ZyXEL XGS4700-48F User Guide

ZyXEL XGS4700-48F Manual

Get ZyXEL XGS4700-48F PDF manuals and user guides View all ZyXEL XGS4700-48F manuals
Add to My Manuals
Save this manual to your list of manuals

ZyXEL XGS4700-48F manual content summary:

  • ZyXEL XGS4700-48F | User Guide - Page 1
    XGS4700-48F Layer 3 Managed Stackable Gigabit Ethernet Switch Default Login Details IP Address http://192.168.0.1 (Out-of-band MGMT port) http://192.168.1.1 (In-band ports) User Name admin Password 1234 Firmwawrwew.Vzyexresl.icoonm 4.00 Edition 1, 04/2011 www.zyxel.com Copyright © 2011
  • ZyXEL XGS4700-48F | User Guide - Page 2
  • ZyXEL XGS4700-48F | User Guide - Page 3
    your comments, questions or suggestions to: [email protected] Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com. XGS4700-48F User's Guide 3
  • ZyXEL XGS4700-48F | User Guide - Page 4
    ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. Customer Support Should problems received your device. • Brief description of the problem and the steps you took to solve it. 4 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 5
    , other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The XGS4700-48F may be referred to as the "Switch", the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field choices are all in bold font
  • ZyXEL XGS4700-48F | User Guide - Page 6
    Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The Switch icon is not an exact representation of your device. The Switch Computer Notebook computer Server DSLAM Firewall Telephone Switch Router 6 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 7
    over them. • Always disconnect all cables from this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe). • Do NOT allow anything to rest on XGS4700-48F User's Guide 7
  • ZyXEL XGS4700-48F | User Guide - Page 8
    Safety Warnings 8 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 9
    Contents Overview Contents Overview User's Guide ...25 Getting to Know Your Switch ...27 Hardware Installation and Connection 33 Hardware Overview ...41 The ...293 sFlow ...297 PPPoE ...301 Error Disable ...311 Static Route ...317 Policy Routing ...321 RIP ...325 XGS4700-48F User's Guide 9
  • ZyXEL XGS4700-48F | User Guide - Page 10
    Access Control ...395 Diagnostic ...421 Syslog ...423 Cluster Management ...427 MAC Table ...435 IP Table ...439 ARP Table ...443 Routing Table ...445 Configure Clone ...447 Troubleshooting ...449 Product Specifications ...455 10 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 11
    Guide 25 Chapter 1 Getting to Know Your Switch 27 1.1 Introduction ...27 1.1.1 Bridging Example ...27 1.1.2 High Performance Switching Example 28 1.1.3 Gigabit Ethernet to the Desktop 29 1.1.4 IEEE 802.1Q VLAN Application Example 29 1.1.5 IPv6 Support ...41 XGS4700-48F User's Guide 11
  • ZyXEL XGS4700-48F | User Guide - Page 12
    Fan Module 47 3.2.2 Uplink Module ...48 3.2.3 Rear Panel Connections 48 3.2.4 Management Port ...49 3.2.5 Power Connector ...49 3.3 Power Connection ...49 3.3.1 AC Power Connections 50 3.3.2 DC Power Relay on the Switch 75 6.2.1 DHCP Relay Tutorial Introduction 75 12 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 13
    Table of Contents 6.2.2 Creating a VLAN ...76 6.2.3 Configuring DHCP Relay 79 6.2.4 Troubleshooting ...79 6.3 How to Use PPPoE IA on the Switch 80 6.3.1 Configuring Switch and Untagged Frames 119 9.2 Automatic VLAN Registration 120 9.2.1 GARP ...120 9.2.2 GVRP ...120 XGS4700-48F User's Guide 13
  • ZyXEL XGS4700-48F | User Guide - Page 14
    156 13.5 Rapid Spanning Tree Protocol Status 158 13.6 Configure Multiple Rapid Spanning Tree Protocol 160 13.7 Multiple Rapid Spanning Tree Protocol Status 162 14 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 15
    .2.3 Activate MAC Authentication 196 Chapter 19 Port Security...199 19.1 About Port Security ...199 19.2 Port Security Setup ...200 19.3 VLAN MAC Address Limit 201 XGS4700-48F User's Guide 15
  • ZyXEL XGS4700-48F | User Guide - Page 16
    ...229 24.1.1 IP Multicast Addresses 229 24.1.2 IGMP Filtering ...229 24.1.3 IGMP Snooping ...230 24.1.4 IGMP Snooping and VLANs 230 24.2 Multicast Status ...230 16 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 17
    Setup ...251 25.2.4 Vendor Specific Attribute 254 25.2.5 Tunnel Protocol Attribute 255 25.3 Supported RADIUS Attributes 256 25.3.1 Attributes Used for Authentication 256 25.3.2 Attributes Used for Port Configure 281 26.7.2 ARP Inspection VLAN Configure 282 XGS4700-48F User's Guide 17
  • ZyXEL XGS4700-48F | User Guide - Page 18
    311 32.2 Error-Disable Recovery Overview 311 32.3 The Error Disable Screen 312 32.4 CPU Protection Configuration 312 32.5 Error-Disable Detect Configuration 313 18 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 19
    Virtual-Links ...341 Chapter 37 IGMP...343 37.1 IGMP Overview ...343 37.1.1 How IGMP Works 344 37.2 Port-based IGMP ...345 37.3 Configuring IGMP ...346 XGS4700-48F User's Guide 19
  • ZyXEL XGS4700-48F | User Guide - Page 20
    .3.1 DVMRP Configuration Error Messages 349 38.4 Default DVMRP Timer Values 350 Chapter 39 Differentiated Services ...351 39.1 DiffServ Overview ...351 39.1.1 DSCP and Per-Hop Behavior 351 39 ...371 41.3.1 IP Interface Setup 371 41.3.2 VRRP Parameters 373 20 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 21
    388 44.3 Save Configuration ...388 44.4 Reboot System ...389 44.5 Firmware Upgrade ...389 44.6 Restore a Configuration File 390 44.7 Backup 397 45.3.2 Supported MIBs 397 45.3.3 SNMP Traps ...398 45.3.4 Configuring SNMP 402 45.3.5 Configuring SNMP Trap Group 404 XGS4700-48F User's Guide 21
  • ZyXEL XGS4700-48F | User Guide - Page 22
    10 Service Port 48.3 Clustering Management Configuration 432 Chapter 49 MAC Table...435 49.1 MAC Table Overview ...435 49.2 Viewing the MAC Table ...436 Chapter 50 IP Table ...439 50.1 IP Table Overview ...439 50.2 Viewing the IP Table ...440 Chapter 51 ARP Table ...443 22 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 23
    447 Chapter 54 Troubleshooting...449 54.1 Power, Hardware Connections, and LEDs 449 54.2 Switch Access and Login 450 54.3 Switch Configuration ...453 Chapter 55 Product Specifications ...455 Appendix A Common Services 465 Appendix B Legal Information 469 Index...475 XGS4700-48F User's Guide 23
  • ZyXEL XGS4700-48F | User Guide - Page 24
    Table of Contents 24 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 25
    PART I User's Guide 25
  • ZyXEL XGS4700-48F | User Guide - Page 26
    26
  • ZyXEL XGS4700-48F | User Guide - Page 27
    comes with 48 mini-GBIC slots for SFP transceivers, two power slots for hot-swappable DCP4700-48F or ACP4700-48F power modules and one slot for the FAN4700-48F fan module. The DCP4700-48F power module requires speed department servers via the Switch. You can provide a XGS4700-48F User's Guide 27
  • ZyXEL XGS4700-48F | User Guide - Page 28
    lower-speed links than to under-utilize a high-speed, but more costly, single-port link. Figure 2 High Performance Switching 10 Gbps Branch Trunk HQ 28 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 29
    module to provide high speed access to a data server and the Internet. The uplink module supports a fiber-optic connection which alleviates the distance limitations of copper cabling. In this example, all time by adding, moving or changing ports without any recabling. XGS4700-48F User's Guide 29
  • ZyXEL XGS4700-48F | User Guide - Page 30
    4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is designed to SNMP, telnet, HTTP and FTP services • ICMPv6 to report errors encountered Guide. 1.2 Ways to Manage the Switch Use any of the following methods to manage the Switch. 30 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 31
    supported) web browser. See Chapter 4 on page 55. • Command Line Interface. Line commands offer an alternative to the Web Configurator and may be necessary to configure advanced features. See the CLI Reference Guide. • FTP. Use File Transfer Protocol for firmware . XGS4700-48F User's Guide 31
  • ZyXEL XGS4700-48F | User Guide - Page 32
    Chapter 1 Getting to Know Your Switch 32 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 33
    the Switch is clean and dry. 2 Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and the connected cables. Make sure there is a power outlet nearby. 3 ensure space between devices when stacking. Figure 5 Attaching Rubber Feet XGS4700-48F User's Guide 33
  • ZyXEL XGS4700-48F | User Guide - Page 34
    Failure to use the proper screws may damage the unit. 2.2.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. The maximum weight a bracket can hold is 21.5 of the Switch. Figure 6 Attaching the Mounting Brackets 34 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 35
    mounting bracket on the other side of the rack. 2.3 Connecting the Frame Ground Note: See Chapter 55 on page 455 for the ground wire gauge. XGS4700-48F User's Guide 35
  • ZyXEL XGS4700-48F | User Guide - Page 36
    on the Switch. 2.4.1.1 AC Power Module (ACP4700-48F) 1 Use a screwdriver to loosen the screw on the power slot cover and remove it. 2 Grab the handle of the front panel of the power module with one hand and place the other hand under the power module to support it. 36 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 37
    module into the slot until it makes contact with the backplane. 5 Push the lever rightward until it is perpendicular to the ground. 6 Tighten the screw. XGS4700-48F User's Guide 37
  • ZyXEL XGS4700-48F | User Guide - Page 38
    a Power Module Use the following procedure to remove a power module from the Switch. 2.4.2.1 AC Power Module 1 Refer to Section 3.3.4 on page 51 to disconnect the power before you begin. 2 Use a screwdriver to loosen the screw on the front panel of the power module. 38 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 39
    Section 3.3.4 on page 51 to disconnect the power before you begin. 2 Use a screwdriver to loosen the screw on the front panel of the power module. XGS4700-48F User's Guide 39
  • ZyXEL XGS4700-48F | User Guide - Page 40
    Chapter 2 Hardware Installation and Connection 3 Grab the handle and slide the power module out. 40 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 41
    Figure 9 Front Panel The following table describes the ports. Table 1 Panel Connections CONNECTO R 48 Mini-GBIC Slots Console Port Signal DESCRIPTION Use Small Form-Factor Pluggable (SFP) transceivers in You must use transceivers that comply with the Small Form- XGS4700-48F User's Guide 41
  • ZyXEL XGS4700-48F | User Guide - Page 42
    to verify that it is functioning properly. Figure 11 Installed Transceiver 3.1.1.2 Transceiver Removal Use the following steps to remove a mini GBIC transceiver (SFP module). 42 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 43
    as sensors or other ZyXEL switches which support the external alarm feature. This feature is in addition to the system alarm, which detects abnormal temperatures, voltage levels and fan speeds on the Switch. Your Switch can respond to an external signal in four ways. XGS4700-48F User's Guide 43
  • ZyXEL XGS4700-48F | User Guide - Page 44
    alarm on to another device. By daisy- chaining the signal sensor cables from one Switch to another ZyXEL switch which supports this feature, the external alarm alert (but not the system alarm) is received on each Switch in this way using the remaining signal input pins. 44 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 45
    You can also daisy-chain the external alarm to another ZyXEL Switch which supports the external alarm feature. If daisy-chaining to a ZyXEL switch that is a different model, check your switch's the input signal pin pairs of an Signal connector on another ZyXEL Switch. XGS4700-48F User's Guide 45
  • ZyXEL XGS4700-48F | User Guide - Page 46
    • Two slots for AC or DC power modules (E and F) • A connector for the power receptacle (G) • A power switch (H) (DC power module only) Figure 16 Rear Panel with an AC Power Module Installed A B C D E Figure 17 Rear Panel with a DC Power Module Installed FG HG 46 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 47
    3 Hardware Overview 3.2.1 Removing and Installing the Fan Module The Switch fan module (FAN4700-48F) is at the left on the rear panel. Perform the following procedure to remove Fan Module Figure 20 Fan Module Removed 3 Use a different fan module from the manufacturer. XGS4700-48F User's Guide 47
  • ZyXEL XGS4700-48F | User Guide - Page 48
    installing and removing transceivers. • For EM-412 connection: Use 10GBase-CX4 cables to connect to these ports. See the EM-422 and EM-412 User's Guides for more information. 48 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 49
    system can operate on the remaining module. The Switch supports two types of power modules: AC power module (ACP470048F) and DC power module (DCP4700-48F). You can install one type depending on your power for the gauge of wire to use for the Switch power connections. XGS4700-48F User's Guide 49
  • ZyXEL XGS4700-48F | User Guide - Page 50
    you come to the procedure for turning on the power. Note: Use the included power cord for the AC power connection. Note: Use only power wires of the required diameter for connecting the Switch DC power input to the Switch's -48V (input) pin and tighten the captive screw. 50 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 51
    The power input connectors can be disconnected from the power source individually. 3.3.4.1 AC Power Disconnection 1 Disconnect the power cord from the power outlet. 2 Disconnect the power cord from Remove the power wires which are connected to the RTN and -48V terminals. XGS4700-48F User's Guide 51
  • ZyXEL XGS4700-48F | User Guide - Page 52
    MGMT port. The MGMT port is connected at 100 Mbps. The MGMT port is not connected at 100 Mbps or to an Ethernet device. 52 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 53
    Chapter 3 Hardware Overview Table 3 LEDs (continued) LED COLO R STATUS 1-48 Green Blinking On Amber Blinking On Off 10G 49-50 Blue On Off 51-52 Blue On module in SLOT 2. The Switch is not connected to other switches through an uplink module in SLOT 2. XGS4700-48F User's Guide 53
  • ZyXEL XGS4700-48F | User Guide - Page 54
    Chapter 3 Hardware Overview 54 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 55
