EasyManua.ls Logo

ZyXEL Communications GS2210-48HP User Manual

ZyXEL Communications GS2210-48HP
444 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
Page #1 background imageLoading...
Page #1 background image
Quick Start Guide
www.zyxel.com
GS2210 Series
Intelligent Layer 2 GbE Switch
Version 4.30
Edition 1, 10/ 2015
Copyright © 2015 ZyXEL Communications Corporation
User’s Guide
Default Login Details
LAN IP Address http: // 192.168.1.1
User Name admin
Password 1234

Table of Contents

Other manuals for ZyXEL Communications GS2210-48HP

Question and Answer IconNeed help?

Do you have a question about the ZyXEL Communications GS2210-48HP and is the answer not in the manual?

ZyXEL Communications GS2210-48HP Specifications

General IconGeneral
BrandZyXEL Communications
ModelGS2210-48HP
CategorySwitch
LanguageEnglish

Summary

CHAPTER 1 Getting to Know Your Switch

Ways to Manage the Switch

Learn methods for managing the switch, including Web Configurator, CLI, FTP, and SNMP.

Good Habits for Managing the Switch

Follow best practices for secure and effective switch management, including password policies and backups.

CHAPTER 2 Hardware Installation and Connection

Desktop Installation Procedure

Step-by-step guide for placing the switch on a desktop for proper setup and ventilation.

Mounting the Switch on a Rack

Instructions for securely mounting the switch in a standard 19-inch rack using provided brackets.

CHAPTER 3 Hardware Panels

Front Panel

Describes the components visible on the front panel of the switch, including ports and LEDs.

Rear Panel

Details the components on the rear panel, such as console port and power connector.

LEDs

Explains the status and function of various LEDs on the switch for monitoring.

CHAPTER 4 The Web Configurator

System Login

Steps to access the switch's web interface using a browser and default credentials.

The Status Screen

Overview of the initial status screen displaying device information, system status, and IP addresses.

Change Your Password

Recommended procedure to change the default administrator password for enhanced security.

Saving Your Configuration

Guide on how to save configuration changes permanently to the switch's non-volatile memory.

Resetting the Switch

Guide on how to reload the factory default configuration file to reset the switch.

CHAPTER 5 Initial Setup Example

Creating a VLAN

Steps to create a VLAN and assign ports to it for network segmentation.

Configuring Switch Management IP Address

How to set or change the switch's management IP address for network access.

CHAPTER 6 Tutorials

How to Use DHCPv4 Snooping on the Switch

A step-by-step guide to configure DHCPv4 snooping for enhanced network security.

How to Use DHCPv4 Relay on the Switch

Tutorial on configuring the switch to forward DHCP client requests to a specific DHCP server.

CHAPTER 7 Status and ZON

Status

View general device information, system status, and IP addresses on the status screen.

Port Status

Displays a port statistical summary with links to detailed port statistics.

CHAPTER 8 Basic Setting

System Information

Check firmware version and view general system information on the switch.

General Setup

Configure general settings like system name, time, and time zone.

Switch Setup

Configure global switch parameters like VLAN type and priority queues.

IP Setup

Configure the switch IP address, default gateway, and management VLAN ID.

Port Setup

Configure individual switch port settings such as speed, duplex, and flow control.

PoE Status

View and manage Power over Ethernet (PoE) status and priority levels for connected devices.

IPv6

Configure IPv6 settings, including interface status and addresses.

CHAPTER 9 VLAN

VLAN Configuration

Configure IEEE 802.1Q tagged and port-based VLAN parameters for the switch.

Configure a Static VLAN

Create and configure static VLANs to group traffic based on port membership.

Configure VLAN Port Settings

Set static VLAN (IEEE 802.1Q) parameters for individual ports.

Subnet Based VLANs

Group traffic into VLANs based on source IP subnet for traffic classification.

Port-Based VLAN Setup

Set up VLANs where packet forwarding is based on destination MAC address and associated port.

