Manuals / ZyXEL Communications / Household Appliance / Plumbing Product

ZyXEL Communications metrogigabit switch manual Dhcp Snooping, 277

Models: metrogigabit switch

1 448

Download 448 pages 49.97 Kb

Page 277

Image 277

Chapter 26 IP Source Guard

26.4 DHCP Snooping

Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping.

Figure 132 DHCP Snooping

MGS3700-12C User’s Guide

277

Page 277

Image 277

ZyXEL Communications metrogigabit switch manual Dhcp Snooping, 277

Contents

MGS3700-12C Page Intended Audience About This Users GuideNeed More Help? Syntax Conventions Document ConventionsDslam Icons Used in FiguresSafety Warnings Safety Warnings MGS3700-12C User’s Guide Contents Overview IP Application 335 Table of Contents Chapter Initial Setup Example 115 Chapter Static MAC Forward Setup 137 173 Chapter Classifier 211 255 Chapter Loop Guard 295 335 357 413 Part VII Appendices and Index Part Page Introduction Getting to Know Your SwitchBackbone Application Backbone Application Bridging ExampleIeee 802.1Q Vlan Application Examples High Performance Switching ExampleTag-based Vlan Example IPv6 Support Ways to Manage the SwitchGood Habits for Managing the Switch Getting to Know Your Switch MGS3700-12C User’s Guide Installation Scenarios Hardware Installation and ConnectionDesktop Installation Procedure Rack-mounted Installation Requirements Mounting the Switch on a RackPrecautions Attaching the Mounting Brackets Attaching the Mounting Brackets to the SwitchMounting the Switch on a Rack Mounting the Switch on a RackFront Panel Hardware OverviewFront Panel Connections Label DescriptionGigabit Ethernet Ports Console PortMini-GBIC Slots Default Ethernet Negotiation SettingsAuto-crossover Transceiver Removal Transceiver InstallationManagement Port Power ConnectorDC Power Connection AC Power ConnectionConnect a Sensor to the Signal Slot Signal SlotOutput LEDs Rear PanelLED Descriptions LED Color Statu DescriptionConfiguring the Switch Hardware Overview Hardware Overview MGS3700-12C User’s Guide System Login Web ConfiguratorWeb Configurator Login Web Configurator LayoutNavigation Panel Sub-links Overview Basic Setting Advanced Application IP Application ManagementLink Description Navigation Panel LinksVlan Dhcp AAAChange Your Password Saving Your ConfigurationResetting the Switch Switch LockoutReload the Configuration File Resetting the Switch Via the Console Port Help Logging Out of the Web ConfiguratorWeb Configurator MGS3700-12C User’s Guide Overview Initial Setup ExampleCreating a Vlan Setting Port VID Initial Setup Network Example Port VID Initial Setup Example Management IP Address Configuring Switch Management IP AddressClick Basic Setting IP Setup in the navigation panel Initial Setup Example MGS3700-12C User’s Guide Tutorials How to Use Dhcp Snooping on the SwitchHost Port Vlan Pvid Dhcp Snooping Connected Port Trusted Tutorial Settings in this TutorialTutorial Tag Untagged Frames Tutorial Set the Dhcp Server Port to Trusted Dhcp Relay Tutorial Introduction How to Use Dhcp Relay on the SwitchVlan Tutorial Set Vlan Type to 802.1Q Tutorial Create a Static Vlan Tutorial Add Tag for Frames Received on Port Configuring Dhcp RelayTroubleshooting How to Use PPPoE IA on the SwitchSettings in This Tutorial Configuring Switch aTutorials Configuring Switch B Tutorials Tutorials How to Use Error Disable and Recovery on the Switch Tutorials How to Set Up a Guest Vlan Creating a Guest Vlan Tutorials Enabling Ieee 802.1x Port Authentication Enabling Guest Vlan How to Do Port Isolation in a Vlan Internet Tutorials Tutorials Click Advanced Application Private Vlan Creating a Private Vlan RuleTutorials MGS3700-12C User’s Guide Basic Configuration Page System Status and Port Statistics Status Port Status SummaryLacp Up Time Status Port Details Status Port DetailsHOL RX CRC Basic Setting 100 System InformationMAX 101MIN RPM102 General Setup103 104 Introduction to VLANsSelect First , Sunday , November 105 Smart IsolationPort Setup screen Switch Setup