ZyXEL MGS-3712F User Guide

ZyXEL MGS-3712F Manual

Get ZyXEL MGS-3712F PDF manuals and user guides View all ZyXEL MGS-3712F manuals
Add to My Manuals
Save this manual to your list of manuals

ZyXEL MGS-3712F manual content summary:

  • ZyXEL MGS-3712F | User Guide - Page 1
    MGS-3712/MGS-3712F MetroGigabit Switch Default Login Details IP Address http://192.168.1.1 http://192.168.0.1 (Out-of-band MGMT port) User Name admin Password 1234 Firmwawrwew.Vzyexresl.icoonm 3.90 Edition 1, 10/2008 www.zyxel.com Copyright © 2008 ZyXEL Communications Corporation
  • ZyXEL MGS-3712F | User Guide - Page 2
  • ZyXEL MGS-3712F | User Guide - Page 3
    for support documents. Documentation Feedback Send your comments, questions or suggestions to: [email protected] Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. MGS-3712/MGS-3712F User's Guide 3
  • ZyXEL MGS-3712F | User Guide - Page 4
    ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. Customer Support Should problems your device. Brief description of the problem and the steps you took to solve it. 4 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 5
    you may need to configure or helpful tips) or recommendations. Syntax Conventions • The MGS-3712 and MGS-3712F models may be referred to as the "Switch", the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field choices are all in bold
  • ZyXEL MGS-3712F | User Guide - Page 6
    Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The Switch icon is not an exact representation of your device. The Switch Computer Notebook computer Server DSLAM Firewall Telephone Router 6 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 7
    cables to the correct ports. • Place connecting cables carefully so that no one will step on them or stumble over them. • Always disconnect all cables from this device before servicing or disassembling. • and electronic equipment should be treated separately. MGS-3712/MGS-3712F User's Guide 7
  • ZyXEL MGS-3712F | User Guide - Page 8
    Safety Warnings 8 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 9
    Port Security ...171 Classifier ...177 Policy Rule ...185 Queuing Method ...193 VLAN Stacking ...197 Multicast ...205 AAA ...221 IP Source Guard ...235 Loop Guard ...261 VLAN Mapping ...265 Layer 2 Protocol Tunneling ...269 IP Application ...273 Static Route ...275 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 10
    Access Control ...305 Diagnostic ...329 Syslog ...331 Cluster Management ...335 MAC Table ...343 ARP Table ...347 Configure Clone ...349 Troubleshooting & Product Specifications 351 Troubleshooting ...353 Product Specifications ...357 Appendices and Index ...365 10 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 11
    Attaching the Mounting Brackets to the Switch 31 2.3.3 Mounting the Switch on a Rack 32 Chapter 3 Hardware Overview...33 3.1 Front Panel ...33 3.1.1 Console Port ...35 3.1.2 Gigabit Ethernet Ports 35 3.1.3 Mini-GBIC Slots ...36 3.1.4 Management Port ...38 MGS-3712/MGS-3712F User's Guide 11
  • ZyXEL MGS-3712F | User Guide - Page 12
    65 Chapter 6 Initial Setup Example...67 6.1 Overview ...67 6.1.1 Creating a VLAN ...67 6.1.2 Setting Port VID ...68 6.2 Configuring Switch Management IP Address 70 Chapter 7 System Status and Port Statistics 73 7.1 Overview ...73 7.2 Port Status Summary ...73 12 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 13
    Switch Setup Screen ...85 8.6 IP Setup ...87 8.6.1 Management IP Addresses 87 8.7 Port Setup Port-based VLAN Setup 111 9.11.1 Configure a Port-based VLAN 112 Chapter 10 Static MAC Forward Setup 115 10.1 Overview ...115 10.2 Configuring Static MAC Forwarding 115 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 14
    and PIR ...147 14.2 Bandwidth Control Setup 148 Chapter 15 Broadcast Storm Control ...151 15.1 Broadcast Storm Control Setup 151 Chapter 16 Mirroring ...153 16.1 Port Mirroring Setup ...153 Chapter 17 Link Aggregation ...155 17.1 Link Aggregation Overview 155 14 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 15
    1x Security 168 18.2.2 Activate MAC Authentication 169 Chapter 19 Port Security...171 19.1 About Port Security ...171 19.2 Port Security Setup ...172 19.3 VLAN MAC Address Limit 174 193 22.1.1 Strictly Priority Queuing 193 22.1.2 Weighted Fair Queuing 193 MGS-3712/MGS-3712F User's Guide 15
  • ZyXEL MGS-3712F | User Guide - Page 16
    VLAN ...210 24.5 IGMP Filtering Profile ...212 24.6 MVR Overview ...213 24.6.1 Types of MVR Ports 214 24.6.2 MVR Modes ...214 24.6.3 How MVR Works ...214 24.7 General MVR Configuration 215 24 225 25.2.3 AAA Setup ...227 25.2.4 Vendor Specific Attribute 230 16 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 17
    of Contents 25.3 Supported RADIUS Attributes 231 25 .4 DHCP Snooping ...243 26.5 DHCP Snooping Configure 246 26.5.1 DHCP Snooping Port Configure 248 26.5.2 DHCP Snooping VLAN Configure 249 26.6 ARP Inspection Status Tunneling 271 Part IV: IP Application 273 MGS-3712/MGS-3712F User's Guide 17
  • ZyXEL MGS-3712F | User Guide - Page 18
    Static Routing Overview 275 30.2 Configuring Static Routing 276 Chapter 31 Differentiated Services ...279 31.1 DiffServ Overview ...279 31.1.1 DSCP and Per-Hop 298 33.4 Reboot System ...299 33.5 Firmware Upgrade ...299 33.6 Restore a Configuration File 300 18 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 19
    Switch 322 34.6.1 Requirements for Using SSH 322 34.7 Introduction to HTTPS ...322 34.8 HTTPS Example ...323 34.8.1 Internet Explorer Warning Messages 323 34.8.2 Netscape Navigator Warning Messages 324 34.8.3 The Main Screen ...326 34.9 Service Port 335 MGS-3712/MGS-3712F User's Guide 19
  • ZyXEL MGS-3712F | User Guide - Page 20
    , Hardware Connections, and LEDs 353 41.2 Switch Access and Login 354 41.3 Switch Configuration ...356 Chapter 42 Product Specifications ...357 Part VII: Appendices and Index 365 Appendix A Common Services 367 Appendix B Legal Information 371 Index...375 20 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 21
    PART I Introduction and Hardware Getting to Know Your Switch (23) Hardware Installation and Connection (29) Hardware Overview (33) Tutorials (45) 21
  • ZyXEL MGS-3712F | User Guide - Page 22
    22
  • ZyXEL MGS-3712F | User Guide - Page 23
    solution for small networks where rapid growth can be expected in the near future. The Switch can be used standalone for a group of heavy traffic users. You can connect computers and servers directly to the Switch's port or connect other switches to the Switch. MGS-3712/MGS-3712F User's Guide 23
  • ZyXEL MGS-3712F | User Guide - Page 24
    provide a super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. Figure 2 Bridging Application 24 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 25
    two networks. Switching to higher Ports in the same VLAN group share the same frame broadcast domain thus increase network performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any recabling. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 26
    the Switch Do the following things regularly to make the Switch more secure and to manage the Switch more effectively. • Change the password. Use a password that's not easy to guess and that consists of different types of characters, such as numbers and letters. 26 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 27
    even crashes. If you forget your password, you will have to reset the Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. MGS-3712/MGS-3712F User's Guide 27
  • ZyXEL MGS-3712F | User Guide - Page 28
    Chapter 1 Getting to Know Your Switch 28 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 29
    of the Switch and the connected cables. Make sure there is a power outlet nearby. 3 Make sure there is enough clearance around the Switch to allow air circulation and the attachment of cables and the power cord. 4 Remove the adhesive backing from the rubber feet. MGS-3712/MGS-3712F User's Guide 29
  • ZyXEL MGS-3712F | User Guide - Page 30
    Make sure the rack will safely support the combined weight of all the equipment it contains. • Make sure the position of the Switch does not make the rack unstable or topheavy. Take all necessary precautions to anchor the rack securely before installing the unit. 30 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 31
    screwdriver, install the M3 flat head screws through the mounting bracket holes into the Switch. 3 Repeat steps 1 and 2 to install the second mounting bracket on the other side of the Switch. 4 You may now mount the Switch on a rack. Proceed to the next section. MGS-3712/MGS-3712F User's Guide 31
  • ZyXEL MGS-3712F | User Guide - Page 32
    of the rack. Figure 7 Mounting the Switch on a Rack 2 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack. 32 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 33
    for alarm management. Figure 8 Front Panel: MGS-3712 LEDs Console Port Management Port Signal slot Ethernet Ports Dual Personality Interfaces MGS-3712F The following figure shows the front panel of the MGS-3712F. The front panel contains the Switch LEDs, 8 slots for mini-GBIC (Gigabit Interface
  • ZyXEL MGS-3712F | User Guide - Page 34
    the Switch. Signal Slot Connect the signal input pins to signal output terminals on other pieces of equipment. Connect the signal output pins to a signal input terminal on another piece of equipment. See Chapter 42 on page 357 for details on the pin assignments required. 34 MGS-3712/MGS-3712F
  • ZyXEL MGS-3712F | User Guide - Page 35
    duplex mode. When the Switch's auto-negotiation is turned off, an Ethernet port uses the pre-configured speed and duplex mode when making a connection, thus requiring you to make sure that the settings of the peer Ethernet port are the same in order to connect. MGS-3712/MGS-3712F User's Guide 35
  • ZyXEL MGS-3712F | User Guide - Page 36
    all Gigabit port connections. Auto-crossover ports automatically sense whether they need to function as crossover or straight ports, so crossover cables can connect both computers and switches/hubs. down. 2 Press the transceiver firmly until it clicks into place. 36 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 37
    Chapter 3 Hardware Overview 3 The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. 4 Close ). 1 Remove the fiber optic cables from the transceiver. 2 Open the transceiver's latch (latch styles vary). MGS-3712/MGS-3712F User's Guide 37
  • ZyXEL MGS-3712F | User Guide - Page 38
    Port The MGMT (management) port is used for local management. Connect directly to this port using an Ethernet cable. You can configure the Switch switch and the Switch's power switch in the OFF position until you come to the procedure for turning on the power. 38 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 39
    . 4 Connect one end of a power wire to the Switch's -48V (input) pin and tighten the captive screw. 5 Connect the other end of the power wire to the negative terminal on the power supply. 6 Insert the terminal block plug in the Switch's terminal block header. MGS-3712/MGS-3712F User's Guide 39
  • ZyXEL MGS-3712F | User Guide - Page 40
    with the signal connector) allows you to connect devices to the Switch, such as sensors or other ZyXEL switches which support the external alarm feature. This feature is in addition to the system Signal connector in this way using the remaining signal input pins. 40 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 41
    external alarm to another ZyXEL Switch which supports the external alarm feature. If daisy-chaining to a ZyXEL switch that is a different model, check your switch's documentation for the correct signal pin pairs of an Signal connector on another ZyXEL Switch. MGS-3712/MGS-3712F User's Guide 41
  • ZyXEL MGS-3712F | User Guide - Page 42
    10 ......... 3 2 1 Pin Assignments 3.2 Rear Panel The following figures show the rear panels of the MGS-3712 and MGS-3712F models. The rear panel contains a connector for external backup power supply. Figure 17 Rear Panel: MGS-3712 Figure 18 Rear Panel: MGS-3712F 42 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 43
    mode. Off The Gigabit port is negotiating in half-duplex mode. MGMT 10 Green Blinking The system is transmitting/receiving to/from an Ethernet device. On The port is connected at 10Mbps. Off The port is not connected at 10Mbps or to an Ethernet device. MGS-3712/MGS-3712F User's Guide 43
  • ZyXEL MGS-3712F | User Guide - Page 44
    command line interface using a terminal emulation program on a computer connected to the Switch console port (see Section 3.1.1 on page 35) or access the Switch using Telnet. The next part of this guide discusses configuring the Switch using the web configurator. 44 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 45
