Home » ZyXEL Manuals » Networking » ZyXEL MES-3528 » Manual Viewer

ZyXEL MES-3528 User Guide - Page 161

Port Security

Get ZyXEL MES-3528 PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 161 highlights

CHAPTER 19 Port Security This chapter shows you how to set up port security. 19.1 About Port Security Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. The Switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K. For maximum port security, enable this feature, disable MAC address learning and configure static MAC address(es) for a port. It is not recommended you disable port security together with MAC address learning as this will result in many broadcasts. By default, MAC address learning is still enabled even though the port security is not activated. MES-3528 User's Guide 161

Section	Page
MES-3528	1
About This User's Guide	3
Document Conventions	4
Safety Warnings	6
Contents Overview	7
Table of Contents	9
User’s Guide	19
Getting to Know Your Switch	21
1.1 Introduction	21
1.1.1 Backbone Application	21
1.1.2 Bridging Example	22
1.1.3 High Performance Switching Example	23
1.1.4 IEEE 802.1Q VLAN Application Examples	23
1.1.5 Metro Ethernet	24
1.2 Ways to Manage the Switch	25
1.3 Good Habits for Managing the Switch	26
Hardware Installation and Connection	27
2.1 Installation Scenarios	27
2.2 Desktop Installation Procedure	27
2.3 Mounting the Switch on a Rack	27
2.3.1 Rack-mounted Installation Requirements	28
2.3.2 Attaching the Mounting Brackets to the Switch	28
2.3.3 Mounting the Switch on a Rack	29
Hardware Overview	31
3.1 Front Panel	31
3.1.1 Console Port	32
3.1.2 Gigabit Ethernet Ports	33
3.1.3 Mini-GBIC Slots	34
3.1.4 Power Connector (DC)	36
3.1.5 Procedure to Turn on the Switch Power	36
3.1.6 Power Connector (AC)	36
3.1.7 Signal Slot	36
3.2 LEDs	38
Technical Reference	41
The Web Configurator	43
4.1 Introduction	43
4.2 System Login	43
4.3 The Status Screen	44
4.3.1 Change Your Password	49
4.4 Saving Your Configuration	49
4.5 Switch Lockout	50
4.6 Resetting the Switch	50
4.6.1 Reload the Configuration File	50
4.7 Logging Out of the Web Configurator	51
4.8 Help	52
Initial Setup Example	53
5.1 Overview	53
5.1.1 Creating a VLAN	53
5.1.2 Setting Port VID	55
5.2 Configuring Switch Management IP Address	56
Tutorials	59
6.1 How to Use DHCP Snooping on the Switch	59
6.2 How to Use DHCP Relay on the Switch	64
6.2.1 DHCP Relay Tutorial Introduction	64
6.2.2 Creating a VLAN	64
6.2.3 Configuring DHCP Relay	67
6.2.4 Troubleshooting	68
System Status and Port Statistics	69
7.1 Overview	69
7.2 Port Status Summary	70
7.2.1 Status: Port Details	71
Basic Setting	75
8.1 Overview	75
8.2 System Information	75
8.3 General Setup	76
8.4 Introduction to VLANs	78
8.5 Switch Setup Screen	79
8.6 IP Setup	80
8.6.1 Management IP Addresses	81
8.7 Port Setup	83
VLAN	87
9.1 Introduction to IEEE 802.1Q Tagged VLANs	87
9.1.1 Forwarding Tagged and Untagged Frames	88
9.2 Automatic VLAN Registration	88
9.2.1 GARP	88
9.2.2 GVRP	88
9.3 Port VLAN Trunking	89
9.4 Select the VLAN Type	90
9.5 Static VLAN	90
9.5.1 VLAN Status	91
9.5.2 VLAN Details	92
9.5.3 Configure a Static VLAN	93
9.5.4 Configure VLAN Port Settings	95
9.6 Subnet Based VLANs	96
9.7 Configuring Subnet Based VLAN	98
9.8 Protocol Based VLANs	99
9.9 Configuring Protocol Based VLAN	101
9.10 Create an IP-based VLAN Example	102
