ZyXEL Communications XMG1930-30 - CHAPTER 64 SECURITY

To Next Page

To Previous Page

XMG1930 Series User’s Guide

445

CHAPTER 64

SECURITY

The following chapters introduces the configurations of the links under the SECURITY navigation panel.

Quick links to chapters:

• AAA

• Access Control

• Classifier

• Policy Rule

• Anti-Arpscan

• BPDU Guard

• Storm Control

• Error-Disable

• IP Source Guard

• DHCP Snooping

• ARP Inspection

• IPv6 Source Guard

• Port Authentication

• Port Security

Main Page

default chapter3
- Document Conventions3
- Contents Overview4
- Table of Contents4
- Table of Contents7
- Part I: User's Guide27
- User's Guide27
- Getting to Know Your Switch28
- Introduction28
- License Option28
- Multi-Gigabit31
- Management Modes32
- Mode Changing33
- Web Configurator Networked AV Mode35
- ZON Utility35
- Poe36
- Backbone Example Application37
- Example Applications37
- Poe Example Application37
- Bridging or Fiber Optic Uplink Example Application38
- High Performance Switching Example39
- IEEE 802.1Q VLAN Application Examples39
- Good Habits for Managing the Switch40
- Ways to Manage the Switch40
- Freestanding Installation Procedure41
- Hardware Installation and Connection41
- Installation Scenarios41
- Safety Precautions41
- Installation Requirements42
- Mounting the Switch on a Rack42
- Precautions42
- Attaching the Mounting Brackets to the Switch43
- Mounting the Switch on a Rack43
Chapter 3 Hardware Panels45
- Front Panel Connections45
- Hardware Panels45
- Multi-Gigabit Ethernet Ports46
- Poe (XMG1930-30HP)47
- SFP/SFP+ Slots47
- Rear Panel49
- USB Port49
- Grounding50
- AC Power Connection51
- Leds54
- Part II: Technical Reference57
- Technical Reference57
Chapter 4 Web Configurator58
- Overview58
- System Login58
- Web Configurator58
- Requirements63
- Run the ZON Utility63
- Zyxel One Network (ZON) Utility63
- Basic Settings67
- Networked AV Mode Wizard67
- Advanced Settings72
- Wizard77
- Basic78
- Protection83
- Vlan85
- Qos86
- Web Configurator Layout87
- Tables and Lists96
- Change Your Password97
- Save Your Configuration98
- Switch Lockout98
- Help99
- Log out of the Web Configurator99
- Reboot the Switch99
- Reset the Switch99
- Restore Button99
- Restore Custom Default99
- Create a VLAN101
- Initial Setup Example101
- Overview101
- Set Port VID102
- Configure Switch Management IP Address103
Chapter 6 Tutorials106
- How to Use Dhcpv4 Snooping on the Switch106
- Overview106
- Tutorials106
- Create a VLAN110
- DHCP Relay Tutorial Introduction110
- How to Use Dhcpv4 Relay on the Switch110
- Configure Dhcpv4 Relay113
- How to Use Auto Configuration through a DHCP Server on the Switch114
- Troubleshooting114
Chapter 7 DASHBOARD118
- Dashboard118
- New User Interface118
- Port Status121
- Quick Links to Use122
Chapter 8 MONITOR124
- Monitor124
- ARP Table125
- ARP Table Overview125
Chapter 9 ARP Table125
- Viewing the ARP Table125
- What You Can Do125
- What You Need to Know125
Chapter 10 IP Table127
- IP Table127
- IP Table Overview127
- Viewing the IP Table128
Chapter 11 Ipv6 Neighbor Table129
- Ipv6 Neighbor Table129
- Ipv6 Neighbor Table Overview129
- Viewing the Ipv6 Neighbor Table129
Chapter 12 MAC Table131
- MAC Table131
- MAC Table Overview131
- What You Can Do131
