gigabit Small Form Factor Pluggable
(XFP) transceivers to connect 1000Base-X fiber-optic cables to these
ports. See Section 3.1.3.1 on page 37 and Section 3.1.3.2 on page 37
for information on installing and removing transceivers.
• For EM-412 connection: Use 10GBase-CX4 cables to connect to these
ports.
See the EM-422 and EM-412 User’s Guides for more information.
Connect these ports to other XGS-4728F switches for stacking using
stacking cables.
Connect to a computer using an RJ-45 Ethernet cable for local
configuration of the Switch.
want to configure the Switch using the command line interface (CLI) via
the console port.
3.2.1 Power Connector
Make sure you are using the correct power source as shown on the panel and that
no objects obstruct the airflow of the fans.
Use the following procedures to connect the Switch to a power source after you
have installed it.
Note: Check the power supply requirements in Chapter 50 on page 393, and make
sure you are using an appropriate power source.
Keep the power supply switch and the Switch’s power switch in
the OFF position until you come to the procedure for turning on
the power.
XGS-4728F User’s Guide
39
Chapter 3 Hardware Overview
Use only power wires of the required diameter for connecting the Switch to a
power supply.
3.2.1.1 AC Power Connection
Note: This is only for the AC model of the Switch.
Connect the female end of the power cord to the power socket of your Switch.
Connect the other end of the cord to a power outlet.
3.2.1.2 DC Power Connection
Note: This is only for the DC model of the Switch.
The Switch uses a single ETB series terminal block plug with four pins which al lows
you to connect up to two separate power supplies. If one power supply fails the
system can operate on the remaining power supply. Use two wires to connect to a
single terminal pair, one wire for the positive terminal and one wire for the
negative terminal.
Note: The current rating of the power wires must be greater than 20 Amp s. The power
supply to which the Switch connects must have a built-in circuit breaker or
switch to toggle the power.
Note: When installing the power wire, push it wire firmly into the terminal as deep as
possible and make sure that no exposed (bare) wire can be seen or touched.
Exposed power wire is dangerous. Use extreme care when
connecting a DC power source to the device.
To connect a power supply:
1 Use a screwdriver to loosen the terminal block captive screws.
2 Connect one end of a power wire to the Switch’s RTN (return) pin and tighten the
captive screw.
3 Connect the other end of the power wire to the positive terminal on the power
supply.
4 Connect one end of a power wire to the Switch’s -48V (input ) pin and tighten the
captive screw.
40
5 Connect the other end of the power wire to the negative terminal on the power
supply.
6 Insert the terminal block plug in the Switch’s terminal block header.
XGS-4728F User’s Guide
Chapter 3 Hardware Overview
3.2.2 External Backup Power Supply Connector
The Switch supports external backup power supply (BPS).
The Switch constantly monitors the sta tus of the internal power supply. The
backup power supply automatically provides power to the S witch in the event of a
power failure. Once the Switch receives power from the backup power supply, it
will not automatically switch back to using the internal power supply even when
the power is resumed.
3.2.3 Console Port
For local management, you can use a computer with terminal emulation software
configured to the following parameters:
• VT100 terminal emulation
• 9600 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
Connect the male 9-pin end of the RS-232 console cable to the console port of the
Switch. Connect the female end to a serial port (COM1, COM2 or other COM port)
of your computer.
3.3 LEDs
The following table describes the LEDs.
Table 3 LEDs
LED
BPS Green Blinking The system is receiving power from the backup power
PWR Green On The system is turned on.
SYS Green Blinking The system is rebooting and performing self-diagnostic
COLO
R
STATUS DESCRIPTION
supply.
On The backup power supply is connected and active.
Off The backup power supply is not ready or not active.
Off The system is off.
tests.
On The system is on and functioning properly.
Off The power is off or the system is not ready/
malfunctioning.
XGS-4728F User’s Guide
41
Chapter 3 Hardware Overview
Table 3 LEDs (continued)
LED
ALM Red On There is a hardware failure.
S1 Green On The Switch is connected to other switches in the stack on
S2 Green On The Switch is connected to other switches in the stack on
System Status Displays
1000Base-T Gigabit Ports ( )
1-24 Green Blinking The system is transmitting/receiving to/from a 10/1000
1000Base-X Mini-GBIC Slots ( )
1-24 Green On The port has a successful connection.
COLO
R
Amber Blinking The system is transmitting/receiving to/from a 100 Mbps
STATUS DESCRIPTION
Off The system is functioning normally.
Stacking Port 1.
Off The Switch is not connected to other switches in the
stack on Stacking Port 1.
Stacking Port 2.
Off The Switch is not connected to other switches in the
stack on Stacking Port 2.
The Switch is starting up.
hourglas
s icon
Displays
Stack ID
number
On The link to a 10/1000 Mbps Ethernet network is up.
On The link to a 100 Mbps Ethernet network is up.
Off The link to an Ethernet network is down.
Blinking The port is receiving or transmitting data.
Off This link is disconnected.
The LED is showing the Stack ID number of the Switch.
Mbps Ethernet network.
Ethernet network.
42
XGS-4728F User’s Guide
PART II
Basic Configuration
The Web Configurator (45)
Initial Setup Example (55)
System Status and Port Statistics (71)
Basic Setting (77)
43
44
CHAPTER 4
The Web Configurator
This section introduces the configuration and functions of the web configurator.
4.1 Introduction
The web configurator is an HTML-based managem ent interface that allows easy
Switch setup and management via Inter n et br ows e r. Use Internet Explorer 6.0
and later or Firefox 2.0 and later versions. The recommended screen resolution i s
1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web brows er pop-up windows from your device. W eb pop-up blocking i s enabled
by default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
4.2 System Login
1 Start your web browser.
2 Type “http://” and the IP address of the Switch (for example, the default
management IP address is 192.168.1.1 through an in-band (non-MGMT) port and
192.168.0.1 through the MGMT port) in the Location or Address field. Press
[ENTER].
XGS-4728F User’s Guide
45
Chapter 4 The Web Configurator
3 The login screen appears. The default username is admin and associated default
password is 1234. The date and time display as shown if you hav e not configured
a time server nor manually entered a time and date in the General Setup screen.
Figure 16 Web Configurator: Login
4 Click OK to view the first web configurator screen.
4.3 The Status Screen
The Status screen is the first screen that displays when you access the web
configurator.
46
XGS-4728F User’s Guide
Chapter 4 The Web Configurator
The following figure shows the navigating components of a web configurator
screen.
Figure 17 Web Configurator Home Screen (Status)
BDC
E
A
A - Click the menu items to open submenu links, and then click on a submenu link
to open the screen in the main window.
B, C, D, E - These are quick links which allow you to perform certain tasks no
matter which screen you are currently working in.
B - Click this link to save your configuration into the Switch’s nonvolatile memory.
Nonvolatile memory is saved in the configuration file from which the Switch
booted from and it stays the same even if the Switch’s power is turned off. See
Section 39.3 on page 330 for information on saving your settings to a specific
configuration file.
C - Click this link to go to the status page of the Switch.
D - Click this link to log out of the web config urator.
E - Click this link to display web help pages. The help pages provide descriptions
for all of the configuration screens.
XGS-4728F User’s Guide
47
Chapter 4 The Web Configurator
In the navigation panel, click a main link to reveal a list of submenu links.
Table 4 Navigation Panel Sub-links Overview
BASIC SETTING
ADVANCED
APPLICATION
IP APPLICATION MANAGEMENT
The following table describes the links in the navigation panel.
Table 5 Navigation Panel Links
LINK DESCRIPTION
Basic Settings
System Info This link takes you to a screen that displays general system and
hardware monitoring information.
General Setup This link takes you to a screen where you can configure general
identification information and time settings for the Switch.
