Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications XGS4700-48F manual 420

1 485

Download 485 pages, 12.13 Mb

Chapter 45 Access Control

420
420	XGS4700-48F User’s Guide

Contents

Default Login Details www.zyxel.com Page About This User's Guide Page Document Conventions Page Safety Warnings Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Getting to Know Your Switch 1.1 Introduction 1.1.1 Bridging Example 1.1.2 High Performance Switching Example 1.1.3 Gigabit Ethernet to the Desktop 1.1.4 IEEE 802.1Q VLAN Application Example 1.1.5 IPv6 Support 1.2 Ways to Manage the Switch 1.3Good Habits for Managing the Switch Page Hardware Installation and Connection 2.1 Freestanding Installation 2.2 Mounting the Switch on a Rack 2.2.1Rack-mountedInstallation Requirements 2.2.2Attaching the Mounting Brackets to the Switch 2.2.3Mounting the Switch on a Rack 2.3Connecting the Frame Ground 2.4 Power Module Installation 2.4.1 Installing a Power Module Page 2.4.2 Removing a Power Module 2.4.2.2 DC Power Module Page Hardware Overview 3.1 Front Panel Connections 3.1.1 Mini-GBICSlots 3.1.1.1 Transceiver Installation 3.1.1.2 Transceiver Removal 3.1.2Console Port 3.1.3 Signal Slot 3.1.3.1Connecting a Sensor to the Signal Slot Page 3.2 Rear Panel 3.2.1 Removing and Installing the Fan Module 3.2.2Uplink Module 3.2.3 Rear Panel Connections 3.2.4 Management Port 3.2.5 Power Connector 3.3 Power Connection 3.3.1 AC Power Connections 3.3.2DC Power Connections 3.3.3Procedure to Turn on the Switch Power 3.3.4Disconnecting the Power 3.4 LEDs Page Page The Web Configurator 4.1 Introduction 4.2System Login 4.3The Web Configurator Layout B C D E Page Page Page 4.3.1 Change Your Password 4.4 Saving Your Configuration 4.5 Switch Lockout 4.6Resetting the Switch 4.6.1 Reload the Configuration File 4.7 Logging Out of the Web Configurator 4.8 Help Initial Setup Example 5.1 Overview 5.1.1Configuring an IP Interface Page 5.1.2Configuring DHCP Server Settings 5.1.3 Creating a VLAN Page 5.1.4Setting Port VID 5.1.5 Enabling RIP Tutorials 6.1How to Use DHCP Snooping on the Switch Page Page Page 6.2 How to Use DHCP Relay on the Switch 6.2.1 DHCP Relay Tutorial Introduction 6.2.2 Creating a VLAN Page Page 6.2.3 Configuring DHCP Relay 6.2.4Troubleshooting 6.3How to Use PPPoE IA on the Switch 6.3.1Configuring Switch A Page 6.3.2 Configuring Switch B Page 6.4How to Use Error Disable and Recovery on the Switch Page Page 6.5 How to Set Up a Guest VLAN 6.5.1 Creating a Guest VLAN Page 6.5.2Enabling IEEE 802.1x Port Authentication 6.5.3 Enabling Guest VLAN 6.6How to Configure Routing Policy 6.6.1 Create a Layer-3Classifier 6.6.2 Create a Policy Routing Rule Page Page Page System Status and Port Statistics 7.1 Overview 7.2 Port Status Summary Page 7.2.1 Status: Port Details Page Page Page Basic Setting 8.1 Overview 8.2 System Information Page 8.3 General Setup Page 8.4 Introduction to VLANs 8.5 Switch Setup Screen Page 8.6 IP Setup 8.6.1 IP Interfaces Page 8.7 Port Setup Page Page Page VLAN 9.1 Introduction to IEEE 802.1Q Tagged VLANs 9.1.1 Forwarding Tagged and Untagged Frames 9.2 Automatic VLAN Registration 9.2.1 GARP 9.2.2 GVRP 9.3 Port VLAN Trunking 9.4 Select the VLAN Type 9.5 Static