Manuals / Brands / Computer Equipment / Network Card / ZyXEL Communications / Computer Equipment / Network Card

ZyXEL Communications 4528F, 4728F, XGS-4526 manual 258

1 491

Download 491 pages, 11.33 Mb

Chapter 25 AAA

258
258	XGS-4526/4528F/4728F User’s Guide

Contents

Default Login Details www.zyxel.com Page About This User's Guide Page Document Conventions Page Safety Warnings Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Getting to Know Your Switch 1.1 Introduction 1.1.1 Bridging Example 1.1.2 High Performance Switching Example 1.1.3 Gigabit Ethernet to the Desktop 1.1.4 IEEE 802.1Q VLAN Application Example 1.1.5 IPv6 Support 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Page Hardware Installation and Connection 2.1 Freestanding Installation 2.2 Mounting the Switch on a Rack 2.2.1Rack-mountedInstallation Requirements 2.2.2Attaching the Mounting Brackets to the Switch 2.2.3Mounting the Switch on a Rack Page Hardware Overview 3.1 Front Panel Connections 3.1.1Dual Personality Interfaces 3.1.2 1000Base-TPorts 3.1.3Mini-GBICSlots 3.1.3.2 Transceiver Removal 3.2 Rear Panel 3.2.1 XGS-4526 3.2.2XGS-4528For XGS-4728F 3.2.3 Uplink Module 3.2.4 Rear Panel Connections 3.2.5 Power Connector 3.2.6External Backup Power Supply Connector 3.2.7 Console Port 3.3 LEDs Page The Web Configurator 4.1 Introduction 4.2System Login 4.3The Web Configurator Layout B C D E Page Page Page 4.3.1 Change Your Password 4.4 Saving Your Configuration 4.5 Switch Lockout 4.6Resetting the Switch 4.6.1 Reload the Configuration File 4.7 Logging Out of the Web Configurator 4.8 Help Initial Setup Example 5.1 Overview 5.1.1Configuring an IP Interface Page 5.1.2Configuring DHCP Server Settings 5.1.3 Creating a VLAN Page 5.1.4Setting Port VID 5.1.5 Enabling RIP Tutorials 6.1How to Use DHCP Snooping on the Switch Page Page Page 6.2 How to Use DHCP Relay on the Switch 6.2.1 DHCP Relay Tutorial Introduction 6.2.2 Creating a VLAN Page Page 6.2.3 Configuring DHCP Relay 6.2.4Troubleshooting 6.3How to Use PPPoE IA on the Switch 6.3.1Configuring Switch A Page 6.3.2 Configuring Switch B Page 6.4How to Use Error Disable and Recovery on the Switch Page Page 6.5 How to Set Up a Guest VLAN 6.5.1 Creating a Guest VLAN Page 6.5.2Enabling IEEE 802.1x Port Authentication 6.5.3 Enabling Guest VLAN 6.6How to Do Port Isolation in a VLAN 6.6.1 Creating a VLAN Page Page 6.6.2 Creating a Private VLAN Rule 6.7 How to Configure Routing Policy 6.7.1 Create a Layer-3Classifier 6.7.2 Create a Policy Routing Rule Page Page Page System Status and Port Statistics 7.1 Overview 7.2 Port Status Summary Page 7.2.1 Status: Port Details Page Page Page Basic Setting 8.1 Overview 8.2 System Information Page 8.3 General Setup Page 8.4 Introduction to VLANs 8.4.1 Smart Isolation 8.5 Switch Setup Screen Page 8.6 IP Setup 8.6.1 IP Interfaces Page Page 8.7 Port Setup Page Page Page VLAN 9.1 Introduction to IEEE 802.1Q Tagged VLANs 9.1.1 Forwarding Tagged and Untagged Frames 9.2 Automatic VLAN Registration 9.2.1 GARP 9.2.2 GVRP 9.3 Port VLAN Trunking 9.4 Select the VLAN Type 9.5 Static VLAN 9.5.1 VLAN Status 9.5.2 VLAN Details 9.5.3 Configure a Static VLAN Page 9.5.4 Configure VLAN Port Settings Page 9.6 Subnet Based VLANs 9.7 Configuring Subnet Based VLAN 9.8 Protocol Based VLANs 9.9 Configuring Protocol Based VLAN Page 9.10 Create an IP-basedVLAN Example 9.11 Port-basedVLAN Setup 9.11.1 