Main
www.zyxel.com
MGS3700-12C
MetroGigabit Switch
Firmware Version 3.90 Edition 15, 11/2012
Default Login Details
Page
About This User's Guide
Intended Audience
Related Documentation
Note: It is recommended you use the web configurator to configure the Switch.
Documentation Feedback
Need More Help?
Customer Support
Document Conventions
Warnings and Notes
Warnings tell you about things that could harm you or your device.MGS3700-12C
Syntax Conventions
Page
Safety Warnings
MGS3700-12C Users Guide 7
Safety Warnings
Page
Contents Overview
Page
Table of Contents
Part I: Introduction and Hardware........................................................ 23
Page
Part II: Basic Configuration................................................................... 91
Page
Page
Page
Page
Page
Page
Part V: Management............................................................................. 357
Part VI: Troubleshooting & Product Specifications.......................... 413
Part VII: Appendices and Index ......................................................... 429
PART I
Page
CHAPTER 1
Getting to Know Your Switch
1.1 Introduction
1.1.1 Backbone Application
Figure 1 Backbone Application
1.1.2 Bridging Example
Figure 2 Bridging Application
1.1.3 High Performance Switching Example
Figure 3 High Performance Switched Workgroup Application
1.1.4 IEEE 802.1Q VLAN Application Examples
1.1.4.1 Tag-based VLAN Example
Figure 4 Shared Server Using VLAN Example
1.2 IPv6 Support
1.3 Ways to Manage the Switch
1.4 Good Habits for Managing the Switch
Page
CHAPTER 2
Hardware Installation and Connection
2.1 Installation Scenarios
2.2 Desktop Installation Procedure
Figure 5 Attaching Rubber Feet
2.3 Mounting the Switch on a Rack
2.3.1 Rack-mounted Installation Requirements
Failure to use the proper screws may damage the unit.
2.3.1.1 Precautions
Page
Page
CHAPTER 3
Hardware Overview
3.1 Front Panel
Figure 8 Front Panel
Table 1 Front Panel Connections
3.1.1 Console Port
3.1.2 Gigabit Ethernet Ports
Table 1 Front Panel Connections (continued)
3.1.2.1 Default Ethernet Negotiation Settings
3.1.2.2 Auto-crossover
3.1.3 Mini-GBIC Slots
To avoid possible eye injury, do not look into an operating fiber- optic modules connectors.
3.1.3.1 Transceiver Installation
Figure 9 Transceiver Installation Example
Figure 10 Connecting the Fiber Optic Cables
3.1.3.2 Transceiver Removal
3.1.4 Management Port
3.1.5 Power Connector
3.1.5.1 AC Power Connection
3.1.5.2 DC Power Connection
Exposed power wire is dangerous. Use extreme care when connecting a DC power source to the device.
3.1.6 Signal Slot
3.1.6.1 Connect a Sensor to the Signal Slot
Page
Figure 15 Daisy-chaining an External Alarm Sensor to Other Switches of the Same Model
3.2 Rear Panel
Figure 16 Rear Panel
3.3 LEDs
Pin Assignments
Table 2 LED Descriptions
3.4 Configuring the Switch
Table 2 LED Descriptions (continued)
LED COLOR STATU SDESCRIPTION
Page
Page
CHAPTER 4
The Web Configurator
4.1 Introduction
4.2 System Login
C
Table 3 Navigation Panel Sub-links Overview
Chapter 4 The Web Configurator
The following table describes the links in the navigation panel.
Table 4 Navigation Panel Links
LINK DESCRIPTION
Chapter 4 The Web Configurator
MGS3700-12C Users Guide 51
Table 4 Navigation Panel Links (continued)
LINK DESCRIPTION
4.3.1 Change Your Password
Figure 19 Change Administrator Login Password
4.4 Saving Your Configuration
Table 4 Navigation Panel Links (continued)
Note: Use the Save link when you are done with a configuration session.
4.5 Switch Lockout
4.6 Resetting the Switch
4.6.1 Reload the Configuration File
Figure 20 Resetting the Switch: Via the Console Port
Page
Page
CHAPTER 5
Initial Setup Example
Figure 22 Initial Setup Network Example: VLAN
5.1 Overview
5.1.1 Creating a VLAN
5.1.2 Setting Port VID
Figure 23 Initial Setup Network Example: Port VID
5.2 Configuring Switch Management IP Address
Figure 24 Initial Setup Example: Management IP Address
Page
Page
CHAPTER 6
Tutorials
6.1 How to Use DHCP Snooping on the Switch
Figure 26 Tutorial: Create a VLAN and Add Ports to It
Table 5 Tutorial: Settings in this Tutorial
Page
Figure 29 Tutorial: Set the DHCP Server Port to Trusted
Figure 30 Tutorial: Enable DHCP Snooping on this VLAN
Figure 31 Tutorial: Check the Binding If DHCP Snooping Works
6.2 How to Use DHCP Relay on the Switch
6.2.1 DHCP Relay Tutorial Introduction
6.2.2 Creating a VLAN
Figure 33 Tutorial: Set VLAN Type to 802.1Q
Page
Figure 36 Tutorial: Add Tag for Frames Received on Port 2
6.2.3 Configuring DHCP Relay
Figure 37 Tutorial: Set DHCP Server and Relay Information
6.2.4 Troubleshooting
6.3 How to Use PPPoE IA on the Switch
Figure 38 Tutorial: PPPoE Intermediate Agentt Tutorial Overview
A
Port 11 - Trusted
Note: For related information about PPPoE IA, see Section 32.4 on page 320.
