User Guide
Page 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
... servers and so on. The uplink module supports a fiber-optic connection which demand high bandwidth for a group of copper cabling. With VLAN, a station cannot directly talk to a data server and the Internet. Stations on the server and access the Internet. Use the optional.... Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified at any re-cabling. GS1910/XGS1910 Series User's Guide 7 VLAN groups can connect computers and servers directly to the Switch's port ...
... servers and so on. The uplink module supports a fiber-optic connection which demand high bandwidth for a group of copper cabling. With VLAN, a station cannot directly talk to a data server and the Internet. Stations on the server and access the Internet. Use the optional.... Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified at any re-cabling. GS1910/XGS1910 Series User's Guide 7 VLAN groups can connect computers and servers directly to the Switch's port ...
User Guide
Page 8
... and perform diagnostic functions, such as the server. This is designed to enhance IP address size and features. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following methods to manage the Switch. ... Habits for everyday management of the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide Ports can belong to other IPv6 devices in IPv6 address size to 128 bits (from the 32-bit IPv4...
... and perform diagnostic functions, such as the server. This is designed to enhance IP address size and features. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following methods to manage the Switch. ... Habits for everyday management of the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide Ports can belong to other IPv6 devices in IPv6 address size to 128 bits (from the 32-bit IPv4...
User Guide
Page 28
... maximum number of a device attached to a screen where you can configure MSTI priority settings. MAC Table This link takes you to learn on a port. Private VLANs 28 GS1910/XGS1910 Series User's Guide MSTI Priorities This link takes you to a screen where you can view the MAC address and... VLAN ID of MAC addresses to a screen where you can configure authentication and accounting services via the Switch, configure the access control list, DHCP snooping, DHCP...
... maximum number of a device attached to a screen where you can configure MSTI priority settings. MAC Table This link takes you to learn on a port. Private VLANs 28 GS1910/XGS1910 Series User's Guide MSTI Priorities This link takes you to a screen where you can view the MAC address and... VLAN ID of MAC addresses to a screen where you can configure authentication and accounting services via the Switch, configure the access control list, DHCP snooping, DHCP...
User Guide
Page 29
...takes you to a screen where you can examine the traffic from one port or ports to another port in the same VLAN. Monitor GS1910/XGS1910 Series User's Guide 29 VLAN Voice VLAN Configuration This link takes you to a screen where you can configure the DSCP to QoS class and drop precedence level ... IEEE 802.1Q tagged VLAN to prevent communication between ports in order that allow you to limit the transmission rate of unicast, broadcast and unknown packets the Switch receives per second on the ports. This screen is not available on the XGS1910-24 or XGS1910-48. Stack This link ...
...takes you to a screen where you can examine the traffic from one port or ports to another port in the same VLAN. Monitor GS1910/XGS1910 Series User's Guide 29 VLAN Voice VLAN Configuration This link takes you to a screen where you can configure the DSCP to QoS class and drop precedence level ... IEEE 802.1Q tagged VLAN to prevent communication between ports in order that allow you to limit the transmission rate of unicast, broadcast and unknown packets the Switch receives per second on the ports. This screen is not available on the XGS1910-24 or XGS1910-48. Stack This link ...
User Guide
Page 30
...to a screen where you can view the QoS control list status. Port Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Statistics This link takes you to a screen where you can view LACP statistics on a port. MVR Channel This... link takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Port Status This link takes you to a screen where you can view the status of STP bridage instances. Detailed Log...
...to a screen where you can view the QoS control list status. Port Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Statistics This link takes you to a screen where you can view LACP statistics on a port. MVR Channel This... link takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Port Status This link takes you to a screen where you can view the status of STP bridage instances. Detailed Log...
User Guide
Page 31
... you can switch to a screen where you can see whether stacking is enabled on a port. GS1910/XGS1910 Series User's Guide 31 This link takes you to use a second firmware image if available... LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to the...you can also view what kind of the Ethernet connections on the XGS1910-24 or XGS1910-48. Configuration Backup Upload This screen is . This link takes you to a...
... you can switch to a screen where you can see whether stacking is enabled on a port. GS1910/XGS1910 Series User's Guide 31 This link takes you to use a second firmware image if available... LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to the...you can also view what kind of the Ethernet connections on the XGS1910-24 or XGS1910-48. Configuration Backup Upload This screen is . This link takes you to a...