9.11 Port-based VLAN Setup	103
9.11.1 Configure a Port-based VLAN	104
Static MAC Forward Setup	107
10.1 Overview	107
10.2 Configuring Static MAC Forwarding	107
Static Multicast Forward Setup	111
11.1 Static Multicast Forwarding Overview	111
11.2 Configuring Static Multicast Forwarding	113
Filtering	115
12.1 Configure a Filtering Rule	115
Spanning Tree Protocol	117
13.1 STP/RSTP Overview	117
13.1.1 STP Terminology	118
13.1.2 How STP Works	118
13.1.3 STP Port States	119
13.1.4 Multiple RSTP	119
13.1.5 Multiple STP	120
13.2 Spanning Tree Protocol Status Screen	123
13.3 Spanning Tree Configuration	124
13.4 Configure Rapid Spanning Tree Protocol	125
13.5 Rapid Spanning Tree Protocol Status	127
13.6 Configure Multiple Rapid Spanning Tree Protocol	129
13.7 Multiple Rapid Spanning Tree Protocol Status	131
13.8 Configure Multiple Spanning Tree Protocol	133
13.9 Multiple Spanning Tree Protocol Status	136
Bandwidth Control	139
14.1 Bandwidth Control Overview	139
14.2 Bandwidth Control Setup	140
Broadcast Storm Control	143
15.1 Broadcast Storm Control Setup	143
Mirroring	145
16.1 Port Mirroring Setup	145
Link Aggregation	147
17.1 Link Aggregation Overview	147
17.2 Dynamic Link Aggregation	147
17.2.1 Link Aggregation ID	148
17.3 Link Aggregation Status	149
17.4 Link Aggregation Setting	151
17.5 Link Aggregation Control Protocol	153
17.6 Static Trunking Example	155
Port Authentication	157
18.1 Port Authentication Overview	157
18.1.1 IEEE 802.1x Authentication	157
18.2 Port Authentication Configuration	158
18.2.1 Activate IEEE 802.1x Security	159
Port Security	161
19.1 About Port Security	161
19.2 Port Security Setup	162
Classifier	165
20.1 About the Classifier and QoS	165
20.2 Configuring the Classifier	165
20.3 Viewing and Editing Classifier Configuration	168
20.4 Classifier Example	169
Policy Rule	171
21.1 Policy Rules Overview	171
21.2 Configuring Policy Rules	171
21.3 Viewing and Editing Policy Configuration	174
21.4 Policy Example	175
Queuing Method	177
22.1 Queuing Method Overview	177
22.1.1 Strictly Priority Queuing	177
22.1.2 Weighted Fair Queuing	177
22.1.3 Weighted Round Robin Scheduling (WRR)	178
22.2 Configuring Queuing	179
Multicast	181
23.1 Overview	181
23.1.1 IP Multicast Addresses	181
23.1.2 IGMP Filtering	181
23.1.3 IGMP Snooping	182
23.1.4 IGMP Snooping and VLANs	182
23.2 Multicast Status	182
23.3 Multicast Setting	183
23.4 IGMP Snooping VLAN	186
23.5 IGMP Filtering Profile	187
23.6 MVR Overview	189
23.6.1 Types of MVR Ports	189
23.6.2 MVR Modes	190
23.6.3 How MVR Works	190
23.7 General MVR Configuration	191
23.8 MVR Group Configuration	193
23.8.1 MVR Configuration Example	194
AAA	197
24.1 Authentication, Authorization and Accounting (AAA)	197
24.1.1 Local User Accounts	198
24.1.2 RADIUS and TACACS+	198
24.2 AAA Screens	198
24.2.1 RADIUS Server Setup	199
24.2.2 TACACS+ Server Setup	201
24.2.3 AAA Setup	203
24.2.4 Vendor Specific Attribute	206
24.3 Supported RADIUS Attributes	207
24.3.1 Attributes Used for Authentication	208
24.3.2 Attributes Used for Accounting	209
IP Source Guard	211
25.1 IP Source Guard Overview	211
25.1.1 DHCP Snooping Overview	212
25.1.2 ARP Inspection Overview	214
25.2 IP Source Guard	215
25.3 IP Source Guard Static Binding	216
25.4 DHCP Snooping	218
25.5 DHCP Snooping Configure	222