Switch Setup This link takes you to a screen where you can set up global Switch
parameters such as VLAN type, MAC address learning, IGMP snooping,
GARP and priority queues.
IP Setup This link takes you to a screen where you can configure the IP address,
subnet mask (necessary for Switch management) and DNS (domain
name server) and set up to 64 IP routing domains.
Port Setup This link takes you to screens where you can configure speed, flow
control and priority settings for individual Switch ports.
Advanced Application
48
XGS-4728F User’s Guide
Chapter 4 The Web Configurator
Table 5 Navigation Panel Links (continued)
LINK DESCRIPTION
VLAN This link takes you to screens where you can configure port-based or
802.1Q VLAN (depending on what you configured in the Switch Setup
menu). You can also configure a protocol based VLAN or a subnet based
VLAN in these screens.
Static MAC
Forwarding
Static
Multicast
Forwarding
Filtering This link takes you to a screen to set up filtering rules.
Spanning Tree
Protocol
Bandwidth
Control
Broadcast
Storm Control
Mirroring This link takes you to screens where you can copy traffic from one port
Link
Aggregation
Port
Authentication
Port Security This link takes you to a screen where you can activate MAC address
Classifier This link takes you to a screen where you can configure the Switch to
Policy Rule This link takes you to a screen where you can configure the Switch to
Queuing
Method
VLAN Stacking This link takes you to a screen where you can activate and configure
Multicast This link takes you to screen where you can configure various multicast
AAA This link takes you to a screen where you can configure authentication,
IP Source
Guard
Loop Guard This link takes you to a screen where you can configure protection
This link takes you to screens where you can configure static MAC
addresses for a port. These static MAC addresses do not age out.
This link takes you to a screen where you can configure static multicast
MAC addresses for port(s). These static multicast MAC addresses do not
age out.
This link takes you to screens where you can configure the RSTP/MRSTP/
MSTP to prevent network loops.
This link takes you to screens where you can cap the maximum
bandwidth allowed from specified source(s) to specified destination(s).
This link takes you to a screen to set up broadcast filters.
or ports to another port in order that you can examine the traffic from
the first port without interference.
This link takes you to screen where you can logically aggregate physical
links to form one logical, higher-bandwidth link.
This link takes you to a screen where you can configure IEEE 802.1x port
authentication as well as MAC authentication for clients communicating
via the Switch.
learning and set the maximum number of MAC addresses to learn on a
port.
group packets based on the specified criteria.
perform special treatment on the grouped packets.
This link takes you to a screen where you can configure queuing with
associated queue weights for each port.
VLAN stacking.
features, IGMP snooping and create multicast VLANs.
authorization and accounting services via external servers. The external
servers can be either RADIUS (Remote Au thentication Dial-In User
Service) or TACACS+ (Terminal Access Controller Access-Control System
Plus).
This link takes you to screens where you can configure filtering of
unauthorized DHCP and ARP packets in your network.
against network loops that occur on the edge of your network.
XGS-4728F User’s Guide
49
Chapter 4 The Web Configurator
Table 5 Navigation Panel Links (continued)
LINK DESCRIPTION
VLAN Mapping This link takes you to screens where you can configure VLAN mapping
settings on the Switch.
Layer 2
Protocol
Tunneling
Private VLAN This link takes you to a screen where you can block traffic between ports
IP Application
Static Route This link takes you to a screen where you can configure static routes. A
RIP This link takes you to a screen where you can configure the RIP (Routing
OSPF This link takes you to screens where you can view the OSPF status and
IGMP This link takes you to a screen where you can configure the IGMP
DVMRP This link takes you to a screen where you can configure the DVMRP
DiffServ This link takes you to screens where you can enable DiffServ, configure
DHCP This link takes you to screens where you can configure the DHCP
VRRP This link takes you to screens where you can configure redundant virtual
Management
Maintenance This link takes you to screens where you can perform firmware and
Access Control This link takes you to screens where you can change the system login
Diagnostic This link takes you to screens where you can view system logs and can
Syslog This link takes you to screens where you can setup system logs and a
Cluster
Management
MAC T able This link takes you to a screen where you can view the MAC address and
IP Table This link takes you to a screen where you can view the IP addresses and
ARP T able This link takes you to a screen where you can view th e MAC address – IP
This link takes you to a screen where you can configure L2PT (Layer 2
Protocol Tunneling) settings on the Switch.
in a VLAN on the Switch.
static route defines how the Switch should forward traffic by configuring
the TCP/IP parameters manually.
Information Protocol) direction and versions.
configure OSPF settings.
settings.
(Distance Vector Multicast Routing Protocol) settings.
marking rules and set DSCP-to-IEEE802.1p mappings.
settings.
router for your network.
configuration file maintenance as well as reboot the system.
password and configure SNMP and remote management.
test port(s).
system log server.
This link takes you to a screen where you can configure clustering
management and view its status.
VLAN ID of a device attach to a port. You can also view what kind of
device it is.
VLAN ID of a device attached to a port.You can also view what kind of
device it is.
address resolution table.
50
XGS-4728F User’s Guide
Table 5 Navigation Panel Links (continued)
LINK DESCRIPTION
Routing Table This link takes you to a screen where you can view the routing table.
Configure
Clone
This link takes you to a screen where you can copy attributes of one port
to (an)other port(s).
4.3.1 Change Your Password
After you log in for the first time, it is recommended you change the default
administrator password. Click Management > Access Control > Logins to
display the next screen.
Figure 18 Change Administrator Login Password
Chapter 4 The Web Configurator
4.4 Saving Your Configuration
When you are done modifying the settings in a screen, click Apply to save your
changes back to the run-time memory. Settings in the run-time memory are lost
when the Switch’s power is turned off.
Click the Save link in the upper right hand corner of the web configur ator to save
your configuration to nonvolatile memory. Nonvolatile memory refers to the
Switch’s storage that remains even if the Switch’s power is turned off.
Note: Use the Save link when you are done with a configuration session.
XGS-4728F User’s Guide
51
Chapter 4 The Web Configurator
4.5 Switch Lockout
You could block yourself (and all others) from using in-band-management
(managing through the data ports) if you do one of the following:
1 Delete the management VLAN (default is VLAN 1).
2 Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the
management port of the Switch.
3 Filter all traffic to the CPU port.
4 Disable all ports.
5 Misconfigure the text configuration file.
6 Forget the password and/or IP address.
7 Prevent all services from accessing the Switch.
8 Change a service port number but forget it.
Note: Be careful not to lock yourself and others out of the Switch. If you do lock
yourself out, try using out-of-band management (via the management port) to
configure the Switch.
4.6 Resetting the Switch
If you lock yourself (and others) from the Switch or forget the administrator
password, you will need to reload the factory-default configur ation file or reset the
Switch back to the factory defaults.
4.6.1 Reload the Configuration File
Uploading the factory-default configuration file replaces the current configuration
file with the factory-default configuration file. This means that you will lose all
previous configurations and the speed of the console port will be reset to the
default of 9600bps with 8 data bit, no parity, one stop bit and flow control set to
none. The password will also be reset to “1234” and the IP address to
192.168.1.1.
52
To upload the configuration file, do the following:
XGS-4728F User’s Guide
Chapter 4 The Web Configurator
1 Connect to the console port using a computer with terminal emulation software.
See Section 3.2 on page 38 for details.
2 Disconnect and reconnect the Switch’s power to begin a session. When you
reconnect the Switch’s power, you will see the initial screen.
3 When you see the message “Press any key to enter Debug Mode within 3
seconds ...” press any key to enter debug mode.
4 Type atlc after the “Enter Debug Mode” message.
5 Wait for the “Starting XMODEM upload” message before activating XMODEM
upload on your terminal.
