Home » ZyXEL Manuals » Hubs & Switches » ZyXEL GS-4012F » Manual Viewer

ZyXEL GS-4012F User Guide - Page 300

Service Port Access Control

Add to My Manuals
Save this manual to your list of manuals

Page 300 highlights

Chapter 36 Access Control Figure 185 Example: Lock Denoting a Secure Connection 36.9 Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure "trusted computer(s)" for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 186 Access Control: Service Access Control 300 GS-4012F/4024 User's Guide

Section	Page
User’s Guide	1
About This User's Guide	3
Document Conventions	4
Safety Warnings	6
Contents Overview	9
Table of Contents	11
List of Figures	25
List of Tables	31
Introduction and Hardware	35
Getting to Know Your Switch	37
1.1 Introduction	37
1.1.1 Backbone Application	37
1.1.2 Bridging Example	38
1.1.3 High Performance Switching Example	38
1.1.4 IEEE 802.1Q VLAN Application Examples	39
Hardware Installation and Connection	41
2.1 Freestanding Installation	41
2.2 Mounting the Switch on a Rack	42
2.2.1 Rack-mounted Installation Requirements	42
2.2.2 Attaching the Mounting Brackets to the Switch	42
2.2.3 Mounting the Switch on a Rack	43
Hardware Overview	45
3.1 Front Panel Connection	45
3.1.1 Console Port	46
3.1.2 Gigabit Ethernet Ports	46
3.1.3 SFP Slots	47
3.2 Rear Panel	48
3.3 Power Connections Overview	49
3.3.1 AC Power Connection	49
3.3.2 DC Power Connection	50
3.3.3 External Backup Power Supply Connector	51
3.3.4 Powering on the Switch	51
3.4 LEDs	51
Basic Configuration	53
The Web Configurator	55
4.1 Introduction	55
4.2 System Login	55
4.3 The Status Screen	56
4.3.1 Change Your Password	61
4.4 Saving Your Configuration	61
4.5 Switch Lockout	61
4.6 Resetting the Switch	62
4.6.1 Reload the Configuration File	62
4.7 Logging Out of the Web Configurator	63
4.8 Help	63
Initial Setup Example	65
5.1 Overview	65
5.1.1 Configuring an IP Interface	65
5.1.2 Configuring DHCP Server Settings	66
5.1.3 Creating a VLAN	67
5.1.4 Setting Port VID	68
5.1.5 Enabling RIP	69
System Status and Port Statistics	71
6.1 Overview	71
6.2 Port Status Summary	71
6.2.1 Status: Port Details	72
Basic Setting	77
7.1 Overview	77
7.2 System Information	77
7.3 General Setup	79
7.4 Introduction to VLANs	81
7.5 Switch Setup Screen	81
7.6 IP Setup	83
7.6.1 IP Interfaces	83
7.7 Port Setup	85
Advanced	89
VLAN	91
8.1 Introduction to IEEE 802.1Q Tagged VLANs	91
8.1.1 Forwarding Tagged and Untagged Frames	91
8.2 Automatic VLAN Registration	92
8.2.1 GARP	92
8.2.2 GVRP	92
8.3 Port VLAN Trunking	93
8.4 Select the VLAN Type	93
8.5 Static VLAN	93
8.5.1 Static VLAN Status	94
8.5.2 Static VLAN Details	94
8.5.3 Configure a Static VLAN	95
8.5.4 Configure VLAN Port Settings	96
8.6 Subnet Based VLANs	98
8.7 Configuring Subnet Based VLAN	99
8.8 Port-based VLAN Setup	100
8.8.1 Configure a Port-based VLAN	101
Static MAC Forward Setup	105
9.1 Overview	105
9.2 Configuring Static MAC Forwarding	105
Filtering	107
10.1 Configure a Filtering Rule	107
Spanning Tree Protocol	109
11.1 STP/RSTP Overview	109
11.1.1 STP Terminology	109
11.1.2 How STP Works	110
11.1.3 STP Port States	111
11.1.4 Multiple RSTP	111
11.1.5 Multiple STP	112
11.2 Spanning Tree Protocol Status Screen	114
11.3 Spanning Tree Configuration	115
11.4 Configure Rapid Spanning Tree Protocol	116
11.5 Rapid Spanning Tree Protocol Status	117
11.6 Configure Multiple Rapid Spanning Tree Protocol	119