- What You Need to Know131
- Viewing the MAC Table132
Chapter 13 Neighbor134
- Neighbor134
- Neighbor Overview134
- What You Can Do134
- Neighbor Details135
Chapter 14 Path MTU Table138
- Path MTU Overview138
- Path MTU Table138
- Viewing the Path MTU Table138
Chapter 15 Port Status139
- Port Status139
- What You Can Do139
- Port Details140
- DDMI143
- DDMI Details143
- Port Utilization145
Chapter 16 Routing Table147
- Ipv4 Routing Table147
- Routing Table147
- Routing Table Overview147
- What You Can Do147
- Ipv6 Routing Table148
Chapter 17 System Information149
- System Information149
- What You Can Do149
Chapter 18 System Log152
- System Log152
- System Log Overview152
- System154
Chapter 20 Cloud Management155
- Cloud Management155
- Cloud Management Overview155
- Nebula Center Control Discovery155
Chapter 21 General Setup159
- General Setup159
- Hardware Monitor Setup161
Chapter 22 Interface Setup163
- Interface Setup163
- Interface Setup Overview163
- Add/Edit Interfaces164
Chapter 23 IP Setup165
- IP Interfaces165
- IP Setup165
- IP Setup Overview165
- IP Status165
- What You Can Do165
- IP Status Details166
- IP Setup168
- Add/Edit IP Interfaces169
- Network Proxy Configuration170
Chapter 24 Ipv6172
- Ipv6172
- Ipv6 Overview172
- Ipv6 Status172
- What You Can Do172
- Ipv6 Interface Status Details173
- Ipv6 Global Setup175
- Ipv6 Interface Setup176
- Edit an Ipv6 Interface177
- Ipv6 Link-Local Address Setup177
- Edit an Ipv6 Link-Local Address178
- Add/Edit an Ipv6 Global Address179
- Ipv6 Global Address Setup179
- Ipv6 Neighbor Discovery Setup180
- Edit an Ipv6 Neighbor Discovery181
- Edit Ipv6 Router Discovery182
- Ipv6 Router Discovery Setup182
- Ipv6 Prefix Setup183
- Add/Edit Ipv6 Prefix184
- Ipv6 Neighbor Setup185
- Add/Edit Ipv6 Neighbor186
- Dhcpv6 Client Setup186
- Edit Dhcpv6 Client187
Chapter 25 Logins189
- Logins189
- Set up Login Accounts189
Chapter 26 SNMP191
- Configure SNMP191
- Snmp191
- SNMP Overview191
- What You Can Do191
- Add/Edit SNMP User193
- Configure SNMP User193
- SNMP Trap Group195
- Enable or Disable Sending of SNMP Traps on a Port196
- About SNMP197
- Technical Reference197
Chapter 27 Switch Setup204
- Introduction to Vlans204
- Switch Setup204
- Switch Setup Overview204
Chapter 28 Syslog Setup207
- Syslog Overview207
- Syslog Setup207
- What You Can Do207
- Add/Edit a Syslog Server209
Chapter 29 Time Range210
- Configuring Time Range210
- Time Range210
- Time Range Overview210
- What You Can Do210
- Add/Edit Time Range211
Chapter 30 PORT213
- Port213
- Auto PD Recovery214
- Auto PD Recovery (for Poe Models Only) Overview214
Chapter 31 Auto PD Recovery214
- What You Can Do214
- Activate the Automatic PD Recovery216
Chapter 32 Flex Link219
- Flex Link219
- Flex Link Overview219
- Flex Link Status219
- What You Can Do219
- Flex Link Setup220
- Add/Edit Flex Link221
Chapter 33 Green Ethernet222
- Configuring Green Ethernet222
- Green Ethernet222
- Green Ethernet Overview222
Chapter 34 Link Aggregation224
- Link Aggregation224
- Link Aggregation Overview224
- What You Can Do224
- What You Need to Know224
- Link Aggregation Status225
- Link Aggregation Setting227
- Link Aggregation Control Protocol228
- Static Trunking Example230
- Technical Reference230
- Link Layer Discovery Protocol (LLDP)232
- LLDP Overview232
- LLDP-MED Overview233
- LLDP Local Status234
- What You Can Do - LLDP234
- What You Can Do - LLDP MED234
- LLDP Local Port Status Detail236
- LLDP Remote Status239
- LLDP Remote Port Status Detail240
- LLDP Setup245
- Basic TLV Setting247
- Org-Specific TLV Setting248
- LLDP-MED Setup249
- LLDP-MED Network Policy250
- Add/Edit LLDP-MED Network Policy251
- Add/Edit LLDP-MED Location252
- LLDP-MED Location252
Chapter 36 OAM255
- Oam255
- OAM Overview255
- OAM Status255
- What You Can Do255
- OAM Details256
- OAM Setup260
- OAM Remote Loopback261
Chapter 37 Poe Setup263
- Poe Setup263
- Poe Status (for Poe Models Only)263
- Poe Setup265
- Add/Edit Poe Time Range269
- Poe Time Range Setup269
Chapter 38 Port Setup271
- Port Setup271
- Port Buffer273
- Port Buffer Setting273
- What You Can Do273
Chapter 39 ZULD275
- What You Can Do275
- What You Need to Know275
- Zuld275
- ZULD Overview275
- ZULD Status276
- ZULD Setup277
- Switching279
- Layer 2 Protocol Tunneling280
- Layer 2 Protocol Tunneling Overview280
- What You Can Do280
- What You Need to Know280
- Configuring Layer 2 Protocol Tunneling281
Chapter 42 Loop Guard284
- Loop Guard284
- Loop Guard Overview284
- What You Can Do284
- What You Need to Know284
- Loop Guard Setup286
Chapter 43 MAC Pinning287
- MAC Pinning287
- MAC Pinning Configuration287
- MAC Pinning Overview287
Chapter 44 Mirroring289
- Mirroring289
- Mirroring Overview289
- Port Mirroring Setup289
Chapter 45 Multicast291
- Multicast291
- Multicast Overview291
- What You Can Do - Ipv4 Multicast291
- What You Can Do - Ipv6 Multicast291
- What You Can Do - MVR292
- What You Need to Know292
- Ipv4 Multicast Status295
- IGMP Snooping296
- IGMP Snooping VLAN300
- Add/Edit IGMP Snooping Vlans301
- IGMP Filtering Profile302
- Add IGMP Filtering Profile303
- Add IGMP Filtering Rule303
- Ipv6 Multicast304
- MLD Snooping-Proxy305
- MLD Snooping-Proxy VLAN305
- Add/Edit MLD Snooping-Proxy VLAN306
- MLD Snooping-Proxy Port Role Setting308
- MLD Snooping-Proxy Filtering309
- Add MLD Snooping-Proxy Filtering Profile311
- MLD Snooping-Proxy Filtering Profile311
- Add MLD Snooping-Proxy Filtering Rule312
- MVR Configuration313
- Add/Edit MVR314
- MVR Group Setup315
- Add/Edit MVR Group316
- MVR Configuration Example317
- Static Multicast Forwarding320
- Static Multicast Forwarding Overview320
- What You Can Do320
- What You Need to Know320
- Static Multicast Forwarding by MAC321
- Add/Edit Static Multicast Forwarding by MAC322
- Configure a Static Multicast Ipv4 Address322
- Add/Edit a Static Multicast Address by IP323
Chapter 47 Pppoe325
- Pppoe325
- Pppoe Intermediate Agent Overview325
- What You Can Do325
- What You Need to Know325
- Pppoe Intermediate Agent327
- Pppoe IA Port329
- Pppoe IA Port VLAN330
- Pppoe IA VLAN332
- Differentiated Services333
- Diffserv Overview333
- What You Can Do333
- What You Need to Know333
- Activating Diffserv334
- DSCP-To-IEEE 802.1P Priority Settings335
- Configuring DSCP Settings336
Chapter 49 Queuing Method337
- Queuing Method337
- Queuing Method Overview337
- What You Can Do337
- What You Need to Know337
- Configuring Queuing338
- Assign Priority Queue340
Chapter 50 Priority Queue340
- Priority Queue340
