Home » ZyXEL Manuals » Hubs & Switches » ZyXEL XS3800-28 » Manual Viewer

ZyXEL XS3800-28 User Guide - Page 405

BPDU Guard Overview, BPDU Guard Status

Add to My Manuals
Save this manual to your list of manuals

Page 405 highlights

CHAPTER 39 BPDU Guard 39.1 BPDU Guard Overview A BPDU (Bridge Protocol Data Units) is a data frame that contains information about STP. STP-aware switches exchange BPDUs periodically. The BPDU guard feature allows you to prevent any new STP-aware switch from connecting to an existing network and causing STP topology changes in the network. If there is any BPDU detected on the port(s) on which BPDU guard is enabled, the Switch disables the port(s) automatically. You can then enable the port(s) manually in the Basic Setting > Port Setup screen (Section 8.5 on page 94) or use the Errdisable Recovery screen (see Section 33.6 on page 359) to have the port(s) become active after a certain time interval. 39.1.1 What You Can Do • Use the BPDU Guard Status screen (Section 39.2 on page 405) to view the BPDU guard status. • Use the BPDU Guard Configuration screen (Section 39.3 on page 407) to enable BPDU guard on the Switch. 39.2 BPDU Guard Status Use this screen to view whether BPDU guard is enabled on the Switch and the port status. Click Advanced Application > BPDU Guard in the navigation panel. XS3800-28 User's Guide 405

Section	Page
XS3800-28	1
Contents Overview	3
Table of Contents	5
User’s Guide	21
Getting to Know Your Switch	22
1.1 Introduction	22
1.1.1 Multi-Gigabit	23
1.1.2 Stacking Mode	24
1.1.3 Management Method	25
1.1.4 Management Modes	25
1.1.5 Mode Changing	26
1.1.6 ZON Utility	27
1.2 Applications	28
1.2.1 Bridging Example	28
1.2.2 High Performance Switching Example	28
1.2.3 IEEE 802.1Q VLAN Application Example	29
1.2.4 IPv6 Support	30
1.3 Ways to Manage the Switch	30
1.4 Good Habits for Managing the Switch	31
Hardware Installation and Connection	32
2.1 Freestanding Installation	32
2.2 Rack Mounting	33
2.2.1 Installation Requirements	33
2.2.2 Attaching the Mounting Brackets to the Switch	33
2.2.3 Mounting the Switch on a Rack	34
Hardware Overview	35
3.1 Front Panel Connections	35
3.1.1 SFP/SFP+ Slots	36
3.1.2 Ethernet Ports	37
3.1.3 Dual Personality Interfaces	38
3.1.4 Management Port	38
3.1.5 Console Port	38
3.2 Rear Panel	39
3.2.1 Grounding	39
3.2.2 AC Power Connection	40
3.3 LEDs	40
The Web Configurator	43
4.1 Introduction	43
4.2 System Login	43
4.3 Zyxel One Network (ZON) Utility	46
4.3.1 Requirements	46
4.3.2 Run the ZON Utility	47
4.4 The Web Configurator Layout	50
4.4.1 Change Your Password	55
4.5 Saving Your Configuration	56
4.6 Switch Lockout	56
4.7 Resetting the Switch	57
4.7.1 Using the RESTORE Button	57
4.7.2 Reload the Configuration File	57
4.8 Logging Out of the Web Configurator	58
4.9 Help	58
Initial Setup Example	59
5.1 Overview	59
5.1.1 Creating a VLAN	59
5.1.2 Setting Port VID	60
5.1.3 Configuring Switch Management IP Address	61
Tutorials	63
6.1 Overview	63
6.2 How to Use DHCPv4 Snooping on the Switch	63
6.3 How to Use DHCPv4 Relay on the Switch	66
6.3.1 DHCP Relay Tutorial Introduction	67
6.3.2 Creating a VLAN	67
6.3.3 Configuring DHCPv4 Relay	69
6.3.4 Troubleshooting	70
6.4 How to Use Auto Configuration via a DHCP Server on the Switch	70
Technical Reference	74
Status	75
7.1 Overview	75
