ZyXEL GS3700/XGS3700 Series User Guide - Page 3

Contents Overview

GS3700/XGS3700 Series User’s Guide

3

Contents Overview

User’s Guide

.......................................................................................................................................

19

Getting to Know Your Switch

...................................................................................................................

21

Hardware Installation and Connection

....................................................................................................

27

Hardware Overview

.................................................................................................................................

31

The Web Configurator

.............................................................................................................................

39

Technical Reference

..........................................................................................................................

49

System Status and Port Statistics

...........................................................................................................

51

Basic Setting

..........................................................................................................................................

57

VLAN

.......................................................................................................................................................

89

Static MAC Forward Setup

....................................................................................................................

107

Static Multicast Forward Setup

..............................................................................................................

109

Filtering

.................................................................................................................................................

113

Spanning Tree Protocol

.........................................................................................................................

115

Bandwidth Control

.................................................................................................................................

133

Broadcast Storm Control

.......................................................................................................................

137

Mirroring

................................................................................................................................................

139

Link Aggregation

...................................................................................................................................

149

Port Authentication

................................................................................................................................

157

Port Security

..........................................................................................................................................

165

Classifier

...............................................................................................................................................

169

Policy Rule

...........................................................................................................................................

175

Queuing Method

....................................................................................................................................

181

VLAN Stacking

......................................................................................................................................

185

Multicast

................................................................................................................................................

193

AAA

.......................................................................................................................................................

219

IP Source Guard

...................................................................................................................................

233

Loop Guard

...........................................................................................................................................

255

VLAN Mapping

......................................................................................................................................

259

Layer 2 Protocol Tunneling

...................................................................................................................

263

sFlow

.....................................................................................................................................................

267

PPPoE

...................................................................................................................................................

271

Error Disable

.........................................................................................................................................

279

MAC Pinning

.........................................................................................................................................

285

Private VLAN

.........................................................................................................................................

287

Green Ethernet

......................................................................................................................................

291

Static Route

...........................................................................................................................................

293

Policy Routing

.......................................................................................................................................

