Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications GS2210 24.6.2 Supported RADIUS Attributes, 24.6.1.1 Tunnel Protocol Attribute, FUNCTION, VLAN(13), ATTRIBUTE, Vendor-Id, Vendor-Id, Vendor-ID, Vendor-ID, Vendor-Type

1 387

Download 387 pages, 9.35 Mb

Chapter 24 AAA

The following table describes the VSAs supported on the Switch.Table 86 Supported VSAs

FUNCTION	ATTRIBUTE

Ingress Bandwidth	Vendor-Id =	890
Assignment	Vendor-Type	= 1
	Vendor-data	= ingress rate (Kbps in decimal format)
Egress Bandwidth	Vendor-Id =	890
Assignment	Vendor-Type	= 2
	Vendor-data	= egress rate (Kbps in decimal format)
Privilege Assignment	Vendor-ID =	890
	Vendor-Type	= 3
	Vendor-Data	= "shell:priv-lvl=N"
	or
	Vendor-ID =	9 (CISCO)
	Vendor-Type	= 1 (CISCO-AVPAIR)
	Vendor-Data	= "shell:priv-lvl=N"
	where N is a privilege level (from 0 to 14).
	Note: If you set the privilege level of a login account differently on the RADIUS server(s)
	and the Switch, the user is assigned a privilege level from the database
	(RADIUS or local) the Switch uses first for user authentication.

24.6.1.1 Tunnel Protocol Attribute

You can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.1x authentication. The port VLAN settings are fixed and untagged. This will also set the port’s VID. The following table describes the values you need to configure. Note that the bolded values in the table are fixed values as defined in RFC 3580.

Table 87 Supported Tunnel Protocol AttributeFUNCTIONATTRIBUTE

VLAN Assignment Tunnel-Type = VLAN(13)

Tunnel-Medium-Type = 802(6)Tunnel-Private-Group-ID = VLAN IDNote: You must also create a VLAN with the specified VID on the Switch.

24.6.2 Supported RADIUS Attributes

Remote Authentication Dial-In User Service (RADIUS) attributes are data used to define specific authentication elements in a user profile, which is stored on the RADIUS server. This appendix lists the RADIUS attributes supported by the Switch.

Refer to RFC 2865 for more information about RADIUS attributes used for authentication.

This section lists the attributes used by authentication functions on the Switch. In cases where the attribute has a specific format associated with it, the format is specified.

