ZyXEL Communications GS-3012 - VERSION 3.80 Betriebsanweisung

www.zyxel.comGS-3012F/3012Layer 2+ Gigabit SwitchUser’s GuideVersion 3.807/2007Edition 1DEFAULT LOGINIP Address http://192.168.1.1User Name adminPass

Contents OverviewGS-3012/GS-3012F User’s Guide10Access Control ...

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide100Path cost is the cost of transmitting a frame onto a LAN through that port. The recom

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide10111.1.3 STP Port States STP assigns five port states to eliminate packet looping. A

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide10211.1.5 Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compa

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide103Figure 48 MSTP Network Example 11.1.5.2 MST Region An MST region is a logical gr

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide104Figure 49 MSTIs in Different Regions 11.1.5.4 Common and Internal Spanning Tree (C

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide105Figure 51 Advanced Application > Spanning Tree Protocol This screen differs dep

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide10611.4 Configure Rapid Spanning Tree Protocol Use this screen to configure RSTP sett

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide10711.5 Rapid Spanning Tree Protocol Status Click Advanced Application > Spann

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide108" This screen is only available after you activate RSTP on the Switch. Figure 54

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide10911.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MR

Table of ContentsGS-3012/GS-3012F User’s Guide11Table of ContentsAbout This User's Guide ...

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide11011.7 Multiple Rapid Spanning Tree Protocol Status Click Advanced Application &g

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide111Figure 56 Advanced Application > Spanning Tree Protocol > Status: MRSTP The

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide112Figure 57 Advanced Application > Spanning Tree Protocol > MSTP

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide113The following table describes the labels in this screen. Table 29 Advanced Applica

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide11411.9 Multiple Spanning Tree Protocol Status Click Advanced Application > Spa

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide115" This screen is only available after you activate MSTP on the Switch. Figure 5

Chapter 11 Spanning Tree ProtocolGS-3012/GS-3012F User’s Guide116Forwarding Delay (second)This is the time (in seconds) the root switch will wait befo

GS-3012/GS-3012F User’s Guide117CHAPTER 12 Bandwidth ControlThis chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control

Chapter 12 Bandwidth ControlGS-3012/GS-3012F User’s Guide118Figure 59 Advanced Application > Bandwidth Control The following table describes the

GS-3012/GS-3012F User’s Guide119CHAPTER 13 Broadcast Storm ControlThis chapter introduces and shows you how to configure the broadcast storm control

Table of ContentsGS-3012/GS-3012F User’s Guide12Chapter 3Hardware Overview...

Chapter 13 Broadcast Storm ControlGS-3012/GS-3012F User’s Guide120The following table describes the labels in this screen. Table 32 Advanced Applica

GS-3012/GS-3012F User’s Guide121CHAPTER 14 MirroringThis chapter discusses port mirroring setup screens.14.1 Port Mirroring Setup Port mirroring all

Chapter 14 MirroringGS-3012/GS-3012F User’s Guide122The following table describes the labels in this screen. Table 33 Advanced Application > Mirr

GS-3012/GS-3012F User’s Guide123CHAPTER 15 Link AggregationThis chapter shows you how to logically aggregate physical links to form one logical, high

Chapter 15 Link AggregationGS-3012/GS-3012F User’s Guide124• You must connect all ports point-to-point to the same Ethernet switch and configure the p

Chapter 15 Link AggregationGS-3012/GS-3012F User’s Guide12515.4 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link

Chapter 15 Link AggregationGS-3012/GS-3012F User’s Guide126The following table describes the labels in this screen.15.5 Link Aggregation Control Prot

Chapter 15 Link AggregationGS-3012/GS-3012F User’s Guide127Figure 64 Advanced Application > Link Aggregation > Link Aggregation Setting >

Chapter 15 Link AggregationGS-3012/GS-3012F User’s Guide12815.6 Static Trunking ExampleThis example shows you how to create a static port trunk group

Chapter 15 Link AggregationGS-3012/GS-3012F User’s Guide129Figure 66 Trunking Example - Configuration ScreenYour trunk group 1 (T1) configuration i

Table of ContentsGS-3012/GS-3012F User’s Guide137.4 Introduction to VLANs ...

