EasyManua.ls Logo

ZyXEL Communications GS3700 Series User Manual

ZyXEL Communications GS3700 Series
548 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
Page #1 background imageLoading...
Page #1 background image
Quick Start Guide
www.zyxel.com
GS3700/ XGS3700 Series
GbE L2+ Switch
Version 4.30
Edition 1, 10/ 2015
Copyright © 2015 ZyXEL Communications Corporation
User’s Guide
Default Login Details
IP Address http: / / 192.168.0.1 (Out-
of-band MGMT port)
http:/ / 192.168.1.1 (In-
band ports)
User Name admin
Password 1234

Table of Contents

Question and Answer IconNeed help?

Do you have a question about the ZyXEL Communications GS3700 Series and is the answer not in the manual?

ZyXEL Communications GS3700 Series Specifications

General IconGeneral
BrandZyXEL Communications
ModelGS3700 Series
CategorySwitch
LanguageEnglish

Summary

User's Guide

Getting to Know Your Switch

Introduces the main features and applications of the switch, covering its hardware and management methods.

Hardware Installation and Connection

Details the process of installing and connecting the switch, including freestanding and rack mounting.

Hardware Overview

Describes the front and rear panels of the switch, including port connections and LEDs.

The Web Configurator

Introduction to the Web Configurator

Details the HTML-based management interface and supported browsers for switch setup.

System Login

Explains how to access the switch via a web browser using its IP address and default credentials.

The Web Configurator Layout

Describes the navigation panel components and quick links for managing the switch.

Saving Your Configuration

Explains how to save configuration changes to run-time memory and non-volatile memory.

Resetting the Switch

Covers reloading the factory-default configuration file to restore the switch to its initial state.

Basic Setting

System Information

Allows checking firmware version and monitoring switch temperature, fan speeds, and voltage.

General Setup

Covers configuring general settings like system name, time, and contact person.

Switch Setup

Details configuring global switch parameters such as VLAN type and MAC address learning.

IP Setup

Explains configuring the default gateway, domain name server, and managing IP domains.

Port Setup

Allows configuring port settings like speed, duplex mode, flow control, and priority.

PoE Setup

Covers setting priority levels for distributing power to PDs and managing PoE modes.

Interface Setup

Details configuring IPv6 addresses on physical or virtual interfaces.

IPv6 Configuration

Guides on configuring global IPv6 settings, interface setup, and addressing.

Stacking Configuration

Explains how to configure switches for stacking mode and manage master election.

DNS Setup

Covers configuring and viewing default DNS servers for domain name resolution.

VLAN

Introduction to IEEE 802.1Q Tagged VLANs

Explains tagged VLANs, their membership identification, and frame format.

Automatic VLAN Registration

Details GARP and GVRP protocols used for automatic VLAN membership registration.

Port VLAN Trunking

Enables frames belonging to unknown VLAN groups to pass through a port.

802.1Q Static VLAN

Covers static VLAN configuration for deciding frame forwarding based on VLAN tag.

VLAN Status

Displays a summary of configured VLANs, including index, VID, elapsed time, and status.

VLAN Details

Provides detailed port settings and status of VLAN groups, including private VLAN information.

Private VLAN Status

Shows information for all private VLANs, including primary, secondary, and type.

VLAN Configuration

Covers viewing IEEE 802.1Q VLAN parameters and configuring static, subnet, or protocol-based VLANs.

Subnet Based VLANs

Allows grouping traffic into logical VLANs based on source IP subnet.

Protocol Based VLANs

Groups traffic into logical VLANs based on specified protocols like IP or AppleTalk.

Port-based VLAN Setup (Standalone Mode)

Configures port-based VLANs where packet forwarding is based on destination MAC address.

Voice VLAN

Ensures IP phone call quality by separating voice traffic into a dedicated VLAN.

MAC Based VLAN

Assigns incoming untagged packets to a VLAN based on the source MAC address.

Static MAC Forward Setup

Overview of Static MAC Forwarding

Discusses configuring forwarding rules based on MAC addresses for enhanced security.

Configuring Static MAC Forwarding

Details how to manually enter static MAC addresses to reduce broadcasting needs.

Static Multicast Forward Setup

Overview of Static Multicast Forwarding

Explains static multicast MAC addresses and how they are used to forward traffic.

Configuring Static Multicast Forwarding

Covers configuring rules to forward specific multicast frames to specific ports.

Filtering

Configure a Filtering Rule

Details how to configure the switch to filter traffic based on source/destination MAC and VLAN.

