ZyXEL Communications XMG1915 Series

To Next Page

To Previous Page

XMG1915 Series User’s Guide

309

CHAPTER 53

SECURITY

The following chapters introduces the configurations of the links under the SECURITY navigation panel.

Quick links to chapters:

• AAA

• Access Control

• Storm Control

• Error-Disable

• DHCP Snooping

• Port Security

Main Page

default chapter3
- Document Conventions3
- Contents Overview4
- Table of Contents4
- Table of Contents6
- Part I: User's Guide20
- User's Guide20
- Getting to Know Your Switch21
- Introduction21
- Management Modes22
- Mode Changing23
- Poe25
- ZON Utility25
- Example Applications26
- Poe Example Application26
- Backbone Example Application27
- Bridging or Fiber Optic Uplink Example Application28
- High Performance Switching Example28
- IEEE 802.1Q VLAN Application Examples29
- Ways to Manage the Switch29
- Good Habits for Managing the Switch30
- Freestanding Installation Procedure31
- Hardware Installation and Connection31
- Installation Scenarios31
- Safety Precautions31
- Installation Requirements32
- Wall Mounting (XMG1915-10E and XMG1915-10EP Only)32
- Installation Requirements34
- Mounting the Switch on a Rack34
- Attaching the Mounting Brackets to the Switch35
- Mounting the Switch on a Rack35
- Precautions35
Chapter 3 Hardware Panels37
- Front Panel Connections37
- Hardware Panels37
- Multi-Gigabit Ethernet Ports38
- Poe (XMG1915-10EP and XMG1915-18EP)39
- SFP/SFP+ Slots39
- Grounding41
- Rear Panel41
- AC Power Connection43
- Leds47
- Part II: Technical Reference49
- Technical Reference49
Chapter 4 Web Configurator50
- Overview50
- System Login50
- Web Configurator50
- Zyxel One Network (ZON) Utility53
- Requirements54
- Run the ZON Utility54
- Wizard58
- Basic59
- Protection64
- Vlan66
- Qos67
- Web Configurator Layout68
- Tables and Lists74
- Change Your Password75
- Reset the Switch76
- Restore Button76
- Save Your Configuration76
- Switch Lockout76
- Help77
- Log out of the Web Configurator77
- Create a VLAN78
- Initial Setup Example78
- Overview78
- Set Port VID79
- Configure Switch Management IP Address80
Chapter 6 Tutorials83
- How to Use Dhcpv4 Snooping on the Switch83
- Overview83
- Tutorials83
- Create a VLAN87
- DHCP Relay Tutorial Introduction87
- How to Use Dhcpv4 Relay on the Switch87
- Configure Dhcpv4 Relay89
- Troubleshooting89
- Dashboard91
- New User Interface91
- Port Status94
- Quick Links to Use94
Chapter 8 MONITOR96
- Monitor96
- ARP Table97
- ARP Table Overview97
Chapter 9 ARP Table97
- Viewing the ARP Table97
- What You Can Do97
- What You Need to Know97
Chapter 10 IP Table99
- IP Table99
- IP Table Overview99
- Viewing the IP Table100
Chapter 11 Ipv6 Neighbor Table101
- Ipv6 Neighbor Table101
- Ipv6 Neighbor Table Overview101
- Viewing the Ipv6 Neighbor Table101
Chapter 12 MAC Table103
- MAC Table103
- MAC Table Overview103
- What You Can Do103
- What You Need to Know103
- Viewing the MAC Table104
Chapter 13 Neighbor106
- Neighbor106
- Neighbor Overview106
- What You Can Do106
- Neighbor Details107
Chapter 14 Path MTU Table110
- Path MTU Overview110
- Path MTU Table110
- Viewing the Path MTU Table110
Chapter 15 Port Status111
- Port Status111
