Home » ZyXEL Manuals » Networking » ZyXEL MGS-3712F » Manual Viewer

ZyXEL MGS-3712F User Guide - Page 247

Table 77

Add to My Manuals
Save this manual to your list of manuals

Page 247 highlights

Chapter 26 IP Source Guard The following table describes the labels in this screen. Table 77 DHCP Snooping Configure LABEL DESCRIPTION Active Select this to enable DHCP snooping on the Switch. You still have to enable DHCP snooping on specific VLAN and specify trusted ports. DHCP Vlan Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed. Select a VLAN ID if you want the Switch to forward DHCP packets to DHCP servers on a specific VLAN. Note: You have to enable DHCP snooping on the DHCP VLAN too. Database Agent URL Timeout interval Write delay interval Renew DHCP Snooping URL You can enable Option82 in the DHCP Snooping VLAN Configure screen (Section 26.5.2 on page 249) to help the DHCP servers distinguish between DHCP requests from different VLAN. Select Disable if you do not want the Switch to forward DHCP packets to a specific VLAN. If Timeout interval is greater than Write delay interval, it is possible that the next update is scheduled to occur before the current update has finished successfully or timed out. In this case, the Switch waits to start the next update until it completes the current one. Enter the location of the DHCP snooping database. The location should be expressed like this: tftp://{domain name or IP address}/directory, if applicable/file name; for example, tftp://192.168.10.1/database.txt. Enter how long (10-65535 seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. Enter how long (10-65535 seconds) the Switch waits to update the DHCP snooping database the first time the current bindings change after an update. Once the next update is scheduled, additional changes in current bindings are automatically included in the next update. Enter the location of a DHCP snooping database, and click Renew if you want the Switch to load it. You can use this to load dynamic bindings from a different DHCP snooping database than the one specified in Agent URL. When the Switch loads dynamic bindings from a DHCP snooping database, it does not discard the current dynamic bindings first. If there is a conflict, the Switch keeps the dynamic binding in volatile memory and updates the Binding collisions counter in the DHCP Snooping screen (Section 26.4 on page 243). MGS-3712/MGS-3712F User's Guide 247