Port 12 - Trusted
6.3.1 Configuring Switch A
Page
Page
Page
Page
6.4 How to Use Error Disable and Recovery on the Switch
Page
6.5 How to Set Up a Guest VLAN
6.5.1 Creating a Guest VLAN
Page
Page
Page
6.6 How to Do Port Isolation in a VLAN
6.6.1 Creating a VLAN
Page
Page
6.6.2 Creating a Private VLAN Rule
Page
Page
Page
Page
7.2 Port Status Summary
Figure 39 Status
Table 7 Status
Table 7 Status (continued)
Page
Chapter 7 System Status and Port Statistics
MGS3700-12C Users Guide 97
Table 8 Status: Port Details (continued)
Chapter 7 System Status and Port Statistics
CHAPTER 8
Basic Setting
8.1 Overview
8.2 System Information
Figure 41 Basic Setting > System Info
Table 9 Basic Setting > System Info
Table 9 Basic Setting > System Info (continued)
8.3 General Setup
Figure 42 Basic Setting > General Setup
Table 9 Basic Setting > System Info (continued)
Table 10 Basic Setting > General Setup
Table 10 Basic Setting > General Setup (continued)
8.4 Introduction to VLANs
Note: VLAN is unidirectional; it only governs outgoing traffic.
Table 10 Basic Setting > General Setup (continued)
8.4.1 Smart Isolation
B C
8.5 Switch Setup Screen
Table 11 Basic Setting > Switch Setup (continued)
8.6 IP Setup
8.6.1 Management IP Addresses
Table 11 Basic Setting > Switch Setup (continued)
Page
Page
Table 12 Basic Setting > IP Setup (continued)
8.7 Port Setup
Table 13 Basic Setting > Port Setup (continued)
Page
PART III
Advanced
Page
CHAPTER 9
VLAN
9.1 Introduction to IEEE 802.1Q Tagged VLANs
9.1.1 Forwarding Tagged and Untagged Frames
9.2 Automatic VLAN Registration
9.2.1 GARP
9.2.1.1 GARP Timers
9.2.2 GVRP
9.3 Port VLAN Trunking
Table 14 IEEE 802.1Q VLAN Terminology
Figure 46 Port VLAN Trunking
9.4 Select the VLAN Type
Figure 47 Switch Setup > Select VLAN Type
9.5 Static VLAN
9.5.1 Static VLAN Status
Figure 48 Advanced Application > VLAN: VLAN Status
Table 15 Advanced Application > VLAN: VLAN Status
9.5.2 VLAN Details
Figure 49 Advanced Application > VLAN > VLAN Detail
9.5.3 Configure a Static VLAN
Table 16 Advanced Application > VLAN > VLAN Detail
Figure 50 Advanced Application > VLAN > Static VLAN
Table 17 Advanced Application > VLAN > Static VLAN
Note: Changes in this row are copied to all the ports as soon as you
Table 17 Advanced Application > VLAN > Static VLAN (continued)
9.5.4 Configure VLAN Port Settings
9.6 Subnet Based VLANs
Table 18 Advanced Application > VLAN > VLAN Port Setting (continued)
Figure 52 Subnet Based VLAN Application Example
9.7 Configuring Subnet Based VLAN
Page
9.8 Protocol Based VLANs
Table 19 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN Setup (continued)
9.9 Configuring Protocol Based VLAN
Table 20 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN Setup
9.10 Create an IP-based VLAN Example
Figure 56 Protocol Based VLAN Configuration Example
9.11 Port-based VLAN Setup
Page
Page
Table 21 Port Based VLAN Setup
Page
CHAPTER 10
Static MAC Forward Setup
10.1 Overview
10.2 Configuring Static MAC Forwarding
Figure 59 Advanced Application > Static MAC Forwarding
Table 22 Advanced Application > Static MAC Forwarding
Note: Static MAC addresses do not age out.
Table 22 Advanced Application > Static MAC Forwarding (continued)
Page
CHAPTER 11
Static Multicast Forward Setup
11.1 Static Multicast Forwarding Overview
11.2 Configuring Static Multicast Forwarding
Figure 63 Advanced Application > Static Multicast Forwarding
example
Table 23 Advanced Application > Static Multicast Forwarding
Table 23 Advanced Application > Static Multicast Forwarding (continued)
CHAPTER 12
Filtering
Figure 64 Advanced Application > Filtering
12.1 Configure a Filtering Rule
Chapter 12 Filtering
Table 24 Advanced Application > FIltering
CHAPTER 13
Spanning Tree Protocol
13.1 STP/RSTP Overview
Note: In this users guide, STP refers to both STP and RSTP.
