Instruction/ maintenance manual of the product 4728F ZyXEL Communications
Go to page of 491
www .zyxel.com www .zyxel.com XGS-4526/4528F/4728F Intelligent Layer 3+ Switch Copyright © 2010 ZyXEL Communications Corporation Firmware V ersion 4.00 Edition 1, 12/2010 Default Login Details IP Address http://192.168.0.1 (Out-of -band MGMT port) http://192.
.
About This User's Guide XGS-4526/4528F/4728F Use r’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who w ant to configure the Switch using the web configurator .
About This User's Guide XGS-4526/4528F/4728F User’s Guide 4 • Download Library Search for the latest produc t updates an d documentation from this link.
Document Conventions XGS-4526/4528F/4728F Use r’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide.
Document Conventions XGS-4526/4528F/4728F User’s Guide 6 Icons Used in Figures Figures in this User’ s Guide may use the following generic icons. The Sw itch icon is not an exact representation of y our device.
Safety Warnings XGS-4526/4528F/4728F Use r’s Guide 7 Safety Warnings • Do NO T use this product near water , for exam ple, in a wet basement or near a swimming pool. • Do NO T expose your device to dampness, dust or corrosive liquids. • Do NO T store things on the device.
Safety Warnings XGS-4526/4528F/4728F User’s Guide 8.
Contents Overview XGS-4526/4528F/4728F Use r’s Guide 9 Contents Overview User ’ s Guide ................................................... ..................................................... .......... ......... 25 Getting to Know Y our Switch .
Contents Overview XGS-4526/4528F/4728F User’s Guide 10 RIP ......... ................... ................... .................... ................... ................... .................. ........... ..... 327 OSPF ........ ................ .......
Table of Contents XGS-4526/4528F/4728F Use r’s Guide 11 Table of Contents About This User's Guide ..................................................... ................................................... .. 3 Document Conventions...............
Table of Contents XGS-4526/4528F/4728F User’s Guide 12 3.2.1 XGS-4526 ........... ... ............. ... ... ... .... ... ............. ... ... .... ... ... ............. ... ... .... ... ... ... ........ .. 41 3.2.2 XGS-4528F or XGS-4728F ..........
Table of Contents XGS-4526/4528F/4728F Use r’s Guide 13 6.5 How to Set Up a Guest VLAN ............... ................. ................ ............. ................ ................ 80 6.5.1 Creating a Gu est VLAN ............. ................ .
Table of Contents XGS-4526/4528F/4728F User’s Guide 14 9.5.1 VLAN St atus ....................... ............. ................ ............. ................ ............. .............. 121 9.5.2 VLAN Details .................... ... ... ... ... .
Table of Contents XGS-4526/4528F/4728F Use r’s Guide 15 Chapter 14 Bandwid th Con trol ............................................................... ........... ........... ......................... .. 169 14.1 Bandwidth Control Overview .........
Table of Contents XGS-4526/4528F/4728F User’s Guide 16 20.2 Configuring the Classifier .......... ............. ................ ............. ................ ............. ............. .2 0 1 20.3 Viewing and Editing Classifier Configuratio n ...
Table of Contents XGS-4526/4528F/4728F Use r’s Guide 17 24.6 MVR Overview .............. ............. ................ ................ ............. ................ ............. ....... .... 235 24.6.1 T ypes of MVR Ports .......................
Table of Contents XGS-4526/4528F/4728F User’s Guide 18 27.1 Loop Guard Overview ......... ............. ................ ................. ............ ................. ................ . 283 27.2 Loop Guard Setup ............ ................ ....
Table of Contents XGS-4526/4528F/4728F Use r’s Guide 19 Chapter 33 Private VLAN ........................................................................ ........................................... ...... 315 33.1 Private VLAN Overview ...... .......
Table of Contents XGS-4526/4528F/4728F User’s Guide 20 38.2 Port-based IGMP .............. ................ ... .......... ............. ................ ............. ................ ..... ... 347 38.3 Configuring IGMP ................ ...........
Table of Contents XGS-4526/4528F/4728F Use r’s Guide 21 42.3 VRRP Configuration ..... ................ ............. ................ ................ ................ ............. ....... .3 7 3 42.3.1 IP Interface Setup .. ............. .........
Table of Contents XGS-4526/4528F/4728F User’s Guide 22 46.3.3 SNMP Trap s ..... ................ ............. ................ ................ ............. ................ ........... 4 0 0 46.3.4 Configuring SNMP .................. ............
Table of Contents XGS-4526/4528F/4728F Use r’s Guide 23 51.2 Viewing the IP T able ......................... ... ............. ............. ................ ............. ................ .. ... 448 Chapter 52 ARP T able ...........................
Table of Contents XGS-4526/4528F/4728F User’s Guide 24.
25 P ART I User ’ s Guide.
26.
XGS-4526/4528F/4728F Use r’s Guide 27 C HAPTER 1 Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction Y our Switch is a stand-alone, layer- 3, Gigabit Ethernet (GbE) switch with support for an optional 2-port 10 Gigabit uplink module.
Chapter 1 Getting to Know Your Switch XGS-4526/4528F/4728F User’s Guide 28 super-fast uplink connection by using the optional 10 Gigabit uplink module on the Swit ch . Figure 1 Bridging Ap plication 1.1.2 High Performance Switching Example The Switch is ideal for connecting two geogr aphically dispersed networks that need high bandwidth.
Chapter 1 Getting to Kn ow Your Switch XGS-4526/4528F/4728F Use r’s Guide 29 1.1.3 Gigabit Ethernet to the Desktop The Switch is an i deal solution for small net works which demand high bandwidth for a group of heavy traffic users. Y ou ca n connect computers an d servers directly to the Switch’ s port or connect other sw itches to the Switch.
Chapter 1 Getting to Know Your Switch XGS-4526/4528F/4728F User’s Guide 30 Shared resources such as a serv er can be used by al l ports in the same VLAN as the server . In the following figure only po rts that need access to the serv er need to be part of VLAN 1.
Chapter 1 Getting to Kn ow Your Switch XGS-4526/4528F/4728F Use r’s Guide 31 • W eb Configur ator . This is recommended f or everyda y management of the S witch using a (supported) web browser . See Chapter 4 on page 47 . • Command Line Interface.
Chapter 1 Getting to Know Your Switch XGS-4526/4528F/4728F User’s Guide 32.
XGS-4526/4528F/4728F Use r’s Guide 33 C HAPTER 2 Hardware Installation and Connection This chapter shows you how t o install and connect the S witch. 2.1 Freest anding Inst allation 1 Make sure the Switch is clean and dry . 2 Set the Swit ch on a smo oth, leve l surface strong enough to support the weight of the Switch and the c onnected cables.
Chapter 2 Hardware Installation and Connection XGS-4526/4528F/4728F User’s Guide 34 Note: Do NOT block the ventilation ho les. Leave space between devices when stackin g. Note: For proper ventilation, allow at le ast 4 inches (10 cm) of clearance at the front and 3.
Chapter 2 Har d war e In sta lla tion an d Conn ec tion XGS-4526/4528F/4728F Use r’s Guide 35 2 Using a #2 Philips s crewdriver , install the M3 flat head screws through the mounting br acket holes into t he Switch. 3 Re peat steps 1 and 2 to install the second mounting br acket on the other side of the Switch.
Chapter 2 Hardware Installation and Connection XGS-4526/4528F/4728F User’s Guide 36.
XGS-4526/4528F/4728F Use r’s Guide 37 C HAPTER 3 Hardware Overview This chapter describes the front panel and rear p anel of the S w itch and shows you how to make the hardware connections. 3.1 Front Panel Connections The figure below shows the front panel of the S witch.
Chapter 3 Har d war e Ov er vie w XGS-4526/4528F/4728F User’s Guide 38 The following table describes t he ports. 3.1.1 Dual Personality Interfaces There are 4 or 24 Dual Personalit y interfaces, comprising 4 or 24 1000Base- T/ mini-GBIC combo ports.
Chapter 3 Hardware Overview XGS-4526/4528F/4728F Use r’s Guide 39 3.1.2.1 Default Ethernet Settings The factory defaul t negotiation settings fo r the Ethernet ports o n the Switch are: • Speed: Auto •D u p l e x : A u t o • Flow con trol: Off 3.
Chapter 3 Har d war e Ov er vie w XGS-4526/4528F/4728F User’s Guide 40 3 The Switch automaticall y detects the installed tr ansceiv er . Check the LEDs to verify that i t is functioning properly . Figure 12 Inst alled T ransceiver 3.1.3.2 T ransceiver Removal Use the following steps to remove a mini GBIC transceiver (SFP module ).
Chapter 3 Hardware Overview XGS-4526/4528F/4728F Use r’s Guide 41 3.2 Rear Panel 3.2.1 XGS-4526 The following figure shows the rear panel of the Switch.
Chapter 3 Har d war e Ov er vie w XGS-4526/4528F/4728F User’s Guide 42 Figure 17 Rear Pa nel - DC Model 3.2.3 Uplink Module The following figure shows the front pa nel of the EM-422 and EM-412 modules. Figure 18 The Front Panel of the EM-422 and EM-412 Modules 3.
Chapter 3 Hardware Overview XGS-4526/4528F/4728F Use r’s Guide 43 3.2.5 Power Connector Make sure you are using the correct po wer source as shown on the panel and that no objects obstruct the airfl ow of the fans. Use the following procedures to connect the Switch to a power source after you have installed i t.
Chapter 3 Har d war e Ov er vie w XGS-4526/4528F/4728F User’s Guide 44 1 Use a screwdriver to loosen the terminal block captive screws. 2 Connect one end of a power wire to the Switch’ s RTN (return) pin and tighten the captive screw . 3 Connect the other end of the power wire to the positive terminal on the power supply .
Chapter 3 Hardware Overview XGS-4526/4528F/4728F Use r’s Guide 45 3.3 LEDs The following table describes t he LEDs. T able 3 LEDs LED COLO R ST A TUS DESCRIPTION BPS Green Blinking The system is rece iving power from the backup power supply . On The backup power supply is connected and active.
Chapter 3 Har d war e Ov er vie w XGS-4526/4528F/4728F User’s Guide 46 1-24 or 21-24 Green On The port has a successful connection. Blinking The port is receiving or transmitting data.
XGS-4526/4528F/4728F Use r’s Guide 47 C HAPTER 4 The Web Configurator This section introduces the config uratio n and functions of the web configurator . 4.1 Introduction The web configurator is an HTML -based management interface that allows easy Switch setup an d m an agement v ia Inter net browser .
Chapter 4 The Web Con figurator XGS-4526/4528F/4728F User’s Guide 48 3 The login screen appears. The defa ult username is admin and associated default password is 1234 . The date and time displ ay as sh own if y ou have not configured a time server nor manually entered a time and date in the General Setup screen.
Chapter 4 T he Web Configurator XGS-4526/4528F/4728F Use r’s Guide 49 The following figure shows the navigati ng components of a web configur ator screen. Figure 20 The W eb Configurator Layou t A - Click the menu items to open submenu li nks, and then click on a submenu link to open the screen in the main w in d ow.
Chapter 4 The Web Con figurator XGS-4526/4528F/4728F User’s Guide 50 In the navigation panel, clic k a main link to rev eal a list of sub menu links.
Chapter 4 T he Web Configurator XGS-4526/4528F/4728F Use r’s Guide 51 VLAN This link takes yo u to screens where you can configure port -based or 802.1Q VLAN (depending on what you configured in the Switch Setup menu). Y ou ca n also configure a protocol based VLAN or a subnet based VLAN in these screens.
Chapter 4 The Web Con figurator XGS-4526/4528F/4728F User’s Guide 52 VLAN Mapping This link takes you to screens where you can configure VLAN mapping settings on the Switch. Layer 2 Protocol T unneling This link takes you to a screen wher e y o u can configure L2PT (Layer 2 Protocol T unneling) settings on the Switch.
Chapter 4 T he Web Configurator XGS-4526/4528F/4728F Use r’s Guide 53 4.3.1 Change Y our Password After you log i n for the first time, it is recommended you change the default administr ator password. Click Man agement > Access Control > Logins to display the next screen.
Chapter 4 The Web Con figurator XGS-4526/4528F/4728F User’s Guide 54 4.4 Saving Y our Configuration When you are done modifying th e s ettings in a screen, click Apply to save yo ur changes back to the run-time memory . Settings in the run-time memory are lost when the Switch’ s power is turned off .
Chapter 4 T he Web Configurator XGS-4526/4528F/4728F Use r’s Guide 55 4.6.1 Reload the Configuration File Uploading the factory -default configur ation file replaces the current c onfiguration file with the factory -default confi gur ation file.
Chapter 4 The Web Con figurator XGS-4526/4528F/4728F User’s Guide 56 The Switch i s now rein itialize d with a defau lt configu ration file in cludin g the de fault password of “1234” . 4.7 Logging Out of the W eb Configurator Click Logout in a screen to exit the web configurator .
XGS-4526/4528F/4728F Use r’s Guide 57 C HAPTER 5 Initial Setup Example This chapter shows how to set up the S witch for an example network. 5.1 Overview The following lists the configur ation steps .
Chapter 5 Initi al Set up Ex amp l e XGS-4526/4528F/4728F User’s Guide 58 new IP interface. Th is allows the Switch to route tr affic between the RD and Sales networks. Figure 24 Initia l Setup Network Example: IP Interface 1 Connect your computer to the MGMT port that is used only for management .
Chapter 5 Initi al Set up Ex amp le XGS-4526/4528F/4728F Use r’s Guide 59 5 In the VID field, enter the ID of the VLAN group to which you want this IP interface to belong. This is the same as the VLAN ID you configure in the Static VLAN screen. 6 Click Add to sav e the settings to the run-ti me memory .
Chapter 5 Initi al Set up Ex amp l e XGS-4526/4528F/4728F User’s Guide 60 In this example, you want to configure port 1 as a member of VLAN 2. Figure 25 Initia l Setup Network Example: VLAN 1 Click Advanced Application > VLAN in the navigati on panel and click t he Static VLAN link.
Chapter 5 Initi al Set up Ex amp le XGS-4526/4528F/4728F Use r’s Guide 61 3 Since the VLAN2 network is connected t o po rt 1 on the Switch, select Fixed to configure port 1 to be a perman ent member of the VLAN only .