Spanning Tree Protocol

STP/RSTP Overview

Explains how STP/RSTP detects and breaks network loops, providing backup links.

STP Terminology

Defines key terms like root bridge and path cost for spanning tree operations.

How STP Works

Describes the process of determining the lowest cost spanning tree and enabling ports.

STP Port States

Explains the five port states used by STP to eliminate packet looping.

Multiple STP

Covers Multiple Spanning Tree Protocol (IEEE 802.1s) features and limitations.

Spanning Tree Protocol Status Screen

Allows viewing STP mode configuration and status.

Spanning Tree Configuration

Details how to activate STP modes (RSTP, MRSTP, MSTP) on the switch.

Configure Rapid Spanning Tree Protocol

Guides on configuring RSTP settings for faster spanning tree convergence.

Rapid Spanning Tree Protocol Status

Displays the status of RSTP configuration and port states.

Configure Multiple Spanning Tree Protocol

Details how to configure MRSTP and MSTP for managing multiple spanning trees.

Multiple Spanning Tree Protocol Status

Shows the status of MSTP configuration, including bridge ID and port roles.

Bandwidth Control

Bandwidth Control Overview

Explains defining maximum allowable bandwidth for incoming and outgoing traffic flows on a port.

CIR and PIR

Defines Committed Information Rate (CIR) and Peak Information Rate (PIR) for traffic policing.

Bandwidth Control Setup

Guides on configuring bandwidth control settings via the web interface.

Broadcast Storm Control

Broadcast Storm Control Setup

Limits broadcast, multicast, and DLF packets per second on ports to prevent storms.

Mirroring

Port Mirroring

Allows copying traffic flow to a monitor port for traffic examination without interference.

Local Port Mirroring

Configures mirroring ports and monitor port on the same device.

Remote Port Mirroring

Sets up RMirror VLAN for forwarding mirrored traffic across the network.

Source Configuration

Configures the reflector port and traffic direction for remote port mirroring.

Destination Configuration

Specifies the RMirror VLAN and monitor port when the switch is the destination device.

Connected Port Configuration

Selects ports to forward mirrored traffic to other switches or receive traffic.

Link Aggregation

Link Aggregation Overview

Explains grouping physical ports into a logical link for higher bandwidth and redundancy.

Dynamic Link Aggregation

Details support for IEEE 802.3ad standard and Link Aggregation Control Protocol (LACP).

Link Aggregation Setting

Guides on configuring static link aggregation groups and criteria.

Link Aggregation Control Protocol

Covers enabling dynamic link aggregation using LACP.

Static Trunking Example

Provides a practical example of creating a static port trunk group.

Port Authentication

Port Authentication Overview

Explains validating access to ports using IEEE 802.1x and MAC authentication methods.

IEEE 802.1x Authentication

Details the process of client authentication using username and password via RADIUS server.

MAC Authentication

Describes MAC authentication using client MAC address and a configured password.

Port Authentication Configuration

Guides on activating port authentication methods and configuring RADIUS server settings.

Activate IEEE 802.1x Security

Steps to activate IEEE 802.1x security on the switch and its ports.

Guest VLAN Configuration

Enables and assigns a guest VLAN to a port for unauthenticated users.

Activate MAC Authentication

Details the process to activate MAC authentication on the switch.

Port Security

About Port Security

Explains port security allowing only learned or static MAC addresses to pass through a port.

Port Security Setup

Guides on enabling port security, disabling MAC learning, and configuring static MAC addresses.

VLAN MAC Address Limit

Sets the MAC address learning limit on a per-port and per-VLAN basis.

Time Range

About Time Range

Explains setting time ranges for time-oriented features like Classifier ACL.

Time Range Setup

Covers configuring time ranges in Absolute and Periodic modes.

Classifier

About the Classifier and QoS

Introduces Quality of Service (QoS) for prioritizing traffic and traffic classification.

Classifier Status

Allows viewing configured classifiers and how many times traffic matches the rules.

Classifier Configuration

Defines classifiers to sort traffic into different flows and specifies actions for matching rules.

Viewing and Editing Classifier Configuration

Provides a summary table of classifier configurations and allows editing rule settings.

Classifier Global Setting Configuration

Covers configuring match order and enabling logging for classifiers.

Classifier Example

Demonstrates configuring a classifier to identify traffic based on MAC address and port.

Policy Rule

Policy Rules Overview

Explains how classifiers distinguish traffic and policy rules ensure requested treatment.

