Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications XGS-4728F manual 230

1 422

Download 422 pages, 9.41 Mb

Chapter 25 AAA

230
230	XGS-4728F User’s Guide

Contents

Default Login Details www.zyxel.com Page About This User's Guide Page Document Conventions Page Safety Warnings Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Page Page Part VI: Troubleshooting & Product Specifications Part VII: Appendices and Index PART Introduction Page Getting to Know Your Switch 1.1 Introduction 1.1.1 Bridging Example 1.1.2 High Performance Switching Example 1.1.3 Gigabit Ethernet to the Desktop 1.1.4 IEEE 802.1Q VLAN Application Example 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Page Page Hardware Installation and Connection 2.1 Freestanding Installation 2.2 Mounting the Switch on a Rack 2.2.1Rack-mountedInstallation Requirements 2.2.2Attaching the Mounting Brackets to the Switch 2.2.3Mounting the Switch on a Rack Page Hardware Overview 3.1 Front Panel Connections 3.1.1Dual Personality Interfaces 3.1.2 1000Base-TPorts 3.1.3Mini-GBICSlots 3.1.3.1 Transceiver Installation 3.1.3.2 Transceiver Removal 3.2Rear Panel 3.2.1 Power Connector 3.2.1.1 AC Power Connection 3.2.1.2 DC Power Connection 3.2.2 External Backup Power Supply Connector 3.2.3 Console Port 3.3 LEDs Page Basic Configuration Page The Web Configurator 4.1 Introduction 4.2System Login 4.3The Status Screen B C D E Page Page Page 4.3.1 Change Your Password 4.4 Saving Your Configuration 4.5 Switch Lockout 4.6Resetting the Switch 4.6.1 Reload the Configuration File Page 4.7 Logging Out of the Web Configurator 4.8 Help Initial Setup Example 5.1 Overview 5.1.1Configuring an IP Interface Page 5.1.2Configuring DHCP Server Settings 5.1.3 Creating a VLAN Page 5.1.4Setting Port VID 5.1.5 Enabling RIP Tutorials 6.1How to Use DHCP Snooping on the Switch Page Page Page 6.2 How to Use DHCP Relay on the Switch 6.2.1 DHCP Relay Tutorial Introduction 6.2.2 Creating a VLAN Page Page 6.2.3 Configuring DHCP Relay 6.2.4Troubleshooting Page System Status and Port Statistics 7.1 Overview 7.2 Port Status Summary Page 7.2.1 Status: Port Details Page Page Page Basic Setting 8.1 Overview 8.2 System Information Page 8.3 General Setup Page 8.4 Introduction to VLANs 8.4.1 Smart Isolation 8.5 Switch Setup Screen Page 8.6 IP Setup 8.6.1 IP Interfaces Page Page 8.7 Port Setup Page Page Page ART Advanced Setup Page VLAN 9.1 Introduction to IEEE 802.1Q Tagged VLANs 9.1.1 Forwarding Tagged and Untagged Frames 9.2 Automatic VLAN Registration 9.2.1 GARP 9.2.2 GVRP 9.3 Port VLAN Trunking 9.4 Select the VLAN Type 9.5 Static VLAN 9.5.1 VLAN Status 9.5.2 VLAN Details 9.5.3 Configure a Static VLAN Page 9.5.4 Configure VLAN Port Settings 9.6 Subnet Based VLANs 9.7 Configuring Subnet Based VLAN Page 9.8 Protocol Based VLANs 9.9 Configuring Protocol Based VLAN Page 9.10 Create an IP-basedVLAN Example 9.11 Port-basedVLAN Setup 9.11.1 Configure a Port-basedVLAN Page Page Page Page Static MAC Forward Setup 10.1 Overview 10.2 Configuring Static MAC Forwarding Page Page Page Static Multicast Forward Setup 11.1 Static Multicast Forwarding Overview 11.2 Configuring Static Multicast Forwarding Page Page Filtering 12.1 Configure a Filtering Rule Page Spanning Tree Protocol 13.1 STP/RSTP Overview 13.1.1 STP Terminology 13.1.2 How STP Works 13.1.3 STP Port States 13.1.4 Multiple RSTP 13.1.5 Multiple STP 13.1.5.2 MST Region 13.1.5.3MST Instance 13.1.5.4 Common and Internal Spanning Tree (CIST) 13.2 Spanning Tree Protocol Status Screen 13.3 Spanning Tree Configuration 13.4 Configure Rapid Spanning Tree Protocol Page 13.5 Rapid Spanning Tree Protocol Status Page 13.6Configure Multiple Rapid Spanning Tree Protocol Page 13.7Multiple