ZyXEL CommunicationsメーカーGS2200-24の使用説明書/サービス説明書
ページ先へ移動 of 358
www.zyxel.com GS2200-24 Intelligent Layer 2 GbE Switch Copyright © 2009 ZyXEL Communications Corporation Firmware Version 3.90 Edition 1, 6/2009 Default Login Details IP Address http://192.
.
About This User's Guide GS2200-24 User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the Swi tch using the web configurator.
About This User's Guide GS2200-24 User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link. Read the Tech Doc Overview to find out how to ef ficiently us e the User Guide, Quick Start Guide and Command Line Int erface Reference Guide i n order to better understand how to use your product.
Document Conventions GS2200-24 User’s Guide 5 Document Conventions Warnings and Notes These are how warnings and notes ar e shown in this User’s Guide.
Document Conventions GS2200-24 User’s Guide 6 Icons Used in Figures Figures in this User’s Guide may use the fo llowing generic ic ons. The Sw itch i con is not an exact representation of your d evice.
Safety Warnings GS2200-24 User’s Guide 7 Safety Warnings • Do NOT use this product near water, for exam ple, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, du st or corrosive liquids. • Do NOT store things on the device.
Safety Warnings GS2200-24 User’s Guide 8.
Contents Overview GS2200-24 User’s Guide 9 Contents Overview Introduction and Hardware ................................................ ........................................... ........ 23 Getting to Know Your Switch ........................... .
Contents Overview GS2200-24 User’s Guide 10 DHCP ................... ............. ................ ................ ............. ................ ................ ............ ............ 261 Management ...........................................
Table of Contents GS2200-24 User’s Guide 11 Table of Contents About This User's Guide ...................... ..................................................... ............................. .. 3 Document Conventions..........................
Table of Contents GS2200-24 User’s Guide 12 3.2.4 Power Connector ................ ................ ............. ................ ................ ................ .......... 39 3.3 LEDs .... ............. ................ ................ ........
Table of Contents GS2200-24 User’s Guide 13 Chapter 8 Basic Setting ............................................................. .................................................... . ........ 71 8.1 Overview ... ................ ................. .
Table of Contents GS2200-24 User’s Guide 14 10.1 Overview ................. ................. ................ ............. ................ ................ ................ .. ......... 107 10.2 What You Can Do ....................... ...........
Table of Contents GS2200-24 User’s Guide 15 14.1 Bandwidth Control Overview .................. ................ ................ ................ ................ ........ 139 14.2 What You Can Do ....................... ................ ...........
Table of Contents GS2200-24 User’s Guide 16 Chapter 20 Classifier ..................................... ..................................................... ........................... ........... 169 20.1 Overview ................. ...............
Table of Contents GS2200-24 User’s Guide 17 24.2 What You Can Do ....................... ................ ................ ................ ................ ................ ... .. 193 24.3 What You Need to Know .................. ................ .
Table of Contents GS2200-24 User’s Guide 18 26.12.1 DHCP Snooping Overview . ................ ................ ................ ................. ................ . 235 26.12.2 ARP Inspection Overvi ew ............... ................ ..............
Table of Contents GS2200-24 User’s Guide 19 31.3 What You Need to Know .................. ................ ................. ................ ................ .............. 261 31.3.1 DHCP Modes ...... ...... ....... ................ ............. .
Table of Contents GS2200-24 User’s Guide 20 33.9 Technical Reference ...................... ................ ................ ................ ................. ............ ... .. 287 33.9.1 About SNMP ............................. ................
Table of Contents GS2200-24 User’s Guide 21 39.2 Configure Clone .................. ................ ............. ................. ............ ................. ............ ..... 321 Part VI: Troubleshooting & Prod uct Specification s ......
Table of Contents GS2200-24 User’s Guide 22.
23 P ART I Introduction and Hardware Getting to Know Your Switch (25) Hardware Installation and Connection (31) Hardware Panels (35).
24.
GS2200-24 User’s Guide 25 C HAPTER 1 Getting to Know Your Switch 1.1 Introduction This chapter introduces the main features and applications of the Switch. The Switch is a layer-2 standalone Ethernet switch with additional layer-2, l ayer- 3, and layer-4 features suitab le for Ethernets.
Chapter 1 Getting to Know Your Switch GS2200-24 User’s Guide 26 In this example, all computer s can share hig h-speed applicatio ns on the serv er. To expand the network, simply add more networking devi ces such as switches, routers, computers, print servers etc.
Chapter 1 Getting to Kn ow Your Switch GS2200-24 User’s Guide 27 1.1.3 High Performance Switching Example The Switch is ideal for connect ing two ne tworks that need high bandwidth. In the following example, use trunking to connect these two networks.
Chapter 1 Getting to Know Your Switch GS2200-24 User’s Guide 28 Shared resources such as a server can be used by all ports in the same VLAN as the server. In the following figure only ports that need access t o the server need to be part of VLAN 1. Ports can belong to ot her VLAN groups too.
Chapter 1 Getting to Kn ow Your Switch GS2200-24 User’s Guide 29 • Write down the password an d put it in a safe pl ace. • Back up the configuration (and mak e sure you know how to restore it). Restorin g an ea rlier worki ng config uratio n may be useful if the device becomes unstable or even crashes.
Chapter 1 Getting to Know Your Switch GS2200-24 User’s Guide 30.
GS2200-24 User’s Guide 31 C HAPTER 2 Hardware Installation and Connection 2.1 Installation Scenarios This chapter shows you how to install and connect the Switch. The Switch can be pl aced on a desktop or rack-mounted on a standard EIA rack. Use the rubber feet in a desktop installation and the brackets in a rack-mounted installation.
Chapter 2 Hardware Installation and Connection GS2200-24 User’s Guide 32 2.3.1 Rack-mounted Installation Requirements • Two mounting brackets. • Eight M3 flat head screws and a #2 Philips screwdriver. • Four M5 flat head screws and a #2 Philips screwdriver.
Chapter 2 Hard ware Installation an d Connection GS2200-24 User’s Guide 33 2.3.3 Mounting the Switch on a Rack 1 Position a mounting bracket (that is alread y attached t o the Switch) on one side of the rack, lining up the two screw holes on the bracket with the sc rew holes on the side of the rack.
Chapter 2 Hardware Installation and Connection GS2200-24 User’s Guide 34.
GS2200-24 User’s Guide 35 C HAPTER 3 Hardware Panels 3.1 Overview This chapter describes the front panel and rear panel of the Sw itch and shows you how to make the hardware connections. 3.2 Front Panel The following figure shows th e front panel of the Switch.
Chapter 3 Hardw are Panels GS2200-24 User’s Guide 36 3.2.1 Console Port For local management, you can use a computer with terminal emulation software configured to the following parameters: • VT10.
Chapter 3 Hardware Pa nels GS2200-24 User’s Guide 37 ports. This means that if a mini-GBIC slot and the corresponding GbE port are connected at the same time, the GbE port will be disabled. When auto-negotiation is turned on, an Ethernet port negotiates with the peer automatically to determine the connection speed and d uplex mode.
Chapter 3 Hardw are Panels GS2200-24 User’s Guide 38 • Connection speed: 1 Gi gabit per second (Gbps) 3.2.3.1 Transceiver Installation Use the following steps to install a mini-GBIC transceiver (SFP module). 1 Insert the transceiver into the slot with the exposed section of PCB board f acing down.
Chapter 3 Hardware Pa nels GS2200-24 User’s Guide 39 3 Pull the tran sceiver out of the slot. Figure 10 Removing the Fibe r Optic Cables Figure 11 Opening the Transceiver’s L atch Example Figure 12 Transceiver Removal Example 3.2.4 Power Connector Note: Make sure you are usin g the correct power source as shown on the panel.
Chapter 3 Hardw are Panels GS2200-24 User’s Guide 40 3.3 LEDs After you connect the power to the Swit ch, view the LEDs to ensure proper functioning of the Switch and as an aid in t roubleshooting. Table 2 LED Descriptions LED COLOR STATU S DESCRIPTION PWR Green On The system is turned on.
41 P ART II Basic Configuration The Web Configurator (43) Initial Setup Example (51) System Status and Port Stat istics (65) Basic Setting (71).
42.
GS2200-24 User’s Guide 43 C HAPTER 4 The Web Configurator 4.1 Overview This section introduces the config uratio n and functi ons of the web configurator. The web configurator is an HTML-based management interface that allows easy Switch setup and management via Internet brows er.
Chapter 4 The Web Configurator GS2200-24 User’s Guide 44 3 The login screen appears. The defa ult username is admin and associated default password is 1234 . The date and time display as shown if you have not configured a time server nor manually en tered a time and date in the General Setup screen.
Chapter 4 The Web Configurator GS2200-24 User’s Guide 45 A - Click the menu items to open submenu li nks, and then cl ick on a submenu link to open the screen in the main window. B , C , D , E - These are quick links which allow you to perform certain tasks no matter which screen you are currently working in.
Chapter 4 The Web Configurator GS2200-24 User’s Guide 46 The following table descri bes the links in the navigation panel. Table 4 Navigation Panel Links LINK DESCRIPTION Basic Settings System I nfo This link takes you to a screen that displays general system information.
Chapter 4 The Web Configurator GS2200-24 User’s Guide 47 VLAN Stacking This link takes you to screens where you can configure VLAN stacking. Multicast This link takes you to screens where you can configure various multicast features, IGMP snooping and create multicast VLANs.