Chapter 5 Initi al Set up Ex amp l e XGS-4526/4528F/4728F User’s Guide 62 5.1.5 Enabling RIP T o exchange routing information with other routing devices across different routing domains, enable RIP (R outing Information Protocol) in the RIP screen. 1 Click IP Application and RIP in the na vigation panel.
XGS-4526/4528F/4728F Use r’s Guide 63 C HAPTER 6 Tutorials This chapter provides some examples of using the web configur ator to set up and use the Switch.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 64 The settings in t his tutorial are as the following. 1 Access the Switch from t he MGMT port through http://192.168 .0.1 by default. Log into the Switch by entering the username (default: admin ) and password (default: 1234 ).
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 65 3 Go to Advanced Application > VLAN > VLAN Port Setting , and set the PVID of the ports 5, 6 and 7 to 100.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 66 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted state field for port 5 because the DHCP server is connected to port 5. K eep ports 6 and 7 Untrusted because they are connected to DHCP clients.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 67 9 Connect your DHCP server to p ort 5 and a computer (as DHCP client) t o either port 6 or 7. The computer should be ab le to get an IP address from the DHCP server . If you put the DHCP server on port 6 or 7, the computer will not able to get an IP address.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 68 DHCP client A based on the system name, VLAN ID and port number i n the DHCP request. Client A connects to the Switch’s port 2 in VLAN 102. Figure 28 T utorial: DH CP Relay Scenario 6.2.2 Creating a VLAN Fol low the steps below to configure port 2 as a member of VLAN 102.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 69 4 In the Static VLAN screen, select ACTIVE , enter a descripti ve name (V ALN 102 for example) in the Name field and enter 102 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 70 8 Click the VLAN St atus link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN Status sc reen.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 71 6.2.3 Configuring DHCP Relay Fol low the steps below to enable DHCP relay on the Switch and allow the Switch to add relay agent information (such as the VLAN ID) to DHCP request s. 1 Click IP Application > DHCP and then the Global link to open the DHCP Rela y screen.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 72 3 Yo u c l i c k e d t h e Save link on the Switch t o have yo ur settings take effect. 6.3 How to Use PPPoE IA on the Switch Y ou want to configure PPPoE Inte rmediate Agent on the Switch ( A ) to pass a subscriber’s information to a PPPoE server ( S ).
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 73 6.3.1 Configuring Switch A 1 Click Advanced Application > PPPo E > Intermediate Agent . Select Active then clic k Apply . Click Port on the top of the screen. 2 Select Untrusted for port 5 and enter userC as Circuit-id and 00134900000A as Remote-id .
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 74 3 The Intermediate Agent screen appears. Click VLAN on the top of the screen. 4 Enter 1 for both Start VID and End VID since both the Switch and PPPoE server are in VLAN 1 in this example. Click Apply .
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 75 5 Then select Yes to enable PPP oE IA in VLAN 1 and also select Circuit-id and Remote-id to allow the Sw itch to add these two string s to frames t agged with VLAN 1 and pass to the PPPoE server .
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 76 2 Select Trusted for ports 11 and 12 and then click Apply . Then Click Intermediate Agent on the top of the screen. 3 The Intermediate Agent screen appears. Click VLAN on the top of the screen.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 77 4 Enter 1 for both Start VID and End VID . Click Apply . 5 Then select Yes to enable PPP oE IA in VLAN 1 and also select Circuit-id and Remote-id to allow the Sw itch to add these two string s to frames t agged with VLAN 1 and pass to the PPPoE server .
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 78 Y ou also want the Switch to wait for a period of time (10 minutes) before resuming the port automatically , after the proble m(s) are gone. Loop guard and Errdiable features are helpful for this demand.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 79 2 Click Advanced Application > Errdisable > CPU Protection , select ARP as the reason, enter 100 as the r ate limit (packet s per second) for the first entry (port *) to apply the s ett i n g to al l p o rt s .
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 80 4 Click Advanced Application > Errdisable > Errdisable Recovery , select Active and Timer Status for loopguard and ARP entries. Also enter 180 (180 seconds = 3 minutes) in the Interval field for both entries.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 81 6.5.1 Creating a Guest VLAN Fol low the steps belo w to config ure port 1, 2, 3 and 10 as a member of V LAN 200. 1 Access th e web c onf ig u rator throug h the Switch’ s management port. 2 Go to Basic Setting > Switch Setup an d se t the VLAN type to 802.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 82 7 Click Add to sav e the settings to the run-ti me memory . Settings in the run-time memory are lost when the Switc h’ s power is turned off . 8 Click the VLAN St atus link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN Status sc reen.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 83 10 Click Apply t o save y our changes back to the run-time memory . 11 Click the Save link in the upper right c orner of the web configur ator to sav e y our configu ration permane ntly . 6.5.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 84 2 Select the first Active checkbo x to enable 802.1x au thenti cation on the Switch. Select the Active checkbo xes for ports 1 to 8 to turn on 802.1x aut hentication on the selected ports. Click Apply .
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 85 2 Select Active and enter the guest VLAN ID (200 in this example) on ports 1, 2 and 3. The Switch puts unauthentic ate d clients i n the specified guest VLAN.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 86 Private VLAN to do port isolation in a VLAN instead of assi gning each port to a separate VL AN and creating a different IP routing domain for each individual port.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 87 4 In the Static VLAN screen, select ACTIVE , enter a descripti ve name (VLAN 123 for example) in the Name field and enter 123 in the VLAN Group ID field. 5 Select Fixed to configure ports 2, 3, 4 and 5 to be permanent members of this VLAN.
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 88 8 Click the VLAN St atus link in the Static VLAN screen and then the VLAN Port Setting link in the VLAN Status sc reen.
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 89 6.6.2 Creating a Private VLAN Rule Fol low the steps below to configure priv ate VLAN for VLAN 123. 1 Click Advanced Application > Private VLAN . 2 In the Private VLAN screen, select Active .
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 90 6.7 How to Configure Routing Policy The Switch checks the routing t able and then forwards tr affic through the default gatewa y ( R1 ) based on the destination address .
Chapter 6 Tutorials XGS-4526/4528F/4728F Use r’s Guide 91 3 Click Add to sav e the settings to the run-time memory . 6.7.2 Create a Policy Routing Rule Fol low the steps below to set up a policy routing profile fi rst and then a rule to forward traffic of classifier DSCP58 to gateway R2 .
Chapter 6 Tutorials XGS-4526/4528F/4728F User’s Guide 92 3 Click the Rule Configuration link in the Policy Route screen to create a rule in this profile. 4 Select the name of the profile with which the rule associates. Set the rule’ s index number t o 1 in the Se quence field.
93 P ART II T echnical Reference.
94.
XGS-4526/4528F/4728F Use r’s Guide 95 C HAPTER 7 System Status and Port Statistics This chapter describes the system s tatus (web configur ator home page) and port details screens. 7.1 Overview The home screen of the web configur ator displays a port s tatistical summary with links to each port showing s tatistical details.
Chapter 7 S ystem Status and Port Sta tistics XGS-4526/4528F/4728F User’s Guide 96 The following table describes t he labels in this screen. T able 8 Status LABEL DESCRIPTION P ort This identifies the Ethernet port. Click a port number to display the Port Details screen (refer to Figure 31 on pag e 97 ).
Chapter 7 System Status and Port Statistics XGS-4526/4528F/4728F Use r’s Guide 97 7.2.1 S t atus: Port Det ails Click a number in the Port column in the Status screen to display individual p ort statistics. Use t his screen to check status and detailed perf ormance data about an individual port on the S witch.
Chapter 7 S ystem Status and Port Sta tistics XGS-4526/4528F/4728F User’s Guide 98 Status If STP (Spanning T r ee Protocol) is enabled, this field displays the STP state of the port (see Section 13.1.3 on page 149 for more information). If STP is disabled, th is field displa ys FORWARDING if the link is up, otherwise, it displays STOP .
Chapter 7 System Status and Port Statistics XGS-4526/4528F/4728F Use r’s Guide 99 RX CRC This field shows the number of packets received with CRC (Cyclic R edundant Check) error(s). Length This field shows the number of packets received with a length that w as out of range.
Chapter 7 S ystem Status and Port Sta tistics XGS-4526/4528F/4728F User’s Guide 100.
XGS-4526/4528F/4728F Use r’s Guide 101 C HAPTER 8 Basic Setting This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. 8.1 Overview The System Info screen displays gener al Switch information (such as fi rmware version number) and hardware polling information (such as fan speeds).
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 102 8.2 System Information In the navigation panel, click Basic Setting > System Info to displ ay the screen as shown. Y ou can check the firmware version number and monitor the Switch temperature, fan speeds an d voltag e in this screen.
Chapter 8 Basic Setting XGS-4526/4528F/4728F Use r’s Guide 103 Threshold This field displays the upper temper ature limit at this sensor . Status This field displays Normal for temper atures below the threshold and Error for those above.
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 104 8.3 General Setup Use this screen to configure genera l set t ings such as the system name and time. Click Basic Setting and Gener al Setup in the navigation panel to display the screen as shown.
Chapter 8 Basic Setting XGS-4526/4528F/4728F Use r’s Guide 105 Use Time Server when Bootup T ype the time service protocol that your timeserver uses. Not all time servers support all protocols, so you may have to use trial and error to find a protocol that works.
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 106 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allo ws a ph ysical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group.
Chapter 8 Basic Setting XGS-4526/4528F/4728F Use r’s Guide 107 8.4.1 Smart Isolation T o block tr affic between two specific ports withi n the Switch, y ou can use port isolation or private VLAN ( se e Chapter 33 on page 315 for more information). However , it does not work across multiple switches.
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 108 Note: The uplink port connecte d to the Internet should be the root po rt. Otherwise, with smart isolation enabled, the isolated port s cannot access the Internet. 8.5 Switch Setup Screen Click Basic Setting and then Switch Setup in the navigation panel to display t he screen as shown.
Chapter 8 Basic Setting XGS-4526/4528F/4728F Use r’s Guide 109 Smart Isolation Select Active to enable smart isolation on the S witch. The designated port(s) then becomes the isolated port. Smart isolation allows you to prevent isolated ports on different switch es from transmitting tr affic to each other .
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 11 0 8.6 IP Setup Use the IP Setup screen to configure the default gateway d evice, the default domain name server and add IP domains. 8.6.1 IP Interfaces The Switch needs an IP address for it to be managed ov er the network.
Chapter 8 Basic Setting XGS-4526/4528F/4728F Use r’s Guide 111 Switch in a rout ing domain, simply ad d a new routing domain entry with a different IP address in the same subnet. Figure 35 Basic Setting > IP Setup The following table describes t he labels in this screen.
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 11 2 IP Address Enter the out-of -band management IP address of your Switch in dotted decimal notation. For example, 192.168.0.1. IP Subnet Mask Enter the IP subnet mask of your S witch in dotted decimal notation, for example, 255.
Chapter 8 Basic Setting XGS-4526/4528F/4728F Use r’s Guide 11 3 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the conf iguration screen. Figure 36 Basic Setting > Port Setup The following table describes t he labels in this screen.
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 11 4 Speed/ Duplex Select the speed and the duplex mode of the Ethernet connection on this port. The choices are Auto , 10M/Half Duplex , 10M/Full Duplex , 100M/Half Duplex and 100M/Full D uplex for a 1000Base- T connection.
Chapter 8 Basic Setting XGS-4526/4528F/4728F Use r’s Guide 11 5 Apply Click Apply to save your changes to the Sw itch’s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to sav e your changes to the non- volatile memory when you are done configuring.
Chapter 8 Basic Setting XGS-4526/4528F/4728F User’s Guide 11 6.
XGS-4526/4528F/4728F Use r’s Guide 11 7 C HAPTER 9 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-bas ed VLANs. 9.1 Introduction to IEEE 802.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 11 8 switch, the Swit ch first decides where to forward the fr ame and then strips off the VLAN tag.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 11 9 9.3 Port VLAN T runking Enable VLAN Trunking on a port to allow fr ames belonging to unknown VLAN groups to pass through that port. This is us eful if y ou w ant to set up VLAN grou ps on end devices without ha ving to co nfigure the same VLAN groups on intermediary devices.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 120 allow fr ames with VLAN group tags 1 an d 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s). Figure 37 Port VLAN T runking 9.4 Select the VLAN T ype Select a VLAN type in the Basic Setting > Switch Setup screen.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 121 9.5.1 VLAN St atus See Section 9.1 on page 117 for more information on Static VLAN. Click Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown nex t.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 122 9.5.2 VLAN Det ails Use this screen to view detai led port se ttings and status of the VLAN group . See Section 9.1 on page 117 for more information on static VLAN. Click on an index number in the VLAN Status screen to display VLAN det ails.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 123 static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. Figure 41 Advanced Application > VLAN > S tatic VLAN The following table describes t he related labels in this screen.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 124 9.5.4 Configure VLAN Port Settings Use the VLAN Port Set ti ng screen to co nfigure the static VLAN (IEEE 802.1Q) settings on a port. See Section 9.1 on page 117 for more information on static VLAN.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 125 The following table describes t he labels in this screen. T able 19 Advanced Application > VLAN > VLAN Port Setting LABEL DESCRIPTION GVRP.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 126 9.6 Subnet Based VLANs Subnet based VLANs allow y ou to group tr affic into logical VLANs based on the source IP subnet you s pecify . When a fr ame is received on a port, the Switch checks if a tag is added already and the IP subnet it came from.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 127 9.7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to display the configurati on screen as shown. Note: Subnet based VLAN applies to un-tagg ed packet s and is applicable only when you use IEEE 802.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 128 9.8 Protocol Based VLANs Protocol based VLANs allow y ou to group tr affic into logi cal VLANs based on the protocol you s pecify . When an u pstream f rame is received on a port (confi gured for a protocol based VLAN), t he Switch checks if a tag is added already and its protocol.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 129 For examp le, ports 1, 2, 3 and 4 belong to static VLAN 100, and p orts 4, 5, 6, 7 belong to static VLAN 120. Y ou can configure a protocol based VLAN A with priorit y 3 for ARP traf fic received on port 1, 2 and 3.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 130 The following table describes t he labels in this screen. T able 21 Advanced Application > VLAN > VL AN Port Setting > Protocol Based VLAN Setup LABEL DESCRIPTION Active Check this bo x to activate this protocol based VLAN.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 131 9.10 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. Foll ow these steps using the screen below: 1 Activ ate this protocol based VLAN.
