Manuals / ZyXEL Communications / Household Appliance / Plumbing Product

ZyXEL Communications metrogigabit switch manual 294

Models: metrogigabit switch

1 448

Download 448 pages 49.97 Kb

Page 294

Chapter 26 IP Source Guard

294

MGS3700-12C User’s Guide

Image 294

ZyXEL Communications metrogigabit switch manual 294

Contents

MGS3700-12C Page About This Users Guide Intended AudienceNeed More Help? Document Conventions Syntax ConventionsIcons Used in Figures DslamSafety Warnings Safety Warnings MGS3700-12C User’s Guide Contents Overview IP Application 335 Table of Contents Chapter Initial Setup Example 115 Chapter Static MAC Forward Setup 137 173 Chapter Classifier 211 255 Chapter Loop Guard 295 335 357 413 Part VII Appendices and Index Part Page Getting to Know Your Switch IntroductionBackbone Application Bridging Example Backbone ApplicationHigh Performance Switching Example Ieee 802.1Q Vlan Application ExamplesTag-based Vlan Example Ways to Manage the Switch IPv6 SupportGood Habits for Managing the Switch Getting to Know Your Switch MGS3700-12C User’s Guide Hardware Installation and Connection Installation ScenariosDesktop Installation Procedure Mounting the Switch on a Rack Rack-mounted Installation RequirementsPrecautions Attaching the Mounting Brackets to the Switch Attaching the Mounting BracketsMounting the Switch on a Rack Mounting the Switch on a RackFront Panel Connections Hardware OverviewFront Panel Label DescriptionConsole Port Gigabit Ethernet PortsDefault Ethernet Negotiation Settings Mini-GBIC SlotsAuto-crossover Transceiver Installation Transceiver RemovalPower Connector Management PortAC Power Connection DC Power ConnectionSignal Slot Connect a Sensor to the Signal SlotOutput LED Descriptions Rear PanelLEDs LED Color Statu DescriptionConfiguring the Switch Hardware Overview Hardware Overview MGS3700-12C User’s Guide Web Configurator System LoginWeb Configurator Layout Web Configurator LoginBasic Setting Advanced Application IP Application Management Navigation Panel Sub-links OverviewNavigation Panel Links Link DescriptionVlan AAA DhcpSaving Your Configuration Change Your PasswordSwitch Lockout Resetting the SwitchReload the Configuration File Resetting the Switch Via the Console Port Logging Out of the Web Configurator HelpWeb Configurator MGS3700-12C User’s Guide Initial Setup Example OverviewCreating a Vlan Setting Port VID Initial Setup Network Example Port VID Configuring Switch Management IP Address Initial Setup Example Management IP AddressClick Basic Setting IP Setup in the navigation panel Initial Setup Example MGS3700-12C User’s Guide How to Use Dhcp Snooping on the Switch TutorialsTutorial Settings in this Tutorial Host Port Vlan Pvid Dhcp Snooping Connected Port TrustedTutorial Tag Untagged Frames Tutorial Set the Dhcp Server Port to Trusted How to Use Dhcp Relay on the Switch Dhcp Relay Tutorial IntroductionVlan Tutorial Set Vlan Type to 802.1Q Tutorial Create a Static Vlan Configuring Dhcp Relay Tutorial Add Tag for Frames Received on PortHow to Use PPPoE IA on the Switch TroubleshootingConfiguring Switch a Settings in This TutorialTutorials Configuring Switch B Tutorials Tutorials How to Use Error Disable and Recovery on the Switch Tutorials How to Set Up a Guest Vlan Creating a Guest Vlan Tutorials Enabling Ieee 802.1x Port Authentication Enabling Guest Vlan How to Do Port Isolation in a Vlan Internet Tutorials Tutorials Creating a Private Vlan Rule Click Advanced Application Private VlanTutorials MGS3700-12C User’s Guide Basic Configuration Page System Status and Port Statistics Port Status Summary StatusLacp Up Time Status Port Details Status Port DetailsHOL RX CRC Basic Setting System Information 100MIN 101MAX RPMGeneral Setup 102103 Introduction to VLANs 104Select First , Sunday , November Smart Isolation 105Switch Setup Screen Port Setup screen106 Vlan port isolation or private Vlan and Mrstp on Switch. Smart isolation does not work with Mstp and/or port107 