ZyXEL Communications GS3700 Series Betriebsanweisung Seite 1

Quick Start Guidewww.zyxel.comGS3700/XGS3700 SeriesGbE L2+ SwitchVersion 4.10Edition 1, 05/2013Copyright © 2013 ZyXEL Communications CorporationUser’s

Table of ContentsGS3700/XGS3700 Series User’s Guide1021.1.1 VLAN Stacking Example ...

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide1006 Leave the priority set to 0 and click Add. Figure 52 Protocol Based VLAN Configuration Example

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide101The following table describes the labels in this screen. 7.6 Port-based VLAN Setup Port-based

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide102The following screen shows users on a port-based, all-connected VLAN configuration.Figure 54 Adva

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide103The following screen shows users on a port-based, port-isolated VLAN configuration.Figure 55 Adv

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide104The following table describes the labels in this screen. Table 36 Advanced Application > VLAN:

GS3700/XGS3700 Series User’s Guide 105CHAPTER 8Static MAC Forward SetupUse these screens to configure static MAC address forwarding.8.1 OverviewThi

Chapter 8 Static MAC Forward SetupGS3700/XGS3700 Series User’s Guide106The following table describes the labels in this screen. Table 37 Advanced Ap

GS3700/XGS3700 Series User’s Guide 107CHAPTER 9Static Multicast Forward SetupUse these screens to configure static multicast address forwarding.9.1

Chapter 9 Static Multicast Forward SetupGS3700/XGS3700 Series User’s Guide108Figure 59 Static Multicast Forwarding to Multiple Ports 9.2 Configuri

Chapter 9 Static Multicast Forward SetupGS3700/XGS3700 Series User’s Guide109VID You can forward frames with matching destination MAC address to port

Table of ContentsGS3700/XGS3700 Series User’s Guide1123.2.2 TACACS+ Server Setup ...

GS3700/XGS3700 Series User’s Guide 110CHAPTER 10FilteringThis chapter discusses MAC address port filtering.10.1 Configure a Filtering Rule Configu

Chapter 10 FilteringGS3700/XGS3700 Series User’s Guide111MAC Type a MAC address in a valid MAC address format, that is, six hexadecimal character pai

GS3700/XGS3700 Series User’s Guide 112CHAPTER 11Spanning Tree ProtocolThe Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide113On each bridge, the bridge communicates with the root through the root port. Th

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide114In the following example, there are two RSTP instances (MRSTP1 and MRSTP2) on sw

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide11511.1.5.1 MSTP Network ExampleThe following figure shows a network example wher

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide116Devices that belong to the same MST region are configured to have the same MSTP

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide11711.2 Spanning Tree Protocol Status Screen Click Advanced Application > Span

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide11811.4 Configure Rapid Spanning Tree Protocol Use this screen to configure RSTP

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide11911.5 Rapid Spanning Tree Protocol Status Click Advanced Application > Spa

Table of ContentsGS3700/XGS3700 Series User’s Guide1227.2 Configuring Layer 2 Protocol Tunneling ...

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide120Note: This screen is only available after you activate RSTP on the Switch. Figur

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide12111.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, cli

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide12211.7 Multiple Rapid Spanning Tree Protocol Status Click Advanced Applicati

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide123Note: This screen is only available after you activate MRSTP on the Switch. Fig

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide12411.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide125The following table describes the labels in this screen. Table 47 Advanced Ap

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide126Enabled VLAN(s) This field displays which VLAN(s) are mapped to this MST instanc

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide12711.8.1 Multiple Spanning Tree Protocol Port Configuration To configure MSTP po

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide12811.9 Multiple Spanning Tree Protocol Status Click Advanced Application >

Chapter 11 Spanning Tree ProtocolGS3700/XGS3700 Series User’s Guide129Port ID This is the priority and number of the port on the Switch through whic

Table of ContentsGS3700/XGS3700 Series User’s Guide13Chapter 34Static Route...

GS3700/XGS3700 Series User’s Guide 130CHAPTER 12Bandwidth ControlThis chapter shows you how to cap the maximum bandwidth using the Bandwidth Control

Chapter 12 Bandwidth ControlGS3700/XGS3700 Series User’s Guide13112.2 Bandwidth Control SetupClick Advanced Application > Bandwidth Control in th

Chapter 12 Bandwidth ControlGS3700/XGS3700 Series User’s Guide132Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch lo

GS3700/XGS3700 Series User’s Guide 133CHAPTER 13Broadcast Storm ControlThis chapter introduces and shows you how to configure the broadcast storm co

Chapter 13 Broadcast Storm ControlGS3700/XGS3700 Series User’s Guide134The following table describes the labels in this screen. Table 51 Advanced Ap

GS3700/XGS3700 Series User’s Guide 135CHAPTER 14MirroringThis chapter discusses port mirroring setup screens.14.1 Port Mirroring Port mirroring all

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide136Single-Destination RMirrorIf the mirrored traffic is forwarded to one single destination swit

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide137Port Rules in Port MirroringThe following table shows the rule for a port in remote port mir

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide13814.1.1 Local Port MirroringClick Advanced Application > Mirroring in the navigation panel

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide13914.1.2 Remote Port MirroringUse this screen to create a remote port mirroring (RMirror) VLA

Table of ContentsGS3700/XGS3700 Series User’s Guide1437.5.1 DHCPv4 VLAN Port Configure ...

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide140Click the Source link in the RMirror screen. The following screen opens.Figure 80 Advanced

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide14114.1.4 DestinationUse this screen to specify the RMirror VLAN and configure the monitor por

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide14214.1.5 Connected PortUse this screen to select the RMirror VLAN and specify the port(s) that

Chapter 14 MirroringGS3700/XGS3700 Series User’s Guide143The following table describes the labels in this screen. Table 58 Advanced Application &g

GS3700/XGS3700 Series User’s Guide 144CHAPTER 15Link AggregationThis chapter shows you how to logically aggregate physical links to form one logical

Chapter 15 Link AggregationGS3700/XGS3700 Series User’s Guide145Configure trunk groups or LACP before you connect the Ethernet switch to avoid causin

Chapter 15 Link AggregationGS3700/XGS3700 Series User’s Guide146The following table describes the labels in this screen. Table 61 Advanced Applic

Chapter 15 Link AggregationGS3700/XGS3700 Series User’s Guide14715.4 Link Aggregation Setting Click Advanced Application > Link Aggregation >

Chapter 15 Link AggregationGS3700/XGS3700 Series User’s Guide148Criteria Select the outgoing traffic distribution type. Packets from the same source

Chapter 15 Link AggregationGS3700/XGS3700 Series User’s Guide14915.5 Link Aggregation Control Protocol Click in the Advanced Application > Link

Table of ContentsGS3700/XGS3700 Series User’s Guide1541.8.3 GUI-based FTP Clients ...