    in VLAN network (V). Create a VLAN containing ports 5, 6 and 7. Connect a computer M to the Switch's MGMT port. Figure 19 Tutorial: DHCP Snooping Tutorial Overview HOST PORT CONNECTED VLAN DHCP Server 5 (A) 1 and 100 PVID 100 DHCP SNOOPING PORT TRUSTED Yes MGS-3712/MGS-3712F User's Guide 45
  • ZyXEL MGS-3712F | User Guide - Page 46
    create a VLAN with ID of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control field as shown. Deselect Tx Tagging because you don't want outgoing traffic to contain this VLAN tag. Click Add. Figure 20 Tutorial: Create a VLAN and Add Ports to It 46 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 47
    on ports 5, 6 and 7 with the tag 100. Figure 21 Tutorial: Tag Untagged Frames 4 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply. Figure 22 Tutorial: Specify DHCP VLAN MGS-3712/MGS-3712F User's Guide 47
  • ZyXEL MGS-3712F | User Guide - Page 48
    Untrusted because they are connected to DHCP clients. Click Apply. Figure 23 Tutorial: Set the DHCP Server Port to Trusted 7 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure > VLAN, . Figure 24 Tutorial: Enable DHCP Snooping on this VLAN 48 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 49
    Lease 6d23h59m20s Type dhcp-snooping VLAN ---- 100 Port ----- 7 4.2 How to Use DHCP Relay on the Switch This tutorial describes how to configure your Switch to forward DHCP client requests to a specific address (say 172.16.1.18) to DHCP client A based on MGS-3712/MGS-3712F User's Guide 49
  • ZyXEL MGS-3712F | User Guide - Page 50
    26 Tutorial: DHCP Relay Scenario DHCP Server 192.168.2.3 Port 2 PVID=102 A VLAN 102 172.16.1.18 4.2.2 Creating a VLAN Follow the steps below to configure port 2 as a member of VLAN 102. 1 Access the web configurator through the Switch's management port. 50 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 51
    a descriptive name (VALN 102 for example) in the Name field and enter 102 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN. 6 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. MGS-3712/MGS-3712F User's Guide 51
  • ZyXEL MGS-3712F | User Guide - Page 52
    link in the VLAN Status screen. Figure 29 Tutorial: Click the VLAN Port Setting Link 9 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. 52 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 53
    time memory. Figure 30 Tutorial: Add Tag for Frames Received on Port 2 11 Click the Save link in the upper right corner of Follow the steps below to enable DHCP relay on the Switch and allow the Switch to add relay agent information (such as the VLAN ID boxes. MGS-3712/MGS-3712F User's Guide 53
  • ZyXEL MGS-3712F | User Guide - Page 54
    . 4.2.4 Troubleshooting Check the Switch's port 2 in VLAN 102. 2 You configured the correct VLAN ID, port number and system name for DHCP relay on both the DHCP server and the Switch. 3 You clicked the Save link on the Switch to have your settings take effect. 54 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 55
    PART II Basic Configuration The Web Configurator (57) Initial Setup Example (67) System Status and Port Statistics (73) Basic Setting (79) 55
  • ZyXEL MGS-3712F | User Guide - Page 56
    56
  • ZyXEL MGS-3712F | User Guide - Page 57
    enabled by default in Windows XP SP (Service Pack) 2. • JavaScript (enabled by default Switch (the default management IP address is 192.168.1.1 through an in-band (non-MGMT) port and 192.168.0.1 through the MGMT port) in the Location or Address field. Press [ENTER]. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 58
    is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. Figure 32 Web Configurator: Login 4 Click then click on a submenu link to open the screen in the main window. 58 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 59
    this link to save your configuration into the Switch's nonvolatile memory. Nonvolatile memory is the configuration of your Switch that stays the same even if the Switch's power is turned off. C - Click Navigation Panel Links LINK DESCRIPTION Basic Settings MGS-3712/MGS-3712F User's Guide 59
  • ZyXEL MGS-3712F | User Guide - Page 60
    . Policy Rule This link takes you to a screen where you can configure the Switch to perform special treatment on the grouped packets. Queuing Method This link takes you to a screen where you can configure queuing with associated queue weights for each port. 60 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 61
    attached to what ports and VLAN IDs. ARP Table This link takes you to a screen where you can view the MAC addresses - IP address resolution table. Configure Clone This link takes you to a screen where you can copy attributes of one port to other ports. MGS-3712/MGS-3712F User's Guide 61
  • ZyXEL MGS-3712F | User Guide - Page 62
    link when you are done with a configuration session. 5.5 Switch Lockout You could block yourself (and all others) from using in-band-management (managing through the data ports) if you do one of the following: 1 Delete the management VLAN (default is VLAN 1). 62 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 63
    to begin a session. When you reconnect the Switch's power, you will see the initial screen. 3 When you see the message "Press any key to enter Debug Mode within 3 seconds ..." press any key to enter debug mode. 4 Type atlc after the "Enter Debug Mode" message. MGS-3712/MGS-3712F User's Guide 63
  • ZyXEL MGS-3712F | User Guide - Page 64
    on your terminal. 6 After a configuration file upload, type atgo to restart the Switch. Figure 35 Resetting the Switch: Via the Console Port ootbase Version: V0.4 | 12/13/2007 01:35:53 RAM: Size = for security reasons. Figure 36 Web Configurator: Logout Screen 64 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 65
    Chapter 5 The Web Configurator 5.8 Help The web configurator's online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. MGS-3712/MGS-3712F User's Guide 65
  • ZyXEL MGS-3712F | User Guide - Page 66
    Chapter 5 The Web Configurator 66 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 67
    broadcast frames to the VLAN group in which the port(s) belongs. You can do this with port-based VLAN or tagged static VLAN with fixed port members. In this example, you want to configure port 1 as a member of VLAN 2. Figure 37 Initial Setup Network Example: VLAN MGS-3712/MGS-3712F User's Guide 67
  • ZyXEL MGS-3712F | User Guide - Page 68
    -time memory. Settings in the run-time memory are lost when the Switch's power is turned off. 6.1.2 Setting Port VID Use PVID to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. 68 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 69
    > VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 1 and click Apply to save your changes back to the runtime memory. Settings in the run-time memory are lost when the Switch's power is turned off. MGS-3712/MGS-3712F User's Guide 69
  • ZyXEL MGS-3712F | User Guide - Page 70
    Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 5.2 on page 57 for more information. 70 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 71
    Static VLAN screen. 7 Click Add to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch's power is turned off. Chapter 6 Initial Setup Example MGS-3712/MGS-3712F User's Guide 71
  • ZyXEL MGS-3712F | User Guide - Page 72
    Chapter 6 Initial Setup Example 72 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 73
    configurator displays a port statistical summary with links to each port showing statistical details. 7.2 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next. Figure 40 Status MGS-3712/MGS-3712F User's Guide 73
  • ZyXEL MGS-3712F | User Guide - Page 74
    field shows the total amount of time in hours, minutes and seconds the port has been up. Clear Counter Enter a port number and then click Clear Counter to erase the recorded statistical information for that port, or select Any to clear statistics for all ports. 74 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 75
    viewing. Name This field displays the name of the port. Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half duplex). It also shows the cable type (Copper or Fiber). MGS-3712/MGS-3712F User's Guide 75
  • ZyXEL MGS-3712F | User Guide - Page 76
    Status If STP (Spanning Tree Protocol) is enabled, this field displays the STP state of the port (see Section 13.1 on page 125 for more information). LACP TxPkts RxPkts Errors Tx KB/s Rx that is, after 512 bits of the packets have already been transmitted. 76 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 77
    Chapter 7 System Status and Port Statistics Table 7 Status: Port Details (continued) LABEL DESCRIPTION Error Packet The following fields display maximum frame size. The maximum frame size varies depending on your switch model. See Chapter 42 on page 357. MGS-3712/MGS-3712F User's Guide 77
  • ZyXEL MGS-3712F | User Guide - Page 78
    Chapter 7 System Status and Port Statistics 78 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 79
    in the Switch logs. The Switch Setup screen allows you to set up and configure global Switch features. The IP Setup screen allows you to configure a Switch IP address in each routing domain, subnet mask(s) and DNS (domain name server) for management purposes. MGS-3712/MGS-3712F User's Guide 79
  • ZyXEL MGS-3712F | User Guide - Page 80
    Setting > System Info to display the screen as shown. You can check the firmware version number and monitor the Switch temperature, fan speeds and voltage in this screen. Figure 42 Basic Setting > for temperatures below the threshold and Error for those above. 80 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 81
    measured at this point. Threshold This field displays the percentage tolerance of the voltage with which the Switch still works. Status Normal indicates that the voltage is within an acceptable operating range at this point; otherwise Error is displayed. MGS-3712/MGS-3712F User's Guide 81
  • ZyXEL MGS-3712F | User Guide - Page 82
    Enter the geographic location of your Switch. You can use up to 32 printable ASCII characters; spaces are allowed. Contact Enter the name of the person in charge of this Switch. You can use up to Person's Name 32 printable ASCII characters; spaces are allowed. 82 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 83
    when Bootup Enter the time service protocol that your timeserver uses. Not all time servers support all protocols, so you may 868). None is the default value. Enter the time manually. Each time you turn on the Switch, the time and date will be reset to 1970-1-1 MGS-3712/MGS-3712F User's Guide 83
  • ZyXEL MGS-3712F | User Guide - Page 84
    Switch's run-time memory. The Switch loses port. With VLAN, all broadcasts are confined to a specific broadcast domain. Note: VLAN is unidirectional; it only governs outgoing traffic. See Chapter 9 on page 95 for information on port-based and 802.1Q tagged VLANs. 84 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 85
    10 Basic Setting > Switch Setup LABEL DESCRIPTION VLAN Type Choose 802.1Q or Port Based. The VLAN Setup screen changes depending on whether you choose 802.1Q VLAN type or Port Based VLAN type in . See the chapter on VLAN setup for more background information. MGS-3712/MGS-3712F User's Guide 85
  • ZyXEL MGS-3712F | User Guide - Page 86
    Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to reset the fields. 86 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 87
    of the default gateway (next hop) for outgoing traffic. 8.6.1 Management IP Addresses The Switch needs an IP address for it to be managed over the network. The factory default to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). MGS-3712/MGS-3712F User's Guide 87
  • ZyXEL MGS-3712F | User Guide - Page 88
    address and vice versa. Enter a domain name server IP address in order to be able to use a domain name instead of an IP address. 88 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 89
    run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring the fields again. MGS-3712/MGS-3712F User's Guide 89
  • ZyXEL MGS-3712F | User Guide - Page 90
    You can create up to 64 IP addresses, which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). You must configure a VLAN first. IP Address Enter the IP Cancel to clear the selected checkboxes in the Delete column. 90 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 91
    Enter a descriptive name that identifies this port. You can enter up to 64 alpha-numerical characters. Type Note: Due to space limitation, the port name may be truncated in some web configurator screens. This field displays 10/100/1000M for Gigabit connections. MGS-3712/MGS-3712F User's Guide 91