Chapter 4 The Web Configurator GS2200-24 User’s Guide 48 4.3.1 Change Your Password After you log in for the first time, it is recommended you ch ange the default administrator password. Click Management > Access Control > Logins to display the next screen.
Chapter 4 The Web Configurator GS2200-24 User’s Guide 49 4.5 Switch Lockout You could block yourself (and all ot hers) from managing the Switch if you do one of the following: 1 Delete the management VLAN (def ault is VLAN 1). 2 Delete all port-based VLANs with the CPU port as a member.
Chapter 4 The Web Configurator GS2200-24 User’s Guide 50 2 Disconnect and reconnect the Swi tch’s power to begin a session. When you reconnect the Switch’s power, you will see the initial screen. 3 When you see the mes sage “ Press any key to enter Debug Mode within 3 seconds .
GS2200-24 User’s Guide 51 C HAPTER 5 Initial Setup Example 5.1 Overview This chapter shows how to set up th e Switch for an example network. The following lists the configurati on steps for the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Switch IP manag ement address 5.
Chapter 5 Initial Set up Example GS2200-24 User’s Guide 52 1 Click Advanced A pplication > VLA N in the navigation panel and click the Static VLAN link. 2 In the Static VLAN screen, select ACTIVE , enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field fo r the VLAN2 network.
Chapter 5 Initial Set up Example GS2200-24 User’s Guide 53 5.1.2 Setting Port VID Use PVID to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VL AN group that the tag defines.
Chapter 5 Initial Set up Example GS2200-24 User’s Guide 54 5.2 Configuring Switch Management IP Address The default management IP address of the Switch is 192.168.1.1. You can configure another IP address in a differ ent subnet for management purposes.
GS2200-24 User’s Guide 55 C HAPTER 6 Tutorials 6.1 Overview This chapter provides some examples of using the web conf igurator to set up and use the Switch. The tutorials include: • How to Use DHCP Snooping on the Switch • How to Use DHCP Relay on the Switch 6.
Chapter 6 Tutorials GS2200-24 User’s Guide 56 1 Access th e Switch thro ugh http://192.168.1 .1 by default. Log into the Switch by entering the username (default: admin ) and p assword (default: 1234 ). 2 Go to Advanced Application > VLAN > Static VLAN , and create a VLAN with ID of 100.
Chapter 6 Tutorials GS2200-24 User’s Guide 57 3 Go to Advanced Application > VLAN > VLAN Port Setting , and set the PVID of the ports 5, 6 and 7 to 100.
Chapter 6 Tutorials GS2200-24 User’s Guide 58 5 Click the Port link at the top righ t corner. 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5.
Chapter 6 Tutorials GS2200-24 User’s Guide 59 8 Click Save at the top right corner of the web configurator to save the configuration permanently. 9 Connect your DHCP server to port 5 and a computer (a s DHCP client) to either port 6 or 7. The computer should be ab le to get an IP address from the DHCP server.
Chapter 6 Tutorials GS2200-24 User’s Guide 60 on the system name, VLAN ID and port number in the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. Figure 27 Tutorial: DHCP Relay Scenario 6.3.2 Creating a VLAN Follow the steps below to config ure port 2 as a member of VLA N 102.
Chapter 6 Tutorials GS2200-24 User’s Guide 61 3 Click Advanced Application > VLAN > Static VLAN . 4 In the Static VLAN screen, select ACTIVE , enter a descripti ve name (VALN 102 for example) in the Name field and enter 102 in the VL AN Group ID field.
Chapter 6 Tutorials GS2200-24 User’s Guide 62 8 Click the VLAN St atus link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN Status sc reen.
Chapter 6 Tutorials GS2200-24 User’s Guide 63 11 Click the Save link in the upper right c orner of the web conf igurator to save your configu ration per manent ly. 6.3.3 Configuring DHCP Relay Follow the steps below to enable DHCP rela y on the Switch and allow the Switch to add relay agent information (such as the VLAN ID) to DHCP requests.
Chapter 6 Tutorials GS2200-24 User’s Guide 64 1 Client A is connected to the Switch’s port 2 in VLAN 102. 2 You configu red the corr ect VLAN ID, por t number and syst em name for DHCP relay on both the DHCP server and the Switch. 3 You clicked the Save link on the Switch to have your sett ings take effect.
GS2200-24 User’s Guide 65 C HAPTER 7 System Status and Port Statistics 7.1 Overview This chapter describes the system s tatus (web conf igurator home page) and port details screens. The home screen of the web configurator displays a port statistical summary wit h links to each port showing s tatistical details.
Chapter 7 S ystem Status and Port Statist ics GS2200-24 User’s Guide 66 7.3 Port Status Summary To view the port statist ics, click Status in all web config urator screens to display the Status screen as sho wn next. Figure 33 Status The following table describes t he labels in this screen.
Chapter 7 System Status and Port Statistics GS2200-24 User’s Guide 67 7.3.1 Status: Port Details Click a number in the Port column in the Status screen to display indivi dual port statistics. Use t his screen to check status and detailed performance data about an individual port on the Switch.
Chapter 7 S ystem Status and Port Statist ics GS2200-24 User’s Guide 68 The following table describes t he labels in this screen. Table 7 Status: Port Details LABEL DESCRIPTION Port Info Port NO. This field displays the port number you are viewing. Name This field displays the name of the port.
Chapter 7 System Status and Port Statistics GS2200-24 User’s Guide 69 Excessiv e This is a count of packets for which transmission failed due to excessive collisions. Excessive collision is defined as the number of maximum collisions before the retransmission count is reset.
Chapter 7 S ystem Status and Port Statist ics GS2200-24 User’s Guide 70.
GS2200-24 User’s Guide 71 C HAPTER 8 Basic Setting 8.1 Overview This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. The System Info screen displays ge neral Switch information (such as firmware version number).
Chapter 8 Basic Setting GS2200-24 User’s Guide 72 8.3 System Information In the navigation panel, click Bas ic Setting > Sy stem Info to display the screen as shown. You can check the firmware version number. Figure 35 Basic Setting > System Info The following table describes t he labels in this screen.
Chapter 8 Basic Setting GS2200-24 User’s Guide 73 Fan Speed (RPM) A properly functioning fan is an essential component (along with a sufficiently ventilated, cool operating environment) in order for the device to stay within the temperature threshold.
Chapter 8 Basic Setting GS2200-24 User’s Guide 74 8.4 General Setup Use this screen to configure general sett ings such as the system name and time. Click Basic Setting > Gener al Setup in the navigation panel to display the screen as shown. Figure 36 Basic Setting > General Setup The following table describes t he labels in this screen.
Chapter 8 Basic Setting GS2200-24 User’s Guide 75 Use Time Server when Bootup Enter the time service pro t ocol that your timeserver uses. Not all time servers support all protocols, so you may have to use trial and error to find a protocol that works.
Chapter 8 Basic Setting GS2200-24 User’s Guide 76 8.5 Introduction to VLANs A VLAN (Virtual Local Area Network) allo ws a physical network to be partitioned into mult iple logic al networks . Devices on a logical network belong to one group. A device can belong to more than one grou p.
Chapter 8 Basic Setting GS2200-24 User’s Guide 77 8.6 Switch Setup Screen Click Basic Setting > Switch Setup in the navigation p anel to dis play the scre en as shown. The VLAN setup screens chan ge depending on whether you choose 802.1Q or Port Based in the VLA N Type field in this screen .
Chapter 8 Basic Setting GS2200-24 User’s Guide 78 8.7 IP Setup Use the IP Setup screen to configure the Switch IP address, defaul t gateway device, the default d omain name serv er and the management VLAN ID. The default gateway specifies the IP address of the default g ateway (next hop ) for outgoing traffic.
Chapter 8 Basic Setting GS2200-24 User’s Guide 79 8.7.1 Management IP Addresses The Switch needs an IP ad dress for it to be managed over the network. The factory default IP address is 192.168. 1.1. The subnet mask specifies the network number portion of an IP address.
Chapter 8 Basic Setting GS2200-24 User’s Guide 80 The following table describes t he labels in this screen. Table 11 Basic Setting > IP Setup LABEL DESCRIPTION Domain Name Server DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa.
Chapter 8 Basic Setting GS2200-24 User’s Guide 81 8.8 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation p anel to display the configuration screen. Figure 39 Basic Setting > Port Setup Default Gateway This field displays the IP address of the default gateway.
Chapter 8 Basic Setting GS2200-24 User’s Guide 82 The following table describes t he labels in this screen. Table 12 Basic Setting > Port Se tup LABEL DESCRIPTION Port This is the port index number. * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports.
Chapter 8 Basic Setting GS2200-24 User’s Guide 83 802.1p Priority This priority value is added to incomi ng frames without a (802.1p) priority queue tag. See Pr iority Queue Assignment in Tabl e 10 on page 77 for more information. Apply Click Apply to save your changes to the Switch’s run-time memory.
Chapter 8 Basic Setting GS2200-24 User’s Guide 84.
85 P ART III Advanced VLAN (87) Static MAC Forward Setup (107) Filtering (115) Spanning Tree Protocol (117) Bandwidth Control (139) Broadcast Storm Control (143) Mirroring (147) Link Aggregation (151).
86.
GS2200-24 User’s Guide 87 C HAPTER 9 VLAN 9.1 Overview This chapter shows you how to configur e 802.1Q tagged and p ort-based VLANs. The type of screen you see here depend s on the VLAN Type you selected in the Switch Setup screen. 9.2 What You Can Do •U s e t h e VLAN Status screen ( Section 9.