Chapter 15 Link AggregationGS3700/XGS3700 Series User’s Guide15015.6 Static Trunking ExampleThis example shows you how to create a static port trunk

Chapter 15 Link AggregationGS3700/XGS3700 Series User’s Guide1512 Configure static trunking - Click Advanced Application > Link Aggregation > L

GS3700/XGS3700 Series User’s Guide 152CHAPTER 16Port AuthenticationThis chapter describes the IEEE 802.1x and MAC authentication methods.16.1 Port

Chapter 16 Port AuthenticationGS3700/XGS3700 Series User’s Guide153provides the login credentials, the Switch sends an authentication request to a RA

Chapter 16 Port AuthenticationGS3700/XGS3700 Series User’s Guide154on the source MAC address of the client connecting to a port on the Switch along wi

Chapter 16 Port AuthenticationGS3700/XGS3700 Series User’s Guide15516.2.1 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x s

Chapter 16 Port AuthenticationGS3700/XGS3700 Series User’s Guide15616.2.2 Guest VLAN When 802.1x port authentication is enabled on the Switch and its

Chapter 16 Port AuthenticationGS3700/XGS3700 Series User’s Guide157Use this screen to enable and assign a guest VLAN to a port. In the Port Authentic

Chapter 16 Port AuthenticationGS3700/XGS3700 Series User’s Guide15816.2.3 Activate MAC Authentication Use this screen to activate MAC authentication.

Chapter 16 Port AuthenticationGS3700/XGS3700 Series User’s Guide159The following table describes the labels in this screen. Table 66 Advanced Appli

Table of ContentsGS3700/XGS3700 Series User’s Guide1645.3 Clustering Management Configuration ...

GS3700/XGS3700 Series User’s Guide 160CHAPTER 17Port SecurityThis chapter shows you how to set up port security.17.1 About Port SecurityPort securi

Chapter 17 Port SecurityGS3700/XGS3700 Series User’s Guide161The following table describes the labels in this screen. Table 67 Advanced Application

Chapter 17 Port SecurityGS3700/XGS3700 Series User’s Guide16217.3 VLAN MAC Address Limit Use this screen to set the MAC address learning limit on per

GS3700/XGS3700 Series User’s Guide 163CHAPTER 18ClassifierThis chapter introduces and shows you how to configure the packet classifier on the Switch

Chapter 18 ClassifierGS3700/XGS3700 Series User’s Guide164Click Advanced Application > Classifier in the navigation panel to display the configurat

Chapter 18 ClassifierGS3700/XGS3700 Series User’s Guide165Packet FormatSpecify the format of the packet. Choices are All, 802.3 tagged, 802.3 untagge

Chapter 18 ClassifierGS3700/XGS3700 Series User’s Guide16618.3 Viewing and Editing Classifier ConfigurationTo view a summary of the classifier config

Chapter 18 ClassifierGS3700/XGS3700 Series User’s Guide167The following table shows some other common Ethernet types and the corresponding protocol n

Chapter 18 ClassifierGS3700/XGS3700 Series User’s Guide16818.4 Classifier ExampleThe following screen shows an example of configuring a classifier th

GS3700/XGS3700 Series User’s Guide 169CHAPTER 19 Policy RuleThis chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A clas

Table of ContentsGS3700/XGS3700 Series User’s Guide17Appendix A Common Services...

Chapter 19 Policy RuleGS3700/XGS3700 Series User’s Guide170Click Advanced Application > Policy Rule in the navigation panel to display the screen a

Chapter 19 Policy RuleGS3700/XGS3700 Series User’s Guide171Classifier(s) This field displays the active classifier(s) you configure in the Classifier

Chapter 19 Policy RuleGS3700/XGS3700 Series User’s Guide17219.3 Viewing and Editing Policy ConfigurationTo view a summary of the classifier configura

Chapter 19 Policy RuleGS3700/XGS3700 Series User’s Guide17319.4 Policy ExampleThe figure below shows an example Policy screen where you configure a

GS3700/XGS3700 Series User’s Guide 174CHAPTER 20Queuing MethodThis chapter introduces the queuing methods supported.20.1 Queuing Method Overview Qu

Chapter 20 Queuing MethodGS3700/XGS3700 Series User’s Guide17520.1.3 Weighted Round Robin Scheduling (WRR) Round Robin Scheduling services queues on

Chapter 20 Queuing MethodGS3700/XGS3700 Series User’s Guide176The following table describes the labels in this screen. Table 75 Advanced Applicatio

GS3700/XGS3700 Series User’s Guide 177CHAPTER 21VLAN StackingThis chapter shows you how to configure VLAN stacking on your Switch. See the chapter o

Chapter 21 VLAN StackingGS3700/XGS3700 Series User’s Guide178adding tag 37 to distinguish customer A and tag 48 to distinguish customer B at edge devi

Chapter 21 VLAN StackingGS3700/XGS3700 Series User’s Guide17921.3 VLAN Tag FormatA VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q)

Table of ContentsGS3700/XGS3700 Series User’s Guide18

Chapter 21 VLAN StackingGS3700/XGS3700 Series User’s Guide18021.4 Configuring VLAN StackingClick Advanced Application > VLAN Stacking to display t

Chapter 21 VLAN StackingGS3700/XGS3700 Series User’s Guide18121.4.1 Port-based Q-in-QPort-based Q-in-Q lets the Switch treat all frames received on

Chapter 21 VLAN StackingGS3700/XGS3700 Series User’s Guide18221.4.2 Selective Q-in-Q Selective Q-in-Q is VLAN-based. It allows the Switch to add diff

Chapter 21 VLAN StackingGS3700/XGS3700 Series User’s Guide183Active This shows whether this rule is activated or not.Name This is the descriptive nam

GS3700/XGS3700 Series User’s Guide 184CHAPTER 22MulticastThis chapter shows you how to configure various multicast features. 22.1 Multicast Overvie

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide18522.1.3 IGMP Snooping The Switch can passively snoop on IGMP packets transferred between IP

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide186one query from a router (X) or MLD Done or Report message from any upstream port, it will be

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide187The following table describes the labels in this screen. 22.3 IPv4 Multicast Status Click A

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide18822.3.1 IGMP Snooping Click the IGMP Snooping link in the Advanced Application > Multicast

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide189IGMP Filtering Select Active to enable IGMP filtering to control which IGMP groups a subscri

19PART IUser’s Guide

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide190Throttling IGMP throttling controls how the Switch deals with the IGMP reports when the maxi