  • ZyXEL MGS-3712F | User Guide - Page 92
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 92 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 93
    119) Filtering (123) Spanning Tree Protocol (125) Bandwidth Control (147) Broadcast Storm Control (151) Mirroring (153) Link Aggregation (155) Port Authentication (165) Port Security (171) Classifier (177) Policy Rule (185) Queuing Method (193) VLAN Stacking (197) Multicast (205) AAA (221) IP Source
  • ZyXEL MGS-3712F | User Guide - Page 94
    94
  • ZyXEL MGS-3712F | User Guide - Page 95
    094. TPID User Priority 2 Bytes 3 Bits CFI VLAN ID 1 Bit 12 bits 9.1.1 Forwarding Tagged and Untagged Frames Each port on the Switch is capable of passing tagged or untagged frames. To forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware MGS-3712/MGS-3712F User's Guide 95
  • ZyXEL MGS-3712F | User Guide - Page 96
    IEEE 802.1Q VLAN terminology. Table 13 IEEE 802.1Q VLAN Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration/ deregistration process. 96 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 97
    C, D and E; otherwise they will drop frames with unknown VLAN group tags. However, with VLAN Trunking enabled on a port(s) in each intermediary switch you only need to create VLAN groups in the end devices (A and B). C, D and E automatically allow frames with MGS-3712/MGS-3712F User's Guide 97
  • ZyXEL MGS-3712F | User Guide - Page 98
    switches) to pass through their VLAN trunking port(s). Figure 47 Port VLAN Trunking 9.4 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 48 Switch frames (that were previously untagged) from a port with the specified VID. 98 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 99
    to the Switch; dynamic using GVRP, static - added as a permanent entry or other - added in another way such as via Multicast VLAN Registration (MVR). Change Pages Click Previous or Next to show the previous/next screen if all status information cannot be seen in one screen. MGS-3712/MGS-3712F User
  • ZyXEL MGS-3712F | User Guide - Page 100
    VLAN Status Click this to go to the VLAN Status screen. VID Port Number Elapsed Time Status This is the VLAN identification number that was configured VLAN parameters for the Switch. See Section 9.1 on page 95 for more information on static VLAN. To configure a 100 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 101
    consists of up to 64 printable characters. VLAN Group ID Enter the VLAN ID for this static entry; the valid range is between 1 and 4094. Port The port number identifies the port you are configuring. MGS-3712/MGS-3712F User's Guide 101
  • ZyXEL MGS-3712F | User Guide - Page 102
    TX Tagging if you want the port to tag all outgoing frames transmitted with this VLAN Group ID. Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is summary table. Click Cancel to clear the Delete check boxes. 102 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 103
    all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 104
    is received on a port, the Switch checks if a tag services is designated for IP subnet 172.16.1.0/24, video for 192.168.1.0/24 and data for 10.1.1.0/24. The Switch can then be configured to group incoming traffic based on the source IP subnet of incoming frames. 104 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 105
    on their source IP subnet and prioritized accordingly. That is video services receive the highest priority and data the lowest. Figure 53 Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. MGS-3712/MGS-3712F User's Guide 105
  • ZyXEL MGS-3712F | User Guide - Page 106
    18 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN Setup LABEL DESCRIPTION Active Check this box to activate this subnet based VLANs on the Switch. DHCP-Vlan Override When DHCP snooping which you want to configure this subnet based VLAN. 106 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 107
    an upstream frame is received on a port (configured for a protocol based VLAN), the Switch checks if a tag is added port 1, 2, 3 and 4 belong to static VLAN 100, and port 4, 5, 6, 7 belong to static VLAN 120. You configure a protocol based VLAN A with priority 3 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 108
    Port Setting screen to display the configuration screen as shown. Note: Protocol-based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 56 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN 108 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 109
    shows the VLAN ID of the port. This field shows the priority which is assigned to frames belonging to this protocol based VLAN. Click this to delete the protocol based VLANs which you marked for deletion. Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 109
  • ZyXEL MGS-3712F | User Guide - Page 110
    click Add. Figure 57 Protocol Based VLAN Configuration Example To add more ports to this protocol based VLAN. 1 Click the index number of the protocol based VLAN entry. Click 1 2 Change the value in the Port field to the next port you want to add. 3 Click Add. 110 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 111
    Switch uses a default VLAN ID of 1. You cannot change it. Note: In screens (such as IP Setup and Filtering) that require a VID, you must enter 1 as the VID. The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN with all Ethernet ports. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 112
    VLAN 9.11.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. Figure 58 Port Based VLAN Setup (All Connected) 112 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 113
    port for the corresponding port listed on the left (its outgoing port). CPU refers to the Switch management port. By default it forms a VLAN with all Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be managed from that port. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 114
    . The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 114 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 115
    been manually port. This may reduce the need for broadcasting. Static MAC address forwarding together with port security allow only computers in the MAC address table on a port to access the Switch. See Chapter 19 on page 171 for more information on port security. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 116
    the port where the MAC address entered in the previous field will be automatically forwarded. Add Click Add to save your rule to the Switch's run-time memory. The Switch loses this rule if it is turned VLAN identification number to which the MAC address belongs. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 117
    ID number of the VLAN group. Port This field displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. MGS-3712/MGS-3712F User's Guide 117
  • ZyXEL MGS-3712F | User Guide - Page 118
    Chapter 10 Static MAC Forward Setup 118 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 119
    that has been manually entered in the the switch will either flood the multicast frames to all ports or ports. With static multicast forwarding, you can forward these multicasts to port(s) within a VLAN group. Figure 62 shows frames being forwarded to devices MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 120
    Forwarding to A Single Port Figure 63 Static Mutlicast Forwarding to Multiple Ports 11.2 Configuring Static Multicast Forwarding Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). 120 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 121
    hyphen (-). For example, enter "3-5" for ports 3, 4, and 5. Enter "3,5,7" for ports 3, 5, and 7. Add Click Add to save your rule to the Switch's run-time memory. The Switch loses this rule if it is turned off a static multicast MAC address rule for port(s). MGS-3712/MGS-3712F User's Guide 121
  • ZyXEL MGS-3712F | User Guide - Page 122
    the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. 122 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 123
    sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). Click Advanced Application > Filtering in the navigation panel to display the screen as shown next. Figure 65 Advanced Application > Filtering MGS-3712/MGS-3712F User's Guide 123
  • ZyXEL MGS-3712F | User Guide - Page 124
    pairs. Type the VLAN group identification number. Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link clear the selected checkbox(es) in the Delete column. 124 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 125
    13 Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), port states are Discarding, Learning, and Forwarding. Note: In this user's guide, "STP" refers to both STP and RSTP. 13.1.1 STP Terminology The root bridge is the base of the spanning tree. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 126
    65535 1 to 65535 1 to 65535 On each bridge, the root port is the port through which this bridge communicates with the root. It is the port on this switch with the lowest path cost to the root (the root path cost network to re-establish a valid network topology. 126 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 127
    ZyXEL's proprietary feature that is compatible with RSTP and STP. With MRSTP, you can have more than one spanning tree on your Switch and assign port on switch A. To set up MRSTP, activate MRSTP on the Switch and specify which port(s) belong to which spanning tree. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 128
    Chapter 13 Spanning Tree Protocol Note: Each port can belong to one STP tree only. Figure 66 MRSTP Network figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be 128 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 129
    paths outside this region) is increased by one. Internal path cost (of paths within this region) is increased by one when BPDUs traverse the region. MGS-3712/MGS-3712F User's Guide 129
  • ZyXEL MGS-3712F | User Guide - Page 130
    of an MST instance are members of the CIST. In an MSTP-enabled network, there is only one CIST that runs between MST regions 130 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 131
    depending on which STP mode (RSTP, MRSTP or MSTP) you configure on the Switch. This screen is described in detail in the section that follows the configuration section for each STP mode. Click Configuration to activate one of the STP standards on the Switch. MGS-3712/MGS-3712F User's Guide 131
  • ZyXEL MGS-3712F | User Guide - Page 132
    . The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 132 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 133
    to disable RSTP. Note: You must also activate Rapid Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable RSTP on the Switch. MGS-3712/MGS-3712F User's Guide 133
  • ZyXEL MGS-3712F | User Guide - Page 134
    value is 128. Path cost is the cost of transmitting a frame on to a LAN through that port. It is recommended to assign this value according to the speed of the bridge. The slower the media, the higher the cost - see Table 24 on page 126 for more information. 134 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 135
    MAC address. This ID is the same for Root and Our Bridge if the Switch is the root switch. This is the time interval (in seconds) at which the root switch transmits a configuration message. The root bridge determines Hello Time, Max Age and Forwarding Delay. MGS-3712/MGS-3712F User's Guide 135
  • ZyXEL MGS-3712F | User Guide - Page 136
    through which this Switch must communicate with the root of the Spanning Tree. Topology This is the number of times the spanning tree has been reconfigured. Changed Times Time Since Last This is the time since the spanning tree was last reconfigured. Change 136 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 137
    STP tree. Note: You must also activate Multiple Rapid Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable MRSTP on the Switch. MGS-3712/MGS-3712F User's Guide 137
  • ZyXEL MGS-3712F | User Guide - Page 138
    value is 128. Path cost is the cost of transmitting a frame on to a LAN through that port. It is recommended to assign this value according to the speed of the bridge. The slower the media, the higher the cost - see Table 24 on page 126 for more information. 138 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 139
    (the root bridge). Our Bridge is this switch. This Switch may also be the root bridge. This is the unique identifier for this bridge, consisting of bridge priority plus MAC address. This ID is the same for Root and Our Bridge if the Switch is the root switch. MGS-3712/MGS-3712F User's Guide 139
  • ZyXEL MGS-3712F | User Guide - Page 140