Chapter 9 VLAN GS2200-24 User’s Guide 88 dynamically through GVRP. The VLAN ID a ssociates a frame wi th a specific VLAN and provides the information that s witch es need to process the frame across the network.
Chapter 9 VLAN GS2200-24 User’s Guide 89 LAN. GARP is a protocol that pr ovides a generic mechanism for protocols that serve a more specific application, for example, GVRP . 9.3.4.1 GARP Timers Switches join VLANs by making a declarat ion. A declaration is made by issui ng a Join message using GARP.
Chapter 9 VLAN GS2200-24 User’s Guide 90 9.3.6 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass through that port . This is us eful if you want to set up VLAN groups on end devices without having to config ure the same VLAN groups on intermediary devices.
Chapter 9 VLAN GS2200-24 User’s Guide 91 9.4 VLAN Status Click Advanced Application > VLAN from t he navigation panel to display the VLAN Status screen as shown next. Figure 42 Advanced Application > VLAN: VLAN Status The following table describes t he labels in this screen.
Chapter 9 VLAN GS2200-24 User’s Guide 92 9.4.1 VLAN Details Use this screen to view detai led port sett ings and status of the VLAN group. Click on an index number in the VLAN Status screen to display VLAN details. Figure 43 Advanced Application > VLAN > VLAN Detail The following table describes t he labels in this screen.
Chapter 9 VLAN GS2200-24 User’s Guide 93 9.5 Configure a Static VLAN Use this screen to configure and view 802. 1Q VLAN parameters for the Switch. To configure a static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next.
Chapter 9 VLAN GS2200-24 User’s Guide 94 * Settings in this row apply to all ports. Use this row only if you wan t to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Chapter 9 VLAN GS2200-24 User’s Guide 95 9.6 Configure VLAN Port Settings Use the VLAN Port Setting screen to co nfigure the static VLAN (IEEE 802.1Q) settings on a port.
Chapter 9 VLAN GS2200-24 User’s Guide 96 9.7 Subnet Based VLANs Subnet based VLANs allow you to g roup tr affic i nto logical VLANs based on the source IP subnet you specify. When a fr ame is received on a port, the Switch checks if a tag is added already and the IP subnet it came from.
Chapter 9 VLAN GS2200-24 User’s Guide 97 For example, an ISP (Internet Services Provider) may divide d ifferent types of services it provides to customers into different IP subnets. Traffic for voice services is designated for IP subnet 172.16.1.0/24, video for 192.
Chapter 9 VLAN GS2200-24 User’s Guide 98 Note: Subnet based VLAN applies to un-tagged packets and is app licable only when you use IEEE 802.1Q tagged VLAN. Figure 47 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN The following table describes t he labels in this screen.
Chapter 9 VLAN GS2200-24 User’s Guide 99 9.8 Protocol Based VLANs Protocol based VLANs allow you to group traffic into logical VLANs based on the protocol you specify. When a n upstream frame is rece ived on a port (configured for a protocol based VLAN), t he Switch checks if a tag is added al ready and its protocol.
Chapter 9 VLAN GS2200-24 User’s Guide 100 traffic from port 6 and 7 will be in anot her group and have highe r priority than ARP traffic, when they go th rough the upli nk port to a bac kbone swit ch C. Figure 48 Protocol Based VLAN Application Example 9.
Chapter 9 VLAN GS2200-24 User’s Guide 101 The following table describes t he labels in this screen. Table 19 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN Setup LABEL DESCRIPTION Active Check this box to activate this protocol based VLAN.
Chapter 9 VLAN GS2200-24 User’s Guide 102 9.9 Port-based VLAN Setup Port-based VLANs are VLA Ns where th e packet for warding decis ion is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoin g ports to be defined for each port.
Chapter 9 VLAN GS2200-24 User’s Guide 103 9.9.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Basic Setting > Switch Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen.
Chapter 9 VLAN GS2200-24 User’s Guide 104 Figure 51 Port Ba sed VLAN Setup (Port Isolation).
Chapter 9 VLAN GS2200-24 User’s Guide 105 The following table describes t he labels in this screen. 9.10 Technical Reference This section provides technical background information on the topics discussed in this chapter. 9.10.1 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 an d 8.
Chapter 9 VLAN GS2200-24 User’s Guide 106 1 Activate this protocol based VLAN. 2 Type the port number you want to include in thi s protocol based VLAN. Type 1 . 3 Give this protocol-based VLAN a descriptive name. Type IP-VLAN . 4 Select the protocol.
GS2200-24 User’s Guide 107 C HAPTER 10 Static MAC Forward Setup 10.1 Overview This chapter discusses how to configure f orwarding rules based on MAC addresses of devices on your network. Use these screens to configure static MAC address forwarding. 10.
Chapter 10 Stat ic MAC Forward Setup GS2200-24 User’s Guide 108 Click Advanced Application > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 53 Advanced Application > Static MAC Forwarding The following table describes t he labels in this screen.
Chapter 10 St atic MAC Fo rward Setup GS2200-24 User’s Guide 109 Port This field displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes.
Chapter 10 Stat ic MAC Forward Setup GS2200-24 User’s Guide 110.
GS2200-24 User’s Guide 111 C HAPTER 11 Static Multicast Forward Setup 11.1 Overview This chapter discusses how to configure fo rwarding rules based on multicast MAC addresses of devices on your network. Use these screens to configure stat ic multicast add ress forwarding.
Chapter 11 Stat ic Multicast Forw ard Setup GS2200-24 User’s Guide 112 connected to port 3. Fi gure 56 shows frames being forw arded to ports 2 and 3 within VLAN group 4. Figure 54 No Static Multicas t Forwardin g Figure 55 Static Mult icast Forwarding to A Single Port Figure 56 Static Mult icast Forwarding to Mu ltiple Ports 11.
Chapter 11 St atic Mu lticast Forward Setup GS2200-24 User’s Guide 113 Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 57 Advanced Application > Stat ic Mu lticast Forwarding The following table describes t he labels in this screen.
Chapter 11 Stat ic Multicast Forw ard Setup GS2200-24 User’s Guide 114 Active This field dis plays whether a static multicast MAC address forwarding rule is active ( Yes ) or not ( No ).
GS2200-24 User’s Guide 115 C HAPTER 12 Filtering 12.1 Overview This chapter discusses MAC address port fil tering. Filtering means sifting traffic goi ng through the Switch based on the source and/or destination MAC addresse s and VLAN group (ID) . 12.
Chapter 12 Filtering GS2200-24 User’s Guide 116 The following table describes t he related labels in this screen. Table 23 Advanced App lication > Filtering LABEL DESCRIPTION Active Make sure to select this chec k box to activate your rule. You may temporarily deactivate a rule without de leting it by deselecting this check box.
GS2200-24 User’s Guide 117 C HAPTER 13 Spanning Tree Protocol 13.1 Overview The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protoc ol (MSTP) as defined in the following standards. • IEEE 802.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 118 13.3 What You Need to Know (R)STP detects and breaks network l oops and provides backup links between switches, bridges or routers.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 119 For each LAN segment, a designated bridge is selected. This bridge has the lowest cost to the root among the br idges connected to the LAN.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 120 In the following example, th ere are two RSTP instances ( MRSTP 1 and MRSTP2 ) on switch A . To set up MRSTP, activate MRSTP on the Switch and specify which port(s) bel ong to which spanning tree.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 121 13.4 Spanning Tree Protocol Status Screen The Spanning Tree Protocol status screen changes depending on what standard you choose to implement on your ne twork. Click Advanced Application > Spanning Tree Protocol to see the screen as shown.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 122 The following table describes t he labels in this screen. 13.6 Configure Rapid Span ning Tree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 117 for more informat ion on RS TP.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 123 The following table describes t he labels in this screen. Table 27 Advanced App lication > Spanning Tree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 63 on page 124 ).
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 124 13.7 Rapid Spanning Tree Protocol Status Click Advanced Applicatio n > Spanning Tree Pr otocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 117 for more information on RSTP.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 125 The following table describes t he labels in this screen. Table 28 Advanced App lication > Spanning Tree Protocol > Status: RST P LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you want to activate.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 126 13.8 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in the Adva nced Application > Spanning Tree Proto col screen. See Section 13.1 on page 117 for more information on MRSTP.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 127 Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switc h with th e highest priority (lowest numeric value) becomes the STP root switch .
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 128 13.9 Multiple Rapid Spanning Tree Protocol Status Click A dvanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 129 Hello Time (second) This is the time interval (in seconds) at which the root switch transmits a configuration message. The root bridge determines Hello Time, Max Age and Forwar ding Delay.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 130 13.10 Configure Multiple Sp anning Tree Protocol To configure MSTP, cl ick MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.3.5 on page 120 for more information on MSTP.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 131 The following table describes t he labels in this screen. Table 31 Advanced App lication > Spanning Tree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 67 on page 133 ).
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 132 Bridge Priority Set the priority of the Switch for the specific spanning tree instance. The lower the number, the more likely the Switch will be chosen as the root bridge within the spanning tree instance.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 133 13.11 Multiple Spanning Tree Protocol Status Click A dvanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.3.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 134 The following table describes t he labels in this screen. Table 32 Advanced App lication > Spanning Tree Protocol > Status: MSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you want to activate.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 135 13.12 Technical Reference This section provides technical background information on the topics discussed in this chapter. 13.12.1 MSTP Network Example The following figure shows a network exam ple where two VLANs are configured on the two switches.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 136 With MSTP, VLANs 1 and 2 are mapp ed to di fferent spanning trees in the network. Thus traffic from the tw o VLANs travel on different paths. The following figure shows the network example using MSTP.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 137 The following figure shows an example wh ere there are two MST regions. Regions 1 and 2 have 2 spanning tree inst ances.