GS2210 Series User’s Guide

201

Contents

GS2210 Series Quick Start Guide User’s Guide Default Login Details IMPORTANT READ CAREFULLY BEFORE USE KEEP THIS GUIDE FOR FUTURE REFERENCE Related Documentation Note: It is recommended you use the Web Configurator to configure the Switch Contents Overview Filtering Policy Rule Static Route Differentiated Services Contents Overview Table of Contents Part I: User’s Guide Chapter The Web Configurator Basic Setting VLAN Rapid Spanning Tree Protocol Status Configure Multiple Rapid Spanning Tree Protocol Multiple Rapid Spanning Tree Protocol Status 13.10 Multiple Spanning Tree Protocol Status 13.11.4 Common and Internal Spanning Tree (CIST) Link Aggregation Control Protocol 20.2.1 Viewing and Editing Classifier Configuration 21.1.1 What You Can Do 21.2.1 Viewing and Editing Policy Configuration 22.1.1 What You Can Do 22.1.2 What You Need to Know 24.1.2 What You Need to Know 24.6.1 Vendor Specific Attribute 24.6.2 Supported RADIUS Attributes 24.6.3 Attributes Used for Authentication 25.1.1 What You Can Do 27.1.2 What You Need to Know 28.1.1 What You Can Do 28.1.2 What You Need to Know 28.2 The PPPoE Screen 28.3.1 PPPoE IA Per-Port 32.6.1 LLDP Configuration Basic TLV Setting 32.6.2 LLDP Configuration Basic Org-specificTLV Setting 33.1.1 What You Can Do 34.1.1 What You Can Do 34.1.2 What You Need to Know 38.3.1 Configuring SNMP Trap Group 38.3.2 Enabling/Disabling Sending of SNMP Traps on a Port 38.3.3 Configuring SNMP User Cluster Management MAC Table ARP Table Path MTU Table Page Page Getting to Know Your Switch 1.1 Introduction 1.1.1 Backbone Application 1.1.2 Bridging Example 1.1.3 High Performance Switching Example 1.1.4 IEEE 802.1Q VLAN Application Examples 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Page Hardware Installation and Connection 2.1 Installation Scenarios 2.2Desktop Installation Procedure 2.3Mounting the Switch on a Rack 2.3.1Rack-mountedInstallation Requirements 2.3.2Attaching the Mounting Brackets to the Switch 2.3.3Mounting the Switch on a Rack Page Hardware Panels 3.1 Front Panel 3.1.1 Gigabit Ethernet Ports 3.1.2 Mini-GBICSlots 4Close the transceiver’s latch (latch styles vary) Figure Figure 12 Connecting the Fiber Optic Cables 3.1.2.2Transceiver Removal Use the following steps to remove a mini-GBICtransceiver (SFP module) 1Remove the fiber optic cables from the transceiver 2Open the transceiver’s latch (latch styles vary) 3Pull the transceiver out of the slot 3.2 Rear Panel 3.2.1 Console Port 3.2.2 Power Connector 3.3 LEDs Page The Web Configurator 4.1 Overview 4.2System Login 4.3The Status Screen B FC D E D - Click this link to logout of the web configurator In the navigation panel, click a main link to reveal a list of submenu links Table 4 Navigation Panel Sub-linksOverview BASIC SETTING ADVANCED APPLICATION Table 5 Navigation Panel Links (continued) Port Setup PoE Setup For PoE model(s) reserve and allocate power to certain PDs 4.3.1 Change Your Password 4.4 Saving Your Configuration 4.5 Switch Lockout 4.6Resetting the Switch 4.6.1 Reload the Configuration File 4.7Logging Out of the Web Configurator 4.8 Help Initial Setup Example 5.1 Overview 5.1.1Creating a VLAN VLAN Group ID VID 5.1.2Setting Port VID 5.2Configuring Switch Management IP Address 3Click Basic Setting > IP Setup in the navigation panel in the navigation panel 4Configure the related fields in the IP Setup screen For the VID Tutorials 6.1 Overview 6.2How to Use DHCP Snooping on the Switch Tx Tagging Page Option82 Profile DHCP-Snooping 6.3 How to Use DHCP Relay on the Switch 6.3.1 DHCP Relay Tutorial Introduction 6.3.2 Creating a VLAN 802.1Q 3Click Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup VLAN Group ID TX Tagging Figure 36 Tutorial: Create a Static VLAN Click the VLAN Configuration Static VLAN Setup VLAN Port Setup 6.3.3Configuring DHCP Relay 6.3.4Troubleshooting ZON Utility, ZON Neighbor Management and Port Status 7.1 Overview 7.1.1What You Can Do 7.2 ZyXEL One Network (ZON) Utility Screen 7.3 ZON Neighbor Management Screen Figure 41 Status > Neighbor The following table describes the fields in the above screen Table 7 Status > Neighbor LABEL Local 7.4 Port Status Summary 7.4.1 Status: Port Details Figure 43 Status > Port Details Table 9 Status: Port Details Port Info Port NO This field displays the port number you are viewing Table 9 Status: Port Details (continued) This field shows the total amount of time the connection has been up Tx Packet The following fields display detailed information about packets transmitted Unicast 1024 and 1518 octets in length Giant 1519 octets and the maximum frame size The maximum frame size