Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications MGS-3712, MGS-3712F manual 176

1 382

Download 382 pages, 8.08 Mb

Chapter 19 Port Security

176
176	MGS-3712/MGS-3712F User’s Guide

Contents

Default Login Details www.zyxel.com Page About This User's Guide Page Document Conventions Page Safety Warnings Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Part VI: Troubleshooting & Product Specifications Part VII: Appendices and Index PART Introduction and Hardware Page Getting to Know Your Switch 1.1 Introduction 1.1.1 Backbone Application 1.1.2 Bridging Example 1.1.3 High Performance Switching Example 1.1.4 IEEE 802.1Q VLAN Application Examples 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Page Page Hardware Installation and Connection 2.1 Installation Scenarios 2.2 Desktop Installation Procedure 2.3 Mounting the Switch on a Rack 2.3.1Rack-mountedInstallation Requirements 2.3.2Attaching the Mounting Brackets to the Switch 2.3.3Mounting the Switch on a Rack Hardware Overview 3.1 Front Panel Page 3.1.1 Console Port 3.1.2 Gigabit Ethernet Ports 3.1.3 Mini-GBICSlots 3.1.3.2 Transceiver Removal 3.1.4Management Port 3.1.5 Power Connector 3.1.5.1 AC Power Connection 3.1.5.2 DC Power Connection 3.1.6 Signal Slot Page 3.2 Rear Panel 3.3 LEDs 3.4 Configuring the Switch Tutorials 4.1How to Use DHCP Snooping on the Switch Page Page Page 4.2 How to Use DHCP Relay on the Switch 4.2.1 DHCP Relay Tutorial Introduction 4.2.2 Creating a VLAN Page Page 4.2.3Configuring DHCP Relay 4.2.4Troubleshooting Basic Configuration Page The Web Configurator 5.1 Introduction 5.2System Login 5.3The Status Screen Page Page Page 5.3.1 Change Your Password 5.4 Saving Your Configuration 5.5 Switch Lockout 5.6Resetting the Switch 5.6.1 Reload the Configuration File 5.7 Logging Out of the Web Configurator 5.8 Help Page Initial Setup Example 6.1 Overview 6.1.1Creating a VLAN 6.1.2Setting Port VID Page 6.2 Configuring Switch Management IP Address Page Page System Status and Port Statistics 7.1 Overview 7.2 Port Status Summary Page 7.2.1 Status: Port Details Page Page Page Basic Setting 8.1 Overview 8.2 System Information Page 8.3 General Setup Page 8.4 Introduction to VLANs 8.5 Switch Setup Screen Page 8.6 IP Setup 8.6.1 Management IP Addresses Page Page Page 8.7 Port Setup Page ART Advanced Page VLAN 9.1 Introduction to IEEE 802.1Q Tagged VLANs 9.1.1 Forwarding Tagged and Untagged Frames 9.2 Automatic VLAN Registration 9.2.1 GARP 9.2.2 GVRP 9.3 Port VLAN Trunking 9.4 Select the VLAN Type 9.5 Static VLAN 9.5.1 Static VLAN Status 9.5.2 VLAN Details 9.5.3 Configure a Static VLAN Page Page 9.5.4 Configure VLAN Port Settings 9.6 Subnet Based VLANs 9.7 Configuring Subnet Based VLAN Page 9.8 Protocol Based VLANs 9.9 Configuring Protocol Based VLAN Page 9.10 Create an IP-basedVLAN Example 9.11 Port-basedVLAN Setup 9.11.1 Configure a Port-basedVLAN Page Page Static MAC Forward Setup 10.1 Overview 10.2 Configuring Static MAC Forwarding Page Page Page Static Multicast Forward Setup 11.1 Static Multicast Forwarding Overview 11.2 Configuring Static Multicast Forwarding Page Page Filtering 12.1 Configure a Filtering Rule Page Spanning Tree Protocol 13.1 STP/RSTP Overview 13.1.1 STP Terminology 13.1.2 How STP Works 13.1.3 STP Port States 13.1.4 Multiple RSTP 13.1.5 Multiple STP 13.1.5.2 MST Region 13.1.5.3MST Instance 13.1.5.4 Common and Internal Spanning Tree (CIST) 13.2 Spanning Tree Protocol Status Screen 13.3 