ZyXEL Communications GS2220 Series

To Next Page

To Previous Page

Chapter 47 Access Control

GS2220 Series User’s Guide

425

Fig ure 327 Example: Lock Denoting a Secure Connection

EXAMPLE

Main Page

Do C um E Nt C O Nve Ntio Ns3
Table of Contents4
C O Nte Nts O Ve Rvie W4
Table of Contents6
Use R's G Uide23
Pa Rt I: Use R's G Uide23
Getting to Know Your Switch24
G E Tting to Kno W Yo Ur Switc H24
Introduction24
Management Method25
Management Modes25
Mode Changing26
ZON Utility27
Web Configurator Networked AV Mode27
Poe28
Example Applications28
Poe Example Application28
Backbone Example Application29
Bridging or Fiber Uplink Example Application30
High Performance Switching Example30
IEEE 802.1Q VLAN Application Examples31
Ipv6 Support31
Ways to Manage the Switch32
Good Habits for Managing the Switch32
Hardware Installation and Connection33
Ha Rdwa Re Insta Lla Tio N a Nd C O Nne C Tio N33
Installation Scenarios33
Safety Precautions33
Desktop Installation Procedure33
Wall Mounting (GS2220-10 and GS2220-10HP Only)34
Installation Requirements34
Mounting the Switch on a Rack36
Installation Requirements36
Precautions37
Attaching the Mounting Brackets to the Switch37
Mounting the Switch on a Rack37
Hardware Panels39
Front Panel Connections39
Chapter 3 Hardware Panels40
Gigabit Ethernet Ports40
Poe (GS2220-10HP, GS2220-28HP and GS2220-50HP)41
SFP Slots41
Dual Personality Interfaces43
Console Port44
Rear Panel44
Grounding45
AC Power Connection46
Leds47
T E C Hnic a L Re Fe Re Nc E49
Pa Rt II: T E C Hnic a L Re Fe Re Nc E49
Web Configurator50
C Ha Pte R 4 We B C O Nfig Ura to R50
Overview50
System Login50
Zyxel One Network (ZON) Utility54
Requirements54
Run the ZON Utility55
Networked AV Mode Wizard58
Basic Settings59
Advanced Settings64
Web Configurator Layout69
Change Your Password75
Save Your Configuration76
Switch Lockout76
Reset the Switch77
Restore Button77
Restore Custom Default77
Reboot the Switch77
Log out of the Web Configurator77
Help77
Initial Setup Example79
Initia L Se Tup Exa M Ple79
Overview79
Create a VLAN79
Set Port VID81
Configure Switch Management IP Address82
Tutorials84
C Ha Pte R 6 T Uto Ria Ls84
Overview84
How to Use Dhcpv4 Snooping on the Switch84
How to Use Dhcpv4 Relay on the Switch88
DHCP Relay Tutorial Introduction88
Create a VLAN88
Configure Dhcpv4 Relay91
Troubleshooting92
How to Use Auto Configuration through a DHCP Server on the Switch92
Status95
C Ha Pte R 7 Sta Tus95
Overview95
What You Can Do95
Neighbor Screen97
Neighbor Detail99
Basic Setting101
C Ha Pte R 8 Ba Sic Se Tting101
Overview101
What You Can Do101
System Information101
General Setup103
Introduction to Vlans105
Switch Setup106
IP Setup107
IP Status107
IP Status Details108
IP Configuration109
Network Proxy Configuration111
Port Setup112
Poe Status114
Poe Time Range Setup116
Poe Setup117
Interface Setup120
Ipv6121
Ipv6 Status121
Ipv6 Interface Status121
Ipv6 Configuration123
Ipv6 Global Setup124
Ipv6 Interface Setup125
Ipv6 Link-Local Address Setup126
Ipv6 Global Address Setup127
Ipv6 Neighbor Discovery Setup128
Ipv6 Neighbor Setup129
Dhcpv6 Client Setup130
