Manuals / ZyXEL Communications / Household Appliance / Plumbing Product

ZyXEL Communications metrogigabit switch manual 316

Models: metrogigabit switch

1 448

Download 448 pages 49.97 Kb

Page 316

Chapter 31 Error Diable

316

MGS3700-12C User’s Guide

Image 316

ZyXEL Communications metrogigabit switch manual 316

Contents

MGS3700-12C Page About This Users Guide Intended AudienceNeed More Help? Document Conventions Syntax ConventionsIcons Used in Figures DslamSafety Warnings Safety Warnings MGS3700-12C User’s Guide Contents Overview IP Application 335 Table of Contents Chapter Initial Setup Example 115 Chapter Static MAC Forward Setup 137 173 Chapter Classifier 211 255 Chapter Loop Guard 295 335 357 413 Part VII Appendices and Index Part Page Introduction Getting to Know Your SwitchBackbone Application Bridging Example Backbone ApplicationIeee 802.1Q Vlan Application Examples High Performance Switching ExampleTag-based Vlan Example Ways to Manage the Switch IPv6 SupportGood Habits for Managing the Switch Getting to Know Your Switch MGS3700-12C User’s Guide Installation Scenarios Hardware Installation and ConnectionDesktop Installation Procedure Rack-mounted Installation Requirements Mounting the Switch on a RackPrecautions Attaching the Mounting Brackets to the Switch Attaching the Mounting BracketsMounting the Switch on a Rack Mounting the Switch on a RackHardware Overview Front PanelFront Panel Connections Label DescriptionConsole Port Gigabit Ethernet PortsMini-GBIC Slots Default Ethernet Negotiation SettingsAuto-crossover Transceiver Installation Transceiver RemovalPower Connector Management PortAC Power Connection DC Power ConnectionSignal Slot Connect a Sensor to the Signal SlotOutput Rear Panel LEDsLED Descriptions LED Color Statu DescriptionConfiguring the Switch Hardware Overview Hardware Overview MGS3700-12C User’s Guide Web Configurator System LoginWeb Configurator Layout Web Configurator LoginBasic Setting Advanced Application IP Application Management Navigation Panel Sub-links OverviewLink Description Navigation Panel LinksVlan AAA DhcpSaving Your Configuration Change Your PasswordResetting the Switch Switch LockoutReload the Configuration File Resetting the Switch Via the Console Port Logging Out of the Web Configurator HelpWeb Configurator MGS3700-12C User’s Guide Overview Initial Setup ExampleCreating a Vlan Setting Port VID Initial Setup Network Example Port VID Configuring Switch Management IP Address Initial Setup Example Management IP AddressClick Basic Setting IP Setup in the navigation panel Initial Setup Example MGS3700-12C User’s Guide How to Use Dhcp Snooping on the Switch TutorialsTutorial Settings in this Tutorial Host Port Vlan Pvid Dhcp Snooping Connected Port TrustedTutorial Tag Untagged Frames Tutorial Set the Dhcp Server Port to Trusted How to Use Dhcp Relay on the Switch Dhcp Relay Tutorial IntroductionVlan Tutorial Set Vlan Type to 802.1Q Tutorial Create a Static Vlan Configuring Dhcp Relay Tutorial Add Tag for Frames Received on PortHow to Use PPPoE IA on the Switch TroubleshootingConfiguring Switch a Settings in This TutorialTutorials Configuring Switch B Tutorials Tutorials How to Use Error Disable and Recovery on the Switch Tutorials How to Set Up a Guest Vlan Creating a Guest Vlan Tutorials Enabling Ieee 802.1x Port Authentication Enabling Guest Vlan How to Do Port Isolation in a Vlan Internet Tutorials Tutorials Creating a Private Vlan Rule Click Advanced Application Private VlanTutorials MGS3700-12C User’s Guide Basic Configuration Page System Status and Port Statistics Status Port Status SummaryLacp Up Time Status Port Details Status Port DetailsHOL RX CRC Basic Setting System Information 100101 MAXMIN RPMGeneral Setup 102103 104 Introduction to VLANsSelect First , Sunday , November Smart Isolation 105Port Setup screen Switch Setup Screen106 Switch. Smart isolation does not work with Mstp and/or port 107Vlan port isolation or private Vlan and Mrstp on