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide19122.3.2 IGMP Snooping VLAN Click Advanced Application > Multicast > IPv4 Multicast in

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide19222.3.3 IGMP Filtering Profile An IGMP filtering profile specifies a range of multicast group

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide193The following table describes the labels in this screen. 22.4 IPv6 Multicast Status Click A

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide19422.4.1 MLD Snooping-proxy Click the MLD Snooping-proxy link in the Advanced Application >

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide19522.4.2 MLD Snooping-proxy VLAN Click the MLD Snooping-proxy link and then the VLAN link in

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide196Robustness Variable Enter the number of queries. A multicast address entry (learned only on a

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide19722.4.3 MLD Snooping-proxy VLAN Port Role Setting Click the Port Role Setting link in the Ad

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide19822.4.4 MLD Snooping-proxy Filtering Use this screen to configure the Switch’s MLD filtering

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide199screen to display the screen as shown. See Section 22.1 on page 184 for more information on

GS3700/XGS3700 Series User’s Guide2IMPORTANT!READ CAREFULLY BEFORE USE.KEEP THIS GUIDE FOR FUTURE REFERENCE.Note: This guide is a reference for a seri

20

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide20022.4.5 MLD Snooping-proxy Filtering Profile Use this screen to create an MLD filtering profi

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide20122.5 MVR Overview Multicast VLAN Registration (MVR) is designed for applications (such as M

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide202update the multicast forwarding table to forward or not forward multicast traffic to the rece

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide203Note: Your Switch automatically creates a static VLAN (with the same VID) when you create a

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide20422.6.1 MVR Group Configuration All source ports and receiver ports belonging to a multicast

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide205Note: A port can belong to more than one multicast VLAN. However, IP multicast group address

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide20622.6.2 MVR Configuration ExampleThe following figure shows a network example where ports 1,

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide207To configure the MVR settings on the Switch, create a multicast VLAN in the MVR screen and s

Chapter 22 MulticastGS3700/XGS3700 Series User’s Guide208To set the Switch to forward the multicast group traffic to the subscribers, configure multic

GS3700/XGS3700 Series User’s Guide 209CHAPTER 23AAAThis chapter describes how to configure authentication, authorization and accounting settings on

GS3700/XGS3700 Series User’s Guide 21CHAPTER 1Getting to Know Your SwitchThis chapter introduces the main features and applications of the Switch.1.

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide21023.1.2 RADIUS and TACACS+ RADIUS and TACACS+ are security protocols used to authenticate users by

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide211authentication and accounting features on the Switch. Click on the RADIUS Server Setup link in the

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide212Delete Check this box if you want to remove an existing RADIUS server entry from the Switch. This e

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide21323.2.2 TACACS+ Server Setup Use this screen to configure your TACACS+ server settings. See Sec

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide214TCP Port The default port of a TACACS+ server for authentication is 49. You need not change this va

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide21523.2.3 AAA SetupUse this screen to configure authentication, authorization and accounting setting

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide216Login These fields specify which database the Switch should use (first, second and third) to authen

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide21723.2.4 Vendor Specific AttributeRFC 2865 standard specifies a method for sending vendor-specific

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide218The following table describes the VSAs supported on the Switch. Note that these attributes only wor

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide219Refer to RFC 2865 for more information about RADIUS attributes used for authentication. Refer to R

Chapter 1 Getting to Know Your SwitchGS3700/XGS3700 Series User’s Guide22the Switch. You can provide a super-fast uplink connection by using the optio

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide22023.3.2.1 Attributes Used for Accounting System EventsNAS-IP-AddressNAS-IdentifierAcct-Status-TypeA

Chapter 23 AAAGS3700/XGS3700 Series User’s Guide22123.3.2.3 Attributes Used for Accounting IEEE 802.1x Events The attributes are listed in the follo

GS3700/XGS3700 Series User’s Guide 222CHAPTER 24IP Source GuardUse IP source guard to filter unauthorized DHCP and ARP packets in your network.24.1

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide223Trusted ports are connected to DHCP servers or other switches. The Switch discards DHC

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide22424.1.1.3 DHCP Relay Option 82 InformationThe Switch can add information to DHCP reques

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide225• It pretends to be computer A and responds to computer B.• It pretends to be computer

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide22624.2 IP Source GuardUse this screen to look at the current bindings for DHCP snooping

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide227ID as an existing static binding, the new static binding replaces the original one. To

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide228VLAN Enter the source VLAN ID in the binding.Port Specify the port(s) in the binding. I

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide22924.4 DHCP SnoopingUse this screen to look at various statistics about the DHCP snoopi

Chapter 1 Getting to Know Your SwitchGS3700/XGS3700 Series User’s Guide231.1.3 Gigabit Ethernet to the Desktop The Switch is an ideal solution for s

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide230Write delay timer This field displays how long (in seconds) the Switch tries to complet

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide23124.5 DHCP Snooping ConfigureUse this screen to enable DHCP snooping on the Switch (no

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide232still available after a restart. To open this screen, click Advanced Application > I

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide23324.5.1 DHCP Snooping Port ConfigureUse this screen to specify whether ports are trust

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide234The following table describes the labels in this screen.24.5.2 DHCP Snooping VLAN Conf

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide235The following table describes the labels in this screen.24.5.3 DHCP Snooping VLAN Por

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide236The following table describes the labels in this screen.24.6 ARP Inspection StatusUse

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide237and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide23824.6.1 ARP Inspection VLAN StatusUse this screen to look at various statistics about A

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide23924.6.2 ARP Inspection Log StatusUse this screen to look at log messages that were gen

Chapter 1 Getting to Know Your SwitchGS3700/XGS3700 Series User’s Guide24Shared resources such as a server can be used by all ports in the same VLAN a

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide24024.7 ARP Inspection ConfigureUse this screen to enable ARP inspection on the Switch. Y

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide24124.7.1 ARP Inspection Port ConfigureUse this screen to specify whether ports are trus

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide242The following table describes the labels in this screen.24.7.2 ARP Inspection VLAN Con

Chapter 24 IP Source GuardGS3700/XGS3700 Series User’s Guide243The following table describes the labels in this screen.Table 116 IP Source Guard &g

GS3700/XGS3700 Series User’s Guide 244CHAPTER 25Loop GuardThis chapter shows you how to configure the Switch to guard against loops on the edge of y

Chapter 25 Loop GuardGS3700/XGS3700 Series User’s Guide245The following figure shows port N on switch A connected to switch B. Switch B is in loop st

Chapter 25 Loop GuardGS3700/XGS3700 Series User’s Guide246Note: After resolving the loop problem on your network you can re-activate the disabled port