CHAPTER 10 Static MAC Forward Setup

Configuring Static MAC Forwarding

Manually enter static MAC addresses in the table to control frame forwarding and enhance port security.

CHAPTER 11 Static Multicast Forward Setup

Configuring Static Multicast Forwarding

Configure rules to forward specific multicast frames to designated ports within a VLAN group.

CHAPTER 12 Filtering

Configure a Filtering Rule

Create rules for traffic filtering based on source/destination MAC addresses and VLAN group ID.

CHAPTER 13 Spanning Tree Protocol

Spanning Tree Configuration

Activate and configure Spanning Tree Protocol modes (RSTP, MRSTP, MSTP) to prevent network loops.

Configure Rapid Spanning Tree Protocol

Configure Rapid Spanning Tree Protocol (RSTP) settings for faster network loop prevention.

Configure Multiple Rapid Spanning Tree Protocol

Configure Multiple Rapid Spanning Tree Protocol (MRSTP) for managing multiple spanning trees.

Configure Multiple Spanning Tree Protocol

Configure Multiple Spanning Tree Protocol (MSTP) settings for enhanced network resilience.

CHAPTER 14 Bandwidth Control

Bandwidth Control Setup

Configure maximum allowable bandwidth limits for incoming and outgoing traffic flows on ports.

CHAPTER 15 Broadcast Storm Control

Broadcast Storm Control Setup

Limit broadcast, multicast, and DLF packets per second to prevent network storms.

CHAPTER 16 Mirroring

Port Mirroring Setup

Configure port mirroring to copy traffic flow to a monitor port for analysis without interference.

CHAPTER 17 Link Aggregation

Link Aggregation Setting

Configure static link aggregation by selecting traffic distribution algorithms and grouping ports.

Link Aggregation Control Protocol

Enable Link Aggregation Control Protocol (LACP) for dynamic link aggregation.

CHAPTER 18 Port Authentication

Port Authentication Configuration

Activate port authentication methods and configure RADIUS server settings for user validation.

Activate IEEE 802.1x Security

Enable IEEE 802.1x security to authenticate clients using username and password.

Guest VLAN

Configure a guest VLAN for providing limited network access to unauthenticated users.

Activate MAC Authentication

Activate MAC authentication to validate client access based on MAC address and password.

CHAPTER 19 Port Security

Port Security Setup

Enable port security to allow only authorized MAC addresses to pass through a port.

CHAPTER 20 Time Range

Configuring Time Range

Define one-time or recurring schedules for time-oriented features like PoE and classifiers.

CHAPTER 21 Classifier

Classifier Configuration

Define classifiers to group traffic based on specific criteria and specify actions for classified flows.

Classifier Global Setting

Configure match order and enable logging for classifier rules.

Classifier Example

An example illustrating how to configure a classifier to identify traffic based on MAC address and port.

CHAPTER 22 Policy Rule

Configuring Policy Rules

Configure policy rules to ensure classified traffic flows receive the requested network treatment.

Policy Example

An example demonstrating how to configure a policy to limit bandwidth on a traffic flow.

CHAPTER 23 Queuing Method

What You Need to Know

Understand queuing algorithms like SPQ, WFQ, and WRR for traffic management.

Configuring Queuing

Set priorities for traffic queues to distribute bandwidth across different traffic flows.

CHAPTER 24 Multicast

Multicast Setup

Configure IPv4/IPv6 multicast settings and set up multicast VLANs.

IPv4 Multicast Status

View IPv4 multicast group information and IGMP snooping status.

IGMP Snooping

Configure IGMP snooping to forward group multicast traffic efficiently.

IPv6 Multicast Status

View IPv6 multicast group information and MLD snooping status.

MLD Snooping-proxy

Configure MLD snooping-proxy to minimize control messages and improve network performance.

General MVR Configuration

Create multicast VLANs and select receiver/source ports for each multicast VLAN.

CHAPTER 25 AAA

AAA Screens

Access screens to enable and configure AAA settings for authentication and authorization.

RADIUS Server Setup

Configure settings for RADIUS servers used for authentication and authorization.