Rapid Spanning Tree Protocol Status Page 13.8 Configure Multiple Spanning Tree Protocol Page Page 13.9 Multiple Spanning Tree Protocol Status Page Bandwidth Control 14.1 Bandwidth Control Overview 14.1.1 CIR and PIR 14.2 Bandwidth Control Setup Page Page Broadcast Storm Control 15.1 Broadcast Storm Control Setup Page Mirroring 16.1 Port Mirroring Setup Page Link Aggregation 17.1 Link Aggregation Overview 17.2 Dynamic Link Aggregation 17.2.1 Link Aggregation ID 17.3 Link Aggregation Status Page 17.4 Link Aggregation Setting Page 17.5 Link Aggregation Control Protocol 17.6 Static Trunking Example Page Page Port Authentication 18.1 Port Authentication Overview 18.1.1 IEEE 802.1x Authentication 18.1.2 MAC Authentication 18.2 Port Authentication Configuration 18.2.1 Activate IEEE 802.1x Security 18.2.2 Activate MAC Authentication Page Port Security 19.1 About Port Security 19.2 Port Security Setup 19.3 VLAN MAC Address Limit Page Classifier 20.1 About the Classifier and QoS 20.2Configuring the Classifier Page Page 20.3Viewing and Editing Classifier Configuration Page 20.4 Classifier Example Policy Rule 21.1 Policy Rules Overview 21.1.1 DiffServ 21.1.2 DSCP and Per-HopBehavior 21.2 Configuring Policy Rules Page Page 21.3 Viewing and Editing Policy Configuration Page 21.4 Policy Example Page Queuing Method 22.1 Queuing Method Overview 22.1.1 Strictly Priority 22.1.2 Weighted Fair Queuing 22.1.3 Weighted Round Robin Scheduling (WRR) 22.2 Configuring Queuing Page VLAN Stacking 23.1 VLAN Stacking Overview 23.1.1 VLAN Stacking Example 23.2 VLAN Stacking Port Roles 23.3 VLAN Tag Format 23.3.1 Frame Format 23.4 Configuring VLAN Stacking 23.4.1 Port-based Q-in-Q 23.4.2 Selective Q-in-Q Page Page Multicast 24.1 Multicast Overview 24.1.1 IP Multicast Addresses 24.1.2 IGMP Filtering 24.1.3 IGMP Snooping 24.2 Multicast Status 24.3 Multicast Setting Page 24.4 IGMP Snooping VLAN Page 24.5 IGMP Filtering Profile Page 24.6 MVR Overview 24.6.1 Types of MVR Ports 24.6.2 MVR Modes 24.6.3 How MVR Works 24.7 General MVR Configuration Page 24.8 MVR Group Configuration 24.8.1 MVR Configuration Example Page Page AAA 25.1Authentication, Authorization and Accounting (AAA) 25.1.1 Local User Accounts 25.1.2RADIUS and TACACS+ 25.2 AAA Screens 25.2.1 RADIUS Server Setup Page 25.2.2 TACACS+ Server Setup Page 25.2.3 AAA Setup Page Page 25.2.4 Vendor Specific Attribute 25.2.5 Tunnel Protocol Attribute 25.3 Supported RADIUS Attributes 25.3.1 Attributes Used for Authentication 25.3.2Attributes Used for Accounting 25.3.2.3 Attributes Used for Accounting IEEE 802.1x Events Page Page IP Source Guard 26.1 IP Source Guard Overview 26.1.1 DHCP Snooping Overview 26.1.1.3 DHCP Relay Option 82 Information 26.1.1.4 Configuring DHCP Snooping 26.1.2 ARP Inspection Overview 26.2IP Source Guard 26.3 IP Source Guard Static Binding Page 26.4 DHCP Snooping Page Page 26.5 DHCP Snooping Configure Page 26.5.1 DHCP Snooping Port Configure 26.5.2 DHCP Snooping VLAN Configure Page 26.6 ARP Inspection Status 26.6.1 ARP Inspection VLAN Status 26.6.2 ARP Inspection Log Status 26.7 ARP Inspection Configure Page 26.7.1 ARP Inspection Port Configure Page 26.7.2 ARP Inspection VLAN Configure Page Loop Guard 27.1 Loop Guard Overview Page 27.2 Loop Guard Setup Page VLAN Mapping 28.1 VLAN Mapping Overview 28.1.1 VLAN Mapping Example 28.2 Enabling VLAN Mapping 28.3 Configuring VLAN Mapping Page Layer 2 Protocol Tunneling 29.1 Layer 2 Protocol Tunneling Overview 29.1.1 Layer 2 Protocol Tunneling Mode 29.2 Configuring Layer 2 Protocol Tunneling Page Private VLAN 30.1 Private VLAN Overview 30.2 Configuring Private VLAN Page Page IP Application Page Static Route 31.1 Configuring Static Routing Page RIP 32.1 