Based VlanManagement IP Addresses IP Setup108 Basic Setting IP Setup 109110 VID111 In-band IP AddressesPort Setup Some web configurator screens112 Make them113 Half Duplex, 100M/Full Duplex and 1000M/Full DuplexQueue tag. See Priority Queue Assignment in on page 106 for Bpdu114 Part 115116 Introduction to Ieee 802.1Q Tagged VLANs 117Tpid CFI Vlan IDAutomatic Vlan Registration Forwarding Tagged and Untagged FramesGarp GvrpPort Vlan Trunking 119Ieee 802.1Q Vlan Terminology Vlan Term Description ParameterStatic Vlan Select the Vlan Type120 Static Vlan Status 121Vlan Details Configure a Static Vlan122 123 Active124 125 Configure Vlan Port SettingsGvrp Subnet Based VLANs 126Pvid Untag OnlyConfiguring Subnet Based Vlan 127Advanced Application Vlan Vlan Port Setting Subnet Based 128Protocol Based VLANs 129Configuring Protocol Based Vlan 130131 Are not allowed to be used for protocol based VLANsCreate an IP-based Vlan Example Port-based Vlan Setup132 133 Configure a Port-based Vlan 134135 Port Based Vlan SetupChoose All connected or Port isolation 136 Configuring Static MAC Forwarding Static MAC Forward Setup137 138 Advanced Application Static MAC Forwarding139 140 Static Multicast Forwarding Overview Static Multicast Forward Setup141 Configuring Static Multicast Forwarding 142143 Advanced Application Static Multicast Forwarding144 Filtering Configure a Filtering Rule145 146 MACSpanning Tree Protocol 13.1 STP/RSTP OverviewSTP Terminology 147How STP Works 148STP Path Costs Link Recommended Allowed Speed Value RangeSTP Port States Multiple Rstp149 STP Port States150 Multiple STPMstp Network Example 151 MST RegionMST Instance 152Common and Internal Spanning Tree Cist Spanning Tree Protocol Status Screen 153Spanning Tree Configuration 154Configure Rapid Spanning Tree Protocol Configuration screen to enable Rstp on the Switch155 Rstp156 Bridge Protocol Data Unit BpduRapid Spanning Tree Protocol Status 157158 Configuration screen to enable Mrstp on the Switch Configure Multiple Rapid Spanning Tree Protocol159 160 Multiple Rapid Spanning Tree Protocol Status 161162 Configure Multiple Spanning Tree Protocol 163Configuration screen to enable Mstp on the Switch 164165 Bridge PriorityMultiple Spanning Tree Protocol Status 166CST 167Msti 168 Bandwidth Control Bandwidth Control OverviewCIR and PIR 169Bandwidth Control Setup 170171 172 Broadcast Storm Control Broadcast Storm Control Setup173 174 Mirroring Port Mirroring Setup175 176 RMirror Overview RMirror177 RMirror Configuration 178Source 179180 Advanced Application Mirroring RMirror SourceDestination 181182 Advanced Application Mirroring RMirror DestinationConnected Port 183184 Link Aggregation Link Aggregation OverviewDynamic Link Aggregation 185Link Aggregation ID Local Switch Link Aggregation ID Peer SwitchLink Aggregation ID 186Link Aggregation Status 187188 Link Aggregation Setting 189190 Port in an active trunk group191 Link Aggregation Control ProtocolDynamic link aggregation Static Trunking Example 192193 Trunking Example Physical Connections194 Port Authentication Port Authentication OverviewIeee 802.1x Authentication 195MAC Authentication 196Port Authentication Configuration 197Activate Ieee 802.1x Security Before configuring it on each port198 Guest Vlan 199200 Guest Vlan Example201 Activate MAC Authentication 202Lower value, then it supersedes this setting. See Section 203204 About Port Security Port Security205 206 Port Security SetupForwarding screen 207 Vlan MAC Address Limit 208209 210 Configuring the Classifier ClassifierAbout the Classifier and QoS 211212 Untagged , Ethernet II tagged and Ethernet II untagged213 DscpYou configure the socket numbers Viewing and Editing Classifier Configuration214 215 Classifier Summary TableCommon Ethernet Types and Protocol Numbers Common IP Protocol Types and Protocol NumbersClassifier Example 216Common TCP and UDP Port Numbers Protocol Name TCP/UDP Port Number217 Classifier Example218 Policy Rule Policy Rules OverviewDiffServ Dscp and Per-Hop BehaviorConfiguring Policy Rules 220221 Advanced Application Policy Rule222 TOSSelect Do not drop the matching frame previously marked for Select Send the packet to priority queue to put the packetsViewing and Editing Policy Configuration 223224 Policy Example 225226 Weighted Fair Queuing Queuing MethodQueuing Method Overview Strictly Priority QueuingWeighted Round Robin Scheduling WRR 228Configuring Queuing 229230 Vlan Stacking Vlan Stacking OverviewVlan Stacking Example 231Vlan Stacking Port Roles 232Vlan Tag Format Frame Format233 Vlan Tag FormatConfiguring Vlan Stacking 234802.1Q Frame VID Vlan ID FCSPort-based Q-in-Q 235Them This screen at a time236 Spvid237 Selective Q-in-QCvid 238 Multicast Multicast OverviewIP Multicast Addresses Igmp FilteringMulticast Status Igmp SnoopingIgmp Snooping and VLANs 240Multicast Setting 241Join multicast groups 242You make them Setting Igmp Filtering Profile screen 243Igmp Snooping Vlan 244245 Setting screen firstScreen 246 Igmp Filtering ProfileStart Address and End Address fields 247 MVR OverviewProfile Types of MVR Ports MVR ModesHow MVR Works 248General MVR Configuration 249250 CompatibleMVR Group Configuration 251252 MvlanMVR Configuration Example 253MVR Group Configuration Example 254Authentication, Authorization and Accounting AAA 255AAA Screens Local User AccountsRadius and TACACS+ 256Radius Server Setup 257258 Shared SecretTACACS+ Server Setup 259260 AAA Setup 261262 Method 2 and Method 3 fields263 Vendor Specific Attribute 264Supported VSAs Function Attribute265 Supported Radius AttributesTunnel Protocol Attribute Attributes Used for Authentication Attributes Used for Authenticating Privilege AccessAttributes Used to Login Users Attributes Used by the Ieee 802.1x AuthenticationAttributes Used for Accounting 267Attributes Used for Accounting System Events Attributes Used for Accounting Exec EventsAttributes Used for Accounting Ieee 802.1x Events 268Radius Attributes Exec Events via IP Source Guard Overview IP Source Guard269 Dhcp Snooping Overview 270Trusted vs. Untrusted Ports Dhcp Snooping Database271 Configuring Dhcp SnoopingDhcp Relay Option 82 Information 272 ARP Inspection OverviewARP Inspection and MAC Address Filters Configuring ARP Inspection IP Source Guard273 SyslogIP Source Guard Static Binding 274275 IP Source Guard Static Binding276 Dhcp Snooping 277Configure screen. See .5 on 278279 Dhcp Snooping Configure 280Dhcp requests will not succeed 281Vlan too Dhcp Snooping Port Configure 282Dhcp Snooping Vlan Configure 283Dhcp Snooping Configure screen. See .5 on 284285 ARP Inspection StatusDelete ARP Inspection Vlan Status 286ARP Inspection Log Status 287ARP Inspection Vlan Configure screen, you can ARP Inspection Configure288 289 Syslog rate and Log interval290 ARP Inspection Port ConfigureInterval ARP Inspection Port Configure 291ARP Inspection Vlan Configure 292293 294 Loop Guard Loop Guard Overview295 STPSwitch in Loop State 296Loop Guard Setup 297298 Vlan Mapping Vlan Mapping OverviewVlan Mapping Example 299Enabling Vlan Mapping 300301 Configuring Vlan MappingTranslated VID field 302 Layer 2 Protocol Tunneling Overview Layer 2 Protocol Tunneling303 Layer 2 Protocol Tunneling Mode 304Configuring Layer 2 Protocol Tunneling 305UDLD, and Pagp on the access ports only 306SFlow Overview SFlow307 SFlow Configuration 308SFlow Collector Configuration 309310 Error Diable Error-Disable Recovery OverviewCPU Protection Overview 311CPU Protection Configuration Error Disable Screen312 Error-Disable Detect Configuration 313Errdisable CPU protection screen 314Error-Disable Recovery Configuration 315316 PPPoE PPPoE Intermediate Agent OverviewPPPoE Intermediate Agent Tag Format 317Sub-Option Format 318PPPoE IA Circuit ID Sub-option Format User-defined String PPPoE IA Remote ID Sub-option Format32.2.1.2 WT-101 Default Circuit ID Syntax Port State319 PPPoE IA Circuit ID Sub-option Format Defined in WT-101PPPoE Intermediate Agent PPPoE320 