ZyXEL Communications XGS4600 Series

To Next Page

To Previous Page

Chapter 59 Access Control

XGS4600 Series User’s Guide

559

Figure 460 Example: Lock Denoting a Secure Connection

EXAMPLE

Main Page

default chapter3
- Document Conventions3
- Contents Overview4
- Table of Contents4
- Table of Contents6
- Part I: User's Guide24
- User's Guide24
- Getting to Know Your Switch25
- Introduction25
- License Option25
- Stacking Mode25
- Bridging or Fiber Uplink Example Application26
- Example Applications26
- ZON Utility26
- Gigabit Ethernet to the Desktop27
- High Performance Switching Example27
- IEEE 802.1Q VLAN Application Examples28
- Good Habits for Managing the Switch29
- Ipv6 Support29
- Ways to Manage the Switch29
- Freestanding Installation Procedure30
- Hardware Installation and Connection30
- Safety Precautions30
- Installation Requirements31
- Mounting the Switch on a Rack31
- Precautions31
- Attaching the Mounting Brackets to the Switch32
- Mounting the Switch on a Rack32
Chapter 3 Hardware Panels34
- Front Panel Connections34
- Hardware Panels34
- Ethernet Ports35
- SFP/SFP+ Slots35
- Console Port38
- Dual Personality Interfaces38
- Management Port38
- Rear Panel38
- Grounding39
- AC Power Connection (AC Models Only)41
- DC Power Connection (DC Models Only)41
- Leds42
- Part II: Technical Reference44
- Technical Reference44
Chapter 4 Web Configurator45
- Overview45
- System Login45
- Web Configurator45
- Requirements48
- Run the ZON Utility48
- Zyxel One Network (ZON) Utility48
- Web Configurator Layout52
- Change Your Password57
- Save Your Configuration58
- Switch Lockout58
- Reload the Configuration File59
- Reset the Switch59
- Help60
- Log out of the Web Configurator60
- Create a VLAN61
- Initial Setup Example61
- Overview61
- Set Port VID62
- Configure Switch Management IP Address63
Chapter 6 Tutorials65
- How to Use Dhcpv4 Snooping on the Switch65
- Overview65
- Tutorials65
- DHCP Relay Tutorial Introduction69
- How to Use Dhcpv4 Relay on the Switch69
- Create a VLAN70
- Configure Dhcpv4 Relay72
- How to Use Auto Configuration through a DHCP Server on the Switch73
- Troubleshooting73
Chapter 7 Status77
- Overview77
- Status77
- What You Can Do77
- Neighbor Screen79
- Neighbor Detail80
- Basic Setting83
Chapter 8 Basic Setting83
- Overview83
- System Information83
- What You Can Do83
- System Information Stacking Hardware Monitor86
- General Setup87
- Introduction to Vlans89
- Switch Setup90
- IP Interfaces92
- IP Setup92
- IP Status92
- IP Status Details93
- IP Configuration94
- Port Setup97
- Interface Setup99
- Ipv6100
- Ipv6 Status100
- Ipv6 Interface Status101
- Ipv6 Configuration103
- Ipv6 Global Setup104
- Ipv6 Interface Setup104
- Ipv6 Link-Local Address Setup105
- Ipv6 Global Address Setup106
- Ipv6 Neighbor Discovery Setup107
- Ipv6 Router Discovery Setup108
- Ipv6 Prefix Setup110
- Ipv6 Neighbor Setup111
- Dhcpv6 Client Setup112
- Ipv4 Loopback Interface114
- Loopback Interface114
- Stacking115
- Stacking Status116
- Stacking Slot117
- Stacking Configuration118
Chapter 9 VLAN121
- Overview121
- Vlan121
- What You Can Do121
- What You Need to Know121
- Introduction to IEEE 802.1Q Tagged Vlans122
- VLAN Status124
- VLAN Details125
- Private VLAN Status126
- VLAN Configuration127
- Configure a Static VLAN128
- Configure VLAN Port Settings130
- Subnet Based Vlans132
- Configuring Subnet Based VLAN133
- Configuring Protocol Based VLAN135
- Protocol Based Vlans135
- Voice VLAN138
