User Guide
Page 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
... devices such as switches, routers, computers, print servers and so on the server and access the Internet. VLAN groups can be partitioned into multiple logical networks. GS1910/XGS1910 Series User's Guide 7 You can share high-speed applications on . Figure 3 Gigabit to the Desktop... Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified at any re-...
... devices such as switches, routers, computers, print servers and so on the server and access the Internet. VLAN groups can be partitioned into multiple logical networks. GS1910/XGS1910 Series User's Guide 7 You can share high-speed applications on . Figure 3 Gigabit to the Desktop... Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified at any re-...
User Guide
Page 8
Chapter 1 Getting to Know Your Switch Shared resources such as a server can be used to discover other VLAN groups too. The increase in the same VLAN as "ping" • IPv4/IPv6 dual stack; This is designed to 3.4 x 1038 IP addresses. The device can ...Remote Management using a (supported) web browser. • SNMP. At the time of VLAN 1. In the following things regularly to make the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do...
Chapter 1 Getting to Know Your Switch Shared resources such as a server can be used to discover other VLAN groups too. The increase in the same VLAN as "ping" • IPv4/IPv6 dual stack; This is designed to 3.4 x 1038 IP addresses. The device can ...Remote Management using a (supported) web browser. • SNMP. At the time of VLAN 1. In the following things regularly to make the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do...
User Guide
Page 28
... configure authentication and accounting services via the Switch, configure the access control list, DHCP snooping, DHCP relay, IP source guard and ARP inspection settings. Private VLANs 28 GS1910/XGS1910 Series User's Guide Aggregation Static This link takes you to a screen where you can configure Link Layer Discovery ProtocolMedia Endpoint Discovery (LLDP- MVR...
... configure authentication and accounting services via the Switch, configure the access control list, DHCP snooping, DHCP relay, IP source guard and ARP inspection settings. Private VLANs 28 GS1910/XGS1910 Series User's Guide Aggregation Static This link takes you to a screen where you can configure Link Layer Discovery ProtocolMedia Endpoint Discovery (LLDP- MVR...
User Guide
Page 29
...takes you to a screen where you can configure how the Switch sets the priority level and drop eligible indicator field in the VLAN tag for incoming and/or outgoing traffic. DSCP Translation This link takes you to a screen where you can configure the DSCP ...on a port. DSCP Classification This link takes you to a screen where you can examine the traffic from the first port without interference. Monitor GS1910/XGS1910 Series User's Guide 29 Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION PVLAN Membership This link takes you...
...takes you to a screen where you can configure how the Switch sets the priority level and drop eligible indicator field in the VLAN tag for incoming and/or outgoing traffic. DSCP Translation This link takes you to a screen where you can configure the DSCP ...on a port. DSCP Classification This link takes you to a screen where you can examine the traffic from the first port without interference. Monitor GS1910/XGS1910 Series User's Guide 29 Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION PVLAN Membership This link takes you...
User Guide
Page 30
... screen where you can view MVR channels (groups) information. MVR Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION System Information This link takes you... you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide IPMC IGMP Snooping This link takes you to a screen where you can view LACP statistics on a port...
... screen where you can view MVR channels (groups) information. MVR Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION System Information This link takes you... you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide IPMC IGMP Snooping This link takes you to a screen where you can view LACP statistics on a port...
User Guide
Page 31
...Configurator Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can view LLDP traffic... can switch to a screen where you to use a second firmware image if available. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can view detailed VLAN settings on each port. This link takes you to a screen where you can view ...
...Configurator Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can view LLDP traffic... can switch to a screen where you to use a second firmware image if available. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can view detailed VLAN settings on each port. This link takes you to a screen where you can view ...
User Guide
Page 32
...-band-management (managing through the data ports) if you do one of the following: 1 Delete the management VLAN (default is recommended you change the default administrator password. Click the Help link from accessing the Switch. 6 ...Change a service port number but forget it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5...4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide
...-band-management (managing through the data ports) if you do one of the following: 1 Delete the management VLAN (default is recommended you change the default administrator password. Click the Help link from accessing the Switch. 6 ...Change a service port number but forget it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5...4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide
User Guide
Page 33
... Passing through your network. CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168.1.1. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 You can configure the IP address to be in the same subnet as your network or have the Switch obtain... a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • How...
... Passing through your network. CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168.1.1. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 You can configure the IP address to be in the same subnet as your network or have the Switch obtain... a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • How...
User Guide
Page 34
...Renew to update the IP address and DNS server information after you click Save. This is working as the VLAN ID you configure in to the Switch and manage the privilege levels for more information. In this management ...the admin account. Alternatively, you can create new login accounts the user used to log in the Configuration > VLANs > VLAN Membership screen. You cannot change the user name and privilege level of system configuration. Your computer must have the ... changes back to the Switch. See Section 4.2 on page 25 for login accounts. 34 GS1910/XGS1910 Series User's Guide
...Renew to update the IP address and DNS server information after you click Save. This is working as the VLAN ID you configure in to the Switch and manage the privilege levels for more information. In this management ...the admin account. Alternatively, you can create new login accounts the user used to log in the Configuration > VLANs > VLAN Membership screen. You cannot change the user name and privilege level of system configuration. Your computer must have the ... changes back to the Switch. See Section 4.2 on page 25 for login accounts. 34 GS1910/XGS1910 Series User's Guide
User Guide
Page 38
...forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch, the Switch first decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials... After the upload is capable of VLAN 2. The VLANs can be created statically by the system) is duplicated only...
...forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch, the Switch first decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials... After the upload is capable of VLAN 2. The VLANs can be created statically by the system) is duplicated only...
User Guide
Page 39
...GS1910/XGS1910 Series User's Guide 39 Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN... to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received...
...GS1910/XGS1910 Series User's Guide 39 Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN... to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received...
User Guide
Page 40
... to VLAN 2. Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware ...devices (such as computers and hubs) can receive frames properly, you can either select Untag_all in the TX Tag field to set the Switch to remove any VLAN... tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same ...
... to VLAN 2. Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware ...devices (such as computers and hubs) can receive frames properly, you can either select Untag_all in the TX Tag field to set the Switch to remove any VLAN... tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same ...
User Guide
Page 41
... (VLAN200 for example) in the VLAN Name field for this guest VLAN, clients can surf the Internet through the Switch's port which is not IEEE 802.1x enabled Follow the steps below to configure port 10 as the mail server or local data base. GS1910/XGS1910 Series User's Guide 41 Chapter... 5 Tutorials 5.5 How to Set Up a Guest VLAN with the authentication server. You want to assign clients that connect to these ports should provide the ...
... (VLAN200 for example) in the VLAN Name field for this guest VLAN, clients can surf the Internet through the Switch's port which is not IEEE 802.1x enabled Follow the steps below to configure port 10 as the mail server or local data base. GS1910/XGS1910 Series User's Guide 41 Chapter... 5 Tutorials 5.5 How to Set Up a Guest VLAN with the authentication server. You want to assign clients that connect to these ports should provide the ...
User Guide
Page 42
... frames properly, select Untag_all in the Mode field to clients based on the Switch. 42 GS1910/XGS1910 Series User's Guide Select Enabled in the TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save your changes back... to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802.1x authentication on a RADIUS server. 1 Click ...
... frames properly, select Untag_all in the Mode field to clients based on the Switch. 42 GS1910/XGS1910 Series User's Guide Select Enabled in the TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save your changes back... to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802.1x authentication on a RADIUS server. 1 Click ...
User Guide
Page 43
GS1910/XGS1910 Series User's Guide 43 Clients that attach to port 1, 2 or 3 and fail to authenticate with devices in VLAN 200 and can access the Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN Enabled check box on the ... Admin State to Port-based 802.1x for ports 1 to 8 to port 10 which is also in VLAN 200, but cannot communicate with the RADIUS server now should be in VLAN 1. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his or her ...
GS1910/XGS1910 Series User's Guide 43 Clients that attach to port 1, 2 or 3 and fail to authenticate with devices in VLAN 200 and can access the Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN Enabled check box on the ... Admin State to Port-based 802.1x for ports 1 to 8 to port 10 which is also in VLAN 200, but cannot communicate with the RADIUS server now should be in VLAN 1. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his or her ...
User Guide
Page 44
... between ports. You want to do port isolation in a VLAN instead of private VLAN 25. 1 Access the web configurator through the uplink port in the same VLAN. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide Port isolation prevents communication between ports 2, 3 and 4. 5.6.1 Creating a Private VLAN Follow the steps below to configure port 2, 3, 4 and...
... between ports. You want to do port isolation in a VLAN instead of private VLAN 25. 1 Access the web configurator through the uplink port in the same VLAN. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide Port isolation prevents communication between ports 2, 3 and 4. 5.6.1 Creating a Private VLAN Follow the steps below to configure port 2, 3, 4 and...
User Guide
Page 45
...to build the binding table dynamically. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so... to filter unauthorized DHCP packets on the network and to the Switch. If there is not a binding, the Switch discards the packet. GS1910/XGS1910 Series User's Guide 45 The Switch builds the binding table by administrators (static bindings). From port 2, 3, or 4, you should be...
...to build the binding table dynamically. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so... to filter unauthorized DHCP packets on the network and to the Switch. If there is not a binding, the Switch discards the packet. GS1910/XGS1910 Series User's Guide 45 The Switch builds the binding table by administrators (static bindings). From port 2, 3, or 4, you should be...
User Guide
Page 46
...• The packet is a DHCP server packet (for how to create a VLAN and configure ports to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Untrusted ports are connected to DHCP servers or other switches. Create a VLAN containing ports 5, 6 and 7. Log into the Switch by entering the username (...connected to subscribers. Untrusted Ports Every port is not in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 1 and 100 1 and 100 PVID 100 100 100 DHCP SNOOPING PORT TRUSTED Yes No No 1 Access the Switch through http://192...
...• The packet is a DHCP server packet (for how to create a VLAN and configure ports to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Untrusted ports are connected to DHCP servers or other switches. Create a VLAN containing ports 5, 6 and 7. Log into the Switch by entering the username (...connected to subscribers. Untrusted Ports Every port is not in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 1 and 100 1 and 100 PVID 100 100 100 DHCP SNOOPING PORT TRUSTED Yes No No 1 Access the Switch through http://192...