Based VlanIP Setup Management IP Addresses108 Basic Setting IP Setup 109110 VID111 In-band IP Addresses112 Port SetupSome web configurator screens Make themQueue tag. See Priority Queue Assignment in on page 106 for 113Half Duplex, 100M/Full Duplex and 1000M/Full Duplex Bpdu114 Part 115116 Tpid Introduction to Ieee 802.1Q Tagged VLANs117 CFI Vlan IDGarp Automatic Vlan RegistrationForwarding Tagged and Untagged Frames GvrpIeee 802.1Q Vlan Terminology Port Vlan Trunking119 Vlan Term Description ParameterSelect the Vlan Type Static Vlan120 Static Vlan Status 121Configure a Static Vlan Vlan Details122 123 Active124 Configure Vlan Port Settings 125Gvrp Pvid Subnet Based VLANs126 Untag OnlyConfiguring Subnet Based Vlan 127Advanced Application Vlan Vlan Port Setting Subnet Based 128Protocol Based VLANs 129Configuring Protocol Based Vlan 130131 Are not allowed to be used for protocol based VLANsPort-based Vlan Setup Create an IP-based Vlan Example132 133 Configure a Port-based Vlan 134Port Based Vlan Setup 135Choose All connected or Port isolation 136 Static MAC Forward Setup Configuring Static MAC Forwarding137 138 Advanced Application Static MAC Forwarding139 140 Static Multicast Forward Setup Static Multicast Forwarding Overview141 Configuring Static Multicast Forwarding 142143 Advanced Application Static Multicast Forwarding144 Configure a Filtering Rule Filtering145 146 MACSTP Terminology Spanning Tree Protocol13.1 STP/RSTP Overview 147STP Path Costs How STP Works148 Link Recommended Allowed Speed Value Range149 STP Port StatesMultiple Rstp STP Port StatesMultiple STP 150Mstp Network Example 151 MST Region152 MST InstanceCommon and Internal Spanning Tree Cist Spanning Tree Protocol Status Screen 153Spanning Tree Configuration 154155 Configure Rapid Spanning Tree ProtocolConfiguration screen to enable Rstp on the Switch Rstp156 Bridge Protocol Data Unit BpduRapid Spanning Tree Protocol Status 157158 Configure Multiple Rapid Spanning Tree Protocol Configuration screen to enable Mrstp on the Switch159 160 Multiple Rapid Spanning Tree Protocol Status 161162 Configure Multiple Spanning Tree Protocol 163Configuration screen to enable Mstp on the Switch 164165 Bridge PriorityMultiple Spanning Tree Protocol Status 166167 CSTMsti 168 CIR and PIR Bandwidth ControlBandwidth Control Overview 169Bandwidth Control Setup 170171 172 Broadcast Storm Control Setup Broadcast Storm Control173 174 Port Mirroring Setup Mirroring175 176 RMirror RMirror Overview177 RMirror Configuration 178Source 179180 Advanced Application Mirroring RMirror SourceDestination 181182 Advanced Application Mirroring RMirror DestinationConnected Port 183184 Dynamic Link Aggregation Link AggregationLink Aggregation Overview 185Link Aggregation ID Link Aggregation ID Local SwitchLink Aggregation ID Peer Switch 186Link Aggregation Status 187188 Link Aggregation Setting 189190 Port in an active trunk groupLink Aggregation Control Protocol 191Dynamic link aggregation Static Trunking Example 192193 Trunking Example Physical Connections194 Ieee 802.1x Authentication Port AuthenticationPort Authentication Overview 195MAC Authentication 196Port Authentication Configuration 197Before configuring it on each port Activate Ieee 802.1x Security198 Guest Vlan 199200 Guest Vlan Example201 Activate MAC Authentication 202Lower value, then it supersedes this setting. See Section 203204 Port Security About Port Security205 Port Security Setup 206Forwarding screen 207 Vlan MAC Address Limit 208209 210 About the Classifier and QoS Configuring the ClassifierClassifier 211212 Untagged , Ethernet II tagged and Ethernet II untagged213 DscpViewing and Editing Classifier Configuration You configure the socket numbers214 Common Ethernet Types and Protocol Numbers 215Classifier Summary Table Common IP Protocol Types and Protocol NumbersCommon TCP and UDP Port Numbers Classifier Example216 Protocol Name TCP/UDP Port Number217 Classifier Example218 DiffServ Policy RulePolicy Rules