Screen106 107 Switch. Smart isolation does not work with Mstp and/or portVlan port isolation or private Vlan and Mrstp on Based VlanManagement IP Addresses IP Setup108 109 Basic Setting IP SetupVID 110In-band IP Addresses 111Some web configurator screens Port Setup112 Make themHalf Duplex, 100M/Full Duplex and 1000M/Full Duplex 113Queue tag. See Priority Queue Assignment in on page 106 for Bpdu114 115 Part116 117 Introduction to Ieee 802.1Q Tagged VLANsTpid CFI Vlan IDForwarding Tagged and Untagged Frames Automatic Vlan RegistrationGarp Gvrp119 Port Vlan TrunkingIeee 802.1Q Vlan Terminology Vlan Term Description ParameterStatic Vlan Select the Vlan Type120 121 Static Vlan StatusVlan Details Configure a Static Vlan122 Active 123124 125 Configure Vlan Port SettingsGvrp 126 Subnet Based VLANsPvid Untag Only127 Configuring Subnet Based Vlan128 Advanced Application Vlan Vlan Port Setting Subnet Based129 Protocol Based VLANs130 Configuring Protocol Based VlanAre not allowed to be used for protocol based VLANs 131Create an IP-based Vlan Example Port-based Vlan Setup132 133 134 Configure a Port-based Vlan135 Port Based Vlan SetupChoose All connected or Port isolation 136 Configuring Static MAC Forwarding Static MAC Forward Setup137 Advanced Application Static MAC Forwarding 138139 140 Static Multicast Forwarding Overview Static Multicast Forward Setup141 142 Configuring Static Multicast ForwardingAdvanced Application Static Multicast Forwarding 143144 Filtering Configure a Filtering Rule145 MAC 14613.1 STP/RSTP Overview Spanning Tree ProtocolSTP Terminology 147148 How STP WorksSTP Path Costs Link Recommended Allowed Speed Value RangeMultiple Rstp STP Port States149 STP Port States150 Multiple STPMstp Network Example MST Region 151MST Instance 152Common and Internal Spanning Tree Cist 153 Spanning Tree Protocol Status Screen154 Spanning Tree ConfigurationConfiguration screen to enable Rstp on the Switch Configure Rapid Spanning Tree Protocol155 RstpBridge Protocol Data Unit Bpdu 156157 Rapid Spanning Tree Protocol Status158 Configuration screen to enable Mrstp on the Switch Configure Multiple Rapid Spanning Tree Protocol159 160 161 Multiple Rapid Spanning Tree Protocol Status162 163 Configure Multiple Spanning Tree Protocol164 Configuration screen to enable Mstp on the SwitchBridge Priority 165166 Multiple Spanning Tree Protocol StatusCST 167Msti 168 Bandwidth Control Overview Bandwidth ControlCIR and PIR 169170 Bandwidth Control Setup171 172 Broadcast Storm Control Broadcast Storm Control Setup173 174 Mirroring Port Mirroring Setup175 176 RMirror Overview RMirror177 178 RMirror Configuration179 SourceAdvanced Application Mirroring RMirror Source 180181 DestinationAdvanced Application Mirroring RMirror Destination 182183 Connected Port184 Link Aggregation Overview Link AggregationDynamic Link Aggregation 185Link Aggregation ID Peer Switch Link Aggregation ID Local SwitchLink Aggregation ID 186187 Link Aggregation Status188 189 Link Aggregation SettingPort in an active trunk group 190191 Link Aggregation Control ProtocolDynamic link aggregation 192 Static Trunking ExampleTrunking Example Physical Connections 193194 Port Authentication Overview Port AuthenticationIeee 802.1x Authentication 195196 MAC Authentication197 Port Authentication ConfigurationActivate Ieee 802.1x Security Before configuring it on each port198 199 Guest VlanGuest Vlan Example 200201 202 Activate MAC Authentication203 Lower value, then it supersedes this setting. See Section204 About Port Security Port Security205 206 Port Security SetupForwarding screen 207 208 Vlan MAC Address Limit209 210 Classifier Configuring the ClassifierAbout the Classifier and QoS 211Untagged , Ethernet II tagged and Ethernet II untagged 212Dscp 213You configure the socket numbers Viewing and Editing Classifier Configuration214 Classifier Summary Table 215Common Ethernet Types and Protocol Numbers Common IP Protocol Types and Protocol Numbers216 Classifier ExampleCommon TCP and UDP Port Numbers Protocol Name