Chapter 25 Loop GuardGS3700/XGS3700 Series User’s Guide247Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses th

GS3700/XGS3700 Series User’s Guide 248CHAPTER 26VLAN MappingThis chapter shows you how to configure VLAN mapping on the Switch.26.1 VLAN Mapping Ov

Chapter 26 VLAN MappingGS3700/XGS3700 Series User’s Guide24926.2 Enabling VLAN MappingClick Advanced Application and then VLAN Mapping in the naviga

Chapter 1 Getting to Know Your SwitchGS3700/XGS3700 Series User’s Guide25• SNMP. The device can be monitored and/or managed by an SNMP manager. See S

Chapter 26 VLAN MappingGS3700/XGS3700 Series User’s Guide25026.3 Configuring VLAN MappingClick the VLAN Mapping Configure link in the VLAN Mapping sc

Chapter 26 VLAN MappingGS3700/XGS3700 Series User’s Guide251Delete Check the rule(s) that you want to remove in the Delete column and then click the

GS3700/XGS3700 Series User’s Guide 252CHAPTER 27Layer 2 Protocol TunnelingThis chapter shows you how to configure layer-2 protocol tunneling on the

Chapter 27 Layer 2 Protocol TunnelingGS3700/XGS3700 Series User’s Guide253To emulate a point-to-point topology between two customer switches at diffe

Chapter 27 Layer 2 Protocol TunnelingGS3700/XGS3700 Series User’s Guide25427.2 Configuring Layer 2 Protocol Tunneling Click Advanced Application >

Chapter 27 Layer 2 Protocol TunnelingGS3700/XGS3700 Series User’s Guide255STP Select this option to have the Switch tunnel STP (Spanning Tree Protoco

GS3700/XGS3700 Series User’s Guide 256CHAPTER 28sFlowThis chapter shows you how to configure sFlow to have the Switch monitor traffic in a network a

Chapter 28 sFlowGS3700/XGS3700 Series User’s Guide25728.2 sFlow Port ConfigurationClick Advanced Application > sFlow in the navigation panel to d

Chapter 28 sFlowGS3700/XGS3700 Series User’s Guide25828.2.1 sFlow Collector ConfigurationClick the Collector link in the sFlow screen to display the

Chapter 28 sFlowGS3700/XGS3700 Series User’s Guide259Cancel Click Cancel to reset the fields to your previous configuration.Clear Click Clear to rese

Chapter 1 Getting to Know Your SwitchGS3700/XGS3700 Series User’s Guide26

GS3700/XGS3700 Series User’s Guide 260CHAPTER 29PPPoEThis chapter describes how the Switch gives a PPPoE termination server additional information t

Chapter 29 PPPoEGS3700/XGS3700 Series User’s Guide261The 1 in the first field identifies this as an Agent Circuit ID sub-option and 2 identifies this

Chapter 29 PPPoEGS3700/XGS3700 Series User’s Guide262Trusted ports are connected to PPPoE servers. • If a PADO (PPPoE Active Discovery Offer), PADS (P

Chapter 29 PPPoEGS3700/XGS3700 Series User’s Guide263Click Advanced Application > PPPoE > Intermediate Agent in the navigation panel to display

Chapter 29 PPPoEGS3700/XGS3700 Series User’s Guide26429.3.1 PPPoE IA Per-Port Use this screen to specify whether individual ports are trusted or untr

Chapter 29 PPPoEGS3700/XGS3700 Series User’s Guide26529.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPPoE IA settings that apply to

Chapter 29 PPPoEGS3700/XGS3700 Series User’s Guide266Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. Fi

Chapter 29 PPPoEGS3700/XGS3700 Series User’s Guide26729.3.3 PPPoE IA for VLAN Use this screen to set whether the PPPoE Intermediate Agent is enabled

GS3700/XGS3700 Series User’s Guide 268CHAPTER 30Error DisableThis chapter shows you how to configure the rate limit for control packets on a port, a

Chapter 30 Error DisableGS3700/XGS3700 Series User’s Guide26930.3 The Error Disable ScreenUse this screen to configure error disable related setting

GS3700/XGS3700 Series User’s Guide 27CHAPTER 2Hardware Installation and ConnectionThis chapter shows you how to install and connect the Switch. 2.1

Chapter 30 Error DisableGS3700/XGS3700 Series User’s Guide270The following table describes the labels in this screen. 30.5 Error-Disable Detect Confi

Chapter 30 Error DisableGS3700/XGS3700 Series User’s Guide27130.6 Error-Disable Recovery Configuration Use this screen to configure the Switch to au

Chapter 30 Error DisableGS3700/XGS3700 Series User’s Guide272Timer Status Select this option to allow the Switch to wait for the specified time interv

GS3700/XGS3700 Series User’s Guide 273CHAPTER 31MAC PinningThis chapter shows you how to configure MAC pinning on the Switch.31.1 MAC Pinning Overv

Chapter 31 MAC PinningGS3700/XGS3700 Series User’s Guide27431.2 MAC Pinning ConfigurationUse this screen to enable MAC pinning on the Switch and on s

GS3700/XGS3700 Series User’s Guide 275CHAPTER 32Private VLAN32.1 Private VLAN Overview Use private VLAN if you want you to block traffic between po

Chapter 32 Private VLANGS3700/XGS3700 Series User’s Guide276Tagged Private VLANs can span switches but trunking ports must be VLAN-trunking ports - se

Chapter 32 Private VLANGS3700/XGS3700 Series User’s Guide277Note: Isolation in VLAN > VLAN Port Setting (see Section 7.5.4 on page 94) has a highe

Chapter 32 Private VLANGS3700/XGS3700 Series User’s Guide278The following table describes the labels in this screen. Table 138 Advanced Application

GS3700/XGS3700 Series User’s Guide 279CHAPTER 33Green EthernetThis chapter shows you how to configure the Switch to reduce the power consumed by swi

Chapter 2 Hardware Installation and ConnectionGS3700/XGS3700 Series User’s Guide282.2 Mounting the Switch on a Rack This section lists the rack mount

Chapter 33 Green EthernetGS3700/XGS3700 Series User’s Guide280Note: EEE, Auto Power Down and Short Reach are not supported on an uplink port.Figure 17

GS3700/XGS3700 Series User’s Guide 281CHAPTER 34Static RouteThis chapter shows you how to configure static routes.34.1 Static Routing Overview The

Chapter 34 Static RouteGS3700/XGS3700 Series User’s Guide282rules. Click the link next to IPv6 Static Route to open a screen where you can create IPv6

Chapter 34 Static RouteGS3700/XGS3700 Series User’s Guide283Metric The metric represents the “cost” of transmission for routing purposes. IP routing