11.7 Multiple Rapid Spanning Tree Protocol Status	120
11.8 Configure Multiple Spanning Tree Protocol	122
11.9 Multiple Spanning Tree Protocol Status	124
Bandwidth Control	127
12.1 Bandwidth Control Overview	127
12.1.1 CIR and PIR	127
12.2 Bandwidth Control Setup	127
Broadcast Storm Control	129
13.1 Broadcast Storm Control Setup	129
Mirroring	131
14.1 Port Mirroring Setup	131
Link Aggregation	133
15.1 Link Aggregation Overview	133
15.2 Dynamic Link Aggregation	133
15.2.1 Link Aggregation ID	134
15.3 Link Aggregation Status	134
15.4 Link Aggregation Setting	135
15.5 Link Aggregation Control Protocol	136
15.6 Static Trunking Example	138
Port Authentication	141
16.1 Port Authentication Overview	141
16.1.1 IEEE 802.1x Authentication	141
16.1.2 MAC Authentication	142
16.2 Port Authentication Configuration	143
16.2.1 Activate IEEE 802.1x Security	143
16.2.2 Activate MAC Authentication	144
Port Security	147
17.1 About Port Security	147
17.2 Port Security Setup	147
Classifier	151
18.1 About the Classifier and QoS	151
18.2 Configuring the Classifier	151
18.3 Viewing and Editing Classifier Configuration	154
18.4 Classifier Example	155
Policy Rule	157
19.1 Policy Rules Overview	157
19.1.1 DiffServ	157
19.1.2 DSCP and Per-Hop Behavior	157
19.2 Configuring Policy Rules	158
19.3 Viewing and Editing Policy Configuration	160
19.4 Policy Example	161
Queuing Method	163
20.1 Queuing Method Overview	163
20.1.1 Strictly Priority Queuing	163
20.1.2 Weighted Round Robin Scheduling (WRR)	163
20.2 Configuring Queuing	164
VLAN Stacking	165
21.1 VLAN Stacking Overview	165
21.1.1 VLAN Stacking Example	165
21.2 VLAN Stacking Port Roles	166
21.3 VLAN Tag Format	167
21.3.1 Frame Format	167
21.4 Configuring VLAN Stacking	168
Multicast	171
22.1 Multicast Overview	171
22.1.1 IP Multicast Addresses	171
22.1.2 IGMP Filtering	171
22.1.3 IGMP Snooping	171
22.1.4 IGMP Snooping and VLANs	172
22.2 Multicast Status	172
22.3 Multicast Setting	172
22.4 IGMP Snooping VLAN	174
22.5 IGMP Filtering Profile	176
22.6 MVR Overview	177
22.6.1 Types of MVR Ports	177
22.6.2 MVR Modes	178
22.6.3 How MVR Works	178
22.7 General MVR Configuration	178
22.8 MVR Group Configuration	180
22.8.1 MVR Configuration Example	181
Authentication & Accounting	185
23.1 Authentication, Authorization and Accounting	185
23.1.1 Local User Accounts	185
23.1.2 RADIUS and TACACS+	186
23.2 Authentication and Accounting Screens	186
23.2.1 RADIUS Server Setup	186
23.2.2 TACACS+ Server Setup	188
23.2.3 Authentication and Accounting Setup	190
23.2.4 Vendor Specific Attribute	193
23.3 Supported RADIUS Attributes	194
23.3.1 Attributes Used for Authentication	195
23.3.2 Attributes Used for Accounting	195
IP Source Guard	199
24.1 IP Source Guard Overview	199
24.1.1 DHCP Snooping Overview	199
24.1.2 ARP Inspection Overview	201
24.2 IP Source Guard	203
24.3 IP Source Guard Static Binding	203
24.4 DHCP Snooping	205
24.5 DHCP Snooping Configure	208
24.5.1 DHCP Snooping Port Configure	209
24.5.2 DHCP Snooping VLAN Configure	211
24.6 ARP Inspection Status	212
24.6.1 ARP Inspection VLAN Status	212
24.6.2 ARP Inspection Log Status	213
24.7 ARP Inspection Configure	215
24.7.1 ARP Inspection Port Configure	216
24.7.2 ARP Inspection VLAN Configure	217
Loop Guard	219
25.1 Loop Guard Overview	219
25.2 Loop Guard Setup	221
IP Application	223
Static Route	225
26.1 Configuring Static Routing	225
RIP	227
27.1 RIP Overview	227
27.2 Configuring RIP	227