TCP/UDP Port NumberClassifier Example 217218 Policy Rules Overview Policy RuleDiffServ Dscp and Per-Hop Behavior220 Configuring Policy RulesAdvanced Application Policy Rule 221TOS 222Select Do not drop the matching frame previously marked for Select Send the packet to priority queue to put the packets223 Viewing and Editing Policy Configuration224 225 Policy Example226 Queuing Method Weighted Fair QueuingQueuing Method Overview Strictly Priority Queuing228 Weighted Round Robin Scheduling WRR229 Configuring Queuing230 Vlan Stacking Overview Vlan StackingVlan Stacking Example 231232 Vlan Stacking Port RolesFrame Format Vlan Tag Format233 Vlan Tag Format234 Configuring Vlan Stacking802.1Q Frame VID Vlan ID FCS235 Port-based Q-in-QThem This screen at a timeSpvid 236237 Selective Q-in-QCvid 238 Multicast Overview MulticastIP Multicast Addresses Igmp FilteringIgmp Snooping Multicast StatusIgmp Snooping and VLANs 240241 Multicast SettingJoin multicast groups 242You make them 243 Setting Igmp Filtering Profile screen244 Igmp Snooping Vlan245 Setting screen firstScreen 246 Igmp Filtering ProfileStart Address and End Address fields 247 MVR OverviewProfile MVR Modes Types of MVR PortsHow MVR Works 248249 General MVR ConfigurationCompatible 250251 MVR Group ConfigurationMvlan 252253 MVR Configuration Example254 MVR Group Configuration Example255 Authentication, Authorization and Accounting AAALocal User Accounts AAA ScreensRadius and TACACS+ 256257 Radius Server SetupShared Secret 258259 TACACS+ Server Setup260 261 AAA SetupMethod 2 and Method 3 fields 262263 264 Vendor Specific AttributeSupported VSAs Function Attribute265 Supported Radius AttributesTunnel Protocol Attribute Attributes Used for Authenticating Privilege Access Attributes Used for AuthenticationAttributes Used to Login Users Attributes Used by the Ieee 802.1x Authentication267 Attributes Used for AccountingAttributes Used for Accounting System Events Attributes Used for Accounting Exec EventsAttributes Used for Accounting Ieee 802.1x Events 268Radius Attributes Exec Events via IP Source Guard Overview IP Source Guard269 270 Dhcp Snooping OverviewTrusted vs. Untrusted Ports Dhcp Snooping Database271 Configuring Dhcp SnoopingDhcp Relay Option 82 Information 272 ARP Inspection OverviewARP Inspection and MAC Address Filters IP Source Guard Configuring ARP Inspection273 Syslog274 IP Source Guard Static BindingIP Source Guard Static Binding 275276 277 Dhcp Snooping278 Configure screen. See .5 on279 280 Dhcp Snooping ConfigureDhcp requests will not succeed 281Vlan too 282 Dhcp Snooping Port Configure283 Dhcp Snooping Vlan Configure284 Dhcp Snooping Configure screen. See .5 on285 ARP Inspection StatusDelete 286 ARP Inspection Vlan Status287 ARP Inspection Log StatusARP Inspection Vlan Configure screen, you can ARP Inspection Configure288 Syslog rate and Log interval 289290 ARP Inspection Port ConfigureInterval 291 ARP Inspection Port Configure292 ARP Inspection Vlan Configure293 294 Loop Guard Overview Loop Guard295 STP296 Switch in Loop State297 Loop Guard Setup298 Vlan Mapping Overview Vlan MappingVlan Mapping Example 299300 Enabling Vlan Mapping301 Configuring Vlan MappingTranslated VID field 302 Layer 2 Protocol Tunneling Overview Layer 2 Protocol Tunneling303 304 Layer 2 Protocol Tunneling Mode305 Configuring Layer 2 Protocol Tunneling306 UDLD, and Pagp on the access ports onlySFlow Overview SFlow307 308 SFlow Configuration309 SFlow Collector Configuration310 Error-Disable Recovery Overview Error DiableCPU Protection Overview 311CPU Protection Configuration Error Disable Screen312 313 Error-Disable Detect Configuration314 Errdisable CPU protection screen315 Error-Disable Recovery Configuration316 PPPoE Intermediate Agent Overview PPPoEPPPoE Intermediate Agent Tag Format 317318 Sub-Option FormatPPPoE IA Circuit ID Sub-option Format User-defined String PPPoE IA Remote ID Sub-option FormatPort State 32.2.1.2 WT-101 Default Circuit ID Syntax319 PPPoE IA Circuit ID Sub-option Format Defined in