- What You Can Do111
- Port Details112
- DDMI115
- DDMI Details115
- Port Utilization117
Chapter 16 Routing Table118
- Ipv4 Routing Table118
- Routing Table118
- Routing Table Overview118
- What You Can Do118
- Ipv6 Routing Table119
Chapter 17 System Information120
- System Information120
- What You Can Do120
Chapter 18 System Log122
- System Log122
- System Log Overview122
- System123
Chapter 20 Cloud Management124
- Cloud Management124
- Cloud Management Overview124
- Nebula Center Control Discovery124
Chapter 21 General Setup126
- General Setup126
- Hardware Monitor Setup128
Chapter 22 Interface Setup129
- Interface Setup129
- Interface Setup Overview129
- Add/Edit Interfaces130
Chapter 23 IP Setup131
- IP Setup131
- IP Setup Overview131
- IP Status131
- What You Can Do131
- IP Status Details132
- IP Setup134
- Add/Edit IP Interfaces135
- Network Proxy Configuration136
Chapter 24 Ipv6138
- Ipv6138
- Ipv6 Overview138
- Ipv6 Status138
- What You Can Do138
- Ipv6 Interface Status Details139
- Ipv6 Global Setup141
- Ipv6 Interface Setup142
- Edit an Ipv6 Interface143
- Ipv6 Link-Local Address Setup143
- Edit an Ipv6 Link-Local Address144
- Add/Edit an Ipv6 Global Address145
- Ipv6 Global Address Setup145
- Ipv6 Neighbor Discovery Setup146
- Edit an Ipv6 Neighbor Discovery147
- Edit Ipv6 Router Discovery148
- Ipv6 Router Discovery Setup148
- Ipv6 Prefix Setup149
- Add/Edit Ipv6 Prefix150
- Ipv6 Neighbor Setup151
- Add/Edit Ipv6 Neighbor152
- Dhcpv6 Client Setup152
- Edit Dhcpv6 Client153
Chapter 25 Logins155
- Logins155
- Set up Login Accounts155
Chapter 26 SNMP157
- Configure SNMP157
- Snmp157
- SNMP Overview157
- What You Can Do157
- Add/Edit SNMP User159
- Configure SNMP User159
- SNMP Trap Group161
- Enable or Disable Sending of SNMP Traps on a Port162
- Technical Reference162
- About SNMP163
Chapter 27 Switch Setup166
- Introduction to Vlans166
- Switch Setup166
- Switch Setup Overview166
Chapter 28 Syslog Setup168
- Syslog Overview168
- Syslog Setup168
- What You Can Do168
- Add/Edit a Syslog Server170
Chapter 29 Time Range171
- Configuring Time Range171
- Time Range171
- Time Range Overview171
- What You Can Do171
- Add/Edit Time Range172
Chapter 30 PORT174
- Port174
Chapter 31 Green Ethernet175
- Configuring Green Ethernet175
- Green Ethernet175
- Green Ethernet Overview175
Chapter 32 Link Aggregation177
- Link Aggregation177
- Link Aggregation Overview177
- What You Can Do177
- What You Need to Know177
- Link Aggregation Status179
- Link Aggregation Setting180
- Link Aggregation Control Protocol182
- Static Trunking Example184
- Technical Reference184
- Link Layer Discovery Protocol (LLDP)186
- LLDP Overview186
- LLDP-MED Overview187
- LLDP Local Status188
- What You Can Do - LLDP188
- What You Can Do - LLDP MED188
- LLDP Local Port Status Details190
- LLDP Remote Status192
- LLDP Remote Port Status Details193
- LLDP Setup197
- Basic TLV Setting199
- Org-Specific TLV Setting200
- LLDP-MED Setup201
- Add/Edit LLDP-MED Network Policy202
- LLDP-MED Network Policy202
- LLDP-MED Location203
- Add/Edit LLDP-MED Location204
Chapter 34 Poe Setup207
- Poe Setup207
- Poe Status (for Poe Models Only)207
- Poe Setup209
- Poe Time Range Setup212