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 132 9.1 1 Port-based VLAN Setup P or t-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. P ort-based VLANs require all owed outgoing ports to be defined for each port.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 133 The following screen shows users on a port-based, all- connected VLAN configu ration. Figure 48 Advanced Application > VLAN > Po rt Based .
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 134 The following screen shows users on a port-based, port -isolated VLAN configu ration. Figure 49 Advanced Application > VLAN: Port Ba se d VLAN.
Chapter 9 VLAN XGS-4526/4528F/4728F Use r’s Guide 135 The following table describes t he labels in this screen. T able 22 Advanced Application > VLAN: Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose All connected or Port isolation .
Chapter 9 VLAN XGS-4526/4528F/4728F User’s Guide 136.
XGS-4526/4528F/4728F Use r’s Guide 137 C HAPTER 10 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 10.1 Overview This chapter discusses how to configure forw arding rules based on MAC addresses of devices on your network.
Chapter 10 St at ic MAC Fo rw ard Setup XGS-4526/4528F/4728F User’s Guide 138 Click Adv anced Applications > Static MAC Forwarding in the navigati on panel to display the configur ation screen as shown. Figure 50 Advanced Application > S tatic MAC Forwarding The following table describes t he labels in this screen.
Chapter 10 Static MAC Fo rward Setup XGS-4526/4528F/4728F Use r’s Guide 139 P ort This fie ld displays the port where the MAC address shown in the next field will be forwarded. Delete Click Delete to remove the selected entry from the summary table.
Chapter 10 St at ic MAC Fo rw ard Setup XGS-4526/4528F/4728F User’s Guide 140.
XGS-4526/4528F/4728F Use r’s Guide 141 C HAPTER 11 Static Multicast Forward Setup Use these screens to configure stat ic multicast add ress forwarding . 1 1.1 S t atic Multicast Forwarding Overview A multicast MAC address is the MAC addres s of a member of a multicast group.
Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up XGS-4526/4528F/4728F User’s Guide 142 connected to port 3. Fi gure 53 shows fr ames being forwarded to ports 2 and 3 within VLAN group 4.
Chapter 11 Static Mu lticast Forward Setup XGS-4526/4528F/4728F Use r’s Guide 143 Click Advanced Application > Static Multicast Forwarding to display the configurati on screen as shown. Figure 54 Advanced Application > S tat ic Multicast Forwarding The following table describes t he labels in this screen.
Chapter 11 St at ic Mu lt ica s t Fo rw ar d Set up XGS-4526/4528F/4728F User’s Guide 144 Active This field displays whether a static multicast MAC address forwarding rule is active ( Yes ) or not ( No ). Y ou may tempor arily deactivate a rule without deleting it.
XGS-4526/4528F/4728F Use r’s Guide 145 C HAPTER 12 Filtering This chapter discusses MAC address port fil tering. 12.1 Configure a Filtering Rule Configure the S witch to filter tr affic base d on the tr affic’ s source, destinat ion MAC addresses and/or VLAN group (ID).
Chapter 12 Filtering XGS-4526/4528F/4728F User’s Guide 146 Action Select Discard source to drop frames from th e source MAC address (specified in the MAC field). The Switch can still send frames to the MAC address. Select Discard destination to drop frames to the destination MAC address (specified in the MAC address).
XGS-4526/4528F/4728F Use r’s Guide 147 C HAPTER 13 Spanning Tree Protocol The Switch suppor ts Spanning T ree Protocol (STP), R apid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protoc ol (MSTP) as defined in the following standards. • IEEE 802.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 148 P ath cost is the cost of tr ansmitting a frame onto a LAN through that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 149 13.1.3 STP Port S t ates STP assigns fiv e port states to eliminate packet loopi ng. A bridge port is not allowed to go direct ly from blocking state to forw arding state so as to eliminate transient loops.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 150 Note: Each port can belong to one STP tree only . 13.1.5 Multiple STP Multiple Spanning T ree Protocol (IEEE 802.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 151 With MSTP , VLANs 1 and 2 are mapped to di fferent spanning t rees in the network. Thus traf fic from the two VLANs tr avel on different paths. The following fig ure shows the network example using MSTP .
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 152 The following figure shows an example wh ere there are two MST regions. R egions 1 and 2 hav e 2 spanning tree instances.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 153 13.2 S p anning T ree Protocol St atus Screen The Spanning T ree Protocol status scree n changes depending on what standard you choose to implement on your network. Click Advanced Application > Spanning Tree Protocol to see the screen as shown.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 154 The following table describes t he labels in this screen. 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 147 for more informat ion on RS TP .
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 155 The following table describes t he labels in this screen. T able 29 Advanced Application > S p anning T ree Protocol > RSTP LABEL DESCRIPTION Status Click Status to display the RSTP Status screen (see Figure 64 on page 157 ).
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 156 13.5 Rapid S p anning T ree Protocol St atus Click Advanced Application > Spanning Tree Pro tocol in the navigation panel to display the status screen as shown next. See Section 13.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 157 Note: This screen is only available af ter you activate RSTP on the Switch. Figure 64 Advanced Application > S panning T r ee Protocol > S tatus: RSTP The following table describes t he labels in this screen.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 158 13.6 Configure Multiple Rapid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanced Application > Spanning Tree Proto col screen. Se e Section 13.1 on page 147 for more information on MRSTP .
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 159 Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 160 13.7 Multiple Rapid S p anning T ree Protocol S t atus Click Advanced Applicat ion > Spanning Tree Protoc ol in the navigation panel to display the status screen as shown next.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 161 The following table describes t he labels in this screen. T able 32 Advanced Application > S p anning T ree Protocol > S tatus: MRSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you w ant to activate.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 162 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1.5 on page 150 for more information on MSTP .
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 163 The following table describes t he labels in this screen. T able 33 Advanced Application > S p anning T ree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 69 on page 167 ).
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 164 Bridge Priority Set the priority of the Switch for the specific spanning tree instance. The lower the number , t he more likely the Switch will be chosen as the root bridge within the spanning tree instance.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 165 13.8.1 Multiple S p anning T ree Protocol Port Configuration T o configure MSTP ports, click Port in t he Advanced Application > Spanning Tree Protoc ol > MSTP screen.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 166 13.9 Multiple S p anning T ree Protocol St atus Click Advanced Applicat ion > Spanning Tree Protoc ol in the navigation panel to display the status screen as shown next. See Section 13.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F Use r’s Guide 167 The following table describes t he labels in this screen. T able 35 Advanced Application > S p anning T ree Protocol > S tatus: MSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you w ant to activate.
Chapter 13 Spanning T ree Protoc ol XGS-4526/4528F/4728F User’s Guide 168 Internal Cost This is the path cost from the root port in this MST instance to the regional root switch. P ort ID This is the priority and number of the port on the Sw itch through which this Switch must communicate with the root of th e MST instance.
XGS-4526/4528F/4728F Use r’s Guide 169 C HAPTER 14 Bandwidth Control This chapter shows you how y ou can cap the maximum bandwidth using the Bandwidth Control screen. 14.1 Bandwid th Control Overview Bandwidth control means defining a maxi mum allowab le bandwidth for incoming and/or out-going tr affic flows on a port.
Chapter 14 Bandwidth Control XGS-4526/4528F/4728F User’s Guide 170 14.2 Bandwid th Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 70 Advanced Application > Bandwid th Control The following table describes t he related labels in this screen.
Chapter 14 Band wid th Contr ol XGS-4526/4528F/4728F Use r’s Guide 171 Active Select this check bo x to activate egress r ate limits on this port. Egress Rate Specify the maximum bandwidth allowed in kilobits per second (Kbps) for the out -going traffic flow on a port.
Chapter 14 Bandwidth Control XGS-4526/4528F/4728F User’s Guide 172.
XGS-4526/4528F/4728F Use r’s Guide 173 C HAPTER 15 Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature.
Chapter 15 Broadcast Storm Control XGS-4526/4528F/4728F User’s Guide 174 The following table describes t he labels in this screen. T able 37 Advanced Application > Broadcast S torm Control LABEL DESCRIPTION Active Select this check box to enable traffic storm control on the Switch.
XGS-4526/4528F/4728F Use r’s Guide 175 C HAPTER 16 Mirroring This chapter discusses port mirroring s etup screens. 16.1 Port Mirroring Setup P o r t m i r r o r i n g a l l o w s y o u t o c o p y a.
Chapter 16 M irr or in g XGS-4526/4528F/4728F User’s Guide 176 The following table describes t he labels in this screen. T able 38 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this check box to activ ate port mirroring on the Switch.
XGS-4526/4528F/4728F Use r’s Guide 177 C HAPTER 17 Link Aggregation This chapter shows you how t o logically aggr egate phy sical links t o form one logical, higher-bandwid th link. 17.1 Link Aggregation Overview Link aggregation (trunking) is the groupi ng of physical por ts into one log i ca l higher-capacity link.
Chapter 17 Li nk Aggr eg a tion XGS-4526/4528F/4728F User’s Guide 178 When you enable LACP link aggregation on a port, the port can automatically negotiate with the ports at the remote en d of a li nk to establish trunk groups.
Chapter 17 L ink Aggr eg a tion XGS-4526/4528F/4728F Use r’s Guide 179 17.3 Link Aggregation S t atus Click Advanced Application > Link Aggregation in the navigation panel. The Link Aggregation Status screen d isplays by default. See Sect ion 17.
Chapter 17 Li nk Aggr eg a tion XGS-4526/4528F/4728F User’s Guide 180 Criteria This shows the outgoing tr affic distribution algorithm used in this trunk group. P ackets from the same source and/or to the same destination are sent over the same link within the trun k.
Chapter 17 L ink Aggr eg a tion XGS-4526/4528F/4728F Use r’s Guide 181 17.4 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 177 for more informat ion on link aggre gation.
Chapter 17 Li nk Aggr eg a tion XGS-4526/4528F/4728F User’s Guide 182 Criteria Sele ct the outgoing traffic distribu tion type. Packets fro m the same source and/or to the same destination are sent ov er the same link within the trunk. By default, the Switch uses the src-dst-mac distribution type.
Chapter 17 L ink Aggr eg a tion XGS-4526/4528F/4728F Use r’s Guide 183 17.5 Link Aggregation Control Protocol Click in the Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to displa y the screen shown next. See Section 17.
Chapter 17 Li nk Aggr eg a tion XGS-4526/4528F/4728F User’s Guide 184 The following table describes t he labels in this screen. 17.6 S t atic T runking Example This example shows you how to create a static port trunk group for ports 2-5.
Chapter 17 L ink Aggr eg a tion XGS-4526/4528F/4728F Use r’s Guide 185 1 Make your physical connections - make sure that the ports that you w ant to belong to the trunk group are connected to the same destina tion. The followin g figure shows ports 2-5 on swit ch A connected to switch B .
Chapter 17 Li nk Aggr eg a tion XGS-4526/4528F/4728F User’s Guide 186.
XGS-4526/4528F/4728F Use r’s Guide 187 C HAPTER 18 Port Authentication This chapter describes the IEEE 802. 1x and MAC authentication methods. 18.1 Port Authentication Overview P ort authentication is a w ay to v alidate access to ports on the Switch to clients based on an external server (authentic ation server).
Chapter 18 Port Authentication XGS-4526/4528F/4728F User’s Guide 188 credentials, the Switch send s an authentication reques t to a RADIUS server . The RADIUS server v alidates whether this client is allowed access to the port. Figure 78 IEEE 802.1x Authentication Process 18.
Chapter 18 Port Authentication XGS-4526/4528F/4728F Use r’s Guide 189 client connecting to a port on the Switch along with a password configured specifically for MAC authenti cation on the Switc h.
Chapter 18 Port Authentication XGS-4526/4528F/4728F User’s Guide 190 18.2.1 Activate IEEE 802.1x Security Use this screen to activ ate IEEE 802.1x security . In the Port Authentication screen click 802. 1x to displa y the configurat ion screen as shown.
Chapter 18 Port Authentication XGS-4526/4528F/4728F Use r’s Guide 191 18.2.2 Guest VLAN When 802.1x port authentication is enable d on the Swit ch and its ports, client s that do not hav e the correct credentials are block ed from using the port(s).
Chapter 18 Port Authentication XGS-4526/4528F/4728F User’s Guide 192 rights gr anted to the Guest VLAN depe nds on how the network administrator configures switches or routers with the gu est network feature. Figure 82 Guest VLAN Example Use this screen to enable and as si gn a guest VLAN to a port.
Chapter 18 Port Authentication XGS-4526/4528F/4728F Use r’s Guide 193 The following table describes t he labels in this screen. T able 45 Advanced Application > Port Authentication > 802.1 x > Guest VLAN LABEL DESCRIPTION P ort This field displays a port number .
Chapter 18 Port Authentication XGS-4526/4528F/4728F User’s Guide 194 18.2.3 Activate MAC Authentication Use this screen to activ ate MAC authentication. In t he Port Authentication screen click MAC Authentication to di splay the configur ation screen as shown.
Chapter 18 Port Authentication XGS-4526/4528F/4728F Use r’s Guide 195 Timeout Specify the amount of time before the Switch allows a client MAC address that fails authentication to try and authenticate again.
Chapter 18 Port Authentication XGS-4526/4528F/4728F User’s Guide 196.
XGS-4526/4528F/4728F Use r’s Guide 197 C HAPTER 19 Port Security This chapter shows you how t o set up port securit y . 19.1 About Port Security P ort security allows only packet s with dynamically learned MAC addresses and/or configured static MAC addresses to pas s through a port on the S witch.
Chapter 19 Port Secu rity XGS-4526/4528F/4728F User’s Guide 198 19.2 Port Security Setup Click Advanced Application > Port Security in the navigati on panel to displa y the screen as shown. Figure 85 Advanced Application > Port Security The following table describes t he labels in this screen.
Chapter 19 Port Security XGS-4526/4528F/4728F Use r’s Guide 199 19.3 VLAN MAC Address Limit Use this screen to set t he MAC address le arning limit on per-port and per- VLAN basis. Click VLAN MAC Address Lim it in the Advanced Application > Port Security screen to display the screen as shown.