    through which this Switch must communicate with the root of the Spanning Tree. Topology This is the number of times the spanning tree has been reconfigured. Changed Times Time Since Last This is the time since the spanning tree was last reconfigured. Change 140 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 141
    Advanced Application > Spanning Tree Protocol screen. See Section 13.1.5 on page 128 for more information on MSTP. Figure 77 Advanced Application > Spanning Tree Protocol > MSTP MGS-3712/MGS-3712F User's Guide 141
  • ZyXEL MGS-3712F | User Guide - Page 142
    number of hops (between 1 and 255) in an MSTP region before the BPDU is discarded and the port information is aged. Enter a descriptive name (up to 32 characters) of an MST region. Enter a MST instance on the Switch. The Switch supports instance numbers 0-16. 142 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 143
    this port to the MST instance. Configure the priority for each port here. Priority decides which port should be disabled when more than one port forms a loop in a switch. Ports with . This field display the ports configured to participate in the MST instance. MGS-3712/MGS-3712F User's Guide 143
  • ZyXEL MGS-3712F | User Guide - Page 144
    shown next. See Section 13.1.5 on page 128 for more information on MSTP. Note: This screen is only available after you activate MSTP on the Switch. Figure 78 Advanced Application > Spanning Tree Protocol > Status: MSTP 144 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 145
    of the MST instance. Our Bridge is this switch. This Switch may also be the root bridge. This is the unique identifier for this bridge, consisting of bridge priority plus MAC address. This ID is the same for Root and Our Bridge if the Switch is the root switch. MGS-3712/MGS-3712F User's Guide 145
  • ZyXEL MGS-3712F | User Guide - Page 146
    Internal Cost This is the path cost from the root port in this MST instance to the regional root switch. Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the MST instance. 146 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 147
    are sent at the rate up to the PIR. When network congestion occurs, packets through the ingress port exceeding the CIR will be marked for drop. Note: The CIR should be less than the PIR. The sum of CIRs cannot be greater than or equal to the uplink bandwidth. MGS-3712/MGS-3712F User's Guide 147
  • ZyXEL MGS-3712F | User Guide - Page 148
    per second (Kbps) for the incoming traffic flow on a port. The commit rate should be less than the peak rate. The sum of commit rates cannot be greater than or equal to the uplink bandwidth. Select this check box to activate peak rate limits on this port. 148 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 149
    the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to reset the fields. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 150
    Chapter 14 Bandwidth Control 150 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 151
    failure (DLF) packets the Switch receives per second on the ports. When the maximum number port. Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. Figure 80 Advanced Application > Broadcast Storm Control MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 152
    Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to reset the fields. 152 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 153
    interference. Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 81 Advanced Application > Mirroring MGS-3712/MGS-3712F User's Guide 153
  • ZyXEL MGS-3712F | User Guide - Page 154
    to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to reset the fields. 154 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 155
    .3ad standard for static and dynamic (LACP) port trunking. The Switch supports the link aggregation IEEE802.3ad standard. This standard describes the Link Aggregation Control Protocol (LACP), which is a protocol that dynamically creates and manages trunk groups. MGS-3712/MGS-3712F User's Guide 155
  • ZyXEL MGS-3712F | User Guide - Page 156
    Link Aggregation ID: Peer Switch SYSTEM PRIORITY MAC ADDRESS KEY 0000 00-00-00-00-00-00 0000 PORT PRIORITY 00 PORT NUMBER 0000 PORT NUMBER 0000 156 1. Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 157
    following: system priority, MAC address, key, port priority and port number. Refer to Section 17.2.1 on page 156 for more information on this field. The ID displays only when there is a port belonging to this trunk group and LACP is also enabled for this group. MGS-3712/MGS-3712F User's Guide 157
  • ZyXEL MGS-3712F | User Guide - Page 158
    source and destination IP addresses. This field displays how these ports were added to the trunk group. It displays: • Static - if the ports are configured as static members of a trunk group. • LACP - if the ports are configured to join a trunk group via LACP. 158 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 159
    to configure to enable static link Aggregation aggregation. Setting Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. MGS-3712/MGS-3712F User's Guide 159
  • ZyXEL MGS-3712F | User Guide - Page 160
    . Port Group Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 160 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 161
    Note: Do not configure this screen unless you want to enable dynamic link aggregation. Active Select this checkbox to enable Link Aggregation Control Protocol (LACP). MGS-3712/MGS-3712F User's Guide 161
  • ZyXEL MGS-3712F | User Guide - Page 162
    either 1 second or 30 seconds. Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save This example shows you how to create a static port trunk group for ports 2-5. 162 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 163
    same destination. The following figure shows ports 2-5 on switch A connected to switch B. Figure 85 Trunking Example - ports that should belong to this group as shown in the figure below. Click Apply when you are done. Figure 86 Trunking Example - Configuration Screen MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 164
    Chapter 17 Link Aggregation Your trunk group 1 (T1) configuration is now complete; you do not need to go to any additional screens. 164 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 165
    the Switch sends an authentication 2. At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. MGS-3712/MGS-3712F User's Guide 165
  • ZyXEL MGS-3712F | User Guide - Page 166
    RADIUS server validates whether this client is allowed access to the port. Figure 87 IEEE 802.1x Authentication Process 1 New Connection Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the 166 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 167
    the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct > Radius Server Setup screen. Click Advanced Application > Port Authentication in the navigation panel to display the screen as shown. Figure 89 Advanced Application > Port Authentication MGS-3712/MGS-3712F
  • ZyXEL MGS-3712F | User Guide - Page 168
    -port basis. Active Note: Changes in this row are copied to all the ports as soon as you make them. Select this checkbox to permit 802.1x authentication on this port. You must first allow 802.1x authentication on the Switch before configuring it on each port. 168 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 169
    port. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch Port Authentication screen click MAC Authentication to display the configuration screen as shown. Figure 91 Advanced Application > Port Authentication > MAC Authentication MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 170
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 170 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 171
    static MAC address(es) for a port. It is not recommended you disable port security together with MAC address learning as this will result in many broadcasts. By default, MAC address learning is still enabled even though the port security is not activated. MGS-3712/MGS-3712F User's Guide 171
  • ZyXEL MGS-3712F | User Guide - Page 172
    the Static MAC Forwarding screen. MAC freeze Click MAC freeze to have the Switch automatically select the Active check boxes and clear the Address Learning check boxes only for the ports specified in the Port list. Port This field displays the port number. 172 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 173
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 173
  • ZyXEL MGS-3712F | User Guide - Page 174
    this feature is disabled. Add Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use it deactivated. Port This field displays the number of the port to which this rule is applied. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 175
    This is the maximum number of MAC addresses which a port can learn in a VLAN. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. MGS-3712/MGS-3712F User's Guide 175
  • ZyXEL MGS-3712F | User Guide - Page 176
    Chapter 19 Port Security 176 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 177
    how to configure the packet classifier on the Switch. 20.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's traffic from the same protocol port (such as Telnet) to form a flow. Configure QoS on the Switch to group and prioritize . MGS-3712/MGS-3712F User's Guide 177
  • ZyXEL MGS-3712F | User Guide - Page 178
    formatted according to the IEEE 802.3 standards. A value of Ethernet II indicates that the packets are formatted according to RFC 894, Ethernet II encapsulation. 178 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 179
    character pairs). Port Type the port number to which the rule should be applied. You may choose one port only or all ports (Any). select Establish Only for TCP protocol type. This means that the Switch will pick out the packets that are sent to establish TCP MGS-3712/MGS-3712F User's Guide 179
  • ZyXEL MGS-3712F | User Guide - Page 180
    port number. Refer to Table 49 on page 182 for more information. Click Add to insert the entry in the summary table below and save your changes to the Switch's run-time memory. The Switch layer rule. Figure 95 Advanced Application > Classifier: Summary Table 180 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 181
    / protocol-numbers for a complete list. Table 48 Common IP Protocol Types and Protocol Numbers PROTOCOL TYPE PROTOCOL NUMBER ICMP 1 TCP 6 UDP 17 EGP 8 L2TP 115 MGS-3712/MGS-3712F User's Guide 181
  • ZyXEL MGS-3712F | User Guide - Page 182
    80 POP3 110 See Appendix A on page 367 for information on commonly used port numbers. 20.4 Classifier Example The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. 182 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 183
    Chapter 20 Classifier After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. Figure 96 Classifier: Example MGS-3712/MGS-3712F User's Guide 183
  • ZyXEL MGS-3712F | User Guide - Page 184
    Chapter 20 Classifier 184 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 185
    64 service levels. The following figure illustrates the DS field. DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. DSCP (6 bits) Unused (2 bits) MGS-3712/MGS-3712F User
  • ZyXEL MGS-3712F | User Guide - Page 186
    policies. 21.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 177 for more information. 186 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 187
    this screen. Table 50 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. MGS-3712/MGS-3712F User's Guide 187
  • ZyXEL MGS-3712F | User Guide - Page 188
    port. Priority Specify a priority level. DSCP Specify a DSCP (DiffServ Code Point) number between 0 and 63. TOS Specify the type of service of-profile traffic. Action Specify the action(s) the Switch takes on the associated classified traffic flow. Forwarding MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 189
    port to send the packet to the mirror port. Select Send the packet to the egress port to send the packet to the egress port summary table below and save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or Table MGS-3712/MGS-3712F User's Guide 189
  • ZyXEL MGS-3712F | User Guide - Page 190
    this policy applies. ) Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. 190 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 191
    and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 20.4 on page 182). Figure 99 Policy Example MGS-3712/MGS-3712F User's Guide 191
  • ZyXEL MGS-3712F | User Guide - Page 192
    Chapter 21 Policy Rule 192 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 193
    . By default, the weight for Q0 is 1, for Q1 is 2, for Q2 is 3, and so on. Guaranteed quantum is calculated as Queue Weight x 2048 bytes. MGS-3712/MGS-3712F User's Guide 193
