User Guide
Page 3
...Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware ...3.2 Rear Panel ...20 3.2.1 Power Connector ...21 3.3 LEDs ...22 Chapter 4 The Web Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware ...3.2 Rear Panel ...20 3.2.1 Power Connector ...21 3.3 LEDs ...22 Chapter 4 The Web Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
...Configure Login Accounts and Privilege Levels 34 5.3 How to Manage a Configuration File 36 5.3.1 Backing up a Configuration File 36 5.3.2 Restoring a Configuration File 37 5.4 How to Create a VLAN ...38 5.4.1 Setting Port VID ...39 5.5 How to Set Up a Guest VLAN with IEEE 802.1x Authentication 41 5.5.1 Creating a VLAN...VLAN 42 5.6 How to Use Private VLAN to Do Port Isolation in a VLAN 44 5.6.1 Creating a Private VLAN...Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 ...10.1 Configuring Mirroring ...53 5.10.2 Configuring Remote Port... to Configure Access ...
...Configure Login Accounts and Privilege Levels 34 5.3 How to Manage a Configuration File 36 5.3.1 Backing up a Configuration File 36 5.3.2 Restoring a Configuration File 37 5.4 How to Create a VLAN ...38 5.4.1 Setting Port VID ...39 5.5 How to Set Up a Guest VLAN with IEEE 802.1x Authentication 41 5.5.1 Creating a VLAN...VLAN 42 5.6 How to Use Private VLAN to Do Port Isolation in a VLAN 44 5.6.1 Creating a Private VLAN...Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 ...10.1 Configuring Mirroring ...53 5.10.2 Configuring Remote Port... to Configure Access ...
User Guide
Page 8
... Manage the Switch Use any of the following features. • Static address assignment and stateless auto-configuration • Neighbor Discovery Protocol (a protocol used by all ports in the same VLAN as the server. Ports can belong to other IPv6 devices in a network) • Remote Management.... Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide the ...
... Manage the Switch Use any of the following features. • Static address assignment and stateless auto-configuration • Neighbor Discovery Protocol (a protocol used by all ports in the same VLAN as the server. Ports can belong to other IPv6 devices in a network) • Remote Management.... Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide the ...
User Guide
Page 28
...to a screen where you can configure CIST (Common and Internal Spanning Tree) ports. VLANs VLAN Membership This link takes you to a screen where you can view the MAC address and VLAN ID of MAC addresses to VLAN mapping settings. Private VLANs 28 GS1910/XGS1910 Series User's Guide It ...for multimedia devices and IP Phones. MAC Table This link takes you to a screen where you can configure and view 802.1Q VLAN parameters for the Switch. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION Ports This link takes you to a screen where...
...to a screen where you can configure CIST (Common and Internal Spanning Tree) ports. VLANs VLAN Membership This link takes you to a screen where you can view the MAC address and VLAN ID of MAC addresses to VLAN mapping settings. Private VLANs 28 GS1910/XGS1910 Series User's Guide It ...for multimedia devices and IP Phones. MAC Table This link takes you to a screen where you can configure and view 802.1Q VLAN parameters for the Switch. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION Ports This link takes you to a screen where...
User Guide
Page 29
... precedence level mapping for all incoming traffic. Monitor GS1910/XGS1910 Series User's Guide 29 DSCP Translation This link takes you to prevent communication between ports in a private VLAN or IEEE 802.1Q tagged VLAN to a screen where you can configure the DSCP translation/mapping table for telephony devices detecting... you to limit the transmission rate of unicast, broadcast and unknown packets the Switch receives per second on the XGS1910-24 or XGS1910-48. Port Mirroring This link takes you to a screen where you can copy traffic from the first port without interference.
... precedence level mapping for all incoming traffic. Monitor GS1910/XGS1910 Series User's Guide 29 DSCP Translation This link takes you to prevent communication between ports in a private VLAN or IEEE 802.1Q tagged VLAN to a screen where you can configure the DSCP translation/mapping table for telephony devices detecting... you to limit the transmission rate of unicast, broadcast and unknown packets the Switch receives per second on the XGS1910-24 or XGS1910-48. Port Mirroring This link takes you to a screen where you can copy traffic from the first port without interference.
User Guide
Page 30
...Security Access Management Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. Switch This link takes you to a screen where you can...view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Port Status This link takes you to a screen where you... link takes you to a screen that displays an individual log. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION System Information This link takes you can...
...Security Access Management Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. Switch This link takes you to a screen where you can...view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Port Status This link takes you to a screen where you... link takes you to a screen that displays an individual log. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION System Information This link takes you can...
User Guide
Page 31
...This link takes you to a screen where you to the Switch. GS1910/XGS1910 Series User's Guide 31 You can restore a previously saved configuration from your current Switch configuration to a computer. This link takes you can view the MAC-based VLAN settings. This link takes you to a screen where you can view ...you can view the LLDP-MED neighboring device information. This link takes you can view LLDP traffic statistics on the Switch or on the XGS1910-24 or XGS1910-48. This link takes you to a screen where you can switch to a screen where you to use a second firmware image ...