13.1.1 STP Terminology
13.1.2 How STP Works
Table 25 STP Path Costs
13.1.3 STP Port States
13.1.4 Multiple RSTP
Table 26 STP Port States
Note: Each port can belong to one STP tree only. Figure 65 MRSTP Network Example
13.1.5 Multiple STP
13.1.5.1 MSTP Network Example
13.1.5.2 MST Region
13.1.5.3 MST Instance
Figure 68 MSTIs in Different Regions
13.1.5.4 Common and Internal Spanning Tree (CIST)
Figure 69 MSTP and Legacy RSTP Network Example
13.2 Spanning Tree Protocol Status Screen
Figure 70 Advanced Application > Spanning Tree Protocol
13.3 Spanning Tree Configuration
Figure 71 Advanced Application > Spanning Tree Protocol > Configuration
Table 27 Advanced Application > Spanning Tree Protocol > Configuration
13.4 Configure Rapid Spanning Tree Protocol
Note: Changes in this row are copied to all the ports as soon as you
Table 28 Advanced Application > Spanning Tree Protocol > RSTP (continued)
13.5 Rapid Spanning Tree Protocol Status
Table 28 Advanced Application > Spanning Tree Protocol > RSTP (continued)
Table 29 Advanced Application > Spanning Tree Protocol > Status: RSTP
13.6 Configure Multiple Rapid Spanning Tree Protocol
Note: Changes in this row are copied to all the ports as soon as you
Table 30 Advanced Application > Spanning Tree Protocol > MRSTP (continued)
13.7 Multiple Rapid Spanning Tree Protocol Status
Table 30 Advanced Application > Spanning Tree Protocol > MRSTP (continued)
Table 31 Advanced Application > Spanning Tree Protocol > Status: MRSTP
Page
Table 32 Advanced Application > Spanning Tree Protocol > MSTP
Note: Changes in this row are copied to all the ports as soon as you
Table 32 Advanced Application > Spanning Tree Protocol > MSTP (continued)
13.9 Multiple Spanning Tree Protocol Status
Table 33 Advanced Application > Spanning Tree Protocol > Status: MSTP
Page
CHAPTER 14
Bandwidth Control
14.1 Bandwidth Control Overview
14.1.1 CIR and PIR
14.2 Bandwidth Control Setup
Figure 78 Advanced Application > Bandwidth Control
Table 34 Advanced Application > Bandwidth Control
Note: Changes in this row are copied to all the ports as soon as you
Chapter 14 Bandwidth Control
Table 34 Advanced Application > Bandwidth Control (continued)
Page
CHAPTER 15
Broadcast Storm Control
Figure 79 Advanced Application > Broadcast Storm Control
15.1 Broadcast Storm Control Setup
Chapter 15 Broadcast Storm Control
Table 35 Advanced Application > Broadcast Storm Control
Note: Changes in this row are copied to all the ports as soon as you
CHAPTER 16
Mirroring
Figure 80 Advanced Application > Mirroring
16.1 Port Mirroring Setup
Table 36 Advanced Application > Mirroring
Note: Changes in this row are copied to all the ports as soon as you
16.2 RMirror
16.2.1 RMirror Overview
BeforeyoustartsettingRMirrorVLAN,youshouldknowalltherolesofswitchinthe network.
16.2.2 RMirror Configuration
16.2.3 Source
Figure 83 Advanced Application > Mirroring> RMirror > Source
Thefollowingtabledescribesthelabelsinthisscreen.
Table 39 Advanced Application > Mirroring> RMirror > Source
16.2.4 Destination
Table 39 Advanced Application > Mirroring> RMirror > Source
Figure 84 Advanced Application > Mirroring> RMirror > Destination
Table 40 Advanced Application > Mirroring> RMirror > Destination
Page
Page
CHAPTER 17
Link Aggregation
17.1 Link Aggregation Overview
17.2 Dynamic Link Aggregation
17.2.1 Link Aggregation ID
Table 42 Link Aggregation ID: Local Switch
Table 43 Link Aggregation ID: Peer Switch
17.3 Link Aggregation Status
Figure 86 Advanced Application > Link Aggregation Status
Table 44 Advanced Application > Link Aggregation Status
Table 44 Advanced Application > Link Aggregation Status (continued)
17.4 Link Aggregation Setting
Figure 87 Advanced Application > Link Aggregation > Link Aggregation Setting
Table 45 Advanced Application > Link Aggregation > Link Aggregation Setting
Table 45 Advanced Application > Link Aggregation > Link Aggregation Setting
17.5 Link Aggregation Control Protocol
17.6 Static Trunking Example
This example shows you how to create a static port trunk group for ports 2-5.