Chapter 15 Link AggregationGS-3012/GS-3012F User’s Guide130

GS-3012/GS-3012F User’s Guide131CHAPTER 16 Port AuthenticationThis chapter describes the IEEE 802.1x and MAC authentication methods.16.1 Port Authen

Chapter 16 Port AuthenticationGS-3012/GS-3012F User’s Guide132Figure 67 IEEE 802.1x Authentication Process 16.1.2 MAC Authentication MAC authenti

Chapter 16 Port AuthenticationGS-3012/GS-3012F User’s Guide13316.2 Port Authentication Configuration To enable port authentication, first activate t

Chapter 16 Port AuthenticationGS-3012/GS-3012F User’s Guide134The following table describes the labels in this screen. 16.2.2 Activate MAC Authentica

Chapter 16 Port AuthenticationGS-3012/GS-3012F User’s Guide135Figure 71 Advanced Application > Port Authentication > MAC Authentication The f

Chapter 16 Port AuthenticationGS-3012/GS-3012F User’s Guide136* Use this row to make the setting the same for all ports. Use this row first and then m

GS-3012/GS-3012F User’s Guide137CHAPTER 17 Port SecurityThis chapter shows you how to set up port security.17.1 About Port Security Port security al

Chapter 17 Port SecurityGS-3012/GS-3012F User’s Guide138Figure 72 Advanced Application > Port Security The following table describes the labels i

Chapter 17 Port SecurityGS-3012/GS-3012F User’s Guide139Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses thes

Table of ContentsGS-3012/GS-3012F User’s Guide1411.1.3 STP Port States ...

Chapter 17 Port SecurityGS-3012/GS-3012F User’s Guide140

GS-3012/GS-3012F User’s Guide141CHAPTER 18 ClassifierThis chapter introduces and shows you how to configure the packet classifier on the Switch.18.1

Chapter 18 ClassifierGS-3012/GS-3012F User’s Guide142Figure 73 Advanced Application > Classifier The following table describes the labels in this

Chapter 18 ClassifierGS-3012/GS-3012F User’s Guide143Ethernet TypeSelect an Ethernet type or select Other and enter the Ethernet type number in hexad

Chapter 18 ClassifierGS-3012/GS-3012F User’s Guide14418.3 Viewing and Editing Classifier ConfigurationTo view a summary of the classifier configurati

Chapter 18 ClassifierGS-3012/GS-3012F User’s Guide145In the Internet Protocol there is a field, called “Protocol”, to identify the next level protoco

Chapter 18 ClassifierGS-3012/GS-3012F User’s Guide146Figure 75 Classifier: Example

GS-3012/GS-3012F User’s Guide147CHAPTER 19 Policy RuleThis chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A classifier

Chapter 19 Policy RuleGS-3012/GS-3012F User’s Guide14819.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. R

Chapter 19 Policy RuleGS-3012/GS-3012F User’s Guide149The following table describes the labels in this screen. Table 47 Advanced Application > P

Table of ContentsGS-3012/GS-3012F User’s Guide1516.2.2 Activate MAC Authentication ...

Chapter 19 Policy RuleGS-3012/GS-3012F User’s Guide15019.3 Viewing and Editing Policy ConfigurationTo view a summary of the classifier configuration,

Chapter 19 Policy RuleGS-3012/GS-3012F User’s Guide15119.4 Policy ExampleThe figure below shows an example Policy screen where you configure a polic

Chapter 19 Policy RuleGS-3012/GS-3012F User’s Guide152

GS-3012/GS-3012F User’s Guide153CHAPTER 20 Queuing MethodThis chapter introduces the queuing methods supported.20.1 Queuing Method Overview Queuing

Chapter 20 Queuing MethodGS-3012/GS-3012F User’s Guide15420.2 Configuring Queuing Click Advanced Application > Queuing Method in the navigation pa

GS-3012/GS-3012F User’s Guide155CHAPTER 21 MulticastThis chapter shows you how to configure various multicast features. 21.1 Multicast Overview Trad

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide156The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide157Figure 81 Advanced Application > Multicast > Multicast Setting The following table descri

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide15821.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide159Figure 82 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN Th

Table of ContentsGS-3012/GS-3012F User’s Guide1621.6.2 MVR Modes ...

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide16021.5 IGMP Filtering Profile An IGMP filtering profile specifies a range of multicast groups that

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide16121.6 MVR Overview Multicast VLAN Registration (MVR) is designed for applications (such as Media-

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide16221.6.2 MVR ModesYou can set your Switch to operate in either dynamic or compatible mode. In dynam

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide163" Your Switch automatically creates a static VLAN (with the same VID) when you create a mult

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide16421.8 MVR Group Configuration All source ports and receiver ports belonging to a multicast group c

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide165Figure 87 Advanced Application > Multicast > Multicast Setting > MVR: Group Configurat

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide166Figure 88 MVR Configuration Example To configure the MVR settings on the Switch, create a multic

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide167Figure 91 MVR Group Configuration Example

Chapter 21 MulticastGS-3012/GS-3012F User’s Guide168

GS-3012/GS-3012F User’s Guide169CHAPTER 22 Authentication & AccountingThis chapter describes how to configure authentication and accounting setti

Table of ContentsGS-3012/GS-3012F User’s Guide17Chapter 25Two Rate Three Color Marker ...