  • ZyXEL MGS-3712F | User Guide - Page 194
    can handle. Queues with larger weights get more service than queues with smaller weights. This queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied. 194 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 195
    Chapter 22 Queuing Method 22.2 Configuring Queuing Click Advanced Application > Queuing Method in the navigation panel. Figure 100 Advanced Application > Queuing Method MGS-3712/MGS-3712F User's Guide 195
  • ZyXEL MGS-3712F | User Guide - Page 196
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 196 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 197
    are Service Provider's Network (SPN) customers with VPN tunnels between their head offices and branch offices respectively. Both have an identical VLAN tag for their VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 198
    edge of the service provider's network. All VLANs belonging to a customer can be aggregated into a single service provider's VLAN (using the outer VLAN tag defined by SP VID). Note: Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel Port. 198 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 199
    as 0x9100. Tunnel TPID is the VLAN stacking tag type the Switch adds to the outgoing frames sent through a Tunnel Port of the service provider's edge devices (1 and 2 in the VLAN stacking example frame FCS IEEE 802.1Q customer tagged frame FCS Doubletagged frame MGS-3712/MGS-3712F User's Guide 199
  • ZyXEL MGS-3712F | User Guide - Page 200
    Address SA Source Address Tunnel TPID VID Tag Protocol IDentifier added on a tunnel port VLAN ID Priority Len/ Etype Data 802.1p Priority Length and type of enable VLAN stacking on the Switch. Port The port number identifies the port you are configuring. 200 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 201
    Cancel to begin configuring this screen afresh. 23.4.1 Port-based Q-in-Q Port-based Q-in-Q lets the Switch treat all frames received on the same port as the same VLAN flows and add the same outer VLAN tag to them, even they have different customer VLAN IDs. MGS-3712/MGS-3712F User's Guide 201
  • ZyXEL MGS-3712F | User Guide - Page 202
    from 0 to 7). This is the service provider's priority level that adds to the frames received on this port. Apply Cancel "0" is the lowest Switch to add different outer VLAN tags to the incoming frames received on one port according to their inner VLAN tags. 202 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 203
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 203
  • ZyXEL MGS-3712F | User Guide - Page 204
    for this rule. Port This is the port number to which service provider's priority level in the packets. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. 204 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 205
    services (such as content information distribution) based on service plans and types of subscription. You can set the Switch to filter the multicast group join reports on a per-port basis by configuring an IGMP filtering profile and associating the profile to a port. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 206
    allows the Switch to learn multicast groups without you having to manually configure them. The Switch forwards multicast Port This field displays the port number that belongs to the multicast group. Multicast Group This field displays IP multicast group addresses. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 207
    . Active Select Active to enable IGMP Snooping to forward group multicast traffic only to ports that are members of that group. Querier Select this option to allow the Switch to send IGMP General Query messages to the VLANs with the multicast hosts attached. MGS-3712/MGS-3712F User's Guide 207
  • ZyXEL MGS-3712F | User Guide - Page 208
    to have the Switch use this timeout to update the forwarding table for the port. This defines how many seconds the Switch waits for an IGMP report before removing an IGMP snooping membership entry when an IGMP leave message is received on this port from a host. 208 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 209
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 209
  • ZyXEL MGS-3712F | User Guide - Page 210
    shown. See Section 24.1.4 on page 206 for more information on IGMP Snooping VLAN. Figure 107 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN 210 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 211
    begin configuring this screen afresh. Use this section of the screen to add VLANs upon which the Switch is to perform IGMP snooping. Enter the descriptive name of the VLAN for identification purposes. Enter the . Click Cancel to clear the Delete check boxes. MGS-3712/MGS-3712F User's Guide 211
  • ZyXEL MGS-3712F | User Guide - Page 212
    clients connected to the Switch are able to join. A profile contains a range of multicast IP addresses which you want clients to be able to join. Profiles are assigned to ports (in the Multicast Setting , enter it in both the Start Address and End Address fields. 212 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 213
    -onDemand (MoD)) that use multicast traffic across an Ethernet ring-based service provider network. MVR allows one single multicast VLAN to be shared among , the multicast VLAN information is only visible to the Switch and S. Figure 109 MVR Network Example MGS-3712/MGS-3712F User's Guide 213
  • ZyXEL MGS-3712F | User Guide - Page 214
    . The Switch sends a query to VLAN 1 on the receiver port (in this case, a DSL port on the Switch). If there is another subscriber device connected to this port in the same subscriber VLAN, the receiving port will still be on the list of forwarding destination 214 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 215
    receiver port(s) and a source port for each multicast VLAN. Click Advanced Applications > Multicast > Multicast Setting > MVR link to display the screen as shown next. Note: You can create up to five multicast VLANs and up to 256 multicast rules on the Switch. MGS-3712/MGS-3712F User's Guide 215
  • ZyXEL MGS-3712F | User Guide - Page 216
    the MVR mode on the Switch. Choices are Dynamic and Compatible. Select Dynamic to send IGMP reports to all MVR source ports in the multicast VLAN. Port Select Compatible to set the Switch not to send IGMP reports. This field displays the port number on the Switch. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 217
    Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Configure MVR IP multicast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. MGS-3712/MGS-3712F User's Guide 217
  • ZyXEL MGS-3712F | User Guide - Page 218
    Chapter 24 Multicast Note: A port can belong to more than one multicast on IP multicast addresses. Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use address of the multicast group. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 219
    A, B and C in VLAN are able to receive the traffic. Figure 113 MVR Configuration Example To configure the MVR settings on the Switch, create a multicast group in the MVR screen and set the receiver and source ports. Figure 114 MVR Configuration Example MGS-3712/MGS-3712F User's Guide 219
  • ZyXEL MGS-3712F | User Guide - Page 220
    Chapter 24 Multicast To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group the multicast VLAN 200. Figure 115 MVR Group Configuration Example Figure 116 MVR Group Configuration Example 220 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 221
    of recording what a user is doing. The Switch can use an external server to track when Switch supports RADIUS (Remote Authentication Dial-In User Service, see Section 25.1.2 on page 222) and TACACS+ (Terminal Access Controller Access-Control System Plus, see Section MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 222
    , authorization, accounting or all of them on the Switch. First, configure your authentication and accounting server settings (RADIUS, TACACS+ or both) and then set up the authentication priority, activate authorization and configure accounting settings. 222 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 223
    Section 25.3 on page 231 for RADIUS attributes utilized by the authentication and accounting features on the Switch. Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. Figure 119 Advanced Application > AAA > RADIUS Server Setup MGS-3712/MGS-3712F User's Guide 223
  • ZyXEL MGS-3712F | User Guide - Page 224
    . Specify the amount of time in seconds that the Switch waits for an accounting request response from the RADIUS accounting port of a RADIUS server for accounting is 1813. You need not change this value unless your network administrator instructs you to do so. 224 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 225
    32 alphanumeric characters) as the key to be shared between the external RADIUS accounting server and the Switch. This key is not sent over the network. This key must be the same on the as shown. Figure 120 Advanced Application > AAA > TACACS+ Server Setup MGS-3712/MGS-3712F User's Guide 225
  • ZyXEL MGS-3712F | User Guide - Page 226
    settings. Specify the amount of time in seconds that the Switch waits for an accounting request response from the TACACS+ port of a TACACS+ server for accounting is 49. You need not change this value unless your network administrator instructs you to do so. 226 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 227
    this screen afresh. 25.2.3 AAA Setup Use this screen to configure authentication, authorization and accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 121 Advanced Application > AAA > AAA Setup MGS-3712/MGS-3712F User's Guide 227
  • ZyXEL MGS-3712F | User Guide - Page 228
    : Allow an administrator which logs in the Switch through Telnet or SSH to have different access privilege level assigned via the external server. • Dot1x: Allow an IEEE 802.1x client to have different bandwidth limit or VLAN ID assigned via the external server. 228 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 229
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 229
  • ZyXEL MGS-3712F | User Guide - Page 230
    authenticating via the RADIUS server. The following table describes the VSAs supported on the Switch. Table 69 Supported VSAs FUNCTION Ingress Bandwidth Assignment ATTRIBUTE Vendor-Id = 890 Vendor-Type = 1 Vendor-data = ingress rate (Kbps in decimal format) 230 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 231
    Remote Authentication Dial-In User Service (RADIUS) attributes are data used to define specific authentication, and accounting elements in a user profile, which is stored on the RADIUS server. This appendix lists the RADIUS attributes supported by the Switch. MGS-3712/MGS-3712F User's Guide 231
  • ZyXEL MGS-3712F | User Guide - Page 232
    NAS-IP-Address 25.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type - This value is set to Ethernet(15) on the Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator 232 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 233
    The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 25.3.2.1 Attributes Y Service-Type Y Y Calling-Station-Id Y Y Acct-Status-Type Y Y Acct-Delay-Time Y Y STOP Y Y Y Y Y Y Y MGS-3712/MGS-3712F User's Guide 233
  • ZyXEL MGS-3712F | User Guide - Page 234
    Y NAS-IP-Address Y Y NAS-Port Y Y Class Y Y Called-Station-Id Y Y Calling-Station-Id Y Y NAS-Identifier Y Y NAS-Port-Type Y Y Acct-Status-Type Y Input-Gigawords Y Acct-Output- Y Gigawords STOP Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y 234 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 235
    IP address • Port number When the Switch receives a DHCP Switch forwards the packet. If there is not a binding, the Switch discards the packet. The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually MGS-3712/MGS-3712F User's Guide 235
  • ZyXEL MGS-3712F | User Guide - Page 236
    servers. 26.1.1.1 Trusted vs. Untrusted Ports Every port is either a trusted port or an untrusted port for DHCP snooping. This setting is snooping database, the Switch can reload the dynamic bindings from the DHCP snooping database after the Switch restarts. 236 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 237
    information about the source of the requests. The Switch can add the following information: • Slot ID (1 byte), port ID (1 byte), and source VLAN ID Switch. 1 Enable DHCP snooping on the Switch. 2 Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 238
    address filter remains in the Switch. These MAC address filters are different than regular MAC address filters (Chapter 12 on page 123). • They are stored only in volatile memory. • They do not use the same space in memory that regular MAC address filters use. 238 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 239