    browser pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2. • JavaScript (enabled by default). • Java permissions (enabled by default). 4.2 System Login 1 Start ) in the Location or Address field. Press [ENTER]. XGS4700-48F User's Guide 55
  • ZyXEL XGS4700-48F | User Guide - Page 56
    nor manually entered a time and date in the General Setup screen. Figure 24 Web Configurator: Login 4 Click OK to view the first web configurator screen. 4.3 The Web Configurator Layout The Status screen is the first screen that displays when you access the web configurator. 56 XGS4700-48F User
  • ZyXEL XGS4700-48F | User Guide - Page 57
    log out of the web configurator. E - Click this link to display web help pages. The help pages provide descriptions for all of the configuration screens. XGS4700-48F User's Guide 57
  • ZyXEL XGS4700-48F | User Guide - Page 58
    . Port Setup This link takes you to screens where you can configure speed, flow control and priority settings for individual Switch ports. Advanced Application 58 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 59
    takes you to a screen where you can configure authentication, authorization and accounting services via external servers. The external servers can be either RADIUS (Remote Authentication Dial-In protection against network loops that occur on the edge of your network. XGS4700-48F User's Guide 59
  • ZyXEL XGS4700-48F | User Guide - Page 60
    how the Switch should forward traffic by configuring the TCP/IP parameters manually. Policy Routing This link takes you to screens where you can This link takes you to screens where you can perform firmware and configuration file maintenance as well as reboot the system. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 61
    , it is recommended you change the default administrator password. Click Management > Access Control > Logins to display the next screen. Figure 26 Change Administrator Login Password XGS4700-48F User's Guide 61
  • ZyXEL XGS4700-48F | User Guide - Page 62
    the text configuration file. 6 Forget the password and/or IP address. 7 Prevent all services from accessing the Switch. 8 Change a service port number but forget it. Note: Be careful not to lock yourself and others out of reset the Switch back to the factory defaults. 62 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 63
    mode).... CCCCCCCCCCCCCCCC Total 393216 bytes received. Erasing OK ras> atgo The Switch is now reinitialized with a default configuration file including the default password of "1234". XGS4700-48F User's Guide 63
  • ZyXEL XGS4700-48F | User Guide - Page 64
    of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. 64 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 65
    't need to create an IP interface for it. However, if you want to have the Sales network on a different routing domain, you need to create a XGS4700-48F User's Guide 65
  • ZyXEL XGS4700-48F | User Guide - Page 66
    the IP Setup screen. EXAMPLE For the Sales network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask. 66 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 67
    to the VLAN group in which the port(s) belongs. You can do this with port-based VLAN or tagged static VLAN with fixed port members. XGS4700-48F User's Guide 67
  • ZyXEL XGS4700-48F | User Guide - Page 68
    Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID. 68 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 69
    to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch's power is turned off. XGS4700-48F User's Guide EXAMPLE 69
  • ZyXEL XGS4700-48F | User Guide - Page 70
    routing information. 3 In the Version field, select RIP-1 for the RIP packet format that is universally supported. EXAMPLE 4 Click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch's power is turned off. 70 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 71
    's MGMT port. Figure 32 Tutorial: DHCP Snooping Tutorial Overview M VLAN 100 CB A Note: For related information about DHCP snooping, see Section 26.1 on page 261. XGS4700-48F User's Guide 71
  • ZyXEL XGS4700-48F | User Guide - Page 72
    selecting Fixed in the Control field as shown. Deselect Tx Tagging because you don't want outgoing traffic to contain this VLAN tag. Click Add. 72 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 73
    > DHCP snooping > Configure, activate and specify VLAN 100 as the DHCP VLAN as shown. Click Apply. 5 Click the Port link at the top right corner. XGS4700-48F User's Guide 73
  • ZyXEL XGS4700-48F | User Guide - Page 74
    the entry. See Section 26.1.1.3 on page 263. 8 Click Save at the top right corner of the web configurator to save the configuration permanently. 74 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 75
    , you have configured your DHCP server (192.168.2.3) and want to have it assign a specific IP address (say 172.16.1.18) and gateway information to XGS4700-48F User's Guide 75
  • ZyXEL XGS4700-48F | User Guide - Page 76
    to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click Apply to save the settings to the run-time memory. 76 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 77
    Add to save the settings to the run-time memory. Settings in the run-time memory are lost when the Switch's power is turned off. XGS4700-48F User's Guide 77
  • ZyXEL XGS4700-48F | User Guide - Page 78
    to the run-time memory. 11 Click the Save link in the upper right corner of the web configurator to save your configuration permanently. 78 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 79
    permanently. 7 The DHCP server can then assign a specific IP address based on the DHCP request. 6.2.4 Troubleshooting Check the client A's IP address. If it did not receive the IP address 172.16.1.18, make name for DHCP relay on both the DHCP server and the Switch. XGS4700-48F User's Guide 79
  • ZyXEL XGS4700-48F | User Guide - Page 80
    C) VLAN CIRCUIT-ID REMOTE-ID 1 userC 00134900000A Port 12 (to B) 1 N/A N/A B Port 11 (to A) 1 N/A N/A Port 12 (to S) 1 N/A N/A PPPOE IA PORT TRUSTED Untrusted Trusted Trusted Trusted 80 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 81
    -id. Select Trusted for port 12 and then leave the other fields empty. Click Apply. Then Click Intermediate Agent on the top of the screen. XGS4700-48F User's Guide 81
  • ZyXEL XGS4700-48F | User Guide - Page 82
    Chapter 6 Tutorials 3 The Intermediate Agent screen appears. Click VLAN on the top of the screen. 4 Enter 1 for both Start VID and End VID since both the Switch and PPPoE server are in VLAN 1 in this example. Click Apply. 82 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 83
    add these two strings to frames tagged with VLAN 1 and pass to the PPPoE server. Click Apply. 6.3.2 Configuring Switch B The example uses another XGS4700-48F as switch B. 1 Click Advanced Application > PPPoE > Intermediate Agent. Select Active then click Apply. Click Port on the top of the screen
  • ZyXEL XGS4700-48F | User Guide - Page 84
    Chapter 6 Tutorials 2 Select Trusted for ports 11 and 12 and then click Apply. Then Click Intermediate Agent on the top of the screen. 3 The Intermediate Agent screen appears. Click VLAN on the top of the screen. 84 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 85
    shows you how to shut down a port when: • there is a loop occurred or • too many ARP requests (over 100 packets per second) received on a port XGS4700-48F User's Guide 85
  • ZyXEL XGS4700-48F | User Guide - Page 86
    the Switch to wait for a period of time (10 minutes) before resuming the port automatically, after the problem(s) are gone. Loop guard and Errdiable features are helpful for this demand. Note: Refer to Section 27 (port *) to enable loop guard for all ports. Click Apply. 86 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 87
    all ports. Then click Apply. 3 Click Advanced Application > Errdisable > Errdisable Detect, select Active for cause ARP and inactive-port as the mode. Then click Apply. XGS4700-48F User's Guide 87
  • ZyXEL XGS4700-48F | User Guide - Page 88
    not allowed to access other network resources, such as the mail server or local data base. VLAN 1 Guest VLAN 200 Ports 1, 2, 3 and 10 Internet 88 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 89
    members of this VLAN. 6 Clear the TX Tagging check box to set the Switch to remove VLAN tags before sending frames out of these ports. XGS4700-48F User's Guide 89
  • ZyXEL XGS4700-48F | User Guide - Page 90
    add a tag to incoming untagged frames received on these ports so that the frames are forwarded to the VLAN group that the tag defines. 90 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 91
    to validate access to ports 1~8 to clients based on a RADIUS server. 1 Click Advanced Application > Port Authentication and then the Click Here link for 802.1x. XGS4700-48F User's Guide 91
  • ZyXEL XGS4700-48F | User Guide - Page 92
    turn on 802.1x authentication on the selected ports. Click Apply. 6.5.3 Enabling Guest VLAN 1 Click the Guest Vlan link in the 802.1x screen. 92 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 93
    values, such as 13 are forwarded to the default gateway. The Switch applies policy-based routing rules to incoming packets prior to the normal routing. XGS4700-48F User's Guide 93
  • ZyXEL XGS4700-48F | User Guide - Page 94
    > Classifier and select Active. Enter a descriptive name ("DSCP58" in this example). Select the second option of DSCP and enter 58 in the field provided. 94 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 95
    > Policy Routing. 2 Select Active and enter a descriptive name for this profile ("To_R2" for example). Click Add to save the settings to the run-time memory. XGS4700-48F User's Guide 95
  • ZyXEL XGS4700-48F | User Guide - Page 96
    settings to the run-time memory. 5 Click the Save link in the upper right corner of the web configurator to save your configuration permanently. 96 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 97
    PART II Technical Reference 97
  • ZyXEL XGS4700-48F | User Guide - Page 98
    98
  • ZyXEL XGS4700-48F | User Guide - Page 99
    Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next. Figure 35 Status XGS4700-48F User's Guide 99
  • ZyXEL XGS4700-48F | User Guide - Page 100
    Port and then click Clear Counter to erase the recorded statistical information for that port, or select Any to clear statistics for all ports. 100 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 101
    Section 13.1.3 on page 151 for more information). If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP. XGS4700-48F User's Guide 101
  • ZyXEL XGS4700-48F | User Guide - Page 102
    packets received with CRC (Cyclic Redundant Check) error(s). Length This field shows the number of packets received with a length that was out of range. 102 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 103
    were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. See Chapter 55 on page 455. XGS4700-48F User's Guide 103
  • ZyXEL XGS4700-48F | User Guide - Page 104
    Chapter 7 System Status and Port Statistics 104 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 105
    System Info screen displays general Switch information (such as firmware version number) and hardware polling information (such as The General Setup screen also allows you to set the system time manually or get the current time and date from an external server when . XGS4700-48F User's Guide 105
  • ZyXEL XGS4700-48F | User Guide - Page 106
    Basic Setting > System Info to display the screen as shown. You can check the firmware version number and monitor the Switch temperature, fan speeds and voltage in this screen. Figure displays the version number of the Switch 's current firmware including the date created. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 107
    with which the Switch still works. Status Normal indicates that the voltage is within an acceptable operating range at this point; otherwise Error is displayed. XGS4700-48F User's Guide 107
  • ZyXEL XGS4700-48F | User Guide - Page 108
    the name of the person in charge of this Switch. You can use up to Person's Name 32 printable ASCII characters; spaces are allowed. 108 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 109
    Bootup DESCRIPTION Type the time service protocol that your timeserver uses. Not all time servers support all protocols, so you may Zone Daylight Saving Time None is the default value. Enter the time manually. Each time you turn on the Switch, the time and date will XGS4700-48F User's Guide 109
  • ZyXEL XGS4700-48F | User Guide - Page 110
    . Note: VLAN is unidirectional; it only governs outgoing traffic. See Chapter 9 on page 119 for information on port-based and 802.1Q tagged VLANs. 110 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 111
    by issuing a Leave message. A Leave All message terminates all registrations. GARP timers set declaration timeout values. See Chapter 9 on page 119 for more background information. XGS4700-48F User's Guide 111
  • ZyXEL XGS4700-48F | User Guide - Page 112
    traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Frames without an explicit priority tag are given the default priority of the ingress port. Use the . Cancel Click Cancel to begin configuring this screen afresh. 112 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 113
    the Switch in a routing domain, simply add a new routing domain entry with a different IP address in the same subnet. Figure 40 Basic Setting > IP Setup XGS4700-48F User's Guide 113
  • ZyXEL XGS4700-48F | User Guide - Page 114
    . Index This field displays the index number of an entry. IP Address This field displays IP address of the Switch in the IP domain. 114 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 115
    to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. Figure 41 Basic Setting > Port Setup XGS4700-48F User's Guide 115
  • ZyXEL XGS4700-48F | User Guide - Page 116
    peer automatically to determine the connection speed and duplex mode. If the peer port does not support auto-negotiation or turns off this feature, the Switch determines the connection speed by detecting the signal and resend later. Select Flow Control to enable it. 116 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 117