- Priority Queue Overview340
- What You Can Do340
- Bandwidth Control342
- Bandwidth Control Overview342
- Bandwidth Control Setup342
Chapter 51 Bandwidth Control342
- CIR and PIR342
- What You Can Do342
Chapter 52 Sflow344
- Sflow344
- Sflow Overview344
- Sflow Port Configuration344
- Add/Edit Sflow Collector346
- Sflow Collector Configuration346
- Spanning Tree Protocol348
- Spanning Tree Protocol Overview348
- What You Can Do348
- What You Need to Know348
- Spanning Tree Protocol Status351
- Spanning Tree Setup352
- Rapid Spanning Tree Protocol Status354
- Configure Rapid Spanning Tree Protocol357
- Multiple Rapid Spanning Tree Protocol359
- Configure Multiple Rapid Spanning Tree Protocol361
- Multiple Spanning Tree Protocol Status364
- Configure Multiple Spanning Tree Protocol367
- Add/Edit Multiple Spanning Tree369
- Multiple Spanning Tree Protocol Port Setup370
- MSTP Network Example372
- Technical Reference372
- MST Instance373
- MST Region373
- Common and Internal Spanning Tree (CIST)374
Chapter 54 Static MAC Filtering375
- Configure a Static MAC Filtering Rule375
- Static MAC Filtering375
- Static MAC Filtering Overview375
- What You Can Do375
- Add/Edit a Static MAC Filtering Rule376
Chapter 55 Static MAC Forwarding377
- Configure Static MAC Forwarding377
- Static MAC Forwarding377
- Static MAC Forwarding Overview377
- What You Can Do377
- Add/Edit Static MAC Forwarding Rules378
Chapter 56 VLAN380
- Vlan380
- VLAN Overview380
- What You Can Do380
- What You Need to Know380
- Introduction to IEEE 802.1Q Tagged Vlans381
- VLAN Status384
- VLAN Details385
- Add/Edit a Static VLAN386
- Configure a Static VLAN386
- VLAN Port Setup388
- Configure GVRP389
- Subnet Based VLAN390
- Configuring Subnet Based VLAN391
- Add/Edit Subnet Based VLAN392
- Configuring Protocol Based VLAN393
- Protocol Based VLAN393
- Add/Edit a Protocol Based VLAN394
- Voice VLAN396
- Add/Edit a Voice VLAN397
- MAC Based VLAN398
- Add/Edit a MAC Based VLAN399
- Vendor ID Based VLAN399
- Add/Edit a Vendor ID Based VLAN400
- Port-Based VLAN Setup401
- Configure a Port-Based VLAN402
Chapter 57 VLAN Isolation405
- Configuring VLAN Isolation405
- VLAN Isolation405
- VLAN Isolation Overview405
- Add/Edit a VLAN Isolation Rule406
Chapter 58 VLAN Mapping408
- VLAN Mapping408
- VLAN Mapping Example408
- VLAN Mapping Overview408
- What You Can Do408
- Enable VLAN Mapping409
- Add/Edit VLAN Mapping410
- VLAN Mapping Setup410
Chapter 59 VLAN Stacking412
- VLAN Stacking412
- VLAN Stacking Example412
- VLAN Stacking Overview412
- VLAN Stacking Port Roles413
- VLAN Tag Format413
- Configuring VLAN Stacking414
- Frame Format414
- Port-Based Q-In-Q416
- Selective Q-In-Q417
- Add/Edit Selective Q-In-Q418
- Networking419
- ARP Overview420
- ARP Setup420
Chapter 61 ARP Setup420
- What You Can Do420
- What You Need to Know420
- ARP Learning422
- Static ARP423
- Add/Edit Static ARP424
Chapter 62 DHCP426
- Dhcp426
- DHCP Overview426
- What You Can Do426
- What You Need to Know426
- Dhcpv4 Relay427
- Dhcpv4 Relay Status427
- Dhcpv4 Relay Agent Information428
- Add/Edit a Dhcpv4 Option 82 Profile429
- Dhcpv4 Option 82 Profile429
- Configuring Dhcpv4 Smart Relay430
- Add/Edit Dhcpv4 Global Relay Port431
- DHCP Smart Relay Configuration Example432
- Add/Edit Dhcpv4 VLAN Setting434
- Dhcpv4 VLAN Setting434
- Add/Edit Dhcpv4 VLAN Port435
- Example: DHCP Relay for Two Vlans436
- Dhcpv6 Relay437
- Add/Edit Dhcpv6 Relay438
- DHCP Server Guard439
Chapter 63 Static Route441
- Static Route441
- Static Routing Overview441
- What You Can Do441
- Add/Edit Ipv4 Static Route442
- Ipv4 Static Route442
- Ipv6 Static Route443
- Add/Edit Ipv6 Static Route444
- Security445
- Aaa446
- Authentication, Authorization and Accounting (AAA)446
Chapter 65 AAA446
- What You Can Do446
- What You Need to Know446
- RADIUS Server Setup447
- TACACS+ Server Setup449
- AAA Setup451
- Technical Reference455
- Vendor Specific Attribute455
- Attributes Used for Authentication457
- Supported RADIUS Attributes457
- Attributes Used for Accounting458
- Access Control461
- Access Control Overview461
Chapter 66 Access Control461
- Service Access Control461
- What You Can Do461
- Remote Management463
- Account Security464
- SSH Overview466
- Technical Reference466
- Introduction to HTTPS467
- Google Chrome Warning Messages469
Chapter 67 Classifier471
- Classifier471
- Classifier Overview471
- What You Can Do471
- What You Need to Know471
- Classifier Setup472
- Classifier Status472
- Add/Edit a Classifier474
- Classifier Global Setting477
- Classifier Example478
Chapter 68 Policy Rule480
- Diffserv480
- DSCP and Per-Hop Behavior480
- Policy Rule480
- Policy Rules Overview480
- What You Can Do480
- Add/Edit a Policy Rule481
- Policy Rules481
- Policy Example485
- Anti-Arpscan487
- Anti-Arpscan Overview487
Chapter 69 Anti-Arpscan487
- What You Can Do487
- What You Need to Know487
- Anti-Arpscan Host Status488
- Anti-Arpscan Status488
- Anti-Arpscan Setup489
- Add/Edit Anti-Arpscan Trust Hosts491
- Anti-Arpscan Trust Host491
- BPDU Guard493
- BPDU Guard Overview493
- BPDU Guard Status493
Chapter 70 BPDU Guard493
- What You Can Do493
- BPDU Guard Setup494
Chapter 71 Storm Control496
- Storm Control496
- Storm Control Overview496
- Storm Control Setup496
- What You Can Do496
Chapter 72 Error-Disable498
- CPU Protection Overview498
- Error-Disable498
- Error-Disable Overview498
- Error-Disable Recovery Overview498
- What You Can Do498
- Error-Disable Status499
- CPU Protection Setup501
- Error-Disable Detect Setup502
- Error-Disable Recovery Setup503
Chapter 73 IP Source Guard505
- IP Source Guard505
- IP Source Guard Overview505
- What You Can Do506
- Ipv4 Source Guard507
- Ipv4 Source Guard Static Binding507
- Add/Edit Ipv4 Source Guard Static Binding509
Chapter 74 DHCP Snooping510
- DHCP Snooping510
- DHCP Snooping Overview510
- DHCP Snooping Status511
- What You Can Do511
- DHCP Snooping Setup514
- DHCP Snooping Port Setup515
- DHCP Snooping VLAN Setup517
- Add/Edit DHCP Snooping VLAN Ports518
- DHCP Snooping VLAN Port Setup518
- DHCP Snooping Overview519
- Technical Reference519
- ARP Inspection522
- ARP Inspection Status522
Chapter 75 ARP Inspection522
- ARP Inspection Log Status523
- ARP Inspection VLAN Status523
- ARP Inspection Setup524
- ARP Inspection Port Setup526
- ARP Inspection VLAN Setup527
- Ipv6 Source Guard528
- Ipv6 Source Binding Status529
- Add/Edit Ipv6 Static Binding530
- Ipv6 Static Binding530
- Ipv6 Source Guard Policy531
- Add/Edit an Ipv6 Source Guard Policy532
- Ipv6 Source Guard Port Setup533