RIP Overview 32.2 Configuring RIP Page OSPF 33.1 OSPF Overview 33.1.1 OSPF Autonomous Systems and Areas 33.1.2 How OSPF Works 33.1.3 Interfaces and Virtual Links 33.1.4 OSPF and Router Elections 33.1.5 Configuring OSPF 33.2OSPF Status Page 33.3 OSPF Configuration 33.4 Configure OSPF Areas 33.4.1 View OSPF Area Information Table 33.5 Configuring OSPF Redistribution 33.6 Configuring OSPF Interfaces Page 33.7 OSPF Virtual-Links Page Page IGMP 34.1 IGMP Overview 34.1.1 How IGMP Works 34.2 Port-basedIGMP 34.3 Configuring IGMP DVMRP 35.1 DVMRP Overview 35.2 How DVMRP Works 35.2.1 DVMRP Terminology 35.3 Configuring DVMRP 35.3.1 DVMRP Configuration Error Messages 35.4 Default DVMRP Timer Values Differentiated Services 36.1 DiffServ Overview 36.1.1 DSCP and Per-HopBehavior 36.1.2 DiffServ Network Example 36.2Two Rate Three Color Marker Traffic Policing 36.2.1 TRTCM - Color-blindMode 36.2.2 TRTCM - Color-awareMode 36.3 Activating DiffServ 36.3.1 Configuring 2-Rate3 Color Marker Settings Page 36.4 DSCP-to-IEEE802.1p Priority Settings 36.4.1 Configuring DSCP Settings DHCP 37.1 DHCP Overview 37.1.1 DHCP Modes 37.1.2DHCP Configuration Options 37.2DHCP Status 37.3 DHCP Server Status Detail Page 37.4 DHCP Relay 37.4.1 DHCP Relay Agent Information 37.4.2 Configuring DHCP Global Relay 37.4.3 Global DHCP Relay Configuration Example 37.5 Configuring DHCP VLAN Settings Page 37.5.1 Example: DHCP Relay for Two VLANs Page VRRP 38.1 VRRP Overview 38.2 VRRP Status 38.3 VRRP Configuration 38.3.1 IP Interface Setup Page 38.3.2 VRRP Parameters 38.3.3 Configuring VRRP Parameters 38.3.4 Configuring VRRP Parameters 38.4 VRRP Configuration Examples 38.4.1 One Subnet Network Example 38.4.2 Two Subnets Example Page Management Page Maintenance 39.1 The Maintenance Screen 39.2 Load Factory Default 39.3Save Configuration 39.4 Reboot System 39.5Firmware Upgrade 39.6 Restore a Configuration File 39.7 Backup a Configuration File 39.8FTP Command Line 39.8.1 Filename Conventions 39.8.2 FTP Command Line Procedure 39.8.3 GUI-basedFTP Clients 39.8.4 FTP Restrictions Page Access Control 40.1 Access Control Overview 40.2 The Access Control Main Screen 40.3 About SNMP 40.3.1 SNMP v3 and Security 40.3.2 Supported MIBs 40.3.3 SNMP Traps Page Page Page 40.3.4 Configuring SNMP Page 40.3.5 Configuring SNMP Trap Group 40.3.6 Setting Up Login Accounts 40.4 SSH Overview 40.5 How SSH works 40.6SSH Implementation on the Switch 40.6.1 Requirements for Using SSH 40.7 Introduction to HTTPS 40.8 HTTPS Example 40.8.1 Internet Explorer Warning Messages 40.8.2 Netscape Navigator Warning Messages Page 40.8.3 The Main Screen 40.9 Service Port Access Control 40.10 Remote Management Page Diagnostic 41.1 Diagnostic Page Syslog 42.1 Syslog Overview 42.2 Syslog Setup 42.3 Syslog Server Setup Page Cluster Management 43.1 Clustering Management Status Overview 43.2 Cluster Management Status 43.2.1 Cluster Member Switch Management Page 43.2.1.1 Uploading Firmware to a Cluster Member Switch 43.3 Clustering Management Configuration Page Page MAC Table 44.1 MAC Table Overview 44.2 Viewing the MAC Table Page Page IP Table 45.1 IP Table Overview 45.2 Viewing the IP Table Page Page ARP Table 46.1 ARP Table Overview 46.1.1 How ARP Works 46.2 Viewing the ARP Table Routing Table 47.1 Overview 47.2 Viewing the Routing Table Status Page Configure Clone 48.1 Configure Clone Page Troubleshooting & Product Specifications Page Troubleshooting 49.1Power, Hardware Connections, and LEDs 49.2Switch Access and Login Page Page 49.3 Switch Configuration Page Product Specifications Page Page Page Page Page Page Page Page Page Appendices and Index Page Page Page Page Page Copyright Certifications Page ZyXEL Limited Warranty Page Index