Chapter 19 Port Secu rity XGS-4526/4528F/4728F User’s Guide 200 The following table describes t he labels in this screen. T able 48 Advanced Application > Port Secu rity > VLAN MAC Address Limit LABEL DESCRIPTION Active Select this option to activ ate this rule.
XGS-4526/4528F/4728F Use r’s Guide 201 C HAPTER 20 Classifier This chapter introduces and shows you how to configure the packet classif ier on the Switch.
Chapter 20 Classifier XGS-4526/4528F/4728F User’s Guide 202 Click Advanced Application > Classifier in the navigation panel to display the configurati on screen as shown. Figure 87 Advanced Applicatio n > Classifier The following table describes t he labels in this screen.
Chapter 20 Classifier XGS-4526/4528F/4728F Use r’s Guide 203 Layer 2 Specify the fields below to configure a layer-2 classifier . VLAN Select Any to classify traffic from any VLAN or select the second option and specify the source VLAN ID in the field provided.
Chapter 20 Classifier XGS-4526/4528F/4728F User’s Guide 204 20.3 V iewing and Editing Classifier Configuration T o view a summary of t he classifier configur ation, scroll down to the s ummary table at the bottom of the Classifier screen. T o change the settings of a rule, cl ick a number in the Index field.
Chapter 20 Classifier XGS-4526/4528F/4728F Use r’s Guide 205 The following table shows some other common Ethernet types and the corresponding protocol number . Some of the most common IP ports are: Delete Click Delete to remove the selected entry from the summary table.
Chapter 20 Classifier XGS-4526/4528F/4728F User’s Guide 206 20.4 Classifier Example The following screen shows an example of conf iguring a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2.
XGS-4526/4528F/4728F Use r’s Guide 207 C HAPTER 21 Policy Rule This chapter shows you how t o configure policy rules. 21.1 Policy Rules Overview A classifier dist inguishes traffic into flows based on the configured criteria (refer to Chapter 20 on page 201 for more information).
Chapter 21 Policy Rule XGS-4526/4528F/4728F User’s Guide 208 The DSCP value determines the forwarding behavior , the PHB (Per-Hop Behavior), that each pack et gets across the DiffSer v network. Based on the marking rule, different kinds of tr affic can be marked for different kinds of forwarding.
Chapter 21 Policy Rule XGS-4526/4528F/4728F Use r’s Guide 209 Click Advanced Applications > Policy Rule in the navigation panel t o display the screen as shown. Figure 90 Advanced Application > Policy Rule The following table describes t he labels in this screen.
Chapter 21 Policy Rule XGS-4526/4528F/4728F User’s Guide 210 Classifier(s) This field dis plays the active classifier(s) you configure in the Classifier screen. Select the classifier(s) to which this policy rule applies. T o select more than one classifier , press [SHIF T] and select the choices at the same time.
Chapter 21 Policy Rule XGS-4526/4528F/4728F Use r’s Guide 21 1 21.3 V iewing and Editin g Policy Configuration T o view a summary of t he classifier configur ation, scroll down to the s ummary table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field.
Chapter 21 Policy Rule XGS-4526/4528F/4728F User’s Guide 212 The following table describes t he labels in this screen. T able 54 Policy: Summary Table LABEL DESCRIPTION Index This field displays the policy index number . Click an index numbe r to edit the policy .
Chapter 21 Policy Rule XGS-4526/4528F/4728F Use r’s Guide 213 21.4 Policy Example The figure below shows an example Policy screen where y ou configure a policy to limit bandwidth and discard out -of-profi le traffic on a tr affic flow classified using the Example classifier (r efer to Section 20.
Chapter 21 Policy Rule XGS-4526/4528F/4728F User’s Guide 214.
XGS-4526/4528F/4728F Use r’s Guide 215 C HAPTER 22 Queuing Method This chapter introduces the queuing methods supported. 22.1 Queuing Method Overview Queuing is us ed to help solve performa nce degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffi c.
Chapter 22 Q ue u ing Me tho d XGS-4526/4528F/4728F User’s Guide 216 2 ( Weight -1) x 10 KB If the weight setting is 5, the actual quantum guaranteed to the associated queue would be as fol lows: 2 4 x 10KB = 160 KB 22.
Chapter 22 Queuing Method XGS-4526/4528F/4728F Use r’s Guide 217 22.2 Configuring Queuing Click Advanced Application > Queuing Method in the na vigation panel. Figure 93 Advanced Application > Que uing Method The following table describes t he labels in this screen.
Chapter 22 Q ue u ing Me tho d XGS-4526/4528F/4728F User’s Guide 218 Method Select SPQ (Strictly Priority Queuing), WFQ (W eighted F air Queuing) or WRR (W eighted R ound Robin). Strictly Priority services queues based on priority only . When the highest priority queue empties, traffic on the next highest-priority queue begins.
XGS-4526/4528F/4728F Use r’s Guide 219 C HAPTER 23 VLAN Stacking This chapter shows you how t o configure VLAN stacking on your Switch. See the chapter on VLANs for more background information on Virtual LAN 23.
Chapter 23 VLAN Stacking XGS-4526/4528F/4728F User’s Guide 220 distinguish customer A and tag 48 to disti nguish customer B at ed ge device 1 and then stripping those tags at edge device 2 as the data frames leav e the network. Figure 94 VLAN S tacking Example 23.
Chapter 23 VLAN Stacking XGS-4526/4528F/4728F Use r’s Guide 221 23.3 VLAN T ag Format A VLAN tag (service pro vider VLAN st acki ng or customer IEEE 802.1Q) consists of the following th ree fields. Type is a standard Ethernet type code id entifying the fr ame and indicates that whether the frame carries IEEE 802.
Chapter 23 VLAN Stacking XGS-4526/4528F/4728F User’s Guide 222 Configure the fields as highlighted in the Switch VLAN Stacking screen. 23.4 Configuring VLAN S t acking Click Advanced Applications > VLAN Stacking to disp l ay the sc re en as shown.
Chapter 23 VLAN Stacking XGS-4526/4528F/4728F Use r’s Guide 223 The following table describes t he labels in this screen. 23.4.1 Port-based Q-in-Q Port -based Q-in-Q lets t he Switc h tre at a ll frames receiv ed on the same port as the same VLAN flows and add the same ou ter VLAN tag to them, even they have different customer VLAN IDs.
Chapter 23 VLAN Stacking XGS-4526/4528F/4728F User’s Guide 224 Click Port-based QinQ in the Advanced Application > VLAN Stacking screen to display the screen as shown. Figure 96 Advanced Application > VLAN S t acking > Port-based QinQ The following table describes t he labels in this screen.
Chapter 23 VLAN Stacking XGS-4526/4528F/4728F Use r’s Guide 225 Note: Selective Q-in-Q rules are only ap plied to single-t agged frames received on th e access ports.
Chapter 23 VLAN Stacking XGS-4526/4528F/4728F User’s Guide 226 P ort This is the port number to which this rule is applied. CVID This is the customer VLAN ID in the incoming packets. SPVID This is the service provider’s VLAN ID that adds to the pack ets from the subscribers.
XGS-4526/4528F/4728F Use r’s Guide 227 C HAPTER 24 Multicast This chapter shows you how t o configure various multicast features. 24.1 Multicast Overview T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network).
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 228 24.1.3 IGMP Snooping The Switch can passively snoop on IGMP pack ets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership.
Chapter 24 Multicast XGS-4526/4528F/4728F Use r’s Guide 229 24.3 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to display the screen as shown. See Section 24.1 on page 227 for more i nformation on multicasting.
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 230 IGMP Filtering Select Active to enable IGMP filtering to control w hich IGMP gr o ups a subscriber on a port can join. Note: If you enable IGMP filterin g, you must create a nd assign IGMP filtering profiles for the port s that you want to allow to join multicast group s.
Chapter 24 Multicast XGS-4526/4528F/4728F Use r’s Guide 231 F ast Leave Enter an IGMP fast leave timeout value (from 200 to 6,348,800) in miliseconds. Select this option to ha ve the Switch use this timeout to update the forwarding table for the port.
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 232 24.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the screen as shown.
Chapter 24 Multicast XGS-4526/4528F/4728F Use r’s Guide 233 24.5 IGMP Filtering Profile An IGMP filter in g profile sp ec if ies a range of multic as t groups th at cl ie nts connected to the Switch are able to join. A profile contains a r ange of multicast IP addresses which you w ant cli ents to be able to join.
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 234 Click Advanced Applications > Multicast > Multicast Setting > IGMP Filtering Profile link to display th e sc re en as shown.
Chapter 24 Multicast XGS-4526/4528F/4728F Use r’s Guide 235 24.6 MVR Overview Multicast VLAN R egist ration (MVR) is designed for applications (such as Media-on- Demand (MoD)) that use multicast tr affic across an Ethernet ring-based service provider network.
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 236 Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associated multicast group . 24.6.2 MVR Modes Y ou can set your Switch to operate in either dynamic or compatible mode.
Chapter 24 Multicast XGS-4526/4528F/4728F Use r’s Guide 237 24.7 General MVR Configuration Use the MVR screen to create multicast VL ANs and select the receiv er port(s) and a source port for each multicast VLAN. Click Advanced Applications > Multicast > Multicast Setting > MVR link to disp l ay th e sc reen as shown next.
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 238 802.1p Priority Select a priority level (0 -7) with which the Switch replaces the priority in outgoing IGMP control packets (bel onging to this multicast VLAN). Mode Spe cify the MVR mode on the Switch.
Chapter 24 Multicast XGS-4526/4528F/4728F Use r’s Guide 239 24.8 MVR Group Configuration All source ports and receiv er ports belo nging to a multicast group can recei ve multicast data sent to thi s multicast group. Configure MVR IP mul ticast group address(es) in the Group Configuration screen.
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 240 24.8.1 MVR Configuration Example The following figure shows a network ex ample where ports 1, 2 and 3 on the Switch bel ong to VLAN 1.
Chapter 24 Multicast XGS-4526/4528F/4728F Use r’s Guide 241 T o configure the MVR settings on the S w itch, create a mul ticast group in the MVR screen and set the receiv er and source ports.
Chapter 24 Multicast XGS-4526/4528F/4728F User’s Guide 242 following figure shows an exa mpl e where two multicast groups ( News and Movie ) are configured for the multicast VLAN 200.
XGS-4526/4528F/4728F Use r’s Guide 243 C HAPTER 25 AAA This chapter describes how to config ure authentication, authorization and accounting se ttings on th e Switch . 25.1 Authentication, Authorization and Accounting (AAA) Authentication is the process of determin ing who a user is and validating access to the Switch.
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 244 25.1.2 on page 244 ) as external authentication, authorization and accounting servers. Figure 1 10 AAA Server 25.1.1 Local User Account s By storing user profiles locally on the S wit ch, your Swit ch is able to authenticate and authorize users without inter acting wi th a network AAA server .
Chapter 25 AAA XGS-4526/4528F/4728F Use r’s Guide 245 Click Advanced Application > AAA in the navigation panel to displa y the screen as shown. Figure 1 1 1 Advanced Application > AAA 25.2.1 RADIUS Server Setup Use this screen to configure yo ur RADIUS server settings.
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 246 The following table describes t he labels in this screen. T able 69 Advanced Application > AAA > RADIUS Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure your RADIUS authentication settings.
Chapter 25 AAA XGS-4526/4528F/4728F Use r’s Guide 247 25.2.2 T A CACS+ Server Setup Use this screen to configure yo ur T ACACS+ server settings. See Section 25.1. 2 on page 244 for more information on T ACACS+ se rvers. Click on the TACACS+ Server Setup link in the Authentication and Accountin g screen to view the screen as shown.
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 248 The following table describes t he labels in this screen. T able 70 Advanced Application > AAA > T ACACS+ Server Setup LABEL DESCRIPTION Authentication Server Use this section to configure y our T ACACS+ authentication settings.
Chapter 25 AAA XGS-4526/4528F/4728F Use r’s Guide 249 25.2.3 AAA Setup Use this screen to configure authentication , authorization and accounting settings on the Switch.
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 250 The following table describes t he labels in this screen. T able 71 Advanced Application > AAA > AAA Setup LABEL DESCRIPTION Authentication Use this section to specify the methods used to authenticate users accessing the Switch.
Chapter 25 AAA XGS-4526/4528F/4728F Use r’s Guide 251 T ype Set whether the Switch provides the following services to a user . • Exec : Allow an administrator which logs in the S witch through T elnet or SSH to hav e different access privilege level assigned via the external server .
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 252 25.2.4 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access d evice (for example, the Switch).
Chapter 25 AAA XGS-4526/4528F/4728F Use r’s Guide 253 25.2.5 T unnel Protocol Attribute Y ou can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 254 25.3 Supported RADIUS Attributes Remote A uthentication Dial- In User Servic e (RADIUS) attributes are data used to define specific authenticati on, and accounti ng elements in a user profile, which is stored on the RADIUS server .
Chapter 25 AAA XGS-4526/4528F/4728F Use r’s Guide 255 - This value is se t t o Ethernet(15) on the Switch. Calling-Stati on-Id Frame-MTU EAP-Message State Message-Authenticator 25.3.2 Attributes Used for Accounting The following sections list the attributes sent from the Switch to the RADIUS server when performi ng authenti ca tion.
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 256 25.3.2.3 Attributes Used for Ac counting IEEE 802.1x Event s The attributes are listed in the following table along with the ti me of the session.
Chapter 25 AAA XGS-4526/4528F/4728F Use r’s Guide 257 Acct- Input-Gigawords DD Acct-Output - Gigawords DD T able 76 RADIUS Attributes - Exec Events via Console ATTRIBUTE START INTERIM-UP D ATE STOP.
Chapter 25 AAA XGS-4526/4528F/4728F User’s Guide 258.
XGS-4526/4528F/4728F Use r’s Guide 259 C HAPTER 26 IP Source Guard Us e I P s o ur ce g ua r d t o f i lt er unauthorized DHC P and AR P packets in your network. 26.1 IP Source Guard Overview IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in yo ur network.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 260 26.1.1 DHCP Snooping Overview Use DHCP s nooping t o filter u nau th orized DHCP packets on the netwo rk and to build the binding tab le dynamically . This can prevent clients from getting IP addresses from unauthorized DHCP servers.
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 261 Y ou can configure the nam e and location of the file on the external TF TP server .