Section	Page
MGS-3712/MGS-3712F	1
About This User's Guide	3
Document Conventions	5
Safety Warnings	7
Contents Overview	9
Table of Contents	11
Introduction and Hardware	21
Getting to Know Your Switch	23
1.1 Introduction	23
1.1.1 Backbone Application	23
1.1.2 Bridging Example	24
1.1.3 High Performance Switching Example	25
1.1.4 IEEE 802.1Q VLAN Application Examples	25
1.2 Ways to Manage the Switch	26
1.3 Good Habits for Managing the Switch	26
Hardware Installation and Connection	29
2.1 Installation Scenarios	29
2.2 Desktop Installation Procedure	29
2.3 Mounting the Switch on a Rack	30
2.3.1 Rack-mounted Installation Requirements	30
2.3.2 Attaching the Mounting Brackets to the Switch	31
2.3.3 Mounting the Switch on a Rack	32
Hardware Overview	33
3.1 Front Panel	33
3.1.1 Console Port	35
3.1.2 Gigabit Ethernet Ports	35
3.1.3 Mini-GBIC Slots	36
3.1.4 Management Port	38
3.1.5 Power Connector	38
3.1.6 Signal Slot	40
3.2 Rear Panel	42
3.3 LEDs	43
3.4 Configuring the Switch	44
Tutorials	45
4.1 How to Use DHCP Snooping on the Switch	45
4.2 How to Use DHCP Relay on the Switch	49
4.2.1 DHCP Relay Tutorial Introduction	49
4.2.2 Creating a VLAN	50
4.2.3 Configuring DHCP Relay	53
4.2.4 Troubleshooting	54
Basic Configuration	55
The Web Configurator	57
5.1 Introduction	57
5.2 System Login	57
5.3 The Status Screen	58
5.3.1 Change Your Password	62
5.4 Saving Your Configuration	62
5.5 Switch Lockout	62
5.6 Resetting the Switch	63
5.6.1 Reload the Configuration File	63
5.7 Logging Out of the Web Configurator	64
5.8 Help	65
Initial Setup Example	67
6.1 Overview	67
6.1.1 Creating a VLAN	67
6.1.2 Setting Port VID	68
6.2 Configuring Switch Management IP Address	70
System Status and Port Statistics	73
7.1 Overview	73
7.2 Port Status Summary	73
7.2.1 Status: Port Details	75
Basic Setting	79
8.1 Overview	79
8.2 System Information	80
8.3 General Setup	82
8.4 Introduction to VLANs	84
8.5 Switch Setup Screen	85
8.6 IP Setup	87
8.6.1 Management IP Addresses	87
8.7 Port Setup	91
Advanced	93
VLAN	95
9.1 Introduction to IEEE 802.1Q Tagged VLANs	95
9.1.1 Forwarding Tagged and Untagged Frames	95
9.2 Automatic VLAN Registration	96
9.2.1 GARP	96
9.2.2 GVRP	96
9.3 Port VLAN Trunking	97
9.4 Select the VLAN Type	98
9.5 Static VLAN	98
9.5.1 Static VLAN Status	99
9.5.2 VLAN Details	100
9.5.3 Configure a Static VLAN	100
9.5.4 Configure VLAN Port Settings	103
9.6 Subnet Based VLANs	104
9.7 Configuring Subnet Based VLAN	105
9.8 Protocol Based VLANs	107
9.9 Configuring Protocol Based VLAN	108
9.10 Create an IP-based VLAN Example	110
9.11 Port-based VLAN Setup	111
9.11.1 Configure a Port-based VLAN	112
Static MAC Forward Setup	115
10.1 Overview	115
10.2 Configuring Static MAC Forwarding	115
Static Multicast Forward Setup	119
11.1 Static Multicast Forwarding Overview	119
11.2 Configuring Static Multicast Forwarding	120
Filtering	123
12.1 Configure a Filtering Rule	123
Spanning Tree Protocol	125
13.1 STP/RSTP Overview	125
13.1.1 STP Terminology	125
13.1.2 How STP Works	126
13.1.3 STP Port States	127
13.1.4 Multiple RSTP	127
13.1.5 Multiple STP	128
13.2 Spanning Tree Protocol Status Screen	131
13.3 Spanning Tree Configuration	132
13.4 Configure Rapid Spanning Tree Protocol	133
13.5 Rapid Spanning Tree Protocol Status	135
13.6 Configure Multiple Rapid Spanning Tree Protocol	137
13.7 Multiple Rapid Spanning Tree Protocol Status	139
13.8 Configure Multiple Spanning Tree Protocol	141
13.9 Multiple Spanning Tree Protocol Status	144
Bandwidth Control	147
14.1 Bandwidth Control Overview	147
14.1.1 CIR and PIR	147
14.2 Bandwidth Control Setup	148
Broadcast Storm Control	151
15.1 Broadcast Storm Control Setup	151
Mirroring	153
16.1 Port Mirroring Setup	153
Link Aggregation	155
17.1 Link Aggregation Overview	155
17.2 Dynamic Link Aggregation	155
17.2.1 Link Aggregation ID	156
17.3 Link Aggregation Status	157
17.4 Link Aggregation Setting	159
17.5 Link Aggregation Control Protocol	161
17.6 Static Trunking Example	162
Port Authentication	165
18.1 Port Authentication Overview	165
18.1.1 IEEE 802.1x Authentication	165
18.1.2 MAC Authentication	166
18.2 Port Authentication Configuration	167
18.2.1 Activate IEEE 802.1x Security	168
18.2.2 Activate MAC Authentication	169
Port Security	171
19.1 About Port Security	171
19.2 Port Security Setup	172
19.3 VLAN MAC Address Limit	174
Classifier	177
20.1 About the Classifier and QoS	177
20.2 Configuring the Classifier	177
20.3 Viewing and Editing Classifier Configuration	180
20.4 Classifier Example	182
Policy Rule	185
21.1 Policy Rules Overview	185
21.1.1 DiffServ	185
21.1.2 DSCP and Per-Hop Behavior	185
21.2 Configuring Policy Rules	186
21.3 Viewing and Editing Policy Configuration	189
21.4 Policy Example	191
Queuing Method	193
22.1 Queuing Method Overview	193
22.1.1 Strictly Priority Queuing	193
22.1.2 Weighted Fair Queuing	193
22.1.3 Weighted Round Robin Scheduling (WRR)	194