Note: Changes in this row are copied to all the ports as soon as you
Table 46 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP (continued)
Figure 89 Trunking Example - Physical Connections
A
Figure 90 Trunking Example - Configuration Screen
B
Page
CHAPTER 18
Port Authentication
18.1 Port Authentication Overview
18.1.1 IEEE 802.1x Authentication
18.1.2 MAC Authentication
18.2 Port Authentication Configuration
18.2.1 Activate IEEE 802.1x Security
18.2.2 Guest VLAN
Table 47 Advanced Application > Port Authentication > 802.1x (continued)
Figure 95 Guest VLAN Example
Figure 96 Advanced Application > Port Authentication > 802.1x > Guest VLAN
Chapter 18 Port Authentication
MGS3700-12C Users Guide 201
The following table describes the labels in this screen.
Table 48 Advanced Application > Port Authentication > 802.1x > Guest VLAN
Note: Changes in this row are copied to all the ports as soon as you
18.2.3 Activate MAC Authentication
Page
Page
CHAPTER 19
Port Security
19.1 About Port Security
19.2 Port Security Setup
Figure 98 Advanced Application > Port Security
Table 50 Advanced Application > Port Security
Chapter 19 Port Security
MGS3700-12C Users Guide 207
Note: Changes in this row are copied to all the ports as soon as you
Table 50 Advanced Application > Port Security (continued)
19.3 VLAN MAC Address Limit
Figure 99 Advanced Application > Port Security > VLAN MAC Address Limit
Table 51 Advanced Application > Port Security > VLAN MAC Address Limit
Table 51 Advanced Application > Port Security > VLAN MAC Address Limit
Page
CHAPTER 20
Classifier
20.1 About the Classifier and QoS
20.2 Configuring the Classifier
Figure 100 Advanced Application > Classifier
Table 52 Advanced Application > Classifier
Chapter 20 Classifier
MGS3700-12C Users Guide 213
Table 52 Advanced Application > Classifier (continued)
20.3 Viewing and Editing Classifier Configuration
Table 53 Classifier: Summary Table
Table 54 Common Ethernet Types and Protocol Numbers
Table 55 Common IP Protocol Types and Protocol Numbers
20.4 Classifier Example
Table 56 Common TCP and UDP Port Numbers
Page
Page
CHAPTER 21
Policy Rule
21.1 Policy Rules Overview
21.1.1 DiffServ
21.1.2 DSCP and Per-Hop Behavior
21.2 Configuring Policy Rules
Page
Chapter 21 Policy Rule
Table 57 Advanced Application > Policy Rule (continued)
21.3 Viewing and Editing Policy Configuration
Figure 104 Advanced Application > Policy Rule: Summary Table
Table 57 Advanced Application > Policy Rule (continued)
Table 58 Advanced Application > Policy Rule: Summary Table
Page
Page
CHAPTER 22
Queuing Method
22.1 Queuing Method Overview
22.1.1 Strictly Priority Queuing
22.1.2 Weighted Fair Queuing
22.1.3 Weighted Round Robin Scheduling (WRR)
Page
Chapter 22 Queuing Method
The following table describes the labels in this screen.
Table 59 Advanced Application > Queuing Method
CHAPTER 23
VLAN Stacking
23.1 VLAN Stacking Overview
23.1.1 VLAN Stacking Example
23.2 VLAN Stacking Port Roles
23.3 VLAN Tag Format
23.3.1 Frame Format
Table 60 VLAN Tag Format
Table 61 Single and Double Tagged 802.11Q Frame Format
23.4 Configuring VLAN Stacking
Chapter 23 VLAN Stacking
MGS3700-12C Users Guide 235
23.4.1 Port-based Q-in-Q
Note: Changes in this row are copied to all the ports as soon as you make them.
Note: You can define up to four different tunnel TPIDs (including 8100) in this screen at a time.
Table 63 Advanced Application > VLAN Stacking (continued)
Figure 109 Advanced Application > VLAN Stacking > Port-based QinQ
Table 64 Advanced Application > VLAN Stacking > Port-based QinQ
23.4.2 Selective Q-in-Q
Chapter 23 VLAN Stacking
Table 65 Advanced Application > VLAN Stacking > Selective QinQ (continued)
CHAPTER 24
Multicast
24.1 Multicast Overview
24.1.1 IP Multicast Addresses
24.1.2 IGMP Filtering
24.2 Multicast Status
Figure 111 Advanced Application > Multicast
Table 66 Advanced Application > Multicast Status
24.3 Multicast Setting
Figure 112 Advanced Application > Multicast > Multicast Setting
Table 67 Advanced Application > Multicast > Multicast Setting
Note: Changes in this row are copied to all the ports as soon as
Table 67 Advanced Application > Multicast > Multicast Setting (continued)
24.4 IGMP Snooping VLAN
Table 68 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN
Note: You must also enable IGMP snooping in the Multicast Setting screen first.
Note: You cannot configure the same VLAN ID as in the MVR screen.