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 262 3 Configure trusted and untrusted ports, an d specify the maximum number of DHCP packets t hat each port can receive per second. 4 Configure static bindings. 26.1.2 ARP Inspection Overview Use ARP inspection to filter unauthorized ARP packets on the network.
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 263 • They ap pe ar only in the ARP Inspection screens and commands, not in the MAC Address Filter screens and commands. 26.1.2.2 T rusted vs. Untrusted Port s Every port is either a trusted port or an untrusted p o rt for A R P inspecti on.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 264 the bindings by snooping DHCP packets (dynami c bindings) and from informati on provided manually by administr ators (static bindings). T o open this screen, click Advanced Application > IP Source Guard .
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 265 new static binding replaces the origin al one. T o open this screen, click Advanced Application > IP Source Guard > Static Binding . Figure 1 18 IP Source Guard S tatic Binding The following table describes t he labels in this screen.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 266 26.4 DHCP Snooping Use this scre en to look at various statis tics about the DHCP snooping database. T o open this screen, click Advanced Application > IP Source Guard > DHCP Snooping .
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 267 The following table describes t he labels in this screen. T able 79 DHCP Snooping LABEL DESCRIPTION Database Status This section displays the current settings for the DHCP snooping database.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 268 Successful transfers This field displays the number of times the Switch read bindings from or updated the bindings in the DHC P snooping database successfully .
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 269 26.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and conf igure the DHCP snooping database.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 270 The following table describes t he labels in this screen. T able 80 DHCP Snooping Configure LABEL DESCRIPTION Active Sele ct this to enable DHCP snooping on the Switch. Y ou still ha ve to enable DHCP snooping on specific VLAN and specif y trusted ports.
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 271 26.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are trusted or untrusted ports for DHCP snooping. Note: The Switch will drop all DHCP requests if you enable DHCP snooping and there are no trusted ports.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 272 The following table describes t he labels in this screen. 26.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snoopin.
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 273 open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN . Figure 122 DHCP Snooping VLAN Configure The following table describes t he labels in this screen.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 274 26.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were c reated because the Switch identified an unau thorized ARP pack et.
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 275 26.6.1 ARP Inspection VLAN St atus Use this screen to look at various statistics about ARP p ackets in each VL AN. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status .
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 276 26.6.2 ARP Inspection Log St atus Use this scre en t o look at lo g m es s a g e s th at we re generated by ARP pac kets and that have not been sent to the syslog server yet. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status .
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 277 26.7 ARP Inspection Configure Use this screen to enable ARP inspection on the Swit ch. Y ou can also configure the length of time the Switch stores reco rds of discarded ARP pack ets and global settings for the ARP inspection log.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 278 The following table describes t he labels in this screen. T able 86 ARP Inspection Configure LABEL DESCRIPTION Active Select this to enable ARP inspection on the Switch. Y ou still have to enable ARP inspection on specific VLAN and specify trusted ports.
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 279 26.7.1 ARP Inspection Port Configure Use this screen to specify whether port s are trusted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at which the Sw itch receives ARP packets on each untrusted po rt.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 280 26.7.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specif y when the Switch gener ates log messages for receiv ing ARP packets from each VLAN.
Chapter 26 IP Source Guard XGS-4526/4528F/4728F Use r’s Guide 281 Enabled Select Yes to enable ARP inspection on the VLAN. Select No to disable ARP inspection on the VLAN. Log Specify when the Switch generates log messages for receiving ARP packets from the VLAN.
Chapter 26 IP Source G uard XGS-4526/4528F/4728F User’s Guide 282.
XGS-4526/4528F/4728F Use r’s Guide 283 C HAPTER 27 Loop Guard This chapter shows you how to config ure the Swit ch to guard against loops on the edge of your network. 27.1 Loop Guard Overview Loop guard allows you to configure the S w itch to shut down a port if it detects that packets sent out on that port loop back to the Swit ch.
Chapter 27 Loop Guard XGS-4526/4528F/4728F User’s Guide 284 • It will receive its own broadcast messages that it sends out as they lo op back. It will then re-broadcast those messages agai n. The following figure shows port N on switch A connected to switch B .
Chapter 27 Loop Guar d XGS-4526/4528F/4728F Use r’s Guide 285 port N . The Switch will shut down port N if it detects that the probe packet has returned to the Switch. Figure 132 Loop Guard - Network L oop Note: After resolving the loop problem on your network you can re-activate the disabled port via the web configurator (se e Section 8.
Chapter 27 Loop Guard XGS-4526/4528F/4728F User’s Guide 286 The following table describes t he labels in this screen. T able 89 Advanced Application > Loop Guard LABEL DESCRIPTION Active Select this option to enable loop guard on the Switch.
XGS-4526/4528F/4728F Use r’s Guide 287 C HAPTER 28 VLAN Mapping This chapter shows you how t o conf igure VLAN mapping on the Switch. 28.1 VLAN Mapping Overview With VLAN mapping enabled, the S witch ca n map the VLAN ID and priority leve l of packets received from a priv ate network to those used in the service provider’ s network.
Chapter 28 VLAN Ma p ping XGS-4526/4528F/4728F User’s Guide 288 28.2 Enabling VLAN Mapping Click Advanced Application and then VLAN Mapping in the navigation panel to display the s creen as shown. Figure 135 VLAN Mapping The following table describes t he labels in this screen.
Chapter 28 VLAN Mapping XGS-4526/4528F/4728F Use r’s Guide 289 28.3 Configuring VLAN Mapping Click the VLAN Mapping Configure link in the VLA N Mapping screen to displa y the screen as shown. Use this screen to enable an d edit the VLAN mapping rule(s).
Chapter 28 VLAN Ma p ping XGS-4526/4528F/4728F User’s Guide 290 P ort This is the port numbe r to which this rule is applied. VID This is the customer VLAN ID in the incoming packets. T ranslated VID This is the VL AN ID that repl aces the customer VLAN ID in the tagged packets.
XGS-4526/4528F/4728F Use r’s Guide 291 C HAPTER 29 Layer 2 Protocol Tunneling This chapter shows you how to confi gure l ay er-2 protocol tunnel ing on the S wit ch. 29.1 Layer 2 Protocol T unneling Overview Layer-2 protocol tunneling (L2PT) is used on the service provider's edge devices.
Chapter 29 Layer 2 Prot ocol Tunne ling XGS-4526/4528F/4728F User’s Guide 292 2 for P AgP (Port Aggreg ation Protocol), LACP or UDLD (UniDirecti onal Link Detection). Figure 138 L2P T Network Example 29.1.1 Layer-2 Protocol T unneling Mode Each port can hav e two laye r-2 protocol tunneli ng modes, Access and Tunne l .
Chapter 29 Layer 2 Protocol Tunneling XGS-4526/4528F/4728F Use r’s Guide 293 29.2 Configuring Layer 2 Protocol T unneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown.
Chapter 29 Layer 2 Prot ocol Tunne ling XGS-4526/4528F/4728F User’s Guide 294 * Use this row to make the setting th e same for all ports. Use this row first and then make adjustments on a port-by -port basis. Note: Changes in this row are copied to all the ports as soon as you make them.
XGS-4526/4528F/4728F Use r’s Guide 295 C HAPTER 30 sFlow This chapter shows you how t o configure sFlow to have t he Switch monitor tr affic in a network and send information to an sFlow collector for analysis. 30.1 sFlow Overview sFlow (RFC 3176) is a standard technology for monitoring switched networks.
Chapter 30 sFlo w XGS-4526/4528F/4728F User’s Guide 296 30.2 sFlow Port Configuration Click Advanced Application > sFlow in the navigation panel to displ ay the screen as shown. Figure 141 Advanced App lication > sFlow The following table describes t he labels in this screen.
Chapter 30 sFlow XGS-4526/4528F/4728F Use r’s Guide 297 30.2.1 sFlow Collector Configuration Click the Collector link in th e sFlow screen to display the screen as shown.
Chapter 30 sFlo w XGS-4526/4528F/4728F User’s Guide 298 The following table describes t he labels in this screen. T able 94 Advanced Application > sFlow > Collector LABEL DESCRIPTION Collector Address Enter the IP address of the sFlow collector .
XGS-4526/4528F/4728F Use r’s Guide 299 C HAPTER 31 PPPoE This chapter describes how the S witch gives a PPP oE termination server additional information that the server can use to id enti fy and authentica te a PPPoE client.
Chapter 31 PPP oE XGS-4526/4528F/4728F User’s Guide 300 31.1.2 Sub-Option Format There are two types of sub-option: “ Age nt Circuit ID Sub- option” and “ Agent Remote ID Sub-option” .
Chapter 31 PPPoE XGS-4526/4528F/4728F Use r’s Guide 301 31.1.2.2 WT -101 Default Circuit ID Synt ax If you do not configure a Circuit ID string for a specif ic VLAN on a port or for a specific port,.
Chapter 31 PPP oE XGS-4526/4528F/4728F User’s Guide 302 31.2 The PPPoE Screen Use this screen to configure the PPP o E Intermediate Agent on the Switch. Click Advanced Application > PPPoE in the navigation panel to display the screen as shown. Click Click Here to go to the Intermediate Agent screen.
Chapter 31 PPPoE XGS-4526/4528F/4728F Use r’s Guide 303 The following table describes t he labels in this screen. 31.3.1 PPPoE IA Per-Port Use this screen to specif y whether individual ports are trusted or untrusted ports and have the S witch add extra information to PPP oE discov ery packets from PPP oE clients on a per -port basis.
Chapter 31 PPP oE XGS-4526/4528F/4728F User’s Guide 304 Note: The Switch will drop all PPPoE pa cket s if you enable the PPPoE Intermediate Agent on the Switch and there are n o trusted ports. Click the Port link in the Intermediate Agent screen to display the screen as shown.
Chapter 31 PPPoE XGS-4526/4528F/4728F Use r’s Guide 305 31.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPP oE IA setti ngs that apply to a specific VLAN on a port. Server Tr u s t e d S t a t e Select whether this port is a trusted port ( Trusted ) or an untrusted port ( Untrusted ).
Chapter 31 PPP oE XGS-4526/4528F/4728F User’s Guide 306 Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. Figure 146 Advanced Application > PPPoE > Inte rmediate Agent > Port > VLAN The following table describes t he labels in this screen.
Chapter 31 PPPoE XGS-4526/4528F/4728F Use r’s Guide 307 31.3.3 PPPoE IA for VLAN Use this screen to set whether the PPPoE In termedi ate Agent is enabled on a VLAN and whether the Switch appends the Circ uit ID and/or Remote ID to PPPoE discove ry packets from a speci fic VLAN.
Chapter 31 PPP oE XGS-4526/4528F/4728F User’s Guide 308 The following table describes t he labels in this screen. T able 103 Advanced Application > PPPoE > Intermediate Agent > VLAN LABEL DESCRIPTION Show VL AN Use this section to specify the VLANs you want to configure in the section below .
XGS-4526/4528F/4728F Use r’s Guide 309 C HAPTER 32 Error Disable This chapter shows you how t o configure the rate limit for contro l p a c kets on a port, and set the Switch t o take an action (such as to shut down a port or stop sending packets) on a port when the Switc h detects a pre-configured error .
Chapter 32 Error Disable XGS-4526/4528F/4728F User’s Guide 310 32.3 The Error Disable Screen Use this screen to configure error disable related settings. Click Advanced Application > Errdisable in the navigation p anel to open the following screen.
Chapter 32 Error Disa b le XGS-4526/4528F/4728F Use r’s Guide 31 1 The following table describes t he labels in this screen. 32.5 Error-Disable Detect Configuration Use screen to have the Switch detect whet her the control packets exceed the rate limit configured for a port and configure the action to take once the limit is exceeded.
Chapter 32 Error Disable XGS-4526/4528F/4728F User’s Guide 312 The following table describes t he labels in this screen. T able 105 Advanced Application > Errd isable > Errdisable Detect LABEL DESCRIPTION Cause This field displays the types of control packet that may cause CPU overload.
Chapter 32 Error Disa b le XGS-4526/4528F/4728F Use r’s Guide 313 32.6 Error-Disable Recovery Configuration Use this screen to to configure the Switch to automatically undo an action after the error is gone. Click the Click Here link next to Errdisable Recovery in the Advanced Application > Errdisable screen to display the screen as shown.
Chapter 32 Error Disable XGS-4526/4528F/4728F User’s Guide 314.
XGS-4526/4528F/4728F Use r’s Guide 315 C HAPTER 33 Private VLAN This chapter shows you how t o configure the Switc h to prevent communications between ports in a VLAN. 33.1 Private VLAN Overview Private VLAN all ows you to do port isolati on within a VLAN in a simple way .
Chapter 33 Private VLAN XGS-4526/4528F/4728F User’s Guide 316 33.2 Configuring Private VLAN Click Advanced Application > Private VLAN in the navigati on panel to displa y the screen as shown. Figure 153 Advanced Applicatio n > Private VLAN The following table describes t he labels in this screen.
Chapter 33 Private VLAN XGS-4526/4528F/4728F Use r’s Guide 317 Delete Check the rule(s) that you want to remo ve in the Delete column and then click the Delete button.
Chapter 33 Private VLAN XGS-4526/4528F/4728F User’s Guide 318.
XGS-4526/4528F/4728F Use r’s Guide 319 C HAPTER 34 Static Route This chapter shows you how t o configure static routes. 34.1 S t atic Routing Overview The Switch usually uses the default ga teway to route outbou nd traffic from computers on the LAN to the Internet.
Chapter 34 Stat ic Route XGS-4526/4528F/4728F User’s Guide 320 34.2 Configuring S t atic Routing Click IP Application > Static Routing in the navigation p anel to display the screen as shown. Figure 155 IP Ap plication > S t atic Routing The following table describes t he related labe ls you use to create a static route.
Chapter 34 Static Route XGS-4526/4528F/4728F Use r’s Guide 321 Index This field displays the index number of the route. Click a number to edit the static route entry . Active This field displays Yes when the static route is activated and NO when it is deactivated.
Chapter 34 Stat ic Route XGS-4526/4528F/4728F User’s Guide 322.
XGS-4526/4528F/4728F Use r’s Guide 323 C HAPTER 35 Policy Routing This chapter shows you how t o configure policy routing rul es. 35.1 Policy Route Overview T raditionally , routing is based on the destination address only and the Switch t akes the shortest path to forward a packet.