Chapter 34 Static RouteGS3700/XGS3700 Series User’s Guide28434.4 Configuring IPv6 Static Routing Click the link next to IPv6 Static Route in the IP

Chapter 34 Static RouteGS3700/XGS3700 Series User’s Guide285Delete Click Delete to remove the selected entry from the summary table.Cancel Click Canc

GS3700/XGS3700 Series User’s Guide 286CHAPTER 35Policy RoutingThis chapter shows you how to configure policy routing rules.35.1 Policy Route Overvi

Chapter 35 Policy RoutingGS3700/XGS3700 Series User’s Guide28735.2 Configuring Policy Routing Profile Click IP Application > Policy Routing in t

Chapter 35 Policy RoutingGS3700/XGS3700 Series User’s Guide288matching classifier and the action to take when a packet meets the criteria in the class

Chapter 35 Policy RoutingGS3700/XGS3700 Series User’s Guide289Action Enter the IP address of the gateway. The gateway is an immediate neighbor of you

Chapter 2 Hardware Installation and ConnectionGS3700/XGS3700 Series User’s Guide297 Slide the rear bracket along the rail and set the bracket in plac

GS3700/XGS3700 Series User’s Guide 290CHAPTER 36Differentiated ServicesThis chapter shows you how to configure Differentiated Services (DiffServ) on

Chapter 36 Differentiated ServicesGS3700/XGS3700 Series User’s Guide291various traffic policies to the traffic flows. For example, one traffic policy

Chapter 36 Differentiated ServicesGS3700/XGS3700 Series User’s Guide29236.2.1 TRTCM - Color-blind ModeAll packets are evaluated against the PIR. If a

Chapter 36 Differentiated ServicesGS3700/XGS3700 Series User’s Guide293Click IP Application > DiffServ in the navigation panel to display the scre

Chapter 36 Differentiated ServicesGS3700/XGS3700 Series User’s Guide294Note: You cannot enable both TRTCM and Bandwidth Control at the same time. Figu

Chapter 36 Differentiated ServicesGS3700/XGS3700 Series User’s Guide29536.3.2 DSCP Profile Use this screen to create DSCP profiles. To open this scr

Chapter 36 Differentiated ServicesGS3700/XGS3700 Series User’s Guide29636.4 DSCP-to-IEEE 802.1p Priority Settings You can configure the DSCP to

Chapter 36 Differentiated ServicesGS3700/XGS3700 Series User’s Guide297The following table describes the labels in this screen. Table 148 IP Applic

GS3700/XGS3700 Series User’s Guide 298CHAPTER 37DHCPThis chapter shows you how to configure the DHCP feature. 37.1 DHCP Overview DHCP (Dynamic Host

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide299and create option 82 profiles. Click the link next to DHCPv6 to open a screen where you can confi

Contents OverviewGS3700/XGS3700 Series User’s Guide3Contents OverviewUser’s Guide ...

Chapter 2 Hardware Installation and ConnectionGS3700/XGS3700 Series User’s Guide306 Repeat steps 4 and 5 to attach the other rear mounting bracket on

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide30037.3.1 DHCPv4 Server Status Detail Click IP Application > DHCP > DHCPv4 in the navigation p

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide301information (such as the IP address and subnet mask) between a DHCP client and a DHCP server. Onc

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide30237.4.2 DHCPv4 Option 82 ProfileUse this screen to create DHCPv4 option 82 profiles. Click IP Appl

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide30337.4.3 Configuring DHCPv4 Global RelayUse this screen to configure global DHCPv4 relay. Click IP

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide30437.4.4 DHCPv4 Global Relay Port Configure Use this screen to apply a different DHCP option 82 pro

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide30537.4.5 Global DHCP Relay Configuration ExampleThe follow figure shows a network example where th

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide306together with the DHCP requests to the DHCP server. This allows the DHCP server to assign the appr

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide307Note: You must set up a management IP address for each VLAN that you want to configure DHCP setti

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide30837.5.1 DHCPv4 VLAN Port Configure Use this screen to apply a different DHCP option 82 profile to

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide309The following table describes the labels in this screen.37.5.2 Example: DHCP Relay for Two VLANs

GS3700/XGS3700 Series User’s Guide 31CHAPTER 3Hardware OverviewThis chapter describes the front panel and rear panel of the Switch and shows you how

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide310the academic buildings (VLAN 2) are sent to the other DHCP server with an IP address of 172.16.10.

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide31137.6 DHCPv6 RelayA DHCPv6 relay agent is on the same network as the DHCPv6 clients and helps for

Chapter 37 DHCPGS3700/XGS3700 Series User’s Guide312Cancel Click Cancel to reset the fields to their last saved values. Clear Click Clear to reset the

GS3700/XGS3700 Series User’s Guide 313CHAPTER 38VRRPThis chapter shows you how to configure and monitor the Virtual Router Redundancy Protocol (VRRP

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide31438.2 VRRP StatusClick IP Application > VRRP in the navigation panel to display the VRRP Status

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide315Click IP Application, VRRP and click the Configuration link to display the VRRP Configuration scr

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide31638.3.2 VRRP Parameters This section describes the VRRP parameters. 38.3.2.1 Advertisement Interv

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide31738.3.3 Configuring VRRP ParametersAfter you set up an IP interface, configure the VRRP parameter

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide31838.3.4 Viewing VRRP SummaryView the VRRP configuration summary at the bottom of the screen. Figur

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide31938.4.1 One Subnet Network Example The figure below shows a simple VRRP network with only one vir

Chapter 3 Hardware OverviewGS3700/XGS3700 Series User’s Guide32Figure 7 Front Panel: XGS3700 Series The following table describes the ports. 3.1.1

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide320After configuring and saving the VRRP configuration, the VRRP Status screens for both switches are

Chapter 38 VRRPGS3700/XGS3700 Series User’s Guide321You need to configure the VRRP Configuration screen for virtual router VR2 on each switch, while

GS3700/XGS3700 Series User’s Guide 322CHAPTER 39Load Sharing39.1 Load Sharing Overview The Switch learns the next-hop(s) using ARP and determines r

Chapter 39 Load SharingGS3700/XGS3700 Series User’s Guide323The following table describes the labels in this screen. Table 164 IP Application >

GS3700/XGS3700 Series User’s Guide 324CHAPTER 40ARP Setup40.1 ARP Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet

Chapter 40 ARP SetupGS3700/XGS3700 Series User’s Guide325ICMP reply from host B, it sends out an ARP request to get host A’s MAC address and updates

Chapter 40 ARP SetupGS3700/XGS3700 Series User’s Guide326Therefore in the following example, the Switch can learn host A’s MAC address from the ARP re