TACACS+ Server Setup

Configure settings for TACACS+ servers used for authentication and authorization.

AAA Setup

Configure authentication, authorization, and accounting methods and priority.

CHAPTER 26 IP Source Guard

IP Source Guard Overview

Understand how IP source guard filters unauthorized DHCP and ARP packets using a binding table.

IPv4 Source Guard Setup

View current bindings for DHCP snooping and ARP inspection.

IPv4 Source Guard Static Binding

Manage static bindings for DHCP snooping and ARP inspection by MAC address and VLAN ID.

DHCP Snooping Configure

Enable DHCP snooping, specify VLANs, and configure the DHCP snooping database.

ARP Inspection Configure

Enable ARP inspection and configure logging settings for discarded ARP packets.

IPv6 Static Binding Setup

Manually create IPv6 source guard binding table entries and manage static bindings.

IPv6 Source Guard Policy Setup

Configure policies to forward valid IPv6 addresses/prefixes and block traffic from link-local addresses.

IPv6 DHCP Trust Setup

Specify which ports are trusted or untrusted for DHCPv6 snooping.

CHAPTER 27 Loop Guard

Loop Guard Overview

Understand how loop guard prevents loops on the network edge by shutting down ports.

Loop Guard Setup

Enable loop guard on the switch and specific ports to detect and prevent network loops.

CHAPTER 28 Layer 2 Protocol Tunneling

Layer 2 Protocol Tunneling Overview

Learn how to configure layer 2 protocol tunneling to encapsulate packets for service provider networks.

Configuring Layer 2 Protocol Tunneling

Enable and configure layer 2 protocol tunneling, specifying MAC addresses for packet encapsulation.

CHAPTER 29 PPPoE

PPPoE Intermediate Agent Overview

Understand the PPPoE Intermediate Agent's role in providing subscriber information to PPPoE servers.

PPPoE Intermediate Agent

Configure the PPPoE Intermediate Agent globally on the switch.

PPPoE IA Per-Port

Specify trusted/untrusted ports and configure agent sub-options on a per-port basis.

PPPoE IA Per-Port Per-VLAN

Configure PPPoE IA settings that apply to a specific VLAN on a port.

PPPoE IA for VLAN

Enable PPPoE Intermediate Agent on a VLAN and configure Circuit ID/Remote ID.

CHAPTER 30 Error Disable

Error Disable Overview

Understand how the switch handles errors by disabling ports or dropping packets.

CPU Protection Configuration

Limit the number of control packets (ARP, BPDU, IGMP) received or transmitted per port.

Error-Disable Detect Configuration

Detect control packet rate limits and configure actions when limits are exceeded.

Error-Disable Recovery Configuration

Configure the switch to automatically undo actions after an error condition is resolved.

CHAPTER 31 Private VLAN

Private VLAN Overview

Learn how Private VLANs provide port isolation within a VLAN by specifying promiscuous and isolated ports.

Configuring Private VLAN

Configure private VLAN rules to isolate ports within a VLAN, allowing communication only with promiscuous ports.

CHAPTER 32 Green Ethernet

Green Ethernet Overview

Understand how Green Ethernet features reduce switch port power consumption.

Configuring Green Ethernet

Enable Energy Efficient Ethernet (EEE), Auto Power Down, and Short Reach features to reduce power consumption.

CHAPTER 33 Link Layer Discovery Protocol (LLDP)

LLDP Overview

Learn about LLDP for advertising device identity and capabilities on the local network.

LLDP Local Status

View LLDP status summary for the switch, including chassis ID, system name, and port information.

LLDP Remote Status

View LLDP status information from neighboring devices connected to the switch.

LLDP Configuration

Configure global LLDP settings, including transmit intervals and basic TLV options.

LLDP-MED Configuration

Configure LLDP-MED parameters for media endpoint devices, including network policy and location.

LLDP-MED Network Policy

Define network policies for applications like Voice, Video, and Guest access using LLDP-MED.

LLDP-MED Location

Configure location information for remote devices using geographical coordinates and Civic Address.

