Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications GS2200-24 manual 174

1 360

Download 360 pages, 7.84 Mb

Chapter 19 Port Security

174
174	GS2200-24 User’s Guide

Contents

Default Login Details www.zyxel.com Page About This User's Guide Page Document Conventions Page Safety Warnings Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Part VI: Troubleshooting & Product Specifications Part VII: Appendices and Index PART Introduction and Hardware Page Getting to Know Your Switch 1.1 Introduction 1.1.1 Backbone Application 1.1.2 Bridging Example 1.1.3 High Performance Switching Example 1.1.4 IEEE 802.1Q VLAN Application Examples 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Page Page Hardware Installation and Connection 2.1 Installation Scenarios 2.2 Desktop Installation Procedure 2.3Mounting the Switch on a Rack 2.3.1Rack-mountedInstallation Requirements 2.3.2Attaching the Mounting Brackets to the Switch 2.3.3Mounting the Switch on a Rack Page Hardware Panels 3.1 Overview 3.2 Front Panels Page 3.2.1 Console Port 3.2.2 Gigabit Ethernet Ports 3.2.3 Mini-GBICSlots 3.2.3.1Transceiver Installation 3.2.3.2 Transceiver Removal 3.2.4Power Connector 3.3 LEDs Page Page Basic Configuration Page The Web Configurator 4.1 Overview 4.2System Login 4.3The Status Screen Page Page Page Page 4.3.1 Change Your Password 4.4 Saving Your Configuration 4.5 Switch Lockout 4.6Resetting the Switch 4.6.1 Reload the Configuration File 4.7Logging Out of the Web Configurator 4.8 Help Page Initial Setup Example 5.1 Overview 5.1.1Creating a VLAN Page 5.1.2 Setting Port VID 5.2 Configuring Switch Management IP Address Tutorials 6.1 Overview 6.2How to Use DHCP Snooping on the Switch Page Page Page 6.3 How to Use DHCP Relay on the Switch 6.3.1 DHCP Relay Tutorial Introduction 6.3.2 Creating a VLAN Page Page 6.3.3Configuring DHCP Relay 6.3.4Troubleshooting Page System Status and Port Statistics 7.1 Overview 7.1.1What You Can Do 7.2 Port Status Summary Page 7.2.1 Status: Port Details Page Page Basic Setting 8.1 Overview 8.1.1What You Can Do 8.2 System Information Page 8.3 General Setup Page 8.4 Introduction to VLANs 8.5 Switch Setup Screen 8.6 IP Setup 8.6.1 Management IP Addresses Page 8.7 Port Setup Page 8.8 PoE Status Page 8.8.1 PoE Setup Page Page Page ART Advanced Page VLAN 9.1 Overview 9.1.1What You Can Do 9.1.2What You Need to Know 9.1.2.1 Automatic VLAN Registration 9.1.2.2 Port VLAN Trunking 9.1.2.3 Select the VLAN Type 9.2 VLAN Status 9.2.1 VLAN Details 9.3 Configure a Static VLAN Page 9.4 Configure VLAN Port Settings 9.5 Subnet Based VLANs 9.5.1 Configuring Subnet Based VLAN Page 9.6 Protocol Based VLANs 9.6.1 Configuring Protocol Based VLAN Page 9.7 Port-basedVLAN Setup 9.7.1 Configure a Port-basedVLAN Page 9.8 Technical Reference 9.8.1 Create an IP-basedVLAN Example Page Static MAC Forward Setup 10.1 Overview 10.1.1 What You Can Do 10.2 Configuring Static MAC Forwarding Page Page Page Static Multicast Forward Setup 11.1 Overview 11.1.1 What You Can Do 11.1.2 What You Need To Know 11.2 Configuring Static Multicast Forwarding Page Page Filtering 