22.2 Configuring Queuing	195
VLAN Stacking	197
23.1 VLAN Stacking Overview	197
23.1.1 VLAN Stacking Example	197
23.2 VLAN Stacking Port Roles	198
23.3 VLAN Tag Format	199
23.3.1 Frame Format	199
23.4 Configuring VLAN Stacking	200
23.4.1 Port-based Q-in-Q	201
23.4.2 Selective Q-in-Q	202
Multicast	205
24.1 Multicast Overview	205
24.1.1 IP Multicast Addresses	205
24.1.2 IGMP Filtering	205
24.1.3 IGMP Snooping	206
24.1.4 IGMP Snooping and VLANs	206
24.2 Multicast Status	206
24.3 Multicast Setting	207
24.4 IGMP Snooping VLAN	210
24.5 IGMP Filtering Profile	212
24.6 MVR Overview	213
24.6.1 Types of MVR Ports	214
24.6.2 MVR Modes	214
24.6.3 How MVR Works	214
24.7 General MVR Configuration	215
24.8 MVR Group Configuration	217
24.8.1 MVR Configuration Example	219
AAA	221
25.1 Authentication, Authorization and Accounting (AAA)	221
25.1.1 Local User Accounts	222
25.1.2 RADIUS and TACACS+	222
25.2 AAA Screens	222
25.2.1 RADIUS Server Setup	223
25.2.2 TACACS+ Server Setup	225
25.2.3 AAA Setup	227
25.2.4 Vendor Specific Attribute	230
25.3 Supported RADIUS Attributes	231
25.3.1 Attributes Used for Authentication	232
25.3.2 Attributes Used for Accounting	233
IP Source Guard	235
26.1 IP Source Guard Overview	235
26.1.1 DHCP Snooping Overview	236
26.1.2 ARP Inspection Overview	238
26.2 IP Source Guard	239
26.3 IP Source Guard Static Binding	240
26.4 DHCP Snooping	243
26.5 DHCP Snooping Configure	246
26.5.1 DHCP Snooping Port Configure	248
26.5.2 DHCP Snooping VLAN Configure	249
26.6 ARP Inspection Status	251
26.6.1 ARP Inspection VLAN Status	252
26.6.2 ARP Inspection Log Status	253
26.7 ARP Inspection Configure	254
26.7.1 ARP Inspection Port Configure	256
26.7.2 ARP Inspection VLAN Configure	258
Loop Guard	261
27.1 Loop Guard Overview	261
27.2 Loop Guard Setup	263
VLAN Mapping	265
28.1 VLAN Mapping Overview	265
28.1.1 VLAN Mapping Example	265
28.2 Enabling VLAN Mapping	266
28.3 Configuring VLAN Mapping	267
Layer 2 Protocol Tunneling	269
29.1 Layer 2 Protocol Tunneling Overview	269
29.1.1 Layer 2 Protocol Tunneling Mode	270
29.2 Configuring Layer 2 Protocol Tunneling	271
IP Application	273
Static Route	275
30.1 Static Routing Overview	275
30.2 Configuring Static Routing	276
Differentiated Services	279
31.1 DiffServ Overview	279
31.1.1 DSCP and Per-Hop Behavior	279
31.1.2 DiffServ Network Example	280
31.2 Two Rate Three Color Marker Traffic Policing	280
31.2.1 TRTCM-Color-blind Mode	281
31.2.2 TRTCM-Color-aware Mode	282
31.3 Activating DiffServ	282
31.3.1 Configuring 2-Rate 3 Color Marker Settings	284
31.4 DSCP-to-IEEE 802.1p Priority Settings	285
31.4.1 Configuring DSCP Settings	286
DHCP	287
32.1 DHCP Overview	287
32.1.1 DHCP Modes	287
32.1.2 DHCP Configuration Options	287
32.2 DHCP Status	288
32.3 DHCP Relay	288
32.3.1 DHCP Relay Agent Information	288
32.3.2 Configuring DHCP Global Relay	289
32.3.3 Global DHCP Relay Configuration Example	290
32.4 Configuring DHCP VLAN Settings	291
32.4.1 Example: DHCP Relay for Two VLANs	292
Management	295
Maintenance	297
33.1 The Maintenance Screen	297
33.2 Load Factory Default	298
33.3 Save Configuration	298
33.4 Reboot System	299
33.5 Firmware Upgrade	299
33.6 Restore a Configuration File	300
33.7 Backup a Configuration File	301
33.8 FTP Command Line	301
33.8.1 Filename Conventions	301
33.8.2 FTP Command Line Procedure	302
33.8.3 GUI-based FTP Clients	303
33.8.4 FTP Restrictions	303
Access Control	305
34.1 Access Control Overview	305
34.2 The Access Control Main Screen	305
34.3 About SNMP	306
34.3.1 SNMP v3 and Security	307
34.3.2 Supported MIBs	307
34.3.3 SNMP Traps	308
34.3.4 Configuring SNMP	315
34.3.5 Configuring SNMP Trap Group	318
34.3.6 Setting Up Login Accounts	319
34.4 SSH Overview	320
34.5 How SSH works	321
34.6 SSH Implementation on the Switch	322
34.6.1 Requirements for Using SSH	322
34.7 Introduction to HTTPS	322
34.8 HTTPS Example	323
34.8.1 Internet Explorer Warning Messages	323
34.8.2 Netscape Navigator Warning Messages	324
34.8.3 The Main Screen	326
34.9 Service Port Access Control	326
34.10 Remote Management	327
Diagnostic	329
35.1 Diagnostic	329
Syslog	331
36.1 Syslog Overview	331
36.2 Syslog Setup	332
36.3 Syslog Server Setup	333
Cluster Management	335
37.1 Cluster Management Status Overview	335
37.2 Cluster Management Status	336
37.2.1 Cluster Member Switch Management	337
37.3 Clustering Management Configuration	340
MAC Table	343
38.1 MAC Table Overview	343
38.2 Viewing the MAC Table	344
ARP Table	347
39.1 ARP Table Overview	347
39.1.1 How ARP Works	347
39.2 Viewing the ARP Table	348
Configure Clone	349
40.1 Configure Clone	349
Troubleshooting & Product Specifications	351
Troubleshooting	353
41.1 Power, Hardware Connections, and LEDs	353
41.2 Switch Access and Login	354
41.3 Switch Configuration	356
Product Specifications	357
Appendices and Index	365
Common Services	367
Legal Information	371