    the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 117
  • ZyXEL XGS4700-48F | User Guide - Page 118
    Chapter 8 Basic Setting 118 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 119
    Switch is capable of passing tagged or untagged frames. To forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware XGS4700-48F User's Guide 119
  • ZyXEL XGS4700-48F | User Guide - Page 120
    IEEE 802.1Q VLAN terminology. Table 15 IEEE 802.1Q VLAN Terminology VLAN PARAMETER VLAN Type TERM DESCRIPTION Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration/ deregistration process. 120 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 121
    . However, with VLAN Trunking enabled on a port(s) in each intermediary switch you only need to create VLAN groups in the end devices (A and B). C, D and E automatically XGS4700-48F User's Guide 121
  • ZyXEL XGS4700-48F | User Guide - Page 122
    a VLAN group regardless of its VLAN tag. You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. 122 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 123
    via Multicast VLAN Registration (MVR). Click Previous or Next to show the previous/next screen if all status information cannot be seen in one screen. XGS4700-48F User's Guide 123
  • ZyXEL XGS4700-48F | User Guide - Page 124
    to configure and view 802.1Q VLAN parameters for the Switch. See Section 9.1 on page 119 for more information on static VLAN. To configure a 124 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 125
    then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS4700-48F User's Guide 125
  • ZyXEL XGS4700-48F | User Guide - Page 126
    more information on static VLAN. Click the VLAN Port Setting link in the VLAN Status screen. Figure 47 Advanced Application > VLAN > VLAN Port Setting 126 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 127
    the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 127
  • ZyXEL XGS4700-48F | User Guide - Page 128
    and prioritized accordingly. That is, video services receive the highest priority and data the lowest. Figure 48 Subnet Based VLAN Application Example Tagged Frames Internet Untagged Frames 172.16.1.0/24 VID = 100 192.168.1.0/24 VID = 200 10.1.1.0/24 VID = 300 128 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 129
    alphanumeric characters to identify this subnet based VLAN. Enter the IP address of the subnet for which you want to configure this subnet based VLAN. XGS4700-48F User's Guide 129
  • ZyXEL XGS4700-48F | User Guide - Page 130
    mask. To find the bit number, convert the subnet mask to binary format and add all the 1's together. Take "255.255.255.0" for example. 255 converts to eight 1s in binary. There are 6, 7 belong to static VLAN 120. You can configure a protocol based VLAN A with priority 130 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 131
    VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Figure 51 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN XGS4700-48F User's Guide 131
  • ZyXEL XGS4700-48F | User Guide - Page 132
    protocol based VLAN. Click this to delete the protocol based VLANs which you marked for deletion. Click Cancel to begin configuring this screen afresh. 132 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 133
    number of the protocol based VLAN entry. Click 1 2 Change the value in the Port field to the next port you want to add. 3 Click Add. XGS4700-48F User's Guide 133
  • ZyXEL XGS4700-48F | User Guide - Page 134
    each other, then select All Connected. Select Port Isolated if you want to restrict users from communicating directly. Click Apply to save your settings. 134 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 135
    Chapter 9 VLAN The following screen shows users on a port-based, all-connected VLAN configuration. Figure 53 Advanced Application > VLAN > Port Based VLAN Setup (All Connected) XGS4700-48F User's Guide 135
  • ZyXEL XGS4700-48F | User Guide - Page 136
    Chapter 9 VLAN The following screen shows users on a port-based, port-isolated VLAN configuration. Figure 54 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) 136 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 137
    the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 137
  • ZyXEL XGS4700-48F | User Guide - Page 138
    Chapter 9 VLAN 138 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 139
    on your network. 10.2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the MAC address table. Static MAC addresses do not age out. When you set up static Chapter 19 on page 199 for more information on port security. XGS4700-48F User's Guide 139
  • ZyXEL XGS4700-48F | User Guide - Page 140
    will be forwarded and the VLAN identification number to which the MAC address belongs. This field displays the ID number of the VLAN group. 140 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 141
    field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. XGS4700-48F User's Guide 141
  • ZyXEL XGS4700-48F | User Guide - Page 142
    Chapter 10 Static MAC Forward Setup 142 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 143
    of a multicast group. A static multicast address is a multicast MAC address that has been manually entered in the multicast table. Static multicast addresses do not age out. Static multicast forwarding a VLAN group. Figure 57 shows frames being forwarded to devices XGS4700-48F User's Guide 143
  • ZyXEL XGS4700-48F | User Guide - Page 144
    .2 Configuring Static Multicast Forwarding Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). 144 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 145
    . Clear Click Clear to reset the fields to the factory defaults. Index Click an index number to modify a static multicast MAC address rule for port(s). XGS4700-48F User's Guide 145
  • ZyXEL XGS4700-48F | User Guide - Page 146
    will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. 146 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 147
    deleting it by deselecting this check box. Name Type a descriptive name (up to 32 printable ASCII characters) for this rule. This is for identification only. XGS4700-48F User's Guide 147
  • ZyXEL XGS4700-48F | User Guide - Page 148
    to remove in the Delete column and then click the Delete button. Click Cancel to clear the selected checkbox(es) in the Delete column. 148 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 149
    CHAPTER 13 Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP and Forwarding. Note: In this user's guide, "STP" refers to both STP and RSTP. 13.1.1 STP Terminology The root bridge is the base of the spanning tree. XGS4700-48F User's Guide 149
  • ZyXEL XGS4700-48F | User Guide - Page 150
    to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. 150 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 151
    . All information frames are received and forwarded. 13.1.4 Multiple RSTP MRSTP (Multiple RSTP) is ZyXEL's proprietary feature that is compatible with RSTP and STP. With MRSTP, you can have more than Switch and specify which port(s) belong to which spanning tree. XGS4700-48F User's Guide 151
  • ZyXEL XGS4700-48F | User Guide - Page 152
    as STP and RSTP allow only one link in the network and block the redundant link. Figure 62 STP/RSTP Network Example A VLAN 1 VLAN 2 B 152 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 153
    created MSTI is identified by a unique number (known as an MST ID) known internally to a region. Thus an MSTI does not span across MST regions. XGS4700-48F User's Guide 153
  • ZyXEL XGS4700-48F | User Guide - Page 154
    single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 65 MSTP and Legacy RSTP Network Example 154 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 155
    one of the STP modes on the Switch. Click Configuration in the Advanced Application > Spanning Tree Protocol. Figure 67 Advanced Application > Spanning Tree Protocol > Configuration XGS4700-48F User's Guide 155
  • ZyXEL XGS4700-48F | User Guide - Page 156
    149 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 68 Advanced Application > Spanning Tree Protocol > RSTP 156 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 157
    then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS4700-48F User's Guide 157
  • ZyXEL XGS4700-48F | User Guide - Page 158
    Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 149 for more information on RSTP. 158 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 159
    Spanning Tree. This is the number of times the spanning tree has been reconfigured. This is the time since the spanning tree was last reconfigured. XGS4700-48F User's Guide 159
  • ZyXEL XGS4700-48F | User Guide - Page 160
    . Note: You must also activate Multiple Rapid Spanning Tree in the Advanced Application > Spanning Tree Protocol > Configuration screen to enable MRSTP on the Switch. 160 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 161
    port or when its link status changes. Note: An edge port becomes a non-edge port as soon as it receives a Bridge Protocol Data Unit (BPDU). XGS4700-48F User's Guide 161
  • ZyXEL XGS4700-48F | User Guide - Page 162
    on MRSTP. Note: This screen is only available after you activate MRSTP on the Switch. Figure 71 Advanced Application > Spanning Tree Protocol > Status: MRSTP 162 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 163
    Spanning Tree. This is the number of times the spanning tree has been reconfigured. This is the time since the spanning tree was last reconfigured. XGS4700-48F User's Guide 163
  • ZyXEL XGS4700-48F | User Guide - Page 164
    Application > Spanning Tree Protocol screen. See Section 13.1.5 on page 152 for more information on MSTP. Figure 72 Advanced Application > Spanning Tree Protocol > MSTP 164 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 165
    to configure MSTI (Multiple Spanning Tree Instance) settings. Enter the number you want to use to identify this MST instance on the Switch. The Switch supports instance numbers 0-16. XGS4700-48F User's Guide 165
  • ZyXEL XGS4700-48F | User Guide - Page 166
    the VID (or VID ranges) to which the MST instance is mapped. This field display the ports configured to participate in the MST instance. 166 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 167
    then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS4700-48F User's Guide 167
  • ZyXEL XGS4700-48F | User Guide - Page 168
    on MSTP. Note: This screen is only available after you activate MSTP on the Switch. Figure 74 Advanced Application > Spanning Tree Protocol > Status: MSTP 168 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 169
    bridge, consisting of bridge priority plus MAC address. This ID is the same for Root and Our Bridge if the Switch is the root switch. XGS4700-48F User's Guide 169
  • ZyXEL XGS4700-48F | User Guide - Page 170
    is the priority and number of the port on the Switch through which this Switch must communicate with the root of the MST instance. 170 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 171
    drop. Note: The CIR should be less than the PIR. Note: The sum of CIRs cannot be greater than or equal to the uplink bandwidth. XGS4700-48F User's Guide 171
  • ZyXEL XGS4700-48F | User Guide - Page 172
    rate limits on this port. Peak Rate Specify the maximum bandwidth allowed in kilobits per second (Kbps) for the incoming traffic flow on a port. 172 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 173
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 173
  • ZyXEL XGS4700-48F | User Guide - Page 174
    Chapter 14 Bandwidth Control 174 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 175
    port. Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. Figure 76 Advanced Application > Broadcast Storm Control XGS4700-48F User's Guide 175
  • ZyXEL XGS4700-48F | User Guide - Page 176
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 176 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 177
    screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 77 Advanced Application > Mirroring XGS4700-48F User's Guide 177
  • ZyXEL XGS4700-48F | User Guide - Page 178
    navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 178 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 179
    802.3ad standard for static and dynamic (LACP) port trunking. The Switch supports the link aggregation IEEE802.3ad standard. This standard describes the Link Aggregation Control Protocol (LACP), which is a protocol that dynamically creates and manages trunk groups. XGS4700-48F User's Guide 179
  • ZyXEL XGS4700-48F | User Guide - Page 180
    0000 PORT NUMBER 0000 180 1. Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 181
    information on this field. The ID displays only when there is a port belonging to this trunk group and LACP is also enabled for this group. XGS4700-48F User's Guide 181
  • ZyXEL XGS4700-48F | User Guide - Page 182
    : • Static - if the ports are configured as static members of a trunk group. • LACP - if the ports are configured to join a trunk group via LACP. 182 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 183
    . Group ID The field identifies the link aggregation group, that is, one logical link containing multiple ports. Active Select this option to activate a trunk group. XGS4700-48F User's Guide 183
  • ZyXEL XGS4700-48F | User Guide - Page 184
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 184 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 185
    shown next. See Section 17.2 on page 179 for more information on dynamic link aggregation. Figure 80 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP XGS4700-48F User's Guide 185
  • ZyXEL XGS4700-48F | User Guide - Page 186
    Cancel to begin configuring this screen afresh. 17.6 Static Trunking Example This example shows you how to create a static port trunk group for ports 2-5. 186 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 187
    in the figure below. Click Apply when you are done. Figure 82 Trunking Example - Configuration Screen EXAMPLE Your trunk group 1 (T1) configuration is now complete. XGS4700-48F User's Guide 187
  • ZyXEL XGS4700-48F | User Guide - Page 188
    Chapter 17 Link Aggregation 188 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 189
    the RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) protocol to validate supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 190