WT-101PPPoE Intermediate Agent PPPoE320 321 PPPoE IA Per-PortApplication PPPoE Intermediate Agent Port screen or for a Advanced Application PPPoE Intermediate Agent Port 322Untrusted 323Advanced Application PPPoE Intermediate Agent Port 324 PPPoE IA Per-Port Per-VLAN325 PPPoE IA for Vlan326 Private Vlan Overview Private Vlan327 328 Configuring Private Vlan329 330 Green Ethernet Overview Green Ethernet331 332 Configuring Green Ethernet333 334 335 IP Application336 Static Routing Overview Static Route337 338 Configuring Static Routing339 340 DiffServ Overview Differentiated Services341 DiffServ Network Example Two Rate Three Color Marker Traffic Policing342 343 TRTCM-Color-blind ModeActivating DiffServ TRTCM-Color-aware Mode344 PIR?IP Application DiffServ 345346 Configuring 2-Rate 3 Color Marker SettingsDefault DSCP-IEEE 802.1p Mapping DSCP-to-IEEE 802.1p Priority Settings347 Dscp Value348 Configuring Dscp SettingsDhcp Overview Dhcp Configuration OptionsDhcp Modes 349Dhcp Relay Dhcp StatusDhcp Relay Agent Information 350General Setup Configuring Dhcp Global Relay351 Relay Agent Information352 Global Dhcp Relay Configuration ExampleVLAN1VLAN2 353 Configuring Dhcp Vlan SettingsExample Dhcp Relay for Two VLANs General Setup screen354 Dhcp Relay for Two VLANs Dhcp Relay for Two VLANs Configuration Example356 357 Management358 Maintenance Screen Maintenance359 Save Configuration Load Factory DefaultSettings to the current configuration on the Switch 360Firmware Upgrade Reboot System361 362 Restore a Configuration FileFTP Command Line Backup a Configuration FileFilename Conventions 363Example FTP Commands FTP Command Line Procedure364 Filename ConventionsGUI-based FTP Clients Command DescriptionFTP Restrictions 365366 Access Control Overview Access ControlAccess Control Main Screen Access Control Overview368 About SnmpSnmp v3 and Security Snmp CommandsSupported MIBs 369370 Snmp TrapsSnmp System Traps Option Object Label Object ID DescriptionSnmp InterfaceTraps 371AAA Traps 372373 Snmp Switch TrapsSnmp IP Traps 374 Configuring SnmpCFM Version 375Specify in this section to create accounts on the Snmp Manager376 Security level or higher than the security level settings on377 Configuring Snmp Trap Group378 Setting Up Login Accounts379 SSH Overview380 How SSH worksRequirements for Using SSH SSH Implementation on the SwitchIntroduction to Https 381Internet Explorer Warning Messages Https Example382 383 Netscape Navigator Warning MessagesSecurity Certificate 2 Netscape Security Certificate 1 NetscapeMain Screen Service Port Access Control385 386 Remote ManagementHTTP/ICMP 387SNMP/SSH Https 388 Diagnostic Diagnostic389 390 Syslog Overview Syslog391 Syslog Severity Levels392 Syslog Setup393 Syslog Server Setup394 Cluster Management ZyXEL Clustering Management SpecificationsCluster Management Status Overview 395396 Cluster Management Status397 Cluster Member Switch ManagementManager 398 Uploading Firmware to a Cluster Member SwitchFTP Upload to Cluster Member Example 399FTP Parameter Description 400 Clustering Management ConfigurationBased Vlan 401Candidate list 402 MAC Table Overview MAC Table403 404 Viewing the MAC Table405 406 ARP Table Overview ARP TableHow ARP Works 407408 Viewing the ARP TableConfigure Clone Configure Clone409 410 411 412 413 Troubleshooting Product Specifications414 Power, Hardware Connections, and LEDs Troubleshooting415 416 Switch Access and LoginAdvanced Suggestions 417418 Switch ConfigurationHardware Specifications Product SpecificationsSpecification Description 419Feature Description Firmware Specifications420 Queuing 421422 423 Feature SpecificationsMVR 424Standards Supported 425Standard Description BRIDGE-MIB, Q-BRIDGE-MIB 426EMC 427 Fan Module Removal and Installation428 429 Appendices Index430 431 Commonly Used ServicesName Protocol Ports Description 432 433 434 Certifications Copyright435 FCC Warning CE Mark Warning 436437 ZyXEL Limited Warranty438 439 IndexNumbers ARP440 441 442 MIB 443Mrstp 444 SPQ 445Trtcm 446Vlan 104 447448