Chapter 40 ARP SetupGS3700/XGS3700 Series User’s Guide32740.2.1 ARP Learning Use this screen to configure each port’s ARP learning mode. Click the l

Chapter 40 ARP SetupGS3700/XGS3700 Series User’s Guide32840.2.2 Static ARPUse this screen to create static ARP entries that will display in the Manag

Chapter 40 ARP SetupGS3700/XGS3700 Series User’s Guide329Index This field displays the index number of an entry. Click an index number to change the

Chapter 3 Hardware OverviewGS3700/XGS3700 Series User’s Guide333.1.1.1 Default Ethernet SettingsThe factory default negotiation settings for the Eth

Chapter 40 ARP SetupGS3700/XGS3700 Series User’s Guide330

GS3700/XGS3700 Series User’s Guide 331CHAPTER 41MaintenanceThis chapter explains how to configure the maintenance screens that let you maintain the

Chapter 41 MaintenanceGS3700/XGS3700 Series User’s Guide33241.2 Load Factory Default Follow the steps below to reset the Switch back to the factory d

Chapter 41 MaintenanceGS3700/XGS3700 Series User’s Guide3331 In the Maintenance screen, click the Config 1 button next to Reboot System to reboot and

Chapter 41 MaintenanceGS3700/XGS3700 Series User’s Guide33441.6 Restore a Configuration FileRestore a previously saved configuration from your comput

Chapter 41 MaintenanceGS3700/XGS3700 Series User’s Guide33541.8 FTP Command LineThis section shows some examples of uploading to or downloading file

Chapter 41 MaintenanceGS3700/XGS3700 Series User’s Guide336Be sure to upload the correct model firmware as uploading the wrong model firmware may dama

GS3700/XGS3700 Series User’s Guide 337CHAPTER 42Access ControlThis chapter describes how to control access to the Switch.42.1 Access Control Overvi

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide338SNMP version 3. The next figure illustrates an SNMP management operation. SNMP is only a

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide33942.3.2 Supported MIBs MIBs let administrators collect statistics and monitor status a

Chapter 3 Hardware OverviewGS3700/XGS3700 Series User’s Guide343 The Switch automatically detects the installed transceiver. Check the LEDs to verify

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide340 reset zySysMgmtUncontrolledSystemReset1.3.6.1.4.1.890.1.15.3.49.2.1 This trap is sent w

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide341 transceiver-ddmzyTransceiverDdmiTemperatureOutOfRange1.3.6.1.4.1.890.1.15.3.84.3.1 Thi

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide342 Table 175 SNMP IP Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTIONping pingProbeFaile

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide34342.3.4 Configuring SNMP From the Access Control screen, display the SNMP screen. Y

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide34442.3.5 Configuring SNMP Trap Group From the SNMP screen, click Trap Group to view the

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide34542.3.6 Enabling/Disabling Sending of SNMP Traps on a PortFrom the SNMP > Trap Group

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide34642.3.7 Configuring SNMP User From the SNMP screen, click User to view the screen as s

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide347Security Level Select whether you want to implement authentication and/or encryption fo

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide34842.4 Setting Up Login Accounts Up to five people (one administrator and four non-admin

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide34942.5 SSH OverviewUnlike Telnet or FTP, which transmit data in clear text, SSH (Secure

Chapter 3 Hardware OverviewGS3700/XGS3700 Series User’s Guide35• VT100 terminal emulation• 9600 bps• No parity, 8 data bits, 1 stop bit• No flow cont

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide35042.6 How SSH worksThe following table summarizes how a secure connection is established

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide35142.7 SSH Implementation on the SwitchYour Switch supports SSH version 2 using RSA auth

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide352Note: If you disable HTTP in the Service Access Control screen, then the Switch blocks a

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide35342.9.1.2 Internet Explorer 7 or 8 When you attempt to access the Switch HTTPS server,

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide354Click Install Certificate... and follow the on-screen instructions to install the certif

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide35542.9.2 Mozilla Firefox Warning MessagesWhen you attempt to access the Switch HTTPS ser

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide356Confirm the HTTPS server URL matches. Click Confirm Security Exception to proceed to the

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide357Mozilla Firefox) or next to the address bar (in Internet Explorer 7 or 8) denotes a sec

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide358the Remote Management screen (discussed later). Click Access Control to go back to the m

Chapter 42 Access ControlGS3700/XGS3700 Series User’s Guide359You can specify a group of one or more “trusted computers” from which an administrator

Chapter 3 Hardware OverviewGS3700/XGS3700 Series User’s Guide36Disconnecting the PowerThe power input connectors can be disconnected from the power so

GS3700/XGS3700 Series User’s Guide 360CHAPTER 43DiagnosticThis chapter explains the Diagnostic screen.43.1 Diagnostic Click Management > Diagnos

Chapter 43 DiagnosticGS3700/XGS3700 Series User’s Guide361IPv4 Select this option if you want to ping an IPv4 address, and select which traffic flow

GS3700/XGS3700 Series User’s Guide 362CHAPTER 44SyslogThis chapter explains the syslog screens.44.1 Syslog Overview The syslog protocol allows devi

Chapter 44 SyslogGS3700/XGS3700 Series User’s Guide36344.2 Syslog Setup Click Management > Syslog in the navigation panel to display this screen.

Chapter 44 SyslogGS3700/XGS3700 Series User’s Guide36444.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to open the foll

GS3700/XGS3700 Series User’s Guide 365CHAPTER 45Cluster ManagementThis chapter introduces cluster management.45.1 Clustering Management Status Over

Chapter 45 Cluster ManagementGS3700/XGS3700 Series User’s Guide366In the following example, switch A in the basement is the cluster manager and the ot

Chapter 45 Cluster ManagementGS3700/XGS3700 Series User’s Guide367The following table describes the labels in this screen. 45.2.1 Cluster Member Swi

Chapter 45 Cluster ManagementGS3700/XGS3700 Series User’s Guide368configurator home page. This cluster member web configurator home page and the home

Chapter 45 Cluster ManagementGS3700/XGS3700 Series User’s Guide369The following table explains some of the FTP parameters.45.3 Clustering Management

Chapter 3 Hardware OverviewGS3700/XGS3700 Series User’s Guide371-24 or 1-48 LNK/ACT (Left)Green Blinking The port is receiving or transmitting data a

Chapter 45 Cluster ManagementGS3700/XGS3700 Series User’s Guide370The following table describes the labels in this screen. Table 191 Management >

GS3700/XGS3700 Series User’s Guide 371CHAPTER 46MAC TableThis chapter introduces the MAC Table screen.46.1 MAC Table Overview The MAC Table screen