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide17022.1.2 RADIUS and TACACS+ RADIUS and TACACS+ are security protocols used to

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide171Figure 94 Advanced Application > Auth and Acct > RADIUS Server Setu

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide17222.2.2 TACACS+ Server Setup Use this screen to configure your TACACS+ se

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide173Figure 95 Advanced Application > Auth and Acct > TACACS+ Server Set

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide17422.2.3 Authentication and Accounting Setup Use this screen to configure

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide175Figure 96 Advanced Application > Auth and Acct > Auth and Acct Setu

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide176Login These fields specify which database the Switch should use (first, seco

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide17722.2.4 Vendor Specific AttributeRFC 2865 standard specifies a method for s

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide17822.2.4.1 Tunnel Protocol Attribute You can configure tunnel protocol attrib

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide17922.3.1 Attributes Used for Authentication The following sections list the

Table of ContentsGS-3012/GS-3012F User’s Guide1828.6 Restore a Configuration File ...

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide18022.3.2.2 Attributes Used for Accounting Exec EventsThe attributes are liste

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide181NAS-Port-Type Y Y YAcct-Status-Type Y Y YAcct-Delay-Time Y Y YAcct-Session-

Chapter 22 Authentication & AccountingGS-3012/GS-3012F User’s Guide182

GS-3012/GS-3012F User’s Guide183CHAPTER 23 IP Source GuardUse IP source guard to filter unauthorized DHCP and ARP packets in your network.23.1 IP So

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide184Trusted ports are connected to DHCP servers or other switches. The Switch discards DHCP pack

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide18523.1.1.3 DHCP Relay Option 82 InformationThe Switch can add information to DHCP requests t

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide18623.1.2.1 ARP Inspection and MAC Address FiltersWhen the Switch identifies an unauthorized A

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide18723.2 IP Source GuardUse this screen to look at the current bindings for DHCP snooping and

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide188Figure 100 IP Source Guard Static BindingThe following table describes the labels in this

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide18923.4 DHCP SnoopingUse this screen to look at various statistics about the DHCP snooping da

Table of ContentsGS-3012/GS-3012F User’s Guide1932.1 Cluster Management Status Overview ...

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide190The following table describes the labels in this screen.Table 67 DHCP SnoopingLABEL DESCRI

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide191Successful writes This field displays the number of times the Switch updated the bindings i

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide19223.5 DHCP Snooping ConfigureUse this screen to enable DHCP snooping on the Switch (not on s

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide19323.5.1 DHCP Snooping Port ConfigureUse this screen to specify whether ports are trusted or

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide194Figure 103 DHCP Snooping Port ConfigureThe following table describes the labels in this sc

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide19523.5.2 DHCP Snooping VLAN ConfigureUse this screen to enable DHCP snooping on each VLAN an

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide19623.6 ARP Inspection StatusUse this screen to look at the current list of MAC address filter

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide197Figure 106 ARP Inspection VLAN StatusThe following table describes the labels in this scr

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide198Figure 107 ARP Inspection Log StatusThe following table describes the labels in this scree

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide19923.7 ARP Inspection ConfigureUse this screen to enable ARP inspection on the Switch. You c

Table of ContentsGS-3012/GS-3012F User’s Guide20

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide20023.7.1 ARP Inspection Port ConfigureUse this screen to specify whether ports are trusted or

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide201The following table describes the labels in this screen.23.7.2 ARP Inspection VLAN Configu

Chapter 23 IP Source GuardGS-3012/GS-3012F User’s Guide202The following table describes the labels in this screen.Table 76 ARP Inspection VLAN Confi

GS-3012/GS-3012F User’s Guide203CHAPTER 24 Loop GuardThis chapter shows you how to configure the Switch to guard against loops on the edge of your ne

Chapter 24 Loop GuardGS-3012/GS-3012F User’s Guide204The following figure shows port N on switch A connected to switch B. Switch B is in loop state. W

Chapter 24 Loop GuardGS-3012/GS-3012F User’s Guide205" After resolving the loop problem on your network you can re-activate the disabled port vi

Chapter 24 Loop GuardGS-3012/GS-3012F User’s Guide206Active Select this check box to enable the loop guard feature on this port. The Switch sends prob

GS-3012/GS-3012F User’s Guide207CHAPTER 25 Two Rate Three Color MarkerThis chapter describes how Differentiated Services (DiffServ) fits into a quali

Chapter 25 Two Rate Three Color MarkerGS-3012/GS-3012F User’s Guide20825.1.2 DiffServ Network Example The following figure depicts a DiffServ network

Chapter 25 Two Rate Three Color MarkerGS-3012/GS-3012F User’s Guide209• Green (low loss priority level) packets are forwarded.trTCM operates in one o

List of FiguresGS-3012/GS-3012F User’s Guide21List of FiguresFigure 1 Backbone Application ...

