Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications gs2200-48 manual 148

1 352

Download 352 pages, 6.95 Mb

Chapter 17 Port Security

148
148	GS2200-48 User’s Guide

Contents

Default Login Details www.zyxel.com Page About This User's Guide Page Document Conventions Page Safety Warnings Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Part VI: Product Specifications Part VII: Appendices and Index PART Introduction Page Getting to Know Your Switch 1.1 Introduction 1.1.1 Bridging Example 1.1.2 High Performance Switching Example 1.1.3 Gigabit Ethernet to the Desktop 1.1.4 IEEE 802.1Q VLAN Application Example 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Page Page Hardware Installation and Connection 2.1 Freestanding Installation 2.2 Mounting the Switch on a Rack 2.2.1Rack-mountedInstallation Requirements 2.2.2Attaching the Mounting Brackets to the Switch 2.2.3Mounting the Switch on a Rack Page Hardware Overview 3.1 Front Panel Connections 3.1.1 1000Base-TPorts 3.1.2Dual Personality Interfaces 3.1.3 Mini-GBICSlots 3.1.3.1 Transceiver Installation 3.1.3.2 Transceiver Removal 3.2Rear Panel 3.2.1 Power Connector 3.2.2 External Backup Power Supply Connector 3.2.3 Console Port 3.3 LEDs Basic Configuration Page The Web Configurator 4.1 Introduction 4.2System Login 4.3The Status Screen Page Page Page Page 4.3.1 Change Your Password 4.4 Saving Your Configuration 4.5 Switch Lockout 4.6Resetting the Switch 4.6.1 Reload the Configuration File 4.7 Logging Out of the Web Configurator 4.8 Help Initial Setup Example 5.1 Overview 5.1.1Configuring an IP Interface Page 5.1.2Configuring DHCP Server Settings 5.1.3 Creating a VLAN Page 5.1.4Setting Port VID 5.1.5 Enabling RIP System Status and Port Statistics 6.1 Overview 6.2 Port Status Summary 6.2.1 Status: Port Details Page Page Page Basic Setting 7.1 Overview 7.2 System Information Page 7.3 General Setup Page 7.4 Introduction to VLANs 7.5 Switch Setup Screen Page 7.6 IP Setup 7.6.1 IP Interfaces Page 7.7 Port Setup Page Page Page ART Advanced Setup Page VLAN 8.1 Introduction to IEEE 802.1Q Tagged VLANs 8.1.1 Forwarding Tagged and Untagged Frames 8.2 Automatic VLAN Registration 8.2.1 GARP 8.2.2 GVRP 8.3 Port VLAN Trunking 8.4 Select the VLAN Type 8.5 Static VLAN 8.5.1 Static VLAN Status 8.5.2 Static VLAN Details 8.5.3 Configure a Static VLAN Page Page 8.5.4 Configure VLAN Port Settings 8.6 Subnet Based VLANs 8.7 Configuring Subnet Based VLAN Page 8.8 Protocol Based VLANs 8.9 Configuring Protocol Based VLAN Page 8.10 Create an IP-basedVLAN Example 8.11 Port-basedVLAN Setup 8.11.1 Configure a Port-basedVLAN Page Page Page Static MAC Forward Setup 9.1 Overview 9.2 Configuring Static MAC Forwarding Page Page Page Filtering 10.1 Configure a Filtering Rule Page Spanning Tree Protocol 11.1STP/RSTP Overview 11.1.1 STP Terminology 11.1.2 How STP Works 11.1.3 STP Port States 11.1.4 Multiple STP 11.1.4.2 MST Region 11.1.4.3MST Instance 11.1.4.4 Common and Internal Spanning Tree (CIST) 11.2 Spanning Tree Protocol Status Screen 11.3 Spanning Tree Configuration 11.4 Configure Rapid Spanning Tree Protocol Page 11.5 Rapid Spanning Tree