Chapter 46 MAC TableGS3700/XGS3700 Series User’s Guide37246.2 Viewing the MAC TableClick Management > MAC Table in the navigation panel to display

Chapter 46 MAC TableGS3700/XGS3700 Series User’s Guide373Index This is the incoming frame index number.MAC Address This is the MAC address of the dev

GS3700/XGS3700 Series User’s Guide 374CHAPTER 47IP TableThis chapter introduces the IP table.47.1 IP Table Overview The IP Table screen shows how p

Chapter 47 IP TableGS3700/XGS3700 Series User’s Guide37547.2 Viewing the IP TableClick Management > IP Table in the navigation panel to display t

GS3700/XGS3700 Series User’s Guide 376CHAPTER 48ARP TableThis chapter introduces ARP Table.48.1 ARP Table Overview Address Resolution Protocol (ARP

Chapter 48 ARP TableGS3700/XGS3700 Series User’s Guide37748.2 The ARP Table Screen Click Management > ARP Table in the navigation panel to open

GS3700/XGS3700 Series User’s Guide 378CHAPTER 49Routing TableThis chapter introduces the routing table. 49.1 OverviewThe routing table contains the

GS3700/XGS3700 Series User’s Guide 379CHAPTER 50Path MTU TableThis chapter introduces the IPv6 Path MTU table. 50.1 Path MTU Overview The largest s

Chapter 3 Hardware OverviewGS3700/XGS3700 Series User’s Guide38

GS3700/XGS3700 Series User’s Guide 380CHAPTER 51Configure CloneThis chapter shows you how you can copy the settings of one port onto other ports.51.

Chapter 51 Configure CloneGS3700/XGS3700 Series User’s Guide381The following table describes the labels in this screen. Table 197 Management > C

GS3700/XGS3700 Series User’s Guide 382CHAPTER 52Neighbor TableThis chapter introduces the IPv6 neighbor table. 52.1 IPv6 Neighbor Table Overview An

Chapter 52 Neighbor TableGS3700/XGS3700 Series User’s Guide383Status This field displays whether the neighbor IPv6 interface is reachable. In IPv6, “

Chapter 52 Neighbor TableGS3700/XGS3700 Series User’s Guide384

GS3700/XGS3700 Series User’s Guide 385CHAPTER 53TroubleshootingThis chapter offers some suggestions to solve problems you might encounter. The poten

Chapter 53 TroubleshootingGS3700/XGS3700 Series User’s Guide386One of the LEDs does not behave as expected.1 Make sure you understand the normal behav

Chapter 53 TroubleshootingGS3700/XGS3700 Series User’s Guide387• If you changed the IP address, use the new IP address.• If you changed the IP addres

Chapter 53 TroubleshootingGS3700/XGS3700 Series User’s Guide388I cannot see some of Advanced Application submenus at the bottom of the navigation pane

GS3700/XGS3700 Series User’s Guide 389APPENDIX ACommon ServicesThe following table lists some commonly-used services and their associated protocols

GS3700/XGS3700 Series User’s Guide 39CHAPTER 4The Web ConfiguratorThis section introduces the configuration and functions of the web configurator. 4

Appendix A Common ServicesGS3700/XGS3700 Series User’s Guide390HTTPS TCP 443 HTTPS is a secured http session often used in e-commerce.ICMP User-Define

Appendix A Common ServicesGS3700/XGS3700 Series User’s Guide391SQL-NET TCP 1521 Structured Query Language is an interface to access data on many diff

Appendix A Common ServicesGS3700/XGS3700 Series User’s Guide392

GS3700/XGS3700 Series User’s Guide 393APPENDIX BIPv6OverviewIPv6 (Internet Protocol version 6), is designed to enhance IP address size and features.

Appendix B IPv6GS3700/XGS3700 Series User’s Guide394Global AddressA global address uniquely identifies a device on the Internet. It is similar to a “p

Appendix B IPv6GS3700/XGS3700 Series User’s Guide395Subnet MaskingBoth an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which a

Appendix B IPv6GS3700/XGS3700 Series User’s Guide396combines its interface ID and global and subnet information advertised from the router. This is a

Appendix B IPv6GS3700/XGS3700 Series User’s Guide397such as the system name. The interface-ID option provides slot number, port information and the V

Appendix B IPv6GS3700/XGS3700 Series User’s Guide398determine whether the destination address is on-link and can be reached directly without passing t

Appendix B IPv6GS3700/XGS3700 Series User’s Guide399Example - Enabling IPv6 on Windows XP/2003/VistaBy default, Windows XP and Windows 2003 support I

Contents OverviewGS3700/XGS3700 Series User’s Guide4Differentiated Services ...

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide403 The login screen appears. The default username is admin and associated default pas

Appendix B IPv6GS3700/XGS3700 Series User’s Guide4004 Double click Dibbler - a DHCPv6 client.5 Click Start and then OK.6 Now your computer can obtain

Appendix B IPv6GS3700/XGS3700 Series User’s Guide4014 Click Close to exit the Local Area Connection Status screen.5 Select Start > All Programs &g

Appendix B IPv6GS3700/XGS3700 Series User’s Guide402

GS3700/XGS3700 Series User’s Guide 403APPENDIX CLegal InformationCopyrightCopyright © 2013 by ZyXEL Communications Corporation.The contents of this

Appendix C Legal InformationGS3700/XGS3700 Series User’s Guide404ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this p

Appendix C Legal InformationGS3700/XGS3700 Series User’s Guide405RoHSENGLISH DEUTSCH ESPAÑOL FRANÇAISGreen Product DeclarationRoHS Directive 2011/65/

Appendix C Legal InformationGS3700/XGS3700 Series User’s Guide406

IndexGS3700/XGS3700 Series User’s Guide 407IndexNumbers802.1P priority 65802.3az 279Aaccess controllimitations 337login account 348remote management

IndexGS3700/XGS3700 Series User’s Guide408network example 366setup 369specification 365status 366switch models 365VID 370web configurator 367cluster m

IndexGS3700/XGS3700 Series User’s Guide 409external authentication server 210FFan Module 35fan speed 57FCC interference statement 403file transfer us

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide41The following figure shows the navigating components of a web configurator screen.