299

Section	Page
GS3700/XGS3700 Series	1
Contents Overview	3
Table of Contents	5
User’s Guide	19
Getting to Know Your Switch	21
1.1 Introduction	21
1.1.1 Bridging Example	21
1.1.2 High Performance Switching Example	22
1.1.3 Gigabit Ethernet to the Desktop	23
1.1.4 IEEE 802.1Q VLAN Application Example	23
1.1.5 IPv6 Support	24
1.2 Ways to Manage the Switch	24
1.3 Good Habits for Managing the Switch	25
Hardware Installation and Connection	27
2.1 Freestanding Installation	27
2.2 Mounting the Switch on a Rack	28
2.3 Installation Requirements	28
2.3.1 Precautions	28
2.4 Attaching the Brackets to the Switch	28
2.5 Mounting the Switch on a Rack	29
2.6 Power Module Installation	30
Hardware Overview	31
3.1 Front Panel Connections	31
3.1.1 Ethernet Ports	32
3.1.2 SFP/SFP+ Slots	33
3.1.3 Management Port	34
3.1.4 Console Port	34
3.2 Rear Panel	35
3.2.1 Removing and Installing the Fan Module	35
3.2.2 Power Connection	35
3.3 LEDs	36
The Web Configurator	39
4.1 Introduction	39
4.2 System Login	39
4.3 The Web Configurator Layout	40
4.3.1 Change Your Password	45
4.4 Saving Your Configuration	45
4.5 Switch Lockout	45
4.6 Resetting the Switch	46
4.6.1 Reload the Configuration File	46
4.7 Logging Out of the Web Configurator	47
4.8 Help	47
Technical Reference	49
System Status and Port Statistics	51
5.1 Overview	51
5.2 Port Status Summary	51
5.2.1 Status: Port Details	53
Basic Setting	57
6.1 System Information	57
6.2 General Setup	59
6.3 Introduction to VLANs	60
6.4 Switch Setup	61
6.5 IP Setup	63
6.5.1 IP Interfaces	63
6.6 Port Setup	65
6.7 PoE	67
6.7.1 PoE Setup	69
6.8 Interface Setup	71
6.9 IPv6	72
6.9.1 IPv6 Interface Status	74
6.9.2 IPv6 Configuration	76
6.9.3 IPv6 Global Setup	77
6.9.4 IPv6 Interface Setup	78
6.9.5 IPv6 Link-Local Address Setup	78
6.9.6 IPv6 Global Address Setup	80
6.9.7 IPv6 Neighbor Discovery Setup	81
6.9.8 IPv6 Router Discovery Setup	82
6.9.9 IPv6 Prefix Setup	83
6.9.10 IPv6 Neighbor Setup	85
6.9.11 DHCPv6 Client Setup	86
VLAN	89
7.1 Introduction to IEEE 802.1Q Tagged VLANs	89
7.1.1 Forwarding Tagged and Untagged Frames	89
7.2 Automatic VLAN Registration	90
7.2.1 GARP	90
7.2.2 GVRP	90
7.3 Port VLAN Trunking	91
7.4 Select the VLAN Type	91
7.5 802.1Q Static VLAN	91
7.5.1 VLAN Status	92
7.5.2 VLAN Details	93
7.5.3 Configure a Static VLAN or Private VLAN	94
7.5.4 Configure VLAN Port Settings	96
7.5.5 Subnet Based VLANs	97
7.5.6 Protocol Based VLANs	99
7.5.7 View Private VLAN Status	102
7.6 Port-based VLAN Setup	103
7.6.1 Configure a Port-based VLAN	103
Static MAC Forward Setup	107
8.1 Overview	107
8.2 Configuring Static MAC Forwarding	107
Static Multicast Forward Setup	109
9.1 Static Multicast Forwarding Overview	109
9.2 Configuring Static Multicast Forwarding	110
Filtering	113
10.1 Configure a Filtering Rule	113
Spanning Tree Protocol	115
11.1 STP/RSTP Overview	115
11.1.1 STP Terminology	115
11.1.2 How STP Works	116
11.1.3 STP Port States	116
11.1.4 Multiple RSTP	116
11.1.5 Multiple STP	117
11.2 Spanning Tree Protocol Status Screen	120
11.3 Spanning Tree Configuration	120
11.4 Configure Rapid Spanning Tree Protocol	121
11.5 Rapid Spanning Tree Protocol Status	122
11.6 Configure Multiple Rapid Spanning Tree Protocol	124
11.7 Multiple Rapid Spanning Tree Protocol Status	125
11.8 Configure Multiple Spanning Tree Protocol	127
11.8.1 Multiple Spanning Tree Protocol Port Configuration	130
11.9 Multiple Spanning Tree Protocol Status	131
Bandwidth Control	133
12.1 Bandwidth Control Overview	133
12.1.1 CIR and PIR	133
12.2 Bandwidth Control Setup	134
Broadcast Storm Control	137
13.1 Broadcast Storm Control Setup	137
Mirroring	139
14.1 Port Mirroring	139
14.1.1 Local Port Mirroring	142
14.1.2 Remote Port Mirroring	143
14.1.3 Source	143
14.1.4 Destination	145
14.1.5 Connected Port	146
Link Aggregation	149
15.1 Link Aggregation Overview	149
15.2 Dynamic Link Aggregation	149
15.2.1 Link Aggregation ID	150
15.3 Link Aggregation Status	150
15.4 Link Aggregation Setting	152
15.5 Link Aggregation Control Protocol	154
15.6 Static Trunking Example	155
Port Authentication	157
16.1 Port Authentication Overview	157
16.1.1 IEEE 802.1x Authentication	157
16.1.2 MAC Authentication	158
16.2 Port Authentication Configuration	159