Protocol Status Page 11.6 Configure Multiple Spanning Tree Protocol Page Page 11.7 Multiple Spanning Tree Protocol Status Page Page Page Bandwidth Control 12.1 Bandwidth Control Overview 12.1.1 CIR and PIR 12.2 Bandwidth Control Setup Page Page Broadcast Storm Control 13.1 Broadcast Storm Control Setup Page Mirroring 14.1 Port Mirroring Setup Page Link Aggregation 15.1 Link Aggregation Overview 15.2 Dynamic Link Aggregation 15.2.1 Link Aggregation ID 15.3 Link Aggregation Status Page 15.4 Link Aggregation Setting 15.5 Link Aggregation Control Protocol 15.6 Static Trunking Example Page Page Port Authentication 16.1 Port Authentication Overview 16.1.1 IEEE 802.1x Authentication 16.1.2 MAC Authentication 16.2 Port Authentication Configuration 16.2.1 Activate IEEE 802.1x Security 16.2.2 Activate MAC Authentication Page Port Security 17.1 About Port Security 17.2 Port Security Setup Page Page Classifier 18.1 About the Classifier and QoS 18.2Configuring the Classifier Page Page 18.3Viewing and Editing Classifier Configuration Page Page 18.4 Classifier Example Page Policy Rule 19.1 Policy Rules Overview 19.1.1 DiffServ 19.1.2 DSCP and Per-HopBehavior 19.2 Configuring Policy Rules Page Page 19.3 Viewing and Editing Policy Configuration Page 19.4 Policy Example Page Queuing Method 20.1 Queuing Method Overview 20.1.1 Strictly Priority 20.1.2 Weighted Fair Queuing 20.1.3 Weighted Round Robin Scheduling (WRR) 20.2 Configuring Queuing Page VLAN Stacking 21.1 VLAN Stacking Overview 21.1.1 VLAN Stacking Example 21.2 VLAN Stacking Port Roles 21.3 VLAN Tag Format 21.3.1 Frame Format Page 21.4 Configuring VLAN Stacking Page Multicast 22.1 Multicast Overview 22.1.1 IP Multicast Addresses 22.1.2 IGMP Filtering 22.1.3 IGMP Snooping 22.2 Multicast Status 22.3 Multicast Setting Page 22.4 IGMP Snooping VLAN Page 22.5 IGMP Filtering Profile Page 22.6 MVR Overview 22.6.1 Types of MVR Ports 22.6.2 MVR Modes 22.6.3 How MVR Works 22.7 General MVR Configuration Page 22.8 MVR Group Configuration 22.8.1 MVR Configuration Example Page Page Authentication & Accounting 23.1Authentication, Authorization and Accounting 23.1.1 Local User Accounts 23.1.2RADIUS and TACACS+ 23.2 Authentication and Accounting Screens 23.2.1 RADIUS Server Setup Page 23.2.2 TACACS+ Server Setup Page 23.2.3 Authentication and Accounting Setup Page 23.2.4 Vendor Specific Attribute 23.2.5 Tunnel Protocol Attribute 23.3 Supported RADIUS Attributes 23.3.1 Attributes Used for Authentication 23.3.2Attributes Used for Accounting 23.3.2.2 Attributes Used for Accounting Exec Events 23.3.2.3 Attributes Used for Accounting IEEE 802.1x Events Page IP Source Guard 24.1 IP Source Guard Overview 24.1.1 DHCP Snooping Overview 24.1.1.3 DHCP Relay Option 82 Information 24.1.1.4 Configuring DHCP Snooping 24.1.2 ARP Inspection Overview 24.2IP Source Guard 24.3 IP Source Guard Static Binding Page Page 24.4 DHCP Snooping Page Page Page 24.5 DHCP Snooping Configure Page 24.5.1 DHCP Snooping Port Configure 24.5.2 DHCP Snooping VLAN Configure Page 24.6 ARP Inspection Status 24.6.1 ARP Inspection VLAN Status 24.6.2 ARP Inspection Log Status 24.7 ARP Inspection