IndexGS3700/XGS3700 Series User’s Guide410setup 62IP source guard 222ARP inspection 222, 224DHCP snooping 222static bindings 222IP table 374how it wor

IndexGS3700/XGS3700 Series User’s Guide 411firmware 333restoring configuration 334maintenance 331current configuration 331main screen 331Management I

IndexGS3700/XGS3700 Series User’s Guide412password 45administrator 348Path MTU 379Path MTU Discovery 379PHB (Per-Hop Behavior) 290ping, test connectio

IndexGS3700/XGS3700 Series User’s Guide 413RRADIUS 210advantages 210and authentication 210Network example 209server 210settings 210setup 210Rapid Spa

IndexGS3700/XGS3700 Series User’s Guide414static trunking example 150Static VLAN 92static VLANcontrol 93tagging 93status 51LED 36link aggregation 146p

IndexGS3700/XGS3700 Series User’s Guide 415DHCP snooping 223PPPoE IA 262user profiles 209VVendor Specific Attribute See VSAventilation holes 27VID 63

IndexGS3700/XGS3700 Series User’s Guide416WFQ (Weighted Fair Queuing) 175WRR (Weighted Round Robin Scheduling 175ZZyNOS (ZyXEL Network Operating Syste

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide42In the navigation panel, click a main link to reveal a list of submenu links. The fo

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide43IPv6 This link takes you to a screen where you can enable an IPv6 interface and con

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide44PPPoE This link takes you to screens where you can configure how the Switch gives a

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide454.3.1 Change Your Password After you log in for the first time, it is recommende

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide464 Disable all ports.5 Misconfigure the text configuration file.6 Forget the password

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide476 After a configuration file upload, type atgo to restart the Switch.Figure 16 Re

Chapter 4 The Web ConfiguratorGS3700/XGS3700 Series User’s Guide48

49PART IITechnical Reference

Table of ContentsGS3700/XGS3700 Series User’s Guide5Table of ContentsContents Overview ...

50

GS3700/XGS3700 Series User’s Guide 51CHAPTER 5System Status and Port StatisticsThis chapter describes the system status (web configurator home page)

Chapter 5 System Status and Port StatisticsGS3700/XGS3700 Series User’s Guide52The following table describes the labels in this screen. Table 6 Stat

Chapter 5 System Status and Port StatisticsGS3700/XGS3700 Series User’s Guide535.2.1 Status: Port Details Click a number in the Port column in th

Chapter 5 System Status and Port StatisticsGS3700/XGS3700 Series User’s Guide54RxPkts This field shows the number of received frames on this portError

Chapter 5 System Status and Port StatisticsGS3700/XGS3700 Series User’s Guide55256-511 This field shows the number of packets (including bad packets)

GS3700/XGS3700 Series User’s Guide 56CHAPTER 6Basic SettingThis chapter describes how to configure the Basic Setting screens.6.1 System Information

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide57The following table describes the labels in this screen. Table 8 Basic Setting > Syst

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide586.2 General Setup Use this screen to configure general settings such as the system name

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide596.3 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a physical network t

Table of ContentsGS3700/XGS3700 Series User’s Guide6Chapter 4The Web Configurator ...

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide60resources of another on the same LAN, thus a user will not see the printers and hard disks

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide61MAC Address LearningMAC address learning reduces outgoing traffic broadcasts. For MAC addr

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide626.5 IP Setup Use the IP Setup screen to configure the default gateway device, the defaul

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide63The following table describes the labels in this screen. Table 11 Basic Setting > IP

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide646.6 Port Setup Use this screen to configure Switch port settings. Click Basic Setting >

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide65The following table describes the labels in this screen. Table 12 Basic Setting > Por

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide666.7 PoE Note: The PoE function and the following screens are available for models endin

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide67Note: The PoE devices that supply or receive power and their connected Ethernet cables mus

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide686.7.1 PoE SetupUse this screen to set the priority levels for the Switch in distributing p

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide69Click the PoE Setup link in the Basic Setting > PoE Status screen. The following screen

Table of ContentsGS3700/XGS3700 Series User’s Guide76.9.8 IPv6 Router Discovery Setup ...

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide70Note: If the priority settings for two or more PoE ports are the same and the power budget

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide71Use this screen to set IPv6 interfaces on which you can configure an IPv6 address to acces

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide72Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide736.9.1 IPv6 Interface StatusUse this screen to view a specific IPv6 interface status and d

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide74ICMPv6 Rate Limit Error IntervalThis field displays the time period (in milliseconds) durin

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide756.9.2 IPv6 ConfigurationUse this screen to configure IPv6 settings on the Switch. Click t

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide766.9.3 IPv6 Global SetupUse this screen to configure the global IPv6 settings. Click the li

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide776.9.4 IPv6 Interface SetupUse this screen to turn on or off an IPv6 interface and enable

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide78Use this screen to configure the interface’s link-local address and default gateway. Click

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide796.9.6 IPv6 Global Address SetupUse this screen to configure the interface’s IPv6 global a

Table of ContentsGS3700/XGS3700 Series User’s Guide811.1.2 How STP Works ...

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide806.9.7 IPv6 Neighbor Discovery SetupUse this screen to configure neighbor discovery setting

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide816.9.8 IPv6 Router Discovery SetupUse this screen to configure router discovery settings f

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide826.9.9 IPv6 Prefix SetupUse this screen to configure the Switch’s IPv6 prefix list for each

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide83Valid Lifetime Specify how long (from 0 to 4294967295 seconds) the prefix is valid for on-

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide846.9.10 IPv6 Neighbor SetupUse this screen to create a static IPv6 neighbor entry in the Sw

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide856.9.11 DHCPv6 Client SetupUse this screen to configure the Switch’s DHCP settings when it

Chapter 6 Basic SettingGS3700/XGS3700 Series User’s Guide86Index This is the interface index number. Click on an index number to change the settings.I

GS3700/XGS3700 Series User’s Guide 87CHAPTER 7VLANThe type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen.

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide887.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide897.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN gr

Table of ContentsGS3700/XGS3700 Series User’s Guide9Chapter 16Port Authentication ...

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide907.5.1 VLAN Status See Section 7.1 on page 87 for more information on 802.1Q VLAN. Click Advanced Ap

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide917.5.2 VLAN DetailsUse this screen to view detailed port settings and status of the VLAN group. See

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide927.5.3 Configure a Static VLAN or Private VLAN Use this screen to create 802.1Q VLAN IDs and set

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide93The following table describes the related labels in this screen. Table 31 Advanced Application

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide947.5.4 Configure VLAN Port Settings Use the VLAN Port Setting screen to configure the static VLAN

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide957.5.5 Subnet Based VLANs Subnet based VLANs allow you to group traffic into logical VLANs based on

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide96services). All untagged incoming frames will be classified based on their source IP subnet and prior

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide97The following table describes the labels in this screen. 7.5.6 Protocol Based VLANs Protocol based

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide98Note: Protocol based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.

Chapter 7 VLANGS3700/XGS3700 Series User’s Guide99The following table describes the labels in this screen. 7.5.6.2 Create an IP-based VLAN ExampleTh