Chapter 25 Two Rate Three Color MarkerGS-3012/GS-3012F User’s Guide21025.2.3 Configuring Two Rate Three Color Marker Settings Use this screen to conf

Chapter 25 Two Rate Three Color MarkerGS-3012/GS-3012F User’s Guide211Active Select this to activate trTCM on the port.Commit RateSpecify the Commit

Chapter 25 Two Rate Three Color MarkerGS-3012/GS-3012F User’s Guide212

213PART IVIP ApplicationStatic Route (215)DHCP (219)

214

GS-3012/GS-3012F User’s Guide215CHAPTER 26 Static RouteThis chapter shows you how to configure static routes.26.1 Static Routing OverviewThe Switch

Chapter 26 Static RouteGS-3012/GS-3012F User’s Guide216Figure 122 IP Application > Static Routing The following table describes the related label

Chapter 26 Static RouteGS-3012/GS-3012F User’s Guide217Gateway AddressThis field displays the IP address of the gateway. The gateway is an immediate

Chapter 26 Static RouteGS-3012/GS-3012F User’s Guide218

GS-3012/GS-3012F User’s Guide219CHAPTER 27 DHCPThis chapter shows you how to configure the DHCP feature. 27.1 DHCP Overview DHCP (Dynamic Host Confi

List of FiguresGS-3012/GS-3012F User’s Guide22Figure 39 Advanced Application > VLAN > VLAN Port Setting ...

Chapter 27 DHCPGS-3012/GS-3012F User’s Guide220Figure 123 IP Application > DHCP Status The following table describes the labels in this screen. 2

Chapter 27 DHCPGS-3012/GS-3012F User’s Guide22127.3.2 Configuring DHCP Global RelayConfigure global DHCP relay in the DHCP Relay screen. Click IP Ap

Chapter 27 DHCPGS-3012/GS-3012F User’s Guide22227.3.3 Global DHCP Relay Configuration ExampleThe follow figure shows a network example where the Swit

Chapter 27 DHCPGS-3012/GS-3012F User’s Guide223" You must set up a management IP address for each VLAN that you want to configure DHCP settings

Chapter 27 DHCPGS-3012/GS-3012F User’s Guide22427.4.1 Example: DHCP Relay for Two VLANsThe following example displays two VLANs (VIDs 1 and 2) for a

225PART VManagementMaintenance (227)Access Control (233)Diagnostic (251)Syslog (253)Cluster Management (257)MAC Table (263)ARP Table (265)Confi

226

GS-3012/GS-3012F User’s Guide227CHAPTER 28 MaintenanceThis chapter explains how to configure the screens that let you maintain the firmware and confi

Chapter 28 MaintenanceGS-3012/GS-3012F User’s Guide22828.2 Load Factory Default Follow the steps below to reset the Switch back to the factory defaul

Chapter 28 MaintenanceGS-3012/GS-3012F User’s Guide22928.4 Reboot SystemReboot System allows you to restart the Switch without physically turning th

List of FiguresGS-3012/GS-3012F User’s Guide23Figure 82 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN ...

Chapter 28 MaintenanceGS-3012/GS-3012F User’s Guide23028.6 Restore a Configuration File Restore a previously saved configuration from your computer

Chapter 28 MaintenanceGS-3012/GS-3012F User’s Guide23128.8 FTP Command LineThis section shows some examples of uploading to or downloading files fro

Chapter 28 MaintenanceGS-3012/GS-3012F User’s Guide2325 Enter bin to set transfer mode to binary.6 Use put to transfer files from the computer to the

GS-3012/GS-3012F User’s Guide233CHAPTER 29 Access ControlThis chapter describes how to control access to the Switch.29.1 Access Control Overview

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide23429.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide23529.3.1 SNMP v3 and SecuritySNMP v3 enhances security for SNMP management. SNMP managers can

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide236temperature TemperatureEventOn GS-3012F: 1.3.6.1.4.1.890.1.5.8.11.25.2.1 GS-3012: 1.3.6.1.4.1

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide237 Table 89 SNMP InterfaceTraps OPTION OBJECT LABEL OBJECT ID DESCRIPTIONlinkup linkUp 1.3.

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide238 accounting RADIUSAccountingNotReachableEventOnGS-3012F: 1.3.6.1.4.1.890.1.5.8.11.25.2.1 GS-3

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide239 29.3.4 Configuring SNMP Click Management > Access Control > SNMP to view the scree

List of FiguresGS-3012/GS-3012F User’s Guide24Figure 125 Global DHCP Relay Network Example ...