16.2.1 Activate IEEE 802.1x Security	160
16.2.2 Guest VLAN	161
16.2.3 Activate MAC Authentication	163
Port Security	165
17.1 About Port Security	165
17.2 Port Security Setup	165
17.3 VLAN MAC Address Limit	167
Classifier	169
18.1 About the Classifier and QoS	169
18.2 Configuring the Classifier	169
18.3 Viewing and Editing Classifier Configuration	172
18.4 Classifier Example	174
Policy Rule	175
19.1 Policy Rules Overview	175
19.1.1 DiffServ	175
19.1.2 DSCP and Per-Hop Behavior	175
19.2 Configuring Policy Rules	175
19.3 Viewing and Editing Policy Configuration	178
19.4 Policy Example	179
Queuing Method	181
20.1 Queuing Method Overview	181
20.1.1 Strictly Priority	181
20.1.2 Weighted Fair Queuing	181
20.1.3 Weighted Round Robin Scheduling (WRR)	182
20.2 Configuring Queuing	182
VLAN Stacking	185
21.1 VLAN Stacking Overview	185
21.1.1 VLAN Stacking Example	185
21.2 VLAN Stacking Port Roles	186
21.3 VLAN Tag Format	187
21.3.1 Frame Format	187
21.4 Configuring VLAN Stacking	188
21.4.1 Port-based Q-in-Q	189
21.4.2 Selective Q-in-Q	190
Multicast	193
22.1 Multicast Overview	193
22.1.1 IP Multicast Addresses	193
22.1.2 IGMP Filtering	193
22.1.3 IGMP Snooping	194
22.1.4 IGMP Snooping and VLANs	194
22.1.5 MLD Snooping-Proxy	194
22.1.6 MLD Messages	195
22.2 Multicast Setup	195
22.3 IPv4 Multicast Status	196
22.3.1 IGMP Snooping	197
22.3.2 IGMP Snooping VLAN	200
22.3.3 IGMP Filtering Profile	201
22.4 IPv6 Multicast Status	202
22.4.1 MLD Snooping-proxy	203
22.4.2 MLD Snooping-proxy VLAN	204
22.4.3 MLD Snooping-proxy VLAN Port Role Setting	206
22.4.4 MLD Snooping-proxy Filtering	207
22.4.5 MLD Snooping-proxy Filtering Profile	209
22.5 MVR Overview	210
22.5.1 Types of MVR Ports	210
22.5.2 MVR Modes	210
22.5.3 How MVR Works	211
22.6 General MVR Configuration	211
22.6.1 MVR Group Configuration	213
22.6.2 MVR Configuration Example	215
AAA	219
23.1 Authentication, Authorization and Accounting (AAA)	219
23.1.1 Local User Accounts	219
23.1.2 RADIUS and TACACS+	220
23.2 AAA Screens	220
23.2.1 RADIUS Server Setup	220
23.2.2 TACACS+ Server Setup	223
23.2.3 AAA Setup	225
23.2.4 Vendor Specific Attribute	227
23.2.5 Tunnel Protocol Attribute	228
23.3 Supported RADIUS Attributes	228
23.3.1 Attributes Used for Authentication	229
23.3.2 Attributes Used for Accounting	229
IP Source Guard	233
24.1 IP Source Guard Overview	233
24.1.1 DHCP Snooping Overview	233
24.1.2 ARP Inspection Overview	235
24.2 IP Source Guard	237
24.3 IP Source Guard Static Binding	237
24.4 DHCP Snooping	240
24.5 DHCP Snooping Configure	242
24.5.1 DHCP Snooping Port Configure	244
24.5.2 DHCP Snooping VLAN Configure	245
24.5.3 DHCP Snooping VLAN Port Configure	246
24.6 ARP Inspection Status	247
24.6.1 ARP Inspection VLAN Status	249
24.6.2 ARP Inspection Log Status	250
24.7 ARP Inspection Configure	251
24.7.1 ARP Inspection Port Configure	252
24.7.2 ARP Inspection VLAN Configure	253
Loop Guard	255
25.1 Loop Guard Overview	255
25.2 Loop Guard Setup	257
VLAN Mapping	259
26.1 VLAN Mapping Overview	259
26.1.1 VLAN Mapping Example	259
26.2 Enabling VLAN Mapping	260
26.3 Configuring VLAN Mapping	261
Layer 2 Protocol Tunneling	263
27.1 Layer 2 Protocol Tunneling Overview	263
27.1.1 Layer-2 Protocol Tunneling Mode	264
27.2 Configuring Layer 2 Protocol Tunneling	265
sFlow	267
28.1 sFlow Overview	267
28.2 sFlow Port Configuration	268
28.2.1 sFlow Collector Configuration	269
PPPoE	271
29.1 PPPoE Intermediate Agent Overview	271
29.1.1 PPPoE Intermediate Agent Tag Format	271
29.1.2 Sub-Option Format	271
29.1.3 Port State	272
29.2 The PPPoE Screen	273
29.3 PPPoE Intermediate Agent	273
29.3.1 PPPoE IA Per-Port	275
29.3.2 PPPoE IA Per-Port Per-VLAN	276
29.3.3 PPPoE IA for VLAN	278
Error Disable	279
30.1 CPU Protection Overview	279
30.2 Error-Disable Recovery Overview	279
30.3 The Error Disable Screen	280
30.4 CPU Protection Configuration	280
30.5 Error-Disable Detect Configuration	281
30.6 Error-Disable Recovery Configuration	282
MAC Pinning	285
31.1 MAC Pinning Overview	285
31.2 MAC Pinning Configuration	286
Private VLAN	287
32.1 Private VLAN Overview	287
32.1.1 Configuration	289
Green Ethernet	291
33.1 Green Ethernet Overview	291
