User Guide
Page 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
...-optic connection which demand high bandwidth for a group of copper cabling. Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to or hear from stations that are not in the same group(s) unless such...networks which alleviates the distance limitations of heavy traffic users. VLAN groups can share high-speed applications on the server and access the Internet. With VLAN, a station cannot directly talk to be modified at any re-cabling. GS1910/XGS1910 Series User's Guide 7 In this example, all...
...-optic connection which demand high bandwidth for a group of copper cabling. Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to or hear from stations that are not in the same group(s) unless such...networks which alleviates the distance limitations of heavy traffic users. VLAN groups can share high-speed applications on the server and access the Internet. With VLAN, a station cannot directly talk to be modified at any re-cabling. GS1910/XGS1910 Series User's Guide 7 In this example, all...
User Guide
Page 8
... Switch Use any of the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide This is designed to be monitored and/or managed by all ports in IPv6 address size to 128 ... Management using a (supported) web browser. • SNMP. The device can belong to 3.4 x 1038 IP addresses. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following methods to report errors encountered in packet processing and...
... Switch Use any of the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide This is designed to be monitored and/or managed by all ports in IPv6 address size to 128 ... Management using a (supported) web browser. • SNMP. The device can belong to 3.4 x 1038 IP addresses. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following methods to report errors encountered in packet processing and...
User Guide
Page 28
... settings. MAC Table This link takes you to advertise its identity and capabilities on the Switch. Private VLANs 28 GS1910/XGS1910 Series User's Guide It also allows the device to maintain and store information from adjacent devices which are directly ...connected to a screen where you can configure Link Layer Discovery ProtocolMedia Endpoint Discovery (LLDP- VLANs VLAN Membership This link takes you to the network device. MVR This...
... settings. MAC Table This link takes you to advertise its identity and capabilities on the Switch. Private VLANs 28 GS1910/XGS1910 Series User's Guide It also allows the device to maintain and store information from adjacent devices which are directly ...connected to a screen where you can configure Link Layer Discovery ProtocolMedia Endpoint Discovery (LLDP- VLANs VLAN Membership This link takes you to the network device. MVR This...
User Guide
Page 29
...enable port isolation on ports in a private VLAN or IEEE 802.1Q tagged VLAN to prevent communication between ports in the stack. QoS Control List This link takes you to a screen where you can configure a protocol-based VLAN. Monitor GS1910/XGS1910 Series User's Guide 29 UPnP This ...link takes you to a screen to enable stacking and manage other members in the same VLAN. Protocol-based This link takes you to a screen where you can...
...enable port isolation on ports in a private VLAN or IEEE 802.1Q tagged VLAN to prevent communication between ports in the stack. QoS Control List This link takes you to a screen where you can configure a protocol-based VLAN. Monitor GS1910/XGS1910 Series User's Guide 29 UPnP This ...link takes you to a screen to enable stacking and manage other members in the same VLAN. Protocol-based This link takes you to a screen where you can...
User Guide
Page 30
... where you can view the Switch's QoS-related packet statistics. QoS Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. AAA This link takes you to a screen where you can view the packet statistics for authentication and accounting servers. ... link takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide LACP System Status This link takes you to a screen where you to a screen that displays view system logs for...
... where you can view the Switch's QoS-related packet statistics. QoS Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. AAA This link takes you to a screen where you can view the packet statistics for authentication and accounting servers. ... link takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide LACP System Status This link takes you to a screen where you to a screen that displays view system logs for...
User Guide
Page 31
... configuration to a computer. This link takes you to a screen where you can switch to use a second firmware image if available. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can ping IPv6 addresses to test connections. This link ... Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can reboot the system...
... configuration to a computer. This link takes you to a screen where you can switch to use a second firmware image if available. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can ping IPv6 addresses to test connections. This link ... Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can reboot the system...
User Guide
Page 32
...Change Your Password After you log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Figure 26 Change Administrator Login Password 4.4 Switch Lockout You could block yourself (and all services from using... some supplementary information. Note: Be careful not to view an online help has descriptions of the following: 1 Delete the management VLAN (default is recommended you log out. This is recommended after you change the default administrator password. Click Configuration > Security > Switch...
...Change Your Password After you log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Figure 26 Change Administrator Login Password 4.4 Switch Lockout You could block yourself (and all services from using... some supplementary information. Note: Be careful not to view an online help has descriptions of the following: 1 Delete the management VLAN (default is recommended you log out. This is recommended after you change the default administrator password. Click Configuration > Security > Switch...
User Guide
Page 33
...configure the IP address to be in the same subnet as your network or have the Switch obtain a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • ... Analyze Traffic Using Mirroring • How to Use IGMP Snooping to set up and use the Switch. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and Privilege ...
...configure the IP address to be in the same subnet as your network or have the Switch obtain a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • ... Analyze Traffic Using Mirroring • How to Use IGMP Snooping to set up and use the Switch. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and Privilege ...
User Guide
Page 34
...ID of the admin account. You cannot change the user name and privilege level of the VLAN group to which you configure in to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide Your computer must have the Switch act as a DHCP client. .... You can perform all types of 15, so the administrator can create new login accounts the user used to log in the Configuration > VLANs > VLAN Membership screen. Check the DHCP server for more information. The IP address assigned by a DHCP server has priority over the IP address you manually...