Chapter 13 Spanning T ree Protoc ol GS2200-24 User’s Guide 138.
GS2200-24 User’s Guide 139 C HAPTER 14 Bandwidth Control 14.1 Bandwidth Control Overview This chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen. Bandwidth control means defining a maxi mum allowable bandwidth for incoming and/or out-going traffic flows on a port.
Chapter 14 Bandwidth Control GS2200-24 User’s Guide 140 14.3 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 72 Advanced Application > Bandwidth Control The following table describes t he related labels in this screen.
Chapter 14 Bandwid th Control GS2200-24 User’s Guide 141 Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses po wer, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring.
Chapter 14 Bandwidth Control GS2200-24 User’s Guide 142.
GS2200-24 User’s Guide 143 C HAPTER 15 Broadcast Storm Control 15.1 Overview This chapter introduces and shows you how to configure the broadcast st orm control feature. Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch re ceives per second on the ports.
Chapter 15 Broadcast Storm Control GS2200-24 User’s Guide 144 15.3 Broadcast Storm Control Setup Click Advanced Application > Broadcast Storm Control in the navigation panel to display the screen as shown next. Figure 73 Advanced Application > Broadcast Sto rm Control The following table describes t he labels in this screen.
Chapter 15 Broadcast Storm Control GS2200-24 User’s Guide 145 Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is tu rned off or loses power, so use the Save link on the top navigation panel to save your changes to the no n- volatile memory when you are done configuring.
Chapter 15 Broadcast Storm Control GS2200-24 User’s Guide 146.
GS2200-24 User’s Guide 147 C HAPTER 16 Mirroring 16.1 Overview This chapter discusses port mirroring s etup screens. Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffic to) in order that you can examine the traffic from the monitor port without inte rference .
Chapter 16 Mirr oring GS2200-24 User’s Guide 148 16.3 Port Mirroring Setup Click Advanced Application > Mirroring in the navigation panel to d isplay the Mirroring screen. Use this screen to select a monitor p ort and specify the traffic flow to be copied to the monitor port.
Chapter 16 Mirr oring GS2200-24 User’s Guide 149 Mirrored S elect this option to mirror the traffic on a port. Direction Specify the direction of the traffi c to mirror by selecting from the drop-down list box. Choices are Egress (outgoing), Ingress (incoming) and Both .
Chapter 16 Mirr oring GS2200-24 User’s Guide 150.
GS2200-24 User’s Guide 151 C HAPTER 17 Link Aggregation 17.1 Overview This chapter shows you how to logically aggregate physical li nks to form one logical, higher-bandwidth l ink. Link aggregation (trunking) is the groupi ng of physical ports into one logical higher-capacity link.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 152 17.3.1 Dynamic Link Aggregation The Switch adheres to the IEEE 802.3ad standard for static and dynamic (LACP) port trunking. The IEEE 802.3ad standard describes t h e Link Aggregation Control Prot ocol (LACP) for dynamically creating and managing trun k groups.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 153 17.4 Link Aggregation Status Click Advanced Application > Link Aggregation in the navigati on panel. The Link Aggregation Status screen displays by defa ult. See Section 17.1 on page 151 for more information.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 154 Criteria This shows the outgoing traffic distribution algorithm used in this trunk group. Packets from the same source and/or to the same destination are sent over the same link within the trunk.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 155 17.5 Link Aggregation Setting Click Advanced Application > Link Aggregati on > Link Aggregation Setting to displ ay the sc reen shown next. See Section 17.1 on page 151 for more informat ion on link ag gregation.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 156 Criteria Select the outgoing traffic distribution type. Packets from the same source and/or to the same destination are sent over the same link within the trunk. By default, the Switch uses the src-dst-mac distribution type.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 157 17.6 Link Aggregation Control Protocol Click Advanced Applicatio n > Link A ggregation > Link Aggrega tion Setting > LACP to display the screen shown next. See Section 17.3.1 on page 152 for more information on dynamic link aggregation.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 158 17.7 Technical Reference This section provides technical background information on the topics discussed in this chapter. 17.7.1 Static Trunking Example This example shows you how to create a static port trunk group for ports 2- 5.
Chapter 17 Link Aggregation GS2200-24 User’s Guide 159 1 Make your physical connections - make sure that the ports that you want to belong to the trunk group are connected to the same destina tion. The followin g figure shows ports 2-5 on swit ch A connected to switch B .
Chapter 17 Link Aggregation GS2200-24 User’s Guide 160.
GS2200-24 User’s Guide 161 C HAPTER 18 Port Authentication 18.1 Overview This chapter describes the IEEE 802.1x aut hentication method. Port authentication is a way to valid ate access to ports on the Switch to clients based on an external serv er (authentication server).
Chapter 18 Port Authentication GS2200-24 User’s Guide 162 When the client provides th e login credentials, the Switch sends an authentic ation request to a RADIUS server. The RADIU S se rver validates whether this client is allowed access to the port.
Chapter 18 Port Au thentication GS2200-24 User’s Guide 163 18.5 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x to display the configuration screen as shown. Figure 82 Advanced Application > Port Authentication > 802.
Chapter 18 Port Authentication GS2200-24 User’s Guide 164 Active Select this to permit 802.1x auth entication on this port. You must first allow 802.
GS2200-24 User’s Guide 165 C HAPTER 19 Port Security 19.1 Overview This chapter shows you how to set up port security. Port security allows only packets with d ynamically learned MAC addresses and/or configured static MAC addresses to pass th rough a port on the Switch.
Chapter 19 Port Secu rity GS2200-24 User’s Guide 166 19.3 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. Figure 83 Advanced Application > Port Security The following table describes t he labels in this screen.
Chapter 19 Port Security GS2200-24 User’s Guide 167 * Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Chapter 19 Port Secu rity GS2200-24 User’s Guide 168.
GS2200-24 User’s Guide 169 C HAPTER 20 Classifier 20.1 Overview This chapter introduces and shows you how to configure the packet classif ier on the Switch. It also discusses Quality of Service (QoS) and classifier concepts as employed by the Switch.
Chapter 20 Classifier GS2200-24 User’s Guide 170 2 Configure policy rules to define actions to be performed on a classified traffic flow (refer to Chapter 21 on page 175 to configure policy rules). 20.4 Configuring the Classifier Use the Classifier screen to define the c lassifiers.
Chapter 20 Classifier GS2200-24 User’s Guide 171 The following table describes t he labels in this screen. Table 43 Advanced App lication > Classifier LABEL DESCRIPTION Active Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes.
Chapter 20 Classifier GS2200-24 User’s Guide 172 20.4.1 Viewing and Editing Classifier Configuration To view a summary of t he classifier co nfigurati on, scroll down to the summary table at the bottom of the Classifier screen. To change the settings of a rule, click a number in the Index field.
Chapter 20 Classifier GS2200-24 User’s Guide 173 The following table shows some othe r common Ethernet types and the corresponding protocol number. In the Internet Protocol there is a field, ca lled “Protocol”, to identify the next level protocol.
Chapter 20 Classifier GS2200-24 User’s Guide 174 20.5 Classifier Example The following screen shows an example where you configur e a classifier that identifies all traffic from MAC a d dress 00:50:ba:ad:4f:81 on port 2.
GS2200-24 User’s Guide 175 C HAPTER 21 Policy Rule 21.1 Policy Rules Overview This chapter shows you how to configure polic y rules. A classifier distinguishes traffic int o flows based on the configured criteria (refer to Chapter 20 on page 169 for more information).
Chapter 21 Policy Rule GS2200-24 User’s Guide 176 Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. Figure 87 Advanced Application > Policy Rule The following table describes t he labels in this screen.
Chapter 21 Policy Rule GS2200-24 User’s Guide 177 Rate Limit You can configure the desired bandwidth available to a traffic flow. Traffic that exceeds the maximum bandwidth allocated (in cases where the network is congested) is dropped. Bandwidth Specify the bandwi dth in kilobit per second (Kbps).
Chapter 21 Policy Rule GS2200-24 User’s Guide 178 21.3.1 Viewing and Editing Policy Configuration To view a summary of t he classifier co nfigurati on, scroll down to the summary table at the bottom of the Policy screen. To change the settings of a rule, c lick a number in the Index field.
Chapter 21 Policy Rule GS2200-24 User’s Guide 179 21.4 Policy Example The figure be low shows an example Policy screen where you configure a policy to limit bandwidth on a traffi c flow classified using the Ex ample classifier (refer to Section 20.5 on page 174 ).
Chapter 21 Policy Rule GS2200-24 User’s Guide 180.
GS2200-24 User’s Guide 181 C HAPTER 22 Queuing Method 22.1 Overview This chapter introduces the queuing methods supported. Queuing is us ed to help solv e performa nce degradation when there is ne twork congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic.
Chapter 22 Que uing Method GS2200-24 User’s Guide 182 22.3.2 Weighted Fair Queuing Weighted Fair Queuing is used to gu arantee each queue's minimum bandwidth based on its bandwidth weight (portion) (t he numb er you configure in the Weight field) when th ere is traffi c congestion.
Chapter 22 Queuing Method GS2200-24 User’s Guide 183 22.4 Configuring Queuing Click Advanced Application > Queuing Method in the navigati on panel. Figure 90 Advanced Application > Que uing Method The following table describes t he labels in this screen.