6 After a configuration file upload, type atgo to restart the Switch.
Figure 19 Resetting the Switch: Via the Console Port
ZyNOS Version: V3.90(BBC.0)b1 | 04/28/2009 09:20:42
Bootbase Version: V1.00 | 10/22/2007 12:48:50
RAM:Size = 128 Mbytes
DRAM POST: Testing:131072K OK
DRAM Test SUCCESS !
FLASH: Intel 64M
ZyNOS Version: V3.90(BBC.0)b1 | 04/28/2009 09:20:42
Press any key to enter debug mode within 3 seconds.
.....................................
Enter Debug Mode
ras> atlc
Starting XMODEM upload (CRC mode)....
CCCCCCCCCCCCCCCC
Total 393216 bytes received.
Erasing..
................................................................
OK
ras> atgo
The Switch is now reinitialized with a default configuration file including the default
password of “1234”.
XGS-4728F User’s Guide
53
Chapter 4 The Web Configurator
4.7 Logging Out of the Web Configurator
Click Logout in a screen to exit the web configurator. Y ou hav e to log in with your
password again after you log out. This is recommended after you finish a
management session for security reasons.
Figure 20 Web Configurator: Logout Screen
4.8 Help
The web configurator’s online help has descriptions of individual screens and some
supplementary information.
Click the Help link from a web configurator screen to view an online help
description of that screen.
54
XGS-4728F User’s Guide
CHAPTER 5
Initial Setup Example
This chapter shows how to set up the Switch for an example network.
5.1 Overview
The following lists the configuration steps for the example network:
• Configure an IP interface
• Configure DHCP server settings
• Create a VLAN
• Set port VLAN ID
•Enable RIP
5.1.1 Configuring an IP Interface
On a layer-3 switch, an IP interface (also known as an IP routing domain) is not
bound to a physical port. The default IP address of the S witch is 192.168. 1.1 wi th
a subnet mask of 255.255.255.0.
In the example network, since the RD network is already in the same IP interface
as the Switch, you don’t need to create an IP interface for it. However , if you want
to have the Sales network on a different routing domain, you need to create a
XGS-4728F User’s Guide
55
Chapter 5 Initial Setup Example
new IP interface. This allows the Switch to route traffic between the RD and Sales
networks.
Figure 21 Initial Setup Network Example: IP Interface
1 Connect your computer to the MGMT port that is used only for management.
Make sure your computer is in the same subnet as the MGMT port.
2 Open your web browser and enter 192.168.0.1 (the default MGMT port IP
address) in the address bar to access the web configurator. See Section 4.2 on
page 45 for more information.
3 Click Basic Setting and IP Setup
in the navigation panel.
4 Configure the related fields in the
IP Setup screen.
56
EXAMPLE
For the Sales network, enter 192.168.2.1 as the IP address and 255.255.255.0 as
the subnet mask.
XGS-4728F User’s Guide
5 In the VID field, enter the ID of the VLAN group to which you want this IP
interface to belong. This is the same as the VLAN ID you configure in the Static
VLAN screen.
6 Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
5.1.2 Configuring DHCP Server Settings
You can set the Switch to assign network information (such as the IP address,
DNS server, etc.) to DHCP clients on the network.
For the example network, configure two DHCP client pools on the Switch for the
DHCP clients in the RD and Sales networks.
1 In the web configurator, click IP
Application and DHCP in the
navigation panel and click the
VLAN link.
Chapter 5 Initial Setup Example
2 In the VLAN Setting screen,
specify the ID of the VLAN to
which the DHCP clients belong,
the starting IP address pool,
subnet mask, default gateway
address and the DNS server
address(es).
3 Click Add to save the settings to
the run-time memory. Settings in
the run-time memory are lost when the Switch’s power is turned off.
5.1.3 Creating a VLAN
VLANs confine broadcast frames to the VLAN group in which the port(s) belongs.
You can do this with port-based VLAN or tagged static VLAN with fixed port
members.
EXAMPLE
XGS-4728F User’s Guide
57
Chapter 5 Initial Setup Example
In this example, you want to configure port 1 as a member of VLAN 2.
Figure 22 Initial Setup Network Example: VLAN
1 Click Advanced Application > VLAN in the navigation panel and click the Static
VLAN link.
58
2 In the Static VLAN screen, select
ACTIVE, enter a descriptive name
in the Name field and enter 2 in
the VLAN Group ID field for the
VLAN2 network.
EXAMPLE
Note: The VLAN Group ID field in this screen and the VID field in the IP Setup
screen refer to the same VLAN ID.
XGS-4728F User’s Guide
3 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to
configure port 1 to be a permanent member of the VLAN only.
4 To ensure that VLAN-unaware devices (such as computers and hubs) can receive
frames properly, clear the TX Tagging check box to set the Switch to remove
VLAN tags before sending.
5 Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
5.1.4 Setting Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that
the frames are forwarded to the VLAN group that the tag defines.
In the example network, configure 2 as the port VID on port 1 so that any
untagged frames received on that port get sent to VLAN 2.
Figure 23 Initial Setup Network Example: Port VID
Chapter 5 Initial Setup Example
1 Click Advanced Applications
and VLAN in the navigation
panel. Then click the VLAN Port
Setting link.
2 Enter 2 in the PVID field for port
1 and click Apply to save your
changes back to the run-time
memory . Settings in the run-time
memory are lost when the
Switch’s power is turned off.
XGS-4728F User’s Guide
EXAMPLE
59
Chapter 5 Initial Setup Example
5.1.5 Enabling RIP
To exchange routing information with other routing devices across different
routing domains, enable RIP (Routing Information Protocol) in the RIP screen.
1 Click IP Application and RIP in the navigation panel.
2 Select Both in the Direction
field to set the Switch to
broadcast and receive routing
information.
3 In the Version field, select
RIP-1 for the RIP packet
format that is universa lly
supported.
4 Click Apply to save your changes back to the run-time memory. Settings in the
run-time memory are lost when the Switch’s power is turned off.
EXAMPLE
60
XGS-4728F User’s Guide
CHAPTER 6
Tutorials
This chapter provides some examples of using the web configurator to set up and
use the Switch. The tutorials include:
• How to Use DHCP Snooping on the Switch
• How to Use DHCP Relay on the Switch
6.1 How to Use DHCP Snooping on the Switch
You only wan t DHCP server A connected to port 5 to assign IP addresses to all
devices in VLAN network (V). Create a VLAN containing ports 5, 6 and 7. Con nect
a computer M to the Switch’s MGMT port.
Figure 24 Tutorial: DHCP Snooping Tutorial Overview
M
V
C
Note: For related information about DHCP snooping, see Section 26.1 on page 231.
The settings in this tutorial are as the following.
Table 6 Tutorial: Settings in this Tutorial
HOST
DHCP Server (A) 5 1 and 100 100 Yes
DHCP Client (B) 6 1 and 100 100 No
DHCP Client (C) 7 1 and 100 100 No
PORT
CONNECTED
B
VLAN PVID
A
DHCP SNOOPING
PORT TRUSTED
XGS-4728F User’s Guide
61
Chapter 6 Tutorials
1 Access the Switch from the MGMT port through http://192.168.0.1 by default.
Log into the Switch by entering the username (default: admin) and password
(default: 1234).
2 Go to Advanced Application > VLAN > Static VLAN, and create a VLAN with ID
of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as
shown.
Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN
tag.
Click Add.
Figure 25 Tutorial: Create a VLAN and Add Ports to It
62
XGS-4728F User’s Guide
Chapter 6 Tutorials
3 Go to Advanced Application > VLAN > VLAN Port Setting, and set the PVID
of the ports 5, 6 and 7 to 100. This tags untagged incoming frames on ports 5, 6
and 7 with the tag 100.
Figure 26 Tutorial: Tag Untagged Frames
4 Go to Advanced Application > IP Source Guard > DHCP snooping >
Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click
Apply.