24.5 IGMP Filtering Profile
Figure 114 Advanced Application > Multicast > Multicast Setting > IGMP Filtering Profile
Table 69 Advanced Application > Multicast > Multicast Setting > IGMP Filtering Profile
24.6 MVR Overview
Figure 115 MVR Network Example
24.6.1 Types of MVR Ports
24.6.2 MVR Modes
24.6.3 How MVR Works
24.7 General MVR Configuration
Page
Chapter 24 Multicast
MGS3700-12C Users Guide 251
24.8 MVR Group Configuration
Note: Changes in this row are copied to all the ports as soon as you
Table 70 Advanced Application > Multicast > Multicast Setting > MVR (continued)
Table 71 Advanced Application > Multicast > Multicast Setting > MVR: Group Configuration
24.8.1 MVR Configuration Example
Page
CHAPTER 25
AAA
25.1 Authentication, Authorization and Accounting (AAA)
Figure 123 AAA Server
25.1.1 Local User Accounts
25.2 AAA Screens
Client AAA Server
Table 72 RADIUS vs TACACS+
Page
Table 73 Advanced Application > AAA > RADIUS Server Setup
25.2.2 TACACS+ Server Setup
Figure 126 Advanced Application > AAA > TACACS+ Server Setup
Table 73 Advanced Application > AAA > RADIUS Server Setup (continued)
Table 74 Advanced Application > AAA > TACACS+ Server Setup
25.2.3 AAA Setup
Figure 127 Advanced Application > AAA > AAA Setup
Table 74 Advanced Application > AAA > TACACS+ Server Setup (continued)
Table 75 Advanced Application > AAA > AAA Setup
Table 75 Advanced Application > AAA > AAA Setup (continued)
25.2.4 Vendor Specific Attribute
Table 76 Supported VSAs
25.2.4.1 Tunnel Protocol Attribute
25.3 Supported RADIUS Attributes
Table 76 Supported VSAs
Table 77 Supported Tunnel Protocol Attribute
Note: You must also create a VLAN with the specified VID on the Switch.
25.3.1 Attributes Used for Authentication
25.3.1.1 Attributes Used for Authenticating Privilege Access
25.3.1.2 Attributes Used to Login Users
25.3.1.3 Attributes Used by the IEEE 802.1x Authentication
25.3.2 Attributes Used for Accounting
25.3.2.1 Attributes Used for Accounting System Events
25.3.2.2 Attributes Used for Accounting Exec Events
Table 78 RADIUS Attributes - Exec Events via Console
Table 79 RADIUS Attributes - Exec Events via Telnet/SSH
25.3.2.3 Attributes Used for Accounting IEEE 802.1x Events
The attributes are listed in the following table along with the time of the session they are sent:
Table 79 RADIUS Attributes - Exec Events via Telnet/SSH
ATTRIBUTE START INTERIM-UPDATE STOP
Table 80 RADIUS Attributes - Exec Events via 802.1x
CHAPTER 26
IP Source Guard
26.1 IP Source Guard Overview
26.1.1 DHCP Snooping Overview
26.1.1.1 Trusted vs. Untrusted Ports
Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed.
26.1.1.2 DHCP Snooping Database
Figure 128 DHCP Snooping Database File Format
26.1.1.3 DHCP Relay Option 82 Information
26.1.1.4 Configuring DHCP Snooping
26.1.2 ARP Inspection Overview
AXB
Figure 129 Example: Man-in-the-middle Attack
26.1.2.1 ARP Inspection and MAC Address Filters
26.1.2.2 Trusted vs. Untrusted Ports
26.1.2.3 Syslog
26.2 IP Source Guard
Figure 130 IP Source Guard
26.3 IP Source Guard Static Binding
Table 81 IP Source Guard
Figure 131 IP Source Guard Static Binding
Table 82 IP Source Guard Static Binding
Page
Page
Table 83 DHCP Snooping
Table 83 DHCP Snooping (continued)
26.5 DHCP Snooping Configure
Figure 133 DHCP Snooping Configure
Table 83 DHCP Snooping (continued)
Table 84 DHCP Snooping Configure
Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed.
Note: You have to enable DHCP snooping on the DHCP VLAN too.
26.5.1 DHCP Snooping Port Configure
26.5.2 DHCP Snooping VLAN Configure
Table 85 DHCP Snooping Port Configure
open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN.
Figure 135 DHCP Snooping VLAN Configure
Table 86 DHCP Snooping VLAN Configure
Note: If DHCP is enabled and there are no trusted ports, DHCP requests will not succeed.