    is that the Switch does not prompt the client for login credentials. The login credentials are based on the source MAC address of the 190 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 191
    method, click Advanced Application > Port Authentication in the navigation panel. Select a port authentication method in the screen that appears. Figure 85 Advanced Application > Port Authentication XGS4700-48F User's Guide 191
  • ZyXEL XGS4700-48F | User Guide - Page 192
    checkbox to permit 802.1x authentication on this port. You must first allow 802.1x authentication on the Switch before configuring it on each port. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 193
    to the guest VLAN. That is, unauthenticated users can have access to limited network resources in the same guest VLAN, such as the Internet. The XGS4700-48F User's Guide 193
  • ZyXEL XGS4700-48F | User Guide - Page 194
    Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. Figure 88 Advanced Application > Port Authentication > 802.1x > Guest VLAN 194 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 195
    this port. Clients that fail authentication are placed in the guest VLAN and can receive limited services. A guest VLAN is a pre-configured VLAN on the Switch that allows nonauthenticated users to done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 195
  • ZyXEL XGS4700-48F | User Guide - Page 196
    Switch sends along with the MAC address of a client for authentication with the RADIUS server. You can enter up to 32 printable ASCII characters. 196 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 197
    the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 197
  • ZyXEL XGS4700-48F | User Guide - Page 198
    Chapter 18 Port Authentication 198 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 199
    address learning as this will result in many broadcasts. By default, MAC address learning is still enabled even though the port security is not activated. XGS4700-48F User's Guide 199
  • ZyXEL XGS4700-48F | User Guide - Page 200
    make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. 200 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 201
    Address Limit in the Advanced Application > Port Security screen to display the screen as shown. Figure 91 Advanced Application > Port Security > VLAN MAC Address Limit XGS4700-48F User's Guide 201
  • ZyXEL XGS4700-48F | User Guide - Page 202
    Chapter 19 Port Security The following table describes the labels in this screen. Table 48 Advanced Application > Port Security > VLAN MAC Address Limit LABEL DESCRIPTION Active Select this Click Cancel to clear the selected checkbox(es) in the Delete column. 202 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 203
    how to configure the packet classifier on the Switch. 20.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking . See Chapter 35 on page 303 for how to configure policy routing. XGS4700-48F User's Guide 203
  • ZyXEL XGS4700-48F | User Guide - Page 204
    49 Advanced Application > Classifier LABEL Active DESCRIPTION Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes. 204 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 205
    establish TCP connections. Enter a source IP address in dotted decimal notation. Specify the address prefix by entering the number of ones in the subnet mask. XGS4700-48F User's Guide 205
  • ZyXEL XGS4700-48F | User Guide - Page 206
    . Note: When two rules conflict with each other, a higher layer rule has priority over a lower layer rule. Figure 93 Advanced Application > Classifier: Summary Table 206 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 207
    common IP ports are: Table 52 Common IP Ports PORT NUMBER PORT NAME 21 FTP 23 Telnet 25 SMTP 53 DNS 80 HTTP 110 POP3 XGS4700-48F User's Guide 207
  • ZyXEL XGS4700-48F | User Guide - Page 208
    , you can configure a policy to define action(s) on the classified traffic flow. See Chapter 21 on page 209 for information on configuring a policy rule. 208 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 209
    64 service levels. The following figure illustrates the DS field. DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. DSCP (6 bits) Unused (2 bits) XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 210
    policies. 21.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 20.2 on page 204 for more information. 210 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 211
    this screen. Table 53 Advanced Application > Policy Rule LABEL Active Name DESCRIPTION Select this option to enable the policy. Enter a descriptive name for identification purposes. XGS4700-48F User's Guide 211
  • ZyXEL XGS4700-48F | User Guide - Page 212
    Specify a DSCP (DiffServ Code Point) number between 0 and 63. TOS Specify the type of service (TOS) priority level. Metering You can configure the desired bandwidth available to a traffic flow. Traffic the DSCP field with the value you configure in the DSCP field. 212 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 213
    bottom of the Policy screen. To change the settings of a rule, click a number in the Index field. Figure 96 Advanced Application > Policy Rule: Summary Table XGS4700-48F User's Guide 213
  • ZyXEL XGS4700-48F | User Guide - Page 214
    this policy applies. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. 214 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 215
    and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 20.4 on page 208). Figure 97 Policy Example XGS4700-48F User's Guide EXAMPLE 215
  • ZyXEL XGS4700-48F | User Guide - Page 216
    Chapter 21 Policy Rule 216 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 217
    chapter introduces the queuing methods supported. 22.1 Queuing Method Overview Queuing from monopolizing the bandwidth. 22.1.1 Strictly Priority Strictly Priority (SP) services queues based on priority only. As traffic comes into the Switch, is calculated as follows: XGS4700-48F User's Guide 217
  • ZyXEL XGS4700-48F | User Guide - Page 218
    than it can handle. Queues with larger weights get more service than queues with smaller weights. This queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied. 218 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 219
    then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. XGS4700-48F User's Guide 219
  • ZyXEL XGS4700-48F | User Guide - Page 220
    you select WFQ or WRR. Select a queue (Q0 to Q7) to have the Switch use SPQ to service the subsequent queue(s) after and including the specified queue for the 1000Base-T, 1000Base-X and 10 Gigabit Ethernet ports. . Click Cancel to begin configuring this screen afresh. 220 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 221
    B are Service Provider's Network (SPN) customers with VPN tunnels between their head offices and branch offices respectively. Both have an identical VLAN tag for their VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to XGS4700-48F User's Guide 221
  • ZyXEL XGS4700-48F | User Guide - Page 222
    Stacking distinguish customer A and tag 48 to distinguish customer B at edge service provider's VLAN (using the outer VLAN tag defined by the Service Provider's (SP) VLAN ID (VID)). Note: Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel Port. 222 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 223
    . VID is the VLAN ID. SP VID is the VID for the second (service provider's) VLAN tag. 23.3.1 Frame Format The frame format for an untagged Ethernet frame, a single-tagged 802.1Q frame (customer) and a "double-tagged" 802.1Q frame (service provider) is shown next. XGS4700-48F User's Guide 223
  • ZyXEL XGS4700-48F | User Guide - Page 224
    frame Table 58 802.1Q Frame DA Destination Address SA Source Address (SP)TPI D VID (Service Provider) Tag Protocol IDentifier VLAN ID Priority Len/ Etype Data 802.1p Priority Length and type the screen as shown. Figure 100 Advanced Application > VLAN Stacking 224 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 225
    ports at the edge of the service provider's network. Select Tunnel Port to have the Switch add the Tunnel TPID tag to all outgoing frames sent on this port. In order to support VLAN stacking on a port, the VLAN tag to them, even they have different customer VLAN IDs. XGS4700-48F User's Guide 225
  • ZyXEL XGS4700-48F | User Guide - Page 226
    119 for more background information on VLAN ID. Select a priority level (from 0 to 7). This is the service provider's priority level that adds to the frames received on this port. Apply Cancel "0" is the lowest priority one port according to their inner VLAN tags. 226 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 227
    119 for more background information on VLAN ID. Select a priority level (from 0 to 7). This is the service provider's priority level that adds to the frames received on this port. Add Cancel Index Active Name "0" is or not. This is the descriptive name for this rule. XGS4700-48F User's Guide 227
  • ZyXEL XGS4700-48F | User Guide - Page 228
    to the packets from the subscribers. Priority This is the service provider's priority level in the packets. Delete Check the rule(s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. 228 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 229
    services (such as content information distribution) based on service plans and types of subscription. You can set the Switch to filter the multicast group join reports on a per-port basis by configuring an IGMP filtering profile and associating the profile to a port. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 230
    destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group. IGMP snooping generates no additional multicast group. Multicast Group This field displays IP multicast group addresses. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 231
    Priority Select a priority level (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority. XGS4700-48F User's Guide 231
  • ZyXEL XGS4700-48F | User Guide - Page 232
    waits for an IGMP report before removing an IGMP snooping membership entry when an IGMP leave message is received on this port from a host. 232 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 233
    the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 233
  • ZyXEL XGS4700-48F | User Guide - Page 234
    power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. 234 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 235
    then able to join the multicast groups specified in the profile. Each port can be assigned a single profile. A profile can be assigned to multiple ports. XGS4700-48F User's Guide 235
  • ZyXEL XGS4700-48F | User Guide - Page 236
    name of the profile. This field displays the start of the multicast address range. This field displays the end of the multicast address range. 236 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 237
    such as Media-onDemand (MoD)) that use multicast traffic across an Ethernet ring-based service provider network. MVR allows one single multicast VLAN to be shared among different subscriber in a multicast VLAN while a receiver port can only receive multicast traffic. XGS4700-48F User's Guide 237
  • ZyXEL XGS4700-48F | User Guide - Page 238
    compatible mode, the Switch does not send any IGMP reports. In this case, you must manually configure the forwarding settings on the multicast devices in the multicast VLAN. 24.6.3 How MVR . Figure 108 MVR Multicast Television Example VLAN 1 Multicast VLAN S A 238 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 239
    Enter a descriptive name (up to 32 printable ASCII characters) for identification purposes. Multicast VLAN Enter the VLAN ID (1 to 4094) of the multicast VLAN. ID XGS4700-48F User's Guide 239
  • ZyXEL XGS4700-48F | User Guide - Page 240
    the rule(s) that you want to remove in the Delete column, then click the Delete button. Click Cancel to clear the Delete check boxes. 240 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 241
    you want to configure only one IP address for a multicast group. Refer to Section 24.1.1 on page 229 for more information on IP multicast addresses. XGS4700-48F User's Guide 241
  • ZyXEL XGS4700-48F | User Guide - Page 242
    able to receive the traffic. Figure 111 MVR Configuration Example VLAN 1 1 2 A B 3 News: 224.1.4.10 ~ 224.1.4.50 Multicast VID 200 Movie: 230.1.2.50 ~230.1.2.60 7 S C 242 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 243
    Example EXAMPLE To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The XGS4700-48F User's Guide 243
  • ZyXEL XGS4700-48F | User Guide - Page 244
    Chapter 24 Multicast following figure shows an example where two multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 113 MVR Group Configuration Example EXAMPLE Figure 114 MVR Group Configuration Example 244 EXAMPLE XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 245
    authentication, authorization and accounting functions are known as AAA servers. The Switch supports RADIUS (Remote Authentication Dial-In User Service, see Section 25.1.2 on page 246) and TACACS+ (Terminal Access Controller Access-Control System Plus, see Section XGS4700-48F User's Guide 245
  • ZyXEL XGS4700-48F | User Guide - Page 246
    , configure your authentication and accounting server settings (RADIUS, TACACS+ or both) and then set up the authentication priority, activate authorization and configure accounting settings. 246 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 247
    . Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. Figure 117 Advanced Application > AAA > RADIUS Server Setup XGS4700-48F User's Guide 247
  • ZyXEL XGS4700-48F | User Guide - Page 248
    server for authentication is 1812. You need not change this value unless your network administrator instructs you to do so. Specify a password (up to 32 alphanumeric characters) as the key not change this value unless your network administrator instructs you to do so. 248 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 249
    the TACACS+ Server Setup link in the Authentication and Accounting screen to view the screen as shown. Figure 118 Advanced Application > AAA > TACACS+ Server Setup XGS4700-48F User's Guide 249
  • ZyXEL XGS4700-48F | User Guide - Page 250