Figure 27 Tutorial: Specify DHCP VLAN
5 Click the Port link at the top right corner.
XGS-4728F User’s Guide
63
Chapter 6 Tutorials
6 The DHCP Snooping Port Configure screen appears. Select Trusted in the
Server Trusted state field for port 5 because the DHCP server is connected to
port 5. Keep ports 6 and 7 Untrusted because they are connected to DHCP
clients. Click Apply.
Figure 28 Tutorial: Set the DHCP Server Port to Trusted
7 Go to Advanced Application > IP Source Guard > DHCP snooping >
Configure > VLAN, show VLAN 100 by entering 100 in the Start VID and End
VID fields and click Apply. Then select Yes in the Enabled field of the VLAN 100
entry shown at the bottom section of the screen.
If you want to add more information in the DHCP request packets such as source
VLAN ID or system name, you can also select the Option82 and Information
fields in the entry. See Section 26.1.1.3 on page 233.
Figure 29 Tutorial: Enable DHCP Snooping on this VLAN
64
8 Click Save at the top right corner of the web
configurator to save the configuration permanently.
XGS-4728F User’s Guide
Chapter 6 Tutorials
9 Connect your DHCP server to port 5 and a computer (as DHCP client) to either
port 6 or 7. The computer should be able to get an IP address from the DHCP
server. If you put the DHCP server on port 6 or 7, the computer will not able to get
an IP address.
10 To check if DHCP snooping works, go to Advanced Application > IP Source
Guard, you should see an IP assignment with the type dhcp-snooping as shown.
Figure 30 Tutorial: Check the Binding If DHCP Snooping Works
You can also telnet or log into the Switch’s console. Use the command “ show dhcp
snooping binding” to see the DHCP snooping binding table as shown next.
sysname# show dhcp snooping binding
MacAddress IpAddress Lease Type VLAN Port
----------------- --------------- ------------ ------------- ---- ---- 00:02:00:00:00:1c 10.10.1.16 6d23h59m20s dhcp-snooping 100 7
Total number of bindings: 1
6.2 How to Use DHCP Relay on the Switch
This tutorial describes how to configure your Switch to forward DHCP client
requests to a specific DHCP server. The DHCP server can then assign a specific IP
address based on the information in the DHCP requests.
6.2.1 DHCP Relay Tutorial Introduction
In this example, you have configured your DHCP server (192.168.2.3) and want to
have it assign a specific IP address (say 172.16.1.18) and gatew ay i nformation to
XGS-4728F User’s Guide
65
Chapter 6 Tutorials
DHCP client A based on the system name, VLAN ID and port number in the DHCP
request. Client A connects to the Switch’s port 2 in VLAN 102.
Figure 31 Tutorial: DHCP Relay Scenario
DHCP Server
192.168.2.3
6.2.2 Creating a VLAN
Port 2
PVID=102
A
172.16.1.18
VLAN 102
Follow the steps below to configure port 2 as a member of VLAN 102.
1 Access the web configurator through the Switch’s management port.
2 Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click
Apply to save the settings to the run-time memory.
Figure 32 Tutorial: Set VLAN Type to 802.1Q
66
3 Click Advanced Application > VLAN > Static VLAN.
XGS-4728F User’s Guide
Chapter 6 Tutorials
4 In the Static VLAN screen, select ACTIVE, enter a descriptive name (VALN 102
for example) in the Name field and enter 102 in the VLAN Group ID field.
5 Select Fixed to configure port 2 to be a permanent member of this VLAN.
6 Clear the TX Tagging check box to set the Switch to remove VLAN tags before
sending.
7 Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
Figure 33 Tutorial: Create a Static VLAN
XGS-4728F User’s Guide
67
Chapter 6 Tutorials
8 Click the VLAN Status link in the Static VLAN screen and then the VLAN Port
Setting link in the VLAN Status screen.
Figure 34 Tutorial: Click the VLAN Port Setting Link
9 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames
received on that port so that the frames are forwarded to the VLAN group that the
tag defines.
10 Click Apply to save your changes back to the run-time memory.
Figure 35 Tutorial: Add Tag for Frames Received on Port 2
68
11 Click the Save link in the upper right corner of the web configurator to save your
configuration permanently.
XGS-4728F User’s Guide
6.2.3 Configuring DHCP Relay
Follow the steps below to enable DHCP relay on the Switch and allow the Switch to
add relay agent information (such as the VLAN ID) to DHCP requests.
1 Click IP Application > DHCP and then the Global link to open the DHCP Relay
screen.
2 Select the Active check box.
3 Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote
DHCP Server 1 field.
4 Select the Option 82 and the Information check boxes.
5 Click Apply to save your changes back to the run-time memory.
Figure 36 Tutorial: Set DHCP Server and Relay Information
Chapter 6 Tutorials
6 Click the Save link in the upper right corner of the web configurator to save your
configuration permanently.
7 The DHCP server can then assign a specific IP address based on the DHCP
request.
6.2.4 Troubleshooting
Check the client A’s IP address. If it did not receive the IP address 172.16.1.18,
make sure:
1 Client A is connected to the Switch’s port 2 in VLAN 102.
2 You configured the correct VLAN ID, port number and system name for DHCP relay
on both the DHCP server and the Switch.
XGS-4728F User’s Guide
69
Chapter 6 Tutorials
3 You clicked the Save link on the Switch to have your settings take effect.
70
XGS-4728F User’s Guide
CHAPTER 7
System Status and Port
Statistics
This chapter describes the system status (web configurator home page) and port
details screens.
7.1 Overview
The home screen of the web configurator displays a port stati stical summary with
links to each port showing statistical details.
7.2 Port Status Summary
To view the port statistics, click Status in all web configurator screens to display
the Status screen as shown next.
Figure 37 Status
XGS-4728F User’s Guide
71
Chapter 7 System Status and Port Statistics
The following table describes the labels in this screen.
Table 7 Status
LABEL DESCRIPTION
Port This identifies the Ethernet port. Click a port number to display the Port
Details screen (refer to Figure 38 on page 73).
Name This is the name you assigned to this port in the Basic Setting > Port
Setup screen.
Link This field displays the speed (either 10M for 10 Mbps, 100M for 100
Mbps, 1000M for 1000 Mbps, and 10G for 10 Gbps) and the duplex (F
for full duplex or H for half). It also shows the cable type (Copper or
Fiber) for the combo ports.
State If STP (Spanning Tree Protocol) is enabled, this field displays the STP
state of the port. (See Section 13.1.3 on page 127 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
LACP This fields displays whether LACP (Link Aggregation Control Protocol) has
been enabled on the port.
TxPkts This field shows the number of transmitted frames on this port.
RxPkts This field shows the number of received frames on this port.
Errors This field shows the number of received errors on this port.
Tx KB/s This field shows the transmission speed of data sent on this port in
kilobytes per second.
Rx KB/s This field shows the transmission speed of data received on this port in
kilobytes per second.
Up Time This field shows the total amount of time in hours, minutes and seconds
the port has been up.
Clear Counter Type a port number, select Port and then click Clear Counter to erase
the recorded statistical information for that port, or select Any to clear
statistics for all ports.
72
XGS-4728F User’s Guide
7.2.1 Status: Port Details
Click a number in the Port column in the Status screen to display individual port
statistics. Use this screen to check status and detailed perf ormance data about an
individual port on the Switch.
Figure 38 Status: Port Details
Chapter 7 System Status and Port Statistics
The following table describes the labels in this screen.
Table 8 Status > Port Details
LABEL DESCRIPTION
Port Info
Port NO. This field displays the port number you are viewing.
Name This field displays the name of the port.
Link This field displays the speed (either 10M for 10Mbps, 100M for
XGS-4728F User’s Guide
100Mbpsl, 1000M for 1000 Mbps, and 10G for 10 Gbps) and the duplex
(F for full duplex or H for half duplex). It also shows the cable type
(Copper or Fiber).