Configure a Port-basedVLAN Page Page Page Page Static MAC Forward Setup 10.1 Overview 10.2 Configuring Static MAC Forwarding Page Page Page Static Multicast Forward Setup 11.1 Static Multicast Forwarding Overview 11.2 Configuring Static Multicast Forwarding Page Page Filtering 12.1 Configure a Filtering Rule Page Spanning Tree Protocol 13.1 STP/RSTP Overview 13.1.1 STP Terminology 13.1.2 How STP Works 13.1.3 STP Port States 13.1.4 Multiple RSTP 13.1.5 Multiple STP 13.1.5.2 MST Region 13.1.5.3MST Instance 13.1.5.4 Common and Internal Spanning Tree (CIST) 13.2 Spanning Tree Protocol Status Screen 13.3 Spanning Tree Configuration 13.4 Configure Rapid Spanning Tree Protocol Page 13.5 Rapid Spanning Tree Protocol Status Page 13.6Configure Multiple Rapid Spanning Tree Protocol Page 13.7Multiple Rapid Spanning Tree Protocol Status Page 13.8 Configure Multiple Spanning Tree Protocol Page Page 13.8.1 Multiple Spanning Tree Protocol Port Configuration 13.9 Multiple Spanning Tree Protocol Status Page Page Bandwidth Control 14.1 Bandwidth Control Overview 14.1.1 CIR and PIR 14.2 Bandwidth Control Setup Page Page Broadcast Storm Control 15.1 Broadcast Storm Control Setup Page Mirroring 16.1 Port Mirroring Setup Page Link Aggregation 17.1 Link Aggregation Overview 17.2 Dynamic Link Aggregation 17.2.1 Link Aggregation ID 17.3 Link Aggregation Status Page 17.4 Link Aggregation Setting Page 17.5 Link Aggregation Control Protocol 17.6 Static Trunking Example Page Page Port Authentication 18.1 Port Authentication Overview 18.1.1 IEEE 802.1x Authentication 18.1.2 MAC Authentication 18.2 Port Authentication Configuration 18.2.1 Activate IEEE 802.1x Security 18.2.2 Guest VLAN Page Page 18.2.3 Activate MAC Authentication Page Page Port Security 19.1 About Port Security 19.2 Port Security Setup 19.3 VLAN MAC Address Limit Page Classifier 20.1 About the Classifier and QoS 20.2Configuring the Classifier Page Page 20.3Viewing and Editing Classifier Configuration Page 20.4 Classifier Example Policy Rule 21.1 Policy Rules Overview 21.1.1 DiffServ 21.1.2 DSCP and Per-HopBehavior 21.2 Configuring Policy Rules Page Page 21.3 Viewing and Editing Policy Configuration Page 21.4 Policy Example Page Queuing Method 22.1 Queuing Method Overview 22.1.1 Strictly Priority 22.1.2 Weighted Fair Queuing 22.1.3 Weighted Round Robin Scheduling (WRR) 22.2 Configuring Queuing Page VLAN Stacking 23.1 VLAN Stacking Overview 23.1.1 VLAN Stacking Example 23.2 VLAN Stacking Port Roles 23.3 VLAN Tag Format 23.3.1 Frame Format 23.4 Configuring VLAN Stacking 23.4.1 Port-based Q-in-Q 23.4.2 Selective Q-in-Q Page Page Multicast 24.1 Multicast Overview 24.1.1 IP Multicast Addresses 24.1.2 IGMP Filtering 24.1.3 IGMP Snooping 24.2 Multicast Status 24.3 Multicast Setting Page Page 24.4 IGMP Snooping VLAN 24.5 IGMP Filtering Profile Page 24.6 MVR Overview 24.6.1 Types of MVR Ports 24.6.2 MVR Modes 24.6.3 How MVR Works 24.7 General MVR Configuration Page 24.8 MVR Group Configuration 24.8.1 MVR Configuration Example Page Page AAA 25.1Authentication, Authorization and Accounting (AAA) 25.1.1 Local User Accounts 25.1.2RADIUS and TACACS+ 25.2 AAA Screens 25.2.1 RADIUS Server Setup Page 25.2.2 TACACS+ Server Setup Page 25.2.3 AAA Setup Page Page 25.2.4 Vendor Specific Attribute 25.2.5 Tunnel Protocol Attribute 25.3 Supported RADIUS Attributes 25.3.1 Attributes Used for Authentication 