    + server for authentication is 49. You need not change this value unless your network administrator instructs you to do so. Specify a password (up to 32 alphanumeric characters) as the key not change this value unless your network administrator instructs you to do so. 250 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 251
    the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 119 Advanced Application > AAA > AAA Setup XGS4700-48F User's Guide 251
  • ZyXEL XGS4700-48F | User Guide - Page 252
    ). Configure the access privilege of accounts via commands (see the Ethernet Switch CLI Reference Guide) for local authentication. The TACACS+ and RADIUS are external servers. Before you specify the Use this section to configure authorization settings on the Switch. 252 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 253
    LABEL Type DESCRIPTION Set whether the Switch provides the following services to a user. Active Method • Exec: Allow an start-stop option for the Exec or Dot1x entries. The Switch supports the following types of events to be sent to the accounting server XGS4700-48F User's Guide 253
  • ZyXEL XGS4700-48F | User Guide - Page 254
    to the company by the IANA (Internet Assigned Numbers Authority). ZyXEL's vendor ID is 890. • Vendor-Type: A vendor Supported VSAs FUNCTION Ingress Bandwidth Assignment ATTRIBUTE Vendor-Id = 890 Vendor-Type = 1 Vendor-data = ingress rate (Kbps in decimal format) 254 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 255
    attributes only work when you enable authorization (see Section 25.2.3 on page 251). Table 73 Supported Tunnel Protocol Attribute FUNCTION VLAN Assignment ATTRIBUTE Tunnel-Type = VLAN(13) Tunnel-Medium-Type = in this table are fixed values as defined in RFC 3580. XGS4700-48F User's Guide 255
  • ZyXEL XGS4700-48F | User Guide - Page 256
    Service (RADIUS) attributes are data used to define specific authentication, and accounting elements in a user profile, which is stored on the RADIUS server. This section lists the RADIUS attributes supported -Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type 256 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 257
    Console ATTRIBUTE START INTERIM-UPDATE User-Name   NAS-Identifier   NAS-IP-Address   Service-Type   Acct-Status-Type   Acct-Delay-Time   Acct-Session-Id   Acct-Authentic   Acct-Session-Time  Acct-Terminate-Cause STOP XGS4700-48F User's Guide 257
  • ZyXEL XGS4700-48F | User Guide - Page 258
    ATTRIBUTE START INTERIM-UPDATE User-Name   NAS-Identifier   NAS-IP-Address   Service-Type   Calling-Station-Id   Acct-Status-Type   Acct-Delay-Time  -Time  Acct-Input-Packets  Acct-Output-Packets  Acct-Terminate-Cause STOP 258 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 259
    Table 76 RADIUS Attributes - Exec Events via Console ATTRIBUTE START INTERIM-UPDATE Acct-Input-Gigawords  Acct-Output-  Gigawords Chapter 25 AAA STOP   XGS4700-48F User's Guide 259
  • ZyXEL XGS4700-48F | User Guide - Page 260
    Chapter 25 AAA 260 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 261
    builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings). IP source guard consists of the following features: • Static have to enable DHCP snooping before you enable ARP inspection. XGS4700-48F User's Guide 261
  • ZyXEL XGS4700-48F | User Guide - Page 262
    . If you set up the DHCP snooping database, the Switch can reload the dynamic bindings from the DHCP snooping database after the Switch restarts. 262 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 263
    to configure DHCP snooping on the Switch. 1 Enable DHCP snooping on the Switch. 2 Enable DHCP snooping on each VLAN, and configure DHCP relay option 82. XGS4700-48F User's Guide 263
  • ZyXEL XGS4700-48F | User Guide - Page 264
    page 147). • They are stored only in volatile memory. • They do not use the same space in memory that regular MAC address filters use. 264 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 265
    and ARP inspection. Bindings are used by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized packets in the network. The Switch learns XGS4700-48F User's Guide 265
  • ZyXEL XGS4700-48F | User Guide - Page 266
    displays how the Switch learned the binding. static: This binding was learned from information provided manually by an administrator. VID Port dhcp-snooping: This binding was learned by snooping DHCP packets. address and VLAN ID as an existing static binding, the 266 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 267
    . VLAN Port static: This binding was learned from information provided manually by an administrator. This field displays the source VLAN ID in the binding. This field displays the port number in the binding. If this field is blank, the binding applies to all ports. XGS4700-48F User's Guide 267
  • ZyXEL XGS4700-48F | User Guide - Page 268
    at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 124 DHCP Snooping 268 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 269
    Switch could not create or read the DHCP snooping database when the Switch started up or a new URL is configured for the DHCP snooping database. XGS4700-48F User's Guide 269
  • ZyXEL XGS4700-48F | User Guide - Page 270
    these counters by restarting the Switch or using CLI commands. See the Ethernet Switch CLI Reference Guide. Binding collisions This field displays the number of bindings the Switch has ignored because the Switch was a trusted interface or does not exist anymore. 270 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 271
    that they are still available after a restart. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure. Figure 125 DHCP Snooping Configure XGS4700-48F User's Guide 271
  • ZyXEL XGS4700-48F | User Guide - Page 272
    to the non-volatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. 272 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 273
    untrusted) can receive each second. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 126 DHCP Snooping Port Configure XGS4700-48F User's Guide 273
  • ZyXEL XGS4700-48F | User Guide - Page 274
    relay agent option 82 information (Chapter 40 on page 359) to DHCP requests that the Switch relays to a DHCP server for each VLAN. To 274 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 275
    changes to the non-volatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. XGS4700-48F User's Guide 275
  • ZyXEL XGS4700-48F | User Guide - Page 276
    how long (in seconds) the MAC address filter remains in the Switch. You can also delete the record manually (Delete). This field displays the reason the ARP packet was discarded. MAC+VLAN: The MAC address and entries. Click this to clear the Delete check boxes above. 276 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 277
    the Switch last restarted. Dropped This field displays the total number of ARP packets the Switch discarded for the VLAN since the Switch last restarted. XGS4700-48F User's Guide 277
  • ZyXEL XGS4700-48F | User Guide - Page 278
    log consolidation interval into one log message. You can configure this interval in the ARP Inspection Configure screen. See Section 26.7 on page 279. 278 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 279
    global settings for the ARP inspection log. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure. Figure 131 ARP Inspection Configure XGS4700-48F User's Guide 279
  • ZyXEL XGS4700-48F | User Guide - Page 280
    to the non-volatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. 280 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 281
    packets per second) at which the Switch receives ARP packets from each port. The Switch discards any additional ARP packets. Enter 0 to disable this limit. XGS4700-48F User's Guide 281
  • ZyXEL XGS4700-48F | User Guide - Page 282
    field displays the VLAN ID of each VLAN in the range specified above. If you configure the * VLAN, the settings are applied to all VLANs. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 283
    your changes to the nonvolatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. XGS4700-48F User's Guide 283
  • ZyXEL XGS4700-48F | User Guide - Page 284
    Chapter 26 IP Source Guard 284 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 285
    of your network. Figure 134 Loop Guard vs STP STP Loop Guard Loop guard is designed to handle loop problems on the edge of your network. This can occur when a port is connected to a Switch that is in receive broadcast messages sent out from the switch in loop state. XGS4700-48F User's Guide 285
  • ZyXEL XGS4700-48F | User Guide - Page 286
    shown. In this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on 286 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 287
    the Switch. Figure 137 Loop Guard - Network Loop A P P N P Note: After resolving the loop problem on your network you can re-activate the disabled port via the web configurator (see Section 8.7 on page 115 MSTP) enabled. Figure 138 Advanced Application > Loop Guard XGS4700-48F User's Guide 287
  • ZyXEL XGS4700-48F | User Guide - Page 288
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 288 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 289
    ID and priority level of packets received from a private network to those used in the service provider's network. The Switch checks incoming traffic from the switch ports (non-management ports) 139 VLAN mapping example 12 10 123 Port 3 10 Service Provider Network XGS4700-48F User's Guide 289
  • ZyXEL XGS4700-48F | User Guide - Page 290
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 290 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 291
    VLAN mapping entry in the table. Active This shows whether this entry is activated or not. Name This is the descriptive name for this rule. XGS4700-48F User's Guide 291
  • ZyXEL XGS4700-48F | User Guide - Page 292
    (s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the Delete check boxes. 292 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 293
    tunneling (L2PT) is used on the service provider's edge devices. L2PT allows edge service provider's network. To emulate a point-to-point topology between two customer switches at different sites, such as A and B, you can enable protocol tunneling on edge switches 1 and XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 294
    the tunnel ports. • The Tunnel port is an egress port at the edge of the service provider's network and connected to another service provider's switch. Incoming encapsulated layer-2 protocol packets received on a tunnel port are decapsulated and sent to an access port. 294 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 295
    the MAC address does not exist in the address table of a switch on the service provider's network. Note: All the edge switches in the service provider's network should be set to use the same MAC address for encapsulation. Port This field displays the port number. XGS4700-48F User's Guide 295
  • ZyXEL XGS4700-48F | User Guide - Page 296
    that all customer switches can use consistent VLAN configuration through the service provider's network. The Switch supports PAgP (Port Aggregation Protocol), LACP (Link Aggregation Control Protocol) configuring. Click Cancel to begin configuring this screen afresh. 296 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 297
    monitor network traffic and create reports for network performance analysis and troubleshooting. For example, you can use it to know which IP address or which type of traffic caused network congestion. Figure 145 sFlow Application sFlow Agent sFlow Collector XGS4700-48F User's Guide 297
  • ZyXEL XGS4700-48F | User Guide - Page 298
    make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. 298 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 299
    the sFlow screen to display the screen as shown. You can configure up to four sFlow collectors in this screen. You may want to configure XGS4700-48F User's Guide 299
  • ZyXEL XGS4700-48F | User Guide - Page 300
    (s) that you want to remove in the Delete column and then click the Delete button. Cancel Click Cancel to begin configuring this screen afresh. 300 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 301
    , which stands for the "ADSL Forum" IANA entry. i1 and i2 are PPPoE intermediate agent sub-options, which contain additional information about the PPPoE client. XGS4700-48F User's Guide 301
  • ZyXEL XGS4700-48F | User Guide - Page 302
    . The next field specifies the length of the field. The Switch takes the Circuit ID string you manually configure for a VLAN on a port as the highest priority and the Circuit ID string for a No delimiter VLAN ID (1 byte) (1 byte) (1 byte) (2 byte) (1 byte) (4 bytes) 302 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 303
    forwards it to the trusted port(s). • The Switch discards PADO and PADS packets which are sent from a PPPoE server but received on an untrusted port. XGS4700-48F User's Guide 303
  • ZyXEL XGS4700-48F | User Guide - Page 304
    client. Click Advanced Application > PPPoE > Intermediate Agent in the navigation panel to display the screen as shown. Figure 149 Advanced Application > PPPoE > Intermediate Agent 304 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 305
    individual ports are trusted or untrusted ports and have the Switch add extra information to PPPoE discovery packets from PPPoE clients on a per-port basis. XGS4700-48F User's Guide 305
  • ZyXEL XGS4700-48F | User Guide - Page 306
    make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. 306 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 307
    this screen afresh. 31.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPPoE IA settings that apply to a specific VLAN on a port. XGS4700-48F User's Guide 307
  • ZyXEL XGS4700-48F | User Guide - Page 308
    Circuit ID sub-option for this VLAN on the specified port. Spaces are allowed. The Circuit ID you configure here has the highest priority. 308 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 309
    a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as shown. Figure 152 Advanced Application > PPPoE > Intermediate Agent > VLAN XGS4700-48F User's Guide 309
  • ZyXEL XGS4700-48F | User Guide - Page 310
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 310 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 311