VLAN 9.5.1 VLAN Status 9.5.2 VLAN Details 9.5.3 Configure a Static VLAN Page 9.5.4 Configure VLAN Port Settings Page 9.6 Subnet Based VLANs 9.7 Configuring Subnet Based VLAN 9.8 Protocol Based VLANs 9.9 Configuring Protocol Based VLAN Page 9.10 Create an IP-basedVLAN Example 9.11 Port-basedVLAN Setup 9.11.1 Configure a Port-basedVLAN Page Page Page Page Static MAC Forward Setup 10.1 Overview 10.2 Configuring Static MAC Forwarding Page Page Page Static Multicast Forward Setup 11.1 Static Multicast Forwarding Overview 11.2 Configuring Static Multicast Forwarding Page Page Filtering 12.1 Configure a Filtering Rule Page Spanning Tree Protocol 13.1 STP/RSTP Overview 13.1.1 STP Terminology 13.1.2 How STP Works 13.1.3 STP Port States 13.1.4 Multiple RSTP 13.1.5 Multiple STP 13.1.5.2 MST Region 13.1.5.3MST Instance 13.1.5.4 Common and Internal Spanning Tree (CIST) 13.2 Spanning Tree Protocol Status Screen 13.3 Spanning Tree Configuration 13.4 Configure Rapid Spanning Tree Protocol Page 13.5 Rapid Spanning Tree Protocol Status Page 13.6Configure Multiple Rapid Spanning Tree Protocol Page 13.7Multiple Rapid Spanning Tree Protocol Status Page 13.8 Configure Multiple Spanning Tree Protocol Page Page 13.8.1 Multiple Spanning Tree Protocol Port Configuration 13.9 Multiple Spanning Tree Protocol Status Page Page Bandwidth Control 14.1 Bandwidth Control Overview 14.1.1 CIR and PIR 14.2 Bandwidth Control Setup Page Page Broadcast Storm Control 15.1 Broadcast Storm Control Setup Page Mirroring 16.1 Port Mirroring Setup Page Link Aggregation 17.1 Link Aggregation Overview 17.2 Dynamic Link Aggregation 17.2.1 Link Aggregation ID 17.3 Link Aggregation Status Page 17.4 Link Aggregation Setting Page 17.5 Link Aggregation Control Protocol 17.6 Static Trunking Example Page Page Port Authentication 18.1 Port Authentication Overview 18.1.1 IEEE 802.1x Authentication 18.1.2 MAC Authentication 18.2 Port Authentication Configuration 18.2.1 Activate IEEE 802.1x Security 18.2.2 Guest VLAN Page Page 18.2.3 Activate MAC Authentication Page Page Port Security 19.1 About Port Security 19.2 Port Security Setup 19.3 VLAN MAC Address Limit Page Classifier 20.1 About the Classifier and QoS 20.2 Configuring the Classifier Page 20.3Viewing and Editing Classifier Configuration Page 20.4 Classifier Example Policy Rule 21.1 Policy Rules Overview 21.1.1 DiffServ 21.1.2 DSCP and Per-HopBehavior 21.2 Configuring Policy Rules Page Page 21.3 Viewing and Editing Policy Configuration Page 21.4 Policy Example Page Queuing Method 22.1 Queuing Method Overview 22.1.1 Strictly Priority 22.1.2 Weighted Fair Queuing 22.1.3 Weighted Round Robin Scheduling (WRR) 22.2 Configuring Queuing Page VLAN Stacking 23.1 VLAN Stacking Overview 23.1.1 VLAN Stacking Example 23.2 VLAN Stacking Port Roles 23.3 VLAN Tag Format 23.3.1 Frame Format 23.4 Configuring VLAN Stacking 23.4.1 Port-based Q-in-Q 23.4.2 Selective Q-in-Q Page Page Multicast 24.1 Multicast Overview 24.1.1 IP Multicast Addresses 24.1.2 IGMP Filtering 24.1.3 IGMP Snooping 24.2 Multicast Status 24.3 Multicast Setting Page Page 24.4 IGMP Snooping VLAN 24.5 IGMP Filtering Profile Page 24.6 MVR Overview 24.6.1 Types of MVR Ports 24.6.2 MVR Modes 24.6.3 