DiffServ

Covers Differentiated Services model for marking packets with DSCP for per-hop treatment.

DSCP and Per-Hop Behavior

Details the DSCP field in the IP header and its role in determining forwarding behavior.

Configuring Policy Rules

Guides on configuring policy routes to override default routing based on classifiers and actions.

Policy Example

Demonstrates configuring a policy to limit bandwidth and discard out-of-profile traffic.

Queuing Method

Queuing Method Overview

Introduces queuing methods to solve performance degradation during network congestion.

Strictly Priority Queuing

Explains SP queuing that services queues based on priority only.

Weighted Fair Queuing

Details WFQ for guaranteeing minimum bandwidth based on queue weight during congestion.

Weighted Round Robin Scheduling (WRR)

Describes WRR for servicing queues on a rotating basis based on priority and weight.

Configuring Queuing

Guides on configuring queuing algorithms for outgoing traffic.

VLAN Stacking

VLAN Stacking Overview

Explains using VLAN stacking to distinguish multiple customer VLANs within a network.

VLAN Stacking Port Roles

Defines port roles: Normal, Access Port, and Tunnel Port for VLAN stacking.

VLAN Tag Format

Describes the format of a VLAN tag for service provider or customer 802.1Q stacking.

Configuring VLAN Stacking

Guides on configuring VLAN stacking settings via the web interface.

Port-based Q-in-Q

Allows the switch to treat all frames on a port as the same VLAN flows and add an outer VLAN tag.

Selective Q-in-Q

Adds different outer VLAN tags to incoming frames based on their inner VLAN tags.

Multicast

Multicast Overview

Introduces multicast features like IGMP and MLD protocols for group communication.

IP Multicast Addresses

Explains IPv4 and IPv6 multicast address ranges and their functionality.

IGMP Filtering

Controls which IGMP groups subscribers can join on a port for multicast service distribution.

IGMP Snooping

Details how the switch passively snoops IGMP packets to learn multicast group membership.

IGMP Snooping and VLANs

Covers performing IGMP snooping on up to 16 VLANs in auto or fixed mode.

MLD Snooping-Proxy

Describes the ZyXEL proprietary feature for IPv6 MLD proxy to minimize control messages.

MLD Messages

Explains MLD general queries, MLD Report, and MLD Done messages.

Multicast Setup

Guides on configuring IGMP for IPv4 or MLD for IPv6 and setting up multicast VLANs.

IPv4 Multicast Status

Shows IPv4 multicast group information and IGMP snooping status.

IGMP Snooping

Details the configuration of IGMP snooping for multicast traffic forwarding.

IGMP Snooping VLAN

Covers enabling IGMP snooping on specific VLANs or automatically learning membership.

IGMP Filtering Profile

Specifies multicast IP address ranges for clients allowed to join multicast groups.

IPv6 Multicast Status

Displays IPv6 multicast group information, including MLD snooping and filtering.

MLD Snooping-proxy

Guides on configuring MLD snooping-proxy settings to minimize control messages.

MLD Snooping-proxy VLAN

Covers configuring MLD snooping-proxy settings for specific VLAN interfaces.

MLD Snooping-proxy VLAN Port Role Setting

Sets port roles (Downstream, Upstream, None) for MLD snooping-proxy in VLANs.

MLD Snooping-proxy Filtering

Configures the switch's MLD filtering settings to control multicast group access.

MLD Snooping-proxy Filtering Profile

Creates MLD filtering profiles to set multicast address ranges for allowed joins.

MVR Overview

Introduces Multicast VLAN Registration (MVR) for sharing multicast VLANs across networks.

Types of MVR Ports

Defines MVR port types: Source port and Receiver port.

MVR Modes

Explains MVR operation modes: Dynamic and Compatible.

How MVR Works

Illustrates MVR operation with a multicast television example.

General MVR Configuration

Guides on creating multicast VLANs and selecting receiver and source ports.

MVR Group Configuration

Covers configuring MVR IP multicast group addresses.

MVR Configuration Example

Provides an example of configuring MVR settings for multicast VLANs.

AAA

Authentication, Authorization and Accounting (AAA)

Explains the AAA processes: determining user identity, defining access rights, and recording actions.

Local User Accounts

Describes storing user profiles locally for authentication and authorization.

RADIUS and TACACS+

Compares RADIUS and TACACS+ security protocols for external authentication.

AAA Screens

Guides on enabling authentication, authorization, and accounting settings on the switch.