    , you need to enable the port(s) or allow the packets on a port manually via the web configurator or the commands. With error-disable recovery, you can set the disabled port(s) to become active or start receiving the packets again after the time interval you specify. XGS4700-48F User's Guide 311
  • ZyXEL XGS4700-48F | User Guide - Page 312
    also enable error detection for the specific control packets in the Advanced Application > Errdisable > Errdisable Detect screen. Figure 154 Advanced Application > Errdisable > CPU protection 312 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 313
    link next to Errdisable Detect link in the Advanced Application > Errdisable screen to display the screen as shown. Figure 155 Advanced Application > Errdisable > Errdisable Detect XGS4700-48F User's Guide 313
  • ZyXEL XGS4700-48F | User Guide - Page 314
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 314 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 315
    to turn on the error-disable recovery function on the Switch. Reason This field displays the supported features that allow the Switch to shut down a port or discard packets on a port according done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 315
  • ZyXEL XGS4700-48F | User Guide - Page 316
    Chapter 32 Error Disable 316 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 317
    one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the Switch. Figure 157 Example of Static Routing Topology A R1 Internet R3 R2 XGS4700-48F User's Guide 317
  • ZyXEL XGS4700-48F | User Guide - Page 318
    done configuring. Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to set the above fields back to the factory defaults. 318 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 319
    cost of transmission for routing purposes. Click Delete to remove the selected entry from the summary table. Click Cancel to clear the Delete check boxes. XGS4700-48F User's Guide 319
  • ZyXEL XGS4700-48F | User Guide - Page 320
    Chapter 33 Static Route 320 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 321
    , high-cost paths while using low-cost paths for batch traffic. • Load Sharing - Network administrators can use policy routing to distribute traffic among multiple paths. XGS4700-48F User's Guide 321
  • ZyXEL XGS4700-48F | User Guide - Page 322
    identification purposes only. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. 322 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 323
    routes. Click Rule Configuration in the IP Application > Policy Routing screen to display the screen as shown. Figure 160 IP Application > Policy Routing > Rule Configuration XGS4700-48F User's Guide 323
  • ZyXEL XGS4700-48F | User Guide - Page 324
    want to remove. Click Delete to remove the selected entry(ies) from the summary table. Click Cancel to clear the Rule Delete check boxes. 324 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 325
    RIP packets that the Switch sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you routes have the same administrative distance value, the Switch XGS4700-48F User's Guide 325
  • ZyXEL XGS4700-48F | User Guide - Page 326
    the default administrative distance value of the route sources supported on the Switch. Table 110 Default Distance Value RIP in the navigation panel to display the screen as shown. You cannot manually configure a new entry. Each entry in the table is automatically created XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 327
    top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 327
  • ZyXEL XGS4700-48F | User Guide - Page 328
    Chapter 35 RIP 328 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 329
    between two areas. A stub area, at the edge of an AS is not a transit area since there is only one connection to the stub area. XGS4700-48F User's Guide 329
  • ZyXEL XGS4700-48F | User Guide - Page 330
    interface is a link between a layer-3 device and an OSPF network. An interface has state information, an IP address and subnet mask associated with it. 330 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 331
    router A to make sure that it does become the DR. 36.1.5 Configuring OSPF To configure OSPF on the Switch, do the following tasks: 1 Enable OSPF XGS4700-48F User's Guide 331
  • ZyXEL XGS4700-48F | User Guide - Page 332
    OSPF status of the interface(s) on the Switch. Neighbor The text box displays the status of the neighboring router participating in the OSPF network. 332 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 333
    This field displays the ID of a router or subnet. ADV Router This field displays the IP address of the layer-3 device that sends the LSAs. XGS4700-48F User's Guide 333
  • ZyXEL XGS4700-48F | User Guide - Page 334
    identifies the Switch in an OSPF. Enter a unique ID (that uses the format of an IP address in dotted decimal notation) for the Switch. 334 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 335
    . The OSPF supports three levels of authentication: • None - no authentication is used. • Simple - authenticate link state updates using an 8 printable ASCII character password. • MD5 - authenticate link state updates using a 16 printable ASCII character password. XGS4700-48F User's Guide 335
  • ZyXEL XGS4700-48F | User Guide - Page 336
    route into a stub area for routes which are external to an OSPF domain. If you do not set a route cost, no default route is added. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 337
    the Switch using OSPF routing protocol. A summary address is used to cover more than one routing entries in order to reduce the routing table size. XGS4700-48F User's Guide 337
  • ZyXEL XGS4700-48F | User Guide - Page 338
    Switch to import and translate external routes learned through RIP routing protocol or configured manually (Static) into the OSPF network transparently. Select this option to activate route you are done configuring. Click Cancel to begin configuring this screen afresh. 338 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 339
    more information on OSPF. In the OSPF Configuration screen, click Interface to display the OSPF Interface screen. Figure 169 IP Application > OSPF Configuration > OSPF Interface XGS4700-48F User's Guide 339
  • ZyXEL XGS4700-48F | User Guide - Page 340
    ) of an area to associate the interface to that area. This field displays the authentication method used (Same-as-Area, None, Simple or MD5). 340 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 341
    format with dotted decimal notation) of an area to associate the interface to that area. Peer Router ID Enter the ID of a peer border router. XGS4700-48F User's Guide 341
  • ZyXEL XGS4700-48F | User Guide - Page 342
    number of the key used. Click Delete to remove the selected entry from the summary table. Click Cancel to clear the Delete check boxes. 342 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 343
    by IP addresses in the Class D range (224.0.0.0 to 239.255.255.255). A multicast server sends packets addressed to a particular multicast group (multicast IP address). XGS4700-48F User's Guide 343
  • ZyXEL XGS4700-48F | User Guide - Page 344
    , multicast routers check if any hosts on their network are still members of a specific multicast group. The Switch supports IGMP version 1 (IGMP-v1), version 2 (IGMP-v2) and IGMP version 3 (IGMP-v3). Refer to a multicast router believes that there are group members 344 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 345
    records which port the messages came from. It then delivers multicast traffic to only those ports from which it received a request to join a multicast group. XGS4700-48F User's Guide 345
  • ZyXEL XGS4700-48F | User Guide - Page 346
    navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 346 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 347
    DVMRP provides multicast forwarding capability to a layer-3 switch that runs both the IPv4 protocol (with IP Multicast support) and the IGMP protocol. The DVMRP metric is a hop count of 32. IGMP is a protocol graft message ("G") to undo the prune is sent to the parent. XGS4700-48F User's Guide 347
  • ZyXEL XGS4700-48F | User Guide - Page 348
    act as a multicast router ("mrouter"). Click IP Application > DVMRP in the navigation panel to display the screen as shown. Figure 177 IP Application > DVMRP 348 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 349
    Set Error When you disable IGMP, but DVMRP is still active you also see another warning screen. Figure 179 DVMRP: Unable to Disable IGMP Error XGS4700-48F User's Guide 349
  • ZyXEL XGS4700-48F | User Guide - Page 350
    lifetime Prune retransmission time Graft retransmission time 140 sec Variable (less than two hours) 3 sec with exponential back off 5 sec with exponential back off 350 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 351
    traffic flow. Packets are marked with DiffServ Code Points (DSCPs) indicating the level of service desired. This allows the intermediary DiffServ-compliant network devices to handle the packets differently the DiffServ network. Based on the marking rule different XGS4700-48F User's Guide 351
  • ZyXEL XGS4700-48F | User Guide - Page 352
    Chapter 39 Differentiated Services kinds of traffic can be marked for different priorities of forwarding. Resources can then be allocated according to the DSCP to two user-defined rates: the Committed Information Rate (CIR) and the Peak Information Rate (PIR). The CIR 352 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 353
    CIR and PIR values are based on the guaranteed and maximum bandwidth respectively as negotiated between a service provider and client. Two Rate Three Color Marker evaluates incoming packets and marks them with one a packet loss priority of a packet but it cannot XGS4700-48F User's Guide 353
  • ZyXEL XGS4700-48F | User Guide - Page 354
    Chapter 39 Differentiated Services decrease it. Packets that have been previously marked red or yellow can only be marked with an equal or Click IP Application > DiffServ in the navigation panel to display the screen as shown. Figure 185 IP Application > DiffServ 354 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 355
    Chapter 39 Differentiated Services The following table describes the labels in this screen. Table 125 IP Application > DiffServ LABEL Active Port * DESCRIPTION settings. Click the 2-rate 3 Color Marker link in the DiffServ screen to display the screen as shown next. XGS4700-48F User's Guide 355
  • ZyXEL XGS4700-48F | User Guide - Page 356
    Chapter 39 Differentiated Services Note: You cannot enable both TRTCM and Bandwidth Control at the same time. Figure 186 IP Application > DiffServ > 2-rate 3 Color Marker are copied to all the ports as soon as you make them. Select this to activate TRTCM on the port. 356 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 357
    Chapter 39 Differentiated Services Table 126 IP Application > DiffServ > 2-rate 3 Color Marker (continued) LABEL DESCRIPTION Commit Specify the 802.1p Mapping DSCP VALUE 0 - 7 8 - 15 16 - 23 24 - 31 32 - 39 40 - 47 48 - 55 56 - 63 IEEE 802.1p 0 1 2 3 4 5 6 7 XGS4700-48F User's Guide 357
  • ZyXEL XGS4700-48F | User Guide - Page 358
    Chapter 39 Differentiated Services 39.4.1 Configuring DSCP Settings To change the DSCP-IEEE 802.1p mapping, click the DSCP Setting link in the changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 358 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 359
    the client computers must be configured manually. 40.1.1 DHCP Modes The services you want to offer the DHCP clients on your network. Choose the configuration screen based on the following criteria: • Global - The Switch forwards all DHCP requests to the same DHCP server. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 360
    Application > DHCP in the navigation panel and then click an existing index number of a DHCP server configuration to view the screen as shown. Use 360 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 361
    address cannot be used for DHCP because it is already assigned to the Switch itself. Hostname This field displays the system name of the client. XGS4700-48F User's Guide 361
  • ZyXEL XGS4700-48F | User Guide - Page 362
    belongs to. Information (up to 64 bytes) This optional, read-only field is set according to system name set in Basic Settings > General Setup. 362 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 363
    the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 363
  • ZyXEL XGS4700-48F | User Guide - Page 364
    used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. Figure 191 Global DHCP Relay Network Example DHCP Server: 192.168 the VLAN ID. Figure 192 DHCP Relay Configuration Example 364 EXAMPLE XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 365
    a DHCP Server or Relay for the specified VID. If you select Server then fields related to DHCP relay configuration are grayed out and vice versa. XGS4700-48F User's Guide 365
  • ZyXEL XGS4700-48F | User Guide - Page 366
    IP address. Select the configuration entries you want to remove and click Delete to remove them. Click Cancel to clear the Delete check boxes. 366 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 367
    IP address of 172.23.10.100. Figure 194 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.23.10.100 XGS4700-48F User's Guide 367
  • ZyXEL XGS4700-48F | User Guide - Page 368
    Chapter 40 DHCP For the example network, configure the VLAN Setting screen as shown. Figure 195 DHCP Relay for Two VLANs Configuration Example 368 EXAMPLE XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 369
    virtual router VR1 to ensure the link between the host X and the uplink gateway G. Host X is configured to use VR1 (192.168.1.20) as the XGS4700-48F User's Guide 369
  • ZyXEL XGS4700-48F | User Guide - Page 370
    mask bits of an IP routing domain that is associated to a virtual router. VRID This field displays the ID number of the virtual router. 370 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 371
    click the Configuration link to display the VRRP Configuration screen as shown next. Note: You can only configure VRRP on interfaces with unique VLAN IDs. XGS4700-48F User's Guide 371