26.6 ARP Inspection Status
Figure 136 ARP Inspection Status
Table 86 DHCP Snooping VLAN Configure (continued)
Table 87 ARP Inspection Status
26.6.1 ARP Inspection VLAN Status
Figure 137 ARP Inspection VLAN Status
Table 87 ARP Inspection Status (continued)
Table 88 ARP Inspection VLAN Status
26.6.2 ARP Inspection Log Status
Figure 138 ARP Inspection Log Status
Table 88 ARP Inspection VLAN Status (continued)
Table 89 ARP Inspection Log Status
26.7 ARP Inspection Configure
Table 89 ARP Inspection Log Status (continued)
Figure 139 ARP Inspection Configure
Table 90 ARP Inspection Configure
26.7.1 ARP Inspection Port Configure
Table 90 ARP Inspection Configure (continued)
Figure 140 ARP Inspection Port Configure
Table 91 ARP Inspection Port Configure
26.7.2 ARP Inspection VLAN Configure
Figure 141 ARP Inspection VLAN Configure
Table 91 ARP Inspection Port Configure (continued)
Table 92 ARP Inspection VLAN Configure
Table 92 ARP Inspection VLAN Configure (continued)
Page
CHAPTER 27
Loop Guard
27.1 Loop Guard Overview
Figure 142 Loop Guard vs STP
Page
27.2 Loop Guard Setup
A
P
N
P
Table 93 Advanced Application > Loop Guard
Note: Changes in this row are copied to all the ports as soon as you
CHAPTER 28
VLAN Mapping
28.1 VLAN Mapping Overview
Note: You can not enable VLAN mapping and VLAN stacking at the same time.
28.1.1 VLAN Mapping Example
28.2 Enabling VLAN Mapping
Figure 148 VLAN Mapping
Table 94 VLAN Mapping
28.3 Configuring VLAN Mapping
Figure 149 VLAN Mapping Configuration
Table 95 VLAN Mapping Configuration
Table 95 VLAN Mapping Configuration (continued)
CHAPTER 29
Layer 2 Protocol Tunneling
29.1 Layer 2 Protocol Tunneling Overview
Figure 150 Layer 2 Protocol Tunneling Network Scenario
Figure 151 L2PT Network Example
29.1.1 Layer 2 Protocol Tunneling Mode
29.2 Configuring Layer 2 Protocol Tunneling
Chapter 29 Layer 2 Protocol Tunneling
Note: Changes in this row are copied to all the ports as soon as you
Table 96 Advanced Application > Layer 2 Protocol Tunneling (continued)
CHAPTER 30
sFlow
30.1 sFlow Overview
Figure 153 sFlow Application
30.2 sFlow Configuration
Figure 154 Advanced Application > sFlow
Table 97 Advanced Application > sFlow
Note: Changes in this row are copied to all the ports as soon as you
30.2.1 sFlow Collector Configuration
Chapter 30 sFlow
The following table describes the labels in this screen.
Table 98 Advanced Application > sFlow > Collector
CHAPTER 31
Error Diable
31.1 CPU Protection Overview
31.2 Error-Disable Recovery Overview
31.3 The Error Disable Screen
31.4 CPU Protection Configuration
31.5 Error-Disable Detect Configuration
Figure 158 Advanced Application > Errdisable > Errdisable Detect
Table 99 Advanced Application > Errdisable > CPU protection
Note: Changes in this row are copied to all the ports as soon as you
Chapter 31 Error Diable
Table 100 Advanced Application > Errdisable > Errdisable Detect
Note: Changes in this row are copied to all the entries as soon as you
31.6 Error-Disable Recovery Configuration
Figure 159 Advanced Application > Errdisable > Errdisable Recovery
Table 101 Advanced Application > Errdisable > Errdisable Recovery
Note: Changes in this row are copied to all the entries as soon as you
Page
CHAPTER 32
PPPoE
32.1 PPPoE Intermediate Agent Overview
32.2 PPPoE Intermediate Agent Tag Format
Table 102 PPPoE Intermediate Agent Vendor-specific Tag Format
32.2.1 Sub-Option Format
32.2.1.1 Flexible Circuit ID Syntax with Identifier String and Variables
Table 103 PPPoE IA Circuit ID Sub-option Format: User-defined String
Table 104 PPPoE IA Remote ID Sub-option Format
Table 105 PPPoE IA Circuit ID Sub-option Format: Using Identifier String and Variables
32.2.2 Port State
Table 106 PPPoE IA Circuit ID Sub-option Format: Defined in WT-101
Page
Chapter 32 PPPoE
MGS3700-12C Users Guide 321
The following table describes the labels in this screen.
32.5 PPPoE IA Per-Port
Table 107 Advanced Application > PPPoE > Intermediate Agent
Page
Table 108 Advanced Application > PPPoE > Intermediate Agent > Port (continued)
32.5.1 PPPoE IA Per-Port Per-VLAN
Figure 163 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN
Table 109 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN
Note: Changes in this row are copied to all the VLANs as soon as you make them.
32.6 PPPoE IA for VLAN
Figure 164 Advanced Application > PPPoE > Intermediate Agent > VLAN
Table 109 Advanced Application > PPPoE > Intermediate Agent > Port > VLAN
Table 110 Advanced Application > PPPoE > Intermediate Agent > VLAN
Note: Changes in this row are copied to all the VLANs as soon as you make them.