How MVR Works 24.7 General MVR Configuration Page 24.8 MVR Group Configuration 24.8.1 MVR Configuration Example Page Page AAA 25.1Authentication, Authorization and Accounting (AAA) 25.1.1 Local User Accounts 25.1.2RADIUS and TACACS+ 25.2 AAA Screens 25.2.1 RADIUS Server Setup Page 25.2.2 TACACS+ Server Setup Page 25.2.3 AAA Setup Page Page 25.2.4 Vendor Specific Attribute 25.2.5 Tunnel Protocol Attribute 25.3 Supported RADIUS Attributes 25.3.1 Attributes Used for Authentication 25.3.2Attributes Used for Accounting 25.3.2.3 Attributes Used for Accounting IEEE 802.1x Events Page Page IP Source Guard 26.1 IP Source Guard Overview 26.1.1 DHCP Snooping Overview 26.1.1.3 DHCP Relay Option 82 Information 26.1.1.4 Configuring DHCP Snooping 26.1.2 ARP Inspection Overview 26.2IP Source Guard 26.3 IP Source Guard Static Binding Page 26.4 DHCP Snooping Page Page 26.5 DHCP Snooping Configure Page 26.5.1 DHCP Snooping Port Configure 26.5.2 DHCP Snooping VLAN Configure Page 26.6 ARP Inspection Status 26.6.1 ARP Inspection VLAN Status 26.6.2 ARP Inspection Log Status 26.7 ARP Inspection Configure Page 26.7.1 ARP Inspection Port Configure 26.7.2 ARP Inspection VLAN Configure Page Page Loop Guard 27.1 Loop Guard Overview Page 27.2 Loop Guard Setup Page VLAN Mapping 28.1 VLAN Mapping Overview 28.1.1 VLAN Mapping Example 28.2 Enabling VLAN Mapping 28.3 Configuring VLAN Mapping Page Layer 2 Protocol Tunneling 29.1 Layer 2 Protocol Tunneling Overview 29.1.1 Layer-2Protocol Tunneling Mode 29.2 Configuring Layer 2 Protocol Tunneling Page sFlow 30.1 sFlow Overview 30.2 sFlow Port Configuration 30.2.1 sFlow Collector Configuration Page PPPoE 31.1 PPPoE Intermediate Agent Overview 31.1.1 PPPoE Intermediate Agent Tag Format 31.1.2 Sub-OptionFormat 31.1.3 Port State 31.2 The PPPoE Screen 31.3 PPPoE Intermediate Agent 31.3.1 PPPoE IA Per-Port Page 31.3.2 PPPoE IA Per-Port Per-VLAN Page 31.3.3 PPPoE IA for VLAN Page Error Disable 32.1 CPU Protection Overview 32.2 Error-DisableRecovery Overview 32.3 The Error Disable Screen 32.4 CPU Protection Configuration 32.5 Error-DisableDetect Configuration Page 32.6 Error-DisableRecovery Configuration Page Static Route 33.1 Static Routing Overview 33.2 Configuring Static Routing Page Page Policy Routing 34.1 Policy Route Overview 34.1.1Benefits 34.2 Configuring Policy Routing Profile 34.2.1 Policy Routing Rule Configuration Page RIP 35.1 RIP Overview 35.1.1 Administrative Distance 35.2 Configuring RIP Page Page OSPF 36.1 OSPF Overview 36.1.1 OSPF Autonomous Systems and Areas 36.1.2 How OSPF Works 36.1.3 Interfaces and Virtual Links 36.1.4 OSPF and Router Elections 36.1.5 Configuring OSPF 36.2OSPF Status Page 36.3 OSPF Configuration 36.4 Configure OSPF Areas Page 36.4.1 View OSPF Area Information Table 36.5 Configuring OSPF Redistribution Page 36.6 Configuring OSPF Interfaces Page 36.7 OSPF Virtual-Links Page IGMP 37.1 IGMP Overview 37.1.1 How IGMP Works 37.2 Port-basedIGMP 37.3 Configuring IGMP DVMRP 38.1 DVMRP Overview 38.2 How DVMRP Works 38.2.1 DVMRP Terminology 38.3 Configuring DVMRP 38.3.1 DVMRP Configuration Error Messages 38.4 Default DVMRP Timer Values Differentiated Services 39.1 DiffServ Overview 39.1.1 DSCP and Per-HopBehavior 