Chapter 35 Po licy Routing XGS-4526/4528F/4728F User’s Guide 324 35.2 Configuring Policy Routing Profile Click IP Application > Policy Routing in the navigation panel to display the screen as shown. Use this screen to conf igure a policy routin g profile, which can consist of multiple policy rout ing rules.
Chapter 35 Policy Routing XGS-4526/4528F/4728F Use r’s Guide 325 35.2.1 Policy Routing Rule Configuration Y ou must first configu re a layer-3 classifier in the Classifier screen (see Section 20.2 on page 201 ) and a policy routing profile in the Policy Routing screen (see Section 35.
Chapter 35 Po licy Routing XGS-4526/4528F/4728F User’s Guide 326 The following table describes t he labels in this screen. T able 1 10 IP Application > Policy Routing > Rule Configuration LABEL DESCRIPTION Profile Name This field displays the policy routing profile(s) you configure in the IP Application > Policy Routing scree n.
XGS-4526/4528F/4728F Use r’s Guide 327 C HAPTER 36 RIP This chapter shows you how t o configure RIP (R outing Information Protocol). 36.1 RIP Overview RIP (Routing Information Protocol) allows a routin g d ev ice to exchan ge routing information with other routers.
Chapter 36 RI P XGS-4526/4528F/4728F User’s Guide 328 uses the route that has the lowest metr ic v alue. The following table lists the default administr ative distance v alue of the route sources supported on the Swit ch . 36.2 Configuring RIP Click IP Application > RIP in the navigation panel to display the screen as shown.
Chapter 36 RIP XGS-4526/4528F/4728F Use r’s Guide 329 Network This field displays the IP in terface configured on the Switch. R efer to the section on IP Setup for more information on configuring IP domains. Direction Select the RIP direction from the drop-down list box.
Chapter 36 RI P XGS-4526/4528F/4728F User’s Guide 330.
XGS-4526/4528F/4728F Use r’s Guide 331 C HAPTER 37 OSPF This chapter describes the OSPF ( Open Shor test P ath First) routing protocol and shows you how to config ure OSPF . 37.1 OSPF Overview OSPF (Open Shortest P ath First) is a link -state protocol designed to dis tribute routing information within an autonomous system (AS).
Chapter 37 OSPF XGS-4526/4528F/4728F User’s Guide 332 The following table describes t he four classes of OSPF routers. The following figure depicts an OSPF ne twork example. The backbone is area 0 with a backbone router . The internal route r s ar e in area 1 and 2.
Chapter 37 OSPF XGS-4526/4528F/4728F Use r’s Guide 333 When you configu re an OSPF interface, y ou first set an interfa ce to transmit OSP F traffic and add the interface to an area. Y ou can configure a virtual link to estab lish/maintain connectivity between a non- backbone area and the backbone.
Chapter 37 OSPF XGS-4526/4528F/4728F User’s Guide 334 2 Create OSPF areas 3 Create and associate interface(s) to an area 4 Create virt ual links to maintain backbone connec tivity . 37.2 OSPF S t atus Use this screen to view cu rrent OSPF status. Click IP Application > OSPF in the navigation panel to display the screen as s hown next.
Chapter 37 OSPF XGS-4526/4528F/4728F Use r’s Guide 335 The following table describes some c ommon output fields. Link State Database The text box displays information in the link state database which contains data in the LSAs. P oll Interval(s) The text bo x displays how often (in seconds) this screen refreshes.
Chapter 37 OSPF XGS-4526/4528F/4728F User’s Guide 336 37.3 OSPF Configuration Use this screen to ac tiv ate OSPF and s et gener al setting s. Cl ick IP Application > OSPF and the Configuration link to display the OSPF Configuration screen. See Section 37.
Chapter 37 OSPF XGS-4526/4528F/4728F Use r’s Guide 337 37.4 Configure OSPF Areas T o ensure that the Switch receives only routing informati on from a tr usted la yer -3 devices, activ ate authentication. The OSPF supports three levels of authentication: • None – no authentication is used.
Chapter 37 OSPF XGS-4526/4528F/4728F User’s Guide 338 T o configure an area, set the related fields in the OSPF Configuration screen. Figure 163 IP Ap plication > OSPF Configuration: Area Setup The following table describes t he related labels in this screen.
Chapter 37 OSPF XGS-4526/4528F/4728F Use r’s Guide 339 37.4.1 V iew OSPF Area Information T able The bottom of the OSPF Configuration screen displays a summary table of all the OSPF areas you hav e configured. Figure 164 IP Ap plication > OSPF Configuration: Summary T able The following table describes t he related labels in this screen.
Chapter 37 OSPF XGS-4526/4528F/4728F User’s Guide 340 In the OSPF Configuration screen, click Redistribu te to displ ay the OSPF Redistribution screen. Figure 165 IP Ap plication > OSPF Configuration > Redistribute The following table describes t he labels in this screen.
Chapter 37 OSPF XGS-4526/4528F/4728F Use r’s Guide 341 37.6 Configuring OSPF Interfaces T o configure an OSPF interface, first create an IP routing domain in the IP Setup screen (see Section 8.6 on page 110 f o r m o r e i n f o r m a t i o n ) . O n c e y o u c r e a t e a n I P routing domain, an OSPF interface en try is automati cally created.
Chapter 37 OSPF XGS-4526/4528F/4728F User’s Guide 342 The following table describes t he labels in this screen. T able 121 IP Application > OSPF Configuration > OSPF In terface LABEL DESCRIPTION Network Select an IP inte rface.
Chapter 37 OSPF XGS-4526/4528F/4728F Use r’s Guide 343 37.7 OSPF V irtual-Links Configure and view virtual link s ettings in this screen. See Section 37.1 on page 331 for more information on OSPF . In the OSPF Configuration screen, click Virtual-Link to display the screen as shown next.
Chapter 37 OSPF XGS-4526/4528F/4728F User’s Guide 344 Authenticatio n Note: Vi rtual interface(s) must use the same authentication method within the same area. Select an authentication method. The choices are Same-as-Area , None (default), Simple and MD5 .
XGS-4526/4528F/4728F Use r’s Guide 345 C HAPTER 38 IGMP This chapter shows y ou how to configure the Switch as a multicast rout er . See also Section 24.4 on page 232 for information on IGMP snooping. 38.1 IGMP Overview IP multicast is an IETF standard for dist ributi ng data to multiple recipients.
Chapter 38 IG M P XGS-4526/4528F/4728F User’s Guide 346 IGMP (Internet Group Management Protocol) is used b y multicast hosts to indicate their multicast group membership to mul tic ast routers. Multicast routers can also use IGMP to periodical ly chec k if multic as t hosts still want t o receive tr ansmission from a mult i c ast serv er .
Chapter 38 IGMP XGS-4526/4528F/4728F Use r’s Guide 347 on a particular network. This in turn he lps reduce the amount of multicast tr affic going through the multicast router .
Chapter 38 IG M P XGS-4526/4528F/4728F User’s Guide 348 38.3 Configuring IGMP Click IP Application > IGMP in the navigation panel to di splay the screen as shown next. Ea ch entry in the table is automa tically cre ated when you configure a new IP dom a in in the IP Setup screen (refer to Section 8.
XGS-4526/4528F/4728F Use r’s Guide 349 C HAPTER 39 DVMRP This chapter introduces DVMRP and tells you how to configure i t. 39.1 DVMRP Overview DVMRP (Distance V ector Multicast Ro uting Pr otocol) is a protocol used for routing multicast data within an aut onomous system (AS).
Chapter 39 DV MR P XGS-4526/4528F/4728F User’s Guide 350 4 The final m ulticas t (“ M ”) after pruning and gr afting is shown in the next figure. Figure 173 How DVMRP Works 39.2.1 DVMRP T erminology DVMRP probes are used to discover other DVMRP Neighbors on a network.
Chapter 39 DVMRP XGS-4526/4528F/4728F Use r’s Guide 351 The following table describes t he labels in this screen. 39.3.1 DVMRP Configuration Error Messages Y ou must have IGMP enabled when you enable DVMRP; otherwise you see the screen as in the next figure.
Chapter 39 DV MR P XGS-4526/4528F/4728F User’s Guide 352 Each IP routing domain DVMRP configuratio n must be in a different VLAN group; otherwise you see the following screen. Figure 177 DVMRP: Duplicate VID Error Message 39.4 Default DVMRP T imer V a lues The following are some default DVMRP timer values.
XGS-4526/4528F/4728F Use r’s Guide 353 C HAPTER 40 Differentiated Services This chapter shows you how to conf igure Di fferentiated Services (DiffServ) on the Swit ch . 40.1 DiffServ Overview Quality of Service (QoS) is used to prioriti ze source-to-destination tr affic flows.
Chapter 40 Differe ntiated Services XGS-4526/4528F/4728F User’s Guide 354 kinds of tr affic can be marked fo r di fferent p riorities of forw arding.
Chapter 40 Differentiated Services XGS-4526/4528F/4728F Use r’s Guide 355 specifies the a verag e rate at which packets are admitted to the network. The PIR is greater than or equal to the CIR. CIR and PIR v alues are based on the guaranteed and maximum bandwidth respectiv e ly as negotiated between a service provider and client.
Chapter 40 Differe ntiated Services XGS-4526/4528F/4728F User’s Guide 356 decrease it. P ackets that have been previo usly marked red or yellow can only be marked with an equal or higher pack et loss priority . P a ck ets marked red (high packet loss priority) continue to be red without eval uation against the PIR or CIR .
Chapter 40 Differentiated Services XGS-4526/4528F/4728F Use r’s Guide 357 The following table describes t he labels in this screen. 40.3.1 Configuring 2-Rate 3 Color Marker Settings Use this screen to configur e TR TCM settings. Click the 2-rat e 3 Color Marker link in the DiffServ screen to display the screen as shown next .
Chapter 40 Differe ntiated Services XGS-4526/4528F/4728F User’s Guide 358 Note: Y ou cannot enable both TR TCM and Bandwid th Control at the same time. Figure 183 IP Ap plication > DiffServ > 2-rate 3 Color Marker The following table describes t he labels in this screen.
Chapter 40 Differentiated Services XGS-4526/4528F/4728F Use r’s Guide 359 40.4 DSCP-to-IEEE 802.1p Priority Settings Y ou can configure the DSCP to IEEE 802.1p mapping to allow the Swit ch to prioritize all tr affi c based on the incoming DSCP v alue according to the DiffServ to IEEE 802.
Chapter 40 Differe ntiated Services XGS-4526/4528F/4728F User’s Guide 360 40.4.1 Configuring DSCP Settings T o change the DSCP-IEEE 802. 1p mapping, click the DSCP Setting link in the DiffServ screen to display the screen as shown next.
XGS-4526/4528F/4728F Use r’s Guide 361 C HAPTER 41 DHCP This chapter shows you how t o configure the DHCP feature. 41.1 DHCP Overview DHCP (Dynamic Host Configur ation Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP conf iguration at start-up from a server .
Chapter 41 DHCP XGS-4526/4528F/4728F User’s Guide 362 • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can be configured as a DHCP server for one VLAN and at the same time the Switch can be configured to relay DHCP requests for clients in another VLAN.
Chapter 41 DHCP XGS-4526/4528F/4728F Use r’s Guide 363 this screen to view detail s regarding DH CP server set tings conf igured on the Swit ch . Figure 186 IP Application > DHCP > DHCP Server S tatus Detail The following table describes t he labels in this screen.
Chapter 41 DHCP XGS-4526/4528F/4728F User’s Guide 364 41.4 DHCP Relay Configure DHCP relay on the Switch if the DHCP client s and the DHCP server are not in the same broadcast domain.
Chapter 41 DHCP XGS-4526/4528F/4728F Use r’s Guide 365 41.4.2 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP Relay screen. Click IP Application > DHCP in the navigation panel and click the Global link to display the scre en as shown.
Chapter 41 DHCP XGS-4526/4528F/4728F User’s Guide 366 41.4.3 Global DHCP Relay Configuration Example The follow figure shows a network exampl e where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains.
Chapter 41 DHCP XGS-4526/4528F/4728F Use r’s Guide 367 41.5 Configuring DHCP VLAN Settings Use this screen to configure your DHCP se ttings based on the VLAN domain of the DHCP clients. Cl ick IP Application > DHCP in the navigation panel, then click the VLAN link In the DHCP Status screen that displays.
Chapter 41 DHCP XGS-4526/4528F/4728F User’s Guide 368 Server Use this section if you want to conf igure the Switch to function as a DHCP server for this VLAN. Client IP P ool Starting Address Specify the first of the contiguous addresses in the IP address pool.
Chapter 41 DHCP XGS-4526/4528F/4728F Use r’s Guide 369 41.5.1 Example: DHCP Relay for T wo VLANs The following example dis plays two VLANs (VIDs 1 and 2) for a campus network.
Chapter 41 DHCP XGS-4526/4528F/4728F User’s Guide 370 For the example netw ork, configure the VLAN Setting screen as shown. Figure 192 DHCP Relay for T wo VLANs Configuration Example EXAMPLE.
XGS-4526/4528F/4728F Use r’s Guide 371 C HAPTER 42 VRRP This chapter shows you how t o configure and monitor the Virtual R outer Redundancy Protocol (VRRP) on the S witch. 42.1 VRRP Overview Each host on a network is configured to send packets t o a statically configured default gateway (this S w i tch).
Chapter 42 VRRP XGS-4526/4528F/4728F User’s Guide 372 default gateway . If switch A has a higher priority , it is the master router . Switch B , having a lower priority , is the backup router . Figure 193 VRRP: Example 1 If switch A (the master router) is unav ailable, switch B takes ov er .
Chapter 42 VR RP XGS-4526/4528F/4728F Use r’s Guide 373 42.3 VRRP Configuration The following sections describe the different parts of the VRRP Configur ation screen. 42.3.1 IP Interface Setup Before configuring VRRP , first create an IP interface (or routing domain) i n the IP Setup screen (see the Section 8.
Chapter 42 VRRP XGS-4526/4528F/4728F User’s Guide 374 Note: Routing domains with the sa me VLAN ID are not displayed in the t able indicated. Figure 195 IP Ap plication > VRRP Configuration > IP Interface The following table describes t he labels in this screen.