varies depending on your switch model Basic Setting 8.1 Overview 8.1.1What You Can Do 8.2 System Information Chapter 8 Basic Setting Figure 44 Basic Setting > System Info (for PoE model(s) only) Table 10 Basic Setting > System Info System Name Product Model 8.3 General Setup Table 11 Basic Setting > General Setup printable characters; spaces are allowed Location characters; spaces are allowed Contact Person's 8.4 Introduction to VLANs 8.5 Switch Setup Screen Figure 46 Basic Setting > Switch Setup Table 12 Basic Setting > Switch Setup VLAN Type Chapter 9 on page 86 for more information 8.6 IP Setup 8.6.1 Management IP Addresses Figure 47 Basic Setting > IP Setup Table 13 Basic Setting > IP Setup Domain Name Server use a domain name instead of an IP address 8.7 Port Setup Figure 48 Basic Setting > Port Setup Table 14 Basic Setting > Port Setup This is the port index number Settings in this row apply to all ports to set the common settings and then make adjustments on a port-by-portbasis 8.8 PoE Status PoE Setup Figure 50 Basic Setting > PoE Status Table 15 Basic Setting > PoE Status PoE Status PoE Mode 8.8.1 PoE Setup 8.9 Interface Setup 8.10 IPv6 8.10.1 IPv6 Interface Status Figure 54 Basic Setting > IPv6 > IPv6 Interface Status Table 19 Basic Setting > IPv6 > IPv6 Interface Status IPv6 Active MTU Size interface Table 19 Basic Setting > IPv6 > IPv6 Interface Status (continued) Global Unicast Address(es) Joined Group ND DAD 8.10.2 IPv6 Configuration 8.10.3 IPv6 Global Setup 8.10.4 IPv6 Interface Setup 8.10.5 IPv6 Link-LocalAddress Setup 8.10.6 IPv6 Global Address Setup 8.10.7 IPv6 Neighbor Discovery Setup 8.10.8 IPv6 Neighbor Setup 8.10.9 DHCPv6 Client Setup Table 27 Basic Setting > IPv6 > IPv6 Configuration > DHCPv6 Client Setup for this interface have it work well Options to have the Switch obtain a list of domain names from the DHCP server VLAN 9.1 Overview 9.1.1What You Can Do 9.1.2What You Need to Know Chapter 9 VLAN Forwarding Tagged and Untagged Frames 9.1.2.1 Automatic VLAN Registration GARP GARP Timers GVRP 9.1.2.2 Port VLAN Trunking VLAN Trunking 9.1.2.3 Select the VLAN Type 9.2 VLAN Status 9.2.1 VLAN Details 9.3 VLAN Configuration 9.4 Configure a Static VLAN Figure 68 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup The following table describes the related labels in this screen Table 32 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup ACTIVE Select this check box to activate the VLAN settings 9.5 Configure VLAN Port Settings 9.6 Subnet Based VLANs 9.6.1 Configuring Subnet Based VLAN Check this box to activate this subnet based VLANs on the Switch DHCP-Vlan Override VLAN or via another DHCP server on the subnet based VLAN through the DHCP VLAN 9.7 Protocol Based VLANs 9.7.1 Configuring Protocol Based VLAN Check this box to activate this protocol based VLAN Type a port to be included in this protocol based VLAN Chapter 9 on page 86 for more details on setting up VLANs Enter up to 32 alpha numeric characters to identify this protocol based VLAN Ethernet-type 9.8 Port-basedVLAN Setup Filtering 9.8.1 Configure a Port-basedVLAN Page Page 9.9 Voice VLAN Figure 76 Advanced Application > VLAN > VLAN Configuration > Voice VLAN Setup Table 37 Advanced Application > VLAN > VLAN Configuration > Voice VLAN Setup Voice VLAN Global Setup Voice VLAN Voice VLAN feature 9.10 MAC-basedVLAN 9.11 Technical Reference 9.11.1 Create an IP-basedVLAN Example Page Static MAC Forward Setup 10.1 Overview 10.1.1 What You Can Do 10.2 Configuring Static MAC Forwarding Chapter 10 Static MAC Forward Setup Table 39 Advanced Application > Static MAC Forwarding deleting it by clearing this check box rule Note: Static MAC addresses do not age out Static Multicast Forward Setup 11.1 Static Multicast Forward Setup Overview 11.1.1 What You Can Do 11.1.2 What You Need To Know 11.2 Configuring Static Multicast Forwarding Table 40 Advanced Application > Static Multicast Forwarding address forwarding rule. This is for identification only 00000001 is 01 and 00000011 is 03 in hexadecimal, so 01:00:5e:00:00:0A and 03:00:5e:00:00:27 are valid multicast MAC addresses VLAN, enter Filtering 12.1 Filtering Overview 12.1.1 What You Can Do 12.2 Configure a Filtering Rule Chapter 12 Filtering Table 41 Advanced Application > Filtering without deleting it by deselecting this check box identification only Action Spanning Tree Protocol 13.1 Spanning Tree Protocol Overview 13.1.1What You Can Do 13.1.2What You Need to Know Chapter 13 Spanning Tree Protocol STP Terminology The root bridge is the base of the spanning tree Table 42 STP Path Costs LINK SPEED RECOMMENDED VALUE STP Port States Table 43 STP Port States