Spanning Tree Configuration 13.4 Configure Rapid Spanning Tree Protocol Page 13.5 Rapid Spanning Tree Protocol Status Page 13.6Configure Multiple Rapid Spanning Tree Protocol Page 13.7Multiple Rapid Spanning Tree Protocol Status Page 13.8 Configure Multiple Spanning Tree Protocol Page Page 13.9 Multiple Spanning Tree Protocol Status Page Page Bandwidth Control 14.1 Bandwidth Control Overview 14.1.1 CIR and PIR 14.2 Bandwidth Control Setup Page Page Broadcast Storm Control 15.1 Broadcast Storm Control Setup Page Mirroring 16.1 Port Mirroring Setup Page Link Aggregation 17.1 Link Aggregation Overview 17.2 Dynamic Link Aggregation 17.2.1 Link Aggregation ID 17.3 Link Aggregation Status Page 17.4 Link Aggregation Setting Page 17.5 Link Aggregation Control Protocol 17.6 Static Trunking Example Page Page Port Authentication 18.1 Port Authentication Overview 18.1.1 IEEE 802.1x Authentication 18.1.2 MAC Authentication 18.2 Port Authentication Configuration 18.2.1 Activate IEEE 802.1x Security 18.2.2 Activate MAC Authentication Page Port Security 19.1 About Port Security 19.2 Port Security Setup Page 19.3 VLAN MAC Address Limit Page Page Classifier 20.1 About the Classifier and QoS 20.2Configuring the Classifier Page Page 20.3Viewing and Editing Classifier Configuration Page 20.4 Classifier Example Page Page Policy Rule 21.1 Policy Rules Overview 21.1.1 DiffServ 21.1.2 DSCP and Per-HopBehavior 21.2 Configuring Policy Rules Page Page 21.3 Viewing and Editing Policy Configuration Page 21.4 Policy Example Page Queuing Method 22.1 Queuing Method Overview 22.1.1 Strictly Priority Queuing 22.1.2 Weighted Fair Queuing 22.1.3 Weighted Round Robin Scheduling (WRR) 22.2 Configuring Queuing Page VLAN Stacking 23.1 VLAN Stacking Overview 23.1.1 VLAN Stacking Example 23.2 VLAN Stacking Port Roles 23.3 VLAN Tag Format 23.3.1 Frame Format 23.4 Configuring VLAN Stacking 23.4.1 Port-based Q-in-Q 23.4.2 Selective Q-in-Q Page Page Multicast 24.1 Multicast Overview 24.1.1 IP Multicast Addresses 24.1.2 IGMP Filtering 24.1.3 IGMP Snooping 24.2 Multicast Status 24.3 Multicast Setting Page Page 24.4 IGMP Snooping VLAN Page 24.5 IGMP Filtering Profile 24.6 MVR Overview 24.6.1 Types of MVR Ports 24.6.2 MVR Modes 24.6.3 How MVR Works 24.7 General MVR Configuration Page 24.8 MVR Group Configuration Page 24.8.1 MVR Configuration Example Page AAA 25.1Authentication, Authorization and Accounting (AAA) 25.1.1 Local User Accounts 25.1.2RADIUS and TACACS+ 25.2 AAA Screens 25.2.1 RADIUS Server Setup Page 25.2.2 TACACS+ Server Setup Page 25.2.3 AAA Setup Page Page 25.2.4 Vendor Specific Attribute 25.3 Supported RADIUS Attributes 25.3.1 Attributes Used for Authentication 25.3.2 Attributes Used for Accounting 25.3.2.3 Attributes Used for Accounting IEEE 802.1x Events IP Source Guard 26.1 IP Source Guard Overview 26.1.1 DHCP Snooping Overview 26.1.1.3 DHCP Relay Option 82 Information 26.1.1.4 Configuring DHCP Snooping 26.1.2 ARP Inspection Overview 26.2IP Source Guard 26.3 IP Source Guard Static Binding Page Page 26.4 DHCP Snooping Page Page 26.5 DHCP Snooping Configure Page 26.5.1 DHCP Snooping Port Configure 26.5.2 DHCP Snooping VLAN Configure Page 26.6 ARP Inspection Status 26.6.1 ARP Inspection VLAN Status 26.6.2 ARP Inspection Log Status 26.7 ARP Inspection Configure Page 26.7.1 ARP Inspection Port Configure Page 26.7.2 ARP Inspection VLAN Configure Page Page Loop Guard 27.1 Loop Guard Overview Page 27.2 Loop Guard Setup