RADIUS Server Setup

Details configuring RADIUS server settings for authentication and accounting.

TACACS+ Server Setup

Covers configuring TACACS+ server settings for authentication and accounting.

AAA Setup

Explains configuring authentication, authorization, and accounting settings via AAA setup screen.

Supported RADIUS Attributes

Lists RADIUS attributes for authentication and accounting elements in user profiles.

Attributes Used for Authentication

Details attributes sent to RADIUS server for authentication, including Privilege Access.

Attributes Used for Accounting

Lists attributes sent to RADIUS server for accounting, covering system and exec events.

IP Source Guard

IP Source Guard Overview

Explains using a binding table to distinguish authorized/unauthorized DHCP and ARP packets.

What You Can Do with IP Source Guard

Guides on using IP Source Guard screens for bindings, DHCP snooping, and ARP inspection.

IPv4 Source Guard Setup

Covers viewing current bindings for DHCP snooping and ARP inspection.

IPv4 Source Guard Static Binding

Details creating and managing static bindings for DHCP snooping and ARP inspection.

DHCP Snooping

Provides statistics about the DHCP snooping database.

DHCP Snooping Configure

Enables DHCP snooping, specifies VLAN for DHCP server, and configures the database.

DHCP Snooping Port Configure

Specifies whether ports are trusted or untrusted for DHCP snooping.

DHCP Snooping VLAN Configure

Enables DHCP snooping on VLANs and specifies Option 82 information relay.

DHCP Snooping VLAN Port Configure

Applies a different DHCP option 82 profile to specific ports within a VLAN.

ARP Inspection Status

Shows MAC address filters created due to unauthorized ARP packets.

ARP Inspection VLAN Status

Provides statistics about ARP packets received in each VLAN.

ARP Inspection Log Status

Allows viewing log messages generated by ARP packets.

ARP Inspection Configure

Enables ARP inspection and configures record storage and global settings.

ARP Inspection Port Configure

Specifies trusted/untrusted ports for ARP inspection and maximum packet rate.

ARP Inspection VLAN Configure

Enables ARP inspection on VLANs and specifies log message generation.

IPv6 Source Guard Overview

Explains using a binding table to validate IPv6 traffic sources.

IPv6 Source Binding Status

Allows viewing and removing dynamic IPv6 bindings based on address or prefix.

IPv6 Static Binding Setup

Guides on manually creating IPv6 source guard binding table entries.

IPv6 Source Guard Policy Setup

Defines policies to forward valid IPv6 addresses/prefixes and manage link-local traffic.

IPv6 Source Guard Port Setup

Applies configured IPv6 source guard policies to specified ports.

IPv6 Snooping Policy Setup

Dynamically creates IPv6 source guard binding tables using DHCPv6 snooping policies.

IPv6 Snooping VLAN Setup

Enables DHCPv6 snooping policy on specific VLAN interfaces.

IPv6 DHCP Trust Setup

Specifies which ports are trusted or untrusted for DHCPv6 snooping.

Technical Reference

Provides background information on DHCP Snooping and ARP Inspection.

DHCP Snooping Overview

Explains using DHCP snooping to filter unauthorized DHCP packets and build binding tables.

Trusted vs. Untrusted Ports

Differentiates trusted and untrusted ports for DHCP snooping and ARP inspection.

Loop Guard

Loop Guard Overview

Explains how Loop Guard detects and disables physical one-way links to prevent loops.

Loop Guard Setup

Guides on enabling loop guard on the switch and ports.

VLAN Mapping

VLAN Mapping Overview

Explains mapping VLAN IDs and priorities from private networks to service provider networks.

VLAN Mapping Example

Illustrates VLAN mapping by translating VLAN IDs for incoming packets.

Enabling VLAN Mapping

Covers the steps to enable and display the VLAN mapping screen.

Configuring VLAN Mapping

Guides on enabling and editing VLAN mapping rules.

Layer 2 Protocol Tunneling

Layer 2 Protocol Tunneling Overview

Explains L2PT for tunneling layer-2 protocols like STP, CDP, and VTP across networks.

Layer-2 Protocol Tunneling Mode

Defines two modes: Access (ingress) and Tunnel (egress) for layer-2 protocol tunneling.

Configuring Layer 2 Protocol Tunneling

Guides on configuring L2PT settings via the navigation panel.

sFlow

sFlow Overview

Introduces sFlow as a technology for monitoring switched networks and analyzing traffic.

sFlow Port Configuration

Covers configuring sFlow to monitor traffic and send data to an sFlow collector.

sFlow Collector Configuration

Details configuring up to four sFlow collectors for traffic monitoring.