25.5.1 DHCP Snooping Port Configure	224
25.5.2 DHCP Snooping VLAN Configure	225
25.6 ARP Inspection Status	227
25.6.1 ARP Inspection VLAN Status	228
25.6.2 ARP Inspection Log Status	229
25.7 ARP Inspection Configure	230
25.7.1 ARP Inspection Port Configure	233
25.7.2 ARP Inspection VLAN Configure	234
Loop Guard	237
26.1 Loop Guard Overview	237
26.2 Loop Guard Setup	239
Layer 2 Protocol Tunneling	241
27.1 Layer 2 Protocol Tunneling Overview	241
27.1.1 Layer 2 Protocol Tunneling Mode	242
27.2 Configuring Layer 2 Protocol Tunneling	243
PPPoE	245
28.1 PPPoE Intermediate Agent Overview	245
28.1.1 PPPoE Intermediate Agent Tag Format	245
28.1.2 Sub-Option Format	246
28.1.3 Port State	247
28.2 The PPPoE Screen	248
28.3 PPPoE Intermediate Agent	248
28.3.1 PPPoE IA Per-Port	250
28.3.2 PPPoE IA Per-Port Per-VLAN	252
28.3.3 PPPoE IA for VLAN	253
Static Route	255
29.1 Static Routing Overview	255
29.2 Configuring Static Routing	256
Differentiated Services	259
30.1 DiffServ Overview	259
30.1.1 DSCP and Per-Hop Behavior	259
30.1.2 DiffServ Network Example	260
30.2 Activating DiffServ	260
30.3 DSCP-to-IEEE 802.1p Priority Settings	261
30.3.1 Configuring DSCP Settings	262
DHCP	263
31.1 DHCP Overview	263
31.1.1 DHCP Modes	263
31.1.2 DHCP Configuration Options	263
31.2 DHCP Status	264
31.3 DHCP Relay	264
31.3.1 DHCP Relay Agent Information	264
31.3.2 Configuring DHCP Global Relay	265
31.3.3 Global DHCP Relay Configuration Example	266
31.4 Configuring DHCP VLAN Settings	267
31.4.1 Example: DHCP Relay for Two VLANs	269
Maintenance	271
32.1 The Maintenance Screen	271
32.2 Load Factory Default	272
32.3 Save Configuration	273
32.4 Reboot System	273
32.5 Firmware Upgrade	273
32.6 Restore a Configuration File	274
32.7 Backup a Configuration File	275
32.8 FTP Command Line	275
32.8.1 Filename Conventions	275
32.8.2 FTP Command Line Procedure	276
32.8.3 GUI-based FTP Clients	277
32.8.4 FTP Restrictions	277
Access Control	279
33.1 Access Control Overview	279
33.2 The Access Control Main Screen	279
33.3 About SNMP	280
33.3.1 SNMP v3 and Security	281
33.3.2 Supported MIBs	281
33.3.3 SNMP Traps	282
33.3.4 Configuring SNMP	286
33.3.5 Configuring SNMP Trap Group	287
33.3.6 Configuring SNMP User Information	289
33.3.7 Setting Up Login Accounts	290
33.4 SSH Overview	292
33.5 How SSH works	293
33.6 SSH Implementation on the Switch	294
33.6.1 Requirements for Using SSH	294
33.7 Introduction to HTTPS	294
33.8 HTTPS Example	295
33.8.1 Internet Explorer Warning Messages	295
33.8.2 The Main Screen	296
33.9 Service Port Access Control	297
33.10 Remote Management	298
Diagnostic	301
34.1 Diagnostic	301
Syslog	303
35.1 Syslog Overview	303
35.2 Syslog Setup	304
35.3 Syslog Server Setup	305
Cluster Management	307
36.1 Cluster Management Status Overview	307
36.2 Cluster Management Status	308
36.2.1 Cluster Member Switch Management	309
36.3 Clustering Management Configuration	312
MAC Table	315
37.1 MAC Table Overview	315
37.2 Viewing the MAC Table	316
ARP Table	319
38.1 ARP Table Overview	319
38.1.1 How ARP Works	319
38.2 Viewing the ARP Table	320
Configure Clone	321
39.1 Configure Clone	321
Troubleshooting	323
40.1 Power, Hardware Connections, and LEDs	323
40.2 Switch Access and Login	324
40.3 Switch Configuration	326
Product Specifications	327
Changing a Fuse	335
Common Services	337
Legal Information	341