Chapter 22 Que uing Method GS2200-24 User’s Guide 184 Method Select SPQ (Strictly Priority Queuing), WFQ (Weighted Fair Queuing) or WRR (Weighted Round Robin). Strictly Priority Queuing services queu es based on priority only. When the highest priority queue empties, traffi c on the next highest-priority queue begins.
GS2200-24 User’s Guide 185 C HAPTER 23 VLAN Stacking 23.1 Overview This chapter shows you how to configure VLAN stacking on your Switch. See the chapter on VLANs for more background information on Virtual LAN.
Chapter 23 VLAN Stacking GS2200-24 User’s Guide 186 23.4 Configuring VLAN Stacking Click Advanced Application > VLAN Stacking to display the screen as shown. Figure 91 Advanced Application > VLAN Stacking The following table describes t he labels in this screen.
Chapter 23 VLAN Stacking GS2200-24 User’s Guide 187 23.5 Configuring SVLAN Use this screen to configure up to 64 se rvice provider's VLANs. If an incoming frame received on a Tunnel Port is untagged or its service provider's VLAN ID is not configured in this screen, the Switch drops the frame.
Chapter 23 VLAN Stacking GS2200-24 User’s Guide 188 Click the SVLAN link in the VLAN Stacking screen. Figure 92 Advanced Application > VLAN Stacking > SVLAN The following table describes t he labels in this screen. 23.6 Technical Reference This section provides technical background information on the topics discussed in this chapter.
Chapter 23 VLAN Stacking GS2200-24 User’s Guide 189 distinguish customer A and tag 48 to disti n guish customer B at ed ge device 1 and then stripping those tags at edge device 2 as the data frames leave the network. Figure 93 VLAN Stacking Example 23.
Chapter 23 VLAN Stacking GS2200-24 User’s Guide 190 Note: When you enable VLAN stackin g on the Switch, the Access Port and Tunnel Port should be in the same customer VLAN (static VLAN) to communicate with each other. 23.6.3 VLAN Tag Format A VLAN tag (service provider VLAN stacking or customer IEEE 802.
Chapter 23 VLAN Stacking GS2200-24 User’s Guide 191 Table 54 Single and Do uble Tagged 802.11Q Frame F ormat Untagged Ethernet frame DA SA Len/ Etype Data FCS IEEE 802.1Q custo mer tagged frame DA SA TPID Priority VID Len/ Etype Data FCS Double- tagged frame DA SA SP TPID Priority VID TPID Priorit y VID Len/ Etype Data FCS Table 55 802.
Chapter 23 VLAN Stacking GS2200-24 User’s Guide 192.
GS2200-24 User’s Guide 193 C HAPTER 24 Multicast 24.1 Overview This chapter shows you how to configure various multi cast features. Traditionally, IP packets ar e transmitte d in one of either tw o ways - Unicast ( 1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network).
Chapter 24 Multicast GS2200-24 User’s Guide 194 24.3.1 IP Multicast Addresses In IPv4, a multicast address allows a device to send packets to a spec ific group of hosts (multicast group) in a different subnetwork. A multicast IP address represents a traffic receiving group, not indi vidual receiving devices.
Chapter 24 Multicast GS2200-24 User’s Guide 195 24.4 Multicast Status Click Advanced Applications > Multicast to display the screen as shown. This screen shows the multicas t group information. See Section 24.1 on pag e 193 for more information on multicasting.
Chapter 24 Multicast GS2200-24 User’s Guide 196 24.5 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to display the screen as shown.
Chapter 24 Multicast GS2200-24 User’s Guide 197 802.1p Priority Select a priority level (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority. Unknown Multicast Frame Specify the action to perform when the Switch receives an unknown multicast frame.
Chapter 24 Multicast GS2200-24 User’s Guide 198 24.6 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the Max Group Num. Enter the number of multicast groups this port is allowed to join.
Chapter 24 Multicast GS2200-24 User’s Guide 199 screen as shown. See Section 24.3.3 on page 194 for more in formation on IGMP Snooping VLAN. Figure 96 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN The following table describes t he labels in this screen.
Chapter 24 Multicast GS2200-24 User’s Guide 200 Add Click Add to insert the entry in the summary table below and save your changes to the Switch’s run-time memory.
GS2200-24 User’s Guide 201 C HAPTER 25 AAA 25.1 Overview This chapter describes how to configure au thentication and auth orization settings on the Switch. The external servers that perform authen tication and authorization functions are known as AAA servers.
Chapter 25 AAA GS2200-24 User’s Guide 202 25.3 What You Need to Know Authentication is the process of determinin g who a user is and validating access to the Switc h. The S witch can authentic ate user s who try to log i n based o n user accounts configured on the Switch itself .
Chapter 25 AAA GS2200-24 User’s Guide 203 25.4 AAA Screens The AAA scr eens allow yo u to enab le authenti cation and au thorization or both of them on the Sw itch. First, config ure your authentication server settings (RADIUS, TACACS+ or both) and then set up th e authentication priority, ac tivate authorization.
Chapter 25 AAA GS2200-24 User’s Guide 204 Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. Figure 99 Advanced Application > AAA > RADIUS Server Setup The following table describes t he labels in this screen.
Chapter 25 AAA GS2200-24 User’s Guide 205 IP Address Enter the IP address of an ex ternal RADIUS server in dotted decimal notation. UDP Port The default port of a RADIUS server for authentication is 1812 . You need not change this value unless your network administrator instructs you to do so.
Chapter 25 AAA GS2200-24 User’s Guide 206 25.6 TACACS+ Server Setup Use this screen to configur e yo ur TACACS+ server settings. See Section 25.3.2 on page 202 for more information on TACACS+ servers. Click on t he TACACS+ Server Setup link in the AAA screen to view the screen as shown.
Chapter 25 AAA GS2200-24 User’s Guide 207 Timeout Specify the amount of time in seconds that the Switch waits for an authentication request respon se from the TACA CS+ server. If you are using in dex-prior ity for your authentication and yo u are using two TACACS+ servers then the timeout value is divided between the two TACACS+ servers.
Chapter 25 AAA GS2200-24 User’s Guide 208 25.7 AAA Setup Use this screen to config ure authenticati on and auth orization setting s on the Switch. Click on t he AAA Setup link in the AAA scre en to view the screen as shown.
Chapter 25 AAA GS2200-24 User’s Guide 209 The following table describes t he labels in this screen. Table 62 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authentication Use this section to specify the methods used to authenticate users accessing the Switch.
Chapter 25 AAA GS2200-24 User’s Guide 210 25.8 Technical Reference This section provides technical background information on the topics discussed in this chapter.
Chapter 25 AAA GS2200-24 User’s Guide 211 The following table describes t he VSAs supported on the Switch. 25.8.1.1 Tunnel Protocol Attribut e You can configu re tunnel protoc ol attributes on t he RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.
Chapter 25 AAA GS2200-24 User’s Guide 212 25.8.2 Supported RADIUS Attributes Remote Authentication Dial-In User Servic e (RADI US) attributes are data used to define specific authenticati on elements in a user profile, which is stored on the RADIUS server.
Chapter 25 AAA GS2200-24 User’s Guide 213 - This value is set to Ethernet(15) on t he Switch. Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator.
Chapter 25 AAA GS2200-24 User’s Guide 214.
GS2200-24 User’s Guide 215 C HAPTER 26 IP Source Guard 26.1 Overview Use IP source guard to filter unauthoriz ed DHCP and ARP packets in your network. IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in yo ur network.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 216 •U s e t h e DHCP VLAN Configur e screen ( Section 26.7.2 on page 2 25 ) to enable DHCP snooping on each VLAN and to specify whether or not the Switch adds DHCP relay agent option 82 inf ormation to DHCP requests that the Switch relays to a DHCP server for each VLAN.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 217 between authorized and unau thorized packets in the ne tw ork. The Switch learns the bindings by snooping DHCP packets (dynamic bindings) and from information provided manually by administrat ors (static binding s).
Chapter 26 IP Source G uard GS2200-24 User’s Guide 218 new static binding replaces the origin al one. To open t his screen, click Advanced Application > IP Source Guard > Static Binding . Figure 103 IP Source Guar d Static Binding The following table describes t he labels in this screen.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 219 26.6 DHCP Snooping Use this screen to look at various statis tics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping . Figure 104 DHCP Snooping Port This field displays the port number in the binding.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 220 The following table describes t he labels in this screen. Table 67 DHCP Snooping LABEL DESCRIPTION Database Status This section displays the current settings for the DHCP snooping database. You can configure them in the DHCP Snooping Configure screen.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 221 Successful transfers This field displays the number of times the Switch read bindings from or updated the bindings in the D HCP snooping database successfully.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 222 26.7 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and configure the DHCP snooping database.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 223 The following table describes t he labels in this screen. Table 68 DHCP Snooping Configure LABEL DESCRIPTION Active Select this to enable DHCP snooping on the Switch. You still have to enable DHCP snooping on spec ific VLAN and specify trusted ports.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 224 26.7.1 DHCP Snooping Port Configure Use this screen to specify whether ports are trusted or untrusted ports for DHCP snooping. Note: If DHCP snooping is enabled but th ere are no trusted ports, DHCP requests cannot reach the DHCP server.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 225 The following table describes t he labels in this screen. 26.7.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VL.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 226 open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN . Figure 107 DHCP Snooping VLAN Configure The following table describes t he labels in this screen.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 227 26.8 ARP Inspection Status Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unau thorized ARP packet.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 228 26.9 ARP Inspection VLAN Status Use this screen to look at various stat isti cs about ARP packets in each VLAN. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status .