    Address Filter screens and commands. 26.1.2.2 Trusted vs. Untrusted Ports Every port is either a trusted port or an untrusted port for ARP inspection. This setting is independent of the trusted/ and unauthorized packets in the network. The Switch learns MGS-3712/MGS-3712F User's Guide 239
  • ZyXEL MGS-3712F | User Guide - Page 240
    ). Type This field displays how the Switch learned the binding. static: This binding was learned from information provided manually by an administrator. VID Port dhcp-snooping: This binding was learned address and VLAN ID as an existing static binding, the 240 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 241
    Port static: This binding was learned from information provided manually by an administrator. This field displays the source VLAN ID in the binding. This field displays the port number in the binding. If this field is blank, the binding applies to all ports. MGS-3712/MGS-3712F User's Guide 241
  • ZyXEL MGS-3712F | User Guide - Page 242
    Chapter 26 IP Source Guard Table 75 IP Source Guard Static Binding (continued) LABEL DESCRIPTION Delete Select this, and click Delete to remove the specified entry. Cancel Click this to clear the Delete check boxes above. 242 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 243
    Chapter 26 IP Source Guard 26.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 126 DHCP Snooping MGS-3712/MGS-3712F User's Guide 243
  • ZyXEL MGS-3712F | User Guide - Page 244
    to access the DHCP snooping database for any reason. Startup failures This field displays the number of times the Switch could not create or read the DHCP snooping database when the Switch started up or a new URL is configured for the DHCP snooping database. 244 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 245
    the Switch has ignored because the Switch already had a binding with the same MAC address and VLAN ID. Invalid interfaces This field displays the number of bindings the Switch has ignored because the port number was a trusted interface or does not exist anymore. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 246
    not exist anymore. 26.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and Guard > DHCP Snooping > Configure. Figure 127 DHCP Snooping Configure 246 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 247
    a DHCP snooping database, it does not discard the current dynamic bindings first. If there is a conflict, the Switch keeps the dynamic binding in volatile memory and updates the Binding collisions counter in the DHCP Snooping screen (Section 26.4 on page 243). MGS-3712/MGS-3712F User's Guide 247
  • ZyXEL MGS-3712F | User Guide - Page 248
    to the Switch's run-time memory. The Switch loses these changes port (trusted or untrusted) can receive each second. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 128 DHCP Snooping Port Configure 248 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 249
    or DECLINE packet, and the source MAC address and source port do not match any of the current bindings. • The Switch adds DHCP relay agent option 82 information (Chapter 32 on page 287) to DHCP requests that the Switch relays to a DHCP server for each VLAN. To MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 250
    the Switch and specify trusted ports. Option82 Information Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed. Select this to have the Switch add the slot number, port number Configure screen. See Section 26.5 on page 246. 250 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 251
    VLAN ID in the MAC address filter. Port This field displays the source port of the discarded ARP packet. Expiry (sec) This field displays how long (in seconds) the MAC address filter remains in the Switch. You can also delete the record manually (Delete). MGS-3712/MGS-3712F User's Guide 251
  • ZyXEL MGS-3712F | User Guide - Page 252
    table, but the IP address was not valid. Delete Cancel Port: The MAC address, VLAN ID, and IP address were in the binding table, but the port number was not valid. Select this, and click Delete to remove the VLAN ID of each VLAN in the range specified above. 252 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 253
    the Switch last restarted. Request This port of the ARP packet. VID This field displays the source VLAN ID of the ARP packet. Sender Mac This field displays the source MAC address of the ARP packet. Sender IP This field displays the source IP address of the ARP packet. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 254
    on page 258. This field displays when the log message was generated. 26.7 ARP Inspection Configure Use this screen to enable ARP inspection on the Switch. You can also configure the length of time the Switch stores records of discarded ARP packets and global 254 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 255
    Switch stops recording log messages and simply starts counting the number of entries that were dropped due to unavailable buffer. Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 26.6.2 on page 253. MGS-3712/MGS-3712F User
  • ZyXEL MGS-3712F | User Guide - Page 256
    to reset the values in this screen to their last-saved values. 26.7.1 ARP Inspection Port Configure Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. You can also specify the maximum rate at which the Switch receives 256 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 257
    on untrusted ports. These settings have no effect on trusted ports. Specify the maximum rate (1-2048 packets per second) at which the Switch receives ARP packets from each port. The Switch discards any additional ARP packets. Enter 0 to disable this limit. MGS-3712/MGS-3712F User's Guide 257
  • ZyXEL MGS-3712F | User Guide - Page 258
    over which the rate of ARP packets is monitored for each port. For example, if the Rate is 15 pps and the burst interval is 1 second, then the Switch accepts a maximum of 15 ARP packets in every one-second highest VLAN ID you want to manage in the section below. 258 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 259
    Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 260
    Chapter 26 IP Source Guard 260 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 261
    again and again causing a broadcast storm. If a switch (not in loop state) connects to a switch in loop state, then it will be affected by the switch in loop state in the following way: • It will receive broadcast messages sent out from the switch in loop state. MGS-3712/MGS-3712F User's Guide 261
  • ZyXEL MGS-3712F | User Guide - Page 262
    network loops. The following figure illustrates three switches forming a loop. A sample path of the loop guard probe packet is also shown. In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on 262 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 263
    Advanced Application > Loop Guard in the navigation panel to display the screen as shown. Note: The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 140 Advanced Application > Loop Guard MGS-3712/MGS-3712F User's Guide 263
  • ZyXEL MGS-3712F | User Guide - Page 264
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 264 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 265
    . The Switch translates the VLAN ID from 12 into 123 before forwarding the packets. Any packets carrying a VLAN tag other than 12 (such as 10) and received on port 3 will be dropped. Figure 141 VLAN mapping example 12 10 123 Port 3 10 Service Provider Network MGS-3712/MGS-3712F User's Guide 265
  • ZyXEL MGS-3712F | User Guide - Page 266
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 266 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 267
    (up to 32 printable ASCII characters) for identification purposes. Port Type a port to be included in this rule. VID Enter a VLAN summary table below and save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off MGS-3712/MGS-3712F User's Guide 267
  • ZyXEL MGS-3712F | User Guide - Page 268
    whether this entry is activated or not. Name This is the descriptive name for this rule. Port This is the port number to which this rule is applied. VID This is the customer VLAN ID in the button. Cancel Click Cancel to clear the Delete check boxes. 268 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 269
    B, C and D. Topology change information can be propagated throughout the service provider's network. To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and MGS-3712/MGS-3712F User's Guide 269
  • ZyXEL MGS-3712F | User Guide - Page 270
    ports. • The Tunnel port is an egress port at the edge of the service provider's network and connected to another service provider's switch. Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 270 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 271
    MAC address does not exist in the address table of a switch on the service provider's network. Note: All the edge switches in the service provider's network should be set to use the same MAC address for encapsulation. Port This field displays the port number. MGS-3712/MGS-3712F User's Guide 271
  • ZyXEL MGS-3712F | User Guide - Page 272
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 272 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 273
    PART IV IP Application Static Route (275) Differentiated Services (279) DHCP (287) 273
  • ZyXEL MGS-3712F | User Guide - Page 274
    274
  • ZyXEL MGS-3712F | User Guide - Page 275
    traffic to default gateway R1 which routes it back to the manager's computer. The Switch needs a static route to tell it to use router R2 to send traffic to an SNMP trap server on network N2. Figure 147 Static Routing Overview N1 N2 Telnet SNMP R1 R2 MGS-3712/MGS-3712F User's Guide 275
  • ZyXEL MGS-3712F | User Guide - Page 276
    or 3 is usually a good number. Add Click Add to insert a new static route to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the Clear to set the above fields back to the factory defaults. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 277
    immediate neighbor of your Switch that will forward the packet to the destination. This field displays the cost of transmission for routing purposes. Click Delete to remove the selected entry from the summary table. Click Cancel to clear the Delete check boxes. MGS-3712/MGS-3712F User's Guide 277
  • ZyXEL MGS-3712F | User Guide - Page 278
    Chapter 30 Static Route 278 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 279
    field. Figure 149 DiffServ: Differentiated Service Field DSCP (6 bits) CU (2 bits) DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. MGS-3712/MGS-3712F User's Guide 279
  • ZyXEL MGS-3712F | User Guide - Page 280
    Chapter 31 Differentiated Services The DSCP value determines the PHB (Per-Hop Behavior), that each packet gets as it is forwarded across traffic flows against user-defined criteria and identify it as either conforming, exceeding or violating the criteria. 280 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 281
    and PIR values are based on the guaranteed and maximum bandwidth respectively as negotiated between a service provider and client. Two Rate Three Color Marker evaluates incoming packets and marks them with one Packet Loss High Packet Loss Medium Packet Loss MGS-3712/MGS-3712F User's Guide 281
  • ZyXEL MGS-3712F | User Guide - Page 282
    Chapter 31 Differentiated Services 31.2.2 TRTCM-Color-aware Mode In color-aware mode the evaluation of the packets uses the existing packet .3 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected port(s). 282 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 283
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 283
  • ZyXEL MGS-3712F | User Guide - Page 284
    Chapter 31 Differentiated Services 31.3.1 Configuring 2-Rate 3 Color on the Switch and the individual ports for the Switch to drop red (high loss priority) colored packets. Select color-blind to have the Switch treat all marked proceed through the Switch. 284 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 285
    Services Table 92 IP Application > DiffServ > 2-rate 3 Color Marker (continued) LABEL DESCRIPTION Port This field displays the index number of a port on the Switch. * Settings in this row apply to all ports - 55 56 - 63 IEEE 802.1p 0 1 2 3 4 5 6 7 MGS-3712/MGS-3712F User's Guide 285
  • ZyXEL MGS-3712F | User Guide - Page 286
    Services 31 Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 286 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 287
    following criteria: • Global - The Switch forwards all DHCP requests to the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured to relay DHCP requests to different DHCP servers for clients in different VLAN. MGS-3712/MGS-3712F User's Guide 287