321 PPPoE IA Per-PortApplication PPPoE Intermediate Agent Port screen or for a 322 Advanced Application PPPoE Intermediate Agent PortUntrusted 323Advanced Application PPPoE Intermediate Agent Port PPPoE IA Per-Port Per-VLAN 324PPPoE IA for Vlan 325326 Private Vlan Overview Private Vlan327 Configuring Private Vlan 328329 330 Green Ethernet Overview Green Ethernet331 Configuring Green Ethernet 332333 334 IP Application 335336 Static Routing Overview Static Route337 Configuring Static Routing 338339 340 DiffServ Overview Differentiated Services341 DiffServ Network Example Two Rate Three Color Marker Traffic Policing342 TRTCM-Color-blind Mode 343TRTCM-Color-aware Mode Activating DiffServ344 PIR?345 IP Application DiffServConfiguring 2-Rate 3 Color Marker Settings 346DSCP-to-IEEE 802.1p Priority Settings Default DSCP-IEEE 802.1p Mapping347 Dscp ValueConfiguring Dscp Settings 348Dhcp Configuration Options Dhcp OverviewDhcp Modes 349Dhcp Status Dhcp RelayDhcp Relay Agent Information 350Configuring Dhcp Global Relay General Setup351 Relay Agent Information352 Global Dhcp Relay Configuration ExampleVLAN1VLAN2 Configuring Dhcp Vlan Settings 353Example Dhcp Relay for Two VLANs General Setup screen354 Dhcp Relay for Two VLANs Configuration Example Dhcp Relay for Two VLANs356 Management 357358 Maintenance Screen Maintenance359 Load Factory Default Save ConfigurationSettings to the current configuration on the Switch 360Firmware Upgrade Reboot System361 Restore a Configuration File 362Backup a Configuration File FTP Command LineFilename Conventions 363FTP Command Line Procedure Example FTP Commands364 Filename ConventionsCommand Description GUI-based FTP ClientsFTP Restrictions 365366 Access Control Access Control OverviewAccess Control Main Screen Access Control OverviewAbout Snmp 368Snmp Commands Snmp v3 and SecuritySupported MIBs 369Snmp Traps 370Snmp System Traps Option Object Label Object ID Description371 Snmp InterfaceTraps372 AAA Traps373 Snmp Switch TrapsSnmp IP Traps 374 Configuring SnmpCFM 375 VersionSpecify in this section to create accounts on the Snmp ManagerSecurity level or higher than the security level settings on 376Configuring Snmp Trap Group 377Setting Up Login Accounts 378SSH Overview 379How SSH works 380SSH Implementation on the Switch Requirements for Using SSHIntroduction to Https 381Internet Explorer Warning Messages Https Example382 Netscape Navigator Warning Messages 383Security Certificate 1 Netscape Security Certificate 2 NetscapeMain Screen Service Port Access Control385 Remote Management 386HTTP/ICMP 387SNMP/SSH Https 388 Diagnostic Diagnostic389 390 Syslog Syslog Overview391 Syslog Severity LevelsSyslog Setup 392Syslog Server Setup 393394 ZyXEL Clustering Management Specifications Cluster ManagementCluster Management Status Overview 395Cluster Management Status 396397 Cluster Member Switch ManagementManager Uploading Firmware to a Cluster Member Switch 398FTP Upload to Cluster Member Example 399FTP Parameter Description Clustering Management Configuration 400Based Vlan 401Candidate list 402 MAC Table Overview MAC Table403 Viewing the MAC Table 404405 406 ARP Table ARP Table OverviewHow ARP Works 407Viewing the ARP Table 408Configure Clone Configure Clone409 410 411 412 Troubleshooting Product Specifications 413414 Power, Hardware Connections, and LEDs Troubleshooting415 Switch Access and Login 416417 Advanced SuggestionsSwitch Configuration 418Product Specifications Hardware SpecificationsSpecification Description 419Feature Description Firmware Specifications420 421 Queuing422 Feature Specifications 423424 MVRStandards Supported 425Standard Description BRIDGE-MIB, Q-BRIDGE-MIB 426EMC Fan Module Removal and Installation 427428 Appendices Index 429430 431 Commonly Used ServicesName Protocol Ports Description 432 433 434 Certifications Copyright435 436 FCC Warning CE Mark WarningZyXEL Limited Warranty 437438 Index 439Numbers ARP440 441 442 MIB 443Mrstp 444 445 SPQ446 Trtcm447 Vlan 104448