Chapter 26 IP Source Guard GS2200-24 User’s Guide 229 26.10 ARP Inspection Log Status Use this screen to look at log messages that were generated by ARP packets and that have not been s ent to the syslog server yet. To open this s creen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status .
Chapter 26 IP Source G uard GS2200-24 User’s Guide 230 26.11 ARP Inspection Configure Use this screen to enable AR P inspe ction on the Switch . You can al so configu re the length of time the Switc.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 231 settings for the ARP inspection log. To open this screen, c lick Advanced Application > IP Source Guard > ARP Inspection > Configure . Figure 111 ARP Inspection Co nfigure The following table describes t he labels in this screen.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 232 26.11.1 ARP Inspection Port Configure Use this screen to specify whether port s are trusted or untrusted ports for ARP inspection.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 233 ARP packet s on each untru sted port. T o open this sc reen, click Advanced Application > IP Source Guard > ARP Inspection > Configure > Port . Figure 112 ARP Inspection Po rt Configure The following table describes t he labels in this screen.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 234 26.11.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiv ing ARP packets from each VLAN.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 235 26.12 Technical Reference This section provides technical background information on the topics discussed in this chapter. 26.12.1 DHCP Snooping Overview Use DHCP s nooping t o filter unauthorized DHCP packets on the network and to build the binding table dynamically.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 236 Trusted ports are connected to DHCP se rvers or other switches . The Switch discards DHCP packets from trusted ports on ly if the rate at which DHCP packets arrive is too high. The Switch learns dynamic bindings from trust ed ports.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 237 read. If the calculated checksum is not e qual to the checksum in the f ile, th at binding and all ot hers after it are igno red. 26.12.1.3 DHCP Relay Option 82 Information The Switch can add information to DHCP re quests that it does not discard.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 238 26.12.2 ARP Inspection Overview Use ARP inspection to filter unauthorized ARP packets on the network. This can prevent many kinds of man-in-the-middle at tacks, such as the one in the following example.
Chapter 26 IP Source Guard GS2200-24 User’s Guide 239 26.12.2.2 Trusted vs. Untrusted Ports Every port is either a trust ed port or an untrusted port f or ARP inspection. This setting is independent of t he trusted/untrusted setting for DHCP snooping.
Chapter 26 IP Source G uard GS2200-24 User’s Guide 240.
GS2200-24 User’s Guide 241 C HAPTER 27 Loop Guard 27.1 Overview This chapter shows you how to configure th e Switch to guard against loops on the edge of your network. Loop guard allows you to configure t he Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch.
Chapter 27 Lo op Guard GS2200-24 User’s Guide 242 27.3 What You Need to Know Loop guard is designed to handle loop prob lems on the edge of your network. This can occur when a port is connected to a Swit ch that is in a l oop state. Loop stat e occurs as a result of human error.
Chapter 27 Loop Guar d GS2200-24 User’s Guide 243 returns to port N on A . The Switch then shuts down port N to ensure that the rest of the network is not affected by the switch in loop state. Figure 118 Loop Guard - Probe Packet The Switch also shuts down port N if the probe packet returns to switch A on any other port.
Chapter 27 Lo op Guard GS2200-24 User’s Guide 244 Note: The loop guard feature can not be ena bled on the ports that have Sp anning Tree Protocol (RSTP, MRSTP or MSTP) enabled. Figure 120 Advanced App lication > Loop Guard The following table describes t he labels in this screen.
GS2200-24 User’s Guide 245 C HAPTER 28 Layer 2 Protocol Tunneling 28.1 Overview This chapter shows you how to configure la yer 2 protocol tunneling on the Switch. Layer 2 protocol tunneling (L 2PT) is used on th e servic e provid er's edge devices.
Chapter 28 Layer 2 Prot ocol Tunne ling GS2200-24 User’s Guide 246 layer 2 protocol pac kets with a specifi c MAC address before sending them across the service provider’s networ k to other e dge switches.
Chapter 28 Layer 2 Protoco l Tunneling GS2200-24 User’s Guide 247 •T h e Tunne l port is an egress port at the edge of the service provider's network and connected to another service provid er’s switch. Incoming encap sulated layer 2 protocol packe ts received on a tu nnel port are decapsulated and sent to an access port.
Chapter 28 Layer 2 Prot ocol Tunne ling GS2200-24 User’s Guide 248 The following table describes t he labels in this screen. Table 78 Advanced App lication > Layer 2 Protocol Tunneling LABEL DESCRIPTION Active Select this to enable layer 2 protocol tunneling on the Switch.
Chapter 28 Layer 2 Protoco l Tunneling GS2200-24 User’s Guide 249 Mode Select A ccess to have the Switch encapsul ate the incoming layer 2 protocol packets and forward them to the tunnel port(s). Select Access for ingress ports at the edge of the service provider's network.
Chapter 28 Layer 2 Prot ocol Tunne ling GS2200-24 User’s Guide 250.
251 P ART IV IP Application Static Route ( 253) Differentiated Services ( 257) DHCP (261).
252.
GS2200-24 User’s Guide 253 C HAPTER 29 Static Route 29.1 Overview This chapter shows you how to configure stati c routes. The Switch uses IP for communication wi th management computers, for example using HTTP, Telnet, SSH, or SNMP.
Chapter 29 Static Rou te GS2200-24 User’s Guide 254 29.2 What You Can Do Use the Static Routing screen ( Section 29.3 on page 254 ) to activate/deactivate this static route. 29.3 Configuring Static Routing Click IP Application > Static Routing in the navigation panel to display the screen as shown.
Chapter 29 Static Route GS2200-24 User’s Guide 255 Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link.
Chapter 29 Static Rou te GS2200-24 User’s Guide 256.
GS2200-24 User’s Guide 257 C HAPTER 30 Differentiated Services 30.1 Overview This chapter shows you how to configure Di ffer entiated Service s (DiffServ) on the Switch. Quality of Service (QoS) is used to prioriti ze source-to-desti nation traffic flows.
Chapter 30 Differe ntiated Services GS2200-24 User’s Guide 258 30.3.1 DSCP and Per-Hop Behavior DiffServ defines a new DS ( Differentiated Services) field to replace the Type of Service (ToS) field i n the IP header.
Chapter 30 Differentiated Se rvices GS2200-24 User’s Guide 259 traffic flow are more likel y to be dropped when congestion occurs than the packets in the Platinum traffic flow as they move across the DiffServ network. Figure 127 DiffServ Net work 30.
Chapter 30 Differe ntiated Services GS2200-24 User’s Guide 260 30.5 DSCP-to-IEEE 802.1p Priority Settings You can configure the DSCP to I EEE 802. 1p mapping to allo w the Switch to prioritize all traffic based on the incoming DSCP value according to the DiffServ to IEEE 802.
GS2200-24 User’s Guide 261 C HAPTER 31 DHCP 31.1 DHCP Overview This chapter shows you how to configure the DHCP feature. DHCP (Dynamic Host Configuratio n Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP conf iguration at start-up from a server.
Chapter 31 DHCP GS2200-24 User’s Guide 262 computer on your network, it contacts the DHCP server for the necessary IP information, and then relays t he assigned information back to the computer. 31.3.2 DHCP Configuration Options The DHCP conf iguration on the Switch is divided in to Global and VLAN sc reens.
Chapter 31 DHCP GS2200-24 User’s Guide 263 The following describes the DHCP relay information that the Switch sends to the DHCP server: 31.4 DHCP Status Click IP Application > DHCP in the navigat ion panel. The DHCP Status screen displays. Figure 130 IP Application > DHCP Status The following table describes t he labels in this screen.
Chapter 31 DHCP GS2200-24 User’s Guide 264 31.5 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP R elay screen. Clic k IP Application > DHCP in the navigation panel and click the Global li nk to display the screen as shown.
Chapter 31 DHCP GS2200-24 User’s Guide 265 31.5.1 Global DHCP Relay Configuration Example The following figure shows a network exam ple where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains.
Chapter 31 DHCP GS2200-24 User’s Guide 266 Note: You must set up a man agement IP address for each VLAN th at you want to configure DHCP settings for on the Switch. See Section 8.7 on page 78 for information on how to set up management IP addresses for VLANs.
Chapter 31 DHCP GS2200-24 User’s Guide 267 31.6.1 Example: DHCP Relay for Two VLANs The following example dis plays two VLANs (VIDs 1 and 2) for a campus network. Two DHCP servers are installed to serve each VLAN. The system is set up to forward DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.
Chapter 31 DHCP GS2200-24 User’s Guide 268 For the example netw ork, co nfigure the VLAN Setting screen as shown. Figure 136 DHCP Relay for Two VL ANs Configuration Example.
269 P ART V Management Maintenance (271) Access Control (279) Diagnostic (301) Syslog (303) Cluster Management (307) MAC Table (315) ARP Table (319) Configure Clone (321).
270.
GS2200-24 User’s Guide 271 C HAPTER 32 Maintenance 32.1 Overview This chapter explains how to configure the screens that let you maintain the firmware and configuration files. 32.2 What You Can Do •U s e t h e Maintenance scre en ( Section 32.3 on page 271 ) to upl oad the latest firmware.
Chapter 32 Maintenance GS2200-24 User’s Guide 272 The following table describes t he labels in this screen. 32.3.1 Load Factory Default Follow the step s below to reset th e Sw itch back to the factory defaults.