...This link takes you to a screen where you to the Switch. GS1910/XGS1910 Series User's Guide 31 You can restore a previously saved configuration from your current Switch configuration to a computer. This link takes you can view the MAC-based VLAN settings. This link takes you to a screen where you can view ...you can view the LLDP-MED neighboring device information. This link takes you can view LLDP traffic statistics on the Switch or on the XGS1910-24 or XGS1910-48. This link takes you to a screen where you can switch to a screen where you to use a second firmware image ...
User Guide
Page 32
... You have to log in with your password again after you finish a management session for the first time, it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of the Switch. 4.5 Logging Out ...of the Web Configurator Click Logout in a screen to display the next screen. Chapter 4 The Web Configurator 4.3.1 Change Your Password After you log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Figure 26...
... You have to log in with your password again after you finish a management session for the first time, it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of the Switch. 4.5 Logging Out ...of the Web Configurator Click Logout in a screen to display the next screen. Chapter 4 The Web Configurator 4.3.1 Change Your Password After you log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Figure 26...
User Guide
Page 33
...configure the IP address to set up and use the Switch. The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN... • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN... • How to Configure Access Control List (ACL...of using the Web Configurator to be in ...
...configure the IP address to set up and use the Switch. The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN... • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN... • How to Configure Access Control List (ACL...of using the Web Configurator to be in ...
User Guide
Page 34
... log in to the Switch. See Section 4.2 on page 25 for login accounts. 34 GS1910/XGS1910 Series User's Guide You cannot change the user name and privilege level of system configuration. Click Renew to belong. Your computer must have the Switch act as a DHCP client ...account. Chapter 5 Tutorials 1 Connect your computer to the Switch's port which is the same as the VLAN ID you configure in the Configuration > VLANs > VLAN Membership screen. This is in VLAN1 (the default management VLAN). 2 Open your web browser and enter 192.168.1.1 (the default management IP address) in the ...
... log in to the Switch. See Section 4.2 on page 25 for login accounts. 34 GS1910/XGS1910 Series User's Guide You cannot change the user name and privilege level of system configuration. Click Renew to belong. Your computer must have the Switch act as a DHCP client ...account. Chapter 5 Tutorials 1 Connect your computer to the Switch's port which is the same as the VLAN ID you configure in the Configuration > VLANs > VLAN Membership screen. This is in VLAN1 (the default management VLAN). 2 Open your web browser and enter 192.168.1.1 (the default management IP address) in the ...
User Guide
Page 38
... your backup configuration file is VLAN 1 for a multicast group that switches need to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. A tagged VLAN uses an explicit tag (VLAN ID) in VLAN 1. The default PVID is automatically renamed when you want to identify the VLAN membership of VLAN 2. Figure 28 VLAN Example 38 GS1910/XGS1910...
... your backup configuration file is VLAN 1 for a multicast group that switches need to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. A tagged VLAN uses an explicit tag (VLAN ID) in VLAN 1. The default PVID is automatically renamed when you want to identify the VLAN membership of VLAN 2. Figure 28 VLAN Example 38 GS1910/XGS1910...
User Guide
Page 39
... the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save ... frames received on that port so that the frames are forwarded to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39 Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Click Add New...
... the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save ... frames received on that port so that the frames are forwarded to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39 Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Click Add New...
User Guide
Page 40
Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, you can either select Untag_all in the TX Tag...frame's VLAN ID is the same as the port VID on which the frame is transmitted. 4 click Save to save your changes back to VLAN 2. Chapter 5 Tutorials In the example network, configure 2 as the PVID of the port on port 1 so that port get sent to the Switch 40 GS1910/XGS1910 ...
Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, you can either select Untag_all in the TX Tag...frame's VLAN ID is the same as the port VID on which the frame is transmitted. 4 click Save to save your changes back to VLAN 2. Chapter 5 Tutorials In the example network, configure 2 as the PVID of the port on port 1 so that port get sent to the Switch 40 GS1910/XGS1910 ...
User Guide
Page 41
... All ports on ports 1 to be a permanent member of VLAN 200. 1 Access the web configurator through a gateway attached to port 10, but are in VLAN 1 by default. GS1910/XGS1910 Series User's Guide 41 In this VLAN. 4 Configure port 10 to 8. Chapter 5 Tutorials 5.5 How to Set Up a Guest VLAN with the authentication server. Clients that connect to ports...
... All ports on ports 1 to be a permanent member of VLAN 200. 1 Access the web configurator through a gateway attached to port 10, but are in VLAN 1 by default. GS1910/XGS1910 Series User's Guide 41 In this VLAN. 4 Configure port 10 to 8. Chapter 5 Tutorials 5.5 How to Set Up a Guest VLAN with the authentication server. Clients that connect to ports...