CHAPTER 34 Anti-Arpscan

Anti-Arpscan Overview

Understand how Anti-Arpscan detects and blocks unusual ARP scan activity to prevent attacks.

Anti-Arpscan Status

Check which ports are trusted, forwarding traffic, or are disabled due to ARP inspection.

Anti-Arpscan Host Status

View blocked hosts and unblock connected devices identified by IP address or MAC address.

Anti-Arpscan Trust Host

Create or remove trusted hosts to exempt them from Anti-Arpscan analysis.

Anti-Arpscan Configure

Enable Anti-Arpscan, set port/host thresholds, and configure port trust states.

CHAPTER 35 BPDU Guard

BPDU Guard Overview

Learn how BPDU Guard prevents unauthorized STP-aware switches from connecting and causing topology changes.

BPDU Guard Status

View the status of BPDU Guard globally and on a per-port basis.

BPDU Guard Configuration

Enable BPDU Guard on the switch and specific ports to automatically disable ports upon BPDU detection.

CHAPTER 36 OAM

OAM Overview

Understand Link Layer Ethernet OAM for link monitoring and troubleshooting network connections.

OAM Status

View the configuration of ports where Ethernet OAM is enabled.

OAM Configuration

Enable Ethernet OAM on the switch and ports, and configure related settings.

OAM Remote Loopback

Perform remote loopback tests to verify link status and troubleshoot connectivity.

CHAPTER 37 ZULD

ZULD Overview

Understand how ZyXEL Unidirectional Link Detection (ZULD) detects and disables physical one-way links.

ZULD Status

View details of unidirectional and bidirectional links discovered by ZULD.

ZULD Configuration

Enable ZULD on ports, configure its mode, and set the probe time for unidirectional link detection.

CHAPTER 38 Static Route

Static Route Overview

Learn how to configure static routes for IP communication with remote management stations.

IPv4 Static Route

Configure and enable IPv4 static routes to define how the switch forwards traffic to specific destinations.

CHAPTER 39 Differentiated Services

Differentiated Services Overview

Understand Differentiated Services (DiffServ) for prioritizing traffic and managing network quality.

Activating DiffServ

Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping.

DSCP-to-IEEE 802.1p Priority Settings

Configure the mapping between DSCP values and IEEE 802.1p priority levels for traffic prioritization.

CHAPTER 40 DHCP

DHCP Overview

Learn how DHCP allows computers to obtain TCP/IP configuration and how the switch can act as a relay agent.

DHCP Configuration

Access screens to enable and configure DHCPv4 relay and option 82 profiles.

DHCPv4 Status

View the current DHCP relay mode and status of the switch.

DHCPv4 Relay

Configure DHCP relay settings to forward network information between clients and servers.

DHCPv4 Relay Agent Information

Add source information to client DHCP requests to aid server authentication and IP assignment.

DHCPv4 Option 82 Profile

Create DHCPv4 option 82 profiles to include specific information in relay agent requests.

Configuring DHCPv4 Global Relay

Configure global DHCPv4 relay settings to forward all requests to the same server.

Configuring DHCPv4 VLAN Settings

Configure DHCP settings based on the VLAN domain of DHCP clients for per-VLAN relay.

DHCPv6 Relay

Enable and configure DHCPv6 relay settings for specific VLANs on the switch.

CHAPTER 41 ARP Setup

ARP Overview

Understand the Address Resolution Protocol (ARP) for mapping IP addresses to MAC addresses and the ARP table.

ARP Setup

Configure ARP learning modes per port to manage the ARP table and prevent spoofing.

ARP Learning

Set the ARP learning mode (ARP-Reply, Gratuitous-ARP, ARP-Request) for each port.

CHAPTER 42 Maintenance

The Maintenance Screen

Access the maintenance screen to manage firmware and configuration files.

Erase Running-Configuration

Reset the switch configuration to factory defaults to clear all settings.

Save Configuration

Save current configuration settings permanently to Configuration 1 or Configuration 2.

Firmware Upgrade

Upgrade the switch firmware to the latest version using the web configurator.