73
Chapter 7 System Status and Port Statistics
Table 8 Status > Port Details (continued)
LABEL DESCRIPTION
Status If STP (Spanning Tree Protocol) is enabled, this field displays the STP
state of the port (see Section 13.1.3 on page 127 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
LACP This field shows if LACP is enabled on this port or not.
TxPkts This field shows the number of transmitted frames on this port
RxPkts This field shows the number of received frames on this port
Errors This field shows the number of received errors on this port.
Tx KB/s This field shows the transmission speed of data sent on this port in
kilobytes per second.
Rx KB/s This field shows the transmission speed of data received on this port in
kilobytes per second.
Up Time This field shows the total amount of time the connection has been up.
Tx Packet
The following fields display detailed information about packets transmitted.
TX Packets This field shows the number of good packets (unicast, multicast and
broadcast) transmitted.
Multicast This fie ld shows the number of good multicast packets transmitted.
Broadcast This field shows the number of good broadcast packets transmitted.
Pause This field shows the number of 802.3x Pause packets transmitted.
Tagged This field shows the number of packets with VLAN tags transmitted.
Rx Packet
The following fields display detailed information about packets received.
RX Packets This field shows the number of good packets (unicast, multicast and
broadcast) received.
Multicast This fie ld shows the number of good multicast packets received.
Broadcast This field shows the number of good broadcast packets received.
Pause This field shows the number of 802.3x Pause packets received.
Control This field shows the number of control packets received (including those
with CRC error) but it does not include the 802.3x Pause packets.
TX Collision
The following fields display information on collisions while transmitting.
Single This is a count of successfully transmitted packets for which transmission
is inhibited by exactly one collision.
Multiple This is a count of successfully transmitted packets for which transmission
was inhibited by more than one collision.
Excessive This is a count of packets for which transmission failed due to excessive
collisions. Excessive collision is defined as the number of maximum
collisions before the retransmission count is reset.
Late This is the number of times a late collision is detected, that is, after 512
bits of the packets have already been transmitted.
74
XGS-4728F User’s Guide
Chapter 7 System Status and Port Statistics
Table 8 Status > Port Details (continued)
LABEL DESCRIPTION
Error Packet The following fields display detailed information about packets received
that were in error.
RX CRC This field shows the number of packets received with CRC (Cyclic
Redundant Check) error(s).
Length This field shows the number of packets received with a length that was
out of range.
Runt This field shows the number of packets received that were too short
(shorter than 64 octets), including the ones with CRC errors.
Distribution
64 This field shows the number of packets (including bad packets) received
that were 64 octets in length.
65-127 This field shows the number of packets (including bad packets) received
that were between 65 and 127 octets in length.
128-255 This field shows the number of packets (including bad packets) received
that were between 128 and 255 octets in length.
256-511 This field shows the number of packets (including bad packets) received
that were between 256 and 511 octets in length.
512-1023 This field shows the number of packets (including bad packets) received
that were between 512 and 1023 octets in length.
1024-
1518
Giant This field shows the number of packets dropped because they were bigger
This field shows the number of packets (including bad packets) received
that were between 1024 and 1518 octets in length.
than the maximum frame size.
XGS-4728F User’s Guide
75
Chapter 7 System Status and Port Statistics
76
XGS-4728F User’s Guide
CHAPTER 8
Basic Setting
This chapter describes how to configure the System Info, General Setup,
Switch Setup, IP Setup and Port Setup screens.
8.1 Overview
The System Info screen displays general Switch information (such as firmware
version number) and hardware polling information (such as fan speeds). The
General Setup screen allows you to configure general Switch identification
information. The General Setup screen also allows you to set the system time
manually or get the current time and date from an external server when you turn
on your Switch. The real time is then displayed in the Switch logs. The Switch
Setup screen allows you to set up and configure global Switch features. The IP
Setup screen allows you to configure a Switch IP address in each routing domain,
subnet mask(s) and DNS (domain name server) for management purposes.
XGS-4728F User’s Guide
77
Chapter 8 Basic Setting
8.2 System Information
In the navigation panel, click Basic Setting > System Info to displa y the screen
as shown. You can check the firmware version number and monitor the Switch
temperature, fan speeds and voltage in this screen.
Figure 39 Basic Setting > System Info
The following table describes the labels in this screen.
Table 9 Basic Setting > System Info
LABEL DESCRIPTION
System
Name
ZyNOS F/W
Version
Ethernet
Address
Hardware Monitor
Temperature
Unit
Temperature BOARD, PHY, and MAC refer to the location of the temperature sensors
Current This shows the current temperature at this sensor.
MAX This field displays the maximum temperature measured at this sensor.
MIN This field displays the minimum temperature measured at this sensor.
Threshold This field displays the upper temperature limit at this sensor.
This field displays the descriptive name of the Switch for identification
purposes.
This field displays the version number of the Switch 's current firmware
including the date created.
This field refers to the Ethernet MAC (Media Access Control) address of the
Switch.
The Switch has temperature sensors that are capable of detecting and
reporting if the temperature rises above the threshold. You may choose
the temperature unit (Centigrade or Fahrenheit) in this field.
on the Switch printed circuit board.
78
XGS-4728F User’s Guide
Chapter 8 Basic Setting
Table 9 Basic Setting > System Info (continued)
LABEL DESCRIPTION
Status This field displays Normal for temper atures below the threshold and Error
for those above.
Fan Speed
(RPM)
Current This field displays this fan's current speed in Revolutions Per Minute (RPM).
MAX This field displays this fan's maximum speed measured in RPM.
MIN This field displays this fan's minimum speed measured in RPM. “<41" is
Threshold This field displays the minimum speed at which a normal fan should work.
Status Normal indicates that this fan is functioning above the minimum speed.
Voltage (V) The power supply for each voltage has a sensor that is capable of
Current This is the current voltage reading.
MAX This field displays the maximum voltage measured at this point.
MIN This field displays the minimum voltage measured at this point.
Threshold This field displays the percentage tolerance of the voltage with which the
Status Normal indicates that the voltage is within an acceptable operating range
A properly functioning fan is an essential component (along with a
sufficiently ventilated, cool operating environment) in order for the device
to stay within the temperature threshold. Each fan has a sensor that is
capable of detecting and reporting if the fan speed falls below the
threshold shown.
displayed for speeds too small to measure (under 2000 RPM).
Error indicates that this fan is functioning below the minimum speed.
detecting and reporting if the voltage falls out of the tolerance range.
Switch still works.
at this point; otherwise Error is displayed.
XGS-4728F User’s Guide
79
Chapter 8 Basic Setting
8.3 General Setup
Use this screen to configure general settings such as the system name and time.
Click Basic Setting and General Setup in the navigation panel to display the
screen as shown.
Figure 40 Basic Setting > General Setup
The following table describes the labels in this screen.
Table 10 Basic Setting > General Setup
LABEL DESCRIPTION
System Name Type a descriptive name for identification purposes. This name consists
of up to 64 printable characters; spaces are allowed.
Location Type the geographic location of your Switch. You can use up to 32
printable ASCII characters; spaces are allowed.
Contact
Person's Name
Type the name of the person in charge of this Switch. Y o u can use up to
32 printable ASCII characters; spaces are allowed.
80
XGS-4728F User’s Guide
Chapter 8 Basic Setting
Table 10 Basic Setting > General Setup (continued)
LABEL DESCRIPTION
Use Time
Server when
Bootup
Time Server IP
Address
Current Time This field displays the time you open this menu (or refresh the menu).
New Time
(hh:min:ss)
Current Date This field displays the date you open this menu.