Chapter 42 VR RP XGS-4526/4528F/4728F Use r’s Guide 375 42.3.2 VRRP Parameters This section describes the VRRP parameters. 42.3.2.1 Advertisement Interval The master router sends out Hel lo message s to let the ot her backup routers know that it is still up and running.
Chapter 42 VRRP XGS-4526/4528F/4728F User’s Guide 376 42.3.3 Configuring VRRP Parameters After you set up an IP interface, co nfigure the VRRP par ameters in the VRRP Configuration screen. Figure 196 IP Ap plication > VRRP Configuration > VRRP Parameters The following table describes t he labels in this screen.
Chapter 42 VR RP XGS-4526/4528F/4728F Use r’s Guide 377 42.3.4 Configuring VRRP Parameters View the VRRP configur ation summary at the bottom of the screen. Figure 197 VRRP Configuration: Summary The following table describes t he labels in this screen.
Chapter 42 VRRP XGS-4526/4528F/4728F User’s Guide 378 42.4.1 One Subnet Network Example The figure below shows a simple VR RP network with only one virtual router VR1 (VRID =1) and tw o switches . The network is connected to the W AN via an uplink gatewa y G (172.
Chapter 42 VR RP XGS-4526/4528F/4728F Use r’s Guide 379 After configuring and saving the VRRP config uration, the VRRP Status screens for both switches are shown next. Figure 201 VRRP Example 1: VRRP S tatus on Switch A Figure 202 VRRP Example 1: VRRP S tatus on Switch B 42.
Chapter 42 VRRP XGS-4526/4528F/4728F User’s Guide 380 VR1 (refer to Section 42.4.2 on page 379 ). Configure the VRRP par ameters on the switches as shown in the fi gures below .
XGS-4526/4528F/4728F Use r’s Guide 381 C HAPTER 43 ARP Learning 43.1 ARP Overview Address Resolution Protocol (ARP) is a pr otocol for mapping an Internet Protocol address (IP address) to a physi c al machine address, also known as a Media Access Control or MAC address, on the local area network.
Chapter 43 ARP Learning XGS-4526/4528F/4728F User’s Guide 382 43.1.2.1 ARP-Reply By default, the Switch is in ARP-R eply learning mode and updates the ARP table only with the ARP replies to the ARP requ ests sent by the Switch. This can help prevent ARP spoofing.
Chapter 43 ARP Learning XGS-4526/4528F/4728F Use r’s Guide 383 other devices in the same network to update their ARP table with the new mapping information. In Gratuitous- ARP learning mode, the Swit ch updates its AR P ta ble with eith er an ARP reply or a gr atuitous ARP request.
Chapter 43 ARP Learning XGS-4526/4528F/4728F User’s Guide 384 43.2 Configuring ARP Learning Click IP Application > ARP Learning in the navigation panel to displa y the screen as shown next. Figure 208 IP Ap plication > ARP Learning The following table describes t he labels in this screen.
Chapter 43 ARP Learning XGS-4526/4528F/4728F Use r’s Guide 385 Apply Click Apply to save your changes to the Switch’ s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring.
Chapter 43 ARP Learning XGS-4526/4528F/4728F User’s Guide 386.
XGS-4526/4528F/4728F Use r’s Guide 387 C HAPTER 44 Load Sharing 44.1 Load Sharing Overview The Switch learns the ne xt-hop(s) using ARP and determines routing path(s) for a destination.
Chapter 44 Loa d Shar ing XGS-4526/4528F/4728F User’s Guide 388 The following table describes t he labels in this screen. T able 140 IP Application > Load Sharing LABEL DESCRIPTION Active Select this option to enable Equal-Cost MultiPath (ECMP) routing on the Swit ch.
XGS-4526/4528F/4728F Use r’s Guide 389 C HAPTER 45 Maintenance This chapter explains how to configure the mainte nance screens that let you maintain the firmware and configur ation files. 45.1 The Maintenance Screen Use this screen to manage firmware and yo ur confi gur ation files.
Chapter 45 Maintenance XGS-4526/4528F/4728F User’s Guide 390 45.2 Load Factory Default Follow the steps below to rese t the Switch bac k to th e fa ctory defau lts.
Chapter 45 Maintenance XGS-4526/4528F/4728F Use r’s Guide 391 Click Config 2 to sav e the current configur ation settings to Configuration 2 on the Switch. Alternativel y , click Save on the top right-hand corner in any screen to save the configurati on changes to the current configur ation.
Chapter 45 Maintenance XGS-4526/4528F/4728F User’s Guide 392 From the Maintenance screen, display the Firmware Upgrade screen as shown next. Figure 213 Mana gement > Maintenance > Firmware Upgrade T ype the path and file name of t he firmware fil e you wish to upload to the Swit ch in the File Path text box or click Browse to locate it.
Chapter 45 Maintenance XGS-4526/4528F/4728F Use r’s Guide 393 45.7 Backup a Configuration File Backing up your S witch configur ations allo ws you to create various “snapshots” of your device from which you ma y restore at a later date. Back up your c urrent Switch confi guratio n to a computer using the Backup Configuration screen.
Chapter 45 Maintenance XGS-4526/4528F/4728F User’s Guide 394 Z yNOS (Z yXEL Network Operating System, so meti mes referred to as the “r as” file) is the system firmware and ha s a “bin” filename extension. 45.8.1.1 Example FTP Commands ftp> put firmware.
Chapter 45 Maintenance XGS-4526/4528F/4728F Use r’s Guide 395 6 Use put to tr ansfer files from the computer to the Swit ch, for example, pu t firmware.bin ras transfers the firmware on your computer (firmware.bin) to the Switch and renames it to “r as” .
Chapter 45 Maintenance XGS-4526/4528F/4728F User’s Guide 396.
XGS-4526/4528F/4728F Use r’s Guide 397 C HAPTER 46 Access Control This chapter describes how to c ontrol access to the Sw itch. 46.1 Access Control Overview A console port and FTP are allowed one se.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 398 46.3 About SNMP Simple Network Manageme nt Protocol (SNM P) is an application layer protocol used to manage and monitor T CP/IP-based devices. SNMP is used to exchange management information between the network manage ment system (NMS) and a network element (NE).
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 399 SNMP itself is a simple request /respon se protocol based on the manager/agent model. The manager issues a request an d the agent returns responses using t he following protocol operations: 46.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 400 46.3.3 SNMP T raps The Switch se nds traps to an SNMP mana ger when an e vent occurs. The following tables outline the SNMP traps by category . An OID (Object ID) that begins with “ 1.
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 401 temperatur e T emperatureEventOn 1.3.6.1. 4.1.890.1.5.8.52. 3 1.2.1 1.3.6.1.4.1 .890.1.5.8.39.3 1.2.1 1.3.6.1.4.1 .890.1.5.8.46.3 1.2.1 This trap is sent when the temperature goes above or below the normal operating ran ge .
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 402 timesync RT CNotUpdatedEventOn 1.3.6.1.4.1. 890.1.5.8.52.3 1.2.1 1.3.6.1.4.1. 890.1.5.8.39.3 1.2.1 1.3.6.1.4.1. 890.1.5.8.46.3 1.2.1 This trap is sent when the Switch fails to get the time and date from a time server .
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 403 T able 147 SNMP InterfaceTraps OPTION OBJEC T LA BEL OBJECT ID DESCRIPTION linkup linkUp 1.3.6.1.6.3.1 . 1. 5 .4 This tr ap is sent when the Ethernet link is up. LinkDownEventClear 1.3.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 404 transceiver - ddm DDMIRxPowerEv entOn DDMIT emp eratureEv entO n DDMITxBiasEventOn DDMITxPowerEventOn DDMIV oltageEventOn 1.3.6.1.4.1.8 90.1.5.8.52.3 1 .2.1 1.3.6.1.4.1.8 90.1.5.8.39.3 1 .
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 405 accounting RADIUSAcctNotR eachable EventOn 1.3.6.1.4.1.890.1.5.8. 52.3 1.2.1 1.3.6.1.4.1 .890.1.5.8.39.3 1.2.1 1.3.6.1.4.1 .890.1.5.8.46.3 1.2.1 This trap is sent when there is no response message from the RADIUS accounting server .
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 406 T able 150 SNMP Switch Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION stp STPNewRoot 1.3.6.1.2.1.17.0.1 T his tr ap is sent when the STP root switch changes. MRSTPNewRoot 1.3.6.1.4.1.890 .
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 407 46.3.4 Configuring SNMP From the Access Control screen, display the SNMP screen. Y ou can click Ac cess Control to go back to the Access Control screen. Figure 218 Management > Access Control > SNMP The following table describes t he labels in this screen.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 408 Get Community Enter the Get Comm unity string, which is the password for the incoming Get - and GetNext- requests from the management station. The Get Commun ity string is only used by SNMP managers using SNMP version 2c or lower .
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 409 46.3.5 Configuring SNMP T rap Group From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Grou p screen to specify the t ypes of SNMP trap s that should be sent to each SNMP manager .
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 410 46.3.6 Configuring SNMP User From the SNMP screen, click User to view the screen as shown. Use the User screen to create SNMP users for authenti cati on with managers using SNMP v3 and associate them to SNMP groups .
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 41 1 P assword Enter the password of up to 32 ASCII char acters for SNMP user authentication.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 412 46.4 Setting Up Login Account s Up t o f i ve p eo p l e (o n e a d m in i s t ra to r a n d four non-administr ators) may access the Switch via web configur ator at any one time. • An administr ator is someone who can both view and configure Switch c hanges.
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 413 46.5 SSH Overview Unlike T elnet or F TP , which tr ansmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combin es authentication and data encryption to provide secure encrypted communication bet ween two hosts over an unsecured network.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 414 46.6 How SSH works The following table summarizes how a secure connection is established between two remot e hosts. Figure 223 How SSH W orks 1 Host Identificat io n The SSH client send s a connection request to the SSH server .
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 415 3 Authentication and Data T ransmission After the identification is verified and data encrypt ion activ ated, a secure tunnel is established between the client and th e serv er .
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 416 1 HT TPS connection requests from an SSL - aware web browser go to port 443 (by default) on the Switch’ s WS (web server). 2 HT TP connection requests fr om a web brow ser go t o port 80 (by default) on the Switch’ s WS (web server).
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 417 Y ou see the following Security Al ert screen in Internet Explorer . Select Yes to proceed to the web configurator login screen; if you select No , then web configur ator access is block ed.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 418 Select Accept this certificate permanently to import the S witch’ s certificate into the SSL client.
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 419 46.9.3 The Main Screen After you accept the certifi cate and ente r the login username and password, the Switch main screen appears. The l ock displayed in t he bottom right of the browser status bar denotes a secure connection.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 420 computer(s)” for each service in the Remote Management screen (discussed later). Cli c k Access Control to go back to the main Access Control scre en. Figure 229 Manageme nt > Access Control > Service Access Control The following table describes t he fields in this screen.
Chapter 46 Access Control XGS-4526/4528F/4728F Use r’s Guide 421 Y ou can specify a group of one or more “trusted computers” from which an administr ator may use a service to manage the Sw itch. Click Access Control to return to the Access Control screen.
Chapter 46 Access Control XGS-4526/4528F/4728F User’s Guide 422 Apply Click Apply to save your changes to the Switch’ s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to sa ve your changes to the non- volatile memory when you are done configuring.
XGS-4526/4528F/4728F Use r’s Guide 423 C HAPTER 47 Diagnostic This chapter explains the Diagnostic screen. 47.1 Diagnostic Click Management > Diagnostic in the naviga tion panel to open thi s screen. Us e this screen to check sys tem logs, ping IP addresses or perf orm port tests.
Chapter 47 Diagnostic XGS-4526/4528F/4728F User’s Guide 424 IP Ping T ype the IP addre ss of a device that you want to ping in order to test a connection. Click Ping to have the Switch ping the IP address (in the field to the left). Ethernet P ort Te s t Enter a port number and click Port Test to perform an internal loopback test.
XGS-4526/4528F/4728F Use r’s Guide 425 C HAPTER 48 Syslog This chapter explains the syslog screens. 48.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to sy s lo g servers that col l e ct the event messages.
Chapter 48 Sy slog XGS-4526/4528F/4728F User’s Guide 426 48.2 Syslog Setup Click Management > Syslog in the navigation panel to displa y this screen. The syslog feature sends logs to an external sy slog serv er . Use this screen to configure the device’ s system logging set tings.
Chapter 48 Syslog XGS-4526/4528F/4728F Use r’s Guide 427 48.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to open the following screen. Use this s creen to configure a list of external syslog servers . Figure 233 Manageme nt > Syslog > Server Setup The following table describes t he labels in this screen.
Chapter 48 Sy slog XGS-4526/4528F/4728F User’s Guide 428 48.4 Syslog Messages The following table shows log messages the S witch may gener ate. T able 161 Syslog Messages LOG T YPE SEVERITY MESSAGE .
Chapter 48 Syslog XGS-4526/4528F/4728F Use r’s Guide 429 SP_SYSLOG_TYPE_AAA SYSLOG_WARNING 8 02.1x - Invalid T unne l-Medium- T ype <type> [User -Name <username>] [NAS-P ort <port>] SP_SYSLOG_TYPE_AAA SYSLOG_W ARNING 802.
Chapter 48 Sy slog XGS-4526/4528F/4728F User’s Guide 430 SP_SYSLOG_TYPE_AAA SYSLOG_W ARNING P rivilege out of range: USER [<username>] SP_SYSLOG_TYPE_AAA SYSLOG_W ARNING T ACAS+ account server.
Chapter 48 Syslog XGS-4526/4528F/4728F Use r’s Guide 431 SP_SYSLOG_TYPE_INTE RF ACE SYSLOG_NO TICE B ias Und er Alarm Low Threshold(<thre shold>) On Port <port>, Current V alue : <val.
Chapter 48 Sy slog XGS-4526/4528F/4728F User’s Guide 432 SP_SYSLOG_TYPE_SWIT CH SYSLOG_CRITICAL system voltage has recovered to normal state SP_SYSLOG_TYPE_SWIT CH S Y S L O G _ C R I T I C A L <.
Chapter 48 Syslog XGS-4526/4528F/4728F Use r’s Guide 433 SP_SYSLOG_TYPE_SWIT CH SYSLOG_INFO Load factory default configuration successfully SP_SYSLOG_TYPE_SWIT CH SYSLOG_NO TICE Gets the time and da.