Page VLAN Mapping 28.1 VLAN Mapping Overview 28.1.1 VLAN Mapping Example 28.2 Enabling VLAN Mapping 28.3 Configuring VLAN Mapping Page Layer 2 Protocol Tunneling 29.1 Layer 2 Protocol Tunneling Overview 29.1.1 Layer 2 Protocol Tunneling Mode 29.2 Configuring Layer 2 Protocol Tunneling Page IP Application Page Static Route 30.1 Static Routing Overview 30.2 Configuring Static Routing Page Page Differentiated Services 31.1 DiffServ Overview 31.1.1 DSCP and Per-HopBehavior 31.1.2 DiffServ Network Example 31.2Two Rate Three Color Marker Traffic Policing 31.2.1 TRTCM-Color-blindMode 31.2.2 TRTCM-Color-awareMode 31.3 Activating DiffServ Page 31.3.1 Configuring 2-Rate3 Color Marker Settings 31.4 DSCP-to-IEEE802.1p Priority Settings 31.4.1 Configuring DSCP Settings DHCP 32.1 DHCP Overview 32.1.1 DHCP Modes 32.1.2 DHCP Configuration Options 32.2 DHCP Status 32.3DHCP Relay 32.3.1 DHCP Relay Agent Information 32.3.2 Configuring DHCP Global Relay 32.3.3 Global DHCP Relay Configuration Example 32.4 Configuring DHCP VLAN Settings 32.4.1 Example: DHCP Relay for Two VLANs Page Page Management Page Maintenance 33.1 The Maintenance Screen 33.2 Load Factory Default 33.3Save Configuration 33.4 Reboot System 33.5Firmware Upgrade 33.6 Restore a Configuration File 33.7 Backup a Configuration File 33.8FTP Command Line 33.8.1 Filename Conventions 33.8.2 FTP Command Line Procedure 33.8.3 GUI-basedFTP Clients 33.8.4 FTP Restrictions Page Access Control 34.1 Access Control Overview 34.2 The Access Control Main Screen 34.3 About SNMP 34.3.1 SNMP v3 and Security 34.3.2 Supported MIBs 34.3.3 SNMP Traps Page Page Page Page Page Page 34.3.4 Configuring SNMP Page Page 34.3.5 Configuring SNMP Trap Group 34.3.6 Setting Up Login Accounts 34.4 SSH Overview 34.5 How SSH works 34.6SSH Implementation on the Switch 34.6.1 Requirements for Using SSH 34.7 Introduction to HTTPS 34.8 HTTPS Example 34.8.1 Internet Explorer Warning Messages 34.8.2 Netscape Navigator Warning Messages Page 34.8.3 The Main Screen 34.9 Service Port Access Control 34.10 Remote Management Page Diagnostic 35.1 Diagnostic Page Syslog 36.1 Syslog Overview 36.2 Syslog Setup 36.3 Syslog Server Setup Page Cluster Management 37.1 Cluster Management Status Overview 37.2 Cluster Management Status 37.2.1 Cluster Member Switch Management 37.2.1.1 Uploading Firmware to a Cluster Member Switch Page 37.3 Clustering Management Configuration Page Page MAC Table 38.1 MAC Table Overview 38.2 Viewing the MAC Table Page Page ARP Table 39.1 ARP Table Overview 39.1.1 How ARP Works 39.2 Viewing the ARP Table Configure Clone 40.1 Configure Clone Page Troubleshooting & Product Specifications Page Troubleshooting 41.1Power, Hardware Connections, and LEDs 41.2Switch Access and Login Page 41.3 Switch Configuration Product Specifications Page Page Page Page Page Page Page Appendices and Index Page Page Page Page Page Copyright Certifications Page ZyXEL Limited Warranty Page Index

Related pages 3 MAINTENANCE & TROUBLESHOOTING for Genie GPOWER 900 Specifications for Tripp Lite ENVIROSENSE For patterns “1” to “5” when the power is turned on for Fujitsu M3099EH FREQUENTLY ASKED QUESTIONS for Altinex DAV0106-V1A2 NOTE ON INSTALLATION for NAD C 525BEE 11. Parts list for Zenoah CHT2301, HT2301 TV Brand Code List for Samsung HT-P29 Error messages for Acer 1400 4. Parts List and Parts Location for Furuno SC-110 Table of Contents for SportDOG 400 & 400S 7.3 General FAQs for Philips 191V2