New Date
(yyyy-mm-dd)
Time Zone Select the time difference between UTC (Universal Time Coordinated,
Daylight
Saving Time
Type the time service protocol that your timeserver uses. Not all time
servers support all protocols, so you may have to use trial and error to
find a protocol that works. The main differences between them are the
time format.
When you select the Daytime (RFC 867) format, the Switch displays
the day, month, year and time with no time zone adjustment. When you
use this format, it is recommended that you use a Daytime timeserver
within your geographical time zone.
Time (RFC-868) format displays a 4-byte integer giving the total
number of seconds since 1970/1/1 at 0:0:0.
NTP (RFC-1305) is similar to Time (RFC-868).
None is the default value. Enter the time manually. Each time you turn
on the Switch, the time and date will be reset to 1970-1-1 0:0.
Type the IP address of your timeserver. The Switch searches for the
timeserver for up to 60 seconds. If you select a timeserver that is
unreachable, then this screen will appear locked for 60 seconds. Please
wait.
Enter the new time in hour, minute and second format. The new time
then appears in the Current Time field after you click Apply.
Enter the new date in year, month and day format. The new date then
appears in the Current Date field after you click Apply.
formerly known as GMT, Greenwich Mean Time) and your time zone from
the drop-down list box.
Daylight saving is a period from late spring to early fall when many
countries set their clocks ahead of normal local time by one hour to give
more daytime light in the evening.
Start Date Configure the day and time when Daylight Saving Time starts if you
XGS-4728F User’s Guide
Select this option if you use Daylight Saving Time.
selected Daylight Saving Time. The time is displayed in the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time starts in most parts of the United States on the
second Sunday of March. Each time zone in the United States starts
using Daylight Saving Time at 2 A.M. local time. So in the United States
you would select Second, Sunday, March and 2:00.
Daylight Saving Time starts in the European Union on the last Sunday of
March. All of the time zones in the European Union start using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, March and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
81
Chapter 8 Basic Setting
Table 10 Basic Setting > General Setup (continued)
LABEL DESCRIPTION
End Date Configure the day and time when Daylight Saving Time ends if you
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
selected Daylight Saving Time. The time field uses the 24 hour
format. Here are a coupl e o f ex am ples:
Daylight Saving Time ends in the United States on the last Sunday of
October. Each time zone in the United States stops using Daylight Saving
Time at 2 A.M. local time. So in the United States you would select First,
Sunday, November and 2:00.
Daylight Saving Time ends in the European Union on the last Sunday of
October. All of the time zones in the European Union stop using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, October and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
8.4 Introduction to VLANs
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the netw ork resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user on the same
network.
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. Wit h VLAN, all
broadcasts are confined to a specific broadcast domain.
Note: VLAN is unidirectional; it only governs outgoing traffic.
See Chapter 9 on page 95 for information on port-based and 802.1Q tagged
VLANs.
82
XGS-4728F User’s Guide
8.4.1 Smart Isolation
To block traffic between two specific ports within the Switch, you can use port
isolation or private VLAN (see Chapter 30 on page 267 for more information).
However, it does not work across multiple switches. For example, broadcast traffic
from isolated ports on a switch (say B) can be forwarded to all ports on other
switches (A and C), including the isolated ports.
A
Isolated ports: 2~6
Root port: 7
Designated port: 8
Chapter 8 Basic Setting
B
C
Smart isolation allows you to prevent isolated ports on different switches from
transmitting traffic to each other. After you enable RSTP/MRSTP and smart
isolation on the Switch, the designated port(s) will be added to the isolated port
list. In the following example, switch A is the root bridge. Switch B’s root port 7
connects to switch A and switch B’s designated port 8 connects to switch C. Traffic
from isolated ports on switch B can only be sent through non-isolated port 1 or
root port 7 to switch A. This prevents isolated ports on switch B sending traffic
through designated port 8 to switch C. Traffic received on designated port 8 from
switch C will not be forwarded to any other isolated ports on switch B.
A
B
Before Smart Isolation:
Isolated ports: 2~6
Root port: 7
Designated port: 8
After Smart Isolation:
Isolated ports: 2~6, 8
Root port: 7
Designated port: 8
C
You should enable RSTP or MRSTP before you can use smart isolation on the
Switch. If the network topology changes, the Switch automatically updates the
isolated port list with the latest designated port information.
XGS-4728F User’s Guide
83
Chapter 8 Basic Setting
Note: The uplink port connected to the Internet should be the root port. Otherwise,
with smart isolation enabled, the isolated ports cannot access the Internet.
8.5 Switch Setup Screen
Click Basic Setting and then Switch Setup in the navigation panel to display the
screen as shown. The VLAN setup screens change depending on whether you
choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to the
chapter on VLAN.
Figure 41 Basic Setting > Switch Setup
84
The following table describes the labels in this screen.
Table 11 Basic Setting > Switch Setup
LABEL DESCRIPTION
VLAN Ty pe Choose 802.1Q or Port Based. The VLAN Setup screen changes
depending on whether you choose 802.1Q VLAN type or Port Based
VLAN type in this screen. See Chapter 9 on page 95 for more
information.
Bridge Control
Protocol
Transparency
Select Active to allow the Switch to handle bridging control protocols
(STP, for example). You also need to define how to treat a BPDU in the
Port Setup screen.
XGS-4728F User’s Guide
Chapter 8 Basic Setting
Table 11 Basic Setting > Switch Setup (continued)
LABEL DESCRIPTION
Smart
Isolation
Select Active to enable smart isolation on the Switch. The designated
port(s) then becomes the isolated port. Smart isolation allows you to
prevent isolated ports on different switches from transmitting traffic to
each other.
Note: To use smart isolation, you should have configured 802.1Q
VLAN port isolation or private VLAN and (M)RSTP on the
Switch. Smart isolation does not work with MSTP and/or portbased VLAN.
MAC Address
Learning
Aging Time Enter a time from 10 to 1000000 seconds. This is how long all
GARP Timer: Switches join VLANs by making a declaration. A declaration is made by
issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set declaration
timeout values. See Chapter 9 on page 95 for more background information.
Join Timer Join Timer sets the duration of the Join Period timer for GVRP in
Leave Timer Leave Time sets the duration of the Leave Period timer for GVRP in
Leave All
Timer
Priority Queue Assignment
MAC address learning reduces outgoing traffic broadcasts. For MAC
address learning to occur on a port, the port must be active.
dynamically learned MAC addresses remain in the MAC address table
before they age out (and must be relearned).
milliseconds. Each port has a Join Period timer. The allowed Join Time
range is between 100 and 65535 milliseconds; the default is 200
milliseconds. See Chapter 9 on page 95 for more background
information.
milliseconds. Each port has a single Leave Period timer. Leave Time
must be two times larger than Join Timer; the default is 600
milliseconds.
Leave All Timer sets the duration of the Leave All P eriod timer for GVRP in
milliseconds. Each port has a single Leave All Period timer. Leave All
Timer must be larger than Leave Timer.
IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-layer
frame that contains bits to define class of service. Frames without an explicit priority tag
are given the default priority of the ingress port. Use the following fields to configure the
priority level-to-physical queue mapping.
The Switch has eight physical queues that you can map to the 8 priority levels. On the
Switch, traffic assigned to higher index queues gets through faster while traffic in lower
index queues is dropped if the network is congested.
Priority Level (The following descriptions are based on the traffic types defined in the IEEE
802.1d standard (which incorporates the 802.1p).
Level 7 Typically used for network control traffic such as router configuration
Level 6 T ypically used for voice tr affic that is especially sensitive to jitter (jitter is
Level 5 T ypically used for video that consumes high bandwidth and is sensitive to
XGS-4728F User’s Guide
messages.
the variations in delay).
jitter.
85
Chapter 8 Basic Setting
Table 11 Basic Setting > Switch Setup (continued)
LABEL DESCRIPTION
Level 4 Typically used for controlled load, latency-sensitive traffic such as SNA
Level 3 Typically used for “excellent effort” or better than best effort and would
Level 2 This is for “spare bandwidth”.