Cloud Management131
Nebula Center Control Discovery131
Nebula Switch Registration132
Vlan133
C Ha Pte R 9 VL an133
Overview133
What You Can Do133
What You Need to Know134
Introduction to IEEE 802.1Q Tagged Vlans134
VLAN Status137
VLAN Details138
VLAN Configuration139
Configure a Static VLAN139
Configure VLAN Port Settings141
Subnet Based Vlans142
Configuring Subnet Based VLAN143
Protocol Based Vlans145
Configuring Protocol Based VLAN145
Voice VLAN147
MAC Based VLAN148
Vendor ID Based VLAN149
Port-Based VLAN Setup151
Configure a Port-Based VLAN151
Static MAC Forwarding154
C Ha Pte R 10 Sta Tic MAC Fo Rwa Rding154
Overview154
What You Can Do154
Configure Static MAC Forwarding154
Static Multicast Forwarding156
Sta Tic Multic a St Fo Rwa Rding156
Overview156
What You Can Do156
What You Need to Know156
Configure Static Multicast Forwarding157
Filtering159
C Ha Pte R 12 Filte Ring159
Filtering Overview159
What You Can Do159
Configure a Filtering Rule159
Spanning Tree Protocol161
Spa Nning T Re E Pro to C O L161
Spanning Tree Protocol Overview161
What You Can Do161
What You Need to Know161
Spanning Tree Protocol Status164
Spanning Tree Configuration164
Rapid Spanning Tree Protocol Status165
Configure Rapid Spanning Tree Protocol166
Configure Multiple Spanning Tree Protocol168
Multiple Spanning Tree Protocol Port Configuration171
Multiple Spanning Tree Protocol Status172
Configure Multiple Rapid Spanning Tree Protocol175
Multiple Rapid Spanning Tree Protocol Status176
Technical Reference178
MSTP Network Example178
MST Region179
MST Instance179
Common and Internal Spanning Tree (CIST)180
Bandwidth Control181
C Ha Pte R 14 Ba Ndwidth C O Ntro L181
Bandwidth Control Overview181
What You Can Do181
Bandwidth Control Setup181
Broadcast Storm Control183
Bro a DC a St Sto Rm C O Ntro L183
Broadcast Storm Control Overview183
What You Can Do183
Broadcast Storm Control Setup183
Mirroring185
C Ha Pte R 16 Mirro Ring185
Mirroring Overview185
Port Mirroring Setup185
Link Aggregation187
C Ha Pte R 17 L Ink Ag G Re G a Tio N187
Link Aggregation Overview187
What You Can Do187
What You Need to Know187
Link Aggregation Status188
Link Aggregation Setting189
Link Aggregation Control Protocol191
Technical Reference192
Static Trunking Example192
Port Authentication194
C Ha Pte R 18 Po Rt Authe Ntic a Tio N194
Port Authentication Overview194
What You Can Do194
What You Need to Know195
MAC Authentication195
Port Authentication Configuration196
Activate IEEE 802.1X Security196
Activate MAC Authentication198
Guest VLAN199
Compound Authentication201
Port Security203
C Ha Pte R 19 Po Rt Se C Urity203
About Port Security203
Port Security Setup203
Time Range205
C Ha Pte R 20 T IM E Ra Ng E205
Time Range Overview205
What You Can Do205
Configuring Time Range205
Classifier207
C la Ssifie R207
Classifier Overview207
What You Can Do207
What You Need to Know207
Classifier Status208
Classifier Configuration208
Viewing and Editing Classifier Configuration Summary212
Classifier Global Setting Configuration213
Classifier Example214
Policy Rule216
C Ha Pte R 22 Po Lic y Rule216
Policy Rules Overview216