25.3.2Attributes Used for Accounting 25.3.2.3 Attributes Used for Accounting IEEE 802.1x Events Page Page IP Source Guard 26.1 IP Source Guard Overview 26.1.1 DHCP Snooping Overview 26.1.1.3 DHCP Relay Option 82 Information 26.1.1.4 Configuring DHCP Snooping 26.1.2 ARP Inspection Overview 26.2IP Source Guard 26.3 IP Source Guard Static Binding Page 26.4 DHCP Snooping Page Page 26.5 DHCP Snooping Configure Page 26.5.1 DHCP Snooping Port Configure 26.5.2 DHCP Snooping VLAN Configure Page 26.6 ARP Inspection Status 26.6.1 ARP Inspection VLAN Status 26.6.2 ARP Inspection Log Status 26.7 ARP Inspection Configure Page 26.7.1 ARP Inspection Port Configure 26.7.2 ARP Inspection VLAN Configure Page Page Loop Guard 27.1 Loop Guard Overview Page 27.2 Loop Guard Setup Page VLAN Mapping 28.1 VLAN Mapping Overview 28.1.1 VLAN Mapping Example 28.2 Enabling VLAN Mapping 28.3 Configuring VLAN Mapping Page Layer 2 Protocol Tunneling 29.1 Layer 2 Protocol Tunneling Overview 29.1.1 Layer-2Protocol Tunneling Mode 29.2 Configuring Layer 2 Protocol Tunneling Page sFlow 30.1 sFlow Overview 30.2 sFlow Port Configuration 30.2.1 sFlow Collector Configuration Page PPPoE 31.1 PPPoE Intermediate Agent Overview 31.1.1 PPPoE Intermediate Agent Tag Format 31.1.2 Sub-OptionFormat 31.1.3 Port State 31.2 The PPPoE Screen 31.3 PPPoE Intermediate Agent 31.3.1 PPPoE IA Per-Port Page 31.3.2 PPPoE IA Per-Port Per-VLAN Page 31.3.3 PPPoE IA for VLAN Page Error Disable 32.1 CPU Protection Overview 32.2 Error-DisableRecovery Overview 32.3 The Error Disable Screen 32.4 CPU Protection Configuration 32.5 Error-DisableDetect Configuration Page 32.6 Error-DisableRecovery Configuration Page Private VLAN 33.1 Private VLAN Overview 33.2 Configuring Private VLAN Page Page Static Route 34.1 Static Routing Overview 34.2 Configuring Static Routing Page Page Policy Routing 35.1 Policy Route Overview 35.1.1Benefits 35.2 Configuring Policy Routing Profile 35.2.1 Policy Routing Rule Configuration Page RIP 36.1 RIP Overview 36.1.1 Administrative Distance 36.2 Configuring RIP Page Page OSPF 37.1 OSPF Overview 37.1.1 OSPF Autonomous Systems and Areas 37.1.2 How OSPF Works 37.1.3 Interfaces and Virtual Links 37.1.4 OSPF and Router Elections 37.1.5 Configuring OSPF 37.2OSPF Status Page 37.3 OSPF Configuration 37.4 Configure OSPF Areas Page 37.4.1 View OSPF Area Information Table 37.5 Configuring OSPF Redistribution Page 37.6 Configuring OSPF Interfaces Page 37.7 OSPF Virtual-Links Page IGMP 38.1 IGMP Overview 38.1.1 How IGMP Works 38.2 Port-basedIGMP 38.3 Configuring IGMP DVMRP 39.1 DVMRP Overview 39.2 How DVMRP Works 39.2.1 DVMRP Terminology 39.3 Configuring DVMRP 39.3.1 DVMRP Configuration Error Messages 39.4 Default DVMRP Timer Values Differentiated Services 40.1 DiffServ Overview 40.1.1 DSCP and Per-HopBehavior 40.1.2 DiffServ Network Example 40.2Two Rate Three Color Marker Traffic Policing 40.2.1 TRTCM - Color-blindMode 40.2.2 TRTCM - Color-awareMode 40.3 Activating DiffServ 40.3.1 Configuring 2-Rate3 Color Marker Settings Page 40.4 DSCP-to-IEEE802.1p Priority Settings 40.4.1 Configuring DSCP Settings DHCP 41.1 DHCP Overview 41.1.1 DHCP Modes 41.1.2DHCP Configuration Options 41.2DHCP Status 41.3 DHCP Server Status Detail Page 41.4 DHCP Relay 41.4.1 DHCP Relay Agent Information 41.4.2 Configuring DHCP Global Relay 41.4.3 Global DHCP Relay Configuration Example 41.5 Configuring