Chapter 48 Sy slog XGS-4526/4528F/4728F User’s Guide 434 SP_SYSLOG_TYPE_SWIT CH SYSLOG_WARNING Port <port> link speed and duplex mode autonegotiation has failed SP_SYSLOG_TYPE_SWIT CH SYSLOG_W.
XGS-4526/4528F/4728F Use r’s Guide 435 C HAPTER 49 Cluster Management This chapter introduces cluster management. 49.1 Clustering Management S t atus Overview Cluster Management allows you to manage switc hes through one Switch, call ed the cluster manager .
Chapter 49 Clust er Managem en t XGS-4526/4528F/4728F User’s Guide 436 In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are clust er members. Figure 234 Clustering App lication Example 49.
Chapter 49 Clust er Managem en t XGS-4526/4528F/4728F Use r’s Guide 437 The following table describes t he labels in this screen. 49.2.1 Cluster Member Switch Management Go to the Clustering Managem.
Chapter 49 Clust er Managem en t XGS-4526/4528F/4728F User’s Guide 438 configurator home page and the home pa ge that you'd see if y ou accessed it directly are different.
Chapter 49 Clust er Managem en t XGS-4526/4528F/4728F Use r’s Guide 439 49.2.1.1 Uploading Firmware to a Cluster Member Switch Y ou can use F TP to upload firmware to a cluster member switch through the cluster manager swi tch as sh own in the following example.
Chapter 49 Clust er Managem en t XGS-4526/4528F/4728F User’s Guide 440 49.3 Clustering Management Configuration Use this screen to configure clustering management.
Chapter 49 Clust er Managem en t XGS-4526/4528F/4728F Use r’s Guide 441 Apply Click Apply to save y our changes to the Switch’ s run-time memory . The Switch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save your changes to the non- volatile memory when y ou are done configuring.
Chapter 49 Clust er Managem en t XGS-4526/4528F/4728F User’s Guide 442.
XGS-4526/4528F/4728F Use r’s Guide 443 C HAPTER 50 MAC Table This chapter introduces the MAC Table sc reen. 50.1 MAC T able Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forw arded or fil tered ac ross the Switch’ s ports.
Chapter 50 M AC Ta b le XGS-4526/4528F/4728F User’s Guide 444 • If the Switch has already learned the port for this MAC address , but the destination port is the same as the port it came in on, then it filters the fr ame. Figure 239 MAC T able Flowchart 50.
Chapter 50 MAC Table XGS-4526/4528F/4728F Use r’s Guide 445 The following table describes t he labels in this screen. T able 166 Management > MAC Table LABEL DESCRIPTION Condition S elect All to display all MAC addresses in the MAC table. Select Static to only display static MAC address(es) in this screen.
Chapter 50 M AC Ta b le XGS-4526/4528F/4728F User’s Guide 446.
XGS-4526/4528F/4728F Use r’s Guide 447 C HAPTER 51 IP Table This chapter introduces the IP ta ble. 51.1 IP T able Overview The IP Table screen shows how packet s are forwarded or f iltered across the Switch’ s ports.
Chapter 51 IP Table XGS-4526/4528F/4728F User’s Guide 448 • If the Switch has already learned the port for this IP address, but the destination port is the same as the port it came in on, then it fi lters the packet. Figure 241 IP T able Flowchart 51.
Chapter 51 IP Table XGS-4526/4528F/4728F Use r’s Guide 449 VID This is the VLAN group to which the packet belongs. P ort This is the port from which the abov e IP address was learned. This field displays CPU to indicate the IP addre ss belongs to the Switch.
Chapter 51 IP Table XGS-4526/4528F/4728F User’s Guide 450.
XGS-4526/4528F/4728F Use r’s Guide 451 C HAPTER 52 ARP Table This chapter introduces ARP T able. 52.1 ARP T able Overview Address Resolution Protocol (ARP) is a pr otocol for mapping an Internet Protocol address (IP address) to a physi c al machine address, also known as a Media Access Control or MAC address, on the local area network.
Chapter 52 ARP Tab le XGS-4526/4528F/4728F User’s Guide 452 52.2 The ARP T able Screen Click Management > ARP Table in t he navigation panel to open the following screen. Use the ARP table to view IP-t o-MAC address mapping(s) and remov e specific dynamic ARP entries.
XGS-4526/4528F/4728F Use r’s Guide 453 C HAPTER 53 Routing Table This chapter introduces the routing table. 53.1 Overview The routing table contains the rout e information to the network(s) that the Switch can reach. The Switch automatically u pdates the routing table with the RIP information received from other Ethernet devices.
Chapter 53 Rou tin g Ta b l e XGS-4526/4528F/4728F User’s Guide 454.
XGS-4526/4528F/4728F Use r’s Guide 455 C HAPTER 54 Configure Clone This chapter shows you how y ou can copy the settings of one port onto other ports. 54.1 Configure Clone Cloning allows yo u to copy the basic and adv anced settings from a source port to a destination port or ports.
Chapter 54 Con fig ur e Clo ne XGS-4526/4528F/4728F User’s Guide 456 The following table describes t he labels in this screen. T able 170 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Po r t Enter the source port under the Sourc e label.
XGS-4526/4528F/4728F Use r’s Guide 457 C HAPTER 55 Troubleshooting This chapter offers some suggesti ons to solv e problems y ou might encounter . The potential problems are divided into the following categories. • P ower , Hardware Connections, and LEDs • Switch Access and L ogin • Switch Configur ation 55.
Chapter 55 Tro u blesh oo tin g XGS-4526/4528F/4728F User’s Guide 458 1 T urn the Switch off and on (in DC models or if the DC power su pply is co nnected in AC/DC models). 2 Disconnect and re-connect the power adapto r or cord to the Switch (in AC models or if the AC power supply is connected in AC/DC models).
Chapter 55 Troubleshooting XGS-4526/4528F/4728F Use r’s Guide 459 I forgot the usernam e and/or password. 1 The default username is admin and the default password is 1234 . 2 If this does not work, you have to reset the device to its fact ory defaults.
Chapter 55 Tro u blesh oo tin g XGS-4526/4528F/4728F User’s Guide 460 1 Make sure you ha ve entered the user name and password correctly . The default user name is admin , and the default password is 1234 . These fie lds are case- sensitive, so make sure [Caps Lock] is not on.
Chapter 55 Troubleshooting XGS-4526/4528F/4728F Use r’s Guide 461 55.3 Switch Configuration I lost my configuration setti ngs after I rest art the Switch. Make sure you sa ve your configur ation into the Switch’ s nonvolat ile memory each time you mak e changes.
Chapter 55 Tro u blesh oo tin g XGS-4526/4528F/4728F User’s Guide 462.
XGS-4526/4528F/4728F Use r’s Guide 463 C HAPTER 56 Product Specifications The following tables summarize the Swit ch’ s hardware and firmw are feat ures. T able 171 Hardware Specifications SPECIFICATION DESCRIPTION Dimensions Standard 19” rack mountable 438 mm (W) x 310 mm (D) x 44.
Chapter 56 Product Specifications XGS-4526/4528F/4728F User’s Guide 464 Ethernet P orts Auto-negotiating: 10 Mbps or 100 Mbps in either half-duplex or full-duplex mode. 1000 Mbps and 10 Gbps in full duplex. Auto-crossover: Use either crossover or straight -through Ethernet cables.
Chapter 56 Product Specifications XGS-4526/4528F/4728F Use r’s Guide 465 Number of Login Accounts Configurable on the Switc h 4 management accounts configured on the Switch. Authentication via RADIUS and T ACACS+ also av ailable. IP Routing Domain An IP interface (also known as an IP routing domain) is not bound to a physical port.
Chapter 56 Product Specifications XGS-4526/4528F/4728F User’s Guide 466 Multicast VLAN Reg is t r a t i o n ( M V R ) Multicast VLAN Registr ation (MVR) is designed for applications (such as Media-on-Demand (MoD)) using multicast traffic across a network.
Chapter 56 Product Specifications XGS-4526/4528F/4728F Use r’s Guide 467 Device Management Use the web configurator or commands to easily configure the rich range of features on the Switch. P ort Cloning Use the port cloning feature to copy the settings you configure on one port to another port or ports.
Chapter 56 Product Specifications XGS-4526/4528F/4728F User’s Guide 468 T able 173 Switching Specifications Layer 2 Fea t ur e s Bridging 8K MAC addresses in the XGS-4526 or XGS- 4528 F ; 16K MAC ad.
Chapter 56 Product Specifications XGS-4526/4528F/4728F Use r’s Guide 469 Por t mirroring All ports support port mirroring Supports port mirroring per IP/T CP/UDP Bandwid th control Supports rate lim.
Chapter 56 Product Specifications XGS-4526/4528F/4728F User’s Guide 470 The following list, which is not exhaust ive , illust rates the standards supported in the Switch.
Chapter 56 Product Specifications XGS-4526/4528F/4728F Use r’s Guide 471 RFC 1305 Network Time Protocol (NTP version 3) RFC 1441 SNMPv2 Simple Network Management Protocol version 2 RFC 1493 Bridge M.
Chapter 56 Product Specifications XGS-4526/4528F/4728F User’s Guide 472.
XGS-4526/4528F/4728F Use r’s Guide 473 A PPENDIX A Common Services The following table lists some commonl y-used services and their associated protocols and port numbers. F or a comprehe nsiv e list of p ort numbers, ICMP type/ code numbers and services , visit the IANA (Internet Assigned Number Authority) web site.
Appendix A Com mon Servic es XGS-4526/4528F/4728F User’s Guide 474 ESP (IPSEC_TUNNEL) User-Defined 50 The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finge r is a UNIX or Internet related command that can be used to find out if a user is logged on.
Appendix A Common Services XGS-4526/4528F/4728F Use r’s Guide 475 POP3 TCP 11 0 Post Office Protocol v ersion 3 lets a client computer get e-mail from a POP3 server through a tempor ary connection (TCP/IP or other). PPTP TC P 1723 Point -to-Point T unneling Protocol enables secure transfer of data ov er public networks.
Appendix A Com mon Servic es XGS-4526/4528F/4728F User’s Guide 476 TELNET TCP 23 T elnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over T CP/IP networks. Its primary function is to allow users to log into remote host systems.
XGS-4526/4528F/4728F Use r’s Guide 477 A PPENDIX B Legal Information Copyright Copyright © 2010 by Z yXEL Communications Corpor ation. The contents of this publication ma y not be reproduced in any.
Appendix B Leg al In fo rm at ion XGS-4526/4528F/4728F User’s Guide 478 • This dev ice m u st accept any in terferen ce received, including interference that may cause undesired operations. FCC W arning This device has been tested and found to comply with the limits for a Clas s A digital switch, pursuant to Part 15 of the FCC Rules .
Appendix B Legal Information XGS-4526/4528F/4728F Use r’s Guide 479 Viewing Certifications 1 Go to http://www . zyxel.com . 2 Select your prod uct on the Z yXEL home page to go to that product's page. 3 Select the certification y ou wish to view from this page.
Appendix B Leg al In fo rm at ion XGS-4526/4528F/4728F User’s Guide 480.
Index XGS-4526/4528F/4728F Use r’s Guide 481 Index Numerics 802.1P priority 11 4 A access control limitations 397 login account 412 remote management 420 service port 419 SNMP 398 accounting setup 2.
Index XGS-4526/4528F/4728F User’s Guide 482 CIST (Common and Internal Spanning T ree) 150 Class of Service (CoS) 353 classifier 201 , 203 and QoS 201 editing 204 example 206 overview 201 setup 201 ,.
Index XGS-4526/4528F/4728F Use r’s Guide 483 Autonomous System 349 default timer setting 352 error message 351 graft 350 how it works 349 implementation 349 probe 350 prune 350 report 350 setup 350 .
Index XGS-4526/4528F/4728F User’s Guide 484 HT TPS example 416 humidity 464 I IEEE 802.1p, priority 109 IEEE 802.1x activate 190 , 194 , 247 reauthentication 191 IEEE 802.
Index XGS-4526/4528F/4728F Use r’s Guide 485 link state database 332 , 335 lockout 54 log 423 login 47 password 53 login account Administrator 412 non-administr ator 412 login accounts 412 configuri.
Index XGS-4526/4528F/4728F User’s Guide 486 MTU (Multi- T enant Unit) 106 multicast 227 802.1 priority 229 and IGMP 227 IGMP throttling 231 IP addresses 227 overview 227 setup 229 multicast delivery.
Index XGS-4526/4528F/4728F Use r’s Guide 487 port details 97 port isolation 135 port mirroring 175 , 176 , 468 direction 176 egress 176 ingress 176 port redundancy 178 port security 197 address lear.
Index XGS-4526/4528F/4728F User’s Guide 488 R everse Path Multicasting (RPM) 349 RFC 3164 425 RIP 340 configuration 328 direction 327 overview 327 vers ion 327 vs OSPF 331 RIP (Routing Information P.
Index XGS-4526/4528F/4728F Use r’s Guide 489 bridge ID 157 , 161 bridge priority 155 , 159 configuration 154 , 158 , 162 designated bridge 148 forwarding delay 155 , 159 Hello BPDU 148 Hello Time 15.
Index XGS-4526/4528F/4728F User’s Guide 490 PPPoE IA 301 user profiles 244 V V endor Specific Attribute See VSA ventilation holes 34 VID 11 2 , 11 7 , 121 , 122 , 221 number of possible VIDs 11 7 pr.
Index XGS-4526/4528F/4728F Use r’s Guide 491 W eighted R ound R obin Scheduling (WRR) 216 WFQ (W eighted F air Queuing) 216 WRR (W eighted R ound Robin Scheduling 216 Z Z y NOS (Z yXEL Network Oper .
An important point after buying a device ZyXEL Communications 4728F (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought ZyXEL Communications 4728F yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data ZyXEL Communications 4728F - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, ZyXEL Communications 4728F you will learn all the available features of the product, as well as information on its operation. The information that you get ZyXEL Communications 4728F will certainly help you make a decision on the purchase.
If you already are a holder of ZyXEL Communications 4728F, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime ZyXEL Communications 4728F.
However, one of the most important roles played by the user manual is to help in solving problems with ZyXEL Communications 4728F. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device ZyXEL Communications 4728F along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