Table 110 Advanced Application > PPPoE > Intermediate Agent > VLAN (continued)
CHAPTER 33
Private VLAN
33.1 Private VLAN Overview
Chapter 33 Private VLAN
33.2 Configuring Private VLAN
Click Advanced Application > Private VLAN in the navigation panel to display the screen as shown.
Figure 166 Advanced Application > Private VLAN
The following table describes the labels in this screen.
Table 111 Advanced Application > Private VLAN
Page
Page
CHAPTER 34
Green Ethernet
34.1 Green Ethernet Overview
34.2 Configuring Green Ethernet
Figure 167 Advanced Application > Green Ethernet
Table 112 Advanced Application > Green Ethernet
Page
Page
Page
Page
CHAPTER 35
Static Route
35.1 Static Routing Overview
Chapter 35 Static Route
35.2 Configuring Static Routing
Click IP Application > Static Routing in the navigation panel to display the screen as shown.
Figure 169 IP Application > Static Routing
The following table describes the related labels you use to create a static route.
Table 113 IP Application > Static Routing
Table 113 IP Application > Static Routing (continued)
Page
CHAPTER 36
Differentiated Services
36.1 DiffServ Overview
36.1.1 DSCP and Per-Hop Behavior
Figure 170 DiffServ: Differentiated Service Field
36.2 Two Rate Three Color Marker Traffic Policing
36.2.1 TRTCM-Color-blind Mode
Figure 172 TRTCM-Color-blind Mode
36.2.2 TRTCM-Color-aware Mode
Figure 173 TRTCM-Color-aware Mode
36.3 Activating DiffServ
Page
36.3.1 Configuring 2-Rate 3 Color Marker Settings
36.4 DSCP-to-IEEE 802.1p Priority Settings
Note: Changes in this row are copied to all the ports as soon as you
Table 115 IP Application > DiffServ > 2-rate 3 Color Marker (continued)
Table 116 Default DSCP-IEEE 802.1p Mapping
36.4.1 Configuring DSCP Settings
Figure 176 IP Application > DiffServ > DSCP Setting
Table 117 IP Application > DiffServ > DSCP Setting
CHAPTER 37
DHCP
37.1 DHCP Overview
37.1.1 DHCP Modes
37.1.2 DHCP Configuration Options
37.2 DHCP Status
Figure 177 IP Application > DHCP Status
37.3 DHCP Relay
37.3.1 DHCP Relay Agent Information
Table 118 IP Application > DHCP
37.3.2 Configuring DHCP Global Relay
Figure 178 IP Application > DHCP > Global
Table 119 Relay Agent Information
37.3.3 Global DHCP Relay Configuration Example
Figure 179 Global DHCP Relay Network Example
Table 120 IP Application > DHCP > Global
37.4 Configuring DHCP VLAN Settings
37.4.1 Example: DHCP Relay for Two VLANs
Table 121 IP Application > DHCP > VLAN
Figure 182 DHCP Relay for Two VLANs
Figure 183 DHCP Relay for Two VLANs Configuration Example
Page
PART V
Page
CHAPTER 38
Maintenance
38.1 The Maintenance Screen
Figure 184 Management > Maintenance
Table 122 Management > Maintenance
38.2 Load Factory Default
Figure 185 Load Factory Default: Start
38.3 Save Configuration
Table 122 Management > Maintenance (continued)
38.4 Reboot System
Figure 186 Reboot System: Confirmation
38.5 Firmware Upgrade
Figure 187 Management > Maintenance > Firmware Upgrade
38.6 Restore a Configuration File
Figure 188 Management > Maintenance > Restore Configuration
38.7 Backup a Configuration File
Figure 189 Management > Maintenance > Backup Configuration
38.8 FTP Command Line
38.8.1 Filename Conventions
38.8.1.1 Example FTP Commands
38.8.2 FTP Command Line Procedure
Table 123 Filename Conventions
38.8.3 GUI-based FTP Clients
38.8.4 FTP Restrictions
Page
CHAPTER 39
Access Control
Figure 190 Management > Access Control
39.1 Access Control Overview
39.2 The Access Control Main Screen
39.3 About SNMP
Figure 191 SNMP Management Model
39.3.1 SNMP v3 and Security
39.3.2 Supported MIBs
Table 125 SNMP Commands
MGS3700-12C Users Guide
39.3.3 SNMP Traps
Table 126 SNMP System Traps
Table 126 SNMP System Traps (continued)
Table 127 SNMP InterfaceTraps
Table 127 SNMP InterfaceTraps (continued)
Table 128 AAA Traps
Table 128 AAA Traps (continued)
Table 129 SNMP IP Traps
Table 130 SNMP Switch Traps
39.3.4 Configuring SNMP
Figure 192 Management > Access Control > SNMP
Table 130 SNMP Switch Traps (continued)
Page
Table 131 Management > Access Control > SNMP (continued)
39.3.5 Configuring SNMP Trap Group
Figure 193 Management > Access Control > SNMP > Trap Group
Table 132 Management > Access Control > SNMP > Trap Group
39.3.6 Setting Up Login Accounts
Note: It is highly recommended that you change the default administrator password (1234).