7.2 Status	75
7.3 Neighbor Screen	77
Basic Setting	79
8.1 System Information	79
8.1.1 System Information Stacking Hardware Monitor	82
8.2 General Setup	84
8.3 Switch Setup	86
8.3.1 Introduction to VLANs	86
8.4 IP Setup	89
8.4.1 IP Interfaces	89
8.4.2 IP Status Details	90
8.4.3 IP Configuration	91
8.5 Port Setup	94
8.6 Interface Setup	97
8.7 IPv6	98
8.7.1 IPv6 Interface Status	98
8.7.2 IPv6 Configuration	100
8.7.3 IPv6 Global Setup	101
8.7.4 IPv6 Interface Setup	102
8.7.5 IPv6 Link-Local Address Setup	103
8.7.6 IPv6 Global Address Setup	103
8.7.7 IPv6 Neighbor Discovery Setup	104
8.7.8 IPv6 Router Discovery Setup	105
8.7.9 IPv6 Prefix Setup	107
8.7.10 IPv6 Neighbor Setup	108
8.7.11 DHCPv6 Client Setup	109
8.8 Stacking	111
8.8.1 Stacking Status	112
8.8.2 Stacking Slot	113
8.8.3 Stacking Configuration	114
8.9 DNS	116
8.10 Cloud Management	117
8.10.1 Nebula Center Control Discovery	117
8.10.2 Nebula Switch Registration	118
VLAN	119
9.1 Introduction to IEEE 802.1Q Tagged VLANs	119
9.1.1 Forwarding Tagged and Untagged Frames	119
9.2 Automatic VLAN Registration	120
9.2.1 GARP	120
9.2.2 GVRP	120
9.3 Port VLAN Trunking	121
9.4 Select the VLAN Type	121
9.5 802.1Q Static VLAN	121
9.5.1 VLAN Status	122
9.5.2 VLAN Details	123
9.6 Private VLAN Status	124
9.7 VLAN Configuration	125
9.7.1 Configure a Static VLAN	125
9.7.2 Configure VLAN Port Settings	128
9.7.3 Subnet Based VLANs	130
9.7.4 Protocol Based VLANs	133
9.8 Voice VLAN	136
9.9 MAC Based VLAN	138
9.10 Port-based VLAN Setup	139
9.10.1 Configure a Port-based VLAN	139
Static MAC Forward Setup	143
10.1 Overview	143
10.2 Configuring Static MAC Forwarding	143
Static Multicast Forward Setup	146
11.1 Static Multicast Forwarding Overview	146
11.2 Configuring Static Multicast Forwarding	147
Filtering	150
12.1 Configure a Filtering Rule	150
Spanning Tree Protocol	152
13.1 Spanning Tree Protocol Overview	152
13.1.1 What You Need to Know	152
13.2 Spanning Tree Protocol Status Screen	154
13.3 Spanning Tree Configuration	155
13.4 Configure Rapid Spanning Tree Protocol	156
13.5 Rapid Spanning Tree Protocol Status	158
13.6 Configure Multiple Rapid Spanning Tree Protocol	160
13.7 Multiple Rapid Spanning Tree Protocol Status	163
13.8 Configure Multiple Spanning Tree Protocol	165
13.8.1 Multiple Spanning Tree Protocol Port Configuration	169
13.9 Multiple Spanning Tree Protocol Status	171
13.10 Technical Reference	175
13.10.1 MSTP Network Example	175
13.10.2 MST Region	176
13.10.3 MST Instance	176
13.10.4 Common and Internal Spanning Tree (CIST)	177
Bandwidth Control	178
14.1 Bandwidth Control Overview	178
14.1.1 CIR and PIR	178
14.2 Bandwidth Control Setup	178
Broadcast Storm Control	181
15.1 Broadcast Storm Control Setup	181
Mirroring	184
16.1 Port Mirroring	184
16.1.1 Local Port Mirroring	186
16.1.2 Remote Port Mirroring	188
16.1.3 Source	189
16.1.4 Destination	192
16.1.5 Connected Port	193
Link Aggregation	196
17.1 Link Aggregation Overview	196
17.2 Dynamic Link Aggregation	196
17.2.1 Link Aggregation ID	197
17.3 Link Aggregation Status	197
17.4 Link Aggregation Setting	198
17.5 Link Aggregation Control Protocol	201
17.6 Static Trunking Example	204
Port Authentication	206
18.1 Port Authentication Overview	206
18.1.1 IEEE 802.1x Authentication	206
18.1.2 MAC Authentication	207
18.2 Port Authentication Configuration	208