Overview Dscp and Per-Hop BehaviorConfiguring Policy Rules 220221 Advanced Application Policy RuleSelect Do not drop the matching frame previously marked for 222TOS Select Send the packet to priority queue to put the packetsViewing and Editing Policy Configuration 223224 Policy Example 225226 Queuing Method Overview Weighted Fair QueuingQueuing Method Strictly Priority QueuingWeighted Round Robin Scheduling WRR 228Configuring Queuing 229230 Vlan Stacking Example Vlan StackingVlan Stacking Overview 231Vlan Stacking Port Roles 232233 Vlan Tag FormatFrame Format Vlan Tag Format802.1Q Frame Configuring Vlan Stacking234 VID Vlan ID FCSThem Port-based Q-in-Q235 This screen at a time236 SpvidSelective Q-in-Q 237Cvid 238 IP Multicast Addresses MulticastMulticast Overview Igmp FilteringIgmp Snooping and VLANs Multicast StatusIgmp Snooping 240Multicast Setting 241242 Join multicast groupsYou make them Setting Igmp Filtering Profile screen 243Igmp Snooping Vlan 244Setting screen first 245Screen Igmp Filtering Profile 246Start Address and End Address fields MVR Overview 247Profile How MVR Works Types of MVR PortsMVR Modes 248General MVR Configuration 249250 CompatibleMVR Group Configuration 251252 MvlanMVR Configuration Example 253MVR Group Configuration Example 254Authentication, Authorization and Accounting AAA 255Radius and TACACS+ AAA ScreensLocal User Accounts 256Radius Server Setup 257258 Shared SecretTACACS+ Server Setup 259260 AAA Setup 261262 Method 2 and Method 3 fields263 Supported VSAs Vendor Specific Attribute264 Function AttributeSupported Radius Attributes 265Tunnel Protocol Attribute Attributes Used to Login Users Attributes Used for AuthenticationAttributes Used for Authenticating Privilege Access Attributes Used by the Ieee 802.1x AuthenticationAttributes Used for Accounting System Events Attributes Used for Accounting267 Attributes Used for Accounting Exec Events268 Attributes Used for Accounting Ieee 802.1x EventsRadius Attributes Exec Events via IP Source Guard IP Source Guard Overview269 Trusted vs. Untrusted Ports Dhcp Snooping Overview270 Dhcp Snooping DatabaseConfiguring Dhcp Snooping 271Dhcp Relay Option 82 Information ARP Inspection Overview 272ARP Inspection and MAC Address Filters 273 Configuring ARP InspectionIP Source Guard SyslogIP Source Guard Static Binding 274275 IP Source Guard Static Binding276 Dhcp Snooping 277Configure screen. See .5 on 278279 Dhcp Snooping Configure 280281 Dhcp requests will not succeedVlan too Dhcp Snooping Port Configure 282Dhcp Snooping Vlan Configure 283Dhcp Snooping Configure screen. See .5 on 284ARP Inspection Status 285Delete ARP Inspection Vlan Status 286ARP Inspection Log Status 287ARP Inspection Configure ARP Inspection Vlan Configure screen, you can288 289 Syslog rate and Log intervalARP Inspection Port Configure 290Interval ARP Inspection Port Configure 291ARP Inspection Vlan Configure 292293 294 295 Loop GuardLoop Guard Overview STPSwitch in Loop State 296Loop Guard Setup 297298 Vlan Mapping Example Vlan MappingVlan Mapping Overview 299Enabling Vlan Mapping 300Configuring Vlan Mapping 301Translated VID field 302 Layer 2 Protocol Tunneling Layer 2 Protocol Tunneling Overview303 Layer 2 Protocol Tunneling Mode 304Configuring Layer 2 Protocol Tunneling 305UDLD, and Pagp on the access ports only 306SFlow SFlow Overview307 SFlow Configuration 308SFlow Collector Configuration 309310 CPU Protection Overview Error DiableError-Disable Recovery Overview 311Error Disable Screen CPU Protection Configuration312 Error-Disable Detect Configuration 313Errdisable CPU protection screen 314Error-Disable Recovery Configuration 315316 PPPoE Intermediate Agent Tag Format PPPoEPPPoE Intermediate Agent Overview 317PPPoE IA Circuit ID Sub-option Format User-defined String Sub-Option Format318 PPPoE IA Remote ID Sub-option Format319 32.2.1.2 WT-101 Default Circuit ID SyntaxPort State PPPoE IA Circuit ID Sub-option Format Defined in WT-101PPPoE PPPoE Intermediate Agent320 