What You Can Do216
Diffserv216
DSCP and Per-Hop Behavior216
Configuring Policy Rules217
Policy Example219
Queuing Method220
C Ha Pte R 23 Q Ue Uing Me Tho D220
Queuing Method Overview220
What You Can Do220
What You Need to Know220
Configuring Queuing221
Multicast223
C Ha Pte R 24 Multic a St223
Multicast Overview223
What You Can Do223
What You Need to Know223
Multicast Setup227
Ipv4 Multicast Status227
IGMP Snooping228
IGMP Snooping VLAN231
IGMP Filtering Profile232
Ipv6 Multicast Status234
MLD Snooping-Proxy234
MLD Snooping-Proxy VLAN235
MLD Snooping-Proxy VLAN Port Role Setting236
MLD Snooping-Proxy Filtering238
MLD Snooping-Proxy Filtering Profile239
General MVR Configuration240
MVR Group Configuration242
MVR Configuration Example244
Aaa246
C Ha Pte R 25 AAA246
Authentication, Authorization and Accounting (AAA)246
What You Can Do246
What You Need to Know246
AAA Screens247
RADIUS Server Setup247
TACACS+ Server Setup249
AAA Setup251
Technical Reference253
Vendor Specific Attribute253
Supported RADIUS Attributes255
Attributes Used for Authentication255
Attributes Used for Accounting256
IP Source Guard258
C Ha Pte R 26 IP so Urc E G Ua Rd258
IP Source Guard Overview258
What You Can Do258
What You Need to Know258
IP Source Guard259
Ipv4 Source Guard Setup260
Ipv4 Source Guard Static Binding260
DHCP Snooping263
C Ha Pte R 27 DHC P Sno O Ping263
DHCP Snooping Overview263
What You Can Do263
DHCP Snooping Configure266
DHCP Snooping Port Configure267
DHCP Snooping VLAN Configure268
DHCP Snooping VLAN Port Configure269
Technical Reference270
DHCP Snooping Overview271
ARP Inspection273
C Ha Pte R 28 ARP Inspe C Tio N273
ARP Inspection Status273
ARP Inspection VLAN Status274
ARP Inspection Log Status274
ARP Inspection Configure275
ARP Inspection Port Configure277
ARP Inspection VLAN Configure278
Ipv6 Source Guard Overview279
Ipv6 Source Binding Status280
Ipv6 Static Binding Setup281
Ipv6 Source Guard Policy Setup282
Ipv6 Source Guard Port Setup283
Ipv6 Snooping Policy Setup284
Ipv6 Snooping VLAN Setup285
Ipv6 DHCP Trust Setup286
Technical Reference287
ARP Inspection Overview287
Loop Guard289
C Ha Pte R 29 L O O P G Ua Rd289
Loop Guard Overview289
What You Can Do289
What You Need to Know289
Loop Guard Setup291
VLAN Mapping292
C Ha Pte R 30 VL an Ma Pping292
VLAN Mapping Overview292
VLAN Mapping Example292
What You Can Do292
Enable VLAN Mapping293
VLAN Mapping Configure293
Layer 2 Protocol Tunneling296
L a Ye R 2 Pro to C O L T Unne Ling296
Layer 2 Protocol Tunneling Overview296
What You Can Do296
What You Need to Know296
Configuring Layer 2 Protocol Tunneling297
Pppoe300
C Ha Pte R 32 Pppo E300
Pppoe Intermediate Agent Overview300
What You Can Do300
What You Need to Know300
Pppoe302
Pppoe Intermediate Agent303
Pppoe IA Per-Port304
Pppoe IA Per-Port Per-VLAN305
Pppoe IA for VLAN306
Error-Disable308
C Ha Pte R 33 Erro R- Disa B Le308
Error-Disable Overview308
CPU Protection Overview308
Error-Disable Recovery Overview308
What You Can Do308
Error-Disable Settings309
Error-Disable Status309
CPU Protection Configuration311
Error-Disable Detect Configuration312