18.2.1 Activate IEEE 802.1x Security	208
18.2.2 Guest VLAN	211
18.2.3 Activate MAC Authentication	213
18.3 Technical Reference	216
18.3.1 IEEE 802.1x	216
18.3.2 RADIUS	217
18.3.3 EAP (Extensible Authentication Protocol) Authentication	218
18.3.4 EAPOL (EAP over LAN)	219
Port Security	220
19.1 About Port Security	220
19.2 Port Security Setup	220
19.3 VLAN MAC Address Limit	222
Time Range	225
20.1 About Time Range	225
20.2 Time Range Setup	225
Classifier	227
21.1 About the Classifier and QoS	227
21.2 Classifier Status	227
21.3 Classifier Configuration	228
21.3.1 Viewing and Editing Classifier Configuration	232
21.4 Classifier Global Setting Configuration	233
21.5 Classifier Example	234
Policy Rule	236
22.1 Policy Rules Overview	236
22.1.1 DiffServ	236
22.1.2 DSCP and Per-Hop Behavior	236
22.2 Configuring Policy Rules	236
22.3 Policy Example	239
Queuing Method	241
23.1 Queuing Method Overview	241
23.1.1 Strictly Priority	241
23.1.2 Weighted Fair Queuing	241
23.1.3 Weighted Round Robin Scheduling (WRR)	241
23.2 Configuring Queuing	242
VLAN Stacking	245
24.1 VLAN Stacking Overview	245
24.1.1 VLAN Stacking Example	245
24.2 VLAN Stacking Port Roles	246
24.3 VLAN Tag Format	246
24.3.1 Frame Format	247
24.4 Configuring VLAN Stacking	247
24.4.1 Port-based Q-in-Q	249
24.4.2 Selective Q-in-Q	251
Multicast	254
25.1 Multicast Overview	254
25.1.1 IP Multicast Addresses	254
25.1.2 IGMP Filtering	254
25.1.3 IGMP Snooping	255
25.1.4 IGMP Snooping and VLANs	255
25.1.5 MLD Snooping-Proxy	255
25.1.6 MLD Messages	256
25.2 Multicast Setup	256
25.3 IPv4 Multicast Status	257
25.3.1 IGMP Snooping	257
25.3.2 IGMP Snooping VLAN	261
25.3.3 IGMP Filtering Profile	262
25.4 IPv6 Multicast Status	263
25.4.1 MLD Snooping-proxy	264
25.4.2 MLD Snooping-proxy VLAN	264
25.4.3 MLD Snooping-proxy VLAN Port Role Setting	266
25.4.4 MLD Snooping-proxy Filtering	268
25.4.5 MLD Snooping-proxy Filtering Profile	270
25.5 MVR Overview	271
25.5.1 Types of MVR Ports	272
25.5.2 MVR Modes	272
25.5.3 How MVR Works	272
25.6 General MVR Configuration	273
25.6.1 MVR Group Configuration	276
25.6.2 MVR Configuration Example	278
AAA	280
26.1 Authentication, Authorization and Accounting (AAA)	280
26.1.1 Local User Accounts	280
26.1.2 RADIUS and TACACS+	280
26.2 AAA Screens	281
26.2.1 RADIUS Server Setup	281
26.2.2 TACACS+ Server Setup	283
26.2.3 AAA Setup	284
26.2.4 Vendor Specific Attribute	287
26.2.5 Tunnel Protocol Attribute	288
26.3 Supported RADIUS Attributes	288
26.3.1 Attributes Used for Authentication	289
26.3.2 Attributes Used for Accounting	289
IP Source Guard	292
27.1 IP Source Guard Overview	292
27.1.1 What You Can Do	292
27.1.2 What You Need to Know	293
27.2 IP Source Guard	294
27.3 IPv4 Source Guard Setup	295
27.4 IPv4 Source Guard Static Binding	295
27.5 DHCP Snooping	298
27.6 DHCP Snooping Configure	300
27.6.1 DHCP Snooping Port Configure	302
27.6.2 DHCP Snooping VLAN Configure	304
27.6.3 DHCP Snooping VLAN Port Configure	305
27.7 ARP Inspection Status	306
27.7.1 ARP Inspection VLAN Status	307
27.7.2 ARP Inspection Log Status	308
27.8 ARP Inspection Configure	309
27.8.1 ARP Inspection Port Configure	310
27.8.2 ARP Inspection VLAN Configure	312
27.9 IPv6 Source Guard Overview	313
27.10 IPv6 Source Binding Status	314
27.11 IPv6 Static Binding Setup	315