Chapter 32 Maintenance GS2200-24 User’s Guide 273 3 In the web configurator, click the Save button in the top of the screen to make the changes take effect. If you want to access the Swit ch web configurator again, you may need to change the IP address of you r computer t o be in t he same subnet as that of the default Switch IP address (192.
Chapter 32 Maintenance GS2200-24 User’s Guide 274 32.4 Firmware Upgrade Use the following screen to upgrade yo ur Switch to the latest fi rmware. Make sure you have downloaded (and unzipped) th e correct model firmware and version to your computer before uploading to the device.
Chapter 32 Maintenance GS2200-24 User’s Guide 275 Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to locat e it.
Chapter 32 Maintenance GS2200-24 User’s Guide 276 32.7 Technical Reference This section provides technical background information on the topics discussed in this chapter. 32.7.1 FTP Command Line This section shows some examples of uplo ading to or downloading files from t he Switch using FTP commands.
Chapter 32 Maintenance GS2200-24 User’s Guide 277 Be sure to upload the correct m odel firmware as uploading the wrong model firmware m ay damage your device. 32.7.3 FTP Command Line Procedure 1 Launch the FTP client on your computer. 2 Enter open , followed by a space and the IP address of your Switch.
Chapter 32 Maintenance GS2200-24 User’s Guide 278 32.7.5 FTP Restrictions FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) i n the Remo te Management screen does not match the client IP address.
GS2200-24 User’s Guide 279 C HAPTER 33 Access Control 33.1 Overview This chapter describes how to control access to t he Switch. A console port and FTP are allowed one se ssion each, Telnet and SSH share nine sessions, up to five Web sessions (five di fferent user names and password s) and/ or limitless SNMP access control sessions are allowed.
Chapter 33 Access Control GS2200-24 User’s Guide 280 33.3 The Access Control Main Screen Use this screen to display the main screen. Click Management > Access Control in the navigation panel to display the main screen as shown. Figure 143 Management > Access Contro l 33.
Chapter 33 Access Control GS2200-24 User’s Guide 281 The following table describes t he labels in this screen. Table 90 Management > Access Control > SNMP LABEL DESCRIPTION General Sett ing Use this section to specify the SNMP version and community (password) values.
Chapter 33 Access Control GS2200-24 User’s Guide 282 Security Level Select whether you want to implement authentication and/or encryption for SNMP communication from this us er. Choose: • noauth -to use the username as the password string to send to the SNMP manager.
Chapter 33 Access Control GS2200-24 User’s Guide 283 33.5 Configuring SNMP Trap Group Use the Trap Group screen to specify the t ypes of SN MP traps that shoul d be sent to each SNMP manager. Click Management > Access Control > SNMP > Trap Group to view the screen as shown.
Chapter 33 Access Control GS2200-24 User’s Guide 284 33.6 Setting Up Login Accounts Use this screen to assig n which users can access the Switch via web configurator at any one time. U p t o f i v e p e o p l e ( o n e a d m i n i s t r a t o r a n d four non-administrators) may access the Switch via web configurator at any one time.
Chapter 33 Access Control GS2200-24 User’s Guide 285 The following table describes t he labels in this screen. 33.7 Service Port Acce ss Control Use this screen to decide what s ervices you may use to access the Switch. Service Access Control allows you to decide what services you may use to access the Switch.
Chapter 33 Access Control GS2200-24 User’s Guide 286 later). Cl ick Management > Access Control > Service Access Control to view the screen as shown. Figure 147 Manageme nt > Access Control > Service Access Control The following table describes t he fields in this screen.
Chapter 33 Access Control GS2200-24 User’s Guide 287 You can specify a group of one or more “trusted computers” from which an administrator may use a service to manage the Switch.
Chapter 33 Access Control GS2200-24 User’s Guide 288 33.9.1 About SNMP Simple Network Manageme nt Protocol (SNM P) is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between the network manage ment system (NMS) and a network element (NE).
Chapter 33 Access Control GS2200-24 User’s Guide 289 SNMP itself is a simple request /respon se protocol based on the manager/agent model. The manager issues a request an d the agent returns responses using the following protocol operations: SNMP v3 and Security SNMP v3 enhances security for SNMP management.
Chapter 33 Access Control GS2200-24 User’s Guide 290 An OID (Object ID) that begins with “ 1.3.6.1.4.1.890.1.5.8 ” is defined in private MIBs. Otherwis e, it is a standard MIB OID. Table 96 SNMP Syst em Traps OPTION OBJECT LABEL OBJE CT ID DESCRIPTION coldstart coldS tart 1.
Chapter 33 Access Control GS2200-24 User’s Guide 291 Table 97 SNMP InterfaceTraps OPTION OBJEC T LABEL OBJECT ID DESCRIPTION linkup linkUp 1 .3.6.1.6.3.1.1. 5.4 This trap is sent when the Ethernet link is up. LinkDownEventClear : 1.3.6.1.4.1 .890.1.
Chapter 33 Access Control GS2200-24 User’s Guide 292 Table 98 AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION authenticatio n authenticationFailure 1.3.6.1.6.3.1.1.5.5 This trap is sent when authentication fails due to incorrect user name and/or password.
Chapter 33 Access Control GS2200-24 User’s Guide 293 33.9.2 SSH Overview Unlike Telnet or FTP, which transmit data in clear t ext, SSH (Secure Shell) is a secure communication protocol that combin es authentication and data encryption Table 100 SNMP Switch Traps OPTION OBJEC T LABEL OBJECT ID DESCRIPTION stp STPNewRoot 1.
Chapter 33 Access Control GS2200-24 User’s Guide 294 to provide secure encrypted communicatio n between two hosts over an unsecured network. Figure 150 SSH Communication Example 33.9.2.1 How SSH works The following table summarizes how a secure connect ion is established between two remot e hosts.
Chapter 33 Access Control GS2200-24 User’s Guide 295 2 Encryption Method Once the identification is verified, both the client and server must agree on the type of encryption method to us e.
Chapter 33 Access Control GS2200-24 User’s Guide 296 1 HTTPS connection requests from an SSL - aware web browser go to port 443 (by default) on the Switch’s WS (web server). 2 HTTP connection requests from a web brow ser go to port 80 ( by default) on the Switch’s WS (web server).
Chapter 33 Access Control GS2200-24 User’s Guide 297 You see the following Security Alert screen in Internet Explorer. Select Yes to proceed to the web configurator login screen ; if you sele ct No , then web configurator access is b locked.
Chapter 33 Access Control GS2200-24 User’s Guide 298 Select Accept this certificate permanently to import the S witch’s cert ificate into the SSL client.
Chapter 33 Access Control GS2200-24 User’s Guide 299 33.9.3.2 The Main Screen After you accept the certificate and enter the login username and pass word, the Switch main screen appears. The l ock di splayed in the bottom right of the browser status bar denotes a secure connection.
Chapter 33 Access Control GS2200-24 User’s Guide 300.
GS2200-24 User’s Guide 301 C HAPTER 34 Diagnostic 34.1 Overview This chapter explains the Diagnostic screen. Use the Diagnostic screen ( Section 34.2 on page 301 ) to check system logs, ping IP addresses or perform port tests. 34.2 Diagnostic Click Management > Diagnostic in the navi gation panel to open this screen.
Chapter 34 Diagnostic GS2200-24 User’s Guide 302 The following table describes t he labels in this screen. Table 101 Management > Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi-line text box. Click Cl ear to empty the text box and reset the syslog entry.
GS2200-24 User’s Guide 303 C HAPTER 35 Syslog 35.1 Overview This chapter explains the syslog screens. The syslog protocol allows devices to se nd event notific ation messages ac ross an IP network to syslog servers t hat coll ec t the even t messages .
Chapter 35 Syslog GS2200-24 User’s Guide 304 35.3 Syslog Setup Use this screen to configure the device’ s system logging settings. Click Management > Syslog in the navigation panel to display this screen. The syslog feature sends logs to an external sysl og server.
Chapter 35 Sy slog GS2200-24 User’s Guide 305 35.4 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to vie w the screen as shown next. Use this screen to configur e a list of external syslog servers. Figure 159 Management > Syslog > Syslog Server Setup The following table describes t he labels in this screen.
Chapter 35 Syslog GS2200-24 User’s Guide 306.
GS2200-24 User’s Guide 307 C HAPTER 36 Cluster Management 36.1 Overview This chapter introduces cluster management. Cluster Management allows you to manage switches through one Switch, called the cluster manager. The swit ches must be directly connected and be in the same VLAN group so as to be able to co mmunicate with one another.
Chapter 36 Cluster Management GS2200-24 User’s Guide 308 In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are clust er members. Figure 160 Clustering App lication Example 36.
Chapter 36 Cluster Management GS2200-24 User’s Guide 309 Note: A cluster can only have one manager. Figure 161 Management > Cluster Manag ement: Status The following table describes t he labels in this screen.
Chapter 36 Cluster Management GS2200-24 User’s Guide 310 36.4 Clustering Management Configuration Use this screen to configure clustering management.
Chapter 36 Cluster Management GS2200-24 User’s Guide 311 VID This is the VLAN ID and is only applicable if the Switch is set to 802.1Q VLAN. All switches must be directly connected and in the same VLAN group to belong to the same cluster. Switches that are not in the same VLAN group are not visible in the Clustering Cand idates list.
Chapter 36 Cluster Management GS2200-24 User’s Guide 312 36.5 Technical Reference This section provides technical background information on the topics discussed in this chapter.
Chapter 36 Cluster Management GS2200-24 User’s Guide 313 36.5.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager swi tch as sh own in the following exampl e.