39.1.2 DiffServ Network Example 39.2Two Rate Three Color Marker Traffic Policing 39.2.1 TRTCM - Color-blindMode 39.2.2 TRTCM - Color-awareMode 39.3 Activating DiffServ 39.3.1 Configuring 2-Rate3 Color Marker Settings Page 39.4 DSCP-to-IEEE802.1p Priority Settings 39.4.1 Configuring DSCP Settings DHCP 40.1 DHCP Overview 40.1.1 DHCP Modes 40.1.2DHCP Configuration Options 40.2DHCP Status 40.3 DHCP Server Status Detail Page 40.4 DHCP Relay 40.4.1 DHCP Relay Agent Information 40.4.2 Configuring DHCP Global Relay 40.4.3 Global DHCP Relay Configuration Example 40.5 Configuring DHCP VLAN Settings Page 40.5.1 Example: DHCP Relay for Two VLANs Page VRRP 41.1 VRRP Overview 41.2 VRRP Status 41.3 VRRP Configuration 41.3.1 IP Interface Setup Page 41.3.2 VRRP Parameters 41.3.3 Configuring VRRP Parameters 41.3.4 Configuring VRRP Parameters 41.4 VRRP Configuration Examples 41.4.1 One Subnet Network Example 41.4.2 Two Subnets Example Page ARP Learning 42.1 ARP Overview 42.1.1 How ARP Works 42.1.2 ARP Learning Mode 42.1.2.1 ARP-Reply 42.1.2.2 Gratuitous-ARP 42.1.2.3 ARP-Request 42.2 Configuring ARP Learning Page Page Load Sharing 43.1 Load Sharing Overview 43.2 Configuring Load Sharing Page Maintenance 44.1 The Maintenance Screen 44.2 Load Factory Default 44.3Save Configuration 44.4 Reboot System 44.5Firmware Upgrade 44.6 Restore a Configuration File 44.7 Backup a Configuration File 44.8FTP Command Line 44.8.1 Filename Conventions 44.8.1.1 Example FTP Commands 44.8.2 FTP Command Line Procedure 44.8.3 GUI-basedFTP Clients 44.8.4 FTP Restrictions Access Control 45.1 Access Control Overview 45.2 The Access Control Main Screen 45.3 About SNMP 45.3.1 SNMP v3 and Security 45.3.2 Supported MIBs 45.3.3 SNMP Traps Page Page Page 45.3.4 Configuring SNMP Page 45.3.5 Configuring SNMP Trap Group 45.3.6 Configuring SNMP User Page 45.4 Setting Up Login Accounts 45.5 SSH Overview 45.6 How SSH works 45.7SSH Implementation on the Switch 45.7.1 Requirements for Using SSH 45.8 Introduction to HTTPS 45.9 HTTPS Example 45.9.1 Internet Explorer Warning Messages 45.9.1.2 Internet Explorer 7 or Page 45.9.2 Mozilla Firefox Warning Messages 45.9.3 The Main Screen 45.10 Service Port Access Control 45.11 Remote Management Page Page Page Diagnostic 46.1 Diagnostic Page Syslog 47.1 Syslog Overview 47.2 Syslog Setup 47.3 Syslog Server Setup Page Cluster Management 48.1 Clustering Management Status Overview 48.2 Cluster Management Status 48.2.1 Cluster Member Switch Management Page 48.2.1.1 Uploading Firmware to a Cluster Member Switch 48.3 Clustering Management Configuration Page Page MAC Table 49.1 MAC Table Overview 49.2 Viewing the MAC Table Page Page IP Table 50.1 IP Table Overview 50.2 Viewing the IP Table Page Page ARP Table 51.1 ARP Table Overview 51.1.1 How ARP Works 51.2 The ARP Table Screen Routing Table 52.1 Overview 52.2 Viewing the Routing Table Status Page Configure Clone 53.1 Configure Clone Page Troubleshooting 54.1Power, Hardware Connections, and LEDs 54.2Switch Access and Login Page Page 54.3 Switch Configuration Page Product Specifications Page Page Page Page Page Page Page Page Page Page Page Page Page Copyright Certifications Page ZyXEL Limited Warranty Page Page Page Index