27.12 IPv6 Source Guard Policy Setup	316
27.13 IPv6 Source Guard Port Setup	317
27.14 IPv6 Snooping Policy Setup	319
27.15 IPv6 Snooping VLAN Setup	320
27.16 IPv6 DHCP Trust Setup	321
27.17 Technical Reference	323
27.17.1 DHCP Snooping Overview	323
27.17.2 ARP Inspection Overview	325
Loop Guard	327
28.1 Loop Guard Overview	327
28.2 Loop Guard Setup	328
VLAN Mapping	331
29.1 VLAN Mapping Overview	331
29.1.1 VLAN Mapping Example	331
29.2 Enabling VLAN Mapping	331
29.3 Configuring VLAN Mapping	333
Layer 2 Protocol Tunneling	335
30.1 Layer 2 Protocol Tunneling Overview	335
30.1.1 Layer-2 Protocol Tunneling Mode	336
30.2 Configuring Layer 2 Protocol Tunneling	336
sFlow	340
31.1 sFlow Overview	340
31.2 sFlow Port Configuration	340
31.2.1 sFlow Collector Configuration	342
PPPoE	344
32.1 PPPoE Intermediate Agent Overview	344
32.1.1 PPPoE Intermediate Agent Tag Format	344
32.1.2 Sub-Option Format	344
32.1.3 Port State	345
32.2 The PPPoE Screen	346
32.3 PPPoE Intermediate Agent	346
32.3.1 PPPoE IA Per-Port	348
32.3.2 PPPoE IA Per-Port Per-VLAN	350
32.3.3 PPPoE IA for VLAN	351
Error Disable	353
33.1 Error Disable Overview	353
33.1.1 CPU Protection Overview	353
33.1.2 Error-Disable Recovery Overview	353
33.1.3 What You Can Do	353
33.2 The Error Disable Screen	354
33.3 Error-Disable Status	354
33.4 CPU Protection Configuration	356
33.5 Error-Disable Detect Configuration	358
33.6 Error-Disable Recovery Configuration	359
MAC Pinning	361
34.1 MAC Pinning Overview	361
34.2 MAC Pinning Configuration	361
Private VLAN	364
35.1 Private VLAN Overview	364
35.1.1 Configuration	365
Green Ethernet	368
36.1 Green Ethernet Overview	368
36.2 Configuring Green Ethernet	368
Link Layer Discovery Protocol (LLDP)	371
37.1 LLDP Overview	371
37.2 LLDP-MED Overview	372
37.3 LLDP Screens	373
37.4 LLDP Local Status	374
37.4.1 LLDP Local Port Status Detail	376
37.5 LLDP Remote Status	379
37.5.1 LLDP Remote Port Status Detail	380
37.6 LLDP Configuration	386
37.6.1 LLDP Configuration Basic TLV Setting	388
37.6.2 LLDP Configuration Basic Org-specific TLV Setting	390
37.7 LLDP-MED Configuration	391
37.8 LLDP-MED Network Policy	393
37.9 LLDP-MED Location	394
Anti-Arpscan	399
38.1 Anti-Arpscan Overview	399
38.1.1 What You Can Do	399
38.1.2 What You Need to Know	399
38.2 Anti-Arpscan Status	400
38.3 Anti-Arpscan Host Status	401
38.4 Anti-Arpscan Trust Host	402
38.5 Anti-Arpscan Configure	402
BPDU Guard	405
39.1 BPDU Guard Overview	405
39.1.1 What You Can Do	405
39.2 BPDU Guard Status	405
39.3 BPDU Guard Configuration	407
OAM	409
40.1 OAM Overview	409
40.1.1 What You Can Do	409
40.2 OAM Status	409
40.2.1 OAM Details	411
40.3 OAM Configuration	415
40.4 OAM Remote Loopback	417
ZULD	419
41.1 ZULD Overview	419
41.1.1 What You Can Do	419
41.1.2 What You Need to Know	419
41.2 ZULD Status	420
41.3 ZULD Configuration	422
NLB	425
42.1 NLB Overview	425
42.1.1 What You Can Do	425
42.1.2 What You Need to Know	425
42.2 MAC Forwarding	426
42.3 IP Configuration	428
Wol Relay	430
43.1 Wol Relay Overview	430
43.2 Wol Relay	430
Static Route	432
44.1 Static Routing Overview	432
44.2 Static Routing	432
44.3 Configuring IPv4 Static Route	433
44.4 Configuring IPv6 Static Route	434
Policy Routing	436
45.1 Policy Route Overview	436
45.1.1 Benefits	436
45.2 Configuring Policy Routing Profile	436
45.2.1 Policy Routing Rule Configuration	437