Error-Disable Recovery Configuration313
VLAN Isolation314
C Ha Pte R 34 VL an Iso la Tio N314
VLAN Isolation Overview314
Configuring VLAN Isolation314
Green Ethernet316
C Ha Pte R 35 G Re E N Ethe Rne T316
Green Ethernet Overview316
Configuring Green Ethernet316
Link Layer Discovery Protocol (LLDP)318
L Ink L a Ye R Disc O Ve Ry Pro to C O L (L L DP)318
LLDP Overview318
LLDP-MED Overview319
LLDP Settings320
LLDP Local Status321
LLDP Local Port Status Detail322
LLDP Remote Status325
LLDP Remote Port Status Detail326
LLDP Configuration331
LLDP Configuration Basic TLV Setting332
LLDP Configuration Org-Specific TLV Setting333
LLDP-MED Configuration334
LLDP-MED Network Policy335
LLDP-MED Location336
Anti-Arpscan339
C Ha Pte R 37 Anti- Arpsc a N339
Anti-Arpscan Overview339
What You Can Do339
What You Need to Know339
Anti-Arpscan Status340
Anti-Arpscan Host Status340
Anti-Arpscan Trust Host341
Anti-Arpscan Configure342
BPDU Guard344
C Ha Pte R 38 BPDU G Ua Rd344
BPDU Guard Overview344
What You Can Do344
BPDU Guard Status344
BPDU Guard Configuration345
Oam347
C Ha Pte R 39 O am347
OAM Overview347
What You Can Do347
OAM Status347
OAM Details348
OAM Configuration351
OAM Remote Loopback353
Zuld354
C Ha Pte R 40 ZUL D354
ZULD Overview354
What You Can Do354
What You Need to Know354
ZULD Status355
ZULD Configuration356
Auto PD Recovery358
C Ha Pte R 41 Auto PD Re C O Ve Ry358
Auto PD Recovery Overview358
What You Can Do358
Activate the Automatic PD Recovery360
Static Route363
C Ha Pte R 42 Sta Tic Ro Ute363
Static Routing Overview363
What You Can Do363
Static Routing364
Ipv4 Static Route364
Differentiated Services366
Diffe Re Ntia te D Se Rvic E S366
Diffserv Overview366
What You Can Do366
What You Need to Know366
Activating Diffserv367
DSCP-To-IEEE 802.1P Priority Settings368
Configuring DSCP Settings368
Dhcp370
Dhc P370
DHCP Overview370
What You Can Do370
What You Need to Know370
DHCP Configuration371
Dhcpv4 Status371
Dhcpv4 Relay372
Dhcpv4 Relay Agent Information372
Dhcpv4 Option 82 Profile373
Configuring Dhcpv4 Global Relay374
Configure Dhcpv4 Global Relay Port375
Global DHCP Relay Configuration Example376
Dhcpv4 VLAN Setting377
Configure Dhcpv4 VLAN Port378
Example: DHCP Relay for Two Vlans379
Dhcpv6 Relay380
DHCP Server Guard382
ARP Setup383
C Ha Pte R 45 ARP Se Tup383
ARP Overview383
What You Can Do383
What You Need to Know383
ARP Setup385
ARP Learning385
Maintenance387
C Ha Pte R 46 Ma Inte Na Nc E387
Overview387
What You Can Do387
Maintenance Settings387
Erase Running-Configuration389
Save Configuration389
Reboot System389
Factory Default390
Custom Default390
Firmware Upgrade391
Restore Configuration392
Backup Configuration393
Auto Configuration393
Tech-Support394
Tech-Support Download396
Certificates396
HTTPS Certificates397
Technical Reference398
FTP Command Line398
Filename Conventions398
FTP Command Line Procedure399
GUI-Based FTP Clients400
FTP Restrictions400
Access Control401
C Ha Pte R 47 Ac C E Ss C O Ntro L401
Access Control Overview401
What You Can Do401
Access Control Main Settings401
Configure SNMP402
Configure SNMP Trap Group403