- MAC Based VLAN140
- Vendor ID Based VLAN141
- Configure a Port-Based VLAN143
- Port-Based VLAN Setup143
Chapter 10 Static MAC Forwarding147
- Configure Static MAC Forwarding147
- Overview147
- Static MAC Forwarding147
- What You Can Do147
- Overview150
- Static Multicast Forwarding150
- What You Can Do150
- What You Need to Know150
- Configure Static Multicast Forwarding151
Chapter 12 Filtering153
- Configure a Filtering Rule153
- Filtering153
- Filtering Overview153
- What You Can Do153
- Spanning Tree Protocol155
- Spanning Tree Protocol Overview155
- What You Can Do155
- What You Need to Know155
- Spanning Tree Configuration158
- Spanning Tree Protocol Status158
- Rapid Spanning Tree Protocol Status159
- Configure Rapid Spanning Tree Protocol161
- Configure Multiple Spanning Tree Protocol163
- Multiple Spanning Tree Protocol Port Configuration167
- Multiple Spanning Tree Protocol Status169
- Configure Multiple Rapid Spanning Tree Protocol173
- Multiple Rapid Spanning Tree Protocol Status175
- MST Region178
- MSTP Network Example178
- Technical Reference178
- Common and Internal Spanning Tree (CIST)179
- MST Instance179
- Bandwidth Control181
- Bandwidth Control Overview181
- Bandwidth Control Setup181
Chapter 14 Bandwidth Control181
- CIR and PIR181
- What You Can Do181
- Broadcast Storm Control184
- Broadcast Storm Control Overview184
- Broadcast Storm Control Setup184
- What You Can Do184
Chapter 16 Mirroring187
- Mirroring187
- Mirroring Overview187
- Remote Port Mirroring191
- Source191
- Destination193
- Connected Port195
Chapter 17 Link Aggregation198
- Link Aggregation198
- Link Aggregation Overview198
- What You Can Do198
- What You Need to Know198
- Link Aggregation Status199
- Link Aggregation Setting200
- Link Aggregation Control Protocol203
- Static Trunking Example206
- Technical Reference206
Chapter 18 Port Authentication208
- Port Authentication208
- Port Authentication Overview208
- What You Can Do208
- MAC Authentication209
- What You Need to Know209
- Activate IEEE 802.1X Security210
- Port Authentication Configuration210
- Activate MAC Authentication213
- Guest VLAN216
- Compound Authentication219
- IEEE 802.1X222
- Radius222
- Technical Reference222
- EAP (Extensible Authentication Protocol) Authentication223
- EAPOL (EAP over LAN)224
- About Port Security225
Chapter 19 Port Security225
- Port Security225
- Port Security Setup225
- VLAN MAC Address Limit227
Chapter 20 Time Range229
- Configuring Time Range229
- Time Range229
- Time Range Overview229
- What You Can Do229
Chapter 21 Classifier231
- Classifier231
- Classifier Overview231
- What You Can Do231
- What You Need to Know231
- Classifier Configuration232
- Classifier Status232
- Viewing and Editing Classifier Configuration Summary236
- Classifier Global Setting Configuration237
- Classifier Example238
Chapter 22 Policy Rule240
- Diffserv240
- DSCP and Per-Hop Behavior240
- Policy Rule240
- Policy Rules Overview240
- What You Can Do240
- Configuring Policy Rules241
- Policy Example243
Chapter 23 Queuing Method245
- Queuing Method245
- Queuing Method Overview245
- What You Can Do245
- What You Need to Know245
- Configuring Queuing246
Chapter 24 VLAN Stacking249
- VLAN Stacking249
- VLAN Stacking Example249
- VLAN Stacking Overview249
- VLAN Stacking Port Roles250
- VLAN Tag Format250
- Configuring VLAN Stacking251
- Frame Format251
- Port-Based Q-In-Q253
- Selective Q-In-Q255
Chapter 25 Multicast257
- Multicast257
- Multicast Overview257