  • ZyXEL MGS-3712F | User Guide - Page 288
    configured as a relay agent for specific VLAN(s). 32.3 DHCP Relay Configure DHCP relay on the Switch if the DHCP clients and the DHCP server are not in the same broadcast domain. During the initial IP address . Please refer to RFC 3046 for more details. 288 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 289
    is always 0 for stand-alone switches. Port ID (1 byte) This is the port that the DHCP client is connected to. VLAN ID (2 bytes) This is the VLAN that the port belongs to. Information (up to 64 the screen as shown. Figure 157 IP Application > DHCP > Global MGS-3712/MGS-3712F User's Guide 289
  • ZyXEL MGS-3712F | User Guide - Page 290
    box to have the Switch add information (slot Information number, port number and VLAN ID) Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services Switch to send additional information (such as the VLAN ID) 290 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 291
    . Note: You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. See Section 8.6 on page 87 for information on how to set up management IP addresses for VLANs. Figure 160 IP Application > DHCP > VLAN MGS-3712/MGS-3712F User's Guide 291
  • ZyXEL MGS-3712F | User Guide - Page 292
    Server 1 .. 3 Relay Agent Information Select the Option 82 check box to have the Switch add information (slot number, port number and VLAN ID) to client DHCP requests that it relays to a DHCP server. from the dormitory rooms (VLAN 1) to the DHCP server 292 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 293
    2 DHCP:172.23.10.100 For the example network, configure the VLAN Setting screen as shown. Figure 162 DHCP Relay for Two VLANs Configuration Example MGS-3712/MGS-3712F User's Guide 293
  • ZyXEL MGS-3712F | User Guide - Page 294
    Chapter 32 DHCP 294 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 295
    PART V Management Maintenance (297) Access Control (305) Diagnostic (329) Syslog (331) Cluster Management (335) MAC Table (343) ARP Table (347) Configure Clone (349) 295
  • ZyXEL MGS-3712F | User Guide - Page 296
    296
  • ZyXEL MGS-3712F | User Guide - Page 297
    on the Switch. Firmware Upgrade Click Click Here to go to the Firmware Upgrade screen. Restore Click Click Here to go to the Restore Configuration screen. Configuratio n Backup Click Click Here to go to the Backup Configuration screen. Configuratio n MGS-3712/MGS-3712F User's Guide 297
  • ZyXEL MGS-3712F | User Guide - Page 298
    may need to change the IP address of your computer to be in the same subnet as that of the default Switch IP address (192.168.1.1). 33.3 Save Configuration Click Config 1 to save the current configuration settings permanently to Configuration 1 on the Switch. 298 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 299
    the Switch. 33.5 Firmware Upgrade Make sure you have downloaded (and unzipped) the correct model firmware and version to your computer before uploading to the device. Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. MGS-3712/MGS-3712F User
  • ZyXEL MGS-3712F | User Guide - Page 300
    Switch and apply the new firmware immediately. (Firmware upgrades are only applied after a reboot). Click Upgrade to load the new firmware. After the firmware Switch, so your backup configuration file is automatically renamed when you restore using this screen. 300 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 301
    also known as the romfile or ROM) contains the factory default settings in the screens such as password, Switch setup, IP Setup, and so on. Once you have customized the Switch's settings, they can be saved back to your computer under a filename of your choosing. MGS-3712/MGS-3712F User's Guide 301
  • ZyXEL MGS-3712F | User Guide - Page 302
    1 Launch the FTP client on your computer. 2 Enter open, followed by a space and the IP address of your Switch. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). 5 Enter bin to set transfer mode to binary. 302 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 303
    Configuration and firmware files should service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 304
    Chapter 33 Maintenance 304 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 305
    is disabled. See the CLI Reference Guide for more information on disabling multi-login. 34.2 The Access Control Main Screen Click Management > Access Control in the navigation panel to display the main screen as shown. Figure 169 Management > Access Control MGS-3712/MGS-3712F User's Guide 305
  • ZyXEL MGS-3712F | User Guide - Page 306
    a switch. Examples of variables include number of packets received, node port status and so on. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. 306 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 307
    ) • RFC 1157 SNMP v1 • RFC 1493 Bridge MIBs • RFC 1643 Ethernet MIBs • RFC 1155 SMI • RFC 2674 SNMPv2, SNMPv2c • RFC 1757 RMON • SNMPv2, SNMPv2c or later version, compliant with RFC 2011 SNMPv2 MIB for IP, RFC 2012 SNMPv2 MIB for TCP, RFC 2013 SNMPv2 MIB for UDP MGS-3712/MGS-3712F User's Guide 307
  • ZyXEL MGS-3712F | User Guide - Page 308
    turned on. 1.3.6.1.6.3.1.1.5.2 This trap is sent when the Switch restarts. MGS-3712F: This trap is sent when the fan 1.3.6.1.4.1.890.1.5.8.48.2 speed goes above or below the 5.2.1 normal operating range. MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.2 5.2.1 MGS-3712F: This trap is sent when the fan
  • ZyXEL MGS-3712F | User Guide - Page 309
    date 5.2.2 from a time server. intrusionloc IntrusionLockEventOn k MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.2 5.2.2 MGS-3712F: This trap is sent when intrusion 1.3.6.1.4.1.890.1.5.8.48.2 lock occurs on a port. 5.2.1 MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.2 5.2.1 MGS-3712/MGS-3712F User's Guide 309
  • ZyXEL MGS-3712F | User Guide - Page 310
    when 1.3.6.1.4.1.890.1.5.8.48.2 loopguard shuts down a port. 5.2.1 MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.2 5.2.1 MGS-3712F: This trap is sent when the 1.3.6.1.4.1.890.1.5.8.48.2 external alarm is received. 5.2.1 MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.2 5.2.1 MGS-3712F: This trap is sent when the
  • ZyXEL MGS-3712F | User Guide - Page 311
    auto-negotiate with the peer Ethernet interface. AutonegotiationFailedEve MGS-3712F: ntClear 1.3.6.1.4.1.890.1.5.8.48.25 .2.2 MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.25 .2.2 This trap is when all device operating parameters return to the normal operating range. MGS-3712/MGS-3712F User's Guide 311
  • ZyXEL MGS-3712F | User Guide - Page 312
    server. MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.2 5.2.1 RADIUSAccountingNotRea MGS-3712F: This trap is sent when the chableEventClear 1.3.6.1.4.1.890.1.5.8.48.2 RADIUS accounting server can 5.2.2 be reached. MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.2 5.2.2 312 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 313
    to target has changed from a previously determined path. This trap is sent when a traceroute test fails. This trap is sent when a traceroute test is completed. MGS-3712/MGS-3712F User's Guide 313
  • ZyXEL MGS-3712F | User Guide - Page 314
    1.3.6.1.2.1.17.0.1 This trap is sent when the STP root switch changes. MGS-3712F: This trap is sent when the 1.3.6.1.4.1.890.1.5.8.48.3 MRSTP root switch changes. 2.2.1 MGS-3712: 1.3.6.1.4.1.890.1.5.8.47.3 2.2.1 MGS-3712F: This trap is sent when the MSTP 1.3.6.1.4.1.890.1.5.8.48
  • ZyXEL MGS-3712F | User Guide - Page 315
    Table 107 SNMP Switch Traps (continued) Switch detects a connectivity fault. 34.3.4 Configuring SNMP Click Management > Access Control > SNMP to view the screen as shown. Use this screen to configure your SNMP settings. Figure 171 Management > Access Control > SNMP MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 316
    password sent with each trap to the SNMP manager. Trap Destination Version IP Port Username The Trap Community string is only used by SNMP managers using SNMP version account on the Switch. This field displays the username of a login account on the Switch. 316 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 317
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 317
  • ZyXEL MGS-3712F | User Guide - Page 318
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 318 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 319
    non-administrator (username is something other than admin) is someone who can view but not configure Switch settings. Click Management > Access Control > Logins to view the screen as shown next. when shipped). New Password Enter your new system password. MGS-3712/MGS-3712F User's Guide 319
  • ZyXEL MGS-3712F | User Guide - Page 320
    your new system password for confirmation Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save an unsecured network. Figure 174 SSH Communication Example 320 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 321
    the client computer. 2 Encryption Method Once the identification is verified, both the client and server must agree on the type of encryption method to use. MGS-3712/MGS-3712F User's Guide 321
  • ZyXEL MGS-3712F | User Guide - Page 322
    to do so. Authenticating client certificates is optional and if selected means the SSL-client must send the Switch a certificate. You must apply for a certificate for the browser from a CA that is a trusted CA on the Switch. Please refer to the following figure. 322 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 323
    access. 34.8.1 Internet Explorer Warning Messages When you attempt to access the Switch HTTPS server, a Windows dialog box pops up asking if you trust the server certificate. Click View Certificate if you want to verify that the certificate is from the Switch. MGS-3712/MGS-3712F User's Guide 323
  • ZyXEL MGS-3712F | User Guide - Page 324
    .8.2 Netscape Navigator Warning Messages When you attempt to access the Switch HTTPS server, a Website Certified by an Unknown Authority screen Switch. If Accept this certificate temporarily for this session is selected, then click OK to continue in Netscape. 324 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 325
    Chapter 34 Access Control Select Accept this certificate permanently to import the Switch's certificate into the SSL client. Figure 178 Security Certificate 1 (Netscape) example example example Figure 179 Security Certificate 2 (Netscape) example MGS-3712/MGS-3712F User's Guide 325
  • ZyXEL MGS-3712F | User Guide - Page 326
    Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure "trusted computer(s)" for each service in the Remote Management screen (discussed 326 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 327
    the Switch. Service Port For Telnet, SSH, FTP, HTTP or HTTPS services, you may change the default service port by typing the new port number in the Server Port field. If you change the default port number Remote Management to view the screen as shown next. MGS-3712/MGS-3712F User's Guide 327
  • ZyXEL MGS-3712F | User Guide - Page 328
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 328 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 329
    . 35.1 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 183 Management > Diagnostic MGS-3712/MGS-3712F User's Guide 329
  • ZyXEL MGS-3712F | User Guide - Page 330
    Type the IP address of a device that you want to ping in order to test a connection. Ethernet Port Test Click Ping to have the Switch ping the IP address (in the field to the left). Enter a port number and click Port Test to perform an internal loopback test. 330 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 331
    : There is a normal but significant condition on the system. 6 Informational: The syslog contains an informational message. 7 Debug: The message is intended for debug-level purposes. MGS-3712/MGS-3712F User's Guide 331
  • ZyXEL MGS-3712F | User Guide - Page 332
    . The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 332 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 333
    the more critical the logs are. Add Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link entry. Cancel Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 333
  • ZyXEL MGS-3712F | User Guide - Page 334
    Chapter 36 Syslog 334 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 335
    24 members Cluster Member Models Must be compatible with ZyXEL cluster management implementation. Cluster Manager The switch through which you manage the cluster member switches. Cluster Members The switches being managed by the cluster manager switch. MGS-3712/MGS-3712F User's Guide 335