Enable or Disable Sending of SNMP Traps on a Port404
Configure SNMP User405
Set up Login Accounts407
Service Access Control409
Remote Management410
Technical Reference411
About SNMP411
SSH Overview418
Introduction to HTTPS420
Google Chrome Warning Messages424
Diagnostic426
C Ha Pte R 48 Dia G no Stic426
Overview426
System Log429
C Ha Pte R 49 Syste M L O G429
Overview429
Syslog Setup430
C Ha Pte R 50 Syslo G Se Tup430
Syslog Overview430
What You Can Do430
Cluster Management433
C Ha Pte R 51 C Luste R Ma Na G E M E Nt433
Cluster Management Overview433
What You Can Do434
Cluster Management Status434
Clustering Management Configuration435
Technical Reference436
Cluster Member Switch Management436
MAC Table439
C Ha Pte R 52 MAC T a B Le439
MAC Table Overview439
What You Can Do439
What You Need to Know439
Viewing the MAC Table440
ARP Table442
C Ha Pte R 53 ARP T a B Le442
Overview442
What You Can Do442
What You Need to Know442
Viewing the ARP Table442
Path MTU Table444
C Ha Pte R 54 Pa Th MT U T a B Le444
Path MTU Overview444
Viewing the Path MTU Table444
Configure Clone445
C Ha Pte R 55 C O Nfig Ure C lo Ne445
Overview445
Ipv6 Neighbor Table448
C Ha Pte R 56 Ipv6 Ne Ig Hb O R T a B Le448
Ipv6 Neighbor Table Overview448
Viewing the Ipv6 Neighbor Table448
Port Status450
C Ha Pte R 57 Po Rt Sta Tus450
Overview450
Port Details451
DDMI454
DDMI Details454
Port Utilization456
Networked AV Mode457
C Ha Pte R 58 Ne Two Rke D AV Mo de457
Overview457
Summary457
System460
C Ha Pte R 59 Syste M460
What You Can Do460
System Information460
General Setup461
Cloud Management463
Port465
C Ha Pte R 60 Po Rt465
What You Can Do465
Poe Status465
Poe Setup467
Port Setup469
Switching472
C Ha Pte R 61 Switc Hing472
Broadcast Storm Control472
Link Aggregation473
What You Can Do473
Link Aggregation Status474
Link Aggregation Setting475
Link Aggregation Control Protocol477
Vlan479
What You Can Do479
What You Need to Know479
VLAN Status482
VLAN Detail483
Static VLAN484
VLAN Port Setting486
Multicast488
What You Can Do488
Ipv4 Multicast Status488
IGMP Snooping489
IGMP Snooping VLAN493
IGMP Filtering Profile494
Networking497
C Ha Pte R 62 Ne Two Rking497
IP Setup497
Security499
C Ha Pte R 63 Se C Urity499
Access Control499
What You Can Do499
Set up Login Accounts499
Remote Management501
Configure SNMP503
Configure SNMP Trap Group505
Enable or Disable Sending of SNMP Traps on a Port506
Configure SNMP User508
Service Access Control510
Maintenance511
Ma Inte Na Nc E511
What You Can Do511
Backup Configuration511
Firmware Upgrade512
Reboot System513
Restore Configuration514
Save Configuration514
Tech-Support515
Port Mirroring515
T Ro Ub Le Sho O Ting a Nd Appe Ndic E S517
Pa Rt III: T Ro Ub Le Sho O Ting a Nd Appe Ndic E S517
Troubleshooting518
C Ha Pte R 65 T Ro Ub Le Sho O Ting518
Power, Hardware Connections, and Leds518
Switch Access and Login519
Switch Configuration520
Appendix A Customer Support522
Appendix B Common Services528
Appendix C Ipv6531
Appendix D Legal Information540
Inde X544

ZyXEL Communications GS2220 Series - Page 425

Table of Contents

Related product manuals