User Guide
Page 42
Chapter 5 Tutorials 5 Click Save to save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming untagged frames received on these ports. 9 click Save to ...of these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, select Untag_all in the Mode field to clients based on the Switch. 42 GS1910/XGS1910 Series User's Guide
Chapter 5 Tutorials 5 Click Save to save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming untagged frames received on these ports. 9 click Save to ...of these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, select Untag_all in the Mode field to clients based on the Switch. 42 GS1910/XGS1910 Series User's Guide
User Guide
Page 43
...password to stay connected to the port. 3 Select the Guest VLAN Enabled check box and enter the guest VLAN ID (200 in this example) to enable the guest VLAN on ports 1, 2 and 3. The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the ...guest VLAN. 4 Set Admin State to Port-based 802.1x for ports 1 to 8 to port 10 which is also in VLAN 200, but cannot communicate with devices in the specified guest VLAN. 6 Click Save. GS1910/XGS1910 Series User's...
...password to stay connected to the port. 3 Select the Guest VLAN Enabled check box and enter the guest VLAN ID (200 in this example) to enable the guest VLAN on ports 1, 2 and 3. The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the ...guest VLAN. 4 Set Admin State to Port-based 802.1x for ports 1 to 8 to port 10 which is also in VLAN 200, but cannot communicate with devices in the specified guest VLAN. 6 Click Save. GS1910/XGS1910 Series User's...
User Guide
Page 44
... VLAN instead of private VLAN 25. 1 Access the web configurator through the Switch's port on which port isolation is enabled. Internet In this private VLAN. 44 GS1910/... example, you put ports 2 to 4 and 25 in private VLAN 25 and enable port isolation to block traffic between ports. An isolated ...VLAN 1 and private VLAN 1. An isolated port is a port on the Switch are in a VLAN but still allow ports to Configuration > Private VLANs > PVLAN Membership. You use private VLAN to do port isolation in the same VLAN and same private VLAN. Click Add New Private VLAN. 3 Enter a private VLAN...
... VLAN instead of private VLAN 25. 1 Access the web configurator through the Switch's port on which port isolation is enabled. Internet In this private VLAN. 44 GS1910/... example, you put ports 2 to 4 and 25 in private VLAN 25 and enable port isolation to block traffic between ports. An isolated ...VLAN 1 and private VLAN 1. An isolated port is a port on the Switch are in a VLAN but still allow ports to Configuration > Private VLANs > PVLAN Membership. You use private VLAN to do port isolation in the same VLAN and same private VLAN. Click Add New Private VLAN. 3 Enter a private VLAN...
User Guide
Page 45
...from getting IP addresses from information provided manually by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. Use DHCP ...If there is not a binding, the Switch discards the packet. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port...
...from getting IP addresses from information provided manually by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. Use DHCP ...If there is not a binding, the Switch discards the packet. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port...
User Guide
Page 46
... MAC address and source IP address in the packet do not match any of the current bindings. The Switch discards DHCP packets from trusted ports. M VLAN 100 CB A The settings in this tutorial are no trusted ports. Table 5 Settings in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client.... Untrusted Ports Every port is either a trusted port or an untrusted port for how to create a VLAN and configure ports to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials If you want DHCP server A connected to port 5 to assign IP addresses to all DHCP ...
... MAC address and source IP address in the packet do not match any of the current bindings. The Switch discards DHCP packets from trusted ports. M VLAN 100 CB A The settings in this tutorial are no trusted ports. Table 5 Settings in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client.... Untrusted Ports Every port is either a trusted port or an untrusted port for how to create a VLAN and configure ports to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials If you want DHCP server A connected to port 5 to assign IP addresses to all DHCP ...
User Guide
Page 48
... gateway information to a specific DHCP server. This tutorial describes how to configure your DHCP server (192.168.2.3) and want to have configured your Switch to forward DHCP client requests to DHCP client A based on the slot 48 GS1910/XGS1910 Series User's Guide The DHCP server can then assign a specific .... Click Save. 7 Go to Monitor > Security > Network > IP Source Guard to look at the current dynamic bindings for port 6 or 7 in VLAN 100. 5.8 How to Use DHCP Relay on the information in the same broadcast domain, the Switch can help to learn dynamically on ports 6 and 7. ...
... gateway information to a specific DHCP server. This tutorial describes how to configure your DHCP server (192.168.2.3) and want to have configured your Switch to forward DHCP client requests to DHCP client A based on the slot 48 GS1910/XGS1910 Series User's Guide The DHCP server can then assign a specific .... Click Save. 7 Go to Monitor > Security > Network > IP Source Guard to look at the current dynamic bindings for port 6 or 7 in VLAN 100. 5.8 How to Use DHCP Relay on the information in the same broadcast domain, the Switch can help to learn dynamically on ports 6 and 7. ...