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide240Figure 138 Management > Access Control > SNMP The following table describes the label

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide24129.3.5 Configuring SNMP Trap Group Click Management > Access Control > SNMP > Tr

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide242Figure 139 Management > Access Control > SNMP > Trap Group The following table des

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide243• A non-administrator (username is something other than admin) is someone who can view but

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide24429.4 SSH OverviewUnlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell)

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide2452 Encryption MethodOnce the identification is verified, both the client and server must agre

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide246Figure 143 HTTPS Implementation" If you disable HTTP in the Service Access Control scr

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide24729.8.2 Netscape Navigator Warning MessagesWhen you attempt to access the Switch HTTPS serve

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide248Figure 147 Example: Lock Denoting a Secure Connection29.9 Service Port Access Control Se

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide249The following table describes the fields in this screen. 29.10 Remote Management Clic

List of TablesGS-3012/GS-3012F User’s Guide25List of TablesTable 1 Front Panel Connections ...

Chapter 29 Access ControlGS-3012/GS-3012F User’s Guide250Start AddressEnd AddressConfigure the IP address range of trusted computers from which you ca

GS-3012/GS-3012F User’s Guide251CHAPTER 30 DiagnosticThis chapter explains the Diagnostic screen.30.1 Diagnostic Click Management > Diagnostic in

Chapter 30 DiagnosticGS-3012/GS-3012F User’s Guide252

GS-3012/GS-3012F User’s Guide253CHAPTER 31 SyslogThis chapter explains the syslog screens.31.1 Syslog Overview The syslog protocol allows devices to

Chapter 31 SyslogGS-3012/GS-3012F User’s Guide254Figure 151 Management > Syslog The following table describes the labels in this screen. 31.3 Sy

Chapter 31 SyslogGS-3012/GS-3012F User’s Guide255Figure 152 Management > Syslog > Syslog Server Setup The following table describes the label

Chapter 31 SyslogGS-3012/GS-3012F User’s Guide256

GS-3012/GS-3012F User’s Guide257CHAPTER 32 Cluster ManagementThis chapter introduces cluster management.32.1 Cluster Management Status Overview Clus

Chapter 32 Cluster ManagementGS-3012/GS-3012F User’s Guide258Figure 153 Clustering Application Example 32.2 Cluster Management Status Click Manag

Chapter 32 Cluster ManagementGS-3012/GS-3012F User’s Guide259The following table describes the labels in this screen. 32.2.1 Cluster Member Switch M

List of TablesGS-3012/GS-3012F User’s Guide26Table 39 Advanced Application > Port Authentication > 802.1x ...

Chapter 32 Cluster ManagementGS-3012/GS-3012F User’s Guide26032.2.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmw

Chapter 32 Cluster ManagementGS-3012/GS-3012F User’s Guide261Figure 157 Management > Cluster Management > Configuration The following table

Chapter 32 Cluster ManagementGS-3012/GS-3012F User’s Guide262Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

GS-3012/GS-3012F User’s Guide263CHAPTER 33 MAC TableThis chapter introduces the MAC Table screen.33.1 MAC Table Overview The MAC Table screen (a MAC

Chapter 33 MAC TableGS-3012/GS-3012F User’s Guide26433.2 Viewing the MAC Table Click Management > MAC Table in the navigation panel to display

GS-3012/GS-3012F User’s Guide265CHAPTER 34 ARP TableThis chapter introduces ARP Table.34.1 ARP Table Overview Address Resolution Protocol (ARP) is a

Chapter 34 ARP TableGS-3012/GS-3012F User’s Guide266Figure 160 Management > ARP Table The following table describes the labels in this screen. Ta

GS-3012/GS-3012F User’s Guide267CHAPTER 35 Configure CloneThis chapter shows you how you can copy the settings of one port onto other ports.35.1 Con

Chapter 35 Configure CloneGS-3012/GS-3012F User’s Guide268The following table describes the labels in this screen. Table 108 Management > Configu

269PART VITroubleshooting & Product SpecificationsTroubleshooting (271)Product Specifications (275)

List of TablesGS-3012/GS-3012F User’s Guide27Table 82 IP Application > DHCP > Global ...

270

GS-3012/GS-3012F User’s Guide271CHAPTER 36 TroubleshootingThis chapter offers some suggestions to solve problems you might encounter. The potential p

Chapter 36 TroubleshootingGS-3012/GS-3012F User’s Guide27236.2 Switch Access and LoginV I forgot the IP address for the Switch.1 The default IP addre

Chapter 36 TroubleshootingGS-3012/GS-3012F User’s Guide273V I can see the Login screen, but I cannot log in to the Switch.1 Make sure you have entere

Chapter 36 TroubleshootingGS-3012/GS-3012F User’s Guide274

GS-3012/GS-3012F User’s Guide275CHAPTER 37 Product SpecificationsThe following tables summarize the Switch’s hardware and firmware features.Table 109

Chapter 37 Product SpecificationsGS-3012/GS-3012F User’s Guide276Storage Environment Temperature: -25º C ~ 70º C (-13º F ~ 158º F)Humidity: 10 ~ 90%