OSPF	229
28.1 OSPF Overview	229
28.1.1 OSPF Autonomous Systems and Areas	229
28.1.2 How OSPF Works	230
28.1.3 Interfaces and Virtual Links	230
28.1.4 OSPF and Router Elections	230
28.1.5 Configuring OSPF	231
28.2 OSPF Status	231
28.3 OSPF Configuration	233
28.4 Configure OSPF Areas	235
28.4.1 View OSPF Area Information Table	236
28.5 Configuring OSPF Interfaces	236
28.6 OSPF Virtual-Links	238
IGMP	241
29.1 IGMP Overview	241
29.1.1 How IGMP Works	242
29.2 Port-based IGMP	243
29.3 Configuring IGMP	243
DVMRP	245
30.1 DVMRP Overview	245
30.2 How DVMRP Works	245
30.2.1 DVMRP Terminology	246
30.3 Configuring DVMRP	246
30.3.1 DVMRP Configuration Error Messages	247
30.4 Default DVMRP Timer Values	248
IP Multicast	249
31.1 IP Multicast Overview	249
31.2 Configuring Multicast	249
Differentiated Services	251
32.1 DiffServ Overview	251
32.1.1 DSCP and Per-Hop Behavior	251
32.1.2 DiffServ Network Example	252
32.2 Two Rate Three Color Marker Traffic Policing	252
32.2.1 TRTCM - Color-blind Mode	253
32.2.2 TRTCM - Color-aware Mode	253
32.3 Activating DiffServ	254
32.3.1 Configuring 2-Rate 3 Color Marker Settings	254
32.4 DSCP-to-IEEE 802.1p Priority Settings	256
32.4.1 Configuring DSCP Settings	256
DHCP	259
33.1 DHCP Overview	259
33.1.1 DHCP Modes	259
33.1.2 DHCP Configuration Options	259
33.2 DHCP Status	260
33.3 DHCP Server Status Detail	260
33.4 DHCP Relay	261
33.4.1 DHCP Relay Agent Information	261
33.4.2 Configuring DHCP Global Relay	262
33.4.3 Global DHCP Relay Configuration Example	263
33.5 Configuring DHCP VLAN Settings	264
33.5.1 Example: DHCP Relay for Two VLANs	266
VRRP	267
34.1 VRRP Overview	267
34.2 VRRP Status	268
34.3 VRRP Configuration	269
34.3.1 IP Interface Setup	269
34.3.2 VRRP Parameters	270
34.3.3 Configuring VRRP Parameters	271
34.4 VRRP Configuration Summary	272
34.5 VRRP Configuration Examples	272
34.5.1 One Subnet Network Example	272
34.5.2 Two Subnets Example	274
Management, CLI, Troubleshooting	277
Maintenance	279
35.1 The Maintenance Screen	279
35.2 Load Factory Default	280
35.3 Save Configuration	280
35.4 Reboot System	281
35.5 Firmware Upgrade	281
35.6 Restore a Configuration File	282
35.7 Backup a Configuration File	282
35.8 FTP Command Line	283
35.8.1 Filename Conventions	283
35.8.2 FTP Command Line Procedure	283
35.8.3 GUI-based FTP Clients	284
35.8.4 FTP Restrictions	284
Access Control	285
36.1 Access Control Overview	285
36.2 The Access Control Main Screen	285
36.3 About SNMP	286
36.3.1 SNMP v3 and Security	287
36.3.2 Supported MIBs	287
36.3.3 SNMP Traps	287
36.3.4 Configuring SNMP	291
36.3.5 Configuring SNMP Trap Group	293
36.3.6 Setting Up Login Accounts	294
36.4 SSH Overview	296
36.5 How SSH works	296
36.6 SSH Implementation on the Switch	297
36.6.1 Requirements for Using SSH	297
36.7 Introduction to HTTPS	297
36.8 HTTPS Example	298
36.8.1 Internet Explorer Warning Messages	298
36.8.2 Netscape Navigator Warning Messages	299
36.8.3 The Main Screen	299
36.9 Service Port Access Control	300
36.10 Remote Management	301
Diagnostic	303
37.1 Diagnostic	303
Syslog	305
38.1 Syslog Overview	305
38.2 Syslog Setup	305
38.3 Syslog Server Setup	306
Cluster Management	309
39.1 Cluster Management Status Overview	309
39.2 Cluster Management Status	310
39.2.1 Cluster Member Switch Management	311
39.3 Clustering Management Configuration	312
MAC Table	315
40.1 MAC Table Overview	315
40.2 Viewing the MAC Table	316
IP Table	317