- Add/Edit Poe Time Range213
Chapter 35 Port Setup214
- Port Setup214
- Switching216
Chapter 37 Loop Guard217
- Loop Guard217
- Loop Guard Overview217
- What You Can Do217
- What You Need to Know217
- Loop Guard Setup219
Chapter 38 Mirroring220
- Mirroring220
- Mirroring Overview220
- Port Mirroring Setup220
Chapter 39 Multicast222
- Multicast222
- Multicast Overview222
- What You Can Do - Ipv4 Multicast222
- What You Need to Know222
- Ipv4 Multicast Status223
- IGMP Snooping224
- IGMP Snooping VLAN226
- Add/Edit IGMP Snooping Vlans227
- Static Multicast Forwarding228
- Static Multicast Forwarding Overview228
- What You Can Do228
- What You Need to Know228
- Static Multicast Forwarding by MAC229
- Add/Edit Static Multicast Forwarding by MAC230
- Differentiated Services231
- Diffserv Overview231
- What You Can Do231
- What You Need to Know231
- Activating Diffserv232
- DSCP-To-IEEE 802.1P Priority Settings233
- Configuring DSCP Settings234
Chapter 42 Queuing Method235
- Queuing Method235
- Queuing Method Overview235
- What You Can Do235
- What You Need to Know235
- Configuring Queuing236
- Assign Priority Queue238
Chapter 43 Priority Queue238
- Priority Queue238
- Priority Queue Overview238
- What You Can Do238
- Bandwidth Control240
- Bandwidth Control Overview240
- Bandwidth Control Setup240
Chapter 44 Bandwidth Control240
- What You Can Do240
- Spanning Tree Protocol242
- Spanning Tree Protocol Overview242
- What You Can Do242
- What You Need to Know242
- Spanning Tree Protocol Status244
- Spanning Tree Setup245
- Rapid Spanning Tree Protocol Status247
- Configure Rapid Spanning Tree Protocol249
- Multiple Spanning Tree Protocol Status251
- Configure Multiple Spanning Tree Protocol254
- Add/Edit Multiple Spanning Tree255
- Multiple Spanning Tree Protocol Port Setup257
- MSTP Network Example258
- Technical Reference258
- Common and Internal Spanning Tree (CIST)259
- MST Instance259
- MST Region259
Chapter 46 Static MAC Filtering261
- Configure a Static MAC Filtering Rule261
- Static MAC Filtering261
- Static MAC Filtering Overview261
- What You Can Do261
- Add/Edit a Static MAC Filtering Rule262
Chapter 47 Static MAC Forwarding263
- Configure Static MAC Forwarding263
- Static MAC Forwarding263
- Static MAC Forwarding Overview263
- What You Can Do263
- Add/Edit Static MAC Forwarding Rules264
Chapter 48 VLAN266
- Introduction to IEEE 802.1Q Tagged Vlans266
- Vlan266
- VLAN Overview266
- What You Can Do266
- What You Need to Know266
- VLAN Details269
- VLAN Status269
- Configure a Static VLAN270
- Add/Edit a Static VLAN271
- VLAN Port Setup272
- Voice VLAN273
- Add/Edit a Voice VLAN275
- MAC Based VLAN275
- Add/Edit a MAC Based VLAN276
- Vendor ID Based VLAN277
- Add/Edit a Vendor ID Based VLAN278
- Port-Based VLAN Setup278
- Configure a Port-Based VLAN279
- Networking283
- ARP Overview284
- ARP Setup284
Chapter 50 ARP Setup284
- What You Can Do284
- What You Need to Know284
- ARP Learning286
- Static ARP287
- Add/Edit Static ARP288
Chapter 51 DHCP290
- Dhcp290
- DHCP Overview290
- What You Can Do290
- What You Need to Know290
- Dhcpv4 Relay291
- Dhcpv4 Relay Status291
- Dhcpv4 Relay Agent Information292
- Add/Edit a Dhcpv4 Option 82 Profile293