Configure Page 24.7.1 ARP Inspection Port Configure Page 24.7.2 ARP Inspection VLAN Configure Page Loop Guard 25.1 Loop Guard Overview Page 25.2 Loop Guard Setup Page IP Application Page Static Routing 26.1 Configuring Static Routing Page RIP 27.1 RIP Overview 27.2 Configuring RIP Page Differentiated Services 28.1 DiffServ Overview 28.1.1 DSCP and Per-HopBehavior 28.1.2 DiffServ Network Example 28.2Two Rate Three Color Marker Traffic Policing 28.2.1 TRTCM - Color-blindMode 28.2.2 TRTCM - Color-awareMode 28.3 Activating DiffServ 28.3.1 Configuring 2-Rate3 Color Marker Settings Page 28.4 DSCP-to-IEEE802.1p Priority Settings 28.4.1 Configuring DSCP Settings DHCP 29.1 DHCP Overview 29.1.1 DHCP Modes 29.1.2DHCP Configuration Options 29.2DHCP Status 29.3 DHCP Server Status Detail Page 29.4 DHCP Relay 29.4.1 DHCP Relay Agent Information 29.4.2 Configuring DHCP Global Relay 29.4.3 Global DHCP Relay Configuration Example 29.5 Configuring DHCP VLAN Settings Page 29.5.1 Example: DHCP Relay for Two VLANs Page VRRP 30.1 VRRP Overview 30.2 VRRP Status 30.3 VRRP Configuration 30.3.1 IP Interface Setup Page 30.3.2 VRRP Parameters 30.3.3 Configuring VRRP Parameters 30.3.4 Configuring VRRP Parameters 30.4 VRRP Configuration Examples 30.4.1 One Subnet Network Example 30.4.2 Two Subnets Example Page Management Page Maintenance 31.1 The Maintenance Screen 31.2 Load Factory Default 31.3 Save Configuration 31.4 Reboot System 31.5Firmware Upgrade 31.6 Restore a Configuration File 31.7 Backup a Configuration File 31.8FTP Command Line 31.8.1 Filename Conventions 31.8.2 FTP Command Line Procedure 31.8.3 GUI-basedFTP Clients 31.8.4 FTP Restrictions Page Access Control 32.1 Access Control Overview 32.2 The Access Control Main Screen 32.3 About SNMP 32.3.1 SNMP v3 and Security 32.3.2 Supported MIBs 32.3.3 SNMP Traps Page Page 32.3.4 Configuring SNMP Page Page 32.3.5 Configuring SNMP Trap Group 32.3.6 Setting Up Login Accounts Page 32.4 SSH Overview 32.5 How SSH works 32.6SSH Implementation on the Switch 32.6.1 Requirements for Using SSH 32.7 Introduction to HTTPS 32.8 HTTPS Example 32.8.1 Internet Explorer Warning Messages 32.8.2 Netscape Navigator Warning Messages Page 32.8.3 The Main Screen 32.9 Service Port Access Control 32.10 Remote Management Page Diagnostic 33.1 Diagnostic Page Syslog 34.1 Syslog Overview 34.2 Syslog Setup 34.3 Syslog Server Setup Page Cluster Management 35.1 Clustering Management Status Overview 35.2 Cluster Management Status 35.2.1 Cluster Member Switch Management Page 35.2.1.1 Uploading Firmware to a Cluster Member Switch 35.3 Clustering Management Configuration Page Page MAC Table 36.1 MAC Table Overview 36.2 Viewing the MAC Table Page Page IP Table 37.1 IP Table Overview 37.2 Viewing the IP Table Page Page ARP Table 38.1 ARP Table Overview 38.1.1 How ARP Works 38.2 Viewing the ARP Table Routing Table 39.1 Overview 39.2 Viewing the Routing Table Status Page Configure Clone 40.1 Configure Clone Page Product Specifications Page Product Specifications Page Page Page Page Page Page Page Appendices and Index Page Copyright Certifications Page ZyXEL Limited Warranty Page Index