  • ZyXEL MGS-3712F | User Guide - Page 336
    A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 186 Clustering Application Example . Note: A cluster can only have one manager. Figure 187 Management > Cluster Management: Status 336 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 337
    Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web configurator home page. This cluster member web MGS-3712/MGS-3712F User's Guide 337
  • ZyXEL MGS-3712F | User Guide - Page 338
    .00Kbytes/sec. ftp> bin 200 Type I OK ftp> put 390BBA0.bin fw-00-a0-c5-01-23-46 200 Port command okay 150 Opening data connection for STOR fw-00-a0-c5-01-23-46 226 File received OK ftp: 262144 bytes sent in 0.63Seconds 415.44Kbytes/sec. ftp> 338 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 339
    cluster member switch. fw-00-a0-c5-01-23-46 This is the cluster member switch's firmware name as seen in the cluster manager switch. config-00-a0-c5-01-23-46 This is the cluster member switch's configuration file name as seen in the cluster manager switch. MGS-3712/MGS-3712F User's Guide 339
  • ZyXEL MGS-3712F | User Guide - Page 340
    Manager Active Select Active to have this Switch become the cluster manager switch. A cluster can only have one manager. Other (directly connected) switches that are set to be cluster managers . You may use up to 32 printable characters (spaces are allowed). 340 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 341
    member switch's System Name. Model This is the cluster member switch's model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. MGS-3712/MGS-3712F User's Guide 341
  • ZyXEL MGS-3712F | User Guide - Page 342
    Chapter 37 Cluster Management 342 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 343
    the Switch has already learned the port for this MAC address, then it forwards the frame to that port. • If the Switch has not already learned the port for this MAC address, then the frame is flooded to all ports. Too much port flooding leads to network congestion. MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 344
    destination port is the same as the port it came in on, then it filters the frame. Figure 191 MAC Table Flowchart 38.2 Viewing the MAC Table Click Management > MAC Table in the navigation panel to display the following screen. Figure 192 Management > MAC Table 344 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 345
    This is the VLAN group to which this frame belongs. Port This is the port where the above MAC address is forwarded. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). MGS-3712/MGS-3712F User's Guide 345
  • ZyXEL MGS-3712F | User Guide - Page 346
    Chapter 38 MAC Table 346 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 347
    ARP Works When an incoming packet destined for a host device on a local area network arrives at the Switch, the Switch's ARP program looks in the ARP Table and, if it finds the address, sends it to the device then sends the packet to the MAC address that replied. MGS-3712/MGS-3712F User's Guide 347
  • ZyXEL MGS-3712F | User Guide - Page 348
    address of a device connected to a Switch port with corresponding MAC address below. MAC Address This is the MAC address of the device with corresponding IP address above. Type This shows whether the MAC address is dynamic (learned by the Switch) or static. 348 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 349
    one port onto other ports. 40.1 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. Figure 194 Management > Configure Clone MGS-3712/MGS-3712F User's Guide 349
  • ZyXEL MGS-3712F | User Guide - Page 350
    -time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 350 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 351
    PART VI Troubleshooting & Product Specifications Troubleshooting (353) Product Specifications (357) 351
  • ZyXEL MGS-3712F | User Guide - Page 352
    352
  • ZyXEL MGS-3712F | User Guide - Page 353
    the power adaptor or cord to the Switch. 4 If the problem continues, contact the vendor. The ALM LED is on. 1 Disconnect and re-connect the power adaptor to the Switch. 2 If the problem continues, contact the vendor. One of the LEDs does not behave as expected. MGS-3712/MGS-3712F User's Guide 353
  • ZyXEL MGS-3712F | User Guide - Page 354
    Switch. 5 If the problem continues, contact the vendor. 41.2 Switch Access and Login I forgot the IP address for the Switch. 1 The default IP address is 192.168.1.1. 2 Use the console port to log in to the Switch. 3 Use the MGMT port to log in to the Switch . 354 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 355
    must match it. Refer to the chapter on access control for details. 3 Turn the Switch off and on. 4 Disconnect and re-connect the cord to the Switch. 5 If this does not work, you have to reset the device to its factory defaults. See Section 5.6 on page 63. MGS-3712/MGS-3712F User's Guide 355
  • ZyXEL MGS-3712F | User Guide - Page 356
    Troubleshooting Switch's nonvolatile memory each time you make changes. Click Save at the top right corner of the web configurator to save the configuration permanently. See also Section 33.3 on page 298 for more information about how to save your configuration. 356 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 357
    Switch's hardware and firmware features switch: BPS, PWR, SYS, ALM Per 1000BASE-T RJ-45 port/Mini-GBIC slot: 100, 1000, LNK, ACT Per mini-GBIC slot: LNK, ACT Per Management port: 10, 100 Temperature: 0º C ~ 65º C (32º F ~ 149º F) Humidity: 10 ~ 90% (non-condensing) MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 358
    Table 125 Firmware Specifications FEATURE Switch supports IGMP snooping , enabling group multicast traffic to be only forwarded to ports that are members of that group; thus allowing you to significantly reduce multicast traffic passing through your Switch. 358 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 359
    switches in your network to ensure that only one path exists between any two stations on the network. Use the loop guard feature to protect against network loops on the edge of your network. Use IP source guard to filter unauthorized DHCP and ARP packets in your network. MGS-3712/MGS-3712F
  • ZyXEL MGS-3712F | User Guide - Page 360
    configuration. Cluster management (also known as iStacking) allows you to manage switches through one switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another. 360 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 361
    IEEE 802.3ad; static and dynamic (LACP) port trunking Six groups (up to 8 ports each) All ports support port mirroring Support port mirroring per IP/TCP/UDP Supports rate limiting at 64 Kb increments Provider Bridge BPDU transparency Layer2 protocol tunneling MGS-3712/MGS-3712F User's Guide 361
  • ZyXEL MGS-3712F | User Guide - Page 362
    Limiting number of dynamic MAC addresses per port SSH v1/v2 SSL Intrusion Lock Multiple RADIUS servers Multiple TACACS+ servers 802.1X VLAN and bandwidth assignment. IP source guard Static IP/MAC binding DHCP snooping ARP Inspection MAC authentication 362 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 363
    following list, which is not exhaustive, illustrates the standards supported in the Switch. Table 127 Standards Supported STANDARD DESCRIPTION RFC 826 Address Resolution Protocol (ARP) (MSTP) IEEE 802.3 Packet Format IEEE 802.3ad Link Aggregation MGS-3712/MGS-3712F User's Guide 363
  • ZyXEL MGS-3712F | User Guide - Page 364
    127 Standards Supported (continued) STANDARD DESCRIPTION IEEE 802.3ah Ethernet OAM (Operations, Administration and Maintenance) IEEE 802.3x Flow Control Safety UL 60950-1 CSA 60950-1 EN 60950-1 EMC IEC 60950-1 FCC Part 15 (Class A) CE EMC (Class A) 364 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 365
    PART VII Appendices and Index Common Services (367) Legal Information (371) Index (375) 365
  • ZyXEL MGS-3712F | User Guide - Page 366
    366
  • ZyXEL MGS-3712F | User Guide - Page 367
    Header) tunneling protocol uses this service. AOL's Internet Messenger service. It is also used as a listening port by ICQ. Authentication protocol used Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. MGS-3712/MGS-3712F User's Guide 367
  • ZyXEL MGS-3712F | User Guide - Page 368
    file sharing for network environments. Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service. Packet INternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable. 368 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 369
    Program. Stream Works Protocol. Syslog allows you to send system logs to a UNIX server. Login Host Protocol used for (Terminal Access Controller Access Control System). MGS-3712/MGS-3712F User's Guide 369
  • ZyXEL MGS-3712F | User Guide - Page 370
    Table 128 Commonly Used Services (continued) NAME TELNET TFTP VDOLIVE PROTOCOL TCP UDP TCP PORT(S) 23 69 7000 DESCRIPTION Telnet is the login and terminal Protocol) rather than TCP (Transmission Control Protocol). Another videoconferencing solution. 370 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 371
    , manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does two conditions: • This device may not cause harmful interference. MGS-3712/MGS-3712F User's Guide 371
  • ZyXEL MGS-3712F | User Guide - Page 372
    found to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. These limits and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of .11. 372 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 373
    the device at http:// www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. MGS-3712/MGS-3712F User's Guide 373
  • ZyXEL MGS-3712F | User Guide - Page 374
    Appendix B Legal Information 374 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 375
    95 changing the password 62 CIR (Committed Information Rate) 147 Cisco Discovery Protocol, see CDP CIST 130 Class of Service (CoS) 279 classifier 177, 180 and QoS 177 editing 180 example 182 overview 177 setup 177, 180 viewing 180 cloning a port See port cloning MGS-3712/MGS-3712F User's Guide 375
  • ZyXEL MGS-3712F | User Guide - Page 376
    237 trusted ports 236 untrusted ports 236 DHCP snooping database 236 diagnostics 329 Ethernet port test 330 ping 330 system log 330 Differentiated Service (DiffServ) firmware 80 upgrade 299, 338 flow control 92 back pressure 92 IEEE802.3x 92 forwarding delay 142 376 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 377
    IEEE 802.1x, port authentication 165 IGMP version 205 MGS-3712/MGS-3712F User's Guide Index IGMP (Internet port 113 ingress rate, and bandwidth control 148 installation desktop 29 precautions 30 rack-mounting 30 transceivers 36 installation scenarios 29 introduction 23 IP capability 362 services
  • ZyXEL MGS-3712F | User Guide - Page 378
    Interface Crossover) 36 MGMT port 38 MIB and SNMP 306 supported MIBs 307 MIB (Management Information Base) 306 mirroring ports 153 monitor port 153, 154 mounting brackets port priority 143 revision level 142 status 144 MTU (Multi-Tenant Unit) 84 multicast 205 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 379
    setup 172, 263, 271 port setup 91 port status 73 port VLAN ID, see PVID 104 port VLAN trunking 97 port-based VLAN 111 all connected 113 port isolation 113 settings wizard 113 ports "standby" 156 diagnostics 107 PVID 96 PVID (Priority Frame) 96 PWR LED 43 MGS-3712/MGS-3712F User's Guide Index 379
  • ZyXEL MGS-3712F | User Guide - Page 380
    management 327 service 328 MIB 307 network components 306 object variables 306 protocol operations 307 security 317 setup 315, 318 version 3 307 versions supported 306 SNMP traps 308, 310, 312, 314 setup 318 supported port 73 port details 75 power 81 STP 135, 139 MGS-3712/MGS-3712F User's Guide
  • ZyXEL MGS-3712F | User Guide - Page 381
    TPID tagged VLAN 95 temperature 357 temperature indicator 80 terminal emulation 35 time current 83 MGS-3712/MGS-3712F User's Guide Index time zone 83 Time (RFC-868) 83 time server 83 time service protocol 83 format 83 TPID 199 trademarks 371 transceiver MultiSource Agreement (MSA) 36 transceivers
  • ZyXEL MGS-3712F | User Guide - Page 382
    84 number of VLANs 99 port number 100 port settings 103 port-based VLAN 111 port-based, all connected 113 port-based, isolation 113 port-based, wizard 113 PVID 104 Round Robin Scheduling) 194 Z ZyNOS (ZyXEL Network Operating System) 302 W warranty 373 note 373 382 MGS-3712/MGS-3712F User's Guide
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
www.zyxel.com
www.zyxel.com
MGS-3712/MGS-3712F
MetroGigabit Switch
Copyright © 2008
ZyXEL Communications Corporation
Firmware Version 3.90
Edition 1, 10/2008
Default Login Details
IP Address
(Out-of-band
MGMT port)
User Name
admin
Password
1234