PPPoE

PPPoE Intermediate Agent Overview

Explains the PPPoE Intermediate Agent (PPPoE IA) deployed between PPPoE server and clients.

PPPoE Intermediate Agent Tag Format

Describes the vendor-specific tag format for PADI and PADR packets from PPPoE clients.

Sub-Option Format

Details the formats for Agent Circuit ID and Agent Remote ID sub-options.

Flexible Circuit ID Syntax with Identifier String and Variables

Explains configuring Circuit ID strings with variables for PPPoE clients.

WT-101 Default Circuit ID Syntax

Describes the default Circuit ID syntax defined in DSL Forum Working Text (WT)-101.

Port State

Defines port states (Trusted/Untrusted) for PPPoE intermediate agent.

The PPPoE Screen

Guides on configuring the PPPoE Intermediate Agent on the switch.

PPPoE Intermediate Agent

Covers configuring the switch to provide subscriber information to PPPoE termination servers.

PPPoE IA Per-Port

Specifies trusted/untrusted ports and adding extra info to PPPoE discovery packets per port.

PPPoE IA Per-Port Per-VLAN

Configures PPPoE IA settings for a specific VLAN on a port.

PPPoE IA for VLAN

Sets PPPoE Intermediate Agent enablement on a VLAN and appending Circuit/Remote ID.

Error Disable

Error Disable Overview

Explains configuring rate limits for control packets and undoing actions after errors resolve.

CPU Protection Overview

Details limiting control packets (ARP, BPDU, IGMP) to enhance CPU efficiency.

Error-Disable Recovery Overview

Describes automatically undoing actions like port shutdown after errors are resolved.

What You Can Do

Guides on viewing Errdisable Status, CPU Protection, Errdisable Detect, and Recovery.

The Error Disable Screen

Covers configuring error disable related settings.

Error-Disable Status

Views port status, feature requirements, and configured actions for detected errors.

CPU Protection Configuration

Limits the maximum number of control packets (ARP, BPDU, IGMP) on a port.

Error-Disable Detect Configuration

Detects control packet rate limit exceedance and configures actions.

Error-Disable Recovery Configuration

Sets the switch to automatically undo actions once the error condition is resolved.

MAC Pinning

MAC Pinning Overview

Explains setting port priority for MAC address learning to enhance security.

MAC Pinning Configuration

Guides on enabling MAC pinning on the switch and specific ports.

Private VLAN

Private VLAN Overview

Explains blocking traffic between ports in the same VLAN using Community and Isolated VLANs.

Configuration

Guides on creating VLAN IDs for Primary, Isolated, or Community VLANs via Static VLAN screen.

Green Ethernet

Green Ethernet Overview

Details ways to reduce switch port power consumption using EEE, Auto Power Down, and Short Reach.

Configuring Green Ethernet

Guides on configuring Energy Efficient Ethernet, Auto Power Down, and Short Reach settings.

Link Layer Discovery Protocol (LLDP)

LLDP Overview

Introduces LLDP as a layer 2 protocol for advertising device identity and capabilities.

LLDP-MED Overview

Explains LLDP-MED as an extension for media endpoint devices, enhancing topology management.

LLDP Screens

Navigates to LLDP Local Status, Remote Status, and Configuration screens.

LLDP Local Status

Displays a summary of LLDP status on the switch, including basic and MED TLVs.

LLDP Remote Status

Provides a summary of LLDP status for connections to neighboring switches.

LLDP Configuration

Covers configuring global LLDP settings, including basic and organization-specific TLVs.

LLDP-MED Configuration

Guides on configuring LLDP-MED parameters like Notification, Location, and Network Policy.

LLDP-MED Network Policy

Configures organization-specific TLV settings for network policies like Voice and Video.

LLDP-MED Location

Covers configuring location information using geographical coordinates and Civic Address.

Anti-Arpscan

Anti-Arpscan Overview

Explains detecting unusual ARP scan activity and blocking suspicious hosts or ports.

What You Can Do with Anti-Arpscan

Guides on using Anti-Arpscan Status, Host Status, Trust Host, and Configure screens.

Anti-Arpscan Status

Shows trusted/untrusted ports and their status (Forwarding or Err-Disable).

Anti-Arpscan Host Status

Allows viewing blocked hosts and unblocking them.

Anti-Arpscan Trust Host

Covers creating or removing trusted hosts identified by IP address and subnet mask.