- Add/Edit a Ipv6 Snooping Policy534
- Ipv6 Snooping Policy Setup534
- Ipv6 Snooping VLAN Setup535
- Add/Edit an Ipv6 Snooping VLAN536
- Ipv6 DHCP Trust Setup536
- ARP Inspection Overview538
- Technical Reference538
Chapter 76 Port Authentication540
- Port Authentication540
- Port Authentication Overview540
- What You Can Do540
- MAC Authentication541
- What You Need to Know541
- Activate IEEE 802.1X Security542
- Activate MAC Authentication543
- Guest VLAN546
- Compound Authentication548
- IEEE 802.1X549
- Technical Reference549
- Radius550
- EAP (Extensible Authentication Protocol) Authentication551
- EAPOL (EAP over LAN)552
- About Port Security553
Chapter 77 Port Security553
- Port Security553
- Port Security Overview553
- Port Security Setup553
- Certificates556
Chapter 78 MAINTENANCE556
- Maintenance556
- Overview556
- What You Can Do556
- HTTPS Certificates557
- Filename Conventions558
- FTP Command Line558
- Technical Reference558
- FTP Command Line Procedure559
- Cluster Management Overview560
- FTP Restrictions560
- GUI-Based FTP Clients560
- Cluster Management Status561
- What You Can Do561
- Clustering Management Setup562
- Cluster Member Switch Management564
- Technical Reference564
- Backup Configuration566
- Restore Configuration566
- Auto Configuration567
- Erase Running-Configuration568
- Save Configuration569
- Configure Clone570
- Diagnostic572
- Firmware Upgrade574
- Reboot System576
- Service Register577
- Tech-Support578
- Tech-Support Download579
Chapter 79 Networked AV Mode581
- Help581
- Overview581
- Summary581
- Monitor583
- System Information583
- What You Can Do583
- System585
- What You Can Do585
- Cloud Management586
- General Setup587
- IP Setup589
- Add/Edit IP Interfaces590
- Logins591
- Configure SNMP593
- Configure SNMP User595
- Add/Edit SNMP User596
- Configure SNMP Trap Group597
- Enable or Disable Sending of SNMP Traps on a Port598
- Port599
- Link Aggregation600
- Link Aggregation Status600
- What You Can Do600
- Link Aggregation Setting602
- Link Aggregation Control Protocol603
- Poe Status605
- Poe Setup607
- Port Setup610
- Port Mirroring612
- Switching612
- Ipv4 Multicast Status614
- Multicast614
- What You Can Do614
- IGMP Snooping615
- IGMP Snooping VLAN618
- Add/Edit IGMP Snooping Vlans619
- IGMP Filtering Profile620
- Add IGMP Filtering Profile621
- Add IGMP Filtering Rule622
- Vlan622
- What You Can Do622
- What You Need to Know622
- VLAN Status625
- VLAN Details626
- Configure a Static VLAN627
- Add/Edit a Static VLAN628
- VLAN Port Setup629
- Access Control630
- Security630
- Service Access Control631
- What You Can Do631
- Remote Management632
- Storm Control633
- Maintenance634
- Backup Configuration635
- Restore Configuration635
- What You Can Do635
- Save Configuration636
- Firmware Upgrade637
- Reboot System637
- Tech-Support638
- Tech-Support Download639
- Part III: Troubleshooting and Appendices640
Chapter 80 Troubleshooting641
- Power, Hardware Connections, and Leds641
- Switch Access and Login642
- Switch Configuration644
Appendix A Customer Support645
Appendix B Common Services650
Appendix C Ipv6653
Appendix D Legal Information662
- Index667

ZyXEL Communications XMG1930-30 - CHAPTER 64 SECURITY

Table of Contents

Related product manuals