User Guide
Page 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
... small networks which alleviates the distance limitations of heavy traffic users. Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified at any re-cabling. Use the optional 10 Gigabit uplink... Know Your Switch 1.1.3 Gigabit Ethernet to the Desktop The Switch is an ideal solution for a group of copper cabling. Stations on . GS1910/XGS1910 Series User's Guide 7 In this example, all computers can connect computers and servers directly to the Switch's port or connect other ...
... small networks which alleviates the distance limitations of heavy traffic users. Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified at any re-cabling. Use the optional 10 Gigabit uplink... Know Your Switch 1.1.3 Gigabit Ethernet to the Desktop The Switch is an ideal solution for a group of copper cabling. Stations on . GS1910/XGS1910 Series User's Guide 7 In this example, all computers can connect computers and servers directly to the Switch's port or connect other ...
User Guide
Page 8
...Switch Use any of the following figure only ports that need access to the server need to be part of VLAN 1. In the following methods to manage the Switch. • Web Configurator. The device can be monitored ...Chapter 1 Getting to Know Your Switch Shared resources such as a server can be used to discover other VLAN groups too. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following ...the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide
...Switch Use any of the following figure only ports that need access to the server need to be part of VLAN 1. In the following methods to manage the Switch. • Web Configurator. The device can be monitored ...Chapter 1 Getting to Know Your Switch Shared resources such as a server can be used to discover other VLAN groups too. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following ...the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide
User Guide
Page 28
... SNMP, remote management and RMON (Remote Network Monitor). Security Switch This link takes you to screens where you can create multicast VLANs and select the receiver port(s) and a source port for clients communicating via external servers. The external servers can also view what...You can be either RADIUS (Remote Authentication Dial-In User Service) or TACACS+ (Terminal Access Controller AccessControl System Plus). Private VLANs 28 GS1910/XGS1910 Series User's Guide Network This link takes you to a screen where you can change the system login password, manage the...
... SNMP, remote management and RMON (Remote Network Monitor). Security Switch This link takes you to screens where you can create multicast VLANs and select the receiver port(s) and a source port for clients communicating via external servers. The external servers can also view what...You can be either RADIUS (Remote Authentication Dial-In User Service) or TACACS+ (Terminal Access Controller AccessControl System Plus). Private VLANs 28 GS1910/XGS1910 Series User's Guide Network This link takes you to a screen where you can change the system login password, manage the...
User Guide
Page 29
...queues 0 to 5. Port Mirroring This link takes you to a screen where you can examine the traffic from the first port without interference. Monitor GS1910/XGS1910 Series User's Guide 29 This screen is not available on a port. Port Policing This link takes you to a screen where you can... configure the DSCP to a screen where you can configure an sFlow receiver (collector) and sFlow data sampling settings on the Switch. VLAN Voice VLAN Configuration This link takes you to QoS class and drop precedence level mapping for voice traffic. DSCP-Based QoS This link takes you ...
...queues 0 to 5. Port Mirroring This link takes you to a screen where you can examine the traffic from the first port without interference. Monitor GS1910/XGS1910 Series User's Guide 29 This screen is not available on a port. Port Policing This link takes you to a screen where you can... configure the DSCP to a screen where you can configure an sFlow receiver (collector) and sFlow data sampling settings on the Switch. VLAN Voice VLAN Configuration This link takes you to QoS class and drop precedence level mapping for voice traffic. DSCP-Based QoS This link takes you ...
User Guide
Page 30
... takes you to a screen that displays general system information. Port Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Statistics This link takes you to a screen where you can view STP packet statistics on a port. Security...packet statistics for the level that you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Groups MVR SFM Information This link takes you to a screen where you can view the status of STP...
... takes you to a screen that displays general system information. Port Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Statistics This link takes you to a screen where you can view STP packet statistics on a port. Security...packet statistics for the level that you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Groups MVR SFM Information This link takes you to a screen where you can view the status of STP...
User Guide
Page 31
... statistics on each port. This link takes you to a screen where you can view detailed VLAN settings on a port. Configuration Backup Upload This screen is enabled on the Switch. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can to... Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can view LLDP traffic...
... statistics on each port. This link takes you to a screen where you can view detailed VLAN settings on a port. Configuration Backup Upload This screen is enabled on the Switch. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can to... Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can view LLDP traffic...
User Guide
Page 32
...security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide This is recommended after you finish a management session for the first time, it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the ...password and/or IP address. 5 Prevent all others out of the Switch. 4.5 Logging Out of the following: 1 Delete the management VLAN (default is recommended you change the...
...security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide This is recommended after you finish a management session for the first time, it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the ...password and/or IP address. 5 Prevent all others out of the Switch. 4.5 Logging Out of the following: 1 Delete the management VLAN (default is recommended you change the...
User Guide
Page 33
... Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic •... Switch obtain a dynamic IP address from a DHCP server in your network. The following figure shows an example. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33
... Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic •... Switch obtain a dynamic IP address from a DHCP server in your network. The following figure shows an example. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33
User Guide
Page 34
... address from the DHCP server to which the Switch is connected. Click Renew to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide Your computer must have the Switch act as a DHCP client. 5.2 How to Configure Login Accounts and Privilege Levels The admin... your changes back to the Switch. The IP address assigned by a DHCP server has priority over the IP address you manually configured. 6 The VLAN ID field lets you log in with the admin account. 4 Click Configuration > System > IP in the navigation panel. 5 Enter 172.16.13.5 as the ...