Anti-Arpscan Configure

Enables Anti-Arpscan, sets port/host thresholds, and configures trusted/untrusted ports.

BPDU Guard

BPDU Guard Overview

Explains preventing new STP-aware switches from causing topology changes by detecting BPDUs.

What You Can Do with BPDU Guard

Guides on viewing BPDU Guard Status and enabling BPDU Guard.

BPDU Guard Status

Shows whether BPDU guard is enabled and the port status.

BPDU Guard Configuration

Covers turning on the BPDU guard feature on the switch and ports.

OAM

OAM Overview

Introduces Ethernet OAM (Operations, Administration and Maintenance) as a link monitoring protocol.

What You Can Do with OAM

Guides on viewing OAM Status, configuring OAM, and performing remote loopback tests.

OAM Status

Displays configuration and operational status of ports with Ethernet OAM enabled.

OAM Details

Provides detailed OAM configuration and operational status for specific ports.

OAM Configuration

Covers enabling Ethernet OAM on the switch and ports.

OAM Remote Loopback

Guides on performing remote-loopback tests to check link status.

ZULD

ZULD Overview

Explains ZyXEL Unidirectional Link Detection (ZULD) for detecting and disabling physical one-way links.

What You Can Do with ZULD

Guides on viewing ZULD status and enabling ZULD on ports.

What You Need to Know about ZULD

Highlights requirements for ZULD, including enabling OAM and port settings.

ZULD Status

Displays details of unidirectional and bidirectional links discovered by ZULD.

ZULD Configuration

Covers enabling ZULD on a port, configuring mode, and setting probe time.

Static Route

Static Routing Overview

Explains using static routes to send data to devices not reachable via the default gateway.

Static Routing

Guides on configuring IPv4 and IPv6 static routing rules.

Configuring IPv4 Static Routing

Details creating static routes for IPv4 destinations, including IP address and subnet mask.

Configuring IPv6 Static Routing

Covers creating static routes for IPv6 destinations, including prefix length and next hop.

Policy Routing

Policy Route Overview

Explains how policy routing overrides default behavior based on defined policies and classifiers.

Benefits of Policy Routing

Highlights benefits like Source-Based Routing, Cost Savings, and Load Sharing.

Configuring Policy Routing Profile

Guides on configuring policy routing profiles and rules based on classifiers and actions.

Policy Routing Rule Configuration

Details configuring policy routes to override default routing behavior.

Differentiated Services

DiffServ Overview

Introduces Quality of Service (QoS) for prioritizing traffic flows based on application types.

DSCP and Per-Hop Behavior

Explains the DSCP field and its role in determining Per-Hop Behavior (PHB).

DiffServ Network Example

Depicts a DiffServ network for classifying and marking incoming packets.

Two Rate Three Color Marker Traffic Policing

Details traffic policing using TRTCM to limit transmission rates based on CIR and PIR.

TRTCM - Color-blind Mode

Explains TRTCM color-blind mode where packets are evaluated regardless of prior marking.

TRTCM - Color-aware Mode

Describes TRTCM color-aware mode where evaluation uses existing packet loss priority.

Activating DiffServ

Covers activating DiffServ to apply marking rules or 802.1p priority mapping.

Configuring 2-Rate 3 Color Marker Settings

Guides on configuring TRTCM settings for traffic policing.

DSCP Profile

Explains creating DSCP profiles for assigning DSCP values to packets based on color.

DSCP-to-IEEE 802.1p Priority Settings

Covers configuring DSCP to 802.1p mapping for traffic prioritization.

Configuring DSCP Settings

Details changing DSCP to 802.1p mapping via the DSCP Setting screen.

DHCP

DHCP Overview

Introduces DHCP for obtaining TCP/IP configuration and configuring the switch as a server or relay agent.

DHCP Modes

Explains configuring the switch as a DHCP server or a DHCP relay agent.

DHCP Configuration Options

Divides DHCP configuration into Global and VLAN screens for network services.

DHCP Configuration

Guides on enabling and configuring DHCPv4 server/relay settings.

DHCPv4 Status

Displays configuration settings related to the switch's DHCP server and relay modes.

DHCPv4 Server Status Detail

Provides details regarding DHCP server settings configured on the switch.

DHCPv4 Relay

Covers configuring DHCP relay when clients and server are not in the same broadcast domain.

DHCPv4 Relay Agent Information

Explains adding Relay Agent Information to DHCP requests for authentication.