  • ZyXEL XGS4700-48F | User Guide - Page 372
    save your changes to the non- volatile memory when you are done configuring. Cancel Click Cancel to discard all changes made in this table. 372 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 373
    from happening. By default, a layer 3 device with the same IP address as the virtual router will become the master router regardless of the preempt mode. XGS4700-48F User's Guide 373
  • ZyXEL XGS4700-48F | User Guide - Page 374
    notation. This field is optional. Enter the IP address of a secondary virtual router in dotted decimal notation. This field is ignored when you enter 0.0.0.0. 374 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 375
    table. Cancel Click Cancel to clear the Delete check boxes. 41.4 VRRP Configuration Examples The following sections show two VRRP configuration examples on the Switch. XGS4700-48F User's Guide 375
  • ZyXEL XGS4700-48F | User Guide - Page 376
    in the figures below. Figure 202 VRRP Example 1: VRRP Parameter Settings on Switch A EXAMPLE Figure 203 VRRP Example 1: VRRP Parameter Settings on Switch B 376 EXAMPLE XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 377
    You need to configure the VRRP Configuration screen for virtual router VR2 on each switch, while keeping the VRRP configuration in example 1 for virtual router XGS4700-48F User's Guide 377
  • ZyXEL XGS4700-48F | User Guide - Page 378
    for both switches are shown next. Figure 209 VRRP Example 2: VRRP Status on Switch A EXAMPLE Figure 210 VRRP Example 2: VRRP Status on Switch B EXAMPLE 378 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 379
    (version 4) address is 32 bits long. In an Ethernet LAN, MAC addresses are 48 bits long. The ARP Table maintains an association between each MAC address and its corresponding Mode The Switch supports three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request. XGS4700-48F User's Guide 379
  • ZyXEL XGS4700-48F | User Guide - Page 380
    a gratuitous ARP packet to detect IP collisions. If a device restarts or its MAC address is changed, it can also use gratuitous ARP to inform 380 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 381
    A right after getting host B's MAC address and ICMP reply. A ARP Request ARP Reply ICMP Request ICMP Reply B ARP Request ARP Reply ICMP Request ICMP Reply XGS4700-48F User's Guide 381
  • ZyXEL XGS4700-48F | User Guide - Page 382
    a gratuitous ARP request. Select ARP-Request to have the Switch update the ARP table with both ARP replies, gratuitous ARP requests and ARP requests. 382 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 383
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 383
  • ZyXEL XGS4700-48F | User Guide - Page 384
    Chapter 42 ARP Learning 384 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 385
    Switch learns the next-hop(s) using ARP and determines routing path(s) for a destination. The Switch supports Equal-Cost MultiPath (ECMP) to forward packets destined to the same device (A for example) screen as shown next. Figure 212 IP Application > Load Sharing XGS4700-48F User's Guide 385
  • ZyXEL XGS4700-48F | User Guide - Page 386
    to determine the routing path for a packet. Select src-ip to have the Switch use a hash algorithm to convert a packet's source IP address into a hash value which acts as an index to a route path. Aging Time . Click Cancel to begin configuring this screen afresh. 386 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 387
    1 or Configuration 2) is currently operating on the Switch. Firmware Upgrade Click Click Here to go to the Firmware Upgrade screen. Restore Configurati on Click Click Here to go Default Click Click Here to reset the configuration to the factory default settings. XGS4700-48F User's Guide 387
  • ZyXEL XGS4700-48F | User Guide - Page 388
    default Switch IP address (192.168.1.1). 44.3 Save Configuration Click Config 1 to save the current configuration settings permanently to configuration one on the Switch. 388 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 389
    Switch. 44.5 Firmware Upgrade Make sure you have downloaded (and unzipped) the correct model firmware and version to your computer before uploading to the device. Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. XGS4700-48F User's Guide 389
  • ZyXEL XGS4700-48F | User Guide - Page 390
    reboot the Switch and apply the new firmware immediately. (Firmware upgrades are only applied after a reboot). Click Upgrade to load the new firmware. After the firmware upgrade process is complete, see the is automatically renamed when you restore using this screen. 390 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 391
    , IP Setup, and so on. Once you have customized the Switch's settings, they can be saved back to your computer under a filename of your choosing. XGS4700-48F User's Guide 391
  • ZyXEL XGS4700-48F | User Guide - Page 392
    ZyXEL Network Operating System, sometimes referred to as the "ras" file) is the system firmware FTP commands to upload firmware to any image. The Switch supports dual firmware images, ras-0 and ras firmware as uploading the wrong model firmware may damage your device. 392 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 393
    access. Anonymous logins will work only if your ISP or service administrator has enabled this option. Normal. Transfer Type Initial firmware files should be transferred in binary mode. Specify the default remote directory (path). Specify the default local directory (path). XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 394
    Restrictions FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. 394 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 395
    . See the Ethernet Switch CLI Reference Guide for more information on disabling multi-login. 45.2 The Access Control Main Screen Click Management > Access Control in the navigation panel to display the main screen as shown. Figure 219 Management > Access Control XGS4700-48F User's Guide 395
  • ZyXEL XGS4700-48F | User Guide - Page 396
    on. A Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. 396 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 397
    , only the intended recipients can read them. 45.3.2 Supported MIBs MIBs let administrators collect statistics and monitor status and performance. The Switch supports the following MIBs: • SNMP MIB II (RFC 1213 2012 SNMPv2 MIB for TCP, RFC 2013 SNMPv2 MIB for UDP XGS4700-48F User's Guide 397
  • ZyXEL XGS4700-48F | User Guide - Page 398
    standard MIB OID. The OIDs beginning with "1.3.6.1.4.1.890.1.5.8.54" are specific to the XGS4700-48F switch. Table 145 SNMP System Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION coldstart the Switch reboots by an administrator through a management interface. 398 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 399
    -negotiate with the peer Ethernet interface. AutonegotiationFailedEven 1.3.6.1.4.1.890.1.5.8.54.31 tClear .2.2 This trap is sent when an Ethernet interface autonegotiates with the peer Ethernet interface. XGS4700-48F User's Guide 399
  • ZyXEL XGS4700-48F | User Guide - Page 400
    Protocol (LLDP), defined as IEEE 802.1ab, enables LAN devices that support LLDP to exchange their configured settings. This helps eliminate configuration mismatch issues. 1.3.6.1.4.1.890.1.5.8.54.3 This trap is sent when the 1.2.2 RADIUS server can be reached. 400 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 401
    . 1.3.6.1.4.1.890.1.5.8.54.4 This trap is sent when the 2.2.2 MRSTP topology changes. 1.3.6.1.4.1.890.1.5.8.54.1 This trap is sent when the MSTP 07.70.2 root switch changes. XGS4700-48F User's Guide 401
  • ZyXEL XGS4700-48F | User Guide - Page 402
    screen, display the SNMP screen. You can click Access Control to go back to the Access Control screen. Figure 221 Management > Access Control > SNMP 402 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 403
    the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 403
  • ZyXEL XGS4700-48F | User Guide - Page 404
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 404 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 405
    Digest 5) and SHA (Secure Hash Algorithm) are hash algorithms used to authenticate SNMP data. SHA authentication is generally considered stronger than MD5, but is slower. XGS4700-48F User's Guide 405
  • ZyXEL XGS4700-48F | User Guide - Page 406
    this user belongs. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to begin configuring this screen afresh. 406 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 407
    password (1234 is the default password when shipped). New Password Enter your new system password. Retype to confirm Retype your new system password for confirmation XGS4700-48F User's Guide 407
  • ZyXEL XGS4700-48F | User Guide - Page 408
    higher privileges via the CLI. For more information on assigning privileges see the Ethernet Switch CLI Reference Guide. User Name Set a user name (up to 32 ASCII characters long). Password Enter your new an unsecured network. Figure 225 SSH Communication Example 408 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 409
    the client computer. 2 Encryption Method Once the identification is verified, both the client and server must agree on the type of encryption method to use. XGS4700-48F User's Guide 409
  • ZyXEL XGS4700-48F | User Guide - Page 410
    to the server to log in to the server. 45.7 SSH Implementation on the Switch Your Switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH is a trusted CA on the Switch. Please refer to the following figure. 410 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 411
    on the Switch's WS (web server). Figure 227 HTTPS Implementation Note: If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts. 45.9 HTTPS Example If you haven box pops up asking if you trust the server certificate. XGS4700-48F User's Guide 411
  • ZyXEL XGS4700-48F | User Guide - Page 412
    message "There is a problem with this website's security certificate." may display. If that is the case, click Continue to this website (not recommended) to proceed to the web configurator login screen. Figure 229 Security Certificate Warning (Internet Explorer 7 or 8) 412 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 413
    the address bar and click View certificates. Figure 230 Certificate Error (Internet Explorer 7 or 8) EXAMPLE Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser. Figure 231 Certificate (Internet Explorer 7 or 8) XGS4700-48F User's Guide 413
  • ZyXEL XGS4700-48F | User Guide - Page 414
    screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. Figure 232 Security Alert (Mozilla Firefox) 414 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 415
    accept the certificate and enter the login username and password, the Switch main screen appears. The lock displayed in the bottom right of the browser XGS4700-48F User's Guide 415
  • ZyXEL XGS4700-48F | User Guide - Page 416
    connection. Figure 234 Example: Lock Denoting a Secure Connection EXAMPLE 45.10 Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure "trusted 416 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 417
    default port number then you will have to let people (who wish to use the service) know the new port number for that service. Timeout Type how many minutes a management session (via the web configurator) can screen, display the Remote Management screen as shown next. XGS4700-48F User's Guide 417
  • ZyXEL XGS4700-48F | User Guide - Page 418
    if the client IP address of a computer requesting a service or protocol matches the range set here. The Switch immediately disconnects the session if it does not match. Select services that may be used for managing the Switch from the specified trusted computers. 418 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 419
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 419
  • ZyXEL XGS4700-48F | User Guide - Page 420
    Chapter 45 Access Control 420 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 421
    Click Display to display a log of events in the multi-line text box. Click Clear to empty the text box and reset the syslog entry. XGS4700-48F User's Guide 421
  • ZyXEL XGS4700-48F | User Guide - Page 422
    Switch ping the IP address (in the field to the left). Enter a port number and click Port Test to perform an internal loopback test. 422 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 423
    : There is a normal but significant condition on the system. 6 Informational: The syslog contains an informational message. 7 Debug: The message is intended for debug-level purposes. XGS4700-48F User's Guide 423
  • ZyXEL XGS4700-48F | User Guide - Page 424
    panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 424 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 425
    syslog server. Delete Select an entry's Delete check box and click Delete to remove the entry. Cancel Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 425
  • ZyXEL XGS4700-48F | User Guide - Page 426
    Chapter 47 Syslog 426 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 427
    must be compatible with ZyXEL cluster management implementation. Cluster Manager The cluster manager is the Switch through which you manage the cluster member switches. Cluster Members Cluster members are the switches being managed by the cluster manager switch. XGS4700-48F User's Guide 427
  • ZyXEL XGS4700-48F | User Guide - Page 428
    members. Figure 240 Clustering Application Example 48.2 Cluster Management Status Click Management > Cluster Management in the navigation panel to display the following screen. Note: A cluster can only have one manager. Figure 241 Management > Cluster Management 428 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 429
    ) 48.2.1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web configurator home page. This cluster member web XGS4700-48F User's Guide 429
  • ZyXEL XGS4700-48F | User Guide - Page 430
    Chapter 48 Cluster Management configurator home page and the home page that you'd see if you accessed it directly are different. Figure 242 Cluster Management: Cluster Member Web Configurator Screen EXAMPLE EXAMPLE 430 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 431