Chapter 36 Cluster Management GS2200-24 User’s Guide 314.
GS2200-24 User’s Guide 315 C HAPTER 37 MAC Table 37.1 Overview This chapter introduces the MAC Table sc reen. The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered acro ss the Switch’s ports.
Chapter 37 MAC Ta ble GS2200-24 User’s Guide 316 • If the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. Figure 165 MAC Table Flowchart 37.4 Viewing the MAC Table Use this screen to check whether the MAC add ress is dynamic or static .
Chapter 37 MAC Table GS2200-24 User’s Guide 317 The following table describes t he labels in this screen. Table 109 Management > MAC Table LABEL DESCRIPTION Condition S elect one of the buttons and click Search to on ly display the data which matches the criteria you specified.
Chapter 37 MAC Ta ble GS2200-24 User’s Guide 318.
GS2200-24 User’s Guide 319 C HAPTER 38 ARP Table 38.1 Overview This chapter introduces ARP Tabl e. Address Resolution Protocol (ARP) is a pr otocol for mapping an Internet Protocol address (IP address) to a physical machin e address, also known as a Media Access Control or MAC address, on the local area network.
Chapter 38 ARP Table GS2200-24 User’s Guide 320 38.3 Viewing the ARP Table Use the ARP table to view IP-to-MAC address mapping(s). Click Management > ARP Table in the navig ation pane l to open the following screen. Figure 167 Management > ARP Table The following table describes t he labels in this screen.
GS2200-24 User’s Guide 321 C HAPTER 39 Configure Clone 39.1 Overview This chapter shows you how you can copy the settings of one port onto other ports. Use the Configure Clone screen ( Section 39.2 on page 321 ) to copy the basic and advanced settings from a source po rt to a destination port or ports.
Chapter 39 Config ure Clone GS2200-24 User’s Guide 322 The following table describes t he labels in this screen. Table 111 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Port Enter the source port under the Sourc e label. This port’s attributes are copied.
323 P ART VI Troubleshooting & Product Specifications Troubleshooting (325) Product Specifications (329).
324.
GS2200-24 User’s Guide 325 C HAPTER 40 Troubleshooting This chapter offers some suggestions t o solve problems you might encount er. The potential problems are divided into the following categories . • Power, Hardware Connections, and LED s • Switch Access and Login • Switch Configuration 40.
Chapter 40 Trou bleshooting GS2200-24 User’s Guide 326 1 Make sure you understand the normal behavior of the LED. See Section 3.3 on page 40 . 2 Check the hardware connections. See Section 40.1 on page 325 . 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables.
Chapter 40 Trou bleshooting GS2200-24 User’s Guide 327 • If you changed the IP ad dress and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the Switch. 2 Check the hardware connections, and ma ke sure the LEDs are behaving as expected.
Chapter 40 Trou bleshooting GS2200-24 User’s Guide 328 In order to use the web configurator you need to allow: • Web browser pop-up windows from your devi ce. • JavaScripts (enabled by default). • Java permissions (enabled by default). I cannot see some of Advanced Application submenus at the bottom of the navigation panel.
GS2200-24 User’s Guide 329 C HAPTER 41 Product Specifications The following tables summarize the Swit ch’s hardware and firmware feature s. Table 112 Hardware Specifications SPECIFICATION DESCRIPTION Dimensions Standard 19” rack mountable 440 mm (W) x 173 mm (D) x 43 mm (H) Weight 2.
Chapter 41 Product Specifications GS2200-24 User’s Guide 330 Fan Design Fanless Fuse Specification 250 VAC, T2A Table 113 Firmware Specifications FEATUR E DESCRIPTION Default IP Address 192.
Chapter 41 Product Specifications GS2200-24 User’s Guide 331 Queuing Queuing is used to help solve performance degradation when there is network congestion. The following scheduling services are supported: Strict Priority Queuing (SPQ) Weighted Round Robin (WRR), and Weighted Fair Queuing (WFQ).
Chapter 41 Product Specifications GS2200-24 User’s Guide 332 Firmware Upgrade Download new firmware (when available) from the ZyXEL w eb site and use the web configurator, CLI or an FTP/TFTP tool to put it on the Switch.
Chapter 41 Product Specifications GS2200-24 User’s Guide 333 VLAN Port-based VLAN 802.1Q tag-based VLAN number of VLAN: 4K, 1000 static maximum GVRP for dynamic registration Double tagging for VLAN stacking, 64-entry maximum Private VLAN for port isolation Protocol-Based VLAN.
Chapter 41 Product Specifications GS2200-24 User’s Guide 334 The following list, which is not exhaust ive , illustrates the standards s upported in the Switch. AAA Support RADIUS and TACACS+ Security Static MAC address filtering Static MAC address forwarding MAC Freeze IEEE 802.
Chapter 41 Product Specifications GS2200-24 User’s Guide 335 RFC 3046 DHCP Relay RFC 3164 Syslog RFC 3376 Internet Group Management Protocol, Version 3 RFC 3414 User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMP v3) RFC 3580 RADIUS - Tunnel Protocol Attribute IEEE 802.
Chapter 41 Product Specifications GS2200-24 User’s Guide 336.
337 P ART VII Appendices and Index Changing a Fuse (339) Common Services (341) Legal Information (345) Index (349).
338.
GS2200-24 User’s Guide 339 A PPENDIX A Changing a Fuse This appendix shows you how to remo ve and ins tall fuses f or the Swit ch. If you use a fuse other than an included fuse, make sure it matches the fuse specifications in the chapter on produ ct specifications.
Appendix A Changing a Fuse GS2200-24 User’s Guide 340.
GS2200-24 User’s Guide 341 A PPENDIX B Common Services The following table lists some commonl y- used services and their associated protocols and port numbers. For a comprehe nsive list of port numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site.
Appendix B Common Services GS2200-24 User’s Guide 342 ESP (IPSEC_TUNNEL) User-Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on.
Appendix B Common Services GS2200-24 User’s Guide 343 POP3 TCP 110 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). PPTP TCP 1723 Point-to-Point Tunneling Protocol enables secure transfer of data over public networks.
Appendix B Common Services GS2200-24 User’s Guide 344 TELNET TCP 23 Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems.
GS2200-24 User’s Guide 345 A PPENDIX C Legal Information Copyright Copyright © 2009 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a w.
Appendix C Legal Info rmation GS2200-24 User’s Guide 346 • This device mus t accept any interf erence received, including interference that may cause undesired operations. FCC Warning This device has been tested and found to comply with the limits for a Class A digital switch, pursuant to Part 15 of th e FCC Rules.
Appendix C Legal Infor mation GS2200-24 User’s Guide 347 Viewing Certifications 1 Go to http://www.zyxel .com . 2 Select your product on the ZyXEL home page to go to that product's page. 3 Select the certification you wish to vi ew from this page.
Appendix C Legal Info rmation GS2200-24 User’s Guide 348.
Index GS2200-24 User’s Guide 349 Index Numerics 802.1P priority 83 A AAA 201 AAA (Authentication and Authorization) 202 access control limitations 279 login account 284 remote management 286 service.
Index GS2200-24 User’s Guide 350 cloning a port See port cloning cluster management 307 and switch passwords 311 cluster manager 307 , 310 cluster member 307 , 311 cluster member firmware upgrade 31.
Index GS2200-24 User’s Guide 351 command example 276 filename convention, configuration configuration file names 276 filtering 115 rules 115 filtering database, MAC table 315 firmware 72 upgrade 274 , 313 flow control 82 back pressure 82 IEEE802.
Index GS2200-24 User’s Guide 352 IP setup 78 IP source guard 215 , 216 ARP inspection 216 , 238 DHCP snooping 216 , 23 5 static bindings 216 IP subnet mask 80 L L2PT 245 access port 246 CDP 245 conf.
Index GS2200-24 User’s Guide 353 max age 131 hops 131 MDIX (Media Dependent Interface Crossover) 37 MIB and SNMP 288 supported MIBs 289 MIB (Management Information Base) 288 mirroring ports 147 moni.
Index GS2200-24 User’s Guide 354 port VLAN trunking 90 port-based VLAN 102 all connected 105 port isolation 105 settings wizard 105 ports diagnostics 302 mirroring 147 speed/duplex 82 standby 152 po.
Index GS2200-24 User’s Guide 355 communities 281 management model 288 manager 288 MIB 289 network components 288 object variables 288 protocol operations 289 security 282 setup 280 , 283 version 3 289 versions supported 288 SNMP traps 289 , 290 , 291 , 293 setup 283 supported 291 Spanning Tree Protocol, See STP.
Index GS2200-24 User’s Guide 356 current 75 time zone 75 Time (RFC-868) 75 time server 75 time service protocol 75 format 75 TPID 190 trademarks 345 transceiver MultiSource Agreement (MSA) 37 transc.
Index GS2200-24 User’s Guide 357 W warranty 347 note 347 web config urator 43 getting help 50 home 44 login 43 logout 50 navigation panel 45 weight, queuing 182 Weighted Round Robin Scheduling (WRR).
Index GS2200-24 User’s Guide 358.
デバイスZyXEL Communications GS2200-24の購入後に（又は購入する前であっても）重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります：
ZyXEL Communications GS2200-24をまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはZyXEL Communications GS2200-24の技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。ZyXEL Communications GS2200-24の取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。ZyXEL Communications GS2200-24で得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
ZyXEL Communications GS2200-24を既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はZyXEL Communications GS2200-24の不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、ZyXEL Communications GS2200-24に関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちZyXEL Communications GS2200-24デバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。