- What You Can Do257
- What You Need to Know258
- Ipv4 Multicast Status261
- Multicast Setup261
- IGMP Snooping262
- IGMP Snooping VLAN266
- IGMP Filtering Profile267
- Ipv6 Multicast Status268
- MLD Snooping-Proxy268
- MLD Snooping-Proxy VLAN269
- MLD Snooping-Proxy VLAN Port Role Setting271
- MLD Snooping-Proxy Filtering273
- MLD Snooping-Proxy Filtering Profile275
- General MVR Configuration276
- MVR Group Configuration279
- MVR Configuration Example281
- Aaa283
- Authentication, Authorization and Accounting (AAA)283
Chapter 26 AAA283
- What You Can Do283
- What You Need to Know283
- AAA Screens284
- RADIUS Server Setup285
- TACACS+ Server Setup286
- AAA Setup288
- Technical Reference290
- Vendor Specific Attribute290
- Attributes Used for Authentication292
- Supported RADIUS Attributes292
- Attributes Used for Accounting293
Chapter 27 IP Source Guard296
- IP Source Guard296
- IP Source Guard Overview296
- What You Can Do296
- What You Need to Know296
- IP Source Guard297
- Ipv4 Source Guard Setup297
- Ipv4 Source Guard Static Binding298
Chapter 28 DHCP Snooping301
- DHCP Snooping301
- DHCP Snooping Overview301
- What You Can Do301
- DHCP Snooping Configure304
- DHCP Snooping Port Configure306
- DHCP Snooping VLAN Configure308
- DHCP Snooping VLAN Port Configure309
- DHCP Snooping Overview310
- Technical Reference310
- ARP Inspection312
- ARP Inspection Status312
Chapter 29 ARP Inspection312
- ARP Inspection Log Status313
- ARP Inspection VLAN Status313
- ARP Inspection Configure314
- ARP Inspection Port Configure316
- ARP Inspection VLAN Configure317
- Ipv6 Source Guard Overview318
- Ipv6 Source Binding Status319
- Ipv6 Static Binding Setup320
- Ipv6 Source Guard Policy Setup322
- Ipv6 Source Guard Port Setup323
- Ipv6 Snooping Policy Setup324
- Ipv6 Snooping VLAN Setup325
- Ipv6 DHCP Trust Setup326
- ARP Inspection Overview328
- Technical Reference328
Chapter 30 Loop Guard330
- Loop Guard330
- Loop Guard Overview330
- What You Can Do330
- What You Need to Know330
- Loop Guard Setup332
Chapter 31 VLAN Mapping334
- VLAN Mapping334
- VLAN Mapping Example334
- VLAN Mapping Overview334
- Enable VLAN Mapping335
- What You Can Do335
- VLAN Mapping Configure336
- Layer 2 Protocol Tunneling338
- Layer 2 Protocol Tunneling Overview338
- What You Can Do338
- What You Need to Know338
- Configuring Layer 2 Protocol Tunneling339
Chapter 33 Sflow343
- Sflow343
- Sflow Overview343
- Sflow Port Configuration343
- Sflow Collector Configuration345
Chapter 34 Pppoe347
- Pppoe347
- Pppoe Intermediate Agent Overview347
- What You Can Do347
- What You Need to Know347
- Pppoe349
- Pppoe Intermediate Agent350
- Pppoe IA Per-Port351
- Pppoe IA Per-Port Per-VLAN353
- Pppoe IA for VLAN354
Chapter 35 Error-Disable356
- CPU Protection Overview356
- Error-Disable356
- Error-Disable Overview356
- Error-Disable Recovery Overview356
- What You Can Do356
- Error-Disable Settings357
- Error-Disable Status357
- CPU Protection Configuration359
- Error-Disable Detect Configuration361
- Error-Disable Recovery Configuration362
Chapter 36 VLAN Isolation363
- Configuring VLAN Isolation363
- VLAN Isolation363
- VLAN Isolation Overview363
Chapter 37 MAC Pinning365
- MAC Pinning365
- MAC Pinning Configuration365
- MAC Pinning Overview365
Chapter 38 Private VLAN368
- Private VLAN368
- Private VLAN Overview368
- Configuration369
Chapter 39 Green Ethernet372
- Configuring Green Ethernet372
- Green Ethernet372
- Green Ethernet Overview372
- Link Layer Discovery Protocol (LLDP)375