... address from the DHCP server to which the Switch is connected. Click Renew to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide Your computer must have the Switch act as a DHCP client. 5.2 How to Configure Login Accounts and Privilege Levels The admin... your changes back to the Switch. The IP address assigned by a DHCP server has priority over the IP address you manually configured. 6 The VLAN ID field lets you log in with the admin account. 4 Click Configuration > System > IP in the navigation panel. 5 Enter 172.16.13.5 as the ...
User Guide
Page 38
..., all ports, but this can do this screen. 5.4 How to Create a VLAN VLANs confine broadcast frames to a specific domain. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide To forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch, the Switch first decides where to configure port 1 as a member...
..., all ports, but this can do this screen. 5.4 How to Create a VLAN VLANs confine broadcast frames to a specific domain. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide To forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch, the Switch first decides where to configure port 1 as a member...
User Guide
Page 39
... through http://192.168.1.1. GS1910/XGS1910 Series User's Guide 39 Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2...connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
... through http://192.168.1.1. GS1910/XGS1910 Series User's Guide 39 Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2...connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
User Guide
Page 40
... > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as the PVID of the port on that any VLAN tags ...leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as computers and hubs) can receive frames properly, you...frames received on which the frame is transmitted. 4 click Save to save your changes back to VLAN 2. Chapter 5 Tutorials In the example network, configure 2 as the port VID on port 1 so that port...
... > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as the PVID of the port on that any VLAN tags ...leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as computers and hubs) can receive frames properly, you...frames received on which the frame is transmitted. 4 click Save to save your changes back to VLAN 2. Chapter 5 Tutorials In the example network, configure 2 as the port VID on port 1 so that port...
User Guide
Page 41
... not in VLAN 200. 2 Click Configuration > VLANs > VLAN Membership in the navigation panel. VLAN 1 Guest VLAN 200 Ports 1, 2, 3 and 10 Internet 5.5.1 Creating a VLAN for this guest VLAN, clients can surf the Internet through a gateway attached to port 10, but are in order to access the ports. GS1910/XGS1910 Series ...User's Guide 41 Clients that connect to ports 1, 2 or 3 to a guest VLAN (200 for example) when they fail to authenticate with IEEE 802.1x Authentication All ports ...
... not in VLAN 200. 2 Click Configuration > VLANs > VLAN Membership in the navigation panel. VLAN 1 Guest VLAN 200 Ports 1, 2, 3 and 10 Internet 5.5.1 Creating a VLAN for this guest VLAN, clients can surf the Internet through a gateway attached to port 10, but are in order to access the ports. GS1910/XGS1910 Series ...User's Guide 41 Clients that connect to ports 1, 2 or 3 to a guest VLAN (200 for example) when they fail to authenticate with IEEE 802.1x Authentication All ports ...
User Guide
Page 42
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
User Guide
Page 43
... 1, 2 and 3. Clients that attach to port 1, 2 or 3 and fail to authenticate with devices in the specified guest VLAN. 6 Click Save. GS1910/XGS1910 Series User's Guide 43 The Switch puts unauthenticated clients in VLAN 1. The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest...
... 1, 2 and 3. Clients that attach to port 1, 2 or 3 and fail to authenticate with devices in the specified guest VLAN. 6 Click Save. GS1910/XGS1910 Series User's Guide 43 The Switch puts unauthenticated clients in VLAN 1. The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest...
User Guide
Page 44
... XGS1910-48. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide Port isolation prevents communication between ports 2, 3 and 4. 5.6.1 Creating a Private VLAN Follow the steps below to block traffic between ports. You use private VLAN to do port isolation in a VLAN but still allow ports to Configuration > Private VLANs > PVLAN Membership. You want to do...
... XGS1910-48. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide Port isolation prevents communication between ports 2, 3 and 4. 5.6.1 Creating a Private VLAN Follow the steps below to block traffic between ports. You use private VLAN to do port isolation in a VLAN but still allow ports to Configuration > Private VLANs > PVLAN Membership. You want to do...
User Guide
Page 45
... to the Switch. If there is not a binding, the Switch discards the packet. If there is a binding, the Switch forwards the packet. GS1910/XGS1910 Series User's Guide 45 From port 2, 3, or 4, you should be able to access the device that they cannot send traffic to allow ...settings to build the binding table dynamically. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that ...
... to the Switch. If there is not a binding, the Switch discards the packet. If there is a binding, the Switch forwards the packet. GS1910/XGS1910 Series User's Guide 45 From port 2, 3, or 4, you should be able to access the device that they cannot send traffic to allow ...settings to build the binding table dynamically. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that ...
User Guide
Page 46
... port is a DHCP server packet (for example, OFFER, ACK, or NACK). • The source MAC address and source IP address in VLAN 100. The Switch discards DHCP packets from trusted ports. In the following situations: • The packet is either a trusted port or an ...untrusted port for how to create a VLAN and configure ports to subscribers. Trusted ports are connected to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Create a VLAN containing ports 5, 6 and 7. Trusted vs.
... port is a DHCP server packet (for example, OFFER, ACK, or NACK). • The source MAC address and source IP address in VLAN 100. The Switch discards DHCP packets from trusted ports. In the following situations: • The packet is either a trusted port or an ...untrusted port for how to create a VLAN and configure ports to subscribers. Trusted ports are connected to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Create a VLAN containing ports 5, 6 and 7. Trusted vs.