PORT STATE Disabled STP is disabled (default) 13.2Spanning Tree Protocol Status Screen 13.3 Spanning Tree Configuration 13.4 Configure Rapid Spanning Tree Protocol Table 45 Advanced Application > Spanning Tree Protocol > RSTP Click Status to display the RSTP Status screen (see Figure 89 on page 120) Select this check box to activate RSTP. Clear this checkbox to disable RSTP Note: You must also activate Rapid Spanning Tree in the Advanced Application Note: You must also activate 13.5 Rapid Spanning Tree Protocol Status 13.6 Configure Multiple Rapid Spanning Tree Protocol Table 47 Advanced Application > Spanning Tree Protocol > MRSTP Click Status to display the MRSTP Status screen (see Figure 89 on page 120) Tree This is a read only index number of the STP trees > Spanning Tree Protocol > Configuration screen to enable MRSTP on the 13.7 Multiple Rapid Spanning Tree Protocol Status 13.8 Configure Multiple Spanning Tree Protocol Figure 92 Advanced Application > Spanning Tree Protocol > MSTP Table 49 Advanced Application > Spanning Tree Protocol > MSTP MSTP Port MSTP Status Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch Table 49 Advanced Application > Spanning Tree Protocol > MSTP (continued) MaxAge rule: Maximum hops discarded and the port information is aged 13.9 Multiple Spanning Tree Port Configuration 13.10 Multiple Spanning Tree Protocol Status Figure 94 Advanced Application > Spanning Tree Protocol > Status: MSTP Table 51 Advanced Application > Spanning Tree Protocol > Status: MSTP MSTP settings on the Switch CST This section describes the Common Spanning Tree settings 13.11 Technical Reference 13.11.1 MSTP Network Example 13.11.2 MST Region 13.11.3MST Instance 13.11.4 Common and Internal Spanning Tree (CIST) Bandwidth Control 14.1 Overview 14.1.1 What You Can Do 14.2 Bandwidth Control Setup Chapter 14 Bandwidth Control Figure 99 Advanced Application > Bandwidth Control Table 52 Advanced Application > Bandwidth Control Select this check box to enable bandwidth control on the Switch Select this check box to activate ingress rate limits on this port Broadcast Storm Control 15.1 Broadcast Storm Control Overview 15.1.1 What You Can Do 15.2 Broadcast Storm Control Setup Chapter 15 Broadcast Storm Control Figure 100 Advanced Application > Broadcast Storm Control Table 53 Advanced Application > Broadcast Storm Control disable this feature Broadcast (pkt Mirroring 16.1 Mirroring Overview 16.1.1 What You Can Do 16.2 Port Mirroring Setup Chapter 16 Mirroring Table 54 Advanced Application > Mirroring feature Monitor set the common settings and then make adjustments on a port-by-portbasis Link Aggregation 17.1 Overview 17.1.1What You Can Do 17.1.2What You Need to Know 17.2 Link Aggregation Status 17.3 Link Aggregation Setting Figure 103 Advanced Application > Link Aggregation > Link Aggregation Setting Table 58 Advanced Application > Link Aggregation > Link Aggregation Setting 17.4 Link Aggregation Control Protocol Select this checkbox to enable Link Aggregation Control Protocol (LACP) System higher the priority level 17.5 Technical Reference 17.5.1 Static Trunking Example Page Port Authentication 18.1 Port Authentication Overview 18.1.1What You Can Do 18.1.2What You Need to Know 18.2 Port Authentication Configuration 18.3 Activate IEEE 802.1x Security Figure 109 Advanced Application > Port Authentication Table 60 Advanced Application > Port Authentication Select this check box to permit 802.1x authentication on the Switch port Select this to permit 802.1x authentication on this port. You must first allow 18.3.1 Guest VLAN Internet Figure 111 Advanced Application > Port Authentication > 802.1x > Guest VLAN Table 61 Advanced Application > Port Authentication > 802.1x > Guest VLAN This field displays a port number Changes in this row are copied to all the ports as soon as you make them Select this checkbox to enable the guest VLAN feature on this port Host-mode (using a hub) Select Multi-Secure to authenticate each user that connects to this port Multi-Secure Num Port Security 19.1 Port Security Overview 19.1.1 What You Can Do 19.2 Port Security Setup Chapter 19 Port Security Figure 112 Advanced Application > Port Security Table 62 Advanced Application > Port Security Port List MAC freeze Table 62 Advanced Application > Port Security (continued) Limited Number of Learned MAC feature is disabled Classifier 20.1 Overview 20.1.1 What You Can Do 20.1.2 What You Need to Know 20.2Configuring the Classifier Chapter 20 Classifier Figure 113 Advanced Application > Classifier Table 63 Advanced Application > Classifier Select this option to enable this rule Enter a descriptive name for