41.1 IP Table Overview	317
41.2 Viewing the IP Table	318
ARP Table	319
42.1 ARP Table Overview	319
42.1.1 How ARP Works	319
42.2 Viewing the ARP Table	319
Routing Table	321
43.1 Overview	321
43.2 Viewing the Routing Table	321
Configure Clone	323
44.1 Configure Clone	323
Introducing Commands	325
45.1 Overview	325
45.2 Accessing the CLI	325
45.2.1 The Console Port	325
45.3 The Login Screen	326
45.4 Command Syntax Conventions	326
45.5 Changing the Password	327
45.6 Creating a New IP Interface	327
45.7 Privilege Levels	328
45.8 Command Modes	328
45.9 Getting Help	329
45.9.1 List of Available Commands	330
45.10 Using Command History	331
45.11 Saving Your Configuration	331
45.11.1 Switch Configuration File	332
45.11.2 Logging Out	332
45.12 Command Summary	332
45.12.1 User Mode	333
45.12.2 Enable Mode	334
45.12.3 General Configuration Mode	343
45.12.4 interface port-channel Commands	368
45.12.5 interface route-domain Commands	373
45.12.6 config-vlan Commands	375
45.13 mvr Commands	376
User and Enable Mode Commands	377
46.1 Overview	377
46.2 show Commands	377
46.2.1 show system-information	377
46.2.2 show ip	378
46.2.3 show logging	378
46.2.4 show interface	378
46.2.5 show mac address-table	379
46.3 ping	380
46.4 traceroute	380
46.5 Copy Port Attributes	381
46.6 Configuration File Maintenance	381
46.6.1 Using a Different Configuration File	382
46.6.2 Resetting to the Factory Default	382
Configuration Mode Commands	383
47.1 Change the Out of Band Management IP Address	383
47.2 Enabling IGMP Snooping	383
47.3 Configure IGMP Filter	384
47.4 Enabling STP	385
47.5 no Command Examples	387
47.5.1 Disable Commands	387
47.5.2 Resetting Commands	387
47.5.3 Re-enable commands	387
47.5.4 Other Examples of no Commands	388
47.6 Static Route Commands	390
47.7 Enabling MAC Filtering	390
47.8 Enabling Trunking	391
47.9 Enabling Port Authentication	392
47.9.1 RADIUS Server Settings	392
47.9.2 Port Authentication Settings	393
Interface Commands	395
48.1 Overview	395
48.2 Interface Command Examples	395
48.2.1 interface port-channel	395
48.2.2 bpdu-control	395
48.2.3 broadcast-limit	396
48.2.4 bandwidth-limit	396
48.2.5 mirror	397
48.2.6 gvrp	398
48.2.7 ingress-check	398
48.2.8 frame-type	398
48.2.9 weight	399
48.2.10 egress set	399
48.2.11 qos priority	400
48.2.12 name	400
48.2.13 speed-duplex	400
48.2.14 test	401
48.3 Interface no Command Examples	401
48.3.1 no bandwidth-limit	401
IEEE 802.1Q Tagged VLAN Commands	403
49.1 Configuring Tagged VLAN	403
49.2 Global VLAN1Q Tagged VLAN Configuration Commands	404
49.2.1 GARP Status	404
49.2.2 GARP Timer	404
49.2.3 GVRP Timer	405
49.2.4 Enable GVRP	405
49.2.5 Disable GVRP	405
49.3 Port VLAN Commands	405
49.3.1 Set Port VID	405
49.3.2 Set Acceptable Frame Type	406
49.3.3 Enable or Disable Port GVRP	406
49.3.4 Modify Static VLAN	406
49.3.5 Delete VLAN ID	408
49.4 Enable VLAN	408
49.5 Disable VLAN	408
49.6 Show VLAN Setting	408
Multicast VLAN Registration Commands	411
50.1 Overview	411
50.2 Create Multicast VLAN	411
Routing Domain Command Examples	413
51.0.1 interface route-domain	413
Troubleshooting	415
52.1 Problems Starting Up the Switch	415
52.2 Problems Accessing the Switch	415
52.2.1 Pop-up Windows, JavaScripts and Java Permissions	416
52.3 Problems with the Password	421
Appendices and Index	423
Product Specifications	425
IP Addresses and Subnetting	431
Common Services	441
Legal Information	445
Customer Support	449