33.2 Configuring Green Ethernet	291
Static Route	293
34.1 Static Routing Overview	293
34.2 Static Routing	293
34.3 Configuring IPv4 Static Routing	294
34.4 Configuring IPv6 Static Routing	296
Policy Routing	299
35.1 Policy Route Overview	299
35.1.1 Benefits	299
35.2 Configuring Policy Routing Profile	300
35.2.1 Policy Routing Rule Configuration	300
Differentiated Services	303
36.1 DiffServ Overview	303
36.1.1 DSCP and Per-Hop Behavior	303
36.1.2 DiffServ Network Example	303
36.2 Two Rate Three Color Marker Traffic Policing	304
36.2.1 TRTCM - Color-blind Mode	305
36.2.2 TRTCM - Color-aware Mode	305
36.3 Activating DiffServ	305
36.3.1 Configuring 2-Rate 3 Color Marker Settings	306
36.3.2 DSCP Profile	308
36.4 DSCP-to-IEEE 802.1p Priority Settings	309
36.4.1 Configuring DSCP Settings	309
DHCP	311
37.1 DHCP Overview	311
37.1.1 DHCP Modes	311
37.1.2 DHCP Configuration Options	311
37.2 DHCP Configuration	311
37.3 DHCPv4 Status	312
37.3.1 DHCPv4 Server Status Detail	313
37.4 DHCPv4 Relay	313
37.4.1 DHCPv4 Relay Agent Information	314
37.4.2 DHCPv4 Option 82 Profile	315
37.4.3 Configuring DHCPv4 Global Relay	316
37.4.4 DHCPv4 Global Relay Port Configure	317
37.4.5 Global DHCP Relay Configuration Example	318
37.5 Configuring DHCP VLAN Settings	319
37.5.1 DHCPv4 VLAN Port Configure	321
37.5.2 Example: DHCP Relay for Two VLANs	322
37.6 DHCPv6 Relay	324
VRRP	327
38.1 VRRP Overview	327
38.2 VRRP Status	328
38.3 VRRP Configuration	328
38.3.1 IP Interface Setup	328
38.3.2 VRRP Parameters	330
38.3.3 Configuring VRRP Parameters	331
38.3.4 Viewing VRRP Summary	332
38.4 VRRP Configuration Examples	332
38.4.1 One Subnet Network Example	333
38.4.2 Two Subnets Example	334
Load Sharing	337
39.1 Load Sharing Overview	337
39.2 Configuring Load Sharing	337
ARP Setup	339
40.1 ARP Overview	339
40.1.1 How ARP Works	339
40.1.2 ARP Learning Mode	339
40.2 ARP Setup	341
40.2.1 ARP Learning	342
40.2.2 Static ARP	343
Maintenance	345
41.1 The Maintenance Screen	345
41.2 Load Factory Default	346
41.3 Save Configuration	346
41.4 Reboot System	346
41.5 Firmware Upgrade	347
41.6 Restore a Configuration File	348
41.7 Backup a Configuration File	348
41.8 FTP Command Line	349
41.8.1 Filename Conventions	349
41.8.2 FTP Command Line Procedure	350
41.8.3 GUI-based FTP Clients	350
41.8.4 FTP Restrictions	350
Access Control	351
42.1 Access Control Overview	351
42.2 The Access Control Main Screen	351
42.3 About SNMP	351
42.3.1 SNMP v3 and Security	352
42.3.2 Supported MIBs	353
42.3.3 SNMP Traps	353
42.3.4 Configuring SNMP	357
42.3.5 Configuring SNMP Trap Group	358
42.3.6 Enabling/Disabling Sending of SNMP Traps on a Port	359
42.3.7 Configuring SNMP User	360
42.4 Setting Up Login Accounts	362
42.5 SSH Overview	363
42.6 How SSH works	364
42.7 SSH Implementation on the Switch	365
42.7.1 Requirements for Using SSH	365
42.8 Introduction to HTTPS	365
42.9 HTTPS Example	366
42.9.1 Internet Explorer Warning Messages	366
42.9.2 Mozilla Firefox Warning Messages	369
42.9.3 The Main Screen	370
42.10 Service Access Control	371
42.11 Remote Management	372
Diagnostic	375
43.1 Diagnostic	375
Syslog	377
44.1 Syslog Overview	377
44.2 Syslog Setup	378
44.3 Syslog Server Setup	379
Cluster Management	381
45.1 Clustering Management Status Overview	381
45.2 Cluster Management Status	382
45.2.1 Cluster Member Switch Management	383
45.3 Clustering Management Configuration	385
MAC Table	387
46.1 MAC Table Overview	387
46.2 Viewing the MAC Table	388
IP Table	391
47.1 IP Table Overview	391
47.2 Viewing the IP Table	392
ARP Table	393
48.1 ARP Table Overview	393
48.1.1 How ARP Works	393
48.2 The ARP Table Screen	394
Routing Table	395
49.1 Overview	395
49.2 Viewing the Routing Table Status	395
Path MTU Table	397
50.1 Path MTU Overview	397
50.2 Viewing the Path MTU Table	397
Configure Clone	399
51.1 Configure Clone	399
Neighbor Table	401
52.1 IPv6 Neighbor Table Overview	401
52.2 Viewing the IPv6 Neighbor Table	401
Troubleshooting	403
53.1 Power, Hardware Connections, and LEDs	403
53.2 Switch Access and Login	404
53.3 Switch Configuration	406
Common Services	407
IPv6	411
Legal Information	421

ZyXEL GS3700/XGS3700 Series User Guide - Page 3

Contents Overview

Page 3 highlights