Figure 194 Management > Access Control > Logins
Table 133 Management > Access Control > Logins
39.4 SSH Overview
Figure 195 SSH Communication Example
Table 133 Management > Access Control > Logins (continued)
39.5 How SSH works
Figure 196 How SSH Works
39.6 SSH Implementation on the Switch
39.6.1 Requirements for Using SSH
39.7 Introduction to HTTPS
39.8 HTTPS Example
39.8.1 Internet Explorer Warning Messages
Figure 198 Security Alert Dialog Box (Internet Explorer)
39.8.2 Netscape Navigator Warning Messages
Page
39.9 Service Port Access Control
Figure 202 Management > Access Control > Service Access Control
39.10 Remote Management
Table 134 Management > Access Control > Service Access Control
Figure 203 Management > Access Control > Remote Management
Table 135 Management > Access Control > Remote Management
Page
CHAPTER 40
Diagnostic
Figure 204 Management > Diagnostic
40.1 Diagnostic
Table 136 Management > Diagnostic
CHAPTER 41
Syslog
41.1 Syslog Overview
Table 137 Syslog Severity Levels
41.2 Syslog Setup
Figure 205 Management > Syslog
Table 138 Management > Syslog
41.3 Syslog Server Setup
Figure 206 Management > Syslog > Syslog Server Setup
Table 139 Management > Syslog > Syslog Server Setup
Page
CHAPTER 42
Cluster Management
42.1 Cluster Management Status Overview
Table 140 ZyXEL Clustering Management Specifications
42.2 Cluster Management Status
42.2.1 Cluster Member Switch Management
Table 141 Management > Cluster Management: Status
Chapter 42 Cluster Management
configurator home page and the home page that you'd see if you accessed it directly are different.
Figure 209 Cluster Management: Cluster Member Web Configurator Screen
42.2.1.1 Uploading Firmware to a Cluster Member Switch
Figure 210 Example: Uploading Firmware to a Cluster Member Switch
Table 142 FTP Upload to Cluster Member Example
42.3 Clustering Management Configuration
Figure 211 Management > Cluster Management > Configuration
Table 143 Management > Cluster Management > Configuration
Chapter 42 Cluster Management
MGS3700-12C Users Guide 401
Table 143 Management > Cluster Management > Configuration (continued)
Page
CHAPTER 43
MAC Table
43.1 MAC Table Overview
43.2 Viewing the MAC Table
Chapter 43 MAC Table
MGS3700-12C Users Guide 405
The following table describes the labels in this screen.
Table 144 Management > MAC Table
Page
CHAPTER 44
ARP Table
44.1 ARP Table Overview
44.1.1 How ARP Works
44.2 Viewing the ARP Table
Figure 214 Management > ARP Table
Table 145 Management > ARP Table
CHAPTER 45
Configure Clone
Figure 215 Management > Configure Clone
45.1 Configure Clone
Chapter 45 Configure Clone
Table 146 Management > Configure Clone
Page
Page
Page
Page
CHAPTER 46
Troubleshooting
One of the LEDs does not behave as expected.
46.1 Power, Hardware Connections, and LEDs
The Switch does not turn on. None of the LEDs turn on.
46.2 Switch Access and Login
I forgot the IP address for the Switch.
I forgot the username and/or password.
I cannot see or access the Login screen in the web configurator.
I can see the Login screen, but I cannot log in to the Switch.
46.3 Switch Configuration
MGS3700-12C Users Guide 419
CHAPTER 47
Product Specifications
The following tables summarize the Switchs hardware and firmware features.
Table 147 Hardware Specifications
SPECIFICATION DESCRIPTION
Table 148 Firmware Specifications
Table 147 Hardware Specifications
Page
Note: Only upload firmware for your specific model!
Table 148 Firmware Specifications
Table 149 Feature Specifications
Table 149 Feature Specifications (continued)
Chapter 47 Product Specifications
MGS3700-12C Users Guide 425
The following list, which is not exhaustive, illustrates the standards supported in the Switch.
Table 150 Standards Supported
STANDARD DESCRIPTION
Table 150 Standards Supported (continued)
STANDARD DESCRIPTION
47.1 Fan Module Removal and Installation
Page
Page
Page
APPENDIX A
Common Services
Table 151 Commonly Used Services
Appendix A Common Services
Table 151 Commonly Used Services (continued)
NAME PROTOCOL PORT(S) DESCRIPTION
Appendix A Common Services
MGS3700-12C Users Guide 433
Table 151 Commonly Used Services (continued)
NAME PROTOCOL PORT(S) DESCRIPTION
Page
APPENDIX B 1 1/2012
Information
Copyright
Disclaimer
Trademarks
FCC Warning
CE Mark Warning:
Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:
Notices
Viewing Certifications
ZyXEL Limited Warranty
Note
Registration
Page
Index
Numbers
A
B
C
D
E
F
G
H
I
L
M
N
P
Q
R
S
T
U
V
W
Z