Restore a Configuration File

Restore a previously saved configuration file from a computer to the switch.

Backup a Configuration File

Save current device settings to a computer for later use or restoration.

Tech-Support

Use the Tech-Support feature for log enhancement and issue analysis by customer support.

CHAPTER 43 Access Control

Access Control Overview

Understand methods for controlling access to the switch via console, Telnet, SSH, FTP, and SNMP.

The Access Control Main Screen

Access the main screen to configure access control settings.

Configuring SNMP

Configure SNMP settings, including version, community strings, and trap destinations.

Setting Up Login Accounts

Configure administrator and user accounts for accessing the switch via the web configurator.

Service Access Control

Decide which services (Telnet, SSH, FTP, etc.) can be used to access the switch.

Remote Management

Specify trusted computers that can manage the switch remotely using various services.

CHAPTER 44 Diagnostic

Diagnostic

Use the diagnostic screen to perform ping tests, traceroutes, port tests, and view switch location.

CHAPTER 45 System Log

System Log

Check current system logs, refresh the view, clear logs, or download log files.

CHAPTER 46 Syslog Setup

Syslog Setup

Configure device logging settings and a list of external syslog servers.

CHAPTER 47 Cluster Management

Cluster Management Overview

Learn how to manage multiple switches as a single unit through a cluster manager.

Cluster Management Status

View the role of the switch within the cluster and access cluster member switches' web configurators.

Clustering Management Configuration

Configure cluster management settings, including defining the cluster manager and members.

CHAPTER 48 MAC Table

MAC Table Overview

Understand how the MAC table (filtering database) shows frame forwarding across switch ports.

Viewing the MAC Table

Check whether MAC addresses are dynamic or static and view port forwarding information.

CHAPTER 49 ARP Table

Overview

Understand the ARP protocol for mapping IP addresses to MAC addresses and the ARP table.

Viewing the ARP Table

View IP-to-MAC address mappings and remove dynamic ARP entries.

CHAPTER 50 Path MTU Table

Path MTU Overview

Learn about Path MTU Discovery for determining the maximum transmission unit across network paths.

Viewing the Path MTU Table

View IPv6 path MTU information on the switch.

CHAPTER 51 Configure Clone

Configure Clone

Copy basic and advanced settings from a source port to destination ports for efficient configuration.

CHAPTER 52 IPv6 Neighbor Table

IPv6 Neighbor Table Overview

Understand the IPv6 neighbor table for resolving and verifying IPv6 addresses.

Viewing the IPv6 Neighbor Table

View IPv6 neighbor information on the switch, including addresses and MAC addresses.

CHAPTER 53 Troubleshooting

Power, Hardware Connections, and LEDs

Troubleshoot issues related to power, hardware connections, and LED indicators.

Switch Access and Login

Resolve problems with accessing the switch via IP address, username, or password.

Switch Configuration

Troubleshoot issues related to losing configuration settings after restarting the switch.

APPENDIX A Customer Support

Required Information

Lists essential information to have ready when contacting customer support for assistance.

APPENDIX B Common Services

Commonly Used Services

Lists common network services, their protocols, port numbers, and descriptions.

APPENDIX C IPv6

IPv6 Addressing

Explains IPv6 address structure, abbreviations, and examples.

Stateless Autoconfiguration

Understand how IPv6 devices can automatically generate unique IP addresses without a DHCP server.

DHCPv6

Explains the DHCPv6 protocol for assigning IPv6 addresses and configuration information.

Neighbor Discovery Protocol (NDP)

Describes the NDP protocol used to discover IPv6 devices and track neighbor reachability.

APPENDIX D Legal Information

Copyright

Contains copyright information for the publication and ZyXEL Communications Corporation.

Disclaimer

Outlines ZyXEL's liability and rights regarding product application and software described herein.

Trademarks

Lists registered trademarks of ZyXEL Communications, Inc. and other mentioned trademarks.

Regulatory Notice and Statement

Provides regulatory compliance information for product usage in different regions.

Related product manuals