this rule for identifying purposes 20.2.1 Viewing and Editing Classifier Configuration Figure 114 Advanced Application > Classifier: Summary Table Table 64 Classifier: Summary Table Table 65 Common Ethernet Types and Protocol Numbers ETHERNET TYPE PROTOCOL NUMBER 20.3 Classifier Example Policy Rule 21.1 Policy Rules Overview 21.1.1 What You Can Do 21.2 Configuring Policy Rules Chapter 21 Policy Rule Figure 116 Advanced Application > Policy Rule Table 68 Advanced Application > Policy Rule Select this option to enable the policy Enter a descriptive name for identification purposes Table 68 Advanced Application > Policy Rule (continued) Select No change to forward the packets Select Discard the packet to drop the packets Select No change to keep the priority setting of the frames value you set in the Priority field 21.3 Policy Example Queuing Method 22.1 Queuing Method Overview 22.1.1 What You Can Do 22.1.2 What You Need to Know 22.2 Configuring Queuing Table 69 Advanced Application > Queuing Method This label shows the port you are configuring Robin) lowest weights get more guaranteed bandwidth than queues with smaller weights Multicast 23.1 Multicast Overview 23.1.1What You Can Do 23.1.2What You Need to Know Chapter 23 Multicast IGMP Snooping and VLANs MLD Snooping-proxy Query Report Done MLD Messages Immediate MVR Overview Figure 120 MVR Network Example Multicast VLAN S Types of MVR Ports MVR Modes You can set your Switch to operate in either dynamic or compatible mode How MVR Works 23.2 Multicast Setup 23.3 IPv4 Multicast Status 23.3.1 IGMP Snooping IGMP Filtering can join ports that you want to allow to join multicast groups Unknown Multicast Frame 23.4 IGMP Snooping VLAN auto VLANs automatically VLAN(s) that you specify below You must also enable IGMP snooping in the Multicast > IPv4 Multicast > IGMP Snooping screen first 23.4.1 IGMP Filtering Profile 23.5 IPv6 Multicast Status 23.5.1 MLD Snooping-proxy 23.5.2 MLD Snooping-proxyVLAN proxy and configure related settings Upstream Query Interval same as what’s configured in the connected multicast router = Robustness Variable, and MRD = Maximum Response Delay 23.5.3 MLD Snooping-proxyVLAN Port Role Setting MLD Snooping-proxy by-portbasis Port Role or Done messages when receiving queries from a multicast router belong to this VLAN 23.5.4 MLD Snooping-proxyVLAN Filtering Active Select this option to enable MLD filtering on the Switch Group Limit join Max Group Num 23.5.5 MLD Snooping-proxyVLAN Filtering Profile 23.6 General MVR Configuration Figure 133 Advanced Application > Multicast > Multicast Setup > MVR Table 80 Advanced Application > Multicast > Multicast Setting > MVR among different subscriber VLANs on the network Group Name Multicast VLAN ID 23.6.1 MVR Group Configuration list box Refer to Section on page 168 for more information on IP multicast addresses address for a multicast group MVLAN This field displays the starting IP address of the multicast group 23.6.2 MVR Configuration Example EXAMPLE EXAMPLE AAA 24.1 AAA Overview 24.1.1What You Can Do 24.1.2What You Need to Know 24.2 AAA Screens 24.3 RADIUS Server Setup Figure 141 Advanced Application > AAA > RADIUS Server Setup Table 83 Advanced Application > AAA > RADIUS Server Setup Use this section to configure your RADIUS authentication settings This field is only valid if you configure multiple RADIUS servers RADIUS server, if the RADIUS server does not respond then the Switch tries to 24.4 TACACS+ Server Setup Figure 142 Advanced Application > AAA > TACACS+ Server Setup Table 84 Advanced Application > AAA > TACACS+ Server Setup Use this section to configure your TACACS+ authentication settings This field is only valid if you configure multiple TACACS+ servers TACACS+ server, if the TACACS+ server does not respond then the Switch tries to 24.5 AAA Setup Figure 143 Advanced Application > AAA > AAA Setup Table 85 Advanced Application > AAA > AAA Setup Privilege Enable management) specify them in Method 2 and Method 3 fields Table 85 Advanced Application > AAA > AAA Setup (continued) Login authenticate administrator accounts (users for Switch management) up the corresponding database correctly first Method 2 and Method 3 fields 24.6 Technical Reference 24.6.1 Vendor Specific Attribute 24.6.2 Supported RADIUS Attributes 24.6.3 Attributes Used for Authentication IP Source Guard 25.1 Overview 25.1.1What You Can Do 25.1.2What You Need to Know 25.2 IP Source Guard 25.3 IP Source Guard Static Binding 25.4 DHCP Snooping Figure 146 Advanced Application > IP Source Guard > DHCP Snooping Table 90 Advanced Application > IP Source Guard > DHCP Snooping Database Status page Agent