Match case Limit results 1 per page

Chapter 26 IP Source Guard

MGS-3712/MGS-3712F User’s Guide

247

The following table describes the labels in this screen.

Table 77

DHCP Snooping Configure

LABEL

DESCRIPTION

Active

Select this to enable DHCP snooping on the Switch. You still have

to enable DHCP snooping on specific VLAN and specify trusted

ports.

Note: If DHCP is enabled and there are no trusted ports,

DHCP requests will not succeed.

DHCP Vlan

Select a VLAN ID if you want the Switch to forward DHCP packets

to DHCP servers on a specific VLAN.

Note: You have to enable DHCP snooping on the DHCP

VLAN too.

You can enable

Option82

in the

DHCP Snooping VLAN

Configure

screen (

Section 26.5.2 on page 249

) to help the DHCP

servers distinguish between DHCP requests from different VLAN.

Select

Disable

if you do not want the Switch to forward DHCP

packets to a specific VLAN.

Database

Timeout interval

is greater than

Write delay interval

, it is

possible that the next update is scheduled to occur before the

current update has finished successfully or timed out. In this

case, the Switch waits to start the next update until it completes

the current one.

Agent URL

Enter the location of the DHCP snooping database. The location

should be expressed like this:

tftp://{domain name or IP

address}/directory, if applicable/file name

; for example,

tftp://192.168.10.1/database.txt

Timeout interval

Enter how long (10-65535 seconds) the Switch tries to complete

a specific update in the DHCP snooping database before it gives

up.

Write delay

interval

Enter how long (10-65535 seconds) the Switch waits to update

the DHCP snooping database the first time the current bindings

change after an update. Once the next update is scheduled,

additional changes in current bindings are automatically included

in the next update.

Renew DHCP

Snooping URL

Enter the location of a DHCP snooping database, and click

Renew

if you want the Switch to load it. You can use this to load dynamic

bindings from a different DHCP snooping database than the one

specified in

Agent URL

When the Switch loads dynamic bindings from a DHCP snooping

database, it does not discard the current dynamic bindings first. If

there is a conflict, the Switch keeps the dynamic binding in

volatile memory and updates the

Binding collisions

counter in

the

DHCP Snooping

screen (

Section 26.4 on page 243