Chapter 37 Product SpecificationsGS-3012/GS-3012F User’s Guide277Static Route Static routes allow the Switch to communicate with management stations

Chapter 37 Product SpecificationsGS-3012/GS-3012F User’s Guide278 The following list, which is not exhaustive, illustrates the standards supported in

Chapter 37 Product SpecificationsGS-3012/GS-3012F User’s Guide279RFC 1112 IGMP v1RFC 1155 SMIRFC 1157 SNMPv1: Simple Network Management Protocol vers

List of TablesGS-3012/GS-3012F User’s Guide28

Chapter 37 Product SpecificationsGS-3012/GS-3012F User’s Guide280

281PART VII Appendices and IndexIP Addresses and Subnetting (283)Common Services (293)Legal Information (297)Customer Support (301)Index (307)

282

GS-3012/GS-3012F User’s Guide283APPENDIX A IP Addresses and SubnettingThis appendix introduces IP addresses and subnet masks. IP addresses identify i

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide284Figure 162 Network Number and Host IDHow much of the IP address is the network

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide285Subnet masks are expressed in dotted decimal notation just like IP addresses. T

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide286SubnettingYou can use subnetting to divide one network into multiple sub-network

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide287Figure 164 Subnetting Example: After SubnettingIn a 25-bit subnet the host ID

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide288Example: Eight SubnetsSimilarly, use a 27-bit mask to create eight subnets (000,

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide289Subnet PlanningThe following table is a summary for subnet planning on a networ

29PART IIntroduction and HardwareGetting to Know Your Switch (31)Hardware Installation and Connection (37)Hardware Overview (41)

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide290Configuring IP AddressesWhere you obtain your network number depends on your par

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide291IP Address ConflictsEach device on a network must have a unique IP address. Dev

Appendix A IP Addresses and SubnettingGS-3012/GS-3012F User’s Guide292Conflicting Computer and Router IP Addresses ExampleMore than one device can not

GS-3012/GS-3012F User’s Guide293APPENDIX B Common ServicesThe following table lists some commonly-used services and their associated protocols and po

Appendix B Common ServicesGS-3012/GS-3012F User’s Guide294FTP TCPTCP2021File Transfer Program, a program to enable fast transfer of files, including l

Appendix B Common ServicesGS-3012/GS-3012F User’s Guide295RTELNET TCP 107 Remote Telnet.RTSP TCP/UDP 554 The Real Time Streaming (media control) Prot

Appendix B Common ServicesGS-3012/GS-3012F User’s Guide296

GS-3012/GS-3012F User’s Guide297APPENDIX C Legal InformationCopyrightCopyright © 2007 by ZyXEL Communications Corporation.The contents of this public

Appendix C Legal InformationGS-3012/GS-3012F User’s Guide298FCC WarningThis device has been tested and found to comply with the limits for a Class A d

Appendix C Legal InformationGS-3012/GS-3012F User’s Guide299condition. Any replacement will consist of a new or re-manufactured functionally equivale

About This User's GuideGS-3012/GS-3012F User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who want t

30

Appendix C Legal InformationGS-3012/GS-3012F User’s Guide300

[Document Title]301APPENDIX D WEB: Customer SupportPlease have the following information ready when you contact customer support.Required Information

Appendix D Customer Support[Document Title]302• Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 - Modrany, Ceská Repub

Appendix D Customer Support[Document Title]303India• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +91-11-30888144 to +9

Appendix D Customer Support[Document Title]304• Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806-2001, U.S.A.Norway• Sup

Appendix D Customer Support[Document Title]305Sweden• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +46-31-744-7700• Fax

Appendix D Customer Support[Document Title]306

IndexGS-3012/GS-3012F User’s Guide307IndexNumerics802.1P priority 79AAAA 169AAA (Authentication, Authorization and Accounting) 169access controllimita

IndexGS-3012/GS-3012F User’s Guide308and switch passwords 262cluster manager 257, 261cluster member 257, 262cluster member firmware upgrade 260network

IndexGS-3012/GS-3012F User’s Guide309front panel 41FTP 231file transfer procedure 231restrictions over WAN 232GGARP 84GARP (Generic Attribute Registra

GS-3012/GS-3012F User’s Guide31CHAPTER 1 Getting to Know Your SwitchThis chapter introduces the main features and applications of the Switch.1.1 Int

IndexGS-3012/GS-3012F User’s Guide310login 49password 54login accountAdministrator 242non-administrator 243login accounts 242configuring via web confi

IndexGS-3012/GS-3012F User’s Guide311network management system (NMS) 234NTP (RFC-1305) 72Ppassword 54administrator 243Peak Information Rate (PIR) 117P

IndexGS-3012/GS-3012F User’s Guide312service 250trusted computers 250resetting 56, 228to factory default settings 228restoring configuration 56, 230RF