PPPoE IA Per-Port 321Application PPPoE Intermediate Agent Port screen or for a 322 Advanced Application PPPoE Intermediate Agent Port323 UntrustedAdvanced Application PPPoE Intermediate Agent Port PPPoE IA Per-Port Per-VLAN 324PPPoE IA for Vlan 325326 Private Vlan Private Vlan Overview327 Configuring Private Vlan 328329 330 Green Ethernet Green Ethernet Overview331 Configuring Green Ethernet 332333 334 IP Application 335336 Static Route Static Routing Overview337 Configuring Static Routing 338339 340 Differentiated Services DiffServ Overview341 Two Rate Three Color Marker Traffic Policing DiffServ Network Example342 TRTCM-Color-blind Mode 343344 TRTCM-Color-aware ModeActivating DiffServ PIR?345 IP Application DiffServConfiguring 2-Rate 3 Color Marker Settings 346347 DSCP-to-IEEE 802.1p Priority SettingsDefault DSCP-IEEE 802.1p Mapping Dscp ValueConfiguring Dscp Settings 348Dhcp Modes Dhcp Configuration OptionsDhcp Overview 349Dhcp Relay Agent Information Dhcp StatusDhcp Relay 350351 Configuring Dhcp Global RelayGeneral Setup Relay Agent InformationGlobal Dhcp Relay Configuration Example 352VLAN1VLAN2 Configuring Dhcp Vlan Settings 353General Setup screen Example Dhcp Relay for Two VLANs354 Dhcp Relay for Two VLANs Configuration Example Dhcp Relay for Two VLANs356 Management 357358 Maintenance Maintenance Screen359 Settings to the current configuration on the Switch Load Factory DefaultSave Configuration 360Reboot System Firmware Upgrade361 Restore a Configuration File 362Filename Conventions Backup a Configuration FileFTP Command Line 363364 FTP Command Line ProcedureExample FTP Commands Filename ConventionsFTP Restrictions Command DescriptionGUI-based FTP Clients 365366 Access Control Main Screen Access ControlAccess Control Overview Access Control OverviewAbout Snmp 368Supported MIBs Snmp CommandsSnmp v3 and Security 369Snmp System Traps Snmp Traps370 Option Object Label Object ID Description371 Snmp InterfaceTraps372 AAA TrapsSnmp Switch Traps 373Snmp IP Traps Configuring Snmp 374CFM Specify in this section to create accounts on the Snmp 375Version ManagerSecurity level or higher than the security level settings on 376Configuring Snmp Trap Group 377Setting Up Login Accounts 378SSH Overview 379How SSH works 380Introduction to Https SSH Implementation on the SwitchRequirements for Using SSH 381Https Example Internet Explorer Warning Messages382 Netscape Navigator Warning Messages 383Security Certificate 1 Netscape Security Certificate 2 NetscapeService Port Access Control Main Screen385 Remote Management 386387 HTTP/ICMPSNMP/SSH Https 388 Diagnostic Diagnostic389 390 391 SyslogSyslog Overview Syslog Severity LevelsSyslog Setup 392Syslog Server Setup 393394 Cluster Management Status Overview ZyXEL Clustering Management SpecificationsCluster Management 395Cluster Management Status 396Cluster Member Switch Management 397Manager Uploading Firmware to a Cluster Member Switch 398399 FTP Upload to Cluster Member ExampleFTP Parameter Description Clustering Management Configuration 400401 Based VlanCandidate list 402 MAC Table MAC Table Overview403 Viewing the MAC Table 404405 406 How ARP Works ARP TableARP Table Overview 407Viewing the ARP Table 408Configure Clone Configure Clone409 410 411 412 Troubleshooting Product Specifications 413414 Troubleshooting Power, Hardware Connections, and LEDs415 Switch Access and Login 416417 Advanced SuggestionsSwitch Configuration 418Specification Description Product SpecificationsHardware Specifications 419Firmware Specifications Feature Description420 421 Queuing422 Feature Specifications 423424 MVR425 Standards SupportedStandard Description 426 BRIDGE-MIB, Q-BRIDGE-MIBEMC Fan Module Removal and Installation 427428 Appendices Index 429430 Commonly Used Services 431Name Protocol Ports Description 432 433 434 Copyright Certifications435 436 FCC Warning CE Mark WarningZyXEL Limited Warranty 437438 Numbers Index439 ARP440 441 442 443 MIBMrstp 444 445 SPQ446 Trtcm447 Vlan 104448