URL Table 90 Advanced Application > IP Source Guard > DHCP Snooping (continued) Agent running database none: The Switch is not accessing the DHCP snooping database write: The Switch is updating the DHCP snooping database 25.5 DHCP Snooping Configure Figure 147 Advanced Application > IP Source Guard > DHCP Snooping > Configure Table 91 Advanced Application > IP Source Guard > DHCP Snooping > Configure snooping on specific VLAN and specify trusted ports Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed 25.5.1 DHCP Snooping Port Configure 25.5.2 DHCP Snooping VLAN Configure 25.5.3 DHCP Snooping VLAN Port Configure 25.6 ARP Inspection Status 25.7 ARP Inspection VLAN Status 25.8 ARP Inspection Log Status Figure 153 Advanced Application > IP Source Guard > ARP Inspection > Log Status Table 97 Advanced Application > IP Source Guard > ARP Inspection > Log Status Clearing log status table that have not been sent to the syslog server yet 25.9 ARP Inspection Configure 25.9.1 ARP Inspection Port Configure Trusted State The Switch does not discard ARP packets on trusted ports for any reason The Switch discards ARP packets on untrusted ports in the following situations: bindings rate at which ARP packets can arrive on untrusted ports 25.9.2 ARP Inspection VLAN Configure 25.10 Technical Reference 25.10.1 DHCP Snooping Overview 25.10.1.2 DHCP Snooping Database 25.10.1.3 DHCP Relay Option 82 Information 25.10.1.4 Configuring DHCP Snooping 25.10.2 ARP Inspection Overview 25.10.2.2 Trusted vs. Untrusted Ports 25.10.2.3Syslog 25.10.2.4 Configuring ARP Inspection Loop Guard 26.1 Loop Guard Overview 26.1.1 What You Can Do 26.1.2 What You Need to Know Page 26.2 Loop Guard Setup Table 101 Advanced Application > Loop Guard Select this option to enable loop guard on the Switch down a port via the loop guard feature adjustments on a port-by-portbasis Clear this check box to disable the loop guard feature Layer 2 Protocol Tunneling 27.1 Layer 2 Protocol Tunneling Overview 27.1.1 What You Can Do 27.1.2 What You Need to Know 27.2Configuring Layer 2 Protocol Tunneling Figure 166 Advanced Application > Layer 2 Protocol Tunneling Table 102 Advanced Application > Layer 2 Protocol Tunneling Select this to enable layer 2 protocol tunneling on the Switch packets by replacing the destination MAC address in the packets you use a unicast MAC address, make sure the MAC address does not exist in the Table 102 Advanced Application > Layer 2 Protocol Tunneling (continued) VTP Point to Point determine the link’s physical status and detect a unidirectional link PAGP PPPoE 28.1 PPPoE Intermediate Agent Overview 28.1.1What You Can Do 28.1.2What You Need to Know Chapter 28 PPPoE 28.1.2.2 Sub-OptionFormat Table 104 PPPoE IA Circuit ID Sub-optionFormat: User-definedString Table 105 PPPoE IA Remote ID Sub-optionFormat Flexible Circuit ID Syntax with Identifier String and Variables WT-101Default Circuit ID Syntax 28.2The PPPoE Screen 28.3 PPPoE Intermediate Agent 28.3.1 PPPoE IA Per-Port 28.3.2 PPPoE IA Per-Port Per-VLAN Figure 170 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN Table 110 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN Show Port VLAN(s) on the port Enter the lowest VLAN ID you want to configure in the section below 28.3.3 PPPoE IA for VLAN Error Disable 29.1 Error Disable Overview 29.1.1What You Can Do 29.2 Error-DisableStatus Chapter 29 Error Disable Figure 173 Advanced Application > Errdisable > Errdisable Status Table 112 Advanced Application > Errdisable > Errdisable Status Inactive-reason mode reset 29.3 CPU Protection Configuration 29.4 Error-DisableDetect Configuration 29.5 Error-DisableRecovery Configuration Private VLAN 30.1 Private VLAN Overview 30.2 Configuring Private VLAN Chapter 30 Private VLAN Figure 178 Advanced Application > Private VLAN Table 116 Advanced Application > Private VLAN Check this box to enable private VLAN in a VLAN purposes Green Ethernet 31.1 Green Ethernet Overview 31.2 Configuring Green Ethernet Chapter 31 Green Ethernet Figure 179 Advanced Application > Green Ethernet Advanced Application > Green Ethernet EEE Select this to activate Energy Efficient Ethernet globally Link Layer Discovery Protocol (LLDP) 32.1 LLDP Overview 32.2 LLDP-MEDOverview 32.3 LLDP Screens 32.4 LLDP Local Status 32.4.1 LLDP Local Port Status Detail Page Page These are the Basic TLV flags Port ID TLV The port ID TLV identifies the specific port that transmitted the LLDP frame • Port ID Subtype: This shows how the port is identified • Port ID: This is the ID of the port 32.5 LLDP Remote Status 32.5.1 LLDP Remote Port Status Detail The following table describes the labels in Basic TLV