    the cluster member switch. fw-00-a0-c5-01-23-46 This is the cluster member switch's firmware name as seen in the cluster manager switch. config-00-a0-c5-01-23-46 This is the cluster member switch's configuration file name as seen in the cluster manager switch. XGS4700-48F User's Guide 431
  • ZyXEL XGS4700-48F | User Guide - Page 432
    Chapter 48 Cluster Management 48.3 Clustering Management Configuration Use this screen to configure clustering management. Click Configuration from the Cluster Management screen list. This field is ignored if the Clustering Manager is using Port- based VLAN. 432 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 433
    Chapter 48 Cluster Management Table 163 Management > Clustering Management > Configuration (continued) LABEL Apply Cancel Clustering Candidate List Password remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. XGS4700-48F User's Guide 433
  • ZyXEL XGS4700-48F | User Guide - Page 434
    Chapter 48 Cluster Management 434 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 435
    MAC Table. It also shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). The Switch uses the MAC Table to determine how to forward ports. Too much port flooding leads to network congestion. XGS4700-48F User's Guide 435
  • ZyXEL XGS4700-48F | User Guide - Page 436
    address(es) into the static MAC forwarding table or MAC filtering table from the MAC table using this screen. Figure 246 Management > MAC Table 436 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 437
    is the port from which the above MAC address was learned. This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). XGS4700-48F User's Guide 437
  • ZyXEL XGS4700-48F | User Guide - Page 438
    Chapter 49 MAC Table 438 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 439
    not already learned the port for this IP address, then the packet is flooded to all ports. Too much port flooding leads to network congestion. XGS4700-48F User's Guide 439
  • ZyXEL XGS4700-48F | User Guide - Page 440
    number. Index This field displays the index number. IP Address This is the IP address of the device from which the incoming packets came. 440 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 441
    IP address belongs to the Switch. Type This shows whether the IP address is dynamic (learned by the Switch) or static (belonging to the Switch). XGS4700-48F User's Guide 441
  • ZyXEL XGS4700-48F | User Guide - Page 442
    Chapter 50 IP Table 442 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 443
    area network. An IP (version 4) address is 32 bits long. In an Ethernet LAN, MAC addresses are 48 bits long. The ARP Table maintains an association between each MAC address and its corresponding IP address. 51.1.1 then sends the packet to the MAC address that replied. XGS4700-48F User's Guide 443
  • ZyXEL XGS4700-48F | User Guide - Page 444
    means this learned IP address is the Switch's management IP address. This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). 444 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 445
    the method used to learn the route; OSPF - added as an OSPF interface, RIP - learned from incoming RIP packets or STATIC added as a static entry. XGS4700-48F User's Guide 445
  • ZyXEL XGS4700-48F | User Guide - Page 446
    Chapter 52 Routing Table 446 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 447
    and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. Figure 251 Management > Configure Clone XGS4700-48F User's Guide 447
  • ZyXEL XGS4700-48F | User Guide - Page 448
    top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 448 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 449
    models or if the DC power supply is connected in AC/DC models). 5 Disconnect and re-connect the power adaptor or cord to the Switch (in AC models or if the AC power supply is connected in AC/DC models). 6 If the problem continues, contact the vendor. The ALM LED is on. XGS4700-48F User's Guide 449
  • ZyXEL XGS4700-48F | User Guide - Page 450
    Troubleshooting 1 Turn the Switch off and on (in DC models or if the DC power supply is connected in AC/DC models). 2 Disconnect and re-connect the power adaptor or cord to the Switch (in AC models or if the AC power supply is connected in AC/DC models). 3 If the problem 450 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 451
    forgotten it, see the troubleshooting suggestions for I forgot the service, such as Telnet. If you can access the Switch, check the remote management settings to find out why the Switch does not respond to HTTP. I can see the Login screen, but I cannot log in to the Switch. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 452
    Chapter 54 Troubleshooting 1 Make sure you have entered the user name and password correctly. The default user name is admin, and the default password 45.11 on page 417). Computers not belonging to the secured client set cannot get permission to access the Switch. 452 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 453
    54.3 Switch Configuration Chapter 54 Troubleshooting I lost my configuration settings after I restart the Switch. Make sure you save your configuration into the Switch's . See also Section 44.3 on page 388 for more information about how to save your configuration. XGS4700-48F User's Guide 453
  • ZyXEL XGS4700-48F | User Guide - Page 454
    Chapter 54 Troubleshooting 454 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 455
    firmware features. Table 169 Hardware Specifications SPECIFICATION Dimensions DESCRIPTION Standard 19" rack mountable Weight Power Specification 438 mm (W) x 425 mm (D) x 44.45 mm (H) 5.4 Kg AC mini-GBIC port: 1~48 Operating Environment Storage Environment steady XGS4700-48F User's Guide 455
  • ZyXEL XGS4700-48F | User Guide - Page 456
    Firmware service provider to provide different service supports IGMP snooping enabling group multicast traffic to be only forwarded to ports that are members of that group; thus allowing you to significantly reduce multicast traffic passing through your Switch. 456 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 457
    3 switch that runs both the IPv4 protocol (with IP Multicast support) and the IGMP protocol. Virtual Router Redundancy Protocol (VRRP), defined in RFC 2338, allows you to create redundant backup gateways to ensure that the default gateway of a host is always available. XGS4700-48F User's Guide 457
  • ZyXEL XGS4700-48F | User Guide - Page 458
    and Accounting The Switch supports authentication, authorization and accounting services via RADIUS and TACACS+ messages and send it to a syslog server. Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator, CLI 458 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 459
    Chapter 55 Product Specifications Table 170 Firmware Specifications (continued) FEATURE DESCRIPTION CPU Protection You can limit the rate of protocol control packets ( forward packets destined to the same device through different routing paths of equal path cost. XGS4700-48F User's Guide 459
  • ZyXEL XGS4700-48F | User Guide - Page 460
    (mapping) Supports IEEE 802.3ad; static and dynamic (LACP) port trunking 24 groups (up to 8 ports each) All ports support port mirroring Support port mirroring per IP/TCP/UDP Supports rate limiting at 64K increment Supports CIR/PIR for ingress bandwidth control 460 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 461
    V1/V2/V3 ECMP IP services Static Routing DHCP relay; VLAN based DHCP server/relay DHCP Snooping Policy routing Load sharing Filtering Multicast 64 VRRP entries Support L2 MAC filtering, L3 IGMP snooping statistics AAA IGMP throttling Support RADIUS and TACACS+ XGS4700-48F User's Guide 461
  • ZyXEL XGS4700-48F | User Guide - Page 462
    The following list, which is not exhaustive, illustrates the standards supported in the Switch. Table 172 Standards Supported STANDARD DESCRIPTION RFC 826 Address Resolution Protocol (ARP) RFC RFC 1213 SNMP MIB II RFC 1305 Network Time Protocol (NTP version 3) 462 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 463
    Product Specifications Table 172 Standards Supported (continued) STANDARD RFC 1441 Protocol (DHCP) RADIUS (Remote Authentication Dial In User Service) RADIUS Accounting Internet Group Management Protocol, Version 2. Virtual Simple Network Management Protocol (SNMP) XGS4700-48F User's Guide 463
  • ZyXEL XGS4700-48F | User Guide - Page 464
    Chapter 55 Product Specifications 464 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 465
    by ICQ. Authentication protocol used by some servers. Border Gateway Protocol. DHCP Client. DHCP Server. A popular videoconferencing solution from White Pines Software. Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. XGS4700-48F User's Guide 465
  • ZyXEL XGS4700-48F | User Guide - Page 466
    transparent file sharing for network environments. Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service. Packet INternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable. 466 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 467
    transfer of data over public networks. This is the data channel. Remote Command Service. A streaming audio service that enables real time sound over the web. Remote Execution Daemon. Remote Login Host Protocol used for (Terminal Access Controller Access Control System). XGS4700-48F User's Guide 467
  • ZyXEL XGS4700-48F | User Guide - Page 468
    Table 173 Commonly Used Services (continued) NAME TELNET TFTP VDOLIVE PROTOCOL TCP UDP TCP PORT(S) 23 69 7000 DESCRIPTION Telnet is the , but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). Another videoconferencing solution. 468 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 469
    photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does two conditions: • This device may not cause harmful interference. XGS4700-48F User's Guide 469
  • ZyXEL XGS4700-48F | User Guide - Page 470
    can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this device in a residential area 1040.11. PRODUIT CONFORME SELON 21 CFR 1040.10 ET 1040.11. 470 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 471
    any kind to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 472
    /1/24 WEEE Direktiv 2002/96/EC (WEEE: hantering av elektriskt och elektroniskt avfall) 2008/34/EC Deklaration undertecknad av: Namn/Titel: Raymond Huang / Quality & Customer Service Division Assistant VP Datum (åååå/mm/dd): 2011/1/24 472 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 473
    Appendix B Legal Information XGS4700-48F User's Guide 473
  • ZyXEL XGS4700-48F | User Guide - Page 474
    Appendix B Legal Information 474 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 475
    802.1P priority 117 A access control limitations 395 login account 407 remote management 417 service port 416 SNMP 396 accounting setup 251 address learning, MAC 129, 131 Address Resolution 119 changing the password 61 Cisco Discovery Protocol, see CDP CIST 154 XGS4700-48F User's Guide 475
  • ZyXEL XGS4700-48F | User Guide - Page 476
    -IEEE802.1p mapping 357 network example 352 PHB 351 dimensions 455 disclaimer 469 double-tagged frames 221 DR (Designated Router) 331 DS (Differentiated Services) 351 DSCP DSCP-to-IEEE802.1p mapping 357 service level 351 what it does 351 DSCP (DiffServ Code Point) 351 476 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 477
    469 file transfer using FTP command example 392 filename convention, configuration configuration file names 391 filtering 147 XGS4700-48F User's Guide rules 147 filtering database, MAC table 435 firmware 106 upgrade 389, 431 flow control 116 back pressure 116 IEEE802.3x 116 forwarding delay 165
  • ZyXEL XGS4700-48F | User Guide - Page 478
    port based 345 setup 346 version 229 version 3 345 versions supported 344 IGMP (Internet Group Management Protocol) 229, 344 IGMP introduction 27 IP capability 461 interface 113, 371 routing domain 113 services 461 setup 113 IP multicast example 343 IP source guard 261 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 479
    436 maintanence configuration backup 391 firmware 389 restoring configuration 390 maintenance 387 XGS4700-48F User's Guide Index current configuration 387 main screen 165 hops 165 metric 338 MGMT port 49 MIB and SNMP 396 supported MIBs 397 MIB (Management Information Base) 396 mini GBIC ports 41
  • ZyXEL XGS4700-48F | User Guide - Page 480
    321 cost savings 321 load sharing 321 overview 321 policy-based routing 321 Port Aggregation Protocol, see PAgP port authentication 189 and RADIUS 247 480 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 481
    50 power specification 455 power status 107 Power Wires 50 PPPoE IA 80 trusted ports 303 untrusted ports 303 priority level 112 XGS4700-48F User's Guide Index priority, and OSPF 331 priority, queue assignment 112 product registration 471 Protective Earthing Terminal 36 protocol based VLAN 130 and
  • ZyXEL XGS4700-48F | User Guide - Page 482
    configuration 62, 388 Secure Shell See SSH security 461 service access control 416 service port 417 sFlow 297 collector 299 configuration 298 datagram users 405 version 3 and security 397 versions supported 396 SNMP traps 398 supported 398, 399, 401 source-based routing 321 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 483
    424 setup 424 severity levels 423 system information 106 system log 421 system reboot 389 XGS4700-48F User's Guide Index T TACACS+ 246 setup 249 TACACS+ (Terminal Access Controller AccessControl System Plus) (TRTCM) 352 Two Rate Three Color Marker, see TRTCM 352 Type of Service (ToS) 351 483
  • ZyXEL XGS4700-48F | User Guide - Page 484
    370 uplink gateway 374 uplink status 371 Virtual Router 369 Virtual Router ID 374 VRID 370 VSA 254 VTP 296 W warranty 471 note 471 484 XGS4700-48F User's Guide
  • ZyXEL XGS4700-48F | User Guide - Page 485
    64 navigation panel 58 weight, queuing 218 Weighted Round Robin Scheduling (WRR) 218 WFQ (Weighted Fair Queuing) 218 WRR (Weighted Round Robin Scheduling 218 Z ZyNOS (ZyXEL Network Operating System) 392 Index XGS4700-48F User's Guide 485
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
www.zyxel.com
www.zyxel.com
XGS4700-48F
Layer 3 Managed Stackable Gigabit Ethernet Switch
Copyright © 2011
ZyXEL Communications Corporation
Firmware Version 4.00
Edition 1, 04/2011
Default Login Details
IP Address
(Out-of-band
MGMT port)
(In-band ports)
User Name
admin
Password
1234