- LLDP Overview375
- LLDP-MED Overview376
- LLDP Settings377
- LLDP Local Status378
- LLDP Local Port Status Detail380
- LLDP Remote Status383
- LLDP Remote Port Status Detail384
- LLDP Configuration390
- LLDP Configuration Basic TLV Setting392
- LLDP Configuration Org-Specific TLV Setting393
- LLDP-MED Configuration395
- LLDP-MED Network Policy396
- LLDP-MED Location398
- Anti-Arpscan403
- Anti-Arpscan Overview403
Chapter 41 Anti-Arpscan403
- What You Can Do403
- What You Need to Know403
- Anti-Arpscan Status404
- Anti-Arpscan Host Status405
- Anti-Arpscan Configure406
- Anti-Arpscan Trust Host406
- BPDU Guard409
- BPDU Guard Overview409
- BPDU Guard Status409
Chapter 42 BPDU Guard409
- What You Can Do409
- BPDU Guard Configuration410
Chapter 43 OAM413
- Oam413
- OAM Overview413
- OAM Status413
- What You Can Do413
- OAM Details415
- OAM Configuration418
- OAM Remote Loopback420
Chapter 44 ZULD422
- What You Can Do422
- What You Need to Know422
- Zuld422
- ZULD Overview422
- ZULD Status423
- ZULD Configuration425
Chapter 45 NLB428
- Nlb428
- NLB Overview428
- What You Can Do428
- MAC Forwarding429
- What You Need to Know429
- IP Configuration431
Chapter 46 Wol Relay433
- Wol Relay433
- Wol Relay Overview433
Chapter 47 Static Route435
- Static Route435
- Static Routing Overview435
- What You Can Do435
- Ipv4 Static Route436
- Static Routing436
- Ipv6 Static Route437
- Benefits439
Chapter 48 Policy Routing439
- Configuring Policy Routing Profile439
- Policy Route Overview439
- Policy Routing439
- Policy Routing Rule Configuration440
- Administrative Distance443
Chapter 49 RIP443
- Rip443
- RIP Overview443
- Configuring Ipv4 RIP444
- Configuring Ipv6 RIP446
Chapter 50 OSPF448
- Ospf448
- OSPF Autonomous Systems and Areas448
- OSPF Overview448
- How OSPF Works449
- Interfaces and Virtual Links449
- OSPF and Router Elections449
- Configuring OSPF450
- OSPF Screen450
- Ipv4 OSPF Status451
- Ipv4 OSPF Configuration453
- Configure Ipv4 OSPF Areas454
- Configuring Ipv4 OSPF Redistribution456
- View OSPF Area Information Table456
- Configuring Ipv4 OSPF Interfaces458
- Ipv4 OSPF Virtual-Links460
- Ipv6 OSPF Status462
- Ipv6 OSPF Configuration464
- Ipv6 OSPF Redistribution465
- Ipv6 OSPF Interfaces466
- Ipv6 OSPF Virtual-Links467
Chapter 51 IGMP470
- Igmp470
- IGMP Overview470
- How IGMP Works471
- Configuring IGMP472
- Port-Based IGMP472
Chapter 52 DVMRP474
- Dvmrp474
- DVMRP Overview474
- How DVMRP Works474
- Configuring DVMRP475
- DVMRP Terminology475
- DVMRP Configuration Error Messages476
- Default DVMRP Timer Values477
- Differentiated Services478
- Diffserv Overview478
- What You Can Do478
- What You Need to Know478
- Activating Diffserv479
- Configuring DSCP Settings481
- DSCP-To-IEEE 802.1P Priority Settings481
Chapter 54 DHCP482
- Dhcp482
- DHCP Overview482
- What You Can Do482
- DHCP Configuration483
- What You Need to Know483
- Dhcpv4 Server Status Detail484
- Dhcpv4 Status484
- Dhcpv4 Relay485
- Dhcpv4 Relay Agent Information486
- Dhcpv4 Option 82 Profile487
- Configuring Dhcpv4 Global Relay488
- Configure Dhcpv4 Global Relay Port489
- Global DHCP Relay Configuration Example490
- Dhcpv4 VLAN Setting491
- Configure Dhcpv4 VLAN Port492
- Example: DHCP Relay for Two Vlans494
- Dhcpv6 Information495
- Dhcpv6 Status495
- Dhcpv6 Prefix Delegation496
- Dhcpv6 Relay498
- DHCP Server Guard499
Chapter 55 VRRP501
- Vrrp501
- VRRP Overview501
- IP Interface Setup502
- VRRP Configuration502
- VRRP Status502