Differentiated Services	440
46.1 DiffServ Overview	440
46.1.1 DSCP and Per-Hop Behavior	440
46.1.2 DiffServ Network Example	440
46.2 Activating DiffServ	441
46.3 DSCP-to-IEEE 802.1p Priority Settings	443
46.3.1 Configuring DSCP Settings	443
DHCP	445
47.1 DHCP Overview	445
47.1.1 DHCP Modes	445
47.1.2 DHCP Configuration Options	445
47.2 DHCP Configuration	445
47.3 DHCPv4 Status	446
47.3.1 DHCPv4 Server Status Detail	447
47.4 DHCPv4 Relay	447
47.4.1 DHCPv4 Relay Agent Information	448
47.4.2 DHCPv4 Option 82 Profile	449
47.4.3 Configure DHCPv4 Global Relay	450
47.4.4 DHCPv4 Global Relay Port Configure	451
47.4.5 Global DHCP Relay Configuration Example	452
47.5 Configure DHCPv4 VLAN Settings	452
47.5.1 DHCPv4 VLAN Port Configure	454
47.5.2 Example: DHCP Relay for Two VLANs	456
47.6 DHCPv6 Status	457
47.7 DHCPv6 Information	457
47.8 DHCPv6 Prefix Delegation	459
47.9 DHCPv6 Relay	460
VRRP	463
48.1 VRRP Overview	463
48.2 VRRP Status	464
48.3 VRRP Configuration	464
48.3.1 IP Interface Setup	464
48.3.2 VRRP Parameters	466
48.3.3 Configuring VRRP Parameters	466
48.3.4 Viewing VRRP Summary	467
48.4 VRRP Configuration Examples	468
48.4.1 One Subnet Network Example	468
48.4.2 Two Subnets Example	469
Router Setup	472
49.1 Router Setup Overview	472
49.2 Configuring Router Setup	472
ARP Setup	474
50.1 ARP Overview	474
50.1.1 How ARP Works	474
50.1.2 ARP Learning Mode	474
50.2 ARP Setup	476
50.2.1 ARP Learning	476
50.2.2 Static ARP	478
Maintenance	480
51.1 The Maintenance Screen	480
51.2 Erase Running-Configuration	481
51.3 Save Configuration	482
51.4 Reboot System	482
51.4.1 Stacking Default	483
51.4.2 Factory Default	483
51.4.3 Custom Default	484
51.5 Firmware Upgrade	484
51.6 Restore Configuration	486
51.7 Backup Configuration	487
51.8 Auto Configuration	488
51.9 Tech-Support	489
51.10 Certificates	490
51.10.1 HTTPS Certificates	491
51.11 FTP Command Line	492
51.11.1 Filename Conventions	492
51.11.2 FTP Command Line Procedure	493
51.11.3 GUI-based FTP Clients	494
51.11.4 FTP Restrictions	494
Access Control	495
52.1 Access Control Overview	495
52.1.1 What You Can Do	495
52.2 The Access Control Main Screen	495
52.3 About SNMP	496
52.3.1 SNMP v3 and Security	497
52.3.2 Supported MIBs	497
52.3.3 SNMP Traps	497
52.3.4 Configuring SNMP	501
52.3.5 Configuring SNMP Trap Group	503
52.3.6 Enabling/Disabling Sending of SNMP Traps on a Port	503
52.3.7 Configuring SNMP User	505
52.4 Set Up Login Accounts	507
52.5 SSH Overview	508
52.6 How SSH works	508
52.7 SSH Implementation on the Switch	509
52.7.1 Requirements for Using SSH	510
52.8 Introduction to HTTPS	510
52.9 HTTPS Example	511
52.9.1 Internet Explorer Warning Messages	511
52.9.2 Mozilla Firefox Warning Messages	512
52.9.3 Google Chrome Warning Messages	514
52.9.4 The Main Screen	514
52.10 Service Access Control	515
52.11 Remote Management	516
Diagnostic	518
53.1 Diagnostic	518
System Log	522
54.1 Overview	522
54.2 System Log	522
Syslog Setup	523
55.1 Syslog Overview	523
55.2 Syslog Setup	523
Cluster Management	526
56.1 Cluster Management Status Overview	526
56.2 Cluster Management Status	527
56.2.1 Cluster Member Switch Management	527
56.3 Clustering Management Configuration	529
MAC Table	531
57.1 MAC Table Overview	531
57.2 Viewing the MAC Table	532
IP Table	534
58.1 IP Table Overview	534