DHCP VLAN Settings Page 41.5.1 Example: DHCP Relay for Two VLANs Page VRRP 42.1 VRRP Overview 42.2 VRRP Status 42.3 VRRP Configuration 42.3.1 IP Interface Setup Page 42.3.2 VRRP Parameters 42.3.3 Configuring VRRP Parameters 42.3.4 Configuring VRRP Parameters 42.4 VRRP Configuration Examples 42.4.1 One Subnet Network Example 42.4.2 Two Subnets Example Page ARP Learning 43.1 ARP Overview 43.1.1 How ARP Works 43.1.2 ARP Learning Mode 43.1.2.1 ARP-Reply 43.1.2.2 Gratuitous-ARP 43.1.2.3 ARP-Request 43.2 Configuring ARP Learning Page Page Load Sharing 44.1 Load Sharing Overview 44.2 Configuring Load Sharing Page Maintenance 45.1 The Maintenance Screen 45.2 Load Factory Default 45.3Save Configuration 45.4 Reboot System 45.5Firmware Upgrade 45.6 Restore a Configuration File 45.7 Backup a Configuration File 45.8FTP Command Line 45.8.1 Filename Conventions 45.8.2 FTP Command Line Procedure 45.8.3 GUI-basedFTP Clients 45.8.4 FTP Restrictions Page Access Control 46.1 Access Control Overview 46.2 The Access Control Main Screen 46.3 About SNMP 46.3.1 SNMP v3 and Security 46.3.2 Supported MIBs 46.3.3 SNMP Traps Page Page Page Page Page Page 46.3.4 Configuring SNMP Page 46.3.5 Configuring SNMP Trap Group 46.3.6 Configuring SNMP User Page 46.4 Setting Up Login Accounts 46.5 SSH Overview 46.6 How SSH works 46.7SSH Implementation on the Switch 46.7.1 Requirements for Using SSH 46.8 Introduction to HTTPS 46.9 HTTPS Example 46.9.1 Internet Explorer Warning Messages 46.9.2 Netscape Navigator Warning Messages Page 46.9.3 The Main Screen 46.10 Service Port Access Control 46.11 Remote Management Page Page Diagnostic 47.1 Diagnostic Page Syslog 48.1 Syslog Overview 48.2 Syslog Setup 48.3 Syslog Server Setup 48.4 Syslog Messages Page Page Page Page Page Page Cluster Management 49.1 Clustering Management Status Overview 49.2 Cluster Management Status 49.2.1 Cluster Member Switch Management Page 49.2.1.1 Uploading Firmware to a Cluster Member Switch 49.3 Clustering Management Configuration Page Page MAC Table 50.1 MAC Table Overview 50.2 Viewing the MAC Table Page Page IP Table 51.1 IP Table Overview 51.2 Viewing the IP Table Page Page ARP Table 52.1 ARP Table Overview 52.1.1 How ARP Works 52.2 The ARP Table Screen Routing Table 53.1 Overview 53.2 Viewing the Routing Table Status Page Configure Clone 54.1 Configure Clone Page Troubleshooting 55.1Power, Hardware Connections, and LEDs 55.2Switch Access and Login Page Page 55.3 Switch Configuration Page Product Specifications Page Page Page Page Page Page Page Page Page Page Page Page Page Copyright Certifications Page ZyXEL Limited Warranty Page Index

Related pages TROUBLESHOOTING for Desa CGS2718P, CGS2718N, CGS3124P, CGS3124N, CLD3018PA, CLD3018NA, CLD3924PTA, CLD3924NTA, CLD3018PT, CLD3018NA Technical Specification for Transition Networks CPSMP-130 How to Use the Switch Features for AT&T 8520T Frequently Asked Questions, page Contacting TAC, page for Cisco Systems ATA 188 TO INSTALL MOWER See Fig. for Poulan HD13538 Spare parts list for Sterling STT 500 Country/Area codes list for Parental Lock for JVC M45 5. Failure symptoms, error codes apperaing on displ and beep symptoms for IBM 1400 (2611) Emplacement des touches de commande for Koolatron 12 Volt DC 10 Cup Coffee Maker Chapter 3 Installation for Black Box LR0202A-KIT Figure 3-2. Firmware Flow PWM Adjustment for Freescale Semiconductor S08