DHCPv4 Option 82 Profile

Guides on creating DHCPv4 option 82 profiles for relaying DHCP requests.

Configuring DHCPv4 Global Relay

Covers configuring global DHCPv4 relay settings.

DHCPv4 Global Relay Port Configure

Applies a DHCP option 82 profile to specific ports within a VLAN.

Configuring DHCP VLAN Settings

Guides on configuring DHCP settings based on VLAN domain of DHCP clients.

DHCPv4 VLAN Port Configure

Applies a different DHCP option 82 profile to specific ports in a VLAN.

Example: DHCP Relay for Two VLANs

Illustrates DHCP relay configuration for two VLANs with different DHCP servers.

DHCPv6 Status

Displays information on DHCPv6 server and status.

DHCPv6 Information

Covers configuring DHCPv6 and DNS server settings.

DHCPv6 Prefix Delegation

Enables IPv6 devices to use received IPv6 prefix to generate IP addresses.

DHCPv6 Relay

Configures DHCPv6 relay settings for a specific VLAN on the switch.

VRRP

VRRP Overview

Explains Virtual Router Redundancy Protocol (VRRP) for redundant backup gateways.

VRRP Status

Displays the status of virtual routers, including Master/Backup roles and uplink status.

VRRP Configuration

Covers configuring IP interface setup and VRRP parameters.

IP Interface Setup

Details creating an IP interface (routing domain) before configuring VRRP.

VRRP Parameters

Describes VRRP parameters like Advertisement Interval, Priority, and Preempt Mode.

Viewing VRRP Summary

Provides a summary of VRRP configuration entries.

VRRP Configuration Examples

Illustrates VRRP configuration with examples for one subnet and two subnets.

Load Sharing

Load Sharing Overview

Explains Equal-Cost MultiPath (ECMP) for forwarding packets via multiple routing paths.

Configuring Load Sharing

Guides on setting up load sharing using ECMP routing.

ARP Setup

ARP Overview

Introduces Address Resolution Protocol (ARP) for mapping IP to MAC addresses.

How ARP Works

Explains the process of ARP requests and replies for address resolution.

ARP Learning Mode

Details the three ARP learning modes: ARP-Reply, Gratuitous-ARP, and ARP-Request.

ARP-Reply

Explains how ARP-Reply learning mode updates the ARP table with ARP replies.

Gratuitous-ARP

Describes gratuitous ARP for detecting IP collisions and informing devices of MAC address changes.

ARP-Request

Explains how ARP-Request learning mode updates the ARP table with ARP replies and requests.

ARP Setup

Guides on setting ARP learning mode and creating static ARP entries.

ARP Learning

Covers configuring each port's ARP learning mode.

Static ARP

Details creating static ARP entries that do not age out.

Maintenance

The Maintenance Screen

Allows managing firmware and configuration files, including upgrade, backup, and restore.

Firmware Upgrade

Guides on uploading and specifying firmware images for the switch.

Restore a Configuration File

Explains restoring a previously saved configuration file from a computer to the switch.

Backup a Configuration File

Details creating configuration snapshots for later restoration.

Erase Running-Configuration

Clears current configuration information on the switch, but not factory defaults.

Reboot System

Allows restarting the switch without powering it off, loading various configurations.

Tech-Support

Provides a log enhancement tool for CPU utilization, memory, and crash reports for issue analysis.

FTP Command Line

Shows examples of uploading/downloading files using FTP commands and filename conventions.

Access Control

Access Control Overview

Describes controlling access via console, Telnet, SSH, FTP, Web, and SNMP.

The Access Control Main Screen

Displays the main screen for managing access control settings.

About SNMP

Explains Simple Network Management Protocol (SNMP) for managing network devices.

SNMP v3 and Security

Details SNMP v3 enhancements for security, including authentication and encryption.

Supported MIBs

Lists supported Management Information Bases (MIBs) for collecting statistics.

SNMP Traps

Describes SNMP traps sent to a manager when events occur, categorized by option.

Configuring SNMP

Guides on configuring SNMP settings, including community strings and trap destinations.

Configuring SNMP Trap Group

Specifies types of SNMP traps to be sent to each SNMP manager.

Enabling/Disabling Sending of SNMP Traps on a Port

Covers setting whether traps received on a port are sent to the SNMP manager.

Configuring SNMP User

Explains creating SNMP users for authentication with managers using SNMPv3.

Setting Up Login Accounts

Guides on configuring administrator and non-administrator login accounts for web access.

SSH Overview

Describes SSH as a secure communication protocol combining authentication and encryption.