- VRRP Parameters503
- Configuring VRRP Parameters504
- Viewing VRRP Summary505
- One Subnet Network Example506
- VRRP Configuration Examples506
- Two Subnets Example507
Chapter 56 Router Setup510
- Configuring Router Setup510
- Router Setup510
- Router Setup Overview510
- ARP Overview512
- ARP Setup512
Chapter 57 ARP Setup512
- What You Can Do512
- What You Need to Know512
- ARP Learning514
- ARP Setup514
- Static ARP516
Chapter 58 Maintenance518
- Maintenance518
- Maintenance Settings518
- Overview518
- What You Can Do518
- Erase Running-Configuration520
- Save Configuration520
- Reboot System521
- Stacking Default521
- Custom Default522
- Factory Default522
- Firmware Upgrade523
- Backup Configuration525
- Restore Configuration525
- Auto Configuration526
- Tech-Support527
- Certificates529
- Tech-Support Download529
- HTTPS Certificates531
- Filename Conventions532
- FTP Command Line532
- Technical Reference532
- FTP Command Line Procedure533
- FTP Restrictions533
- GUI-Based FTP Clients533
- Access Control535
- Access Control Main Settings535
- Access Control Overview535
Chapter 59 Access Control535
- What You Can Do535
- Configure SNMP536
- Configure SNMP Trap Group537
- Enable or Disable Sending of SNMP Traps on a Port538
- Configure SNMP User540
- Set up Login Accounts542
- Service Access Control543
- Remote Management544
- Technical Reference545
- About SNMP546
- SSH Overview552
- Introduction to HTTPS554
- Google Chrome Warning Messages558
Chapter 60 Diagnostic560
- Diagnostic560
- Overview560
Chapter 61 System Log564
- Overview564
- System Log564
Chapter 62 Syslog Setup565
- Syslog Overview565
- Syslog Setup565
- What You Can Do565
Chapter 63 Cluster Management568
- Cluster Management568
- Cluster Management Overview568
- Cluster Management Status569
- What You Can Do569
- Clustering Management Configuration570
- Cluster Member Switch Management571
- Technical Reference571
Chapter 64 MAC Table574
- MAC Table574
- MAC Table Overview574
- What You Can Do574
- What You Need to Know574
- Viewing the MAC Table575
Chapter 65 IP Table577
- IP Table577
- IP Table Overview577
- Viewing the IP Table578
- ARP Table579
Chapter 66 ARP Table579
- Overview579
- Viewing the ARP Table579
- What You Can Do579
- What You Need to Know579
Chapter 67 Routing Table581
- Ipv4 Routing Table581
- Routing Table581
- Routing Table Overview581
- The Routing Table Main Screen581
- Ipv6 Routing Table582
Chapter 68 Path MTU Table584
- Path MTU Overview584
- Path MTU Table584
- Viewing the Path MTU Table584
Chapter 69 Configure Clone585
- Configure Clone585
- Overview585
Chapter 70 Ipv6 Neighbor Table589
- Ipv6 Neighbor Table589
- Ipv6 Neighbor Table Overview589
- Viewing the Ipv6 Neighbor Table589
Chapter 71 Port Status591
- Overview591
- Port Status591
- Status591
- Port Details593
- DDMI597
- DDMI Details598
- Port Utilization600
Chapter 72 Service Register602
- Service Register602
- Service Register Overview602
- Service Register Screen602
- Part III: Troubleshooting and Appendices604
- Troubleshooting and Appendices604
Chapter 73 Troubleshooting605
- Power, Hardware Connections, and Leds605
- Troubleshooting605
- Switch Access and Login606
- Switch Configuration607
Appendix A Customer Support609
Appendix B Common Services615
Appendix C Ipv6618
Appendix D Legal Information627
- Index632

ZyXEL Communications XGS4600 Series - Page 559

Table of Contents

Other manuals for ZyXEL Communications XGS4600 Series

Related product manuals