Level 1 This is typically used for non-critical “background” traffic such as bulk
Level 0 Typically used for best-effort traffic.
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to begin configuring this screen afresh.
(Systems Network Architecture) transactions.
include important business traffic that can tolerate some delay.
transfers that are allowed but that should not affect other applications
and users.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
8.6 IP Setup
Use the IP Setup screen to configure the default gateway device, the default
domain name server and add IP domains.
8.6.1 IP Interfaces
The Switch needs an IP address for it to be managed over the network. The
factory default IP address is 192.168.1.1. The subnet mask specifies the network
number portion of an IP address. The factory default subnet mask is
255.255.255.0.
On the Switch, as a layer-3 device, an IP address is not bound to any physical
ports. Since each IP address on the Switch must be in a separate subnet, the
configured IP address is also known as IP interface (or routing domain). In
addition, this allows routing between subnets based on the IP address without
additional routers.
You can configure multiple routing domains on the same VLAN as long as the IP
address ranges for the domains do not overlap. To change the IP address of the
86
XGS-4728F User’s Guide
Chapter 8 Basic Setting
Switch in a routing domain, simply add a new routing domain entry with a
different IP address in the same subnet.
Figure 42 Basic Setting > IP Setup
The following table describes the labels in this screen.
Table 12 Basic Setting > IP Setup
LABEL DESCRIPTION
Default
Gateway
Domain
Name Server
Default
Management
Management IP Address
Use these fields to set the settings for the out-of-band management port.
Type the IP address of the default outgoing gateway in dotted decimal
notation, for example 192.168.1.254.
DNS (Domain Name System) is for mapping a domain name to its
corresponding IP address and vice versa. Enter a domain name server IP
address in order to be able to use a domain name instead of an IP address.
Specify which traffic flow (In-Band or Out-of-band) the Switch is to send
packets originating from itself (such as SNMP traps) or packets with
unknown source.
Select Out-of-band to have the Switch send the packets to the
management port labelled MGMT. This means that device(s) connected to
the other port(s) do not receive these packets.
Select In-Band to have the Switch send the packets to all ports except the
management port (labelled MGMT) to which connected device(s) do not
receive these packets.
XGS-4728F User’s Guide
87
Chapter 8 Basic Setting
Table 12 Basic Setting > IP Setup (continued)
LABEL DESCRIPTION
IP
Address
IP Subnet
Mask
Default
Gateway
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to reset the fields to your previous configuration.
IP Interface
Use these fields to create or edit IP routing domains on the Switch.
IP
Address
IP Subnet
Mask
VID Enter the VLAN identification number to which an IP routing domain
Add Click Add to save your changes to the Switch’s run-time memory. The
Cancel Click Cancel to reset the fields to your previous configuration.
Index This field displays the index number of an entry.
IP Address This field displays IP address of the Switch in the IP domain.
IP Subnet
Mask
VID This field displays the VLAN identification number of the IP domain on the
Delete Click Delete to remove the selected entry from the summary table.
Enter the out-of-band management IP address of your Switch in dotted
decimal notation. For example, 192.168.0.1.
Enter the IP subnet mask of your Switch in dotted decimal notation, for
example, 255.255.255.0.
Enter the IP address of the default outgoing gateway in dotted decimal
notation, for example, 192.168.0.254
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Enter the IP address of your Switch in dotted decimal notation, for
example, 192.168.1.1. This is the IP address of the Switch in an IP routing
domain.
Enter the IP subnet mask of an IP routing domain in dotted decimal
notation, for example, 255.255.255.0.
belongs.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
This field displays the subnet mask of the Switch in the IP domain.
Switch.
88
Note: Deleting all IP subnets locks you out of the Switch.
Cancel Click Cancel to clear the Delete check boxes.
XGS-4728F User’s Guide
8.7 Port Setup
Use this screen to configure Switch port settings.Click Basic Setting > Port
Setup in the navigation panel to display the configuration screen.
Figure 43 Basic Setting > Port Setup
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 13 Basic Setting > Port Setup
LABEL DESCRIPTION
Port This is the port index number.
* Settings in this row apply to all ports.
Use this row only if you want to make some settings the same fo r all ports.
Use this row first to set the common settings and then make adjustments
on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
Active Select this check box to enable a port. The factory default for all ports is
enabled. A port must be enabled for data transmission to occur.
Name Type a descriptive name that identifies this port. You can enter up to 64
alpha-numerical characters.
Note: Due to space limitations, the port name may be truncated in
some web configurator screens.
Type This field displays 10/100/1000M for a 1000Base-T connection, 10G for
a 10 Gigabit Ethernet connection and 12G for a 10GBase-CX4 connection.
XGS-4728F User’s Guide
89
Chapter 8 Basic Setting
Table 13 Basic Setting > Port Setup (continued)
LABEL DESCRIPTION
Speed/
Duplex
Flow Control A concentration of traffic on a port decreases port bandwidth and overflows
Select the speed and the duplex mode of the Ethernet connection on this
port. The choices are Auto, 10M/Half Duplex, 10M/Full Duplex,
100M/Half Duplex and 100M/Full Duplex for a 1000Base-T
connection. 1000M/Full Duplex is supported by both 1000Base-T and
1000Base-X connections. 10G/Full Duplex is supported by the 10 Gigabit
Ethernet connections. 12G/Full Duplex is supported by the 10GBase-CX4
connections.
Selecting Auto (auto-negotiation) allows one port to negotiate with a peer
port automatically to obtain the connection speed and duplex mode that
both ends support. When auto-negotiation is turned on, a port on the
Switch negotiates with the peer automatically to determine the connection
speed and duplex mode. If the peer port does not support auto-negotiation
or turns off this feature, the Switch determines the connection speed by
detecting the signal on the cable and using half duplex mode. When the
Switch’s auto-negotiation is turned off, a port uses the pre-configured
speed and duplex mode when making a connection, thus requiring you to
make sure that the settings of the peer port are the same in order to
connect.
buffer memory causing packet discards and frame losses. Flow Control is
used to regulate transmission of signals to match the bandwidth of the
receiving port.
The Switch uses IEEE 802.3x flow control in full duplex mode and
backpressure flow control in half duplex mode.
IEEE 802.3x flow control is used in full duplex mode to send a pause signal
to the sending port, causing it to temporarily stop sending signals when
the receiving port memory buffers fill.
Back Pressure flow control is typically used in half duplex mode to send a
"collision" signal to the sending port (mimicking a state of packet collision)
causing the sending port to temporarily stop sending signals and resend
later. Select Flow Control to enable it.
802.1p
Priority
BPDU
Control
CX4 Cable Select the number of meters for the length of the 10GBASE-CX4 cable you
This priority value is added to incoming frames without a (802.1p) priority
queue tag. See Priority Queue Assignment in Table 11 on page 84 for
more information.
Configure the way to treat BPDUs received on this port. You must activate
bridging control protocol transparency in the Switch Setup screen first.
Select Peer to process any BPDU (Bridge Protocol Data Units) received on
this port.
Select Tunnel to forward BPDUs received on this port.
Select Discard to drop any BPDU received on this port.
Select Network to process a BPDU with no VLAN tag and forward a tagged
BPDU.
use to connect between the Switch and another switch for stacking.