How SSH works

Explains the process of establishing a secure SSH connection between hosts.

SSH Implementation on the Switch

Details SSH version 2 support and requirements for using an SSH client.

Introduction to HTTPS

Explains HTTPS as a web protocol for secure data transactions using SSL/TLS.

HTTPS Example

Provides examples of browser warning messages and certificate installation for HTTPS access.

Diagnostic

Diagnostic Screen Overview

Explains using the Diagnostic screen to check system logs and perform ping or port tests.

System Log

Overview of System Log

Explains that log messages store information for viewing.

System Log Screen

Covers checking current system logs, refreshing, clearing, and downloading logs.

Syslog Setup

Syslog Overview

Explains the syslog protocol for sending event notification messages to syslog servers.

Syslog Setup

Guides on configuring system logging settings and external syslog servers.

Cluster Management

Clustering Management Status Overview

Introduces managing switches through a cluster manager for communication within a VLAN group.

Cluster Management Status

Displays the role of switches within the cluster (Manager, Member, None).

Cluster Member Switch Management

Guides on accessing cluster member switches' web configurator home pages.

Clustering Management Configuration

Covers configuring clustering management settings, including cluster manager and candidates.

MAC Table

MAC Table Overview

Introduces the MAC table for showing how frames are forwarded or filtered across switch ports.

Viewing the MAC Table

Guides on searching specific MAC addresses and adding dynamic MAC entries.

IP Table

IP Table Overview

Explains the IP table showing how packets are forwarded or filtered across switch ports.

Viewing the IP Table

Guides on viewing IP table information and sorting data by IP address, VLAN, or port.

ARP Table

ARP Table Overview

Introduces the ARP table for mapping IP addresses to MAC addresses.

How ARP Works

Explains the ARP process for resolving IP to MAC addresses.

The ARP Table Screen

Guides on viewing IP-to-MAC address mappings and removing dynamic ARP entries.

Routing Table

Overview of Routing Table

Introduces the routing table containing route information for network reachability.

Viewing the Routing Table Status

Guides on viewing routing table information and sorting data by destination, gateway, or interface.

Path MTU Table

Path MTU Overview

Introduces Path MTU Discovery for determining the minimum link MTU in a path.

Viewing the Path MTU Table

Covers viewing IPv6 path MTU information on the switch.

Configure Clone

Configure Clone Functionality

Allows copying basic and advanced settings from a source port to destination ports.

IPv6 Neighbor Table

IPv6 Neighbor Table Overview

Explains the IPv6 neighbor table for resolving and verifying neighbor addresses.

Viewing the IPv6 Neighbor Table

Guides on viewing IPv6 neighbor information on the switch.

Troubleshooting

Troubleshooting Power, Hardware Connections, and LEDs

Provides solutions for issues related to switch power, hardware, and LED status.

Switch Access and Login Troubleshooting

Addresses issues with forgotten IP address, username, password, or login screen access.

Switch Configuration Troubleshooting

Covers lost configuration settings after switch restart and unauthorized access prevention.

Appendix A Common Services

Commonly Used Services

Lists commonly used services, their protocols, port numbers, and descriptions.

Appendix B IPv6

IPv6 Overview and Addressing

Explains IPv6 features, address size, and addressing format.

Prefix and Prefix Length

Describes IPv6 address prefix and prefix length specification.

Link-local Address

Explains the link-local address for unique device identification on a local network.

Global Address

Defines global addresses for internet identification, similar to public IPv4 addresses.

Multicast Address

Explains IPv6 multicast addresses providing the same functionality as IPv4 broadcast addresses.

Stateless Autoconfiguration

Details automatic IPv6 address generation using prefix and interface ID.

DHCPv6 Overview

Introduces DHCPv6 as a protocol for assigning IPv6 network addresses.

DHCP Relay Agent

Explains DHCP relay agent's role in forwarding messages between clients and servers.

Appendix C Customer Support

Contacting Customer Support

Provides information on contacting ZyXEL support offices worldwide for assistance.

Required Information for Support

Lists essential details needed when contacting support, like model and serial number.

Appendix D Legal Information

Copyright and Disclaimer

States copyright information and ZyXEL's liability disclaimer.

Regulatory Notice and Statement

Includes FCC and Industry Canada statements for compliance.

Environmental Product Declaration

Provides WEEE directive information for product disposal and recycling.

ZyXEL Limited Warranty

Details the product warranty terms and conditions.

Index

Related product manuals