12.1 Overview 12.1.1 What You Can Do 12.2 Configure a Filtering Rule Page Spanning Tree Protocol 13.1 Overview 13.1.1What You Can Do 13.1.2 What You Need to Know Page Page 13.2 Spanning Tree Protocol Status Screen 13.3 Spanning Tree Configuration 13.4 Configure Rapid Spanning Tree Protocol Page 13.5 Rapid Spanning Tree Protocol Status Page 13.6Configure Multiple Rapid Spanning Tree Protocol Page 13.7Multiple Rapid Spanning Tree Protocol Status Page 13.8 Configure Multiple Spanning Tree Protocol Page Page 13.9 Multiple Spanning Tree Protocol Status Page 13.10 Technical Reference 13.10.1 MSTP Network Example 13.10.2 MST Region 13.10.3MST Instance 13.10.4 Common and Internal Spanning Tree (CIST) Page Bandwidth Control 14.1 Overview 14.1.1 What You Can Do 14.2 Bandwidth Control Setup Page Page Broadcast Storm Control 15.1 Overview 15.1.1 What You Can Do 15.2 Broadcast Storm Control Setup Page Page Mirroring 16.1 Overview 16.1.1 What You Can Do 16.2 Port Mirroring Setup Page Page Link Aggregation 17.1 Overview 17.1.1What You Can Do 17.1.2What You Need to Know Page 17.2 Link Aggregation Status Page 17.3 Link Aggregation Setting Page 17.4 Link Aggregation Control Protocol 17.5 Technical Reference 17.5.1 Static Trunking Example Page Page Port Authentication 18.1 Overview 18.1.1What You Can Do 18.1.2What You Need to Know 18.2 Port Authentication Configuration 18.3 Activate IEEE 802.1x Security Page Port Security 19.1 Overview 19.1.1 What You Can Do 19.2 Port Security Setup Page Page Classifier 20.1 Overview 20.1.1 What You Can Do 20.1.2 What You Need to Know 20.2 Configuring the Classifier Page 20.2.1 Viewing and Editing Classifier Configuration Page 20.3 Classifier Example Policy Rule 21.1 Policy Rules Overview 21.1.1 What You Can Do 21.2 Configuring Policy Rules Page Page 21.2.1 Viewing and Editing Policy Configuration 21.3 Policy Example Page Queuing Method 22.1 Overview 22.1.1 What You Can Do 22.1.2 What You Need to Know 22.2 Configuring Queuing Page Page Multicast 23.1 Overview 23.1.1What You Can Do 23.1.2What You Need to Know 23.1.2.1 MVR Overview Page 23.2 Multicast Status 23.3 Multicast Setting Page Page 23.4 IGMP Snooping VLAN 23.5 IGMP Filtering Profile Page 23.6 The MVR Screen Page 23.6.1 MVR Group Configuration Page 23.6.2 MVR Configuration Example Page Page Page AAA 24.1 Overview 24.1.1What You Can Do 24.1.2What You Need to Know 24.2 AAA Screens 24.3 RADIUS Server Setup Page 24.4 TACACS+ Server Setup Page 24.5 AAA Setup Page 24.6 Technical Reference 24.6.1 Vendor Specific Attribute 24.6.1.1 Tunnel Protocol Attribute 24.6.2 Supported RADIUS Attributes 24.6.3 Attributes Used for Authentication Page IP Source Guard 25.1 Overview 25.1.1What You Can Do 25.1.2What You Need to Know 25.2 IP Source Guard 25.3 IP Source Guard Static Binding Page 25.4 DHCP Snooping Page Page 25.5 DHCP Snooping Configure Page 25.5.1 DHCP Snooping Port Configure 25.5.2 DHCP Snooping VLAN Configure Page 25.6 ARP Inspection Status 25.7 ARP Inspection VLAN Status 25.8 ARP Inspection Log Status 25.9 ARP Inspection Configure Page 25.9.1 ARP Inspection Port Configure