90
XGS-4728F User’s Guide
Chapter 8 Basic Setting
Table 13 Basic Setting > Port Setup (continued)
LABEL DESCRIPTION
Apply Click Apply to save your changes to the Switch’s run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
XGS-4728F User’s Guide
91
Chapter 8 Basic Setting
92
XGS-4728F User’s Guide
PART III
Advanced Setup
VLAN (95)
Static MAC Forward Setup (115)
Static Multicast Forward Setup (119)
Filtering (123)
Spanning Tre e Protocol (125)
Bandwidth Control (145)
Broadcast Storm Control (149)
Mirroring (151)
Link Aggregation (153)
Port Authentication (163)
Port Security (169)
Classifier (173)
Loop Guard (255)
VLAN Mapping (259)
Layer 2 Protocol Tunneling (263)
Private VLAN (267)
Policy Rule (179)
Queuing Method (187)
VLAN Stacking (191)
Multicast (199)
AAA (215)
IP Source Guard (231)
93
94
CHAPTER 9
VLAN
The type of screen you see here depends on the VLAN Type you selected in the
Switch Setup screen. This chapter shows you how to configure 802.1Q tagged
and port-based VLANs.
9.1 Introduction to IEEE 802.1Q Tagged VLANs
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
contains two bytes for the TPID (Tag Protocol Identifier, residing within the type/
length field of the Ethernet frame) and two bytes for the TCI (Tag Control
Information, starting after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a pr iority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and the value 4095 (FFF) is reserved, so the maximum possible
number of VLAN configurations is 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 bits
9.1.1 Forwarding Tagged and Untagged Frames
Each port on the Switch is capable of passing tagged or untagged frames. To
forward a frame from an 802.1Q VLAN-a ware switch to an 802.1Q VLAN-unaware
XGS-4728F User’s Guide
95
Chapter 9 VLAN
switch, the Switch first decides where to forward the fr ame and then strips off the
VLAN tag. To forward a frame from an 802.1Q VLAN-unaware switch to an 802.1Q
VLAN-aware switch, the Switch first decides where to forward the frame, and then
inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is
VLAN 1 for all ports, but this can be changed.
A broadcast frame (or a multicast frame for a multicast group that is known by the
system) is duplicated only on ports that are members of the VID (except the
ingress port itself), thus confining the broadcast to a specific domain.
9.2 Automatic VLAN Registration
GARP and GVRP are the protocols used to automatically register VLAN
membership across switches.
9.2.1 GARP
GARP (Generic Attribute Registration Protocol) allows network switches to register
and de-register attribute values with other GARP participants within a bridged
LAN. GARP is a protocol that provides a generic mechanism for protocols that
serve a more specific application, for example, GVRP.
9.2.1.1 GARP Timers
Switches join VLANs by making a declaration. A declaration is made by issuing a
Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set
declaration timeout values.
9.2.2 GVRP
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a
way for switches to register necessary VLAN members on ports across the
network. Enable this function to permit VLAN groups beyond the local Switch.
Please refer to the following table for common IEEE 802.1Q VLAN terminology.
Table 14 IEEE 802.1Q VLAN Terminology
VLAN
PARAMETER
VLAN Type Permanent VLAN This is a static VLAN created manually.
TERM DESCRIPTION
96
Dynamic VLAN This is a VLAN configured by a GVRP registration/
deregistration process.
XGS-4728F User’s Guide
Chapter 9 VLAN
Table 14 IEEE 802.1Q VLAN Terminology (continued)
VLAN
PARAMETER
VLAN
Administrative
Control
VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all
VLAN Port Port VID This is the VLAN ID assigned to untagged frames
TERM DESCRIPTION
Registration Fixed Fixed registration ports are permanent VLAN
members.
Registration
Forbidden
Normal
Registration
Untagged Ports belonging to the specified VLAN don't tag all
Acceptable Frame
Type
Ingress filtering If set, the Switch discards incoming frames for
Ports with registration forbidden are forbidden to
join the specified VLAN.
Ports dynamically join a VLAN using GVRP.
outgoing frames transmitted.
outgoing frames transmitted.
that this port received.
You may choose to accept both tagged and
untagged incoming frames, just tagged incoming
frames or just untagged incoming frames on a
port.
VLANs that do not have this port as a member.
9.3 Port VLAN Trunking
Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN
groups to pass through that port. This is useful if you w ant to set up VL AN groups
on end devices without having to configure the same VLAN groups on
intermediary devices.
The following figure describes VLAN Trunking. Suppose you want to create VLAN
groups 1 and 2 (V1 and V2) on devices A and B. Without VLAN Trunking, you
must configure VLAN groups 1 and 2 on all intermediary switches C, D and E;
otherwise they will drop frames with unknown VLAN group tags. However, with
VLAN Trunking enabled on a port(s) in each intermediary switch you only need
to create VLAN groups in the end devices (A and B). C, D and E automatically
XGS-4728F User’s Guide
97
Chapter 9 VLAN
allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to
those switches) to pass through their VLAN trunking port(s).
Figure 44 Port VLAN Trunking
9.4 Select the VLAN Type
Select a VLAN type in the Basic Setting > Switch Setup screen.
Figure 45 Switch Setup: Select VLAN Type
9.5 Static VLAN
Use a static VLAN to decide whether an incoming frame on a port should be
• sent to a VLAN group as normal depending on its VLAN tag.
• sent to a group whether it has a VLAN tag or not.
• blocked from a VLAN group regardless of its VLAN tag.
You can also tag all outgoing frames (that were previously untagged) from a port
with the specified VID.
98
XGS-4728F User’s Guide
9.5.1 VLAN Status
See Section 9.1 on page 95 for more information on Static VLAN. Click Advanced
Application > VLAN from the navigation panel to display the VLAN Status
screen as shown next.
Figure 46 Advanced Application > VLAN: VLAN Status
Chapter 9 VLAN
The following table describes the labels in this screen.
Table 15 Advanced Application > VLAN: VLAN Status
LABEL DESCRIPTION
VLAN Search
by VID
The Number
of VLAN
The Number
of Search
Results
Index This is the VLAN index number. Click on an index number to view more
VID This is the VLAN identification number that was configured in the Static
Elapsed Time This field shows how long it has been since a normal VLAN was registered
Status This field shows how this VLAN was added to the Switch; dynamic -
Change Pages Click Previous or Next to show the previous/next screen if all status
Enter an existing VLAN ID number(s) (separated by a comma) and click
Search to display only the specified VLAN(s) in the list below.
Leave this field blank and click Search to display all VLANs configured on
the Switch.
This is the number of VLANs configured on the Switch.
This is the number of VLANs that match the searching criteria and display
in the list below.
This field displays only when you use the Search button to look for
certain VLANs.
VLAN details.
VLAN screen.
or a static VLAN was set up.
using GVRP, static - added as a permanent entry or other - added in
another way such as via Multicast VLAN Registration (MVR).
information cannot be seen in one screen.
XGS-4728F User’s Guide
99
Chapter 9 VLAN
9.5.2 VLAN Details
Use this screen to view detailed port settings and status of the VLAN group. See
Section 9.1 on page 95 for more information on static VLAN. Click on an index
number in the VLAN Status screen to display VLAN details.
Figure 47 Advanced Application > VLAN > VLAN Detail
The following table describes the labels in this screen.
Table 16 Advanced Application > VLAN > VLAN Detail
LABEL DESCRIPTION
VLAN Status Click this to go to the VLAN Status screen.
VID This is the VLAN identification number that was configured in the Static
VLAN screen.
Port Number This column displays the ports that are participating in a VLAN. A tagged
port is marked as T, an untagged port is marked as U and ports not
participating in a VLAN are marked as “–“.
Elapsed Time This field shows how long it has been since a normal VLAN was registered
or a static VLAN was set up.
Status This field shows how this VLAN was added to the Switch; dynamic -
using GVRP, static - added as a permanent entry or other - added in
another way such as via Multicast VLAN Registration (MVR).
9.5.3 Configure a Static VLAN
Use this screen to configure and view 802.1Q VLAN parameters for the Switch.
See Section 9.1 on page 95 for more information on static VLAN. To configure a
100
XGS-4728F User’s Guide
Loading...