IndexGS-3012/GS-3012F User’s Guide313system log 251system reboot 229TTACACS+ 169, 170setup 172TACACS+ (Terminal Access Controller Access-Control Syste

IndexGS-3012/GS-3012F User’s Guide314WRR (Weighted Round Robin Scheduling) 153ZZyNOS (ZyXEL Network Operating System) 231

Chapter 1 Getting to Know Your SwitchGS-3012/GS-3012F User’s Guide32Figure 1 Backbone Application 1.1.2 Bridging ExampleIn this example application

Chapter 1 Getting to Know Your SwitchGS-3012/GS-3012F User’s Guide33Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is no

Chapter 1 Getting to Know Your SwitchGS-3012/GS-3012F User’s Guide34Figure 4 Shared Server Using VLAN Example 1.2 Ways to Manage the SwitchUse any

35PART IIBasic ConfigurationThe Web Configurator (49)Initial Setup Example (59)System Status and Port Statistics (63)Basic Setting (69)

36

GS-3012/GS-3012F User’s Guide37CHAPTER 2 Hardware Installation andConnectionThis chapter shows you how to install and connect the Switch. 2.1 Instal

Chapter 2 Hardware Installation and ConnectionGS-3012/GS-3012F User’s Guide38Figure 5 Attaching Rubber Feet " Do NOT block the ventilation

Chapter 2 Hardware Installation and ConnectionGS-3012/GS-3012F User’s Guide39Figure 6 Attaching the Mounting Brackets 2 Using a #2 Philips screwdri

Document ConventionsGS-3012/GS-3012F User’s Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s Guid

Chapter 2 Hardware Installation and ConnectionGS-3012/GS-3012F User’s Guide40

GS-3012/GS-3012F User’s Guide41CHAPTER 3 Hardware OverviewThis chapter describes the front panel and rear panel of the Switch and shows you how to ma

Chapter 3 Hardware OverviewGS-3012/GS-3012F User’s Guide42The following table describes the port labels on the front panel. 3.1.1 Console PortFor loc

Chapter 3 Hardware OverviewGS-3012/GS-3012F User’s Guide43Four of the 1000Base-T Ethernet ports are paired with a mini-GBIC slot to create a dual per

Chapter 3 Hardware OverviewGS-3012/GS-3012F User’s Guide443.1.3.1 Transceiver Installation Use the following steps to install a mini-GBIC transceiver

Chapter 3 Hardware OverviewGS-3012/GS-3012F User’s Guide45Figure 14 Transceiver Removal Example 3.1.4 Management PortThe MGMT (management) port is

Chapter 3 Hardware OverviewGS-3012/GS-3012F User’s Guide46To connect the power to the AC power model, insert the female end of power cord to the power

Chapter 3 Hardware OverviewGS-3012/GS-3012F User’s Guide473.4 Configuring the SwitchYou may use the embedded web configurator or command line interf

Chapter 3 Hardware OverviewGS-3012/GS-3012F User’s Guide48

GS-3012/GS-3012F User’s Guide49CHAPTER 4 The Web ConfiguratorThis section introduces the configuration and functions of the web configurator. 4.1 In

Document ConventionsGS-3012/GS-3012F User’s Guide5Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The Switch i

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide50Figure 19 Web Configurator: Login 4 Click OK to view the first web configurator screen.

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide51E - Click this link to display web help pages. The help pages provide descriptions for a

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide52The following table lists the various web configurator screens within the sub-links. Tabl

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide53The following table describes the links in the navigation panel. Table 5 Navigation Pa

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide544.3.1 Change Your Password After you log in for the first time, it is recommended you

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide55Figure 21 Change Administrator Login Password 4.4 Saving Your ConfigurationWhen you a

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide56" Be careful not to lock yourself and others out of the Switch. If you do lock yours

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide57Figure 22 Resetting the Switch: Via the Console Port The Switch is now reinitialized w

Chapter 4 The Web ConfiguratorGS-3012/GS-3012F User’s Guide58

GS-3012/GS-3012F User’s Guide59CHAPTER 5 Initial Setup ExampleThis chapter shows how to set up the Switch for an example network. 5.1 OverviewThe f

Safety WarningsGS-3012/GS-3012F User’s Guide6Safety Warnings1 For your safety, be sure to read and follow all warning notices and instructions.• Do NO

Chapter 5 Initial Setup ExampleGS-3012/GS-3012F User’s Guide601 Click Advanced Application > VLAN in the navigation panel and click the Static VLAN

Chapter 5 Initial Setup ExampleGS-3012/GS-3012F User’s Guide61Figure 25 Initial Setup Network Example: Port VID 1 Click Advanced Applications >

Chapter 5 Initial Setup ExampleGS-3012/GS-3012F User’s Guide621 Connect your computer to any Ethernet port on the Switch. Make sure your computer is i