...ID of the admin account. You cannot change the user name and privilege level of the VLAN group to which you configure in to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide Your computer must have the Switch act as a DHCP client. .... You can perform all types of 15, so the administrator can create new login accounts the user used to log in the Configuration > VLANs > VLAN Membership screen. Check the DHCP server for more information. The IP address assigned by a DHCP server has priority over the IP address you manually...
User Guide
Page 38
... using IEEE 802.1Q tagged static VLAN with a specific VLAN and provides the information that switches need to identify the VLAN membership of a frame across the network. A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to process the frame across bridges - Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials...
... using IEEE 802.1Q tagged static VLAN with a specific VLAN and provides the information that switches need to identify the VLAN membership of a frame across the network. A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to process the frame across bridges - Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials...
User Guide
Page 39
...field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39 Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2...connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
...field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39 Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2...connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
User Guide
Page 40
... or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as the port VID on port 1 so that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials In the example network, configure 2 as the... PVID of the port on that any untagged frames received on which the frame is transmitted. 4 click Save to save your changes back to VLAN 2.
... or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as the port VID on port 1 so that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials In the example network, configure 2 as the... PVID of the port on that any untagged frames received on which the frame is transmitted. 4 click Save to save your changes back to VLAN 2.
User Guide
Page 41
... server. You want to assign clients that connect to these ports should provide the correct user name and password in the VLAN Name field for example) when they fail to authenticate with IEEE 802.1x Authentication All ports on ports 1 to configure port... local data base. GS1910/XGS1910 Series User's Guide 41 Clients that connect to ports 1, 2 or 3 to a guest VLAN (200 for this guest VLAN, clients can surf the Internet through the Switch's port which is not in VLAN 200. 2 Click Configuration > VLANs > VLAN Membership in VLAN 1 by default. In this VLAN. 4 Configure port...
... server. You want to assign clients that connect to these ports should provide the correct user name and password in the VLAN Name field for example) when they fail to authenticate with IEEE 802.1x Authentication All ports on ports 1 to configure port... local data base. GS1910/XGS1910 Series User's Guide 41 Clients that connect to ports 1, 2 or 3 to a guest VLAN (200 for this guest VLAN, clients can surf the Internet through the Switch's port which is not in VLAN 200. 2 Click Configuration > VLANs > VLAN Membership in VLAN 1 by default. In this VLAN. 4 Configure port...
User Guide
Page 42
... frames properly, select Untag_all in the Mode field to clients based on the Switch. 42 GS1910/XGS1910 Series User's Guide Select Enabled in the TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save your changes back... to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802.1x authentication on a RADIUS server. 1 Click ...
... frames properly, select Untag_all in the Mode field to clients based on the Switch. 42 GS1910/XGS1910 Series User's Guide Select Enabled in the TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save your changes back... to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802.1x authentication on a RADIUS server. 1 Click ...
User Guide
Page 43
... VLAN Enabled check box and enter the guest VLAN ID (200 in the specified guest VLAN. 6 Click Save. The Switch will automatically create the guest VLAN and... 10 which is also in VLAN 200, but cannot communicate with the RADIUS server now should be in VLAN 200 and can access the ...Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN... Enabled check box on the Switch. The Switch puts unauthenticated clients in this example) to enable the guest VLAN on ports 1, 2 and...
... VLAN Enabled check box and enter the guest VLAN ID (200 in the specified guest VLAN. 6 Click Save. The Switch will automatically create the guest VLAN and... 10 which is also in VLAN 200, but cannot communicate with the RADIUS server now should be in VLAN 200 and can access the ...Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN... Enabled check box on the Switch. The Switch puts unauthenticated clients in this example) to enable the guest VLAN on ports 1, 2 and...
User Guide
Page 44
... isolation is not applicable to the XGS1910-24 or XGS1910-48. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide An isolated port cannot communicate with other isolated ports even when they are in VLAN 1 and private VLAN 1. By default, all ports on which port isolation will not be members of private...
... isolation is not applicable to the XGS1910-24 or XGS1910-48. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide An isolated port cannot communicate with other isolated ports even when they are in VLAN 1 and private VLAN 1. By default, all ports on which port isolation will not be members of private...
User Guide
Page 45
... binding, the Switch forwards the packet. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that attaches...send traffic to allow or block IP traffic in the binding table. If there is not a binding, the Switch discards the packet. GS1910/XGS1910 Series User's Guide 45 5 Click Save to save the settings to build the binding table dynamically. The Switch builds the binding ...
... binding, the Switch forwards the packet. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that attaches...send traffic to allow or block IP traffic in the binding table. If there is not a binding, the Switch discards the packet. GS1910/XGS1910 Series User's Guide 45 5 Click Save to save the settings to build the binding table dynamically. The Switch builds the binding ...
User Guide
Page 46
... ports. In the following example, you enable ARP inspection. M VLAN 100 CB A The settings in this tutorial are as the following... all devices in VLAN 100. Table 5 Settings in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 ... a trusted port or an untrusted port for how to create a VLAN and configure ports to the Switch's port which is not in the...and source IP address in VLAN 100. Untrusted ports are connected to subscribers. The Switch discards DHCP packets from trusted ports. Create a VLAN containing ports 5, 6 ...
... ports. In the following example, you enable ARP inspection. M VLAN 100 CB A The settings in this tutorial are as the following... all devices in VLAN 100. Table 5 Settings in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 ... a trusted port or an untrusted port for how to create a VLAN and configure ports to the Switch's port which is not in the...and source IP address in VLAN 100. Untrusted ports are connected to subscribers. The Switch discards DHCP packets from trusted ports. Create a VLAN containing ports 5, 6 ...