Page 25.9.2 ARP Inspection VLAN Configure 25.10 Technical Reference 25.10.1 DHCP Snooping Overview 25.10.1.2DHCP Snooping Database 25.10.1.3 DHCP Relay Option 82 Information 25.10.1.4 Configuring DHCP Snooping 25.10.2 ARP Inspection Overview 25.10.2.2 Trusted vs. Untrusted Ports 25.10.2.3Syslog 25.10.2.4 Configuring ARP Inspection Page Loop Guard 26.1 Overview 26.1.1 What You Can Do 26.1.2 What You Need to Know Page 26.2 Loop Guard Setup Page Layer 2 Protocol Tunneling 27.1 Overview 27.1.1 What You Can Do 27.1.2 What You Need to Know 27.1.2.1 Layer 2 Protocol Tunneling Mode 27.2 Configuring Layer 2 Protocol Tunneling Page IP Application Page Static Route 28.1 Overview 28.1.1 What You Can Do 28.2 Configuring Static Routing Page Page Differentiated Services 29.1 Overview 29.1.1What You Can Do 29.1.2What You Need to Know Page 29.2 Activating DiffServ 29.3 DSCP-to-IEEE802.1p Priority Settings 29.3.1 Configuring DSCP Settings DHCP 30.1 DHCP Overview 30.1.1What You Can Do 30.1.2What You Need to Know Page 30.2 DHCP Status 30.3 Configuring DHCP Global Relay 30.3.1 Global DHCP Relay Configuration Example 30.4 Configuring DHCP VLAN Settings Page 30.4.1 Example: DHCP Relay for Two VLANs Page Management Page Maintenance 31.1 Overview 31.1.1What You Can Do 31.2 The Maintenance Screen 31.2.1 Load Factory Default 31.2.2 Save Configuration 31.2.3 Reboot System 31.3 Firmware Upgrade 31.4 Restore a Configuration File 31.5 Backup a Configuration File 31.6 Technical Reference 31.6.1 FTP Command Line 31.6.2 Filename Conventions 31.6.3 FTP Command Line Procedure 31.6.4 GUI-basedFTP Clients 31.6.5 FTP Restrictions Access Control 32.1 Overview 32.1.1What You Can Do 32.2 The Access Control Main Screen 32.3 Configuring SNMP Page Page 32.4 Configuring SNMP Trap Group 32.5 Setting Up Login Accounts 32.6 Service Port Access Control 32.7 Remote Management 32.8 Technical Reference 32.8.1 About SNMP Page Page Page Page Page 32.8.2 SSH Overview 32.8.2.1 How SSH works 32.8.3 Introduction to HTTPS 32.8.3.1 HTTPS Example Page 32.8.3.2 The Main Screen Page Diagnostic 33.1 Overview 33.2 Diagnostic Page Syslog 34.1 Overview 34.1.1What You Can Do 34.2 Syslog Setup 34.3 Syslog Server Setup Page Cluster Management 35.1 Overview 35.1.1What You Can Do 35.2 Cluster Management Status Page 35.3 Clustering Management Configuration Page 35.4 Technical Reference 35.4.1 Cluster Member Switch Management 35.4.1.1 Uploading Firmware to a Cluster Member Switch Page MAC Table 36.1 Overview 36.1.1 What You Can Do 36.1.2 What You Need to Know 36.2 Viewing the MAC Table Page Page ARP Table 37.1 Overview 37.1.1 What You Can Do 37.1.2 What You Need to Know 37.2 Viewing the ARP Table Configure Clone 38.1 Overview 38.2 Configure Clone Page Troubleshooting & Product Specifications Page Troubleshooting 39.1Power, Hardware Connections, and LEDs 39.2Switch Access and Login Page 39.3 Switch Configuration Product Specifications Page Page Page Page Page Page Page Appendices and Index Page Removing a Fuse Installing a Fuse Page Page Page Page Page Copyright Certifications Page ZyXEL Limited Warranty Page Index