GS-3012/GS-3012F User’s Guide63CHAPTER 6 System Status and PortStatisticsThis chapter describes the system status (web configurator home page) and po

Chapter 6 System Status and Port StatisticsGS-3012/GS-3012F User’s Guide646.2.1 Status: Port Details Click a number in the Port column in the Sta

Chapter 6 System Status and Port StatisticsGS-3012/GS-3012F User’s Guide65Figure 28 Status > Port Details The following table describes the lab

Chapter 6 System Status and Port StatisticsGS-3012/GS-3012F User’s Guide66Up Time This field shows the total amount of time the connection has been u

Chapter 6 System Status and Port StatisticsGS-3012/GS-3012F User’s Guide67512-1023 This field shows the number of packets (including bad packets) rec

Chapter 6 System Status and Port StatisticsGS-3012/GS-3012F User’s Guide68

GS-3012/GS-3012F User’s Guide69CHAPTER 7 Basic SettingThis chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup

Safety WarningsGS-3012/GS-3012F User’s Guide7

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide70Figure 29 Basic Setting > System Info The following table describes the labels in this scre

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide717.3 General Setup Use this screen to configure general settings such as the system name and

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide72The following table describes the labels in this screen. Table 9 Basic Setting > General S

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide737.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a physical network to be

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide74Figure 31 Basic Setting > Switch Setup The following table describes the labels in this scr

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide757.6 IP Setup Use the IP Setup screen to configure the Switch IP address, default gateway devic

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide76Figure 32 Basic Setting > IP SetupThe following table describes the labels in this screen.

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide77IP Address Enter the IP address of your Switch in dotted decimal notation for example 192.168.1

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide787.7 Port Setup Use this screen to configure Switch port settings.Click Basic Setting > Port

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide79Speed/Duplex Select the speed and the duplex mode of the Ethernet connection on this port. Choi

Safety WarningsGS-3012/GS-3012F User’s Guide8

Chapter 7 Basic SettingGS-3012/GS-3012F User’s Guide80

81PART IIIAdvancedVLAN (83)Static MAC Forward Setup (95)Filtering (97)Spanning Tree Protocol (99)Bandwidth Control (117)Broadcast Storm Control

82

GS-3012/GS-3012F User’s Guide83CHAPTER 8 VLANThe type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This c

Chapter 8 VLANGS-3012/GS-3012F User’s Guide848.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN mem

Chapter 8 VLANGS-3012/GS-3012F User’s Guide858.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups

Chapter 8 VLANGS-3012/GS-3012F User’s Guide868.5.1 Static VLAN Status See Section 8.1 on page 83 for more information on Static VLAN. Click Advanced

Chapter 8 VLANGS-3012/GS-3012F User’s Guide87The following table describes the labels in this screen.8.5.3 Configure a Static VLAN Use this scree

Chapter 8 VLANGS-3012/GS-3012F User’s Guide88The following table describes the related labels in this screen. 8.5.4 Configure VLAN Port Settings

Chapter 8 VLANGS-3012/GS-3012F User’s Guide89Figure 39 Advanced Application > VLAN > VLAN Port Setting The following table describes the labe

Contents OverviewGS-3012/GS-3012F User’s Guide9Contents OverviewIntroduction and Hardware ...

Chapter 8 VLANGS-3012/GS-3012F User’s Guide908.6 Subnet Based VLANs Subnet based VLANs allow you to group traffic into logical VLANs based on the sou

Chapter 8 VLANGS-3012/GS-3012F User’s Guide918.7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to displa

Chapter 8 VLANGS-3012/GS-3012F User’s Guide928.8 Port-based VLAN Setup Port-based VLANs are VLANs where the packet forwarding decision is based o

Chapter 8 VLANGS-3012/GS-3012F User’s Guide93" In screens (such as IP Setup and Filtering) that require a VID, you must enter 1 as the VID. The

Chapter 8 VLANGS-3012/GS-3012F User’s Guide94Figure 43 Port Based VLAN Setup (Port Isolation) The following table describes the labels in this scree

GS-3012/GS-3012F User’s Guide95CHAPTER 9 Static MAC Forward SetupUse these screens to configure static MAC address forwarding.9.1 OverviewThis chapt

Chapter 9 Static MAC Forward SetupGS-3012/GS-3012F User’s Guide96The following table describes the labels in this screen. Table 20 Advanced Applicat

GS-3012/GS-3012F User’s Guide97CHAPTER 10 FilteringThis chapter discusses MAC address port filtering.10.1 Configure a Filtering Rule Filtering mea

Chapter 10 FilteringGS-3012/GS-3012F User’s Guide98Action Select Discard source to drop the frames from the source MAC address (specified in the MAC f

GS-3012/GS-3012F User’s Guide99CHAPTER 11 Spanning Tree ProtocolThe Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP)