GS3700/XGS3700 Series
- Contents Overview
- Table of Contents
User’s Guide
Technical Reference

Zyxel XGS3700-24 User Manual

Displayed below is the user manual for XGS3700-24 by Zyxel which is a product in the Network Switches category. This manual has pages.

Related Manuals

Zyxel P-871M Manual

Zyxel GS-105B Manual

Zyxel 793H Manual

Zyxel USG-20 Manual

Zyxel ES1100-8P Manual

Zyxel XGS4700-48F Manual

Zyxel NWA3550-N Manual

Quick Start Guide

www.zyxel.com

GS3700/XGS3700 Series

GbE L2+ Switch

Ve rsion 4.30

Edition 1, 10/2015

User’s Guide

Default Login Details

IP Address http://192.168.0.1 (Out-

of-band MGMT port)

http://192.168.1.1 (In-

band ports)

User Name admin

Password 1234

GS3700/XGS3700 Series User’s Guide

IMPORTANT!

READ CAREFULLY BEFORE USE.

KEEP THIS GUIDE FOR FUTURE REFERENCE.

Note: This guide is a reference for a series of products. Therefore some features or

options in this guide may not be available in your product.

Screenshots and graphics in this book may differ slightly from your product due to differences in

your product firmware or your computer operating system. Every effort has been made to ensure

that the information in this manual is accurate.

Related Documentation

• CLI Reference Guide

This guide explains how to use the Command-Line Interface (CLI) to configure the Switch.

Note: It is recommended you use the Web Configurator to configure the Switch.

• Web Configurator Online Help

Click the help icon in any screen for help in configuring that screen and supplementary

information.

•More Information

Go to support.zyxel.com to find other information on the Switch.

Contents Overview

GS3700/XGS3700 Series User’s Guide

Contents Overview

User’ s Guide .............................................................................. ........... ........... .......... .........................20

Getting to Know Your Switch ...................................................................................................................21

Hardware Installation and Connection ....................................................................................................26

Hardware Overview .................................................................................................................................30

The Web Configurator .............................................................................................................................37

Technical Reference ..........................................................................................................................46

ZON Utility, ZON Neighbor Management and Port Status ......................................................................47

Basic Setting ..........................................................................................................................................56

VLAN .....................................................................................................................................................101

Static MAC Forward Setup ....................................................................................................................124

Static Multicast Forward Setup ..............................................................................................................127

Filtering .................................................................................................................................................130

Spanning Tree Protocol .........................................................................................................................132

Bandwidth Control .................................................................................................................................157

Broadcast Storm Control .......................................................................................................................160

Mirroring ................................................................................................................................................162

Link Aggregation ...................................................................................................................................175

Port Authentication ................................................................................................................................185

Port Security ..........................................................................................................................................195

Time Range ...........................................................................................................................................199

Classifier ...............................................................................................................................................201

Policy Rule ...........................................................................................................................................210

Queuing Method ....................................................................................................................................215

VLAN Stacking ......................................................................................................................................219

Multicast ................................................................................................................................................227

AAA .......................................................................................................................................................253

IP Source Guard ...................................................................................................................................265

Loop Guard ...........................................................................................................................................299

VLAN Mapping ......................................................................................................................................303

Layer 2 Protocol Tunneling ...................................................................................................................307

sFlow .....................................................................................................................................................312

PPPoE ...................................................................................................................................................316

Error Disable .........................................................................................................................................325

MAC Pinning .........................................................................................................................................333

Private VLAN .........................................................................................................................................336

Green Ethernet ......................................................................................................................................340

Link Layer Discovery Protocol (LLDP) ..................................................................................................343

Contents Overview

GS3700/XGS3700 Series User’s Guide

Anti-Arpscan ..........................................................................................................................................372

BPDU Guard .........................................................................................................................................378

OAM ......................................................................................................................................................381

ZULD .....................................................................................................................................................390

Static Route ...........................................................................................................................................396

Policy Routing .......................................................................................................................................400

Differentiated Services ..........................................................................................................................404

DHCP ....................................................................................................................................................413

VRRP ....................................................................................................................................................430

Load Sharing .........................................................................................................................................439

ARP Setup ............................................................................................................................................441

Maintenance ..........................................................................................................................................447

Access Control ......................................................................................................................................458

Diagnostic .............................................................................................................................................482

System Log ...........................................................................................................................................485

Syslog Setup .........................................................................................................................................486

Cluster Management .............................................................................................................................489

MAC Table .............................................................................................................................................495

IP Table .................................................................................................................................................498

ARP Table .............................................................................................................................................500

Routing Table ........................................................................................................................................502

Path MTU Table ....................................................................................................................................503

Configure Clone ....................................................................................................................................504

IPv6 Neighbor Table ..............................................................................................................................508

Troubleshooting ....................................................................................................................................510

Table of Contents

GS3700/XGS3700 Series User’s Guide

Table of Contents

Contents Overview ..............................................................................................................................3

Table of Contents .................................................................................................................................5

Part I: User’s Guide .........................................................................................20

Chapter 1

Getting to Know Your Switch.............................................................................................................21

1.1 Introduction .......................................................................................................................................21

1.1.1 Bridging Example ....................................................................................................................22

1.1.2 High Performance Switching Example ....................................................................................22

1.1.3 Gigabit Ethernet to the Desktop ..............................................................................................23

1.1.4 IEEE 802.1Q VLAN Application Example ................................................................................23

1.1.5 IPv6 Support ............................................................................................................................24

1.2 Ways to Manage the Switch ..............................................................................................................24

1.3 Good Habits for Managing the Switch ...............................................................................................25

Chapter 2

Hardware Installation and Connection .............................................................................................26

2.1 Freestanding Installation ..................................................................................................................26

2.2 Mounting the Switch on a Rack ........................................................................................................27

2.3 Installation Requirements ..................................................................................................................27

2.3.1 Precautions .............................................................................................................................27

2.4 Attaching the Brackets to the Switch .................................................................................................27

2.5 Mounting the Switch on a Rack .........................................................................................................28

2.6 Power Module Installation .................................................................................................................29

Chapter 3

Hardware Overview ............................................................................................................................30

3.1 Front Panel Connections ..................................................................................................................30

3.1.1 Ethernet Ports ..........................................................................................................................31

3.1.2 SFP/SFP+ Slots ......................................................................................................................32

3.1.3 Management Port ....................................................................................................................33

3.1.4 Console Port ...........................................................................................................................33

3.2 Rear Panel ........................................................................................................................................34

3.2.1 Removing and Installing the Fan Module ................................................................................34

3.2.2 Power Connection ...................................................................................................................34

3.3 LEDs .............................................................................................................................................35

Table of Contents

GS3700/XGS3700 Series User’s Guide

Chapter 4

The Web Configurator........................................................................................................................37

4.1 Introduction .......................................................................................................................................37

4.2 System Login .................................................................................................................................37

4.3 The Web Configurator Layout .........................................................................................................38

4.3.1 Change Your Password ........................................................................................................42

4.4 Saving Your Configuration ................................................................................................................43

4.5 Switch Lockout ................................................................................................................................43

4.6 Resetting the Switch ......................................................................................................................44

4.6.1 Reload the Configuration File .................................................................................................44

4.7 Logging Out of the Web Configurator ..............................................................................................45

4.8 Help ..................................................................................................................................................45

Part II: Technical Reference............................................................................46

Chapter 5

ZON Utility, ZON Neighbor Management and Port Status...............................................................47

5.1 Overview ...........................................................................................................................................47

5.2 Status ................................................................................................................................................47

5.3 ZyXEL One Network (ZON) Utility Screen .......................................................................................49

5.4 ZON Neighbor Management Screen ................................................................................................49

5.5 Port Status .......................................................................................................................................51

5.5.1 Port Details ...........................................................................................................................52

Chapter 6

Basic Setting ......................................................................................................................................56

6.1 System Information ........................................................................................................................56

6.1.1 System Information Stacking Hardware Monitor ....................................................................59

6.2 General Setup .................................................................................................................................61

6.3 Introduction to VLANs ......................................................................................................................63

6.4 Switch Setup ....................................................................................................................................63

6.5 IP Setup .........................................................................................................................................65

6.5.1 IP Interfaces ...........................................................................................................................65

6.5.2 IP Status Details .....................................................................................................................66

6.5.3 IP Configuration ......................................................................................................................67

6.6 Port Setup ........................................................................................................................................69

6.7 PoE ..................................................................................................................................................72

6.7.1 PoE Time Range Status ..........................................................................................................75

6.7.2 PoE Setup ...............................................................................................................................76

6.8 Interface Setup ..................................................................................................................................79

6.9 IPv6 ...................................................................................................................................................80

Table of Contents

GS3700/XGS3700 Series User’s Guide

6.9.1 IPv6 Interface Status ...............................................................................................................80

6.9.2 IPv6 Configuration ...................................................................................................................83

6.9.3 IPv6 Global Setup ....................................................................................................................83

6.9.4 IPv6 Interface Setup ................................................................................................................84

6.9.5 IPv6 Link-Local Address Setup ...............................................................................................85

6.9.6 IPv6 Global Address Setup .....................................................................................................86

6.9.7 IPv6 Neighbor Discovery Setup ...............................................................................................87

6.9.8 IPv6 Router Discovery Setup ..................................................................................................88

6.9.9 IPv6 Prefix Setup .....................................................................................................................89

6.9.10 IPv6 Neighbor Setup .............................................................................................................91

6.9.11 DHCPv6 Client Setup ............................................................................................................92

6.10 Stacking ...........................................................................................................................................93

6.10.1 Stacking Status ......................................................................................................................94

6.10.2 Stacking Slot .........................................................................................................................95

6.10.3 Stacking Configuration ...........................................................................................................97

6.11 DNS .................................................................................................................................................99

Chapter 7

VLAN..................................................................................................................................................101

7.1 Introduction to IEEE 802.1Q Tagged VLANs .............................................................................101

7.1.1 Forwarding Tagged and Untagged Frames ...........................................................................101

7.2 Automatic VLAN Registration .........................................................................................................102

7.2.1 GARP ....................................................................................................................................102

7.2.2 GVRP ....................................................................................................................................102

7.3 Port VLAN Trunking .......................................................................................................................103

7.4 Select the VLAN Type ....................................................................................................................103

7.5 802.1Q Static VLAN ........................................................................................................................103

7.5.1 VLAN Status .........................................................................................................................104

7.5.2 VLAN Details .........................................................................................................................105

7.6 Private VLAN Status .......................................................................................................................106

7.7 VLAN Configuration .......................................................................................................................106

7.7.1 Configure a Static VLAN ...................................................................................................107

7.7.2 Configure VLAN Port Settings ...........................................................................................109

7.7.3 Subnet Based VLANs ........................................................................................................... 111

7.7.4 Protocol Based VLANs ......................................................................................................... 114

7.8 Port-based VLAN Setup (Standalone Mode) .............................................................................. 117

7.8.1 Configure a Port-based VLAN .............................................................................................. 117

7.9 Voice VLAN ....................................................................................................................................120

7.10 MAC Based VLAN .........................................................................................................................122

Chapter 8

Static MAC Forward Setup...............................................................................................................124

8.1 Overview .........................................................................................................................................124

Table of Contents

GS3700/XGS3700 Series User’s Guide

8.2 Configuring Static MAC Forwarding ...........................................................................................124

Chapter 9

Static Multicast Forward Setup .......................................................................................................127

9.1 Static Multicast Forwarding Overview .............................................................................................127

9.2 Configuring Static Multicast Forwarding ..........................................................................................128

Chapter 10

Filtering..............................................................................................................................................130

10.1 Configure a Filtering Rule ...........................................................................................................130

Chapter 11

Spanning Tree Protocol....................................................................................................................132

11.1 STP/RSTP Overview ...................................................................................................................132

11.1.1 STP Terminology .................................................................................................................132

11.1.2 How STP Works ..................................................................................................................133

11.1.3 STP Port States ..................................................................................................................133

11.1.4 Multiple RSTP ....................................................................................................................133

11.1.5 Multiple STP .........................................................................................................................134

11.2 Spanning Tree Protocol Status Screen ..........................................................................................136

11.3 Spanning Tree Configuration ........................................................................................................137

11.4 Configure Rapid Spanning Tree Protocol ...................................................................................138

11.5 Rapid Spanning Tree Protocol Status .........................................................................................141

11.6 Configure Multiple Rapid Spanning Tree Protocol ......................................................................142

11.7 Multiple Rapid Spanning Tree Protocol Status ........................................................................145

11.8 Configure Multiple Spanning Tree Protocol ................................................................................147

11.8.1 Multiple Spanning Tree Protocol Port Configuration ...........................................................151

11.9 Multiple Spanning Tree Protocol Status ...................................................................................154

Chapter 12

Bandwid th Control..................................................................... ........... ........... .......... .......................157

12.1 Bandwidth Control Overview .......................................................................................................157

12.1.1 CIR and PIR ........................................................................................................................157

12.2 Bandwidth Control Setup ..............................................................................................................157

Chapter 13

Broadcast Storm Control.................................................................................................................160

13.1 Broadcast Storm Control Setup ....................................................................................................160

Chapter 14

Mirroring............................................................................................................................................162

14.1 Port Mirroring ...............................................................................................................................162

14.1.1 Local Port Mirroring .............................................................................................................165

Table of Contents

GS3700/XGS3700 Series User’s Guide

14.1.2 Remote Port Mirroring .........................................................................................................167

14.1.3 Source .................................................................................................................................168

14.1.4 Destination ...........................................................................................................................170

14.1.5 Connected Port ....................................................................................................................171

Chapter 15

Link Aggregation ..............................................................................................................................175

15.1 Link Aggregation Overview ..........................................................................................................175

15.2 Dynamic Link Aggregation ...........................................................................................................175

15.2.1 Link Aggregation ID ............................................................................................................176

15.3 Link Aggregation Status ...............................................................................................................176

15.4 Link Aggregation Setting ..............................................................................................................177

15.5 Link Aggregation Control Protocol .............................................................................................180

15.6 Static Trunking Example ...............................................................................................................183

Chapter 16

Port Authentication ..........................................................................................................................185

16.1 Port Authentication Overview .......................................................................................................185

16.1.1 IEEE 802.1x Authentication .................................................................................................185

16.1.2 MAC Authentication .............................................................................................................186

16.2 Port Authentication Configuration .................................................................................................187

16.2.1 Activate IEEE 802.1x Security .........................................................................................187

16.2.2 Guest VLAN ........................................................................................................................189

16.2.3 Activate MAC Authentication ..............................................................................................192

Chapter 17

Port Security .....................................................................................................................................195

17.1 About Port Security .......................................................................................................................195

17.2 Port Security Setup .......................................................................................................................195

17.3 VLAN MAC Address Limit ............................................................................................................197

Chapter 18

Time Range .......................................................................................................................................199

18.1 About Time Range ........................................................................................................................199

18.2 Time Range Setup ........................................................................................................................199

Chapter 19

Classifier............................................................................................................................................201

19.1 About the Classifier and QoS ........................................................................................................201

19.2 Classifier Status ............................................................................................................................201

19.3 Classifier Configuration .................................................................................................................202

19.3.1 Viewing and Editing Classifier Configuration .......................................................................206

19.4 Classifier Global Setting Configuration .........................................................................................207

Table of Contents

GS3700/XGS3700 Series User’s Guide

19.5 Classifier Example ........................................................................................................................208

Chapter 20

Policy Rule .......................................................................................................................................210

20.1 Policy Rules Overview .................................................................................................................210

20.1.1 DiffServ ................................................................................................................................210

20.1.2 DSCP and Per-Hop Behavior ..............................................................................................210

20.2 Configuring Policy Rules ...............................................................................................................210

20.3 Policy Example ..............................................................................................................................213

Chapter 21

Queuing Method ...............................................................................................................................215

21.1 Queuing Method Overview ...........................................................................................................215

21.1.1 Strictly Priority ......................................................................................................................215

21.1.2 Weighted Fair Queuing ........................................................................................................215

21.1.3 Weighted Round Robin Scheduling (WRR) .........................................................................216

21.2 Configuring Queuing .....................................................................................................................216

Chapter 22

VLAN Stacking ..................................................................................................................................219

22.1 VLAN Stacking Overview .............................................................................................................219

22.1.1 VLAN Stacking Example ......................................................................................................219

22.2 VLAN Stacking Port Roles ............................................................................................................220

22.3 VLAN Tag Format ..........................................................................................................................220

22.3.1 Frame Format ......................................................................................................................221

22.4 Configuring VLAN Stacking ...........................................................................................................221

22.4.1 Port-based Q-in-Q ...............................................................................................................223

22.4.2 Selective Q-in-Q .................................................................................................................225

Chapter 23

Multicast ............................................................................................................................................227

23.1 Multicast Overview .......................................................................................................................227

23.1.1 IP Multicast Addresses ........................................................................................................227

23.1.2 IGMP Filtering ......................................................................................................................227

23.1.3 IGMP Snooping ..................................................................................................................228

23.1.4 IGMP Snooping and VLANs ................................................................................................228

23.1.5 MLD Snooping-Proxy ..........................................................................................................228

23.1.6 MLD Messages ....................................................................................................................229

23.2 Multicast Setup .............................................................................................................................229

23.3 IPv4 Multicast Status ....................................................................................................................230

23.3.1 IGMP Snooping ..................................................................................................................230

23.3.2 IGMP Snooping VLAN ........................................................................................................234

23.3.3 IGMP Filtering Profile .........................................................................................................235

Table of Contents

GS3700/XGS3700 Series User’s Guide

23.4 IPv6 Multicast Status ....................................................................................................................236

23.4.1 MLD Snooping-proxy ..........................................................................................................237

23.4.2 MLD Snooping-proxy VLAN ...............................................................................................237

23.4.3 MLD Snooping-proxy VLAN Port Role Setting ...................................................................239

23.4.4 MLD Snooping-proxy Filtering ............................................................................................241

23.4.5 MLD Snooping-proxy Filtering Profile .................................................................................243

23.5 MVR Overview .............................................................................................................................244

23.5.1 Types of MVR Ports .............................................................................................................245

23.5.2 MVR Modes .........................................................................................................................245

23.5.3 How MVR Works .................................................................................................................245

23.6 General MVR Configuration ..........................................................................................................246

23.6.1 MVR Group Configuration ..................................................................................................248

23.6.2 MVR Configuration Example ...............................................................................................250

Chapter 24

AAA....................................................................................................................................................253

24.1 Authentication, Authorization and Accounting (AAA) ....................................................................253

24.1.1 Local User Accounts ............................................................................................................253

24.1.2 RADIUS and TACACS+ ......................................................................................................254

24.2 AAA Screens .................................................................................................................................254

24.2.1 RADIUS Server Setup .......................................................................................................254

24.2.2 TACACS+ Server Setup ..................................................................................................256

24.2.3 AAA Setup ...........................................................................................................................257

24.2.4 Vendor Specific Attribute .....................................................................................................260

24.2.5 Tunnel Protocol Attribute .....................................................................................................261

24.3 Supported RADIUS Attributes .......................................................................................................261

24.3.1 Attributes Used for Authentication .......................................................................................262

24.3.2 Attributes Used for Accounting ............................................................................................262

Chapter 25

IP Source Guard................................................................................................................................265

25.1 IP Source Guard Overview ...........................................................................................................265

25.1.1 What You Can Do ................................................................................................................265

25.1.2 What You Need to Know .....................................................................................................266

25.2 IP Source Guard ...........................................................................................................................267

25.3 IPv4 Source Guard Setup ............................................................................................................268

25.4 IPv4 Source Guard Static Binding .................................................................................................269

25.5 DHCP Snooping ............................................................................................................................271

25.6 DHCP Snooping Configure ...........................................................................................................273

25.6.1 DHCP Snooping Port Configure ..........................................................................................275

25.6.2 DHCP Snooping VLAN Configure .......................................................................................277

25.6.3 DHCP Snooping VLAN Port Configure ................................................................................278

25.7 ARP Inspection Status ..................................................................................................................279

Table of Contents

GS3700/XGS3700 Series User’s Guide

25.7.1 ARP Inspection VLAN Status ..............................................................................................280

25.7.2 ARP Inspection Log Status ..................................................................................................281

25.8 ARP Inspection Configure .............................................................................................................282

25.8.1 ARP Inspection Port Configure ............................................................................................284

25.8.2 ARP Inspection VLAN Configure .........................................................................................286

25.9 IPv6 Source Guard Overview .......................................................................................................287

25.10 IPv6 Source Binding Status .........................................................................................................287

25.11 IPv6 Static Binding Setup ...........................................................................................................288

25.12 IPv6 Source Guard Policy Setup ................................................................................................290

25.13 IPv6 Source Guard Port Setup ...................................................................................................291

25.14 IPv6 Snooping Policy Setup .......................................................................................................292

25.15 IPv6 Snooping VLAN Setup .......................................................................................................293

25.16 IPv6 DHCP Trust Setup .............................................................................................................294

25.17 Technical Reference ....................................................................................................................295

25.17.1 DHCP Snooping Overview ................................................................................................295

25.17.2 ARP Inspection Overview ..................................................................................................297

Chapter 26

Loop Guard .......................................................................................................................................299

26.1 Loop Guard Overview ..................................................................................................................299

26.2 Loop Guard Setup .........................................................................................................................301

Chapter 27

VLAN Mapping ..................................................................................................................................303

27.1 VLAN Mapping Overview .............................................................................................................303

27.1.1 VLAN Mapping Example .....................................................................................................303

27.2 Enabling VLAN Mapping ...............................................................................................................303

27.3 Configuring VLAN Mapping ...........................................................................................................305

Chapter 28

Layer 2 Protocol Tunneling..............................................................................................................307

28.1 Layer 2 Protocol Tunneling Overview ..........................................................................................307

28.1.1 Layer-2 Protocol Tunneling Mode ........................................................................................308

28.2 Configuring Layer 2 Protocol Tunneling ........................................................................................308

Chapter 29

sFlow..................................................................................................................................................312

29.1 sFlow Overview .............................................................................................................................312

29.2 sFlow Port Configuration ...............................................................................................................312

29.2.1 sFlow Collector Configuration ..............................................................................................314

Chapter 30

PPPoE................................................................................................................................................316

Table of Contents

GS3700/XGS3700 Series User’s Guide

30.1 PPPoE Intermediate Agent Overview ..........................................................................................316

30.1.1 PPPoE Intermediate Agent Tag Format ..............................................................................316

30.1.2 Sub-Option Format ..............................................................................................................316

30.1.3 Port State .............................................................................................................................317

30.2 The PPPoE Screen .......................................................................................................................318

30.3 PPPoE Intermediate Agent ..........................................................................................................318

30.3.1 PPPoE IA Per-Port .............................................................................................................320

30.3.2 PPPoE IA Per-Port Per-VLAN ............................................................................................322

30.3.3 PPPoE IA for VLAN ............................................................................................................323

Chapter 31

Error Disable .....................................................................................................................................325

31.1 Error Disable Overview ................................................................................................................325

31.1.1 CPU Protection Overview ....................................................................................................325

31.1.2 Error-Disable Recovery Overview .......................................................................................325

31.1.3 What You Can Do ................................................................................................................325

31.2 The Error Disable Screen ..............................................................................................................326

31.3 Error-Disable Status .....................................................................................................................326

31.4 CPU Protection Configuration ......................................................................................................328

31.5 Error-Disable Detect Configuration ..............................................................................................330

31.6 Error-Disable Recovery Configuration .........................................................................................331

Chapter 32

MAC Pinning .....................................................................................................................................333

32.1 MAC Pinning Overview ................................................................................................................333

32.2 MAC Pinning Configuration ...........................................................................................................333

Chapter 33

Private VLAN.....................................................................................................................................336

33.1 Private VLAN Overview ................................................................................................................336

33.1.1 Configuration .......................................................................................................................337

Chapter 34

Green Ethernet..................................................................................................................................340

34.1 Green Ethernet Overview .............................................................................................................340

34.2 Configuring Green Ethernet ..........................................................................................................340

Chapter 35

Link Layer Discovery Protocol (LLDP) ...........................................................................................343

35.1 LLDP Overview .............................................................................................................................343

35.2 LLDP-MED Overview ....................................................................................................................344

35.3 LLDP Screens ...............................................................................................................................345

35.4 LLDP Local Status ........................................................................................................................346

Table of Contents

GS3700/XGS3700 Series User’s Guide

35.4.1 LLDP Local Port Status Detail ............................................................................................348

35.5 LLDP Remote Status ....................................................................................................................352

35.5.1 LLDP Remote Port Status Detail ........................................................................................352

35.6 LLDP Configuration ......................................................................................................................358

35.6.1 LLDP Configuration Basic TLV Setting ...............................................................................361

35.6.2 LLDP Configuration Basic Org-specific TLV Setting ...........................................................362

35.7 LLDP-MED Configuration .............................................................................................................364

35.8 LLDP-MED Network Policy .........................................................................................................366

35.9 LLDP-MED Location ...................................................................................................................368

Chapter 36

Anti-Arpscan .....................................................................................................................................372

36.1 Anti-Arpscan Overview .................................................................................................................372

36.1.1 What You Can Do ................................................................................................................372

36.1.2 What You Need to Know ......................................................................................................372

36.2 Anti-Arpscan Status ......................................................................................................................373

36.3 Anti-Arpscan Host Status .............................................................................................................374

36.4 Anti-Arpscan Trust Host ...............................................................................................................374

36.5 Anti-Arpscan Configure ................................................................................................................375

Chapter 37

BPDU Guard............................................................................... ........... ........... .......... .......................378

37.1 BPDU Guard Overview ................................................................................................................378

37.1.1 What You Can Do ................................................................................................................378

37.2 BPDU Guard Status ......................................................................................................................378

37.3 BPDU Guard Configuration ...........................................................................................................379

Chapter 38

OAM ...................................................................................................................................................381

38.1 OAM Overview .............................................................................................................................381

38.1.1 What You Can Do ................................................................................................................381

38.2 OAM Status ...................................................................................................................................381

38.2.1 OAM Details ........................................................................................................................383

38.3 OAM Configuration ........................................................................................................................387

38.4 OAM Remote Loopback ................................................................................................................389

Chapter 39

ZULD ..................................................................................................................................................390

39.1 ZULD Overview ............................................................................................................................390

39.1.1 What You Can Do ................................................................................................................390

39.1.2 What You Need to Know ......................................................................................................390

39.2 ZULD Status ..................................................................................................................................391

39.3 ZULD Configuration .....................................................................................................................393

Table of Contents

GS3700/XGS3700 Series User’s Guide

Chapter 40

Static Route.......................................................................................................................................396

40.1 Static Routing Overview ..............................................................................................................396

40.2 Static Routing ................................................................................................................................396

40.3 Configuring IPv4 Static Routing ..................................................................................................397

40.4 Configuring IPv6 Static Routing ..................................................................................................398

Chapter 41

Policy Routing...................................................................................................................................400

41.1 Policy Route Overview .................................................................................................................400

41.1.1 Benefits ................................................................................................................................400

41.2 Configuring Policy Routing Profile .................................................................................................400

41.2.1 Policy Routing Rule Configuration ......................................................................................401

Chapter 42

Differentiated Services.....................................................................................................................404

42.1 DiffServ Overview ........................................................................................................................404

42.1.1 DSCP and Per-Hop Behavior ..............................................................................................404

42.1.2 DiffServ Network Example ..................................................................................................404

42.2 Two Rate Three Color Marker Traffic Policing ..............................................................................405

42.2.1 TRTCM - Color-blind Mode ..................................................................................................406

42.2.2 TRTCM - Color-aware Mode ...............................................................................................406

42.3 Activating DiffServ ........................................................................................................................406

42.3.1 Configuring 2-Rate 3 Color Marker Settings .......................................................................408

42.3.2 DSCP Profile ......................................................................................................................410

42.4 DSCP-to-IEEE 802.1p Priority Settings ................................................................................... 411

42.4.1 Configuring DSCP Settings .................................................................................................412

Chapter 43

DHCP..................................................................................................................................................413

43.1 DHCP Overview ...........................................................................................................................413

43.1.1 DHCP Modes ......................................................................................................................413

43.1.2 DHCP Configuration Options ...............................................................................................413

43.2 DHCP Configuration ......................................................................................................................413

43.3 DHCPv4 Status ............................................................................................................................414

43.3.1 DHCPv4 Server Status Detail .............................................................................................414

43.4 DHCPv4 Relay .............................................................................................................................415

43.4.1 DHCPv4 Relay Agent Information .......................................................................................416

43.4.2 DHCPv4 Option 82 Profile ...................................................................................................416

43.4.3 Configuring DHCPv4 Global Relay ......................................................................................418

43.4.4 DHCPv4 Global Relay Port Configure ................................................................................418

43.4.5 Global DHCP Relay Configuration Example .......................................................................420

43.5 Configuring DHCP VLAN Settings .............................................................................................420

Table of Contents

GS3700/XGS3700 Series User’s Guide

43.5.1 DHCPv4 VLAN Port Configure ...........................................................................................422

43.5.2 Example: DHCP Relay for Two VLANs ...............................................................................423

43.6 DHCPv6 Status ............................................................................................................................424

43.7 DHCPv6 Information .....................................................................................................................425

43.8 DHCPv6 Prefix Delegation ............................................................................................................426

43.9 DHCPv6 Relay ..............................................................................................................................428

Chapter 44

VRRP..................................................................................................................................................430

44.1 VRRP Overview ...........................................................................................................................430

44.2 VRRP Status .................................................................................................................................431

44.3 VRRP Configuration .....................................................................................................................431

44.3.1 IP Interface Setup ...............................................................................................................431

44.3.2 VRRP Parameters ..............................................................................................................433

44.3.3 Configuring VRRP Parameters ............................................................................................433

44.3.4 Viewing VRRP Summary .....................................................................................................434

44.4 VRRP Configuration Examples ....................................................................................................435

44.4.1 One Subnet Network Example ...........................................................................................435

44.4.2 Two Subnets Example .........................................................................................................436

Chapter 45

Load Sharing.....................................................................................................................................439

45.1 Load Sharing Overview ................................................................................................................439

45.2 Configuring Load Sharing .............................................................................................................439

Chapter 46

ARP Setup .........................................................................................................................................441

46.1 ARP Overview ..............................................................................................................................441

46.1.1 How ARP Works ..................................................................................................................441

46.1.2 ARP Learning Mode ............................................................................................................441

46.2 ARP Setup ....................................................................................................................................443

46.2.1 ARP Learning .....................................................................................................................443

46.2.2 Static ARP ...........................................................................................................................445

Chapter 47

Maintenance......................................................................................................................................447

47.1 The Maintenance Screen ..............................................................................................................447

47.2 Firmware Upgrade ........................................................................................................................448

47.3 Restore a Configuration File .........................................................................................................450

47.4 Backup a Configuration File ..........................................................................................................451

47.5 Erase Running-Configuration ......................................................................................................451

47.6 Save Configuration ........................................................................................................................452

47.7 Reboot System ..............................................................................................................................452

Table of Contents

GS3700/XGS3700 Series User’s Guide

47.7.1 Load Stacking Default .........................................................................................................452

47.7.2 Load Factory Default ..........................................................................................................453

47.8 Tech-Support ................................................................................................................................453

47.9 FTP Command Line ......................................................................................................................455

47.9.1 Filename Conventions ........................................................................................................455

47.9.2 FTP Command Line Procedure ..........................................................................................456

47.9.3 GUI-based FTP Clients ........................................................................................................456

47.9.4 FTP Restrictions .................................................................................................................457

Chapter 48

Access Control .................................................................................................................................458

48.1 Access Control Overview ..........................................................................................................458

48.1.1 What You Can Do ................................................................................................................458

48.2 The Access Control Main Screen ..................................................................................................458

48.3 About SNMP ...............................................................................................................................459

48.3.1 SNMP v3 and Security ........................................................................................................460

48.3.2 Supported MIBs .................................................................................................................460

48.3.3 SNMP Traps ........................................................................................................................461

48.3.4 Configuring SNMP ............................................................................................................465

48.3.5 Configuring SNMP Trap Group .........................................................................................466

48.3.6 Enabling/Disabling Sending of SNMP Traps on a Port ........................................................467

48.3.7 Configuring SNMP User ...................................................................................................469

48.4 Setting Up Login Accounts ..........................................................................................................471

48.5 SSH Overview ...............................................................................................................................472

48.6 How SSH works ............................................................................................................................473

48.7 SSH Implementation on the Switch ...............................................................................................474

48.7.1 Requirements for Using SSH ...............................................................................................474

48.8 Introduction to HTTPS ...................................................................................................................474

48.9 HTTPS Example ...........................................................................................................................475

48.9.1 Internet Explorer Warning Messages ..................................................................................475

48.9.2 Mozilla Firefox Warning Messages ......................................................................................477

48.9.3 The Main Screen .................................................................................................................478

48.10 Service Access Control ............................................................................................................479

48.11 Remote Management .............................................................................................................480

Chapter 49

Diagnostic .........................................................................................................................................482

49.1 Diagnostic ....................................................................................................................................482

Chapter 50

System Log .......................................................................................................................................485

50.1 Overview .......................................................................................................................................485

50.2 System Log ...................................................................................................................................485

Table of Contents

GS3700/XGS3700 Series User’s Guide

Chapter 51

Syslog Setup.....................................................................................................................................486

51.1 Syslog Overview ...........................................................................................................................486

51.2 Syslog Setup ................................................................................................................................486

Chapter 52

Cluster Management ........................................................................................................................489

52.1 Clustering Management Status Overview ....................................................................................489

52.2 Cluster Management Status .........................................................................................................490

52.2.1 Cluster Member Switch Management ................................................................................491

52.3 Clustering Management Configuration ........................................................................................493

Chapter 53

MAC Table .........................................................................................................................................495

53.1 MAC Table Overview ....................................................................................................................495

53.2 Viewing the MAC Table .................................................................................................................496

Chapter 54

IP Table ..............................................................................................................................................498

54.1 IP Table Overview ........................................................................................................................498

54.2 Viewing the IP Table ......................................................................................................................499

Chapter 55

ARP Table..........................................................................................................................................500

55.1 ARP Table Overview ....................................................................................................................500

55.1.1 How ARP Works ..................................................................................................................500

55.2 The ARP Table Screen .................................................................................................................500

Chapter 56

Routing Table....................................................................................................................................502

56.1 Overview .......................................................................................................................................502

56.2 Viewing the Routing Table Status .................................................................................................502

Chapter 57

Path MTU Table .................................................................................................................................503

57.1 Path MTU Overview .....................................................................................................................503

57.2 Viewing the Path MTU Table .........................................................................................................503

Chapter 58

Configure Clone................................................................................................................................504

58.1 Configure Clone ...........................................................................................................................504

Table of Contents

GS3700/XGS3700 Series User’s Guide

Chapter 59

IPv6 Neighbor Table..........................................................................................................................508

59.1 IPv6 Neighbor Table Overview .....................................................................................................508

59.2 Viewing the IPv6 Neighbor Table ..................................................................................................508

Chapter 60

Troubleshooting................................................................................................................................510

60.1 Power, Hardware Connections, and LEDs ....................................................................................510

60.2 Switch Access and Login .............................................................................................................. 511

60.3 Switch Configuration .....................................................................................................................513

Appendix A Common Services ........................................................................................................514

Appendix B IPv6 ..............................................................................................................................517

Appendix C Customer Support ........................................................................................................526

Appendix D Legal Information .........................................................................................................533

Index ..................................................................................................................................................539

PART I

User’s Guide

GS3700/XGS3700 Series User’s Guide

CHAPTER 1

Getting to Know Your Switch

This chapter introduces the main features and applications of the Switch.

1.1 Introduction

Your Switch is a layer 2+, Gigabit Ethernet (GbE) switch with two power slots for hot-swappable

RPS300 or RPS600-HP power modules. The Switch provides four SFP or SFP+ slots for uplink. By

integrating router functions, the Switch performs wire-speed layer-3 routing in addition to layer-2

switching.

This User’s Guide covers the following models: GS3700-24, GS3700-24HP, GS3700-48, GS3700-

48HP, XGS3700-24, XGS3700-24HP, XGS3700-48, and XGS3700-48HP.

With its built-in web configurator, including the ZyXEL One Network (ZON) Neighbor Management

feature (Section 5.4 on page 49), viewing, managing and configuring the Switch and its

neighboring devices is easy. In addition, the Switch can also be managed via Telnet, any terminal

emulator program on the console port, or third-party SNMP management.

In addition, Z yXEL offers a proprietary software program called Z yXEL One Network (Z ON) Utility, it

is a utility tool that assists you to set up and maintain network devices in a more simple and

efficient way. You can download the ZON Utility at www.zyxel.com and install it on a PC. For more

information on ZON Utility see Section 5.3 on page 49.

See the datasheet for a full list of software features available on the Switch.

Table 1 Switch Comparison Table

PORT/SWITCH DETAILS GS3700-

24 GS3700-

24HP GS3700-

48 GS3700-

48HP XGS3700

-24 XGS3700

-24HP XGS3700

-48 XGS3700

-48HP

24 10/100/1000Base-T

Ethernet ports

48 10/100/1000Base-T

Ethernet ports

4 1GbE SFP slots

4 10GbE SFP+ slots

Supports IEEE 802.3af and

IEEE 802.3at PoE standards

Supports IEEE 802.3az EEE

Energy Efficient Ethernet

(EEE)

Chapter 1 Getting to Know Your Switch

GS3700/XGS3700 Series User’s Guide

1.1.1 Bridging Example

In this example the Switch connects different company departments (RD and Sales) to the

corporate backbone. It can alleviate bandwidth contention and eliminate server and network

bottlenecks. All users that need high bandwidth can connect to high-speed department servers via

the Switch. You can provide a super-fast uplink connection by using the optional 10 Gigabit uplink

module on the Switch.

Figure 1 Bridging Application

1.1.2 High Performance Switching Example

The Switch is ideal for connecting two geographically dispersed networks that need high bandwidth.

In the following example, a company uses the optional 10 Gigabit uplink modules to connect the

headquarters to a branch office network. Within the headquarters network, a company can use

trunking to group several physical ports into one logical higher-capacity link. Trunking can be used

if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed,

but more costly, single-port link.

Backbone

RD Sales

Chapter 1 Getting to Know Your Switch

GS3700/XGS3700 Series User’s Guide

Figure 2 High Performance Switching

1.1.3 Gigabit Ethernet to the Desktop

The Switch is an ideal solution for small networks which demand high bandwidth for a group of

heavy tr affic users. You can connect computers and servers directly to the Switch’s port or connect

other switches to the Switch. Use the optional 10 Gigabit uplink module to provide high speed

access to a data server and the Internet. The uplink module supports a fiber-optic connection which

alleviates the distance limitations of copper cabling.

In this example, all computers can share high-speed applications on the server and access the

Internet. To expand the network, simply add more networking devices such as switches, routers,

computers, print servers and so on.

Figure 3 Gigabit to the Desktop

1.1.4 IEEE 802.1Q VLAN Application Example

A VLAN (Virtual Local Area Network) allows a ph ysical network to be partitioned into multiple logical

networks. Stations on a logical network belong to one or more groups. With VLAN, a station cannot

directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes

through a router.

Branch

10 Gbps

Trunk

Internet

Chapter 1 Getting to Know Your Switch

GS3700/XGS3700 Series User’s Guide

For more information on VLANs, refer to Chapter 7 on page 101.

1.1.4.1 Tag-based VLAN Example

Ports in the same VLAN group share the same frame broadcast domain, thus increasing network

performance by reducing broadcast traffic. VLAN groups can be modified at any time by adding,

moving or changing ports without any re-cabling.

Shared resources such as a server can be used by all ports in the same VLAN as the server. In the

following figure only ports that need access to the server need to be part of VLAN 1. Ports can

belong to other VLAN groups too.

Figure 4 Shared Server Using VLAN Example

1.1.5 IPv6 Support

IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The

increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 1038 IP

addresses. At the time of writing, the Switch supports the following features.

• Static address assignment and stateless auto-configuration

• Neighbor Discovery Protocol (a protocol used to discover other IPv6 devices in a network)

• Remote Management using ping SNMP, telnet, HTTP and FTP services

• ICMPv6 to report errors encountered in packet processing and perform diagnostic functions, such

as "ping”

• IPv4/IPv6 dual stack; the Switch can run IPv4 and IPv6 at the same time

• DHCPv6 client and relay

• Multicast Listener Discovery (MLD) snooping and proxy

For more information on IPv6, refer to Appendix B on page 517 and the CLI Reference Guide.

1.2 Ways to Manage the Switch

Use any of the following methods to manage the Switch.

Chapter 1 Getting to Know Your Switch

GS3700/XGS3700 Series User’s Guide

• Web Configurator. This is recommended for everyday management of the Switch using a

(supported) web browser. See Chapter 4 on page 37.

• Command Line Interface. Line commands offer an alternative to the Web Configurator and may

be necessary to configure advanced features. See the CLI Reference Guide.

• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/restore . See

Section 47.9 on page 455.

• SNMP. The device can be monitored and/or managed by an SNMP manager. See Section 48.3 on

page 459.

1.3 Good Habits for Managing the Switch

Do the following things regularly to make the Switch more secure and to manage the Switch more

effectively.

• Change the password . Use a password that’s not easy to guess and that consists of different

types of characters, such as numbers and letters.

• Write down the password and put it in a safe place.

• Back up the configuration (and make sure you know how to restore it). Restoring an earlier

working configuration may be useful if the device becomes unstable or even crashes. If you

forget your password, you will have to reset the Switch to its factory default settings. If you

backed up an earlier configur ation file, you would not have to totally re-configure the S witch. You

could simply restore your last configuration.

GS3700/XGS3700 Series User’s Guide

CHAPTER 2

Hardware Installation and Connection

This chapter shows you how to install and connect the Switch.

2.1 Freestanding Installation

1Make sure the Switch is clean and dry.

2Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and

the connected cables. Make sure there is a power outlet nearby.

3Make sure there is enough clearance around the Switch to allow air circulation and the attachment

of cables and the power cord.

4Remo ve the adhesiv e backing from the rubber feet.

5Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect

the Switch from shock or vibration and ensure space between devices when stacking.

Figure 5 Attaching Rubber Feet

Note: Do NOT block the ventilation holes. Leave space between devices when st ack i ng .

Note: For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and

3.4 inches (8 cm) at the back of the Switch. This is espec ial l y importan t f o r

enclosed rack installations.

Chapter 2 Hardware Installation and Connection

GS3700/XGS3700 Series User’s Guide

2.2 Mounting the Switch on a Rack

This section lists the rack mounting requirements and precautions and describes the installation

steps of how to mount the Switch in a 19-inch rack with the included rack mounting kit.

Note: ZyXEL provides extensible rear mounting brackets (RM400) to install the Switch in

a 21-inch, 23-inch or 24-inch rack. See the RM400 Hardware Installation

Guide.

2.3 Installation Requirements

• Two front mounting brackets (short), two sliding rails and two rear mounting brackets.

• Eight M4 metric screws with large heads and a #2 Philips screwdriver for attaching the brackets

to the Switch.

• Four M4 metric screws with small heads and a #2 Philips screwdriver for attaching the sliding

rails to the Switch.

• Eight M6 metric rack screws and a screwdriver for attaching the Switch (with attached brackets)

to the rack. Rack depth can be from 90 to 120 cm.

Note: Failure to use the proper screws may damage the unit.

2.3.1 Precautions

• Make sure the rack will safely support the combined weight of all the equipment it contains. The

maximum weight a bracket can hold is 27 Kg.

• Make sure the position of the Switch does not make the rack unstable or top-heavy. Take all

necessary precautions to anchor the rack securely before installing the unit.

2.4 Attaching the Brackets to the Switch

Use the M4 screws (smaller than the rack screws) to attach the brackets to the Switch.

1Po sition the smaller front mounting bracket on one si de of the Switch, lining up the four screw holes

on the bracket with the screw holes on the side of the Switch.

2Use a #2 Philips screwdriver to install the M4 screws with large heads through the mounting

bracket holes into the Switch.

3Repeat steps 1 and 2 to install the second front mounting bracket on the other side of the Switch.

4Position a sliding rail on one side at the rear of the Switch, lining up the two screw holes on the

sliding rail with the screw holes on the side of the Switch.

5Use a screwdriver to install the M4 screws with small heads through the sliding rail holes into the

Switch.

6Repeat steps 1 and 2 to install the second sliding rail on the other side of the Switch.

Chapter 2 Hardware Installation and Connection

GS3700/XGS3700 Series User’s Guide

7Slide the rear bracket along the r ail and set the bracket in place depending on the depth of the rack .

The rear brackets can be used with a 19-inch rack.

You may now mount the Switch on a rack. Proceed to the next section.

2.5 Mounting the Switch on a Rack

Use the M6 rack screws (larger than the M4 screws) to mount the S witch with brackets on the r ack.

1Position a front mounting bracket (that is already attached to the Switch) on one side of the rack,

lining up the two screw holes on the bracket with the screw holes at the front of the rack.

2Use a screwdriver to install the rack screws through the mounting bracket holes into the rack.

3Repeat steps 1 and 2 to attach the other front mounting bracket on the other side of the rack.

4Position a rear mounting bracket (that is already attached to the Switch) on one side of the rack,

lining up the two screw holes on the bracket with the screw holes at the rear of the rack.

5Use a screwdriver to install the rack screws through the mounting bracket holes into the rack.

6Repeat steps 4 and 5 to attach the other rear mounting bracket on the other side of the rack.

Front Bracket

Sliding Rail

Rear Bracket

Chapter 2 Hardware Installation and Connection

GS3700/XGS3700 Series User’s Guide

2.6 Power Module Installation

There is one power module installed in the first power slot of the Switch by default. See the Power

Module Hardware Installation Guide for how to install a second power module or remove the

power module.

Rear

Front

GS3700/XGS3700 Series User’s Guide

CHAPTER 3

Hardware Overview

This chapter describes the front panel and rear panel of the Switch and shows you how to make the

hardware connections.

3.1 Front Panel Connections

The figure below shows the front panel of the Switch.

Figure 6 Front Panel: GS3700 Series

Chapter 3 Hardware Overview

GS3700/XGS3700 Series User’s Guide

Figure 7 Front Panel: XGS3700 Series

The following table describes the ports.

3.1.1 Ethernet Ports

The Switch has 1000Base-T auto-negotiating, auto-crossover Ethernet ports. In 10/100/1000 Mbps

Gigabit Ethernet, the speed can be 10Mbps, 100 Mbps or 1000 Mbps. The duplex mode can be both

half or full duplex at 100 Mbps and full duplex only at 1000 Mbps.

An auto-negotiating port can detect and adjust to the optimum Ethernet speed (10/100/1000

Mbps) and duplex mode (full duplex or half duplex) of the connected device.

An auto-crossover (auto-MDI/MDI - X) port automatically works with a str aight-through or crossover

Ethernet cable.

3.1.1.1 Default Ethernet Settings

The factory default negotiation settings for the Ethernet ports on the Switch are:

Table 2 Panel Connections

CONNECTOR DESCRIPTION

24 or 48 10/

100/1000Base-T

RJ-45 Ethernet

Ports

Connect these ports to a computer, a hub, an Ethernet switch or router.

4 SFP or SFP+

Slots Use Small Form-Factor Pluggable (SFP) or SFP+ transceivers in these ports for fiber-optic

or copper connections to a computer, a hub, an Ethernet switch or router. You can also

insert an SFP+ Direct Attach Copper (DAC) in the SFP+ slot.

RJ-45 out-of-

band

Management

Port

Connect to a computer using an RJ-45 Ethernet cable for local configuration of the Switch.

Console Port Only connect this port to your computer (using an RS-232 cable) if you want to configure

the Switch using the command line interface (CLI) via the console po rt.

Chapter 3 Hardware Overview

GS3700/XGS3700 Series User’s Guide

• Speed: Auto

•Duplex: Auto

• Flow control: Off

• Dual Personality Interface: Fiber-optic module first

3.1.2 SFP/SFP+ Slots

These are four slots for Small Form-Factor Pluggable (SFP) or SFP+ modules, such as an SFP/SFP+

transceiver. The SFP+ (SFP Plus) is an enhanced version of the SFP and supports data rates of 10

Gbps. A transceiver is a single unit that houses a transmitter and a receiver. Use a transceiver to

connect a fiber-optic cable to the Switch. The Switch does not come with transceivers. You must

use transceivers that comply with the Small Form-Factor Pluggable (SFP) Transceiver MultiSource

Agreement (MSA). See the SFF committee’s INF-8074i specificat ion Rev 1.0 for details.

You can change transceivers while the Switch is operating. You can use different transceivers to

connect to Ethernet switches with different types of fiber-optic connectors.

• Type: SFP or SFP+ connection interface

• Connection speed: 1 or 10 Gigabit per second (Gbps)

To avoid possible eye injury, do not look into an operating fiber-optic

module’s connectors.

3.1.2.1 Transceiver Installation

Use the following steps to install a transceiver.

1Insert the transceiver into the slot with the exposed section of PCB board facing down.

Figure 8 Transceiver Installation Example

2Press the transceiver firmly until it clicks into place.

3The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is

functioning properly.

Chapter 3 Hardware Overview

GS3700/XGS3700 Series User’s Guide

Figure 9 Installed Transceiver

3.1.2.2 Transceiver Removal

Use the following steps to remove a transceiver.

1Open the transceiver’s latch (latch styles vary).

Figure 10 Opening the Transceiver’s Latch Example

2Pull the transceiver out of the slot.

Figure 11 Transceiver Removal Example

3.1.3 Management Port

The 100Base- T Ethernet MGMT (management) port is used for local management. Connect directly

to this port using an Ethernet cable. You can configure the Switch via Te lnet or the web

configurator.

The default IP address of the management port is 192.168.0.1 with a subnet mask of

255.255.255.0.

3.1.4 Console Port

For local management, y ou can use a computer with terminal emulation software configured to the

following parameters:

• VT100 terminal emulation

• 9600 bps

Chapter 3 Hardware Overview

GS3700/XGS3700 Series User’s Guide

• No parity, 8 data bits, 1 stop bit

• No flow control

Connect the male 9-pin end of the RS-232 console cable to the console port of the S witch. Connect

the female end to a serial port (COM1, COM2 or other COM port) of your computer.

3.2 Rear Panel

The following figures show the rear panels of the Switch. The rear panels contain:

• A slot for a fan module (A)

• Two slots for power modules with power receptacles (B and C)

Figure 12 Rear Panel

3.2.1 Removing and Installing the Fan Module

See the Fan Module Hardware Installation Guide to see how to install the fan module in the

Switch.

3.2.2 Power Connection

Make sure you are using the correct power source and that no objects obstruct the airflow of the

fans.

The Switch uses two power supply modules, one of which is redundant, so if one power module fails

the system can operate on the remaining module.

Connecting the Power

Use the following procedures to connect the Switch to a power source after you have installed it in

a rack.

Note: Use the included power cord for the AC power connection.

1Connect the female end of the power cord to the AC power socket.

2Connect the other end of the cord to a power outlet.

Disconnecting the Power

The power input connectors can be disconnected from the power source individually.

Chapter 3 Hardware Overview

GS3700/XGS3700 Series User’s Guide

1Disconnect the power cord from the power outlet.

2Disconnect the power cord from the AC power socket.

3.3 LEDs

The following table describes the LEDs.

Table 3 LEDs

LED COLOR STATUS DESCRIPTION

PWR1

(Power 1) Green On The system is receiving power from the power module in the first

power slot.

Off The system is not receiving power from the power module in the first

power slot.

Amber On The power module in the first power slot fails to supply power or its

fan is not functioning at a proper speed.

PWR2

(Power 2) Green On The system is receiving power from the power module in the second

power slot.

Off The system is not receiving power from the power module in the

second power slot.

Amber On The power module in the second power slot fai ls to supply power or its

fan is not functioning at a proper speed.

SYS

(System) Green Blinking The system is rebooting and performing self-diagnostic tests.

On The system is on and functioning properly.

Off The power is off or the system is not ready or malfunctioning.

ALM

(Alarm) Red On There is a hardware failure, such as high device temperature, wrong

voltage and abnormal fan speed.

Off The system is functioning normally.

MAST

(Master) Green On The Switch is acting as a standalone switch or the mast er in stacking.

Off The Switch is acting as a non-master member in a stack or it is in

standalone mode.

10/100/1000Base-T Ports

1-24 or 1-

LNK/ACT

(Left)

Green Blinking The port is receiving or transmitting data at 10 or 1000 Mbps.

On The port has a successful 10 or 1000 Mbps connection.

Amber Blinking The port is receiving or transmitting data 100 Mbps.

On The port has a successful 100 Mbps connection.

Off This link is disconnected or the port is disabled.

PoE 10/100/1000Base-T Ports

1-24 or 1-

LNK/ACT

(Left)

Green Blinking The port is receiving or transmitting data at 10 or 1000 Mbps.

On The port has a successful 10 or 1000 Mbps connection.

Amber Blinking The port is receiving or transmitting data 100 Mbps.

On The port has a successful 100 Mbps connection.

Off This link is disconnected or the port is disabled.

Chapter 3 Hardware Overview

GS3700/XGS3700 Series User’s Guide

1-24 or 1-

POE (Right)

Green On Power is supplied to the PoE port.

Off Power is not supplied to the PoE port.

1G SFP Slots

25-28 or

49-52

LNK/ACT

Green

(Right)

Blinking The port is receiving or transmitting data at 1 Gbps.

On The port has a successful 1 Gbps connection.

Off This link is disconnected.

1G/10G SFP+ Slots

25-28 or

49-52

LNK/ACT

Green

(Right)

Blinking The port is receiving or transmitting data at 1 Gbps.

On The port has a successful 1 Gbps connection.

Blue

(Left)

Blinking The port is receiving or transmitting data 10 Gbps.

On The port has a successful 10 Gbps connection.

Off This link is disconnected.

STACK ID The LED is showing the Stack ID number of the Switch.

ID 0 means it is a standalone Switch.

MGMT

(Manageme

nt)

Green Blinking The system is transmitting or re ceiving to/from an Ethernet device at

10 Mbps through the MGMT port.

On The MGMT port is connected at 10 Mbps.

Off The MGMT port is not connected at 10 Mbps, to an Ethernet device, or

the port is disabled.

Amber Blinking The system is transmitting or receiving to/from an Ethernet device at

100 Mbps through the MGMT port.

On The MGMT port is connected at 100 Mbps.

Off The MGMT port is not connected at 100 Mbps, to an Ethernet device,

or the port is disabled.

Table 3 LEDs (continued)

LED COLOR STATUS DESCRIPTION

GS3700/XGS3700 Series User’s Guide

CHAPTER 4

The Web Configurator

This section introduces the configuration and functions of the web configurator.

4.1 Introduction

The web configurator is an HTML-based management interface that allows easy Switch setup and

management via Internet browser. Supported browsers at the time of writing are:

•IE 8 or later

• Chrome 34.0.1847.131 or later

• Firefox 29.0.1 or later

•Opera 21.0 or later

• Safari 5.1.7 or later

The recommended screen resolution is 1024 by 768 pixels. In order to use the web configurator

you need to allow:

• Web browser pop-up windows from your device . Web pop-up blocking is enabled by default i n

some browsers.

• JavaScript (enabled by default).

• Jav a pe rmission s (en a bled by default).

4.2 System Login

1Start your web browser.

2Type “http://” and the IP address of the Switch (for example, the default management IP address is

192.168.1.1 through an in-band (non-MGMT) port and 192.168.0.1 through the MGMT port) in the

Location or Address field. Press [ENTER]. Your computer must be in the same subnet in order to

access this website address.

3The login screen appears. The default username is admin and associated default password is

1234. The date and time display as shown if you have not configured a time server nor manually

entered a time and date in the General Setup screen.

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

Figure 13 Web Configurator: Login

4Click OK to view the first web configurator screen.

4.3 The Web Configurator Layout

The Status screen is the first screen that displays when you access the web configurator. This guide

uses the XGS3700-48HP screens as an example. The screens may vary slightly for different models.

The following figure shows the navigating components of a web configurator screen.

Figure 14 The Web Configurator Layout

A - Click the menu items to open submenu links, and then click on a submenu link to open the

screen in the main window.

B, C, D, E, F- These are quick links which allow you to perform certain tasks no matter which

screen you are currently working in.

B - Click this link to update the information in the screen you are viewing currently.

BCD

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

C - Click this link to save your configuration into the Switch’s nonvolatile memory. Nonvolatile

memory is saved in the configur ation file from which the S witch booted from and it stays the same

even if the Switch’s power is turned off. See Section 47.6 on page 452 for information on saving

your settings to a specific configuration file.

D - Click this link to go to the status page of the Switch.

E - Click this link to log out of the web configurator.

F - Click this link to display web help pages. The help pages provide descriptions for all of the

configuration screens.

G - Click this link to go to the ZON Neighbor Management screen where y ou can see and man age

neighbor devices learned by the Switch.

In the navigation panel, click a main link to reveal a list of submenu links.

Table 4 Navigation Panel Sub-links Overview

BASIC SETTING ADVANCED

APPLICATION IP APPLICATION MANAGEMENT

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

The following table describes the links in the navigation panel.

Table 5 Navigation Panel Links

LINK DESCRIPTION

Basic Settings

System Info This link takes you to a screen that displays general system and hardware monitoring

information.

General Setup This link takes you to a screen where you can configure general identification information

and time settings for the Switch.

Switch Setup This link takes you to a screen where you can set up global Switch parameters such as

VLAN type, MAC address learning, GARP and priority queues.

IP Setup This link takes you to a screen where you can configure the IP address, subnet mask

(necessary for Switch management) and set up to 128 IP routing domains.

Port Setup This link takes you to screens where you can configure speed, flow control an d priority

settings for individual Switch ports.

PoE Setup For PoE model(s).

This link takes you to a screen where you can set priorities, PoE power-up settings and

schedule so that the Switch is able to reserve and allocate power to certain PDs.

Interface Setup This link takes you to a screen where you can create IPv6 interfaces on the Switch.

IPv6 This link takes you to a screen where you can enable an IPv6 interface and configure the

IPv6 settings on the Switch.

Stacking This link takes you to a screen where you can view and configure stacking system for the

Switch.

DNS This link takes you to a screen where you can configure DNS (domain name server) IP

addresses.

Advanced Application

VLAN This link takes you to screens where you can configure port-based or 802.1Q VLAN

(depending on what you configured in the Switch Setup menu) . You can also configure a

protocol based VLAN or a subnet based VLAN in these screens.

Static MAC

Forwarding This link takes you to screens where you can configure static MAC addresses for a port.

These static MAC addresses do not age out.

Static Multicast

Forwarding This link takes you to a screen where you can configure static multicast MAC addresses

for port(s). These static multicast MAC addresses do not age out.

Filtering This link takes you to a screen to set up filtering rules.

Spanning Tree

Protocol This link t akes yo u to screens w here you ca n configure the RSTP/MRSTP/MSTP to prevent

network loops.

Bandwidth Control This link takes you to screens where you can cap the maximum ba ndwidth allowed on a

port.

Broadcast Storm

Control This link takes you to a screen to set up broadcast filters.

Mirroring This link takes you to screens where you can copy traffic from one port or ports to

another port in order that you can examine the traffic from the first port without

interference.

Link Aggregation This link takes you to screen where you can logically aggregate physical links to form one

logical, higher-bandwidth link.

Port

Authentication This link takes you to a screen where you can configure IEEE 802.1x port authentication

as well as MAC authentication for clients communicating via the Switch.

Port Security This link takes you to a screen where you can activate MAC address learning and set the

maximum number of MAC addresses to learn on a port.

Time Range This link takes you to a screen where you can configure time range for time-oriented

features like Classifier.

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

Classifier This link takes you to screens where you can configure the Switch to group packets based

on the specified criteria.

Policy Rule This link takes you to a screen where you can configure the Switch to perform special

treatment on the grouped packets.

Queuing Method This link takes you to a screen where you can configure queuing with associated queue

weights for each port.

VLAN Stacking This link ta kes you to screens where you c a n activate and configure VLAN stacking.

Multicast This link takes you to screen where you can configure various multicast features, IGM P

snooping, MLD snooping-proxy and create multicast VLANs.

AAA This link takes you to a screen where you can configure authentication, authorization and

accounting services via external servers. The external servers can be either RADIUS

(Remote Authentication Dial-In User Service) or TACACS+ (Terminal Access Controller

Access-Control System Plus).

IP Source Guard This link takes you to screens where you can configure filtering of unauthorized DHCP and

ARP packets in your network.

Loop Guard This link tak es yo u to a screen whe re you can confi gure prote ction aga inst ne twork loops

that occur on the edge of your network.

VLAN Mapping This link takes you to screens where you can configure VLAN mapping settings on the

Switch.

Layer 2 Protocol

Tunneling Th is link takes yo u to a screen where yo u can configure L2PT (Layer 2 Protocol Tunneling)

settings on the Switch.

sFlow This link takes you to screens where you can configure sFlow settings on the Switch.

PPPoE This link ta kes you to screens where you can configure how the Switch gives a PPPoE

termination server additional subscriber information that the server can use to identify

and authenticate a PPPoE client.

Errdisa ble This link takes you to a screens where you can view errdisable status and configure

errdisable settings in CPU protection, errdisable detect, and errdisable recovery.

MAC Pinning This link takes you to a screen where you can set specific ports to have priority over other

ports in MAC address learning.

Private VLAN This link takes you to a screen where you can block traffic between ports in a VLAN on the

Switch.

Green Ethern et This link takes you to a screen where you can configure the Switch to reduce port power

consumption.

LLDP This link takes you to a screen where you can configure LLDP settings.

Anti-Arpscan This link takes you to screens where you can enable anti-arpscan on the Switch and

ports, and view the port state. You can also create trusted hosts, view blocked hosts and

unblock them.

BPDU Guard This link takes you to screens where you can enable BPDU guard on the Switch and ports,

and view the port state.

OAM This link takes you to screens where you can enable Ethernet OAM on th e Swit ch, view

the configuration of ports on which Ethernet OAM is enabled and perform remote-

loopback tests.

ZULD This link takes you to screens where you can enable ZULD on a port and configure related

settigns.

IP Application

Static Routing This link takes you to a screen where you can configure static routes. A static route

defines how the Switch should forward traffic by configuring the TCP/IP parameters

manually.

Policy Routing This link takes you to screens where you can co nfigure policy routing rules.

Table 5 Navigation Panel Links (continued)

LINK DESCRIPTION

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

4.3.1 Change Your Password

After you log in for the first time, it is recommended you change the default administrator

password. Click Management > Access Control > Logins to display the next screen.

DiffServ This link takes you to screens where you can enable DiffServ , configure marking rules and

set DSCP-to-IEEE802.1p mappings.

DHCP This link takes you to screens where you can configure the D H CP settings.

VRRP This link takes you to screens where you can configure redundant virtual router for your

network.

Load Sharing This link takes you to a screen where you can enable Equal-Cost MultiPath (ECMP) routing

and set the cr iteria the Switch uses to determine the routing path for a packet.

ARP Setup This link takes you to a screen where you can configure ARP learning mode on a per-port

basis and create st atic ARP entries which do not age out.

Management

Maintenance This link takes you to screens where you can perform firmware and configuration file

maintenance as well as reboot the system.

Access Control This link takes you to scree ns where you can change the system login password and

configure SNMP and remote management.

Diagnostic This link takes you to screens where you can ping IP addresses, run traceroute, test

port(s).

System Log This link ta kes you to a screen where you can view system logs.

Syslog Setup This link takes you to a screen where you can setup system logs and a system log server.

Cluster

Management This link tak es y ou to a s creen where y ou can configur e cluste ring mana gement and view

its status.

MAC Table This link takes you to a screen where you can view the MAC address and VLAN ID of a

device attach to a port. You can also view what kind of MAC address it is.

IP Table This link takes you to a screen where you can view the IP addresses and VLAN ID of a

device attached to a port.You can also view what kind of device it is.

ARP Table This link takes you to a screen where you can view the MAC address – IP address

resolution table.

Routing Table This link takes you to a sc reen where you can view the routing table.

Path MTU Ta ble This link takes you to a screen where you can view the IPv6 path MTU table.

Configure Clone This link takes you to a screen where you can copy attributes of one port to (an)other

port(s).

IPv6 Neighbor

Table This link takes you to a screen where you can view the Switch’s IPv6 neighbor table.

Port Status This link takes you to a screen where you can view the port statistics.

Table 5 Navigation Panel Links (continued)

LINK DESCRIPTION

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

Figure 15 Change Administrator Login Password

4.4 Saving Your Configuration

When you are done modifying the settings in a screen, click Apply to save your changes back to

the run-time memory. Settings in the run-time memory are lost w hen th e S wi tch’s power is turned

off.

Click the Save link in the upper right hand corner of the web configurator to save your

configuration to nonvolatile memory. Nonvolatile memory refers to the Switch’s storage that

remains even if the Switch’s power is turned off .

Note: Use the Save link when you are done with a configuration session.

4.5 Switch Lockout

You could block yourself (and all others) from using in-band-management (managing through the

data ports) if you do one of the following:

1Delete the management VLAN (default is VLAN 1).

2Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the management

port of the Switch.

3Filter all traffic to the CPU port.

4Disable all ports.

5Misconfigure the text configuration file.

6F orge t the passw ord and/or IP address.

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

7Prevent all services from accessing the Switch.

8Change a service port number but forget it.

Note: Be careful not to lock yourself and others out of the Switch. If you do lock y o urself

out, try using out-of-band management (via the management port) to configure

the Switch.

4.6 Resetting the Switch

If you lock yourself (and others) from the Switch or forget the administrator password, you will

need to reload the factory -def ault configur ation file or reset the S w itch back to the factory defaults.

4.6.1 Reload the Configuration File

Uploading the factory-default configuration file replaces the current configuration file with the

factory-default configuration file. This means that you will lose all previous configurations and the

speed of the console port will be reset to the default of 9600bps with 8 data bit, no parity, one stop

bit and flow control set to none. The password will also be reset to “1234” and the IP address to

192.168.1.1.

To upload the configuration file, do the following:

1Connect to the console port using a computer with terminal emu lation software. See Section 3.2 on

page 34 for details.

2Disconnect and reconnect the Switch’s power to begin a session. When you reconnect the Switch’s

power, you will see the initial screen.

3When you see the message “Press any key to enter Debug Mode within 3 seconds ...” press

any key to enter debug mode.

4Type atlc after the “Enter Debug Mode” message.

5Wait for the “Starting XMODEM upload” message before activating XMODEM upload on your

terminal.

6After a configuration file upload, type atgo to restart the Switch.

Chapter 4 The Web Configurator

GS3700/XGS3700 Series User’s Guide

Figure 16 Resetting the Switch: Via the Console Port

The Switch is now reinitialized with a default configuration file including the default password of

“1234”.

4.7 Logging Out of the Web Configurator

Click Logout in a screen to exit the web configurator. You have to log in with your password again

after you log out. This is recommended after you finish a management session for security reasons.

Figure 17 Web Configurator: Logout Screen

4.8 Help

The web configurator’s online help has descriptions of individual screens and some supplementary

information.

Click the Help link from a web configurator screen to view an online help description of that screen.

Bootbase Version: V1.00 | 12/11/2012 13:49:40

RAM: Size = 524288 Kbytes

DRAM POST: Testing: 524288K

DRAM Test SUCCESS !

ZyNOS Version: V4.10(AAGF.5)b1 | 6/5/2014 20:10:8

Press any key to enter debug mode within 3 seconds.

.....................................

Enter Debug Mode

ras> atlc

Starting XMODEM upload (CRC mode)....

CCCCCCCCCCCCCCCC

Total 393216 bytes received.

Erasing..

................................................................

ras> atgo

PART II

Technical Reference

GS3700/XGS3700 Series User’s Guide

CHAPTER 5

ZON Utility, ZON Neighbor Management and

Port Status

5.1 Overview

This chapter describes the screens for System St atus, ZON Utility, ZON Neighbor Management, Port

Status and Port Details.

5.2 Status

The Status screen displays when you log into the Switch or click Status at the top right corner of

the web configurator. The Status screen displays general device information, system status, and its

IP addresses.

Figure 18 Status

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

The following table describes the fields in the above screen.

Table 6 Status

LABEL DESCRIPTION

Device Information

Device Type This field displays the model name of t his Switch.

System Name This field displays the name used to identify the Switch on any network.

Boot Version This field displays the ve rsion number and date of the boot module that is currently on

the Switch .

System Location This field dis p lays the geographic location of your Switch. You can change the setting

in the Basic Setting > General Setup screen.

Firmware V ersion This field displa ys the version number and date of the firmw are th e Sw itch i s curren tly

running.

System Time This field displays the current date and time in the UAG. The format is mm-dd-yyyy

hh:mm:ss.

Serial Number This field displays the serial number of this Switch. The serial number is used for

device tracking and control.

System Up Time This field displays how long the Switch has been running since it la st restarted or was

turned on.

MAC Address Th is field displays the MAC addresses of the Switch.

session times out. After it times out you have to log in with your password again.

Stacking topology

(Stacking mode) Th is field displays whether the current topology is Chain or Ring.

Detail Click this link to go to the Basic Setting > System Info screen to check other

detailed information, such as sys tem res o ur ce us age an d the Switch temperature, fan

speeds or voltage.

IP Address Information

IPv4 Address This field displays the Switch’s current IPv4 address.

Subnet Mask This field displays the Switch’s subnet mask.

Default Gateway This field displays the IP address of the Switch’s default gateway.

IP Setup Click the link to go to the Basic Settin g > IP Setup screen.

IPV6 Global Unicast

Address This field displays the Switch’s IPv6 global unicast address.

IPV6 Link-Local

Address This field displays the Switch’s IPv6 link-local address.

IPv6 configuration Click the link to go to the Basic Setting > IPv6 screen.

Device Status and

Quick Configuration This section shows whether a feature is enabled or not on the Swit ch. You can click a

feature’s Setting link to go to the configuration screen for the feature.

Hover your cursor over a red exclamation mark to display information about the

feature.

Note: The Stacking Status field is displayed only on the Switch with stacking support.

Quick Links This section provides the shortcut link to a specific cofiguration screen.

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

5.3 ZyXEL One Network (ZON) Utility Screen

ZON Utility is a program designed to help you deploy and manage a network more efficiently. It

detects devices automatically and allows you to do basic settings on devices in the network without

having to be near it.

The ZON Utility issues requests via ZyXEL Discovery Protocol (ZDP) and in response to the query,

the device responds back with basic information including IP address, firmware version, location,

system and model name in the same broadcast domain. The information is then displayed in the

ZON Utility screen and you can perform tasks like basic configuration of the devices and batch

firmware upgrade in it. You can download the ZON Utility at www.zyxel.com and install it on a PC.

The following figure shows the ZON Utility screen.

Figure 19 ZON Utility Screen

5.4 ZON Neighbor Management Screen

The ZON Neighbor Management screen allows you to view and manage the Switch’s neighboring

devices more conveniently. It uses Layer Link Discovery Protocol (LLDP) to discover all neighbor

devices connected to the Switch including non-Zy XEL devices. You can perform tasks on the

neighboring devices like login, reboot (turn the power off and then back on again), and reset to

factory default settings in the Neighbor Management screen. For more information on LLDP, see

Section 35.2 on page 344.

Click Status > Neighbor to see the following screen.

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

Figure 20 Status > Neighbor

The following table describes the fields in the above screen.

Table 7 Status > Neighbor

LABEL DESCRIPTION

Local

Port This shows the port of the Switch, on which the neighboring device is discovered.

Desc. This shows the port description of the Switch.

PoE Draw This shows the consumption that the neighboring device connected to this port draws

from the Switch. This allows you to plan and use within the power budget of the

Switch.

Remote

Port This show the number of the neighbor device’s port which is connected to the Switch.

Desc. This shows the description of the neighbor device’s port which is conne cted to the

Switch.

Model This shows the model name of the neighbor device. This field will show “-” for non-

ZyXEL devices.

System Name This shows the system name of the neighbor device.

Location This shows the geographic location of the neighbor device.

Firmware This shows the firmware version of the neighbor device. This field will show “-” for

non-ZyXEL devices.

IP This shows the IP address of the n eighbor device. The IP address is a hyper link that

you can click to log into and manage the neighbor devi ce through it s web confi gur ator.

This field will show “-” for non-ZyXEL devices.

MAC This shows the MAC address of the neighbor device. This field will show “-” for non-

ZyXEL devices.

PWR Cycle Click the Cycle button to turn OFF the power of the neighbor device and turn it back

ON again. A count down button (from 5 to 0) starts.

Note: The Switch must support power sourcing (PSE) or the network device is a

powered device (PD).

Note: If multiple neighbor devices use the same port, the Cycle button is displayed only

on the first device, others will show “-” instead.

Reset to Default Click the Reset button to reset the neighbor device to its factory default settings. A

warning message “Are you sure you want to load factory default?” appears

prompting you to confirm the action. After confirming the action a count down button

(from 5 to 0) starts.

Note: The Switch must support power sourcing (PSE) or the network device is a

powered device (PD).

Note: If multiple neighbor devices use the same port, the Reset button is not available

and will show “-” instead.

Note: You can only reset ZyXEL products.

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

5.5 Port Status

This screen displays a port statistical summary with links to each port showing statistical details. To

view the port statistics, click Status in all web configurator screens and then the Port Status link

in the Quick Links section of the Status screen to display the Port Status screen as sho wn next.

You can also click Management > Port Status to see the following screen.

Figure 21 Port Status (Standalone mode)

Figure 22 Port Status (Stacking mode)

The following table describes the labels in this screen.

Table 8 Port Status

LABEL DESCRIPTION

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to c hoose t he slot nu mber

of the Switch in a stack.

Port This identifies the Ethernet port. In stacking mode, the first number represents the slot and

the second the port number. Click a port number to display the Port Details s cre en (refer

to Figure 23 on page 53).

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

5.5.1 Port Details

Click a number in the Port column in the Port Status screen to display individual port statistics.

Use this screen to check status and detailed performance data about an individual port on the

Switch.

Name This is the name you assigned to this port in the Basic Setting > Port Setup screen.

Link This field displays the speed (such as 100M for 100 Mbps, 1000M for 1000 Mbps, or 10G

for 10 Gbps) and the duplex (F for full duplex). This field displays Down if the port is not

connected to any device.

State If STP (Spanning Tree Protocol) is enabled, this field displa ys the STP s tate of the port. (See

Section 11.1.3 on page 133 for more information).

If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays

STOP.

PD (F or P oE mode ls only) This fiel d displays whether or not a powered device (PD) is allowed to

receive power from the Switch on this port.

LACP This fields displays whether LACP (Link Aggregation Control Protocol) has been enabled on

the port.

TxPkts This field shows the number of transmitted frames on this po rt.

RxPkts This field sh ows the number of received frames on this port.

Errors This field shows the number of received errors on this port.

Tx KB/s This field shows th e transmission speed of data sent on this port in kilobytes per second.

Rx KB/s This field shows the transmission speed of data received on this port in kilobytes per second.

Up Time This field shows the total amount of time in hours, minutes and seconds the port has been

up.

Clear Counter Select Port, type a port number and then click Clear Counter to erase the recorded

statistical information for that port, or select Any to clear statistics for all ports.

Table 8 Port Status

LABEL DESCRIPTION

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

Figure 23 Port Status: Port Details

The following table describes the labels in this screen.

Table 9 Port Status: Port Details

LABEL DESCRIPTION

Port Info

Port NO. This field displays the port number you are viewing. In stacking mode, the first number

represents the slot and the second the port number.

Name This field displays the name of the port.

Link This field displays the speed (such as 100M for 100Mbps, 1000M for 1000 Mbps, or 10G

for 10 Gbps) and the duplex (F for full duplex).

State If STP (Spanning Tree Protocol) is enabled, this field displays the STP state of the port (see

Section 11.1.3 on page 133 for more information).

If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays

STOP.

LACP This field shows if LACP is enabled on this port or not.

TxPkts This field shows the number of transmitted frames on this port

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

RxPkts This field shows the number of received frames on this port

Errors This field shows the number of received errors on this port.

Tx KBs/s This field shows the transmission s p eed of data sent on this port in kilobytes per second.

Rx KBs/s This field shows the transmission speed of data received on this port in kilobytes per

second.

Up Time This field shows the total amount of time the connection has been up.

Tx Packet

The following fields display detailed information about packets transmitted.

Unicast This field shows the number of good unicast packets transmitted.

Multicast This field shows the number of good multicast packets transmitted.

Broadcast This field shows the number of good broadcast packets transmitted.

Pause This field shows the number of 802.3x Pause packets transmitted.

Tagged This field shows the number of packets with VLAN tags transmitted.

Rx Packet

The following fields display detailed information about packets received.

Unicast This fie ld s hows t he number of good unicast packets received.

Multicast This field shows the number of good multicast packets received.

Broadcast This field shows the number of good broadcast packets received.

Pause This field shows the number of 802.3x Pause packets received.

Control This field shows t he number of control pack ets received (including those with CRC error) but

it does not include the 802.3x Pause packets.

TX Collision

The following fields display information on collisions while transmitting.

Single This is a count of succes sfully transmitted packets for which transmission is inhibited by

exactly one collision.

Multiple This is a count of successfully transmitted packets for which transmission was inhibited by

more than one collision.

Excessive This is a count of packets for which transmission failed due to excessive collisions. Excessive

collision is defined as the number of maximum collisions before the retransmission count is

reset.

Late This is the number of times a late collision is detected, that is, after 512 bits of the packets

have already been transmitted.

Error Packet The following fields display detailed information about packets received that were in error.

RX CRC This field shows the number of packets received with CRC (Cyclic Redundant Check)

error(s).

Length This field shows the number of packets received with a length that was out of range.

Runt This field shows the number of packets received that were too short (shorter than 64

octets), in cluding the ones with CRC errors.

Distribution

64 This field shows t he number of pack ets (including bad packets) received that were 64 octets

in length.

65 to 127 This field shows the number of packets (including bad packets) received that wer e between

65 and 127 octets in length.

128 to 255 This field shows the numbe r of packets (inc luding bad packets) received that wer e between

128 and 255 octets in length.

Table 9 Port Status: Port Details (continued)

LABEL DESCRIPTION

Chapter 5 ZON Utility, ZON Neighbor Management and Port Status

GS3700/XGS3700 Series User’s Guide

256 to 511 This field shows the numbe r of packets (inc luding bad packets) received that wer e between

256 and 511 octets in length.

512 to 1023 This field shows the number of packets (including bad packets) received that were between

512 and 1023 octets in length.

1024 to

1518 This field shows the number of pack ets (includi ng bad packets) receiv ed that were between

1024 and 1518 octets in length.

Giant This field shows the number of packets (including bad packets) received that were between

1519 octets and the maximum frame size.

The maximum frame size varies depending on your Switch model.

Table 9 Port Status: Port Details (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

CHAPTER 6

Basic Setting

This chapter describes how to configure the Basic Setting screens.

6.1 System Information

In the navigation panel, click Basic Setting > System Info to display the screen as shown.

You can check the firmware version number and monitor the Switch temperature, fan speeds and

voltage in this screen.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 24 Basic Setting > System Info (Standalone Mode)

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 25 Basic Setting > System Info (Stacking Mode)

The following table describes the labels in these screens.

Ta ble 10 Basic Setting > System Info (Standalone and Stacking Modes)

LABEL DESCRIPTION

System Name This field displays the descriptive name of the Switch for identification purposes.

Product Model This field displays the product model of the Switch. Use this information when searching for

firmware upgrade or looking for other support information in the website.

ZyNOS F/W

Version This field displays the version number of the Swi tch 's current firmw are including the date

created.

Ethernet

Address This field refers to the Ethernet MAC (Media Access Control) address of the Switch.

CPU Utilization CPU utilization quantifies how busy the system is. Current (%) displays the current

percentage of CPU utilization.

Memory

Utilization Memory Utilization shows how much DRAM memory is available and in use. It also displays

the current percentage of memory utilization.

Name This field displays the name of memory pool.

Total This field displays the total number of bytes in this memory pool.

Used This field displays the number of bytes being used in this memory pool.

Utilization This field displays the pe rcentage (%) of memory being used in this memory pool.

Hardware Monitor (Standalone Mode)

Temperature

Unit The Switch has temperature sensors that are capable of detecting and reporting if the

temperature rises above the threshold. Y ou may choose the temperature unit (Centigrade or

Fahrenheit) in this field.

Temperature BOARD, MAC and PHY refer to the location of the temperature sensors on the Switch

printed circuit board.

Current This shows the current temperature at this sensor.

MAX This field displays the maximum temperature measured at this sensor.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.1.1 System Information Stacking Hardware Monitor

Click a slot number in the System Information screen to display more detailed hardware

information on a Switch.

MIN This field displays the minimum temperature measured at this sensor.

Threshold This field displays the upper temperature limit at this senso r.

Status This field displays Normal for temperatures below the threshold and Error for those above.

Fan Speed

(RPM) A properly functioning fan is an essential component (along with a sufficiently ventilated,

cool oper ating environmen t) in order for the device to stay within the te mperature thre shold.

Each fan has a sensor that is capable of detecting and reporting if the fan speed falls below

the threshold shown.

Current This field displays this fan's current speed in Revolutions Per Minute (RPM).

MAX This field displays this fan's maximum speed measured in Revolutions Per Minute (RPM).

MIN This field displays this fan's minimum speed measured in Revolutions Per Minute (RPM).

"<41" is displayed for speeds too small to measure (under 2000 RPM).

Threshold This field displays the minimum speed at which a normal fan should work.

Status Normal indicates that this fan is functioning abo ve th e minimum speed. Error indicates that

this fan is functi oning below the mi nimum speed.

Voltage(V) The power supply for each voltage has a sensor that is capable of detecting and reporting if

the voltage fall s out of the tolerance range.

Current This is the current voltage reading.

MAX This field displays the maximum voltage measured at this point.

MIN This field displays the minimum voltage measured at this point.

Threshold This field displays the percentage tolerance of the voltage with which the Switch still works.

Status Normal indicates that the voltage is within an acceptable operating range at this point;

otherwise Error is displayed.

Power Source The power source of the Switch has a sensor that is capable of detecting and reporting if the

power source falls out of the normal status.

Status Normal indicates that the power source is within normal status. Error indicates that the

power source is not within normal status. Absent indicates that y ou do not i nser t the powe r

module. Present indicates that you insert the power module, but there is no available

power.

Hardware Status (Stacking Mode)

Slot This number identifies the Switch in the st ack. Click the number to see more detailed

information on the Switch.

Name This is the system name of the Switch in the stack.

Voltage This shows if the power suppl y voltage sensor is withi n normal tolerance range.

Temperature This shows if the temperature sensors on the Switch printed circuit board are within normal

tolerance range.

Fan This shows if the fan sensors are within normal tolerance range.

Power Source This shows whether the power sources are within normal status or not. Error indicates that

the power source is not within normal status. Otherwise, Normal is displayed. You can click

the index number in the Slot field to view the details.

Ta ble 10 Basic Setting > System Info (Standalone and Stacking Modes) (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 26 Basic Setting > System Info > Hardware Monitor (Stacking Mode)

The following table describes the labels in this screen.

Table 11 Basic Setting > System Info > Hardware Monitor (Stacking Mode)

LABEL DESCRIPTION

SLOT This number identifies the Switch in the stack.

Temperature

Unit The Switch has temperature sensors that are capable of detecting and reporting if the

temperature rises above the threshold. You may choose the temperature unit (Centigrade

or Fahrenheit) in this field.

Temperature BOARD, PHY, CPU and MAC refer to the location of the temperature sensors on the Switch

printed circuit board.

Current This shows the current temperature at this sensor.

MAX This field displays the maximum temperature measured at this sensor.

MIN This field displays the minimum temperature measured at this sensor.

Threshold This field displays the upper temperature limit at this sensor.

Status This field displays Normal for temperatures below the threshold and Error for those above.

Fan Speed

(RPM) A properly functioning fan is an essential compon ent (along with a sufficiently ventilated,

cool operating environment) in order for the device to stay within the temperature

threshold. Each fan has a sensor that is capable of detecting and reporting if the fan speed

falls below th e threshold shown.

Current This field displays this fan's current speed in Revolutions Per Minute (RPM).

MAX This field displays this fan's maximum speed meas ured in RPM.

MIN This field displays this fan's minimum speed measured in RPM. “<41" is displayed for

speeds too small to measure (under 2000 RPM).

Threshold This field displays the minimum speed at which a normal fan should work.

Status Normal indicates that this fan is functioning above the minimum speed. Error indicates

that this fan is functioning below the minimum speed.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.2 General Setup

Use this screen to configure general settings such as the system name and time. Click Basic

Setting > General Setup in the navigation panel to display the screen as shown.

Figure 27 Basic Setting > General Setup

The following table describes the labels in this screen.

V oltage (V) The power supply for each voltage has a sensor that is capable of detecting and reporting if

the voltage falls out of the tolerance range.

Current This is the current voltage reading.

MAX This field displays the maximum voltage measured at this point.

MIN This field displays the minimum voltage measured at this point.

Threshold This field dis pla ys th e percen tage tol er a nce o f the voltage with which the S wit ch st ill work s.

Status Normal indicates that the voltage is within an acceptable operating range at this point;

otherwise Error is displayed.

Power Source The power source of the Switch has a sensor that is capable of detecting and reporting if

the power source falls out of the normal status.

Status Normal indicates that the power source is within normal status. Error indicates that the

power source is not within normal status. Absent indicates that you do not insert the

power module. Present indicates that you insert the power module, but there is no

available power.

Table 11 Basic Setting > System Info > Hardware Monitor (Stacking Mode) (continued)

LABEL DESCRIPTION

Ta ble 12 Basic Setting > General Setup

LABEL DESCRIPTION

System Name Type a descriptive name for identification purposes. This name consists of up to 64

printable ASCII characters; spaces are allowed.

Location Ty pe the geographic location of your Switch. You can use up to 32 printable ASCII

characters; spaces are allowed.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Contact Person's

Name Type the name of the person in charge of this Switch. You can use up to 32 printable

ASCII characters; spaces are allowed.

Use Time Server

when Bootup Type the time service protocol that your timeserver uses. Not all time servers support all

protocols, so you may have to use trial and error to find a protocol that works. The main

differences between them are the time format.

When you select the Daytime (RFC 867) format, the Switch displays the day, month,

year and time with no time zone adjustme nt. When you use this format, it is

recommended that you use a Daytime timeserver within your geographical time zone.

Time (RFC-868) format displays a 4-byte integer giving the total number of seconds

since 1970/1/1 at 0:0:0.

NTP (RFC-1305) is similar to Time (RFC-868).

None is the default value. Enter th e time manually. Each time you turn on the Switch,

the time and date will be reset to 1970-1-1 0:0.

Time Server IP

Address Type the IP address of your timeserver. The Switch searches for the timeserver for up to

60 seconds. If you select a timeserver that is unreachable, then t his screen will appear

locked for 60 seconds. Please wait.

Current Time This field displays the time you open this menu (or refresh the menu).

New Time

(hh:min:ss) Enter the new tim e in hour, minute and sec ond format. The new time th en appears in the

Current Time field after you click Apply.

Current Date This field displays the date you open this menu.

New Date (yyyy-

mm-dd) Enter the new date in year, month and day format. The new date then appears in the

Current Date field after you click Apply.

Time Zone Select the time difference between UTC (Universal Time Coordinated, formerly known as

GMT, Greenwich Mean Time ) and your time zone from the drop-down list box.

Daylight Saving

Time Daylight saving is a period from late spring to early fall when many countries set their

clocks ahead of normal local time by one hour to give more daytime light in the evening.

Select this option if you use Daylight Saving Time.

Start Date Configure the day and time when Daylight Saving Time starts if you selected Daylight

Saving Time. The time is displayed in the 24 hour format. Here are a couple of

examples:

Daylight Saving Time starts in most parts of the United States on the second Sunday of

March. Each time zone in the United States starts using Daylight Saving Time at 2 A.M.

local time. S o i n the United States yo u would select Second, Sunday, March and 2:00.

Daylig ht Saving Time starts in the European Union on the last Sunday of March. All of the

time zones in the Europe an Unio n start usin g Dayligh t Saving Ti me at the s ame moment

(1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, March

and the last field depends on your time zone. In Germany for instance, you would select

2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1).

End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight

Saving Time. The time field uses the 24 hour format. Here are a couple of examples:

Daylight Saving Time ends in the United States on the last Sunday of October. Each time

zone in the United States st ops using Daylight Saving Time at 2 A.M. local time. So in the

United States you would select First, Sunday, November and 2:00.

Daylight Saving Time ends in the European Union on the last Sunday of October. All of

the time zones in the European Union stop using Daylight Saving Time at the same

moment (1 A.M . GMT or UTC). So in the European Union y ou would select Last, Sunday,

October and the last field depends on your time zone. In Germany for instance, you

would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC

(GMT+1).

Ta ble 12 Basic Setting > General Setup (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.3 Introduction to VLANs

A VLAN (Virtual Local Area Network) allows a ph ysical network to be partitioned into multiple logical

networks. Devices on a logical network belong to one group. A device can belong to more than one

group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same

group(s); the traffic must first go through a router.

In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and security among the

subscribers. When properly configured, VLAN prevents one subscriber from accessing the network

resources of another on the same LAN, thus a user will not see the printers and hard disks of

another user on the same network.

VLAN also increases network performance by limiting broadcasts to a smaller and more

manageable logical broadcast domain. In traditional switched environments, all broadcast packets

go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast

domain.

Note: VLAN is unidirecti onal; it only governs outgoing traffic.

See Chapter 7 on page 101 for information on port-based and 802.1Q tagged VLANs.

6.4 Switch Setup

Click Basic Setting > Switch Setup in the navigation panel to display the screen as shown. The

VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN

Type field in this screen (in Standalone mode). Refer to the chapter on VLAN.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the non-volatile memory when you are don e

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 12 Basic Setting > General Setup (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 28 Basic Setting > Switch Setup

The following table describes the labels in this screen.

Ta ble 13 Basic Setting > Switch Setup

LABEL DESCRIPTION

VLAN Type

(Standalone

mode only)

Choose 802.1Q or Port Based. The VLAN Se tup screen changes depending on whether

you choose 802.1Q VLAN type or Port Ba sed VLAN type in this screen. See Chapter 7 on

page 101 for more information. The Switch does not have port-based VLAN available in

stacking mode (Active is enabled in Basic Setting > Stacking > Configuration), so

this field does not display in stacking mode.

Bridge Control

Protocol

Transparency

Select Active to allow the Switch to handle bridging control protocols (STP, for example).

You also need to define how to treat a BPDU in the Port Setup screen.

MAC Address

Learning MAC address learning reduces outgoing traffic broadcasts. For MAC address learning to

occur on a port, the port must be active.

Aging Time Enter a time from 10 to 1000000 seconds. This is how long all dynamically learned MAC

addresses remain in the MAC address table before they age out (and must be relearned).

ARP Aging Time

Aging Time Enter a time from 60 to 1000000 seconds. This is how long dynamically learned ARP

entries remain in the ARP table before they age out (and must be relearned). The setting

here applies to ARP entries which are newly added in the ARP table after you click Apply.

GARP Timer : Switches join VLANs by making a declaration. A declaration is made by issuing a Join me ssage

using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all

registrations. GARP timers set declaration timeout values. See Chapter 7 on page 101 for more background

information.

Join Timer Join Timer sets the duration of the Join Period timer for GVRP in milliseconds. Each port

has a Join Period timer. The allowed Join Time range is between 100 and 65535

milliseconds; the default is 200 milliseconds. See Chapter 7 on page 101 for more

background information.

Leave Timer Leave Time sets the duration of the Leave Period timer for GVRP in milliseconds. Each

port has a single Leave Period timer. Leave Time must be two times larger than Join

Timer; the default is 600 milliseconds.

Leave All Timer Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds.

Each port has a single Leave All Period timer. Leave All Timer must be larger than Leave

Timer.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.5 IP Setup

Use the IP Setup screen to configure the default gateway device, the default domain name server

and add IP domains.

6.5.1 IP Interfaces

The Switch needs an IP address for it to be managed over the network. The factory default IP

address is 192.168.1.1. The subnet mask specifies the network number portion of an IP address.

The factory default subnet mask is 255.255.255.0.

On the Switch, an IP address is not bound to any physical ports. Since each IP address on the

Switch must be in a separate subnet, the configured IP address is also known as IP interface (or

routing domain). In addition, this allows routing between subnets based on the IP address without

additional routers.

You can configure multiple routing domains on the same VLAN as long as the IP address ranges for

the domains do not overlap. To change the IP address of the Switch in a routing domain, simply add

a new routing domain entry with a different IP address in the same subnet.

Priority Queue Assignment

IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-la yer frame that contains

bits to define class of service. Frames without an explicit priority tag are given the default priority of the

ingress port. Use the following fields to configure the pri ority level-to-physical queue mapping.

The Switch has eight physical queues that you can map to the 8 priority levels . On the Switch, tr affic assigned

to higher index queues gets through faster while traffic in lower index queues is dropped if the network is

congested.

Priority Level (The following descriptions are based on the traffic types defined in the IEEE 802.1d standard

(which incorporates the 802.1p).

Level 7 Typically used for network control traffic such as router configuration messages.

Level 6 Typically used for voice traffic that is especially sensitive to jitter (jitter is the variations in

delay).

Level 5 Typically used for video that consumes high bandwidth and is sensitive to jitter.

Level 4 Typically used for controlled load, latency-sensitiv e traffic such as SNA (S ys tems Network

Architecture) transactions.

Level 3 Typically used for “excellent effort” or better than best effort and would include important

business traffic that can tolerate some delay.

Level 2 This is for “spare bandwidth”.

Level 1 This is typically used for non-critical “background” traffic such as bulk transfers that are

allowed but that should not affect other applications and users.

Level 0 Typically used for best-effort traffic.

Apply Click Apply to save your change s to the Switch’s run-time memory. The Switch loses

these changes if it is turne d off or loses po wer, so use the Save link on the top n avigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 13 Basic Setting > Switch Setup (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

You can configure up to 128 IP domains which are used to access and manage the Switch from the

ports belonging to the pre-defined VLAN(s).

Note: You must configure a VLAN first. Each VLAN can only have one management IP

address.

Figure 29 Basic Setting > IP Setup

The following table describes the labels in this screen.

6.5.2 IP Status Details

Use this screen to view IP status details. Click a number in the Index column in the IP Status

screen to display the screen as shown next.

Figure 30 Basic Setting > IP Setup > IP Status Details: Static

The following table describes the labels in this screen.

Ta ble 14 Basic Setting > IP Setup

LABEL DESCRIPTION

Index This field displays the index number of an entry.

IP Address This field displays IP address of the Switch in the IP domai n.

IP Subnet Mask This field displays the subnet mask of the Switch in the IP domain.

VID This field displays the VLAN identification number of the IP domain on the Switch.

Type This shows whether this IP address is dynamically assigned from a DHCP server or

manually assigned (Static).

Renew Click this to renew the dynamic IP address.

Release Click this to release the dynamic IP address.

Ta ble 15 Basic Setting > IP Setup > IP Status Details: Static

LABEL DESCRIPTION

Type This shows whether ths IP address is dynamically assigned from a DHCP server or manually

assigned (Static or DHCP).

VID This is the VLAN identification number to which an IP routing domain belongs.

IP Address This is the IP address of your Switch in dotted decimal notation for example 192.168.1.1.

IP Subnet Mask This is the IP subnet mask of your Switch in dotted decimal notation for example

255.255.255.0.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 31 Basic Setting > IP Setup > IP Status Details: DHCP

The following table describes the labels in this screen.

6.5.3 IP Configuration

Use this screen to configure the default gateway device, the default domain name server and add IP

domains.

Ta ble 16 Basic Setting > IP Setup > IP Status Details: DHCP

LABEL DESCRIPTION

Type This shows whether ths IP address is dynamically assigned from a DHCP server or manually

assigned (Static or DHCP).

VID This is the VLAN identification number to which an IP routing domain belongs.

IP Address This is the IP address of your Switch in dotted decimal notation for example 192.168.1.1.

IP Subnet Mask This is the IP subnet mask of your Switch in dotted decimal notation for example

255.255.255.0.

Lease Time This displays the length of time in seconds that this interfac e can use the current dynamic

IP address from the DHCP server.

Rene w Time This displays the length of time from the leas e start that the Switch will request to renew its

current dynamic IP address from the DHCP server.

Rebind Time This displays the length of time from the lease start that the Switch will request to get any

dynamic IP address from the DHCP server.

Lease Time

Start This displays the date and time that the current dynamic IP address assignment from the

DHCP server began. You should configure date and time in Basic Setting > General

Setup.

Lease Time End This displays the date and time that the current dynamic IP address assignmen t from the

DHCP server will end. You should configure date and time in Basic Setting > General

Setup.

Default Gateway This displays the IP address of the default gateway assigned by the DHCP server. 0.0.0.0

means no gateway is assigned.

DNS Server This displays the IP address of the primary and secondary DNS servers assign ed by the

DHCP server. 0.0.0.0 means no DNS server is assigned.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 32 Basic Setting > IP Setup > IP Configuration

The following table describes the labels in this screen.

Ta ble 17 Basic Setting > IP Setup > IP Configuration

LABEL DESCRIPTION

Default Gateway Type the IP address of the default outgoing gateway in dotted decimal notation, for

example 192.168.1.254.

Default

Management Specify which traffic flow (In-Band or Out-of-band) the Switch is to send packets

originating from itself (such as SNMP traps) or packets with unknown so urce.

Select Out-of-band to have the Switch send the packets to the management port labelled

MGMT. This means that device(s) connected to the other port(s) do not receive these

packets.

Select In-Band to have the Switch send the packets to all ports except the management

port (labelled MGMT) to which connected device(s) do not receive these packets.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation panel

to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to reset the fields to your previous configuration.

Out-of-band Management IP Address

Use these fields to set the settings for the out-of-band management port.

IP Address Enter the out-of-band management IP address of your Switch in dotted decimal notation.

For example, 192.168.0.1.

IP Subnet

Mask Enter the IP subnet mask of your Switch in dotted decimal notation, for example,

255.255.255.0.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.6 Port Setup

Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the

navigation panel to display the configuration screen.

Default

Gateway Enter the IP address of the default outgoing gateway in dotted decimal notation, for

example, 192.168.0.254

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation panel

to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to reset the fields to your previous configuration.

IP Interface

Use these fields to create or edit IP routing domains on the Switch.

DHCP Client Select this option if you have a DHCP server that can assign the Switch an IP address,

subnet mask, a default gateway IP address and a domain name server IP address

automatically.

Static IP

Address Select this option if you don’t have a DHCP server or if you wish to assign static IP address

information to the Switch. Y ou need to fill in the following fields when you select this option.

IP Address Enter the IP address of your Switch in dotted decimal notation, for example, 192.168.1.1.

This is the IP address of the Switch in an IP routing domain.

IP Subnet

Mask Enter the IP subnet mask of an IP routing domain in dotted decimal notation, for example,

255.255.255.0.

VID Enter the VLAN identification number to which an IP routing domain belongs.

Add Click this to create a new entry.

This saves your changes to the Switch’s run-time memory. The Switch loses these changes

if it is turned off or loses power, so use the Save link on the top navigation panel to save

your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to reset the fields to your previous configuration.

Index This field displays the index number of an entry.

IP Address This field displays IP address of the Switch in the IP domai n.

IP Subnet Mask This field displays the subnet mask of the Switch in the IP domain.

VID This field displays the VLAN identification number of the IP domain on the Switch.

Type This field displays the type of IP address status.

Select an entry’s check box t o select a specific en try. Otherwise, se lect the check bo x in the

table heading row to select all entries.

Delete Click Delete to remove the selected entry from the summary table.

Note: Deleting all IP subnets locks you out of the Switch.

Cancel Click Cancel to clear the check boxes.

Ta ble 17 Basic Setting > IP Setup > IP Configuration (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 33 Basic Setting > Port Setup (GS3700 Series)

Figure 34 Basic Setting > Port Setup (XGS3700 Series: Standalone mode)

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 35 Basic Setting > Port Setup (XGS3700 Series: Stacking mode)

The following table describes the labels in this screen.

Ta ble 18 Basic Setting > Port Setup

LABEL DESCRIPTION

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot number

of the Switch in a stack.

Port This is the port index number. In stacking mode, the first number is the slot ID and the

second is the port number. * means all ports.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the co mmon settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Active Select this check box to enable a port. The factory default for all ports is enabled. A port

must be enabled for data transmission to occur.

Name Type a descriptive name that identifies this port. You can enter up to 64 alpha-numerical

characters.

Note: Due to space limitations, the port name may be truncated in some web configurator

screens.

Type This field displays 10M /100M/1000M for a 1000Base-T connection, 1000M for a

1000Base-X connection, and 10G for a 10 Gigabit connection (available only on the Switch

that has a 10 Gigabit interface).

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.7 PoE

Note: The PoE function and the following screens are available for models ending in “HP”

only.

Speed/Duplex Select the speed and the duplex mode of the Ethernet connection on this port. The choices

are Auto, 10M/Half Duplex, 10M/Full Duplex, 100M/Half Duplex and 100M/Full

Duplex for a 100Base-T connection. 1000M/Full Duplex is supported by both 1000Base-

T and 1000Base-X connections. 10G/Full Duplex is supported by the 10 Gigabit Ethernet

connections on the Switch that has a 10 Gigabit interface.

Selecting Auto (auto-negotiation) allows one port to negotiate with a peer port

automatically to obtain the connection speed and duplex mode that both ends support.

When auto-negotiation is turned on, a port on the Switch negotiates with the peer

automatically to determine the connection speed and duplex mode. If the peer port does

not support auto-negotiation or turns off this feature, the Switch determines the connection

speed by detecting the signal on the cable and using half duplex mode. When the Switch’s

auto-negotiation is turned off, a port uses the pre-configured speed and duplex mode when

making a connection, thus requiring you to make sure that the settings of the peer port are

the same in order t o connect.

Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory

causing packet discards and frame losses. Fl ow Contro l is used to r egulate transmi ssion of

signals to match the bandwidth of the receiving port.

The Switch uses IEEE 802.3x flow control in full duplex mode and backpressure flow control

in half duplex mode.

IEEE 802.3x flow control is used in full duplex mode to send a pause signal to the sending

port, causing it to tempor arily stop sending signals when the receiving port memory buffers

fill.

Back Pressure flow control is typically used in half duplex mode to send a "collision" signal

to the sending port (mimicking a state of packet collision) causing the sending port to

temporarily stop sending signals and resend later. Select Flow Control to enable it.

802.1p Priority This priority value is added to incoming frames without a (802.1p) priority queue tag. See

Priority Queue Assignment in Table 13 on page 64 for more information.

BPDU Control Configure the way to treat BPDUs received on this port. You must activate bridging control

protocol transparency in the Switch Setup screen fi rst.

Select Peer to process any BPDU (Bridge Protocol Data Units) received on this port.

Select Tunnel to forward BPDUs received on this port.

Select Discard to drop any BPDU received on this port.

Select Network to process a BPDU with no VLAN tag and forward a tagged BPDU.

Media Type On the Switch that has a 10 Gigabit interface, such as t he SFP+ slot, you can insert either

an SFP+ transceiver or an SFP+ Direct Attach Copper (DAC). An SFP+ Direct Attach Copper

(DAC) is an SFP+ housing tha t has no optical module but uses a fixed-length passive copper

cable assembly, which reduces cost and power significantly.

Select the media type (sfp_plus or dac10g) of the SFP+ module th at is attached to the 10

Gigabit interface.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigati on panel to

save your changes to the non-volatile memory when you are done co nfiguring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 18 Basic Setting > Port Setup (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

The Switch supports both the IEEE 802.3af P ower over Ethernet (PoE) and IEEE 802.3at High Power

over Ethernet (PoE) standards. The Switch is Power Sourcing Equipment (PSE) because it provides

a source of power via its Ethernet ports, and each device that receives power through an Ethernet

port is a Powered Device (PD).

In the figure below, the IP camer a and IP phone get their power directly from the Switch. Aside

from minimizing the need for cables and wires, PoE removes the hassle of trying to find a nearby

electric outlet to power up devices.

Figure 36 Powered Device Examples

You can also set priorities so that the Switch is able to reserve and allocate power to certain PDs.

Note: The PoE devices t h at su pp l y or receive power and their connected Ethernet cables

must all be completely indoors.

To view the current amount of power that PDs are receiving from the Switch, click Basic Setting >

PoE Setup.

Figure 37 Basic Setting > PoE Setup (Standalone mode)

PSE

PD PD

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 38 Basic Setting > PoE Setup (Stacking mode)

The following table describes the labels in this screen.

Ta ble 19 Basic Setting > PoE Setup

LABEL DESCRIPTION

PoE Status

PoE Mode This field displays the power management mode used by the Switch, whether it is in

Classification or Consumption mode.

Total Power (W) This field di splays the total powe r the Switch can provide to the connected P oE-enabled

devices on the PoE ports.

Consuming Power

(W) This field disp lays the total amount of power the Switch is currently supplying to the

connected PoE-enabled devices.

Allocated Power (W) This field displays the total amount of power the Switch has reserved for PoE after

negotiating with the connected PoE device(s).

Consuming Power (W) can be less than or equal but not more than the Allocated

Power (W).

Remaining Power

(W) This field displays the amount of power the Switch can still provide for PoE.

Note: The Switch must have at least 16 W of remaining power in order to supply power

to a PoE device, even if the PoE device needs less than 16 W.

Port (Stan dalone

and stacking mode) This is the port index number.

State This field shows which ports can receive power from the Switch. Y ou can set this in the

Basic Setting > PoE Setup screen.

•Disable - The PD connected to this port cannot get power.

•Enable - The PD connected to this port can receive power.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.7.1 PoE Time Range Status

Use this screen to see whether PoE is scheduled to be enabled on a port. Click the PoE Time

Range Status link in the Basic Setting > PoE Status screen. The following screen opens.

Figure 39 Basic Setting > PoE Setup > PoE Time Range Status

Class This shows the power classification of the PD.

This is a number from 0 to 4, where each value represents a range of power (W) and

current (mA) that the PD requires to function. The ranges are as follows.

• Class 0 - Default, 0.44 to 12.94

• Class 1 - Optional, 0.44 to 3.84

• Class 2 - Optional, 3.84 to 6.49

• Class 3 - Optional, 6.49 to 12.95

• Class 4 - R eserved (PSEs classify as Class 0) in a switch that supports IEEE 802.3af

only. Optional, 12.95 to 25.50 in a switch that supports IEEE 802.3at.

PD Priority When the total power requested by the PDs exceeds the total P oE power budget on the

Switch, you can se t the PD priority to allow the Switch to provide power to ports with

higher priority first.

•Critical has the highest priority.

•High has the Switch assign power to the port after all critical priority ports are

served.

•Low has the Switch assign power to the port after all critical and high priority ports

are served.

Power-Up

(Standalone mode) This field displays the PoE standard the Switch uses to provide power on this port.

Consuming Power

(mW) This field displays the current amount of power consumed by the PD from the Switch

on this port.

Max Power (mW) This field displays the maximum amo unt of power the PD could use from the Switch on

this port.

Ta ble 19 Basic Setting > PoE Setup

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

The following table describes the labels in this screen.

6.7.2 PoE Setup

Use this screen to set the priority levels for the Switch in distributing power to PDs.

Click Basic Setting > PoE Setup in the navigation panel to display the screen as shown.

Figure 40 Basic Setting > PoE Setup > PoE Setup (Standalone mode)

Ta ble 20 Basic Setting > PoE Setup > PoE Time Range Status

LABEL DESCRIPTION

Port This is the number of the port on the Switch.

Time Range This field di splays the name of th e schedule which is applied to the port. PoE is en abled

at the specified time/date.

state This field displays whether the port can receive power from the Switch (In) or not

(Out) currently.

It shows - if there is no schedule applied to the port.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 41 Basic Setting > PoE Setup > PoE Setup (Stacking mode)

The following table describes the labels in this screen.

Ta ble 21 Basic Setting > PoE Setup > PoE Setup

LABEL DESCRIPTION

PoE Mode Select the power management mode you want the Switch to use.

•Classification - Select this if you wan t the Switch to reserve the Max P ower (mW)

to each PD according to the power classification of the PD. If the total power supply

available is not enough to supply all connected PDs, then PDs with lower priority do

not get power to function.

•Consumption - Select this if you want the Switch to manage the total power

supply so that each connected PD gets a resource. However, the power allocated by

the Switch may be less than the Max Power (mW) of the PD. PDs with higher

priority also get more power than those with lower priority levels.

Slot (Stacking mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Standalone or

Stacking mode) This is the port index number. In stacking mode, the first box field is the slot ID and

the second field is the port number. * means all ports (on the same Switch).

PD Select this to provide power to a PD connected to the port.

If left unchecked, the PD connected to the port cannot receive power from the Switch.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Note: If the priority settings for two or more PoE ports are the same and the power

budget is not enough, the ports will shut down randomly. We strongly recommend

you set the priority for each PoE port to make sure the high priority ports get

power.

PD Priority This field is not available for the SFP or SFP+ ports.

When the total power requested by the PDs exceeds the total P oE power budget on the

Switch, you can se t the PD priority to allow the Switch to provide power to ports with

higher priority.

Select Critical to give the PD connected to this port the highest priority.

Select High to set the Switch to assign the remaining power to the port after all critical

priority ports are served.

Select Low to set the S witch to assign the remain ing power to the port after all critical

and high priority ports are served.

Power-Up

(Standalone mode) Set how the Switch provides power to a connected PD at power-up.

802.3af - the Switch follows the IEEE 802.3af Power over Ethernet standard to supply

power to the connected PDs during power-up.

Legacy - the Switch can provide power to the connected PDs that require high inrush

currents at power-up. Inrush current is the maximum, instantan eous in put curre nt

drawn by the PD when first turned on.

Pre-802.3at - the Switch initially offers power on the port according to the IEEE

802.3af standard, and then switches to support the IEEE 802.3at standard within 75

milliseconds after a PD is connected to the port. Select this option if the Switch is

performing 2-event Layer-1 classifica tion (PoE+ hardware classification) or the

connected PD is NOT performing Layer 2 power classification using Link Layer

Discovery Protocol (LLDP).

802.3at - the Switch supports the IEEE 802.3at High Power over Ethernet standard

and can supply power of up to 30W per Ethernet port. IEEE 802.3at is also known as

PoE+ or PoE Plus. An IEEE 802.3at compatible device is referred to as Type 2. Power

Class 4 (High Power) can only be used by Type 2 devices. If the connected PD requires

a Class 4 current when it is turned on, it will be powered up in this mode.

Max Power (mW) Set the maximum amount of power (from 1000 to 33000) the PD could use from the

Switch on this port. Otherwise, leave the field blank to allow the connected PD to use

power up to 33W in Consumption mode and 30W in Classification mode.

Time Range

(Standalone mode) Select a pre-defined schedule (created using the Advanced Application > Time

Range screen) to control when the Switch enables PoE to provide power on the port.

If you leave this field blank, PoE is disabled on the port.

Apply Click Apply to save your changes to the Switch’s run-time memory. Th e Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 21 Basic Setting > PoE Setup > PoE Setup (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Note: The total power available varies by Switch. Use t he show pwr command to see the

total power av ailabl e for y our S witch. The number of ports that can be powered by

PoE is the (total power av ailable) / (maximum power av ailable per port).

In Consumption mode the power available per port is from 1 to 33 watts.

Configure the maximum power av ailable per port in the Max Power (mW) field in

Basic Setting > PoE Status > PoE Setup.

In Classification mode the power available per port is from 1 to 30 watts. The

maximum power available per port depends on the the power classification of the

connected PD - see the Class field in Basic Setting > PoE Status > PoE Setup.

6.8 Interface Setup

An IPv6 address is configured on a per-interface ba sis. The interface can be a physical interface (for

example, an Ethernet port) or a virtual interface (for example, a VLAN). The Switch supports the

VLAN interface type for IPv6 at the time of writing.

Use this screen to set IPv6 interfaces on which you can configure an IPv6 address to access and

manage the Switch. Click Basic Setting > Interface Setup in the navigation panel to displa y the

configuration screen.

Figure 42 Basic Setting > Interface Setup

The following table describes the labels in this screen.

Ta ble 22 Basic Setting > Interface Setup

LABEL DESCRIPTION

Interface Type Select the type of IPv6 interface for which you want to configure. The Switch supports the

VLAN interface type for IPv6 at the time of writing.

Interface ID Specify a unique identification num ber (from 1 to 4094) for the interface.

Note: To have IPv6 function properly, you should configure a static VLAN with the same ID

number in the Advanced Setup > VLAN screens.

Add Click this to create a new entry.

This save s your changes to the S w it ch ’s run-time memory. The Switch loses these ch ange s

if it is turned off or loses power, so use the Save link on the top navigation panel to save

your changes to th e non-volatile memory when you are done configuring.

Cancel Click Cancel to reset the fields to your previous configuration.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.9 IPv6

Use this screen to view the IPv6 interface status and configure Switch’s management IPv6

addresses. See Appendix B on page 517 for more information about IPv6.

Click Basic Setting > IPv6 in the navigation panel to display the IPv6 status screen as shown

next.

Figure 43 Basic Setting > IPv6 Status

The following table describes the labels in this screen.

6.9.1 IPv6 Interface Status

Use this screen to view a specific IPv6 interface status and detailed information. Click an interface

index number in the Basic Setting > IPv6 screen. The following screen opens.

Index This field displays the index number of an entry.

Interface Type This field displays the type of interface.

Interface ID This field displays the identification number of the interface.

Interface This field displays the interface’s descriptive name which is generated automatically by the

Switch. The name is from a combination of the interface type and ID number.

Select an entry’s check box to select a specific entry. Otherwise, select the check box in the

table heading row to select all entries.

Delete Click Delete to remove the selected entry from the summary table.

Cancel Click Cancel to clear the check boxes.

Ta ble 22 Basic Setting > Interface Setup (continued)

LABEL DESCRIPTION

Ta ble 23 Basic Setting > IPv6 Status

LABEL DESCRIPTION

Index This field displays the index number of an IPv6 interface. Click on an index number to view

more interface details.

Interface This is the name of the IPv6 interface you created.

Active This field displays whether the IPv6 interface is activated or not.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 44 Basic Setting > IPv6 Interface Status

The following table describes the labels in this screen.

Ta ble 24 Basic Setting > IPv6 Interface Status

LABEL DESCRIPTION

IPv6 Active This field displays whether the IPv6 interface is activated or not.

MTU Size This field di splays the Maximum Transmission Unit (MTU) size for IPv6 packets on this

interface.

ICMPv6 Rate

Limit Bucket

Size

This field displays the maximum number of ICMPv6 error messages which are allowed to

transmit in a given time interval. If the bucket is full, subsequent error messages are

suppressed.

ICMPv6 Rate

Limit Error

Interval

This field displays the time period (in mill iseconds) during which ICMPv6 error messages of

up to the bucket size can be transmitted. 0 means no limit.

Stateless

Address

Autoconfig

This field displays whether the Switch’s interface can automatically generate a link-local

address via stateless autoconfiguration.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Link Local

Address This field displays the Switch’ s link -l ocal IP address and prefix generate d by the interface . It

also shows whether the IP address is preferred, which means it is a valid address and can

be used as a sender or receiver address.

Global Unicast

Address(es) This field displays the Switch’s global unicast address to identify this interface.

Joined Group

Address(es) This field displays the IPv6 multicast addresses of groups the Switch’s interface joins.

ND DAD Active This field displays whether Neighbor Discovery (ND) Duplicate Address Detection (DAD) is

enabled on the interface.

Number of DAD

Attempts This field displays the number of consecutive neighbor solicitations the Switch sends for this

interface.

NS-Interval

(millisecond) This field displays the time interval (in milliseconds) at which neighbor solicitations are re-

sent for this interface.

ND Reachable

Time

(millisecond)

This field displays how long (in milliseconds) a neighbor is considered reachable for this

interface.

DHCPv6 Client

Active This field displays whether the Switch acts as a DHCPv6 client to get an IPv6 address from

a DHCPv6 server.

Identity

Association An Identity Association (IA) is a collection of addresses assigned to a DHCP client, through

which the server and clien t can manage a set of related IP addresses. Each IA must be

associated with exactly one interface.

IA Type The IA type is the type of address in the IA. Each IA holds one type of address. IA_NA

means an identity association for non-temporary addresses and IA_TA is an identity

association for temporary addresses.

IAID Each IA consists of a unique IAID and associated IP information.

T1 This field displays the DHCPv6 T1 timer. After T1, the Switch sends the DHCPv6 server a

Re new messag e.

An IA_NA option contains the T1 and T2 fields, but an IA_TA option does not. The DHCPv6

server uses T1 and T2 to control the time at which the client co ntacts with the server to

extend the lifetimes on any addresses in the IA_NA before the lifetimes expire.

T2 This field displays the DHCPv6 T2 timer. If the time T2 is reached and the server does not

respond, the Switch sends a Rebind message to any available server.

State This field displays the state of the TA. It shows

•Active when the Switch obtains addresses from a DHCpv6 server and the TA is created.

•Renew when the TA’s address lifetime expires and the Switch sends out a Renew

message.

•Rebind when the Switch doesn’t receive a response from the original DHCPv6 server

and sends out a Rebind message to another DHCPv6 server.

SID This field displays the DHCPv6 server’s unique ID.

Address This field displays the Switch’s global address which is assigned by the DHCPv6 server.

Preferred

Lifetime This field displays how long (in seconds) that the global address remains preferred.

Valid

Lifetime This field displays how long (in seconds) that the global address is valid.

DNS This field displays the DNS server address assigned by the DHCPv6 server.

Domain List This field displays the address record when the Switch queries the DNS server to resolve

domain names.

Restart DHCPv6

Client Click Click Here to send a new DHCP request to the DHCPv6 server and update the IPv6

address and DNS inf ormation for this interface.

Ta ble 24 Basic Setting > IPv6 Interface Status (continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.9.2 IPv6 Configuration

Use this screen to configure IPv6 settings on the Switch. Click the IPv6 Configuration link in the

Basic Setting > IPv6 screen. The following screen opens.

Figure 45 Basic Setting > IPv6 > IPv6 Configuration

The following table describes the labels in this screen.

6.9.3 IPv6 Global Setup

Use this screen to configure the global IPv6 settings. Click the link next to IPv6 Global Setup in

the IPv6 Configuration screen to display the screen as shown next.

Ta ble 25 Basic Setting > IPv6 > IPv6 Configuration

LABEL DESCRIPTION

IPv6 Global Setup Click the link to go to a screen where you can configure the global IPv6 settings on the

Switch.

IPv6 Interface Setup Click the link to go to a screen where you can enable an IPv6 interface on the Switch.

IPv6 Addressing

IPv6 Link-Local

Address Setup Click the link to go to a screen where you can configure the IPv6 link-local address for

an interface.

IPv6 Global

Address Setup Click the link to go to a screen where you can configure the IPv6 global address for an

interface.

IPv6 Neighbor

Discovery

IPv6 Neighb or

Discovery Setup Click the link to go to a screen where you can configure the IPv6 neighbor discovery

settings.

IPv6 Router

Discovery Setup Click the link to go to a screen where you can configure the IPv6 router discovery

settings.

IPv6 Prefix Setup Click the link to go to a screen where you can configure the Switch’s IPv6 prefix list.

IPv6 Neighbor Setup Click the link to go to a screen where you can create a static IPv6 neighbor entry in the

Switch’s IPv6 neighbor table.

DHCPv6 Client Setup Click the link to go to a screen where you can configure the Switch DHCP settings.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 46 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Setup

The following table describes the labels in this screen.

6.9.4 IPv6 Interface Setup

Use this screen to turn on or off an IPv6 interface and enable stateless autoconfiguration on it. Click

the link next to IPv6 Interface Setup in the IPv6 Configuration screen to display the screen as

shown next.

Figure 47 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Interface Setup

Ta ble 26 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Setup

LABEL DESCRIPTION

IPv6 Hop Limit Specify the maximum n umber of hops (from 1 to 255) in router advertisements. This

is the maximum number of hops on which an IPv6 pack et is allo wed to tr ansmit before

it is discarded by an IPv6 router, which is similar to the TTL field in IPv4.

ICMPv6 Rate Limit

Bucket Size Specify the maximum n umber of ICMPv6 error messages (from 1 to 200) which are

allowed to transmit in a given time interval. If the bucket is full, subsequent error

messages are suppres sed.

ICMPv6 Rate Limit

Error Interval Specify the time period (from 0 to 2147483647 milliseconds) during which ICMPv6

error messages of up to the bucket size can be transmitted. 0 means no limit.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

The following table describes the labels in this screen.

6.9.5 IPv6 Link-Local Address Setup

A link-local address uniquely identifies a device on the local network (the LAN). It is similar to a

“private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a

device. A link-local unicast address has a predefined prefix of fe80::/10.

Use this screen to configure the interface’s link-local address and default gateway. Click the link

next to IPv6 Link-Local Address Setup in the IPv6 Configuration screen to display the screen

as shown next.

Figure 48 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Link-Local Address Setup

The following table describes the labels in this screen.

Ta ble 27 Basic Setting > IPv6 > IPv6 C onfiguration > IPv6 Interface Setup

LABEL DESCRIPTION

Interface Select the IPv6 interface you want to configure.

Active Select this option to enable the interface.

Address Autoconfig Select t his option to allow t he interface to autom atically generate a link-local address

via stateless autoconfiguration.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

Active This field displays whether the IPv6 interface is activated or not.

Address Autoconfig This field displays whether stateless autoconfiguration is enabled on the interface.

Ta ble 28 Basic Setting > IPv6 > IPv6 C onfiguration > IPv6 Link-Local Address Setup

LABEL DESCRIPTION

Interface Select the IPv6 interface you want to configure.

Link-Local Address Manually configure a static IPv6 link-local address for the interface.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.9.6 IPv6 Global Address Setup

Use this screen to configure the interface’s IPv6 global address. Click the link next to IPv6 Global

Address Setup in the IPv6 Configuration screen to display the screen as shown next.

Figure 49 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Global Address Setup

The following table describes the labels in this screen.

Default Gateway Set the default gateway IPv6 address for the interface. When an interface cannot find

a routing information for a frame’s destination, it forwards the packet to the default

gateway.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

IPv6 Link-Local

Address This is the static IPv6 link-local address for the interface.

IPv6 Default

Gateway This is the default gateway IPv6 address for the interface.

Ta ble 28 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Link-Local Add ress Setup (c ontinued)

LABEL DESCRIPTION

Ta ble 29 Bas ic Setting > I Pv6 > IPv6 Conf iguration > IPv6 Globa l Address Set up

LABEL DESCRIPTION

Interface Select the IPv6 interface you want to configure.

IPv6 Global Address Manually configure a static IPv6 global address for the interface.

Prefix Length Specify an IPv6 pr efix le ngth that specif ies how man y mo st si gnific ant bi ts (st art from

the left) in the address compose the network address.

EUI-64 Select this option to have the interface ID be generated automatically using the EUI-

64 format.

Add Click Add to create a new entry or update an existing one.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.9.7 IPv6 Neighbor Discovery Setup

Use this screen to configure neighbor discovery settings for each interface. Click the link next to

IPv6 Neighbor Discovery Setup in the IPv6 Configuration screen to display the screen as

shown next.

Figure 50 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Discovery Setup

The following table describes the labels in this screen.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

IPv6 Global Address/

Prefix Length This field displays the IPv6 global address and prefix length for the interface.

EUI-64 This shows whether the interface ID of the global address is generated using the EUI-

64 format.

Select an entry’s check box to select a specific entry. Otherwise, select the check box

in the table heading row to select all ent ries.

Delete Check the entry(ies) that you want to remove and then click Delete to remove the

selected entry(ies) from the summary table.

Cancel Click Cancel to clear the check boxes.

Ta ble 29 Bas ic Setting > I Pv6 > IPv6 Conf iguration > IPv6 Globa l Address Set up (continued)

LABEL DESCRIPTION

Ta ble 30 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Discovery Setup

LABEL DESCRIPTION

Interface Select the IPv6 interface you want to configure.

DAD Attempts The Switch uses Duplicate Address Detection (DAD) with neighbor solicitation and

advertisement mess ages to check whether an IPv6 address is already in use before

assigning it to an interface, such as the link-local address it create s through stateless

address autoconfiguration.

Specify the number of consec utive neighbor solicitations (from 0 to 600) the Switch

sends for this interface. Enter 0 to turn off DAD.

NS Interval Specify the time interval (from 1000 to 3600000 milliseconds) at which neighbor

solicitations are re-sent for this interface.

Reachable Time Specify how long (from 1000 to 3600000 milliseconds) a neighbor is considered

reachable for this interface.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.9.8 IPv6 Router Discovery Setup

Use this screen to configure router discovery settings for each interface. Click the link next to IPv6

Router Discovery Setup in the IPv6 Configuration screen to display the screen as shown next.

Figure 51 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Router Discovery Setup

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

DAD Attempts This field displays the number of consecutive neighbor solicitations the Switch sends

for this interface.

NS Interval This field displays the time interv al (in milliseconds) at which neighbor solicitations are

re-sent for this interface.

Reachable Time This field displays how long (in milliseconds) a neighbor is considered reachable for

this interface.

Ta ble 30 Bas ic Setting > I Pv6 > IPv6 Conf iguration > IPv6 Neighbor Discovery Setu p ( continued)

LABEL DESCRIPTION

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

The following table describes the labels in this screen.

6.9.9 IPv6 Prefix Setup

Use this screen to configure the Switch’s IPv6 prefix list for each interface. Click the link next to

IPv6 Prefix Setup in the IPv6 Configuration screen to display the screen as shown next.

Ta ble 31 Basic Setting > IPv6 > IPv6 C onfiguration > IPv6 Router Discovery Setup

LABEL DESCRIPTION

Interface Select the IPv6 interface you want to configure.

Flags Select the Managed Config Flag option to ha ve the Switch set th e “managed address

configuration” flag (the M flag) to 1 in IPv6 router advertisements, which means IPv6

hosts use DHCPv6 to obtain IPv6 stateful addresses. Deselect the option to set the flag

to 0 and the host will not use DHCPv6 to obtain IPv6 stateful addresses.

Select the Other Config Flag option to have the Switch set the “Other stateful

configuration” flag (the O flag) to 1 in IPv6 router advertisements, which means IPv6

hosts use DHCPv6 to obtain additional configuration settings, such as DNS

information. Deselect the option to set the flag to 0 and the host will not use DHCPv6

to obtain additional configuration settings.

Minimum Interval Specify the minimum time interval (from 3 to 1350 seconds) at which the Switch

sends router advertisements for this interface.

Note: The minimum time interval cannot be greater than three-quarters of the maximum

time interval.

Maximum Interval Specify the maximum time interval (from 4 to 1800 seconds) at which the Switch

sends router advertisements for this interface.

Lifetime Specify how long (from 0 to 90 00 seconds) the router in router advertisements can be

used as a default router for this interface.

Suppress Select this o ption to set the Switch to not send router advertisements and responses

to router solicitations on this interface.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

Flags This field displays whether IPv6 hosts use DHCPv6 to obtain IPv6 stateful addresses

(M) and/or additional configuration settings (O).

Minimum Interval This field displays the minimum time interval at which the Switch sends router

advertisements for this interface.

Maximum Interval This field displays the maximum time interval at which the Switch sends router

advertisements for this interface.

Lifetime This field displays how long the router in router advertisements can be used as a

default router for this interface.

Suppress This field displays whether the Switch sends router advertis ements and responses to

router solicitations on this interface (No) or not (Yes).

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 52 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Prefix Setup

The following table describes the labels in this screen.

Ta ble 32 Bas ic Setting > I Pv6 > IPv6 Conf iguration > IPv6 Prefix Setup

LABEL DESCRIPTION

Interface Select the IPv6 interface you want to configure.

Prefix Set the IPv6 prefix that the Switch includes in router advertisements for this interface.

Prefix Length Set the prefix length that the Switch includes in router advertisements for this

interface.

Valid Lifetime Specify how long (from 0 to 4294967295 seconds) the prefix is valid for on-link

determination.

Preferred Lifetime Specify how long (from 0 to 4294967 295 seconds) that addresses generated from the

prefix via stateless address autoconfiguration remain preferred.

The preferred lifetime cannot exceed the valid lifetime.

Flags Select No-Autoconfig Flag to not allow IPv6 hosts to use this prefix for stateless

address autoconfiguration.

Select No-Onlink Flag to not allow the specified prefix to be used for on-link

determination.

Select No-Advertise Flag to set the Switch to not include the specified IPv6 prefix,

prefix length in router advertisements for this interface.

Add Click this to create a new entry or to update an existing one.

This saves your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the nonvolatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

Prefix/Prefix Length This field displays the IPv6 prefix and prefix length that the Switch includes in router

advertisements for this interface.

Valid Lifetime This field displays the IPv6 prefix valid lifetime.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.9.10 IPv6 Neighbor Setup

Use this screen to create a static IPv6 neighbor entry in the Switch’s IPv6 neighbor table to store

the neighbor information permanently. Click the link next to IPv6 Neighbor Setup in the IPv6

Configuration screen to display the screen as shown next.

Figure 53 Basic Setting > IPv6 > IPv6 Configuration > IPv6 Neighbor Setup

The following table describes the labels in this screen.

Preferred Lifetime This field displays the preferred lifetime of an IPv6 address generated from the prefix.

Delete Check the entry (ies) that you want to re move in the Delete column and then click

Delete to remove the selected entry(ies) from the summary table.

Cancel Click Cancel to clear the Delete check boxes.

Ta ble 32 Bas ic Setting > I Pv6 > IPv6 Conf iguration > IPv6 Pref ix Setup (cont i nued)

LABEL DESCRIPTION

Ta ble 33 Bas ic Setting > I Pv6 > IPv6 Conf iguration > IPv6 Neighbor Setup

LABEL DESCRIPTION

Interface Type Select the type of IPv6 interface for which you want to configure. The Switch supports

the VLAN interface type for IPv6 at the time of writing.

Interface ID Specify a unique identification number (from 1 to 4094) for the interface.

Note: A static IPv6 neighbor entry displays in the Management > Neighbor Table

screen only when the interface ID is also created in the Basic Setup > Interface

Setup screen.

Note: To have IPv6 function properly, you should configure a static VLAN with the same

ID number in the Advanced Setup > VLAN screens.

Neighbor Address Specify the IPv6 address of the neighboring device which can be reached through the

interface.

MAC Specify the MAC address of the neighboring device which can be reached through the

interface.

Add Click this to create a new entry or to update an existing one.

This saves your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the nonvolatile memory when you are done configuring.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.9.11 DHCPv6 Client Setup

Use this screen to configure the Switch’s DHCP settings when it is acting as a DHCPv6 client. Click

the link next to IPv6 Neighbor Setup in the IPv6 Configuration screen to display the screen as

shown next.

Figure 54 Basic Setting > IPv6 > IPv6 Configuration > DHCPv6 Client Setup

The following table describes the labels in this screen.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

Neighbor Address This field displays the IPv6 address of the neighboring device which can be reached

through the interface

MAC This field displays the MAC address of the neighboring device which can be reached

through the interface.

Select an entry’s check box to select a specific entry. Otherwise, select the check box

in the table heading row to select all ent ries.

Delete Check the entry(ies) that you want to remove and then click Delete to remove the

selected entry(ies) from the summary table.

Cancel Click Cancel to clear the check boxes.

Ta ble 33 Bas ic Setting > I Pv6 > IPv6 Conf iguration > IPv6 Neighbor Setup (co nt inued)

LABEL DESCRIPTION

Ta ble 34 Basic Setting > IPv6 > IPv6 C onfiguratio n > DHCPv6 Client Setup

LABEL DESCRIPTION

Interface Select the IPv6 interface you want to configure.

IA Type Select IA-NA to set the Switch to get a non-temp orary IP address from the DHCPv6

server for this interface.

Optionally, you can also select Rapid-Commit to have the Switch send its DHCPv6

Solicit message with a Rapid Commit option to obtain information from the DHCPv6

server by a rapid two-message exchange. The Switch discards any Reply messages

that do not include a Rapid Commit option. The DHCPv6 server should also support the

Rapid Commit option to have it work well.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.10 Stacking

Stacking is directly connecting Switches to form a larger system that behaves as a single Switch or

a virtual chassis with increased port density.

Figure 55 Switch Stacking Concept

The last two SFP ports of your Switch are dedicated for Switch stacking. These are the Switches

that support stacking at the time of writing.

Options Select DNS to have the Switch obtain DNS server IPv6 addresses and/or select

Domain-List to have the Switch obtain a list of domain names from the DHCP server.

Information Refresh

Minimum Specify the time interval (from 600 to 4294967295 seconds) at which the Switch

exchanges other configuration information with a DHCPv6 server again.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This is the interface index number. Click on an index number to change the settings.

Interface This is the name of the IPv6 interface you created.

IA-NA This field displays whether the Switch obtains a non-temporary IP address from the

DHCPv6 server.

Rapid-Commit This field displays whether the Switch obtains inform ation from the DHCPv6 server by

a rapid two-message exchange.

DNS This field displays whether the Switch obtains DNS server IPv6 addresses from the

DHCPv6 server.

Domain-List This field displays whether the Switch obtains a list of domain names from the DHCP

server.

Information Refresh

Minimum This field displays the time interval (in seconds) at which the Switch exchan ges other

configuration information with a DHCPv6 server again.

Ta ble 34 Basic Setting > IPv6 > IPv6 Configuratio n > DHCPv6 Clie nt Setup (continued)

LABEL DESCRIPTION

Ta ble 35 Switch Stacking

MODELS WITH STACKING SUPPORT

XGS3700-24

XGS3700-24HP

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Note: Up to 8 Switches per stack are allowed.

You can manage each Switch in the stack from a master Switch using its web configurator or

console. Each Switch supports up to two stacking channels. Use the master S witch to assign a ‘slot

ID’ for each ‘linecard’ non-master Switch. ‘Slot’ refers to a Switch in the the ‘virtual chassis’ stack.

The advantages of stacking are:

• High port density - for example, two 24-port Switches can become one 48-port logical Switch

• Centralized management - log into a single IP address of the master switch to control all

Switches in the stacking system using the web configurator, CLI, SNMP or FTP

• Redundancy - Data redundancy allows traffic to be forwarded even if one Switch in the stack

fails. Management redundancy lets you still manage the stack even if one Switch in the stack fails

• Modularity and hot-swappable - you can add, remove, or replace Switches to increase or

decrease the stack with minimum disruption to ongoing network traffic.

You can build a Switch stack using a ring or chain topology. In a ring topology, the last Switch is

connected to the first.

Figure 56 Stacking Topology

6.10.1 Stacking Status

Click Basic Setting > Stacking in the navigation panel to display the Stacking Status screen as

shown next.

XGS3700-48

XGS3700-48HP

Ta ble 35 Switch Stacking

MODELS WITH STACKING SUPPORT

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 57 Basic Setting > Stacking Status

The following table describes the labels in this screen.

6.10.2 Stacking Slot

Click Basic Setting > Stacking > Stacking Status > Slot number in the navigation panel to

display the Stacking Slot Status screen as shown next.

Ta ble 36 Basic Setting > Stacking > Stacking Status

LABEL DESCRIPTION

Slot ‘Slot’ refers to a Switch in the the ‘virtual chassis’ stack. This field displays the slot ID of the

stacked Switch. You can click the ID number t o go t o the Stacking Slot Status screen.

Name This field displays the model name of the stacked Switch.

Status This field displays whether the stacked Switch is active or inactive in a stack system. Init

means the slot ID is initialized by the master Switch.

MAC address This field displays the MAC address of the stacked Switch.

Role This field displays whether the Switch is a master, backup or linecard. There’s only one

master and one backup Switc h in the stacking model; all others are linecard Switches.

Stacking Topology: Ring/Chain

Slot No. This field displays the slot ID number of th e stacked Switch.

Stacking Channel1

Neighbor This field displays the neighbor Switch that is connected using slot channel 1 of the Switch.

Speed This field displ ays the Ethernet speed of stacking channel 1 of the Switch.

Stacking Channel2

Neighbor This field displays the neighbor Switch that is connected to slot channel 2 o f the Switch.

Speed This field displ ays the Ethernet speed of stacking channel 2 of the Switch.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

Figure 58 Basic Setting > Stacking > Stacking Status > Slot number

The following table describes the labels in this screen.

Ta ble 37 Basic Setting > Stacking > Stacking Status > Slot number

LABEL DESCRIPTION

Slot This field displays the slot ID of the Switch.

Stacking This field displays whether the Switch is active in the stacking system.

Role This field displays whether the stacked Switch is a master or linecard Switch.

Force Master

Mode This field displays whether the Force Master Mode is enabled or disabled on this Switch. The

Active Force Master Mode forces this Switch to become a master Switch. This Switch will

have the highest priority over all other Switch in the stack. If two Switches are set as

masters, they will have the same priority level, but the Switch that has the longest active

run-time will be selected as the master Switch automatically.

Priority This field displays the priority level of the Switch. A higher number represents higher

priority.

Slot ID After

Reboot This field displays the slot ID of the Switch after a reboot. You can save the slot ID of the

Switch after a reboot by clicking Freeze in the Stacking Configuration screen. See

Section 6.10.3 on page 97.

Stacking Status This field displays whether the stacked Switch is active or inactive in a stack. Init means

the slot ID is initialized by the master Switch.

Master Capable This field displays whether the Switch has capacity to become a master Switch. Auto

means the stack system master election process will determine if the Switch can be

assigned as a master Switch.

Stacking MAC

Address This field displays the stacking Switch MAC address.

Stacking

Channel 1 This field displays the status of the port stacking channel 1 of the Switch. It will disp lay up

for active or down for inactive.

Stacking

Channel 2 This field displays the status of the port stacking channel 2 of the Switch. It will disp lay up

for active or down for inactive.

Stacking Up

Time This field displays the time that the active Switch in a stack has been running.

ZyNOS version

*Running/Flash This field displays the ZyNOS firmware that is currently running on the Switch.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

6.10.3 Stacking Configuration

A supported Switch can change between stacking and standalone mode by selecting the Active

check box in the Basic Setting > Stacking > Configuration screen.

Note: When you change modes, all configurations except us er accounts, but including

running configuration, config01 and config02 will be erased and the Switch will

reboot with a new config01. Therefore, you should back up previous configurati ons

if you want to reload them later.

Stacking will automatically choose a master Switch in a stack but you can overwrite that by activ ely

forcing a Switch to become a master Switch. In the Stacking Configuration screen, click Active

Force Master Mode to choose the master Switch. This master Switch will have the highest priority

over all other stacked Switches even when they have same priority value.

If two or more Switches have Active Force Master Mode enabled, then the Switch will use

System Priority to determine which is master. If they have the same System Priority, then the

Switch with the longest up-time is selected. Uptime is measured in increments of 10 minutes. The

Switch with the higher number of increments is selected. If they have the same uptime, then the

Switch with the lowest MAC address will be the master.

This is the master election priority in a stack system:

1Active Force Master Mode

2Highest Stacking Priority

3Longest System Up Time

4Lowest MAC Address

Note: Master election occurs when a stacking port link status changes (up / down). The

link status changes when (for example):

- a stacking port cable is disconnected

- a Switch in the stack reboots (as happens after you change stacking mode to

standalone)

- you add a Switch to the stack or

- a Switch in the stack shuts down.

Use the following procedure to create a stack:

1Select a Switch to be the master. Change its mode to stacking mode. Y ou will see a message asking

you to confirm the change. Click OK to confirm and the Switch will reboot automatically using a

new config01.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

2After reboot completes, the master LED will turn on.

3Configure the Switch stacking priority to a high value, such as 63.

4Change a second Switch to stacking mode and wait for it to finish rebooting automatically. This

master LED will also turn on.

5Connect the two Switches using the stacking ports for the Switch defined.

6The second Switch master LED will then turn off, and its Sys LED will blink while it's initializing.

Please wait until it stops blinking, indicating that it has joined the stack.

7Repeat steps 4 to 6 to connect other Switches to the stack.

When the Switch is in Stacking mode, the web configurator will change port and VLAN port settings

to support the stacking mode. See Section 6.6 on page 69 and Section 7.7 on page 106 for details

on the port settings.

Click Basic Setting > Stacking > Configuration to see the following screen.

Figure 59 Basic Setting > Stacking > Configuration

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

The following table describes the labels in this screen.

6.11 DNS

DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and

vice versa. Use the DNS screen to configure and view the default DNS servers on the Switch.

Figure 60 Basic Setting > DNS

The following table describes the labels in this screen.

Ta ble 38 Basic Setting > Stacking > Configurat ion

LABEL DESCRIPTION

Active Select the Active check box to put the Sw itch in stac king mode. Th is will er ase the runni ng

configuration, config01 and config02. The master Switch’s login will remain unchanged. If

you want to reload a previous configuration, please back one up first.

Apply Click Apply to activate the stacking mode.

Cancel Click Cancel to clear the Active check box.

Force Master

Mode Select the Force Master Mo de check box to force this Switch to become a master Switch.

System Priority Enter a number (from1 to 63) to assign a priority for the stacking Switch. The higher the

number, the higher the priority.

Apply Click Apply to save the Active Force Master Mode and System Priority fields.

Cancel Click Cancel to clear the Active Force Master Mode and System Priority fields.

Slot ID Freeze Click the Freeze button to have the Switch retain its slot ID after reboot.

Slot This field displays the slot or port channel of the stacked Switch.

MAC Address This field displays the MAC address of the stacked Switch.

Type This field displays the model name of the Switch.

Slot ID After

Reboot Choose Auto to have a new slot ID assigned after reboot. If you want to keep the original

slot ID after reboot, you can click Freeze or select an ID in the Slot ID After Reboot list

box.

Apply Click Apply to save the Slot ID After reboot field.

Cancel Click Cancel to clear the Slot ID After reboot field.

Ta ble 39 Basic Setting > DNS

LABEL DESCRIPTION

Static Domain Name Server

Preference This is the priority of the DNS server address.

Chapter 6 Basic Setting

GS3700/XGS3700 Series User’s Guide

100

Server Address Enter a domain name server IPv6/IPv4 address in order to be able to use a domain

name instead of an IP address.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to reset the fields to your previous configuration.

Domain Name Server Table

Index This field displays priority of the DNS server address.

Server Address This field displays the IP address of the DNS server.

Source This field displays whether the DNS server address is config ured manually (Static) or

obtained automat ically using DHCP/DHCPv6 (Dynamic).

Ta ble 39 Basic Setting > DNS (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

101

CHAPTER 7

VLAN

The type of screen you see here depends on the VLAN Type you selected in the Switch Setup

screen which is only available in standalone mode. The Switch does not support port-based VLANs

in stacking mode. This chapter shows you how to configure 802.1Q tagged and port-based VLANs.

7.1 Introduction to IEEE 802.1Q Tagged VLANs

A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership

of a frame across bridges - they are not confined to the switch on which they were created. The

VLANs can be created statically by hand or dynamically through GVRP. The VLAN ID associates a

frame with a specific VLAN and provides the information that switches need to process the frame

across the network. A tagged frame is four bytes longer than an untagged frame and contains two

bytes for the TPID (Tag Protocol Identifier, residing within the type/length field of the Ethernet

frame) and tw o bytes for the TCI (Tag Control Information, starting after the source address field of

the Ethernet frame).

The CFI (Canonical Form at Indicator) is a single-bit flag, always set to zero for Ethernet switches. If

a frame received at an Ethernet port has a CFI set to 1, then that fr ame should not be forwarded as

it is to an untagged port. The remaining twelve bits define the VLAN ID, giving a possible maximum

number of 4,096 VLANs. Note that user priority and VLAN ID are independent of each other. A

frame with VID (VLAN Identifier) of null (0) is called a priorit y frame, meaning that only the priorit y

level is significant and the default VID of the ingress port is given as the VID of the frame. Of the

4096 possible VIDs, a VID of 0 is used to identify priority frames and the value 4095 (FFF) is

reserved, so the maximum possible number of VLAN configurations is 4,094.

7.1.1 Forwarding Tagged and Untagged Frames

Each port on the Switch is capable of passing tagged or untagged frames. To forward a frame from

an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch, the Switch first decides where

to forward the frame and then strips off the VLAN tag. To forward a frame from an 802.1Q VLAN-

unaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to forward the

frame, and then inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is

VLAN 1 for all ports, but this can be changed.

A broadcast frame (or a multicast frame for a multicast group that is known by the system) is

duplicated only on ports that are members of the VID (except the ingress port itself), thus confining

the broadcast to a specific domain.

TPID

2 Bytes

User Priority

3 Bits

CFI

1 Bit

VLAN ID

12 bits

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

102

7.2 Automatic VLAN Registration

GARP and GVRP are the protocols used to automatically register VLAN membership across switches.

7.2.1 GARP

GARP (Generic Attribute Registration Protocol) allows network switches to register and de-register

attribute values with other GARP participants within a bridged LAN. GARP is a protocol that provides

a generic mechanism for protocols that serve a more specific application, for example, GVRP.

7.2.1.1 GARP Timers

Switches join VLANs by making a declaration. A declaration is made by issuing a Join message

using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message

terminates all registrations. GARP timers set declaration timeout values.

7.2.2 GVRP

GVRP (GARP VLAN Registr ation Protocol) is a registration protocol that defines a wa y for switches to

groups beyond the local Switch.

Please refer to the following table for common IEEE 802.1Q VLAN terminology.

Ta ble 40 IEEE 802.1 Q VLA N Terminology

VLAN PARAMETER TERM DESCRIPTION

VLAN Type Permanent VLAN This is a static VLAN created manually.

Dynamic VLAN This is a VLAN configured by a GVRP registration/

deregistration process.

VLAN Administrative

Control Registration Fixed Fixed registration ports are permanent VLAN members.

Registration

Forbidden Ports with registration forbidden are forbidden to join the

specified VLAN.

Normal Registration Ports dynamically join a VLAN using GVRP.

VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all outgoing frames

transmitted.

Untagged Ports belonging to the specified VLAN don't tag all outgoing

frame s transmitted.

VLAN Port Port VID This is the VLAN ID assigned to untagged frames that this

port received.

Acceptable Frame

Type You may choose to accept both tagged and untagged

incoming frames, just tagged incoming frames or just

untagged incoming frames on a port.

Ingress filtering If set, the Swit ch discards incoming fr ames for VLANs that do

not have this port as a member.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

103

7.3 Port VLAN Trunking

Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass

through that port. This is useful if you want to set up VLAN groups on end devices without ha ving to

configure the same VLAN groups on intermediary devices.

The following figure describes VLAN Trunking. Suppose you want to create VLAN groups 1 and 2

(V1 and V2) on devices A and B. Without VLAN Trunking, you must configure VLAN groups 1 and

2 on all intermediary switches C, D and E; otherwise they will drop frames with unknown VLAN

group tags. However, with VLAN Trunking enabled on a port(s) in each intermediary switch you

only need to create VLAN groups in the end devices (A and B). C, D and E automatically allow

frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to pass

through their VLAN trunking port(s).

Figure 61 Port VLAN Trunking

7.4 Select the VLAN Type

Select a VLAN type in the Basic Setting > Switch Setup screen. VLAN Type is not applicable in

Stacking mode.

Figure 62 Switch Setup: Select VLAN Type

7.5 802.1Q Static VLAN

Make sure 802.1Q is selected in the Basic Setting > Switch Setup screen.

Use a static VLAN to decide whether an incoming frame on a port should be

• sent to a VLAN group as normal depending on its VLAN tag.

• sent to a group whether it has a VLAN tag or not.

• blocked from a VLAN group regardless of its VLAN tag.

You can also tag all outgoing frames (that were previously untagged) from a port with the specified

VID.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

104

7.5.1 VLAN Status

See Section 7.1 on page 101 for more information on 802.1Q VLAN. Click Advanced Application

> VLAN from the navigation panel to display the VLAN Status screen as shown next.

Figure 63 Advanced Application > VLAN: VLAN Status

The following table describes the labels in this screen.

Ta ble 41 Advanced Application > VLAN: VLAN Status

LABEL DESCRIPTION

VLAN Search by

VID Enter an existing VLAN ID number(s) (separated by a comma) and click Search to display

only the specified VLAN(s) in the list below.

Leave this field blank and click Search to display all VLANs configured on the Switch.

The Number of

VLAN This is the number of VLANs configured on the Switch.

The Number of

Search Results This is the number of VLANs that match the searching criteria and display in the list below.

This field dis plays only whe n you use the Search button to look for certain VLANs.

Index This is the VLAN index number. Click on an index number to view more VLAN details.

VID This is the VLAN identification number that was c onfigured in the Static VLAN screen.

Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN

was set up.

Status This field shows how this VLAN was added to the Switch.

•Dynamic - using GVRP

•Static - manually added as a normal VLAN

•Private - manually added as a private VLAN (primary, isolated or community)

•Voice - manually added as a Voice VLAN

•RMirror - manually added as a remote port mirroring VLAN

•MVR - added via Multicast VLAN Registration (MVR)

Change Pages Click Previous or Next to show the previous/next screen if all status information cannot

be seen in one screen.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

105

7.5.2 VLAN Details

Use this screen to view detailed port settings and status of the VLAN group. See Section 7.1 on

page 101 for more information on 802.1Q VLAN. Click on an index number in the VLAN Status

screen to display VLAN details.

Figure 64 Advanced Application > VLAN > VLAN Detail

The following table describes the labels in this screen.

Ta ble 42 Advanced Application > VLAN > VLAN Detail

LABEL DESCRIPTION

VLAN Status Click this to go to the VLAN Status screen .

VID This is the VLAN identification number that was configured in the Static VLAN screen.

Slot ‘Slot’ refers to a Switch in the the ‘virtual chassis’ stack. This field displ ays the s lot ID of

the stacked Switch.

Port Number This column displays th e ports that are participating in a VLAN. A tagged port is marked as

T, an untagged port is marked as U and ports not participating in a VLAN are marked as “–

“.

Elapsed Time This field shows how long it has been since a norm al VLAN was regi stered or a static VLAN

was set up.

Status This field shows how this VLAN was added to the Switch.

•Dynamic - using GVRP

•Static - manually added as a normal VLAN

•Private - manually added as a private VLAN (primary, isolated or community)

•Voice - manually added as a Voice VLAN

•RMirror - manually added as a remote port mirroring VLAN

•MVR - added via Multicast VLAN Registration (MVR)

Private VLAN

Status These fields show private VLAN information for the selected VLAN. See Section 33.1 on

page 336 for more information on private VLANs.

Primary VLAN This field shows the primary VLAN ID in the selected VLAN.

Secondary

VLAN This field shows the secondary VLAN ID in the select ed VLAN.

Type This field shows the type of private VLAN: Primary, Community or Isolated.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

106

7.6 Private VLAN Status

Use this screen to view all private VLANs created on the Switch. Click Advanced Application >

VLAN > Private VLAN Status to see the following screen.

Figure 65 Advanced Application > VLAN > Private VLAN Status

The following table describes the labels in this screen.

7.7 VLAN Configuration

Use this screen to view IEEE 802.1Q VLAN parameters for the S witch. Click Advanced Application

> VLAN > VLAN Configuration to see the following screen.

Port List This shows the ports mapped to the private VLAN using the Advanced Application >

Private VLAN or Advanced Application > VLAN > Static VLAN screen.

Change Pages Click Previous or Next to show the previous/next screen if all status information cannot

be seen in one screen.

Ta ble 42 Advanced Application > VLAN > VLAN Detail (continued)

LABEL DESCRIPTION

Ta ble 43 Advanced Application > VLAN > Pr ivate VLAN Status

LABEL DESCRIPTION

Private VLAN

Status These fi elds show i nformation for the all private VLANs. See also Advanced Application >

Private VLAN.

Primary

VLAN This field shows the primary VLAN ID in a private VLAN.

Secondary

VLAN This field shows the secondary VLAN ID in a private VLAN.

Type This field shows the type of private VLAN: Primary, Community or Isolated.

Port List This shows the ports mapped to the private VLAN using the Advanced Application >

Private VLAN or Advanced Application > VLAN > Static VLAN screen.

Change Pages Use the Previous and Next buttons to display different pages.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

107

Figure 66 Advanced Application > VLAN > VLAN Configuration

The following table describes the labels in the above screen.

7.7.1 Configure a Static VLAN

Use this screen to configure a static VLAN for the Switch. Click the Static VLAN Setup link in the

VLAN Configuration screen to display the screen as shown next.

Ta ble 44 Advanced Application > VLAN > VLAN Configuration

LABEL DESCRIPTION

Static VLAN Setup Click Click Here to configure the Static VLAN for the Switch.

VLAN Port Setup Click Click Here to configure the VLAN Port for the Switch.

Subnet Based VLAN Setup Click Click Here to configure the Subnet Based VLAN for the Switch.

Protocol Based VLAN Setup Click Click Here to configure the Protocol Based VLAN for the Switch.

Voice VLAN Setup Click Click Here to configure the Voice VLAN for the Switch.

MAC Based VLAN Setup Click Click Here to configure the MAC Based VLAN for the Switch.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

108

Figure 67 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup

The following table describes the related labels in this screen.

Ta ble 45 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup

LABEL DESCRIPTION

ACTIVE Select this check box to activate the VLAN settings.

Name Enter a descriptive name for the VLAN group for identification purposes. This name

consists of up to 64 printable characters; spaces are allowed.

VLAN Group ID Enter the VLAN ID for this static entry; the valid range is between 1 and 4094.

VLAN Type Select Normal (static) or Private. For Private VLANs, select Primary, Isolated or

Community.

Association VLAN

List Primary private VLANs can associate with sev eral (secon dary) Community private VLANs

and up to one (secondary) Isolated private VLAN.

You only configure VLAN Association List for Primary private VLANs. Use a dash to

associate consecutive VLANs and a comma (no spaces) to associate non-consecutive

VLANs. For example, 51-53 includes 51, 52 and 53, but 51,53 does not include 52.

Secondary private VLANs can only be associated with one primary private VLAN.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

109

7.7.2 Configure VLAN Port Settings

Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q) settings on a port.

See Section 7.1 on page 101 for more information on 802.1Q VLAN. Click the VLAN Port Setup

link in the VLAN Configuration screen.

Port The port number identifies the port you are configuring. In stacking mode, the first

number represents the slot and the second the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Control Select Normal for the port to dynamically join this VLAN group using GVRP. This is the

default selection.

Select Fixed for the port to be a permanent member of this VLAN group.

Select Forbidden if you want to prohibit the port from joining this VLAN group.

Tagging Select TX Tagging if you want the port to tag all outgoing frames transmitted with this

VLAN Group ID.

Add Click this to create a new ent r y or to update an existing one.

This sav es your changes to the Switch’ s run-time memory. The Switch loses t hese changes

if it is turned off or loses power, so use the Save lin k on the top navigation panel to save

your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configurin g this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

VID This field displays the ID number of the VLAN group. Click the number to edit the VLAN

settings.

Active This field indicates whether the VLAN settings are enabled (Yes) or disabled (No).

Name This field displays the descriptive name for this VLAN group.

VLAN Type This field displa ys the Normal or Private (Primary, Isolated or Community) type VLAN

configured in the top part of this screen.

Association VLAN

List This field displays which secondary private VLANs are associated with a primary private

VLAN configured in the top part of this screen.

Select an entry’s check box to select a specific entry. Otherwise, select the check box in

the table heading row to select all entries.

Delete Click Delete to remove the selected entry from the summary table.

Cancel Click Cancel to clear the Delete check boxes.

Ta ble 45 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup (continued)

LABEL DESCRIPTION

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

110

Figure 68 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup: Standalone

mode

Figure 69 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup: Stacking mode

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

111

The following table describes the labels in this screen.

7.7.3 Subnet Based VLANs

Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP subnet you

specify. When a frame is received on a port, the Switch checks if a tag is added already and the IP

Ta ble 46 Advanced Application > VLAN > VLAN Configuration > VLAN Port Setup: Standalone/

Stacking mode

LABEL DESCRIPTION

GVRP GVRP (GARP VLAN Registration Protocol) is a registr ation protocol that defines a wa y for

switches to register necessary VLAN members on ports across the network.

Select this check box to permit VLAN groups beyond the local Switch.

SLOT1 This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch.

Port This field displays the port number of the Switch. In stacking mode, the first number

represents the slot and the second the port num b er. Please note that the default

stacking ports (the last two ports of your Switch) cannot be configured. They are

reserved for stacking only.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Ingress Check If this check box is selected for a port, the Switch discards incoming frames for VLANs

that do not include this port in its member set.

Clear this check box to disable ingress filtering.

PVID A PVID (Port VLAN ID) is a tag that adds to incoming untagged frames received on a

port so that the frames are forwarded to the VLAN group that the tag defines.

Enter a number between 1 and 4094 as the port VLAN ID.

GVRP Select this check box to allow GVRP on this port.

Accept able Fram e

Type Specify the type of frames allowed on a port. Choices are All, Tag Only and Untag

Only.

Select All from the drop-down list box to accept all untagged or tagged frames on this

port. This is the default setting.

Select Tag Only to accept only tagged frames on this port. All untagged frames will be

dropped.

Select Untag Only to accept only untagged frames on this port. All tagged frames will

be dropped. Note that when the Switch is in stacking mode and the master Switch has

VLAN1, all other ports will be configured to untagged port.

VLAN Trunking Enable VLAN Trunking on ports connected to other switches or routers (but not ports

directly connected to end users) to allow frames belonging to unknown VLAN groups to

pass through the Switch.

Isolation Select this to allows this port to communicate only with the CPU management port and

the ports on which t he isolation feature is not enabled.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turn ed off or loses power, so use the Save link on the top

navigation panel to save your changes to the non-volatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

112

subnet it came from. The untagged packets from the same IP subnet are then placed in the same

subnet based VLAN. One advantage of using subnet based VLANs is that priority can be assigned to

traffic from the same IP subnet.

Note: Subnet based VLAN applies to un-tagged packets and is applicable only when you

use IEEE 802.1Q tagged VLAN.

For example, an ISP (Internet Service Provider) may divide different types of services it provides to

customers into different IP subnets. Traffic for voice services is designated for IP subnet

172.16.1.0/24, video for 192.168.1.0/24 and data for 10.1.1.0/24. The Switch can then be

configured to group incoming traffic based on the source IP subnet of incoming frames.

You can then configure a subnet based VLAN with priority 6 and VID of 100 for traffic received from

IP subnet 172.16.1.0/24 (voice services). You can also have a subnet based VLAN with priority 5

and VID of 200 for traffic received from IP subnet 192.168.1.0/24 (video services). Lastly, you can

configure VLAN with priority 3 and VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data

services). All untagged incoming frames will be classified based on their source IP subnet and

prioritized accordingly. That is, video services receive the highest priority and data the lowest.

Figure 70 Subnet Based VLAN Application Example

7.7.3.1 Configuring Subnet Based VLAN

Click the Subnet Based VLAN Setup link in the VLAN Configuration screen to display the

configuration screen as shown.

10.1.1.0/24

192.168.1.0/24

172.16.1.0/24

Internet

VID = 100 VID = 200 VID = 300

Untagged

Frames

Tag ged Frames

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

113

Figure 71 Advanced Application > VLAN > VLAN Configuration > Subnet Based VLAN Setup

The following table describes the labels in this screen.

Ta ble 47 Advanced Application > VLAN > VLAN Configuration > Subnet Based VLAN Setup

LABEL DESCRIPTION

Active Select this check box to activate this subnet based VLANs on the Switch.

DHCP-Vlan

Override When DHCP snooping is enabled DHCP clients can renew their IP address through the DHCP

VLAN or via another DHCP server on the subnet based VLAN.

Select this chec kbox to force the DHCP client s in th is IP subn et to obtain their IP addresses

through the DHCP VLAN.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation panel to

save your changes to the non-volatile memory when you are done configuring.

Active Select this check box to activate the IP subnet VLAN you are creating or editing.

Name En ter up to 32 alphanumeric characters to identify this subnet based VLAN.

IP Enter the IP address of the subnet for which you want to configure this subnet based VLAN.

Mask-Bits Enter the bit number of the subnet mask. To find the bit number, convert the subnet mask

to binary format and add all the 1’s together. Take “255.255.255.0” for example. 255

converts to eight 1s in binary. There are three 255s, so add three eights together and you

get the bit number (24).

VID Enter the ID of a VLAN with which the untagged frames from the IP subnet specified in this

subnet based VLAN are tagged. This must be an existing VLAN which you defined in the

Advanced Application > VLAN > Static VLAN screen.

Priority Select the priority level that the Switch assigns to frames belonging to this VLAN.

Add Click this to create a new entry or to update an existing one.

This saves your changes to the Switch’s run-time memory. The Switch loses these changes

if it is turned off or loses power, so use the Save link on the top navigation panel to save

your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Index This is the index number identifying this subnet based VLAN. Click on any of these numbers

to edit an existing subnet based VLAN.

Active This field shows whether the subnet based VLAN is active or not.

Name This field shows the name the subnet based VLAN.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

114

7.7.4 Protocol Based VLANs

Protocol based VLANs allow you to group traffic into logical VLANs based on the protocol you

specify. When an upstream frame is received on a port (configured for a protocol based VLAN), the

Switch checks if a tag is added already and its protocol. The untagged packets of the same protocol

are then placed in the same protocol based VLAN. O ne advantage of using protocol based VLANs is

that priority can be assigned to traffic of the same protocol.

Note: Protocol based VLAN applies to un-tagged pack ets and is app lic able only when you

use IEEE 802.1Q tagged VLAN.

For example, ports 1, 2, 3 and 4 belong to static VLAN 100, and ports 4, 5, 6, 7 belong to static

VLAN 120. Y ou can configure a protocol based VLAN A with priority 2 for ARP traffic received on port

1, 2 and 3. You can also have a protocol based VLAN B with priority 3 for Apple Talk traffic received

on port 6 and 7. All upstream ARP traffic from port 1, 2 and 3 will be grouped together, and all

upstream Apple Talk traffic from port 6 and 7 will be in another group and have higher priorit y than

ARP traffic when they go through the uplink port to a backbone switch C.

Figure 72 Protocol Based VLAN Application Example

7.7.4.1 Configuring Protocol Based VLAN

Click the Protocol Based VLAN Setup link in the VLAN Configuration screen to display the

configuration screen as shown.

IP This field shows the IP address of the subnet for this subnet based VLAN.

Mask-Bits This field shows the subnet mask in bit number format for this subnet based VLAN.

VID This field shows the VLAN ID of the frames which belong to this subnet based VLAN.

Priority This field shows the priority which is assigned to frames belonging to this subnet based

VLAN.

Select an entry’s check box to select a specific entry. Otherwise, select the check box in the

table heading row to select all entries.

Delete Click this to delete the subnet based VLANs which you marked for deletion.

Cancel Click Cancel to clear the check boxes.

Ta ble 47 Advanced Application > VLAN > VLAN Configuration > Subnet Based VLAN Setup

LABEL DESCRIPTION

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

115

Figure 73 Advanced Application > VLAN > VLAN Configuration > Protocol Based VLAN Setup

The following table describes the labels in this screen.

Ta ble 48 Advanced Application > VLAN > VLAN Configuration > Protocol Based VLAN Setup

LABEL DESCRIPTION

Active Select this check box to activate this protocol based VLAN.

Port Type a port number to be included in this protocol based VLAN. In stacking mode, the first

box field is the slot ID and the second field is the port number.

This port must belong to a static VLAN in order to participate in a protocol based VLAN. See

Chapter 7 on page 101 for more details on setting up VLANs.

Name En ter up to 32 alphanumeric characters to identify this protocol based VLAN.

Ethernet-type Use the drop down list box to select a predefined protocol to be included in this protocol

based VLAN or select Others and type the protocol number in hexadecimal notati on. For

example, the IP protocol in hexadecimal notation is 0800, and Novell IPX protocol is 8137.

Note: Protocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be

used for protocol based VLANs.

VID Enter the ID of a VLAN to which the port belongs. This must be an existing VLAN which you

defined in the Advanced Application > VLAN > Static VLAN screen.

Priority Select the priority level that the Swit ch will assign to frames belonging to this VLAN.

Add Click this to create a new entry or to update an existing one.

This saves your changes to the Switch’s run-time memory. The Switch loses these changes

if it is turned off or loses power, so use the Save link on the top navigation panel to save

your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Index This is the index number identifying this protocol based VLAN. Click on any of these

numbers to edit an existing protocol based VLAN.

Active This field shows whether the protocol based VLAN is active or not.

Port This field shows which port belongs to this protocol based VLAN. In stacking mode, the first

number represents the slot and the second the port number.

Name This field shows the name the protocol based VLAN.

Ethernet-type This field shows which Ethernet protocol is part of this protocol based VLAN.

VID This field shows the VLAN ID of the port.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

116

7.7.4.2 Create an IP-based VLAN Example

This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. Follow these

steps using the screen below:

1Activate this protocol based VLAN.

2Ty pe the port number you want to include in this protocol based VLAN. Type 1.

3Give this protocol-based VLAN a descriptive name. Type IP-VLAN.

4Select the protocol. Leave the default value IP.

5Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with an ID

of 5. Ty pe 5.

6Leave the priority set to 0 and click Add.

Figure 74 Protocol Based VLAN Configuration Example

To add more ports to this protocol based VLAN.

1Click the index number of the protocol based VLAN entry. Click 1

2Change the value in the Port field to the next port you want to add.

3Click Add.

Priority This field shows the priority which is assigned to frames belonging to this protocol based

VLAN.

Select an entry’s check box to select a specific entry. Otherwise, select the check box in the

table heading row to select all entries.

Delete Click t his to delete the protocol based VLANs which you marked for deletion.

Cancel Click Cancel to clear the check boxes.

Ta ble 48 Advanced Application > VLAN > VLAN Configuration > Protocol Based VLAN Setup

LABEL DESCRIPTION

EXAMPLE

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

117

7.8 Port-based VLAN Setup (Standalone Mode)

Port -based VLANs are VLANs where the packet forwarding decision is based on the destination MAC

address and its associated port.

Port -based VLANs require allowed outgoing ports to be defined for each port. Therefore, if you wish

to allow two subscriber ports to talk to each other, for example, between conference rooms in a

hotel, you must define the egress (an egress port is an outgoing port, that is, a port through which

a data packet leaves) for both ports.

Port-based VLANs are specific only to the Switch on which they were created.

Note: When you activate port-based VLAN, the Swit ch uses a default VLAN ID of 1. You

cannot change it.

Note: In screens ( s uch as IP Setup and Filtering) that require a VID, you must enter 1

as the VID.

The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN with all

Ethernet ports.

7.8.1 Configure a Port-based VLAN

Select Port Based as the VLAN Type in the Switch Setup screen and then click VLAN from the

navigation panel to display the following screen. Select either All Connected or Port Isolated

from the drop-down list depending on your VLAN and VLAN security requirements. If VLAN

members need to communicate directly with each other, then select All Connected. Select Port

Isolated if you want to restrict users from communicating directly. Click Apply to save your

settings.

The following screen shows users on a port-based, all-connected VLAN configuration.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

118

Figure 75 Advanced Application > VLAN > Port Based VLAN Setup (All Connected)

The following screen shows users on a port-based, port-isolated VLAN configuration.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

119

Figure 76 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation)

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

120

The following table describes the labels in this screen.

7.9 Voice VLAN

V oice VLAN ensures that the sound qualit y of an IP phone is preserved from deterior ating when the

data traffic on the Switch ports is high. It groups the voice traffic with defined priority into an

assigned VLAN which enables the separation of voice and data traffic coming onto the Switch port.

You can set priority level to the Voice VLAN and add MAC address of IP phones from specific

manufacturers by using its ID from the Organizationally Unique Identifiers (OUI).

Click the Voice VLAN Setup link in the VLAN Configuration screen to display the configuration

screen as shown.

Ta ble 49 Advanced Application > VLAN: Port Based VLAN Setup

LABEL DESCRIPTION

Setting Wizard Choose All connected or Port isolation.

All connected means all ports can communicate with each other, that is, there are no

virtual LANs. All incoming and outgoing ports are selected. This option is the most flexible

but also the least secure.

Port isolation means that each port can only communicate with the CPU management port

and cannot communicate with each other. All incoming ports are selected while only the CPU

outgoing port is selected. This option is the most limiting but also the m o st secure.

After you make your selection , click Apply (top right of screen) to display the screens as

mentioned above. You can still customize these settings by adding/deleting incomin g or

outgoing ports, but you must also click Apply at the bottom of the screen.

Incoming These are the ingress ports; an ingress port is an incoming port, that is, a port through

which a data packet enters. If you wish to allow two subscriber ports to talk to each other,

you must define the ingress port for both ports. The numbers in the top row denote th e

incoming port for the corresponding port listed on the left (its out going port) . CPU refers to

the Switch management port. By default it forms a VLAN with all Ethernet ports. If it does

not form a VLAN with a particular port then the Switch cannot be managed from that port.

Outgoing These are the egress ports. An egress port is an outgoing port, that is, a port through which

a data packet leaves. If you wish to allow two subscriber ports to talk to each other, you

must define the egress port for both ports. CPU refers to the Switch management port. By

default it forms a VLAN with all Ethernet ports. If it does not form a VLAN with a particular

port then the Switch cannot be managed from that port.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation panel to

save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

121

Figure 77 Advanced Application > VLAN > VLAN Configuration > Voice VLAN Setup

The following table describes the fields in the above screen.

Ta ble 50 Adva nced Application > VLAN > VLAN Configuration > Voice VLAN Setup

LABEL DESCRIPTION

Voice VLAN Global Setup

Voice VLAN Click the Voice VLAN radio button if you want to enable the Voice VLAN feature.

Type a VLAN ID number in the box next to the radio button that is associated

with the Voice VLAN. Click Disable r adio button if you do not want to enable the

Voice VLAN feature.

Priority Select the pri ority level of th e Voice VLAN from 0 to 7. Default setting is 5.The

higher the numeric value you assign, the higher the priority for this Voice VLAN.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch

loses these changes if it is turned off or loses power, so use the Save link on the

top navigation panel to save your changes to the non-volatile memory when you

are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to default settings.

Voice VLAN OUI Setup

OUI address Type the IP Phon e manufacturer ’s OUI MAC address. The first three byes is the

manufacturer identifier, the last three bytes is a unique station ID.

OUI mask Ty pe the IP Phone manufacturer's OUI mask address.

Description Type an description up to 32 characters for the Voice VLAN device. For example:

Siemens.

Add Click Add to save your changes to the Switch’s run-time memory. The Switch

loses these changes if it is turned off or loses power, so use the Save link on the

top navigation panel to save your changes to the non-volatile memory when you

are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Index This field displays the index number of the Voice VLAN.

OUI address This field displays the OUI address of the Voice VLAN.

OUI mask This field displays the OUI mask address of the Voice VLAN.

Description This field displays the description of the Voice VLAN with OUI address.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

122

7.10 MAC Based VLAN

The MAC-based VLAN feature assigns incoming untagged packets to a VLAN and classifies the

traffic based on the source MAC address of the packet. When untagged pack ets arrive at the switch,

the source MAC address of the packet is looked up in a MAC to VLAN mapping table. If an entry is

found, the corresponding VLAN ID is assigned to the packet. The assigned VLAN ID is verified

against the VLAN table. If the VLAN is v alid, ingress processing on the packet continues; otherwise,

the packet is dropped.

This feature allows users to change ports without having to reconfigure the VLAN. You can assign

priority to the MAC-based VLAN and define a MAC to VLAN mapping table by entering a specified

source MAC address in the MAC-based VLAN setup screen. You can also delete a MAC-based VLAN

entry in the same screen.

Click the MAC-based VLAN Setup link in the VLAN Configuration screen to see the following

screen.

Figure 78 Advanced Application > VLAN > VLAN Configuration > MAC-based VLAN Setup

The following table describes the fields in the above screen.

Select an entry’s check box to select a specific entry. Otherwise, select the check

box in the table heading row to select all entries.

Delete Click Delete to remove the selected entry from the summary table.

Cancel Click Cancel to clear the check boxes.

Ta ble 50 Adva nced Application > VLAN > VLAN Configuration > Voice VLAN Setup

LABEL DESCRIPTION

Ta ble 51 Advanced Application > VLAN > VLA N Configuration > MAC-based VLAN Setup

LABEL DESCRIPTION

Name Type a name up to 32 alpha numeric characters for the MAC-based VLAN entry.

MAC Address Type a MAC address that is bind to the MAC-based VLAN e ntry. This is the source

MAC address of the data packet that is looked up when untagged pack ets arriv e

at the Switch.

VID Type an ID (from 1 to 4094) for the VLAN ID that is associated with the MAC-

based VLAN entry.

Chapter 7 VLAN

GS3700/XGS3700 Series User’s Guide

123

Priority Type a priority (0-7) for the MAC-based VLAN entry .The higher the numeric value

you assign, the higher the priority for this MAC-based VLAN entry.

Add Click Add to save the new MAC-based VLAN entry.

Cancel Click Cancel to clear the fields in the MAC-based VLAN en try.

Index This field displays the index number of the MAC-based VLAN entry.

Name This field displays the name of the MAC-based VLAN entry.

MAC Address This field displays the source MAC address that is bind to the MAC-based VLAN

entry.

VID This field displays the VLAN ID of the MAC-based VLAN entry.

Priority This field displays the priority level of the MAC-based VLAN entry.

Select an entry’s check box to select a specific entry. Otherwise, select the check

box in the table heading row to select all entries.

Delete Click Delete to remove the selected entry from the summary table.

Cancel Click Cancel to clear the check boxes.

Ta ble 51 Advanced Application > VLAN > VLA N Configuration > MAC-based VLAN Setup

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

124

CHAPTER 8

Static MAC Forward Setup

Use these screens to configure static MAC address forwarding.

8.1 Overview

This chapter discusses how to configure forwarding rules based on MAC addresses of devices on

your network.

8.2 Configuring Static MAC Forwarding

A static MAC address is an address that has been manually entered in the MAC address table. Static

MAC addresses do not age out. When you set up static MAC address rules, you are setting static

MAC addresses for a port. This may reduce the need for broadcasting.

Static MAC address forwarding together with port security allows only computers in the MAC

address table on a port to access the Switch. See Chapter 17 on page 195 for more information on

port security.

Click Advanced Application > Static MAC Forwarding in the navigation panel to display the

configuration screen as shown.

Figure 79 Advanced Application > Static MAC Forwarding (Standalone mode)

Chapter 8 Static MAC Forward Setup

GS3700/XGS3700 Series User’s Guide

125

Figure 80 Advanced Application > Static MAC Forwarding (Stacking mode)

The following table describes the labels in this screen.

Ta ble 52 Advanced Application > Static MAC Forwarding

LABEL DESCRIPTION

Active Select this check box to activate your rule. You may temporarily deactivate a rule without

deleting it by clearing this check box.

Name Enter a descriptive name for identification purposes for this static MAC address forwarding

rule.

MAC Address Enter the MAC address in valid MAC address format, that is, six hexadecimal character

pairs.

Note: Static MAC addresses do not age out.

VID Enter the VLAN identification number.

Port(standalone

or stacking

mode)

Enter the port where the MAC address entered in the previous field will be automatically

forwarded. In stacking mode, the first box field is the slot ID and the second field is the

port number.

Add Click this to create a new entry or to update an existing one.

This saves your rule to the Switch’s run-time memory. The Switch loses this rule if it is

turned off or loses power, so use the Save link on the top navigation panel to save your

changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index Click an index number to modify a static MAC address rule for a port.

Active This field disp lays whether this static MAC address forwarding rule is active (Yes) or not

(No). Yo u may temporarily deactivate a rule without deleting it.

Name This field displays the descriptive name for identification purposes for this static MAC

address-forwarding rule.

MAC Address This field displays the MAC address that will be forwarded and the VLAN identification

number to which the MAC address belongs.

VID This field displays the ID number of the VLAN group.

Port This field displays the port where the MAC address shown in the next field will be

forwarded. In stacking mode, the first number represents the slot an d the se cond th e port

number.

Select an entry’ s check box to select a specific entry. Otherwise, select the check box in the

table heading row to select all entries.

Chapter 8 Static MAC Forward Setup

GS3700/XGS3700 Series User’s Guide

126

Delete Click Delete to remove the selected entry from the summary table.

Cancel Click Cancel to clear the check boxes.

Ta ble 52 Advanced Application > Static MAC Forwarding (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

127

CHAPTER 9

Static Multicast Forward Setup

Use these screens to configure static multicast address forwarding.

9.1 Static Multicast Forwarding Overview

A multicast MAC address is the MAC address of a member of a multicast group. A static multicast

address is a multicast MAC address that has been manually entered in the multicast table. Static

multicast addresses do not age out. Static multicast forwarding allows you (the administrator) to

forward multicast frames to a member without the member having to join the group first.

If a multicast group has no members, then the switch will either flood the multicast frames to all

ports or drop them. You can configure this in the Advanced Applicatio n > Multicast > IPv4

Multicast > IGMP Snooping screen (see Section 23.3.1 on page 230). Figure 81 shows such

unknown multicast frames flooded to all ports. With static multicast forwarding, you can forward

these multicasts to port(s) within a VLAN group. Figure 82 shows frames being forwarded to

device s co nnec ted t o po rt 3 . Figure 83 shows fr ames being forwarded to ports 2 and 3 within VLAN

group 4.

Figure 81 No Static Multicast Forwarding

Figure 82 Static Multicast Forwarding to A Single Po rt

Chapter 9 Static Multicast Forward Setup

GS3700/XGS3700 Series User’s Guide

128

Figure 83 Static Multicast Forwarding to Multiple Ports

9.2 Configuring Static Multicast Forwarding

Use this screen to configure rules to forward specific multicast fr ames, such as streaming or control

frames, to specific port(s).

Click Advanced Application > Static Multicast Forwarding to display the configuration screen

as shown.

Figure 84 Advanced Application > Static Multicast Forwarding

The following table describes the labels in this screen.

Ta ble 53 Advanced Application > Static Multicast Forwarding

LABEL DESCRIPTION

Active Select this check box to activate your rule. You may temporarily deactivate a rule without

deleting it by clearing this check box.

Name Type a descriptive name (up to 32 printable ASCII characters) for this static multicast MAC

address forwarding rule. This is for identification only.

MAC Address Enter a multicast MAC address which identifies the multicast group. The last binary bit of

the first octet pair in a multicast MAC address must be 1. For example, the first octet pair

00000001 is 01 and 00000011 is 03 in hexadecimal, so 01:00:5e:00:00:0A and

03:00:5e:00:00:27 are valid multicast MAC addresses.

VID You can forward frames with matching destination MAC address to port(s) within a VLAN

group. Enter the ID that identifies the VLAN group here. If you don’t have a specific target

VLAN, enter 1.

Chapter 9 Static Multicast Forward Setup

GS3700/XGS3700 Series User’s Guide

129

Port Enter the port(s) where frames with destination MAC address that matched the entry above

are forwarded. You can enter multiple ports separated by (no space) comma (,) or hyphen

for a range. F or example, enter “3-5” for ports 3, 4, and 5. En ter “3,5,7 ” for ports 3, 5, and

In stacking mode, the first number represents the slot and the second the port number.

Enter 1/1-1/24,2/28 for ports 1 to 24 for the Switch in slot 1 and port 28 for the Switch in

slot 2, for example.

Add Click this to create a new entry or to update an existing one.

This saves your rule to the Switch’s run-time memory. The Switch loses this rule if it is

turned off or loses power, so use the Save link on the top navigation panel to save your

changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to reset the fields to their last saved values.

Clear Click Clear to reset the fields to the factory defaults.

Index Click an index number to modify a static multicast MAC address rule for port(s).

Active This field displa ys whether a static multicast MAC address forwarding rule is active (Yes) or

not (No). You may temporarily deactivate a rule without deleting it.

Name This field displays the desc riptive name for id entification purposes for a static multicast MAC

address-forwarding rule.

MAC Address This field displays the multicast MAC address that identifies a multicast group.

VID This field displays the ID number of a VLAN group to which frames containing the specified

multicast MAC address will be forwarded.

Port This field displays the port(s) within a ide ntified VLAN group to whi ch fr ames c ontaining the

specified multicast MAC address will be forwarded.

Select an entry’s check box to sel ect a spe cific ent ry. Otherwise, sel ect the c heck box i n the

table heading row to select all entries.

Delete Click Delete to remove the selected entry from the summary table.

Cancel Click Cancel to clear the check boxes.

Ta ble 53 Advanced Application > Static Multicast Forwarding (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

130

CHAPTER 10

Filtering

This chapter discusses MAC address port filtering.

10.1 Configure a Filtering Rule

Configure the Switch to filter tr affic based on the tr affic’ s source, destination MAC addresses and/or

VLAN group (ID).

Click Advanced Application > Filtering in the navigation panel to display the screen as shown

next.

Figure 85 Advanced Application > Filtering

The following table describes the related labels in this screen.

Ta ble 54 Advanced Application > FIltering

LABEL DESCRIPTION

Active Make sure to select this check box to activate y our rule. Y ou m ay temporaril y deactivate a rul e

without deleting it by deselecting this check box.

Name Type a descriptive name (up to 32 printable ASCII characters) for this rule. This is for

identifica tion only.

Chapter 10 Filtering

GS3700/XGS3700 Series User’s Guide

131

Action Select Discard source to drop frames from the source MAC address (specified in the MAC

field). The Switch can still send frames to the MAC address.

Select Discard destination to drop frames to the destination MAC address (specified in the

MAC address). The Switch can still receive frames originating from the MAC address.

Select Discard source and Disc ard destination to block traffic to/from the MAC address

specified in the MAC field.

MAC Type a MAC address in a valid MAC address format, that is, six hexadecimal character pairs.

VID Type the VLAN group identification number.

Add Click this to create a new entry or to update an existing one.

This saves your changes to the Switch’s run-time memory. The Switch loses these changes if

it is turned off or loses power, so use the Save link on the top navigation panel to save your

changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This field displays the index number of the rule. Click an index number to change th e settings.

Active This field displays Yes when the rule is activated and No when is it deactivated.

Name This field displays the descriptive name for this rule. This is for identification purposes only.

MAC Address This field displays the source/dest ination MAC addr ess with the VLAN ident ification number t o

which the MAC address belongs.

VID This field displays the VLAN group identification number.

Action This field displays Discard source, Discard destination, or Discard both depending on

what you configured above.

Select an entry’s check box to select a specific entry. Otherwise, select the check box in the

table heading row to select all entries.

Delete Check the rule(s) th at you want to remove and then click the Delete button.

Cancel Click Cancel to clear the selected checkbox(es).

Ta ble 54 Advanced Application > FIltering (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

132

CHAPTER 11

Spanning Tree Protocol

The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and

Multiple Spanning Tree Protocol (MSTP) as defined in the following standards.

• IEEE 802.1D Spanning Tree Protocol

• IEEE 802.1w Rapid Spanning Tree Protocol

• IEEE 802.1s Multiple Spanning Tree Protocol

The Switch also allows you to set up multiple STP configurations (or trees). Ports can then be

assigned to the trees.

11.1 STP/RSTP Overview

(R)STP detects and breaks netw ork loops and provides backup links between switches, bridges or

routers. It allows a Switch to interact with other (R)STP-compliant switches in your network to

ensure that only one path exists between any two stations on the network.

The Switch uses IEEE 802.1w RSTP (Rapid Spanning Tree Protocol) that allows faster convergence

of the spanning tree than STP (while also being backwards compatible with STP-only aware

bridges). In RSTP, topology change information is directly propagated throughout the network from

the device that generates the topology ch ange. In STP, a longer delay is required as the device that

causes a topology change first notifies the root bridge and then the root bridge notifies the

network. Both RSTP and STP flush unwanted learned addresses from the filtering database. In

RSTP, the port states are Discarding, Learning, and Forwarding.

Note: In this user’s guide, “STP” refers to both STP and RSTP.

11.1.1 STP Terminology

The root bridge is the base of the spanning tree.

Path cost is the cost of transmitting a frame onto a LAN through that port. The recommended cost

is assigned according to the speed of the link to which a port is attached. The slower the media, the

higher the cost.

Ta ble 55 STP Path Costs

LINK SPEED RECOMMENDED

VALUE RECOMMENDED

RANGE ALLOWED RANGE

Path Cost 4Mbps 250 100 to 1000 1 to 65535

Path Cost 10Mbps 100 50 to 600 1 to 65535

Path Cost 16Mbps 62 40 to 400 1 to 65535

Path Cost 100Mbps 19 10 to 60 1 to 65535

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

133

On each bridge, the bridge communicates with the root through the root port. The root port is the

port on this Switch with the lowest path cost to the root (the root path cost). If there is no root

port, then this Switch has been accepted as the root bridge of the spanning tree network.

For each LAN segment, a designated bridge is selected. This bridge has the lowest cost to the root

among the bridges connected to the LAN.

11.1.2 How STP Works

After a bridge determines the lowest cost-spanning tree with STP, it enables the root port and the

ports that are the designated ports for connected LANs, and disables all other ports that participate

in STP. Network packets are therefore only forwarded between enabled ports, eliminating any

possible network loops.

STP-aware switches exchange Bridge Protocol Data Units (BPDUs) periodically. When the bridged

LAN topology changes, a new spanning tree is constructed.

Once a stable network topology has been established, all bridges listen for Hello BPDUs (Bridge

Protocol Data Units) transmitted from the root bridge. If a bridge does not get a Hello BPDU after a

predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This

bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a

valid network topology.

11.1.3 STP Port States

STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly

from blocking state to forwarding state so as to eliminate transient loops.

11.1.4 Multiple RSTP

MRSTP (Multiple RSTP) is ZyXEL’s proprietary feature that is compatible with RSTP and STP. With

MRSTP, you can have more than one spanning tree on y our S witch and assign port(s) to each tree.

Each spanning tree operates independently with its own bridge information.

Path Cost 1Gbps 4 3 to 10 1 to 65535

Path Cost 10Gbps 2 1 to 5 1 to 65535

Ta ble 55 STP Path Costs

LINK SPEED RECOMMENDED

VALUE RECOMMENDED

RANGE ALLOWED RANGE

Ta ble 56 STP Port States

PORT STATE DESCRIPTION

Disabled STP is disabled (default).

Blocking Only configuration and manageme nt BPDUs are received and processed.

Listening All BPDUs are received and processed.

Note: The listening state does not exist in RSTP.

Learning All BPDUs are received and processed. Information frames are submitted to the learning

process but not forwarded.

Forwarding All BPDUs are received and processed. All information frames are received and forwarded.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

134

In the following examp le, there are two RSTP instances (MRSTP1 and MRSTP2) on switch A.

Figure 86 MRSTP Network Example

To set up MRSTP, activate MRSTP on the Switch and specify which port(s) belong to which spanning

tree.

Note: Each port can belong to one STP tree only.

11.1.5 Multiple STP

Multiple Spanning Tree Protocol (IEEE 802.1s) is backwards compatible with STP/RSTP and

addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include

the following features:

• One Common and Internal Spanning Tree (CIST) that represents the entire network’s

connectivity.

• Grouping of multiple bridges (or switching devices) into regions that appear as one single bridge

on the network.

• A VLAN can be mapped to a specific Multiple Spanning Tree Instance (MSTI). MSTI allows

multiple VLANs to use the same spanning tree.

• Load-balancing is possible as traffic from different VLANs can use distinct paths in a region.

11.1.5.1 MSTP Network Example

The following figure shows a network example where two VLANs are configured on the two

switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP

allow only one link in the network and block the redundant link.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

135

Figure 87 STP/RSTP Network Example

With MSTP, VLANs 1 and 2 are mapped to different spanning trees in the network. Thus traffic fro m

the two VLANs travel on different paths. The following figure shows the network example using

MSTP.

Figure 88 MSTP Network Example

11.1.5.2 MST Region

An MST region is a logical grouping of multiple network devices that appears as a single device to

the rest of the network. Each MSTP-enabled device can only belong to one MST region. When

BPDUs enter an MST region, external path cost (of paths outside this region) is increased by one.

Internal path cost (of paths within this region) is increased by one when BPDUs trav erse the region.

Devices that belong to the same MST region are configured to have the same MSTP configuration

identification settings. These include the following parameters:

• Name of the MST region

• Revision level as the unique number for the MST region

• VLAN-to-MST Instance mapping

VLAN 1 VLAN 2

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

136

11.1.5.3 MST Instance

An MST Instance (MSTI) is a spanning tree instance. VLANs can be configured to run on a specific

MSTI. Each created MSTI is identified by a unique number (known as an MST ID) known internally

to a region. Thus an MSTI does not span across MST regions.

The following figure shows an example where there are two MST regions. Regions 1 and 2 have 2

spanning tree instances.

Figure 89 MSTIs in Different Regions

11.1.5.4 Common and Internal Spanning Tree (CIST)

A CIST represents the connectivity of the entire network and it is equivalent to a spanning tree in

an STP/RSTP. The CIST is the default MST instance (MSTID 0). Any VLANs that are not members of

an MST instance are members of the CIST. In an MSTP-enabled network, there is only one CIST

that runs between MST regions and single spanning tree devices. A network may contain multiple

MST regions and other network segments running RSTP.

Figure 90 MSTP and Legacy RSTP Network Example

11.2 Spanning Tree Protocol Status Screen

Click Advanced Application > Spanning Tree Protocol to see the screen as shown.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

137

Figure 91 Advanced Application > Spanning Tree Protocol (Standalone mode)

Figure 92 Advanced Application > Spanning Tree Protocol (Stacking mode)

This screen differs depending on which STP mode (RSTP, MRSTP or MSTP) you configure on the

Switch. This screen is described in detail in the section that follows the configuration section for

each STP mode. Click Configuration to activate one of the STP standards on the Switch.

11.3 Spanning Tree Configuration

Use the Spanning Tree Configuration screen to activate one of the STP modes on the Switch.

Click Configuration in the Advanced Application > Spanning Tree Protocol.

Figure 93 Advanced Application > Spanning Tree Protocol > Configuration

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

138

The following table describes the labels in this screen.

11.4 Configure Rapid Spanning Tree Protocol

Use this screen to configure RSTP settings, see Section 11.1 on page 132 for more information on

RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen.

Figure 94 Advanced Application > Spanning Tree Protocol > RSTP (Standalone mode)

Ta ble 57 Advanced Application > Spanning Tree Protocol > Configuration

LABEL DESCRIPTION

Spanning Tree

Mode You can activate one of the STP modes on the Switch.

Select Rapid Spanning Tree, Multip le Rapid Spanni ng Tree or Multiple S panning

Tree. See Section 11.1 on page 132 for background information on STP.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Swit ch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the non-volatile memory when you are don e

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

139

Figure 95 Advanced Application > Spanning Tree Protocol > RSTP (Stacking mode)

The following table describes the labels in this screen.

Ta ble 58 Advanced Application > Spanning Tree Protocol > RSTP

LABEL DESCRIPTION

Status Click Status to display the RSTP Status screen (see Figure 96 on page 141).

Active Select this check box to activate RSTP. Clear this checkbox to disable RSTP.

Note: You must also activate Rapid Sp anning Tree in the Advanced Application >

Spanning Tree Protocol > Configuration screen to enable RSTP on the Switch.

Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The

switch with the hi ghest priority (l owest numeric v alue) becomes the STP root swi tch. If all

switches have the same priority, the switch with the lowest MAC address will then become

the root switch. Select a value from the drop-dow n list box.

The lower the numeric value you assign, the higher the priority for this bridge.

Bridge Priority determines the root bridge, which in turn determines Hello Time, Max Age

and Forwarding Delay.

Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units)

configuration message generations by the root switch. The allowed range is 1 to 10

seconds.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

140

Max Age This is the maximum time (in seconds ) a switch can wai t without receivi ng a BPDU before

attempting to reconfigure. All switch ports (except for designated ports) should receive

BPDUs at regular intervals. Any port that ages out STP information (provided in the last

BPDU) becomes the designated port for the attached LAN. If it is a root port, a new root

port is selected from among the switch ports attached to the network. The allowed range

is 6 to 40 seconds.

Forwarding Delay This is the maximum time (in seconds) a switch will wait before changing states. This

delay is required because every switch must receive information about topology changes

before it starts to forward frames. In addition, each port needs time to listen for

conflicting information that would make it return to a blocking state; otherwise,

temporary data loops might result. The allowed range is 4 to 30 seconds.

As a general rule:

Note: 2 * (Forward Delay - 1) >= Max Age >= 2 * (Hello Time + 1)

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Stan dalone

and stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Active Select this check box to activate RSTP on this port.

Edge Select this check box to configure a port as an edge port when it is directly attached to a

computer. An edge port changes its initial STP port state from blocking state to forw arding

state immediately without going through listening and learning states right after the port

is configured as an edge port or when its link st atus changes.

Note: An edge port becomes a non-edge port as soon as it receives a Bridge Protocol Data

Unit (BPDU).

Root Guard

(Standalone

mode)

Select this check box to enable root guard on this port in order to prevent the switch(es)

attached to the port from becoming the root bridge.

With root guard enabled, a port is blocked when the Switch receives a superior BPDU on

it. The Switch allows traffic to pass through this port again when the switc h connected to

the port stops to send superior BPDUs.

Priority Configure the priority for each port here.

Priority decides which port should be disabled when more than one port forms a loop in a

switch. Ports with a higher priority numeric value are disabled first. The allowed range is

between 0 and 255 and the default value is 128.

Path Cost Path cost is the cost of transmitting a frame on to a LAN through that port. It is

recommended to assign this value according to the speed of the bridge. The slower the

media, the higher the cost - see Table 55 on page 132 for more information.

Apply Click Apply to save your changes to t he Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this scre en afresh.

Ta ble 58 Advanced Application > Spanning Tree Protocol > RSTP (continued)

LABEL DESCRIPTION

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

141

11.5 Rapid Spanning Tree Protocol Status

Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the

status screen as shown next. See Section 11.1 on page 132 for more information on RSTP.

Note: This screen is only available after you activate RSTP on the Switch.

Figure 96 Advanced Application > Spanning Tree Protocol > Status: RSTP

The following table describes the labels in this screen.

Ta ble 59 Advanced Application > Spanning Tree Protocol > Status: RSTP

LABEL DESCRIPTION

Configuration Click Configuration to specif y which STP mode you want to activate. Click RSTP to edit

RSTP settings on the Switch.

Bridge Root refers to the base of the spanning tree (the root bridge). Our Bridge is this S witch.

This Switch may also be the root bridge.

Bridge ID This is the unique identifier for this bridge, consisting of the bridge priority plus the MAC

address. This ID is the same for Root and Our Bridge if the Switch is the root switch.

Hello Time

(second) This is the time interval (in seconds) at which the root switch transmits a configu ration

message. The root bridge determines H e llo Time, Max Age and Forwarding Delay.

Max Age (second) This is the maximum time (in seconds) a switch can wait without receiving a

configurati on message before attempting to reconfigure.

Forwarding Delay

(second) This is the time (in seconds) the root switch will wait before changing states (that is,

listening to learning to forwarding). See Section 11.1.3 on page 133 for information on

port states.

Note: The listening state does not exist in RSTP.

Cost to Bridge This is the path cost from the root port on this Switch to the root switch.

Port ID This is the priority and number of the port on the Switch through which this Switch must

communicate with the root of th e Spanning Tr ee.

T opology Changed

Times This is the number of times the spanning tree has been reconfigured.

Time Since Last

Change This is the time since the spanning tree was last reconfigured.

Port This field displays the number of the port on the Switch.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

142

11.6 Configure Multiple Rapid Spanning Tree Protocol

To configure MRSTP, click MRSTP in the Advanced Application > Spanning Tree Protocol

screen. See Section 11.1 on page 132 for more information on MRSTP.

Port State This field d isplays the port state in STP.

•Discarding - The port does not forward/process received frames or learn MAC

addresses, but still listens for BPDUs.

•Learning - The port learns MAC addresses and processes BPDUs, but does not

forward frames yet.

•Forwarding - The port is operating normally. It learns MAC addresses, processe s

BPDUs and forwards received frames.

Port Role This field displays the role of the port in STP.

•Root - A forw arding port o n a non-root bridge , which has the lowest path cost and is

the best port from the non-root bridge to the root bridge. A root bridge do es not hav e

a root port.

•Designated - A forwarding port on the designated bridge for each connected LAN

segment. A designated bridge has the lowest path cost to the root bridge among the

bridges connected to the LAN segment. All the ports on a root bridge (root switch) are

designated ports.

•Alternate - A blocked port, which has a best alternate path to the root bridge. This

path is different from using the root port. The port moves to the forwarding state

when the designated port for the LAN segment fails.

•Backup - A blocked port, which has a backup/redundant path to a LAN segment

where a designated port is already connected when a switch has two links to the

same LAN segment.

•Disabled - Not strictly part of STP. The port can be disabled manually.

Designated Bridge

ID This field displays the identifi er of the designated bridge to which this port belongs when

the port is a designated port. Otherwise , it displays the ide ntifier of the designated bridge

for the LAN segment to which this port is connected.

Designated Port

ID This field displays the priority and number of the bridge port (on the designated bridge),

through which the designat ed bridge transmits the stored configuration messages.

Designated Cost This field displays the path cost to the LAN segment to which the port is connected when

the port is a designated port. Otherwise, it displays the path cost to the root bridge from

the designated port for the LAN segament to which this port is connected,

Root Guard State

(Standalone

mode)

This field displays the state of the port on which root guard is enabled.

•Root-inconsistent - the Switch receives superior BPDUs on the port and blocks the

port.

•Forwarding - the Switch unbolcks and allows the port to forward frames again.

Ta ble 59 Advanced Application > Spanning Tree Protocol > Status: RSTP (continued)

LABEL DESCRIPTION

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

143

Figure 97 Advanced Application > Spanning Tree Protocol > MRSTP (Standalone mode)

Figure 98 Advanced Application > Spanning Tree Protocol > MRSTP (Stacking mode)

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

144

The following table describes the labels in this screen.

Ta ble 60 Advanced Application > Spanning Tree Protocol > MRSTP

LABEL DESCRIPTION

Status Click Status to display the MRSTP Status screen (see Figure 99 on page 145).

Tree This is a read only index number of the STP t r ees.

Active Select thi s check box to activate an STP tree. Clear this checkbox to disable an STP tree.

Note: You must also activate Multiple Rapid Sp anning T ree in the Advanced Application

> S panning Tree Protocol > Conf iguration screen to enable MRSTP on the Switch.

Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The

switch with the hi ghest priority (l owest numeric v alue) becomes the STP root swi tch. If all

switches have the same priority, the switch with the lowest MAC address will then become

the root switch. Select a value from the drop-dow n list box.

The lower the numeric value you assign, the higher the priority for this bridge.

Bridge Priority determines the root bridge, which in turn determines Hello Time, Max Age

and Forwarding Delay.

Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units)

configuration message generations by the root switch. The allowed range is 1 to 10

seconds.

Max Age This is the maximum time (in seconds ) a switch can wai t without receivi ng a BPDU before

attempting to reconfigure. All switch ports (except for designated ports) should receive

BPDUs at regular intervals. Any port that ages out STP information (provided in the last

BPDU) becomes the designated port for the attached LAN. If it is a root port, a new root

port is selected fr om among the Sw itch port s attach ed to t he network. Th e allowed range

is 6 to 40 seconds.

Forwarding Delay This is the maximum time (in seconds) a switch will wait before changing states. This

delay is required because every switch must receive information about topology changes

before it starts to forward frames. In addition, each port needs time to listen for

conflicting information that would make it return to a blocking state; otherwise,

temporary data loops might result. The allowed range is 4 to 30 seconds.

As a general rule:

Note: 2 * (Forward Delay - 1) >= Max Age >= 2 * (Hello Time + 1)

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Stan dalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box fiel d is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Active Select this check box to activate STP on this port.

Edge Select this check box to configure a port as an edge port when it is directly attached to a

computer. An edge port changes its initial STP port state from blocking state to forw arding

state immediately without going through listening and learning states right after the port

is configured as an edge port or when its link st atus changes.

Note: An edge port becomes a non-edge port as soon as it receives a Bridge Protocol Data

Unit (BPDU).

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

145

11.7 Multiple Rapid Spanning Tree Protocol Status

Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the

status screen as shown next. See Section 11.1 on page 132 for more information on MRSTP.

Note: This screen is only available after you activate MRSTP on the Switch.

Figure 99 Advanced Application > Spanning Tree Protocol > Status: MRSTP

Root Guard

(Standalone

mode)

Select this check box to enable root guard on this port in order to prevent the switch(es)

attached to the port from becoming the root bridge.

With root guard enabled, a port is blocked when the Switch receives a superior BPDU on

it. The Switch allows traffic to pass through this port again when the switc h connected to

the port stops to send superior BPDUs.

Priority Configure the priority for each port here.

Priority decides which port should be disabled when more than one port forms a loop in

the Switch. Ports with a higher priority numeric value are disabled first. The allowed range

is between 0 and 255 and the default value is 128.

Path Cost Path cost is the cost of transmitting a frame on to a LAN through that port. It is

recommended that you assign this value according to the speed of the bridge. The slower

the media, the higher the cost - see Table 55 on page 132 for more information.

Tree Select which STP tree configuration this port shou ld participate in .

Apply Click Apply to save your changes to t he Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this scre en afresh.

Ta ble 60 Advanced Application > Spanning Tree Protocol > MRSTP (continued)

LABEL DESCRIPTION

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

146

The following table describes the labels in this screen.

Ta ble 61 Advanced Application > Spanning Tree Protocol > Status: MRSTP

LABEL DESCRIPTION

Configuration Click Configuration to specify which STP mode you want to activate. Click MRSTP to

edit MRSTP settings on the Switch.

Tree Select which STP tree configuration you want to view.

Bridge Root refers to the base of the spanning tree (the root bridge). Our Bridge is this S witch.

This Switch may also be the root bridge.

Bridge ID This is the unique identifier for this bridge, consisting of bridge priority plus MAC address.

This ID is the same for Root and Our Bridge if the Switch is the root switch.

Hello Time

(second) This is the time interval (in seconds) at which the root switch transmits a configu ration

message. The root bridge determines H e llo Time, Max Age and Forwarding Delay.

Max Age (second) This is the maximum time (in seconds) a switch can wait without receiving a

configurati on message before attempting to reconfigure.

Forwarding Delay

(second) This is the time (in seconds) the root switch will wait before changing states (that is,

listening to learning to forwarding).

Note: The listening state does not exist in RSTP.

Cost to Bridge This is the path cost from the root port on this Switch to the root switch.

Port ID This is the priority and number of the port on the Switch through which this Switch must

communicate with the root of th e Spanning Tr ee.

T opology Changed

Times This is the number of times the spanning tree has been reconfigured.

Time Since Last

Change This is the time since the spanning tree was last reconfigured.

Port This field displays the number of the port on the Switch.

Port State This field displays the port state in STP.

•Discarding - The port does not forward/process received frames or learn MAC

addresses, but still listens for BPDUs.

•Learning - The port learns MAC addresses and processes BPDUs, but does not

forward frames yet.

•Forwarding - The port is operating normally. It learns MAC addresses, processe s

BPDUs and forwards received frames.

Port Role This field displays the role of the port in STP.

•Root - A forw arding port o n a non-root bridge , which has the lowest path cost and is

the best port from the non-root bridge to the root bridge. A root bridge do es not hav e

a root port.

•Designated - A forwarding port on the designated bridge for each connected LAN

segment. A designated bridge has the lowest path cost to the root bridge among the

bridges connected to the LAN segment. All the ports on a root bridge (root switch) are

designated ports.

•Alternate - A blocked port, which has a best alternate path to the root bridge. This

path is different from using the root port. The port moves to the forwarding state

when the designated port for the LAN segment fails.

•Backup - A blocked port, which has a backup/redundant path to a LAN segment

where a designated port is already connected when a switch has two links to the

same LAN segment.

•Disabled - Not strictly part of STP. The port can be disabled manually.

Designated Bridge

ID This field displays the identifi er of the designated bridge to which this port belongs when

the port is a designated port. Otherwise , it displays the ide ntifier of the designated bridge

for the LAN segment to which this port is connected.

Designated Port

ID This field displays the priority and number of the bridge port (on the designated bridge),

through which the designat ed bridge transmits the stored configuration messages.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

147

11.8 Configure Multiple Spanning Tree Protocol

To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen.

See Section 11.1.5 on page 134 for more information on MSTP.

Designated Cost This field displays the path cost to the LAN segment to which the port is connected when

the port is a designated port. Otherwise, it displays the path cost to the root bridge from

the designated port for the LAN segament to which this port is connected.

Root Guard State

(Standalone

mode)

This field displays the state of the port on which root guard is enabled.

•Root - inconsistent - the Switch receives superior BPDUs on the port and blocks the

port.

•Forwarding - the Switch unbolcks and allows the port to forward frames again.

Ta ble 61 Advanced Application > Spanning Tree Protocol > Status: MRSTP (continued)

LABEL DESCRIPTION

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

148

Figure 100 Advanced Application > Spanning Tree Protocol > MSTP (Standalone mode)

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

149

Figure 101 Advanced Application > Spanning Tree Protocol > MSTP (Stacking mode)

The following table describes the labels in this screen.

Ta ble 62 Advanced Application > Spanning Tree Protocol > MSTP

LABEL DESCRIPTION

Status Click Status to display the MSTP Status sc reen (see Figure 104 on page 154).

Active Select this check box to activ ate MSTP on the S witch. Clear this ch eckbox to disable MSTP

on the Switch.

Note: You must also activate Multiple Spanning Tree in the Advanced Application >

Spanning Tree Protocol > Configuration screen to enable MSTP on the Switch.

Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units)

configuration message generations by the root switch. The allowed range is 1 to 10

seconds.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

150

MaxAge This is the maximum time (in seconds) a switch can wait wit hout receiving a BPDU before

attempting to reconfigure. All switch ports (except for designated ports) should receive

BPDUs at regular intervals. Any port that ages out STP information (provided in the last

BPDU) becomes the designated port for the attached LAN. If it is a root port, a new root

port is selected fr om among the Sw itch port s attach ed to t he network. Th e allowed range

is 6 to 40 seconds.

Forwarding Delay This is the maximum time (in seconds) a switch will wait before changing states. This

delay is required because every switch must receive information about topology changes

before it starts to forward frames. In addition, each port needs time to listen for

conflicting information that would make it return to a blocking state; otherwise,

temporary data loops might result. The allowed range is 4 to 30 seconds. As a general

rule:

Note: 2 * (Forward Delay - 1) >= Max Age >= 2 * (Hello Time + 1)

Maximum hops Enter the number of hops (between 1 and 255) in an MSTP region before the BPDU is

discarded and the port information is aged.

Configuration

Name Enter a descriptive name (up to 32 characters) of an MST region.

Revision Number Enter a number to identify a region’s configuration. Devices must have the same revision

number to belong to the same region.

Apply Click Apply to save your changes to t he Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this scre en afresh.

Instance Use this section to configure MSTI (Multiple Spanning Tree Instance) settings.

Instance Enter the number you want to use to identify this MST instance on the Switch. The Switch

supports instance numbers 0-16.

Bridge Priority Set the priority of the Switch for the specific spanning tree instance. The lower the

number, the more likely the Switch will be chosen as the root bridge within the spanning

tree instance.

Enter priority values between 0 and 61440 in increments of 4096 (thus valid values are

4096, 8192, 12288, 16384, 20480, 24576, 286 72, 32768, 36864 , 40960, 450 56, 49152,

53248, 57344 and 61440).

VLAN Range Enter the start of the VLAN ID range that you want to add or remove from the VLAN range

edit area in the Start field. Enter the end of the VLAN ID range that you want to add or

remove from the VLAN range edit area in the End field.

Next click:

•Add - to add this range of VLAN(s) to be mapped to the MST instance.

•Remove - to remove this range of VLAN(s) from being mapped to the MST instance.

•Clear - to remove all VLAN(s) from being mapped to this MST instance.

Enabled VLAN(s) This field displays which VLAN(s) are mapped to this MST instance.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Stan dalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box fiel d is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Ta ble 62 Advanced Application > Spanning Tree Protocol > MSTP (continued)

LABEL DESCRIPTION

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

151

11.8.1 Multiple Spanning Tree Protocol Port Configuration

To configure MSTP ports, click Port in the Advanced Application > Spanning Tree Protocol >

MSTP screen.

Active Select this check box to add this port to the MST instance.

Priority Configure the priority for each port here.

Priority decides which port should be disabled when more than one port forms a loop in

the Switch. Ports with a higher priority numeric value are disabled first. The allowed range

is between 0 and 255 and the default value is 128.

Path Cost Path cost is the cost of transmitting a frame on to a LAN through that port. It is

recommended to assign this value according to the speed of the bridge. The slower the

media, the higher the cost - see Table 55 on page 132 for more information.

Add Click this to create a new entry or to update an existing one.

This sav es yo ur changes to the S witch’s run-time memory. The Switch loses this ch ange if

it is turned off or loses power, so use the Save link on the top navigation panel to save

your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this scre en afresh.

Instance This field displays the ID of an MST instance.

VLAN This field displays the VID (or VID ranges) to which the MST instance is mapped.

Active Port This field display the ports configured to participate in the MST instance.

Select an entry’s check box to select a s pecific entry.

Delete Check the rule(s) that you want to remove and then click the Delete button.

Cancel Click Cancel to clear the selected checkbox(es).

Ta ble 62 Advanced Application > Spanning Tree Protocol > MSTP (continued)

LABEL DESCRIPTION

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

152

Figure 102 Advanced Application > Spanning Tree Protocol > MSTP > Port (Standalone mode)

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

153

Figure 103 Advanced Application > Spanning Tree Protocol > MSTP > Port (Stacking mode)

The following table describes the labels in this screen.

Ta ble 63 Advanced Application > Spanning Tree Protocol > MSTP > Port

LABEL DESCRIPTION

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Stan dalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Edge Select this check box to configure a port as an edge port when it is directly attached to a

computer. An edge port changes its initial STP port state from blocking state to forwarding

state immediately without going through listening and learning stat es right after the port

is configured as an edge port or when its link st atus changes.

Note: An edge port becomes a non-edge port as soon as it receives a Bridge Protocol Data

Unit (BPDU).

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

154

11.9 Multiple Spanning Tree Protocol Status

Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the

status screen as shown next. See Section 11.1.5 on page 134 for more information on MSTP.

Note: This screen is only available after you activate MSTP on the Switch.

Figure 104 Advanced Application > Spanning Tree Protocol > Status: MSTP

Root Guard

(Standalone

mode)

Select this check box to enable root guard on this port in order to prevent the switch(es)

attached to the port from becoming the root bridge.

With root guard enabled, a port is blocked when the Switch receives a superior BPDU on

it. The Switch allows traffic to pass through this port again when the switc h connected to

the port stops to send superior BPDUs.

Apply Click Apply to save your changes to t he Switch’s run-time memory. The Switch loses

these changes if it is turned o ff or loses power, so use the Save link on the top na vigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this scre en afresh.

Ta ble 63 Advanced Application > Spanning Tree Protocol > MSTP > Port (continued)

LABEL DESCRIPTION

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

155

The following table describes the labels in this screen.

Ta ble 64 Advanced Application > Spanning Tree Protocol > Status: MSTP

LABEL DESCRIPTION

Configuration Click Configuration to specify whic h STP m ode y ou wa nt to ac tivate. Click MSTP to edit

MSTP settings on the Switch.

CST This section describes the Common Spanning Tree settings.

Bridge Root refers to the base of the spanning tree (the root bridge). Our Bridge is this S witch.

This Switch may also be the root bridge.

Bridge ID This is the unique identifier for this bridge, consisting of bridge priority plus MAC address.

This ID is the same for Root and Our Bridge if the Switch is the root switch.

Hello Time

(second) This is the time interval (in seconds) at which the root switch transmits a configu ration

message.

Max Age (second) This is the maximum time (in seconds) a switch can wait without receiving a

configurati on message before attempting to reconfigure.

Forwarding Delay

(second) This is the time (in seconds) the root switch will wait before changing states (that is,

listening to learning to forwarding).

Cost to Bridge This is the path cost from the root port on this Switch to the root switch.

Port ID This is the priority and number of the port on the Switch through which this Switch must

communicate with the root of th e Spanning Tr ee.

Configuration

Name This field displays the configuration name for this MST region.

Revision Number This field displays the revision number for this MST region.

Configuration

Digest A configuration digest is generated from the VLAN-MSTI mapping information.

This field displays the 16-octet signature that is included in an MSTP BPDU. This field

displays the digest when MSTP is activated on the sy stem.

T opology Changed

Times This is the number of times the spanning tree has been reconfigured.

Time Since Last

Change This is the time since the spanning tree was last reconfigured.

Instance: T hese fields displa y the MSTI to VLAN ma pping. In other words, whic h VLANs run on each

spanning tree instance.

Instance This field displays the MSTI ID.

VLAN This field displays which VLANs are mapped to an MSTI .

MSTI Select the MST instance settings you want to view.

Bridge Root refers to the base of the MST instance. Our Bridge is this Switch. This Switch may

also be the root bridge.

Bridge ID This is the unique identifier for this bridge, consisting of bridge priority plus MAC address.

This ID is the same for Root and Our Bridge if the Switch is the root switch.

Internal Cost This is the path cost from the root port in this MST instance to the regional root switch.

Port ID This is the priority and number of the port on the Switch through which this Switch must

communicate with the root of the MST instance.

Port This field displays the number of the port on the Switch.

Chapter 11 Spanning Tree Protocol

GS3700/XGS3700 Series User’s Guide

156

Port State This field displays the port state in STP.

•Discarding - The port does not forward/process received frames or learn MAC

addresses, but still listens for BPDUs.

•Learning - The port learns MAC addresses and processes BPDUs, but does not

forward frames yet.

•Forwarding - The port is operating normally. It learns MAC addresses, processe s

BPDUs and forwards received frames.

Port Role This field displays the role of the port in STP.

•Root - A forw arding port o n a non-root bridge , which has the lowest path cost and is

the best port from the non-root bridge to the root bridge. A root bridge do es not hav e

a root port.

•Designated - A forwarding port on the designated bridge for each connected LAN

segment. A designated bridge has the lowest path cost to the root bridge among the

bridges connected to the LAN segment. All the ports on a root bridge (root switch) are

designated ports.

•Alternate - A blocked port, which has a best alternate path to the root bridge. This

path is different from using the root port. The port moves to the forwarding state

when the designated port for the LAN segment fails.

•Backup - A blocked port, which has a backup/redundant path to a LAN segment

where a designated port is already connected when a switch has two links to the

same LAN segment.

•Disabled - Not strictly part of STP. The port can be disabled manually.

Designated Bridge

ID This field displays the identifi er of the designated bridge to which this port belongs when

the port is a designated port. Otherwise , it displays the ide ntifier of the designated bridge

for the LAN segment to which this port is connected.

Designated Port

ID This field displays the priority and number of the bridge port (on the designated bridge),

through which the designat ed bridge transmits the stored configuration messages.

Designated Cost This field displays the path cost to the LAN segment to which the port is connected when

the port is a designated port. Otherwise, it displays the path cost to the root bridge from

the designated port for the LAN segament to which this port is connected.

Root Guard State

(Standalone

mode)

This field displays the state of the port on which root guard is enabled.

•Root - inconsistent - the Switch receives superior BPDUs on the port and blocks the

port.

•Forwarding - the Switch unbolcks and allows the port to forward frames again.

Ta ble 64 Advanced Application > Spanning Tree Protocol > Status: MSTP (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

157

CHAPTER 12

Bandwidth Control

This chapter shows you how to cap the maximum bandwidth using the Bandwidth Control screen.

12.1 Bandwidth Control Overview

Bandwidth c ontrol means defining a maximum allo wable bandwidth for incoming and/or out-going

traffic flows on a port.

12.1.1 CIR and PIR

The Committed Information R ate (CIR) is the guaranteed bandwidth for the incoming traffic flow on

a port. The Peak In formation Rate (PIR) is the ma ximum bandwidth allowed for the incoming traffic

flow on a port when there is no network congestion.

The CIR and PIR should be set for all ports that use the same uplink bandwidth. If the CIR is

reached, packets are sent at the rate up to the PIR. When network congestion occurs, packets

through the ingress port exceeding the CIR will be marked for drop.

Note: The CIR should be less than the PIR.

Note: The sum of CIRs cannot be greater than or equal to the uplink bandwidth.

12.2 Bandwidth Control Setup

Click Ad vanced Applic ation > Bandwidth Control in the navigation panel to bring up the screen

as shown next.

Chapter 12 Bandwidth Control

GS3700/XGS3700 Series User’s Guide

158

Figure 105 Advanced Application > Bandwidth Control (Standalone mode)

Figure 106 Advanced Application > Bandwidth Control (Stacking mode)

The following table describes the related labels in this screen.

Ta ble 65 Advanced Application > Bandwidth Control

LABEL DESCRIPTION

Active Select this check box to enable bandwidth control on the Switch .

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose th e slot nu mber

of the Switch in a stack.

Chapter 12 Bandwidth Control

GS3700/XGS3700 Series User’s Guide

159

Port

(Standalone or

stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and the

second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row first

to set the co mmon settings an d then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Ingress Rate

Active Select this check box to activate commit rate limits on this port.

Commit

Rate Specify the guaranteed bandwidth allowed in kilobits per second (Kbps) for the incoming

traf fic flow on a port. The commi t r ate should be less than the peak r ate. Th e sum of com mit

rates cannot be greater than or equal to the uplink bandwidth.

Active Select this check box to activate peak rate limits on this port.

Peak Rate Specify the maximum bandwidth allowed in kilobits per second (Kbps) for the incoming

traffic flow on a port.

Active Select this check box to activate egress rate limits on this port.

Egress Rate Specify the maximum bandwidth allowed in kilobits per second (Kbps) for the out-going

traffic flow on a port.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or lo ses power, so use the Save link on the top navigation panel to

save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 65 Advanced Application > Bandwidth Control (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

160

CHAPTER 13

Broadcast Storm Control

This chapter introduces and shows you how to configure the broadcast storm control feature.

13.1 Broadcast Storm Control Setup

Broadcast storm control limits the number of broadcast, multicast and destination lookup failure

(DLF) packets the Switch receives per second on the ports. When the maximum number of

allowable broadcast, multicast and/or DLF packets is reached per second, the subsequent packets

are discarded. Enable this feature to reduce broadcast, multicast and/or DLF packets in your

network. You can specify limits for each packet type on each port.

Click Advanced Application > Broadcast Storm Control i n the navigation panel to display the

screen as shown next.

Figure 107 Advanced Application > Broadcast Storm Control (Standalone mode)

Chapter 13 Broadcast Storm Control

GS3700/XGS3700 Series User’s Guide

161

Figure 108 Advanced Application > Broadcast Storm Control (Stacking mode)

The following table describes the labels in this screen.

Ta ble 66 Advanced Application > Broadcast Storm Control

LABEL DESCRIPTION

Active Select this check box to enable traffic storm control on the Switch. Clear this check box to

disable this feature.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot number

of the Switch in a stack.

Port (Standalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Broadcast (pkt/

s) Select this option and specify how many broadcast packets the port rece ives per second.

Multicast (pkt/s) Select this option and specify how many multicast packets the port receives per second.

DLF (pkt/s) Select this option and specify how many destination lookup failure (DLF) packets the port

receives per second.

Apply Click Apply to save your change s to the Switch ’ s run-time memory. The Switch loses thes e

changes if it is turned off or loses power, so use the Save link on the top navigation panel

to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

GS3700/XGS3700 Series User’s Guide

162

CHAPTER 14

Mirroring

This chapter discusses port mirroring setup screens.

14.1 Port Mirroring

Po rt mirroring allows you to copy a tr affic flow to a monitor port (the port y ou copy the tr affic to) in

order that you can examine the traffic from the monitor port without interference.

The Switch supports both local port mirroring and remote port mirroring.

In local port mirroring, the mirroring ports (through wh ich traffic y ou copy passes) and the monitor

port are on the same device.

In remote port mirroring (RMirror), the mirroring ports and monitor port can be on different devices

in a network. You can use it to monitor multiple switches across your network. The traffic from the

source device’s mirroring port(s) is sent to a reflector port for VLAN tagging and copied to the

connected port(s). Traffic are then carried over the specified remote port mirroring (RMirror) VLAN

and sent to the destination device’s monitor port through the connected ports that connect to other

switches.

Mirroring port Monitor port

Mirroring port

Reflector port Connected port

Connected port Connected port

Monitor port

Remote Port Mirroring (RMirror) VLAN

Connected port

Source Intermediate Destination

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

163

Single-Destination RMirror

If the mirrored traffic is forwarded to one single destination switch, you can disable the reflector

port. The Switch adds RMirror VLAN tag and forw ards mirrored traffic from the mirroring port to the

connected port directly.

Multi-Destination RMirror

If you configure more than one connected port on the source switch to forward the mirrored traffic

to multiple destination switches, you must enable a reflector port on the source switch.

Mirroring port Connected port Connected port Connected port Monitor port

Remote Port Mirroring (RMirror) VLAN

Connected port

Source Intermediate Destination

Mirroring port

Reflector port

Connected port Connected port Connected port Monitor port

Remote Port Mirroring (RMirror) VLAN

Connected ports

Source

Intermediate A Destination A

Connected port Monitor port

Destination B

Destination C

Connected port Connected port

Intermediate B

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

164

Port Rules in Port Mirroring

The following table shows the rule for a port in remote port mirroring. For example, a port on the

source device can be a mirroring port in both RMirror VLAN 1 and RMirror VLAN 2. But when the

port is the source device’s mirroring port in RMirror VLAN 1, it cannot be the reflector port or

monitor port in another RMirror VLAN.

The following table shows the rule for a port used in both local port mirroring and remote port

mirroring. For example, the RMirror mirroring port on the source device can also be used as the

mirroring port in local port mirroring. But it cannot be the monitor port in local port mirroring.

Table 67 Port Rules between Different Remote Port Mirroring VLANs

RMirror VLAN 1

Source

Mirroring

Port

Source

Reflector

Port

Connected

Port

Source

Connected

Port in Single-

Destination

RMirror

Destination

Monitor Port

RMirror

VLAN 2

Source

Mirroring

Port YNY N N

Source

Reflector

Port NNN N N

Connected

Port YNY Y N

Source

Connected

Port in

Single-

Destination

RMirror

NNY N N

Destination

Monitor Port NNN N N

Table 68 Port Rules between Remote and Local Port Mirroring

RMirror

Source

Mirroring

Port

Source

Reflector

Port

Connected

Port

Source

Connected

Port in Single-

Destination

RMirror

Destination

Monitor Port

Local

Port

Mirroring

Port YNY N N

Monitor

Port NNN N N

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

165

14.1.1 Local Port Mirroring

Click Advanced Application > Mirroring in the navigation panel to display the Mirroring screen.

Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port.

Figure 109 Advanced Application > Mirroring (Standalone mode)

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

166

Figure 110 Advanced Application > Mirroring (Stacking mode)

The following table describes the labels in this screen.

Ta ble 69 Advanced Application > Mirroring

LABEL DESCRIPTION

Active Select this check box to activate port mirroring on the Switch. Clear this check box to disable

the feature.

Monitor Port The monitor port is the port yo u copy the tr a ffic to in order to examine it in more detail without

interfering with the traffic flow on the original port(s). Type the port number of the monitor

port. In stacking mode, the first number represents the slot and the second the port number.

Slot

(Stacking

mode)

This field appears only in stacking mode. Click the drop-down list to choose the slot number of

the Switch in a stack.

Port

(Standalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and the

second field is the port number.

* Settings in this row apply to all ports.

Use this row only if y ou wan t to make some sett ings the same for al l ports. Use this row f irst to

set the comm on settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Mirrored Select this option to mirror the traffic on a port.

Direction Specify the direction of the traffic to mirror by selecting from the drop-down list box. Choices

are Egress (outgoing), Ingress (incoming) and Both.

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

167

14.1.2 Remote Port Mirroring

Use this screen to create a remote port mirroring (RMirror) VLAN through which the mirrored traffic

is forwarded.

Click the RMirror link in the Advanced Application > Mirroring screen. The following screen

opens.

Figure 111 Advanced Application > Mirroring > RMirror

The following table describes the labels in this screen.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation panel to

save your change s to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 69 Advanced Application > Mirroring (continued)

LABEL DESCRIPTION

Ta ble 70 Advanced Application > Mirroring > RMirror

LABEL DESCRIPTION

Active Select the option to enable the VLAN.

RMirror VLAN ID Specify the ID number of remote port mirroring (RMirror) VLAN.

Apply Click Apply to save your changes to the Switch’s run-time memory. Th e Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

VLAN This field displays the ID number of the RMirror VLAN. Click on the VLAN ID number to

change the settings.

Select an entry’s check box to select a sp ecific entry. Otherwise, sele ct the check box

in the table heading row to select all entries.

Active This field display s whether the VLAN is enabled or not.

Delete Check the rule(s) that you want to remove and then click the Delete button.

Cancel Click Cancel to clear the selected checkbox(es).

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

168

14.1.3 Source

Use this screen to configure the reflector port and specify the traffic flow to be copied to the

monitor port when the Switch is the source device in remote port mirroring.

Click the Source link in the RMirror screen. The following scre en opens.

Figure 112 Advanced Application > Mirroring > RMirror > Source (Standalone mode)

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

169

Figure 113 Advanced Application > Mirroring > RMirror > Source (Stacking mode)

The following table describes the labels in this screen.

Ta ble 71 Advanced Application > Mirroring > RMirror > Source

LABEL DESCRIPTION

RMirror VLAN ID Select the RMirror VLAN over which the mirrored traffic is forwarded.

Priority Enter the priority of the mirrored traffic.

Reflector Port Select the check box to enable the specified reflector port.

Enter the number of reflector port that adds the RMirror VLAN tag to all mirrored tr affic

and forwards traffic to the connected port(s) in the same RMirror VLAN.

Slot (Stacking mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Standalone or

stacking mode) This field displays the port number. In stacking mode, the first box field is the slot ID

and the second field is the port number.

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

170

14.1.4 Destination

Use this screen to specify the RMirror VLAN and configure the monitor port when the Switch is the

destination device in remote port mirroring.

Click the Destination link in the RMirror screen. The following screen opens.

Figure 114 Advanced Application > Mirroring > RMirror > Destination

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this

row first to set the common settings and then make adjustments on a port-by- port

basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Mirrored Select this option to mirror the traffic on a port.

Direction Specify the direction of the traffic to mirror by selecting from the drop-down list box.

Choices are Egress (outgoing), Ingress (incoming) and Both.

Apply Click Apply to save your changes to the Switch’s run-time memory. Th e Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

VLAN This field displays the ID number of RMirror VLAN over which the mirrored traffic is

forwarded.

Priority This field displays the priority of the mirrored traffic.

Mirror Port

Ingress This field displays the number of port(s) on which the incoming traffic is mirrored.

Egress This field displays the number of port(s) on which the outgoing traffic is mirrored.

Both This field displays the number of port(s) on which the incoming and outgoing traffic is

mirrored.

Reflector Port This field displays whether the reflector port is enabled and the number of reflector

port in this RMirror VLAN.

Ta ble 71 Advanced Application > Mirroring > RMirror > Source (continued)

LABEL DESCRIPTION

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

171

The following table describes the labels in this screen.

14.1.5 Connected Port

Use this screen to select the RMirror VLAN and specify the port(s) that helps forward mirrored

traffic to other connected switches and/or receiv e mirrored tr affic from other connected port in the

same RMirror VLAN.

Click the Connected Port link in the RMirror screen. The following screen opens.

Ta ble 72 Advanced Application > Mirroring > RMirror > Destination

LABEL DESCRIPTION

RMirror VLAN ID Select the RMirror VLAN over which the mirrored traffic is forwarded.

Monitor Port Specify the port to which you copy the traffic in order to examine it in more detail

without interfering with the traffic flow on the original port(s).

Tagging Select whether to add the RMirror VLAN tag to mirrored traffic on the monitor port.

Apply Click Apply to save your changes to the Switch’s run-time memory. Th e Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

VLAN This field displays the ID number of RMirror VLAN over which the mirrored traffic is

forwarded.

Monitor Port This field displays the number of port that receives the mirrored tr affic from the source

device for analysis.

Tagging This field displays whether the mirrored traffic is tagged with the RMirror VLAN ID.

Delete Check the rule(s) that you want to remove in the Delete column and then click the

Delete button.

Cancel Click Cancel to begin configuring this screen afresh.

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

172

Figure 115 Advanced Application > Mirroring > RMirror > Connected Port (Standalone mode)

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

173

Figure 116 Advanced Application > Mirroring > RMirror > Connected Port (Stacking mode)

The following table describes the labels in this screen.

Ta ble 73 Advanced Application > Mirroring > RMirror > Connected Port

LABEL DESCRIPTION

RMirror VLAN ID Select the RMirror VLAN over which the mirrored traffic is forwarded.

Slot (Stacking mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Standalone or

stacking mode) This field displays the port number. In stacking mode, the first box field is the slot ID

and the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this

row first to set the common settings and then make adjustments on a port-by- port

basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Chapter 14 Mirroring

GS3700/XGS3700 Series User’s Guide

174

Connected Port When the Sw itch is a source device in remote port mirroring, select this option to have

the port help forward mirrored traffic to the connected port of the intermediate or

destination device in the same RMirror VLAN.

When the Switch is an intermediate device i n rem ote port mirr oring, selec t this option

to have the port receive mirrored traffic from the connected source or another

intermediate device or forward mirrored tr affic to the conn ected destination or an other

intermediate device in the same RMirror VLAN.

When the Switch is a destination dev ice in re mote port mi rrori ng, select this option to

have the port receive mirrored traffic from the connected source or inte rmediate

device in the same RMirror VLAN.

Apply Click Apply to save your changes to the Switch’s run-time memory. Th e Switch loses

these changes if it is turned off or loses power, so use the Save link on the top

navigation panel to save your changes to the nonvolatile memory when you are done

configuring.

Cancel Click Cancel to begin configuring this screen afresh.

VLAN This field displays the ID number of port mirroring VLAN over which the mirrored

traffic is forwarded.

Connected Port This field displays the number of port(s) that helps forward mirrored traffic to other

connected switches.

Ta ble 73 Advanced Application > Mirroring > RMirror > Connected Port (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

175

CHAPTER 15

Link Aggregation

This chapter shows you how to logically aggregate physical links to form one logical, higher-

bandwidth link.

15.1 Link Aggregation Overview

Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link.

You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to

under-utilize a high-speed, but more costly, single-port link.

However, the more ports you aggregate then the fewer available ports you have. A trunk group is

one logical link containing multiple ports.

The beginning port of each trunk group must be physically connected to form a trunk group.

The Switch supports both static and dynamic link aggregation.

Note: In a properly planned network, it is recommended to implement static link

aggregation only. This ensures increased network stability and control over the

trunk groups on your Switch.

See Section 15.6 on page 183 for a static port trunking example.

15.2 Dynamic Link Aggregation

The Switch adheres to the IEEE 802.3ad standard for static and dynamic (LACP) port trunking.

The Switch supports the link aggregation IEEE802.3ad standard. This standard describes the Link

Aggregation Control Protocol (LACP), which is a protocol that dynamically creates and manages

trunk groups.

When you enable LACP link aggregation on a port, the port can automatically negotiate with the

ports at the remote end of a link to establish trunk groups. LACP also allows port redundancy, that

is, if an operational port fails, then one of the “standby” ports become operational without user

intervention. Please note that:

• You must connect all ports point-to-point to the same Ethernet switch and configure the ports for

LACP trunking.

• LACP only works on full-duplex links.

• All ports in the same trunk group must have the same media type, speed, duplex mode and flow

control settings.

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

176

Configure trunk groups or LACP before you connect the Ethernet switch to avoid causing network

topology loops.

15.2.1 Link Aggregation ID

LACP aggregation ID consists of th e following information. Port Priority and P ort Number are 0 as it

is the aggregator ID for the trunk group, not the individual port.

15.3 Link Aggregation Status

Click Advanced Application > Link Aggregation in the navigation panel. Th e Link Aggregation

Status screen displays by default. See Section 15.1 on page 175 for more information.

Figure 117 Advanced Application > Link Aggregation Status

Ta ble 74 Link Aggregation ID: Local Switch

SYSTEM

PRIORITY MAC ADDRESS KEY PORT PRIORITY PORT NUMBER

0000 00-00-00-00-00-00 0000 00 0000

Ta ble 75 Link Ag gregation ID: Peer Switch

SYSTEM

PRIORITY MAC ADDRESS KEY PORT PRIORITY PORT NUMBER

0000 00-00-00-00-00-00 0000 00 0000

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

177

The following table describes the labels in this screen.

15.4 Link Aggregation Setting

Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the

screen shown next. See Section 15.1 on page 175 for more information on link aggregation.

Ta ble 76 Advanced Application > Link Aggregation Status

LABEL DESCRIPTION

Group ID This field displays the group ID to identify a trunk group, that is, one logical link containing

multiple ports.

Enabled Port These are the ports you hav e configured in the Link Aggregation screen to be in the trunk

group.

The port number(s) displays only when this trunk group is activated and there is a port

belonging to this group.

Synchronized

Ports These are the ports that are currently transmitting data as one logical link in this trunk

group.

Aggregator ID Link Aggregator ID consists of the following: system priority, M AC address, key, port

priority and port number. Refer to Section 15.2.1 on page 176 for more information on this

field.

The ID displays only when there is a port belonging to this trunk group and LACP is also

enabled for this group.

Criteria This shows the outgoing tr affic distribution algorit hm used in this trunk grou p. Pack ets from

the same source and/or to the same destination are sent over the same link within the

trunk.

src-mac means the Switch distributes traffic based on the packet’s source MAC address.

dst-mac means the Switch distributes traffic based on the packet’s destination MAC

address.

src-dst-mac means the Switch distributes traffic based on a combination of the packet’s

source and destination MAC addresses.

src-ip means the Switch distributes traffic based on the packet’s source IP address.

dst-ip means the Switch distributes traffic based on the packet’s destination IP address.

src-dst-ip means the Switch distributes traffic based on a combination of the packet’s

source and destination IP addresses.

Status This field displays how these ports were added to the trunk group. It displays:

•Static - if the ports are configured as static members of a trunk group.

•LACP - if the ports are configured to join a trunk group via LACP.

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

178

Figure 1 18 Advanced Application > Link Aggregation > Link Aggregation Setting (Standalone mode)

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

179

Figure 119 Advanced Application > Link Aggregation > Link Aggregation Setting (Stacking mode)

The following table describes the labels in this screen.

Ta ble 77 Advanced Application > Link Aggregation > Link Aggregation Setting

LABEL DESCRIPTION

Link

Aggregation

Setting

This is the only screen you need to configure to enable static li nk aggregation.

Group ID The field identifies the link aggregation group, that is, one logical link containing multiple

ports.

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

180

15.5 Link Aggregation Control Protocol

Click in the Advanced Applic ation > Link Aggregation > Link Aggregation Setting > LACP to

display the screen shown next. See Section 15.2 on page 175 for more information on dynamic link

aggregation.

Active Select this option to activate a trunk group.

Criteria Select the outgoing traffic distribution type. Packets from the same source and/or to the

same destination are sent over the same link within the trunk. By default, the Switch uses

the src-dst-mac distribution type. If the Switch is behind a route r, the packet’s destination

or source MAC address will be changed. In this case, set the Switch to distribute traffic

based on its IP address to make sure port trunking can work properly.

Select src-mac to distribute traffic based on the packet’s source MAC address.

Select dst-mac to distribute traffic based on the packet’s destination MAC address.

Select src-dst-mac to distribute traffic based on a combination of the packet’s source and

destination MAC addresses.

Select src-ip to distribute traffic based on the packet’s source IP address.

Select dst-ip to distribute traffic based on the packet’s destination IP address.

Select src-dst-ip to distribute traffic based on a combination of the packet’s source and

destination IP addre sses.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot number

of the Switch in a stack.

Port

(Standalone or

stacking mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

Group Select the trunk group to which a port belongs.

Note: When you enable the port security feature on the Switch and configure port security

settings for a port, you cannot include the port in an active trunk group.

Apply Click Apply to save your changes to the Switch’ s run-t ime me mory. The Switch loses thes e

changes if it is t urned off or loses power, so use the Save link on the top na vigation panel to

save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 77 Advanced Application > Link Aggregation > Link Ag gregation Se tting (continued)

LABEL DESCRIPTION

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

181

Figure 120 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP

(Standalone mode)

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

182

Figure 121 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP (Stacking

mode)

The following table describes the labels in this screen.

Ta ble 78 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP

LABEL DESCRIPTION

Link

Aggregation

Control

Protocol

Note: Do not configure this screen unless you want to enable dynamic link aggregation.

Active Select this checkbox to enable Link Aggregation Control Protocol (LACP).

System Pri ority LACP syst em priority is a number between 1 and 65,535. The switch with the lowest system

priority (and lowest port number if system priority is the same) becomes the LACP “server”.

The LACP “server” controls the operation of LACP setup. Enter a number to set the priority of

an active port using Link Aggregation Control Protocol (LACP). The smaller the number, the

higher the priority level.

Group ID The field identifies the link aggregation group, that is, one logical link containing multiple

ports.

LACP Active Select this option to enable LACP for a trunk.

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

183

15.6 Static Trunking Example

This example shows you how to create a static port trunk group for ports 2-5.

1Make your physical connections - make sure that the ports that y ou want to belong to the trunk

group are connected to the same destination. The following figure shows ports 2-5 on switch A

connected to switch B.

Figure 122 Trunking Example - Physical Connections

2Configure static trunking - Click Advanced Application > Link Aggregation > Link

Aggregation Setting. In this screen activate trunk group T1, select the traffic distribution

algorithm used by this group and select the ports that should belong to this group as shown in the

figure below. Click Apply when you are done.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot number

of the Switch in a stack.

Port

(Standalone or

stacking mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row first

to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

LACP Timeout Timeout is the time inter v al betw een the individual port exchanges of LACP pack ets in order

to check that the peer port in the trunk group is still up. If a port does not respond after

three tries, then it is deemed to be “down” and is removed from the trunk. Set a short

timeout (one second) for busy trunked links to ensure that disabled ports are removed from

the trunk group as soon as possible.

Select eithe r 1 second or 30 seconds.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

changes if it is turned off or loses power, so use the Save link on the top navigation panel to

save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh .

Ta ble 78 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP (continued)

LABEL DESCRIPTION

Chapter 15 Link Aggregation

GS3700/XGS3700 Series User’s Guide

184

Figure 123 Trunkin g Example - Configu ration Screen

Your trunk group 1 (T1) configuration is now complete.

EXAMPLE

GS3700/XGS3700 Series User’s Guide

185

CHAPTER 16

Port Authentication

This chapter describes the IEEE 802.1x and MAC authentication methods.

16.1 Port Authentication Overview

Port authentication is a way to v alidate access to ports on the Switch to clients based on an external

server (authentication server). The Switch supports the following methods for port authentication:

IEEE 802.1x - An authentication server validates access to a port based on a username and

password provided by the user. At the time of writing, IEEE 802.1x is not supported by all

operating systems. See your operating system documentation. If your operating system does not

support 802.1x, then you may need to install 802.1x client software.

•MAC - An authentication server validates access to a port based on the MAC address and

password of the client.

Both types of authentication use the RADIUS (Remote Authentication Dial In User Service, RFC

2138, 2139) protocol to validate users. See Section 24.1.2 on page 254 for more information on

configuring your RADIUS server settings.

Note: If you enable IEEE 802.1x authentication and MAC authentication on the same

port, the Switch performs IEEE 802.1x authentication first. If a user fails to

authenticate via the IEEE 802.1x method, then access to the port is denied.

16.1.1 IEEE 802.1x Authentication

The following figure illustrates how a client connecting to an IEEE 802.1x authentication enabled

port goes through a validation process. The Switch prompts the client for login information in the

form of a user name and password after the client re sponds to its identity request. When the client

provides the login credentials, the Switch sends an authentication request to a RADIUS server. The

RADIUS server validates whether this client is allowed access to the port.

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

186

Figure 124 IEEE 802.1x Authentication Process

16.1.2 MAC Authentication

MAC authentication works in a very similar w ay to IEEE 802.1x authentication. The main difference

is that the Switch does not prompt the client for login credentials. The login credentials are based

on the source MAC address of the client connecting to a port on the Switch along with a password

configured specifically for MAC authentication on the Switch.

New Connection

Access Request

Authentication Reply

Challenge Response

Session Granted/Denied

Identity Request

Authentication Request

Access Challenge

Challenge Request

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

187

Figure 125 MAC Authentication Process

16.2 Port Authentication Configuration

To enable port authentication, first activate the port authentication method(s) you want to use

(both on the Switch and the port(s)), then configure the RADIUS server settings in the AAA >

Radius Server Setup screen.

To activate a port authentication method, click Advanced Application > Port Au thenticat ion in

the navigation panel. Select a port authentication method in the screen that appears.

Figure 126 Advanced Application > Port Authentication

16.2.1 Activate IEEE 802.1x Security

Use this screen to activate IEEE 802.1x security. In the Port Authentication screen click 802.1x

to display the configuration screen as shown.

New Connection

Authentication Request

Authentication Reply

Session Granted/Denied

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

188

Figure 127 Advanced Application > Port Authentication > 802.1x (Standalone mode)

Figure 128 Advanced Application > Port Authentication > 802.1x (Stacking mode)

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

189

The following table describes the labels in this screen.

16.2.2 Guest VLAN

When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the

correct credentials are blocked from using the port(s). You can configure your Switch to have one

VLAN that acts as a guest VLAN. If you enable the guest VLAN (102 in the example) on a port (2 in

the example), the user (A in the example) that is not IEEE 802.1x capable or fails to enter the

correct username and password can still access the port, but traffic from the user is forwarded to

the guest VLAN. That is, unauthenticated users can ha ve access to limited network resources in the

same guest VLAN, such as the Internet. The rights gr anted to the Gu est VLAN depends on how the

network administrator configures switches or routers with the guest network feature.

Ta ble 79 Advanced Application > Port Authentication > 802.1x

LABEL DESCRIPTION

Active Select this check box to permit 802.1x authentication on the Switch.

Note: You must first enable 802.1x authentication on the Switch before configuring it on

each port.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Stan dalone

or stacking mode) This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some se tt in gs th e sam e for al l ports . Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Active Select this checkbox to permit 802.1x authentication on this port. You must first allow

802.1x authentication on the Switch before configuring it on each port.

Max-Req Specify th e number of times the Switch tries to authenticate client(s) before sending

unresponsive ports to the Guest VLAN.

This is set to 2 by default. That is, the Switch attempts to authentica te a client twice. If

the client does not respond to the first authentication request, the Switch tries again. If

the client still does not respond to the second request, the Switch sends the client to the

Guest VLAN. The client needs to send a new request to be authenticated by the Switch

again.

Reauth Specify if a subscriber has to periodically re-enter his or her username and password to

stay connected to the port.

Reauth-period Speci fy the length of time required to pass before a client has to re-enter his or her

username and password to stay connected to the port.

Quiet-period Specify the number of seconds the port remains in the HELD state and rejects further

authentication requests from the connected client after a failed authentication exchange.

Tx-period Specify the num b er of seconds the Switch waits for client’s response before re-sending

an identity request to the client.

Supp-Timeout Specify the number of seconds the Switch waits for client ’s response to a challenge

request before sending another request.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

190

Figure 129 Guest VLAN Example

Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication >

802.1x screen click Guest Vlan to display the configuration screen as shown.

Figure 130 Advanced Application > Port Authentication > 802.1x > Guest VLAN (Standalone mode)

Internet

VLAN 100

VLAN 102

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

191

Figure 131 Advanced Application > Port Authentication > 802.1x > Guest VLAN (Stacking mode)

The following table describes the labels in this screen.

Ta ble 80 Advanced Application > Port Authentication > 802.1 x > Guest VLAN

LABEL DESCRIPTION

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Standalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some settings the same for all ports. Use this row

first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Active Select this checkbox to enable the guest VLAN feature on this port.

Clients that fail authentication are placed in the guest VLAN and can receive limited

services.

Guest Vlan A guest VLAN is a pre-configured VLAN on the Switch that allows non-authenticated users

to access limited network resources through the Switch. Y ou must also enable IEEE 802.1x

authentication on the Switch and the associated ports. Enter the number that identifies the

guest VLAN.

Make sure this is a VLAN recognized in your network.

Host-mode Specify how the Switch authenticates users when more than one use r connect to the port

(using a hub).

Select Multi-Host to authenticat e only the first user th at connects to this port. If the first

user enters the correct credential, any other users are allowed to access the port without

authentication. If the first user fails to enter the correct credential, they are all put in the

guest VLAN. Once the first user who did authentication logs out or disconnects from the

port, rest of the users are blocked until a user does the authentication process again.

Select Multi-Secure to authenticate each user that connects to this port.

Multi-Secure

Num If you set Host-mode to Multi-Secure, specify the maximum number of users (between

1 and 24) that the Switch will authenticate on this port.

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

192

16.2.3 Activate MAC Authentication

Use this screen to activate MAC authentication. In the Port Authentication screen click MAC

Authentication to display the configuration screen as shown.

Figure 132 Advanced Application > Port Authentication > MAC Authentication (Standalone mode)

Apply Click Apply to sa ve yo ur changes to the Switch’ s run- time memory. The Sw itch loses the se

changes if it is turned off or loses power, so use the Save link on the top navigation panel

to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 80 Advanced Application > Port Authentication > 802.1x > Guest VLAN (continued)

LABEL DESCRIPTION

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

193

Figure 133 Advanced Application > Port Authentication > MAC Authentication (Stacking mode)

The following table describes the labels in this screen.

Ta ble 81 Advanced Application > Port Authentication > MAC Authentication

LABEL DESCRIPTION

Active Select this check box to permit MAC authentication on the Switch.

Note: You must first enable MAC authentication on the Switch before configuring it on each

port.

Name Prefix Type the prefix that is appended to all MAC addresses sent to the RADIUS server for

authentication. You can enter up to 32 printable ASCII characters.

If you leave this field blank, then only the MAC address of the client is forwarded to the

RADIUS server.

Password Type the password the Switch sends along with the MAC address of a client for

authentication with the RADIUS server. You can enter up to 32 printable ASCII characters.

Timeout Speci fy the amount of time before the Switch allows a client MAC address that fails

authentication to try and authenticate again. Maximum time is 3000 seconds.

When a client fails MAC authentication, its MAC address is learned by the MAC address

table with a status o f denied. The timeo ut period you specify here is the time the MAC

address entry stays in the MAC address table until it is cleared. If you specify 0 for the

timeout value, the Swit ch uses the Aging Time configured in the Switch Setup screen.

Note: If the Aging Time in the Switch Setup screen is set to a lower value, then it

supersedes this setting. See Section 6.4 on page 63.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Standalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

194

* Use this row to make the setting the same for all ports. Use this row first and then make

adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Active Select this check box to permit MAC authentication on this port. You must first allow MAC

authentication on the Switch before configuring it on each port.

Trusted-VLAN

List (Standalone

mode)

Enter the ID nu mber( s) of the truste d VLAN(s ) (separated by a comma). If a c lient’s VLAN

ID is specified here, the client can access the port and the connected networks without

MAC authentication.

Apply Click Apply to sa ve yo ur changes to the Switch’ s run- time memory. The Sw itch loses the se

changes if it is turned off or loses power, so use the Save link on the top navigation panel

to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Ta ble 81 Advanced Application > Port Authentication > MAC Authentication (continued)

LABEL DESCRIPTION

GS3700/XGS3700 Series User’s Guide

195

CHAPTER 17

Port Security

This chapter shows you how to set up port security.

17.1 About Port Security

Port security allows only packets with dynamically learned MAC addresses and/or configured static

MAC addresses to pass through a port on the Switch. The Switch can learn up to 32K MAC

addresses in total with no limit on individual ports other than the sum cannot exceed 32K.

For maximum port security, enable this feature, disable MAC address learning and configure static

MAC address(es) for a port. It is not recommended you disable port security together with MAC

address learning as this will result in many broadcasts. By default, MAC address learning is still

enabled even though the port security is not activated.

17.2 Port Security Setup

Click Advanced Application > Port Security in the navigation panel to display the screen as

shown.

Chapter 17 Port Security

GS3700/XGS3700 Series User’s Guide

196

Figure 134 Advanced Application > Port Security (Standalone mode)

Figure 135 Advanced Application > Port Security (Stacking mode)

Chapter 17 Port Security

GS3700/XGS3700 Series User’s Guide

197

The following table describes the labels in this screen.

17.3 VLAN MAC Address Limit

Use this screen to set the MAC address learning limit on per-port and per-VLAN basis. Click VLAN

MAC Address Limit in the Advanced Application > Port Security screen to display the screen

as shown.

Ta ble 82 Advanced Application > Port Security

LABEL DESCRIPTION

Port List Enter the number of the port(s) (separated by a comma) on which you want to enable port

security and disable MAC address learning. In stacking mode, the first number represents

the slot and the second the port number. Enter 1/1-1/24,2/28 for ports 1 to 24 for the

Switch in slot 1 and port 28 for the Switch in slot 2, for example. After you click MAC

freeze, all previously learned MAC addresses on the specified port(s) will becom e static

MAC addresses and display in the Static MAC Forwarding screen.

MAC freeze Click MAC fre ez e to have the Switch auto matically select the Active check boxes and

clear the Address Learning check boxes only for the ports specified in the Port list.

Active Select this option to enable port security on the Switch.

Slot (Stacking

mode) This field appears only in stacking mode. Click the drop-down list to choose the slot

number of the Switch in a stack.

Port (Stan dalone

or stacking

mode)

This field displays the port number. In stacking mode, the first box field is the slot ID and

the second field is the port number.

* Settings in this row apply to all ports.

Use this row only if you want to make some of the settings the same for all ports. Use this

row first to set the common settings and then make adjustments on a port-by-port basis.

Note: Changes in this row are copied to all the ports as soon as you make them.

Active Select this check box to e nabl e th e port se curit y feature on this port. The S witch forw ards

packets whose MAC address(es) is in the MAC address table on this port. Packets with no

matching MAC address(es) are dropped.

Clear this check box to disable the port security feature. The Switch forwards all packets

on this port.

Address Learning MAC address learning reduces outgoing broadcast traffic. For MAC address learning to

occur on a port, the port itself must be active with address learning enabled.

Limited Number

of Learned MAC

Address

Use this field to limit the number of (dynamic) MAC addresses that may be learned on a

port. For example, if you set this field to "5" on port 2, then only the devices with these

five learned MAC addresses may access port 2 at any one time. A sixth device must wait

until one of the five learned MAC addresses ages out. MAC address aging out time can be

set in the Switch Setup screen. The valid range is from “0” to “16K”. “0” means this

feature is disabled.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Chapter 17 Port Security

GS3700/XGS3700 Series User’s Guide

198

Figure 136 Advanced Application > Port Security > VLAN MAC Address Limit

The following table describes the labels in this screen.

Ta ble 83 Advanced Application > Port Security > VLAN MAC Ad dress Limit

LABEL DESCRIPTION

Active Select this option to activate this rule.

Port Enter the number of the port to which this rule is applied. In stacking mode, the first

number represents the slot and the second the port number.

VID Enter the VLAN identification number.

Limit Number Use this field to limit the number of (dynamic) MAC addresses that may be learned on a

port in a specified VLAN. For example, if you set this field to "5" on port 2, then only the

devices with thes e five le arned MAC addresses ma y access port 2 at an y one time. A sixth

device would have to wait until one of the five learned MAC addresses aged out. MAC

address aging out time can be set in the Switch Setup screen. The valid range is from “0”

to “16K”. “0” means this feature is disabled.

Add Click this to create a new entry or to update an ex isting one.

This saves your changes to the Switch’s run-time memory. The Switch loses these changes

if it is turned off or loses power, so use the Save link on the top navigation panel to save

your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to reset the fields to your previous configuration.

Clear Click Clear to reset the fields to the factory defaults.

Index This field displays the index number of the rule. Click an index number to change the

settings.

Active This field displays Yes when the rule is activated and No when is it deactivated.

Port This field displays the number of the port to which this rule is applied.

VID This is the VLAN ID number to which the port belongs.

Limit Number This is the maximum number of MAC addresses which a port can learn in a VLAN.

Select an entry’s check box to select a specifi c entry. Otherwise, select the check box in

the table heading row to select all entries.

Delete Check the rule(s) that you w ant to remove in the Delete column and then click the Delete

button.

Cancel Click Cancel to clear the selected checkbox(es) in the Delete column.

GS3700/XGS3700 Series User’s Guide

199

CHAPTER 18

Time Range

This chapter shows you how to set up a time range for time-oriented features on the Switch.

18.1 About Time Range

You can set a time range for time-oriented features such as Classifier ACL (Access Control List) rule

which categorizes data packets into different netw ork traffic flow. The advantage of the time range

feature is that it allows you to schedule the active time of configur ations. For example, see Section

19.2 on page 201 to configure the classifier rule with time range.

The time range can be configured in two ways - Absolute and Periodic. Absolute is a fixed time

range with a start and end time. Periodic is recurrence of a time range and doesn’t have an end

time.

18.2 Time Range Setup

Click Advanced Application > Time Range in the navigation panel to display the screen as

shown.

Figure 137 Advanced Application > Time Range

Chapter 18 Time Range

GS3700/XGS3700 Series User’s Guide

200

The following table describes the labels in this screen.

Ta ble 84 Advanced Application > Time Range

LABEL DESCRIPTION

Name Type a name for this time range rule.

Type Select a time range type. Absolute is a fixed time range that has a set start and end date.

Periodic is recurrence of a time range.

Absolute This sets a fixed time range.

Start Specify the year, month, day, hour and minute when the schedule begins.

End Specify the year, month, day, hour and minute when the schedule ends.

Periodic This section is available only when you set Type to Periodic.

Select the first option if you want to define a recurring schedule for a consecutive time

period. You then select the day of the week, hour and minute when the schedule begins

and ends respectively.

Select the second option if you want to define a recurring schedule for multiple non-

consecutive time periods. You need to select each day of the week the recurring schedule

is effective. You also need to specify the hour and minute when the schedule begins and

ends each day. The schedule begins and ends in the same day.

Add Click Add to save the time range you entered.

Cancel Click Cancel to begin configuring this screen afresh.

Clear Click Clear to reset the fields to the factory defaults.

Index This field displays the index number of the rule. Click an index number to change the

settings.

Name This field displays the name of the time range rule.

Type This field displays the type of the schedule .

Range This field displays the time period(s) to which this schedu le applies.

Select an entry’s check box to select a specifi c entry. Otherwise, select the check box in

the table heading row to select all entries.

Delete Check the rule(s) that you want to remove and then click the Delete button.

Cancel Click Cancel to clear the selected checkbox(es).

GS3700/XGS3700 Series User’s Guide

201

CHAPTER 19

Classifier

This chapter introduces and shows you how to configure the packet classifier on the Switch.

19.1 About the Classifier and QoS

Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and

the networking methods used to control the use of bandwidth. Without QoS, all traffic data is

equally likely to be dropped when the network is congested. This can cause a reduction in network

performance and make the network inadequate for time-critical application such as video-on-

demand.

A classifier groups traffic into data flows according to specific criteria such as the source address,

destination address, source port number, destination port number or incoming port number. For

example, you can configure a classifier to select tr affic from the same protocol port (such as Telnet)

to form a flow .

Configure QoS on the Switch to group and prioritize application traffic and fine-tune network

performance. Setting up QoS involves two separate steps:

1Configure classifiers to sort traffic into different flows.

2Configure policy rules to define actions to be performed for a classified tr affic flow (refer to Chapter

20 on page 210 to configure policy rules).

You can also configure policy routing to forward a classified traffic flow to a different gateway for

cost savings and load sharing. See Chapter 41 on page 400 for how to configure policy routing.

19.2 Classifier Status

Use this screen to to view the classifiers configured on the Switch and how many times the traffic

matches the rules.

Click Advanced Application > Classifier in the navigation panel to display the configuration

screen as shown.

Chapter 19 Classifier

GS3700/XGS3700 Series User’s Guide

202

Figure 138 Advanced Application > Classifier > Classif i er Status

The following table describes the labels in this screen.

19.3 Classifier Configuration

Use the Classifier Configuration screen to define the classifiers. After you define the classifier,

you can specify actions (or policy) to act upon the traffic that matches the rules. In the Classifier

Status screen click Classifier Configuration to display the configuration screen as shown.

Ta ble 85 Advanced Application > Classifier > Classifier Status

LABEL DESCRIPTION

Index This field displays the index number of the Classifier rule.

Active This field displays Yes when the rule is activated and No when it is deactivated.

Weight This field displays the rule’s weight. This is to indicate a rule’s priority when th e match order is

set to manual in the Classifier > Classifier Global Setting screen.

The higher the number, the higher the rule’s priority.

Name This field displays the name of the Classifier rule.

Match

Count This field displays the number of times a rule is applied. It displays '-' if the rule does not have

count enabled.

Rule This field displays a summary of the classifier rule’s settings.

Any Select Any, then click Clear to clear the matched count for all classifiers.

Clear Select Classifier, enter a classifier rule name and then click Clear to erase the recorded

statistical information for that classifier, or select Any to clear statistics for all classifiers.

Chapter 19 Classifier

GS3700/XGS3700 Series User’s Guide

203

Figure 139 Advanced Application > Classifier > Classifier Configuration

The following table describes the labels in this screen.

Ta ble 86 Advanced Application > Classifier > Classifier Configuration

LABEL DESCRIPTION

Active Select this option to enable this rule.

Name Enter a descriptive name for this rule for identifying purposes.

Chapter 19 Classifier

GS3700/XGS3700 Series User’s Guide

204

W eight Enter a number between 0 and 65535 to specif y the rule’ s weight. When the match order is in

manual mode in the Classifier Global Setting screen, a higher weight means a higher

priority.

Log Select this option to have the Switch create a log message when the rule is applied and record

the number of matched packets in a particular time interval.

Note: Make sure you also enable logging in the Classifier Global Setting screen.

Count Select this option to have the Switch count how ma ny times the rule is applied.

Tme Range Select the name of the pre-configued schedule that you want to apply to the rule. The rule will

be active only at th e scheduled date and/or time.

If you select None, the rule will be active all the time.

Ingress Port

Port Type the port number to which the rule should be applied. Y ou ma y choose one port only or all

ports (Any).

Trunk Select Any to apply the rule to all trunk groups.

To specify a trunk group, select the second choice and type a trunk group ID.

Packet

Format Specify the format of the packet. Choices are All, 802.3 tagged, 802.3 untagged,

Ethernet II tagged and Ethernet II untagged.

A value of 802.3 indicates that the packets are format ted according to the IEEE 802.3

standards.

A value of Ethernet II indicates that the packets are formatted according to RFC 894,

Ethernet II encapsulation.

Layer 2

Specify the fields below to configure a layer-2 classifier.

VLAN

VLAN Select Any to classify traffic from any VLAN or select the second option and specify the source

VLAN ID in the field provided.

Inner

VLAN Select Any to classify traffic from any inner VLAN (the customer's VLAN) or select the second

option and specify the source VLAN ID in the field provided.

Priority

Priority Select Any to classify traffic from any priority level or select the second option and specify a

priority level in the field provided.

Inner

Priority Select Any to classify traffic from any inner priority level or select the second option and

specify a priority level in the field provided.

Ethernet Type Select an Ethernet type or select Others and enter the Eth ernet t y pe nu mbe r in h exade ci mal

value. Refer to Table 88 on page 206 for information.

Source

MAC Address Select Any to apply the rule to all MAC addresses.

To specify a source, select MAC/Mask to enter the source MAC address of the packet in v alid

MAC address format (six hexadecimal character pairs) and type the mask for the specified

MAC address to determine which bits a packet’s MAC address should match.

Enter “f” for each bit of the specified MAC address that the traffic’ s MAC address should match.

Enter “0” for the bit(s) of the matched tr affic’ s MAC address, which can be of any hexadecimal

charact er(s). F or example, if you se t the MAC address to 00:13:49:00: 00:00 and the mask to

ff:ff:ff:00:00:00 , a pac k e t wi th a MAC addre ss of 0 0:1 3:49 :12:34:56 matches this c rit eri a . If

you leave the Mask field blank, the Switch auto matically sets the mask to ff:ff:ff:ff:ff:ff.

Destination

Ta ble 86 Advanced Application > Classifier > Classifier Configuration (continued)

LABEL DESCRIPTION

Chapter 19 Classifier

GS3700/XGS3700 Series User’s Guide

205