part of the screen Chassis ID TLV identified by the chassis ID subtype the port ID subtype Time To Live This displays the VLAN ID of this port on the remote device sent the LLDPDU • Port-ProtocolVLAN ID • Port-ProtocolVLAN ID Supported • Port-ProtocolVLAN ID Enabled Identity TLV accessible through its port Power Via MDI power support capabilities of the sending port on the remote device Port Class Page The following table describes the labels in the MED TLV part of the screen This displays the MED capabilities the remote port supports • Extend Power via MDI PSE • Extend Power via MDI PD Inventory Management 32.6 LLDP Configuration Figure 190 Advanced Application > LLDP > LLDP Configuration Table 124 Advanced Application > LLDP > LLDP Configuration Select to enable LLDP on the Switch. It is enabled by default Transmit Interval Enter how many seconds the Switch waits before sending LLDP packets 32.6.1 LLDP Configuration Basic TLV Setting 32.6.2 LLDP Configuration Basic Org-specificTLV Setting 32.7 LLDP-MEDConfiguration 32.8 LLDP-MEDNetwork Policy 32.9 LLDP-MEDLocation Figure 195 Advanced Application > LLDP > LLDP-MEDLocation Table 129 Advanced Application > LLDP > LLDP-MEDLocation The LLDP-MEDuses geographical coordinates and Civic Address to set the location Coordinates Street and other related information Altitude or in floors meters floor Datum Click Cancel to clear the selected check boxes in the delete column Static Route 33.1 Static Route Overview 33.1.1What You Can Do 33.2 Static Routing 33.3 Configuring Static Routing Table 130 IP Application > Static Routing > IPv4 Static Route (continued) Gateway IP segment as your Switch Metric but it must be between 1 and 15. In practice, 2 or 3 is usually a good number Differentiated Services 34.1 Differentiated Services Overview 34.1.1What You Can Do 34.1.2What You Need to Know P - Platinum 34.2 Activating DiffServ 34.3 DSCP-to-IEEE802.1p Priority Settings 34.3.1 Configuring DSCP Settings DHCP 35.1 DHCP Overview 35.1.1What You Can Do 35.1.2What You Need to Know 35.2 DHCP Configuration 35.3 DHCPv4 Status 35.4 DHCPv4 Relay 35.4.1 DHCPv4 Relay Agent Information 35.4.2 DHCPv4 Option 82 Profile Figure 205 IP Application > DHCP > DHCPv4 > Option 82 Profile Table 139 IP Application > DHCP > DHCPv4 > Option 82 Profile ASCII characters. Spaces are allowed Circuit-ID to the relay agent (the Switch) 35.4.3 Configuring DHCPv4 Global Relay 35.4.4 DHCPv4 Global Relay Port Configure 35.4.5 Global DHCP Relay Configuration Example 35.5 Configuring DHCPv4 VLAN Settings Figure 210 IP Application > DHCP > DHCPv4 > VLAN Table 142 IP Application > DHCP > DHCPv4 > VLAN Enter the ID number of the VLAN to which these DHCP settings apply Enter the IP address of a DHCP server in dotted decimal notation This field displays Relay for the DHCP mode 35.5.1 DHCPv4 VLAN Port Configure 35.5.2 Example: DHCP Relay for Two VLANs 35.6 DHCPv6 Relay Figure 214 IP Application > DHCP > DHCPv6 Table 144 IP Application > DHCP > DHCPv6 Helper Address Enter the remote DHCPv6 server address for the specified VLAN Remote ID ARP Setup 36.1 ARP Overview 36.1.1 What You Can Do 36.1.2 What You Need to Know Chapter 36 ARP Setup Gratuitous-ARP ARP-Request 36.2 ARP Setup 36.2.1 ARP Learning Figure 216 IP Application > ARP Setup > ARP Learning Table 145 IP Application > ARP Setup > ARP Learning ARP Learning Select the ARP learning mode the Switch uses on the port ARP requests sent by the Switch Maintenance 37.1 Overview 37.1.1What You Can Do 37.2 The Maintenance Screen 37.2.1 Load Factory Default 37.2.2Save Configuration 37.2.3 Reboot System 37.3Firmware Upgrade Figure 220 Management > Maintenance > Firmware Upgrade File Path Browse Rebooting Upgrade 37.4 Restore a Configuration File 37.5 Backup a Configuration File 37.6 Tech-Support 37.7 Technical Reference 37.7.1 FTP Command Line 37.7.2 Filename Conventions 37.7.3 FTP Command Line Procedure 37.7.4GUI-basedFTP Clients 37.7.5 FTP Restrictions Access Control 38.1 Access Control Overview 38.1.1What You Can Do 38.2 The Access Control Main Screen 38.3 Configuring SNMP 38.3.1 Configuring SNMP Trap Group 38.3.2 Enabling/Disabling Sending of SNMP Traps on a Port 38.3.3 Configuring SNMP User Table 154 Management > Access Control > SNMP > User (continued) Security Level Select whether you want to implement authentication and/or encryption for SNMP communication from this user. Choose: security level 38.4 Setting Up Login Accounts 38.5 Service Port Access Control 38.6 Remote Management 38.7 Technical Reference 38.7.1 About SNMP Supported MIBs SNMP Traps OPTION OBJECT LABEL OBJECT ID Table 159 SNMP System Traps (continued) SNMP System Traps (continued) Table 160 SNMP InterfaceTraps Table 160 SNMP InterfaceTraps (continued) Table 161 AAA Traps AAA Traps Table 162 SNMP IP Traps 38.7.2 SSH Overview 38.7.2.2 SSH Implementation on the Switch 38.7.2.3 Requirements for Using SSH 38.7.3 Introduction to HTTPS Security Alert Yes Internet Explorer 7 or Continue to this website (not recommended) Certificate Error Mozilla Firefox Warning Messages This Connection is Unstructed I Understand the Risks Add Exception button 38.7.3.2 The Main Screen Page Diagnostic 39.1 Overview 39.2 Diagnostic Chapter 39 Diagnostic Table 164 Management > Diagnostic System Log Click Display to display a log of events in the multi-linetext box Click Clear to empty the text box and reset the syslog entry Syslog 40.1 Syslog Overview 40.1.1What You Can Do 40.2 Syslog Setup 40.3 Syslog Server Setup Figure 245 Management > Syslog > Syslog Server Setup Table 167 Management > Syslog > Syslog Server Setup (you can edit the entry later) Server Address Enter the IP address of the syslog server Cluster Management 41.1 Cluster Management Overview 41.1.1What You Can Do 41.2 Cluster Management Status 41.3 Clustering Management Configuration Table 170 Management > Cluster Management > Configuration Clustering Manager ( ) appears in the member summary list below Type a name to identify the Clustering Manager. You may use up to 32 printable characters (spaces are allowed) 41.4 Technical Reference 41.4.1 Cluster Member Switch Management FTP PARAMETER MAC Table 42.1 MAC Table Overview 42.1.1 What You Can Do 42.1.2 What You Need to Know 42.2 Viewing the MAC Table Table 172 Management > MAC Table criteria you specified Select All to display any entry in the MAC table of the Switch Select Static to display the MAC entries manually configured on the Switch the specified VLAN ARP Table 43.1 Overview 43.1.1 What You Can Do 43.1.2 What You Need to Know 43.2 Viewing the ARP Table Chapter 43 ARP Table Figure 253 Management > ARP Table Table 173 Management > ARP Table Specify how you want the Switch to remove ARP entries when you click Flush Select All to remove all of the dynamic entries from the ARP table Path MTU Table 44.1 Path MTU Overview 44.2 Viewing the Path MTU Table Configure Clone 45.1 Overview 45.2 Configure Clone Chapter 45 Configure Clone Figure 255 Management > Configure Clone Table 175 Management > Configure Clone Source Source Management > Configure Clone (continued) Neighbor Table 46.1 IPv6 Neighbor Table Overview 46.2 Viewing the IPv6 Neighbor Table Chapter 46 Neighbor Table Table 176 Management > Neighbor Table (continued) are: received a response to the initial request.) unrequested response from the neighbor’s interface Troubleshooting 47.1Power, Hardware Connections, and LEDs 47.2Switch Access and Login Advanced Suggestions I can see the Login screen, but I cannot log in to the Switch 3Disconnect and re-connectthe cord to the Switch Pop-upWindows, JavaScripts and Java Permissions •Web browser pop-upwindows from your device 47.3 Switch Configuration Menu Management Maintenance Tech-Support Korea Malaysia Pakistan Philipines Singapore Belarus Belgium Bulgaria Czech Denmark Lithuania Netherlands Norway Poland Romania Turkey Ukraine Latin America Argentina Ecuador Oceania Australia Africa South Africa User-Defined Port(s Port(s) •If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number •If the Protocol is USER, this is the IP protocol number Appendix B Common Services Table 177 Commonly Used Services (continued) Page Overview IPv6 Addressing Prefix and Prefix Length Link-localAddress Global Address Unspecified Address Loopback Address Multicast Address MULTICAST ADDRESS Subnet Masking Interface ID EUI-64 EUI-64 Stateless Autoconfiguration DHCPv6 Identity Association DHCP Relay Agent Prefix Delegation ICMPv6 Neighbor Discovery Protocol (NDP) Neighbor solicitation: A request from a host to determine a neighbor’s Neighbor advertisement: A response from a node to announce its Example - Enabling IPv6 on Windows XP/2003/Vista C:\>ipv6 install Installing Succeeded C:\>ipconfig Example - Enabling IPv6 on Windows 1Select Control Panel > Network and Sharing Center > Local Area Connection 2Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it 4Click Close to exit the Local Area Connection Status screen 5Select Start > All Programs > Accessories > Command Prompt Copyright Disclaimer Trademarks Certifications (Class A) Federal Communications Commission (FCC) Interference Statement Appendix D Legal Information ZyXEL Limited Warranty Note Registration Safety Warnings Environmental Product Declaration Numerics Page Page Page Page setup 153, 228 supported 321, 322, 323