- Dhcpv4 Option 82 Profile293
- Configuring Dhcpv4 Smart Relay294
- Add/Edit Dhcpv4 Global Relay Port295
- DHCP Smart Relay Configuration Example296
- Add/Edit Dhcpv4 VLAN Setting298
- Dhcpv4 VLAN Setting298
- Add/Edit Dhcpv4 VLAN Port299
- Example: DHCP Relay for Two Vlans300
- Dhcpv6 Relay301
- Add/Edit Dhcpv6 Relay302
Chapter 52 Static Route304
- Static Route304
- Static Routing Overview304
- Ipv4 Static Route305
- What You Can Do305
- Add/Edit Ipv4 Static Route306
- Add/Edit Ipv6 Static Route307
- Ipv6 Static Route307
- Security309
- Aaa310
- Authentication, Authorization and Accounting (AAA)310
Chapter 54 AAA310
- What You Can Do310
- What You Need to Know310
- RADIUS Server Setup311
- AAA Setup313
- Technical Reference315
- Vendor Specific Attribute315
- Attributes Used for Accounting316
- Attributes Used for Authentication316
- Supported RADIUS Attributes316
- Access Control318
- Access Control Overview318
Chapter 55 Access Control318
- Service Access Control318
- What You Can Do318
- Remote Management319
- Account Security320
- SSH Overview322
- Technical Reference322
- Introduction to HTTPS324
- Google Chrome Warning Messages326
Chapter 56 Storm Control327
- Storm Control327
- Storm Control Overview327
- Storm Control Setup327
- What You Can Do327
Chapter 57 Error-Disable329
- CPU Protection Overview329
- Error-Disable329
- Error-Disable Overview329
- Error-Disable Recovery Overview329
- What You Can Do329
- Error-Disable Status330
- CPU Protection Setup331
- Error-Disable Detect Setup332
- Error-Disable Recovery Setup333
Chapter 58 DHCP Snooping335
- DHCP Snooping335
- DHCP Snooping Overview335
- DHCP Snooping Status336
- What You Can Do336
- DHCP Snooping Setup339
- DHCP Snooping Port Setup340
- DHCP Snooping VLAN Setup342
- Add/Edit DHCP Snooping VLAN Ports343
- DHCP Snooping VLAN Port Setup343
- DHCP Snooping Overview344
- Technical Reference344
- About Port Security347
Chapter 59 Port Security347
- Port Security347
- Port Security Overview347
- Port Security Setup347
- Certificates350
Chapter 60 MAINTENANCE350
- Maintenance350
- Overview350
- What You Can Do350
- HTTPS Certificates351
- FTP Command Line352
- Technical Reference352
- Filename Conventions353
- FTP Command Line Procedure353
- FTP Restrictions354
- GUI-Based FTP Clients354
- Cluster Management Overview355
- Cluster Management Status355
- What You Can Do355
- Clustering Management Setup356
- Cluster Member Switch Management358
- Technical Reference358
- Backup Configuration360
- Restore Configuration360
- Erase Running-Configuration361
- Configure Clone362
- Save Configuration362
- Diagnostic364
- Firmware Upgrade365
- Reboot System367
- Tech-Support368
- Tech-Support Download369
- Part III: Troubleshooting and Appendices371
- Troubleshooting and Appendices371
Chapter 61 Troubleshooting372
- Power, Hardware Connections, and Leds372
- Troubleshooting372
- Switch Access and Login373
- Poe Supply375
- Switch Configuration375
- Nebula Registration376
Appendix A Customer Support377
Appendix B Common Services382
Appendix C Ipv6385
Appendix D Legal Information393
- Index398

ZyXEL Communications XMG1915 Series - Security Features

Table of Contents

Related product manuals