User Guide
Page 32
... 4 The Web Configurator 4.3.1 Change Your Password After you log in with your password again after you finish a management session for the first time, it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of the Switch. 4.5 Logging ... and others ) from a web configurator screen to log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Click the Help link from using in a screen to display the next screen.
... 4 The Web Configurator 4.3.1 Change Your Password After you log in with your password again after you finish a management session for the first time, it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of the Switch. 4.5 Logging ... and others ) from a web configurator screen to log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Click the Help link from using in a screen to display the next screen.
User Guide
Page 33
...Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic ...network or have the Switch obtain a dynamic IP address from a DHCP server in your network. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 You can configure the IP address to set up and use the Switch. The following figure shows an example. ...
...Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic ...network or have the Switch obtain a dynamic IP address from a DHCP server in your network. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 You can configure the IP address to set up and use the Switch. The following figure shows an example. ...
User Guide
Page 34
... DHCP client. 5.2 How to Configure Login Accounts and Privilege Levels The admin account has a privilege level of the VLAN group to which you configure in the Configuration > VLANs > VLAN Membership screen. Check the DHCP server for more information. The IP address assigned by a DHCP server has priority over...administrator can create new login accounts the user used to log in to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide You can perform all types of the admin account. Chapter 5 Tutorials 1 Connect your computer to the Switch...
... DHCP client. 5.2 How to Configure Login Accounts and Privilege Levels The admin account has a privilege level of the VLAN group to which you configure in the Configuration > VLANs > VLAN Membership screen. Check the DHCP server for more information. The IP address assigned by a DHCP server has priority over...administrator can create new login accounts the user used to log in to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide You can perform all types of the admin account. Chapter 5 Tutorials 1 Connect your computer to the Switch...
User Guide
Page 38
... to a specific domain. Each port on ports that are in VLAN 1. A broadcast frame (or a multicast frame for all ports on the Switch, so your backup configuration file is capable of VLAN 2. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide To forward a frame from an 802....1Q VLANunaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to identify the VLAN membership of the configuration file on the...
... to a specific domain. Each port on ports that are in VLAN 1. A broadcast frame (or a multicast frame for all ports on the Switch, so your backup configuration file is capable of VLAN 2. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide To forward a frame from an 802....1Q VLANunaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to identify the VLAN membership of the configuration file on the...
User Guide
Page 39
... network is connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on that port... so that the frames are forwarded to the VLAN group that the tag defines. Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39
... network is connected to port 1 on the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on that port... so that the frames are forwarded to the VLAN group that the tag defines. Click Add New VLAN to create VLAN2. 3 Enter 2 in the VLAN ID field and enter a descriptive name in the navigation panel. GS1910/XGS1910 Series User's Guide 39
User Guide
Page 40
Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials In the example network..., configure 2 as the port VID on port 1 so that any untagged frames received on that VLAN-unaware devices (such as computers and hubs) can receive frames properly...
Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Chapter 5 Tutorials In the example network..., configure 2 as the port VID on port 1 so that any untagged frames received on that VLAN-unaware devices (such as computers and hubs) can receive frames properly...
User Guide
Page 41
... ports should provide the correct user name and password in order to access the ports. VLAN 1 Guest VLAN 200 Ports 1, 2, 3 and 10 Internet 5.5.1 Creating a VLAN for Port which is not in VLAN 200. 2 Click Configuration > VLANs > VLAN Membership in VLAN 1 by default. GS1910/XGS1910 Series User's Guide 41 Say you enable IEEE 802.1x authentication on the Switch...
... ports should provide the correct user name and password in order to access the ports. VLAN 1 Guest VLAN 200 Ports 1, 2, 3 and 10 Internet 5.5.1 Creating a VLAN for Port which is not in VLAN 200. 2 Click Configuration > VLANs > VLAN Membership in VLAN 1 by default. GS1910/XGS1910 Series User's Guide 41 Say you enable IEEE 802.1x authentication on the Switch...
User Guide
Page 42
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
User Guide
Page 43
The Switch puts unauthenticated clients in VLAN 1. GS1910/XGS1910 Series User's Guide 43 The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest VLAN. 4 Set Admin State to Port-based 802.1x for ports 1 to 8 to turn on IEEE 802.1x authentication... on these ports. 5 Select the Guest VLAN Enabled check box on the Switch. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his or her ...
The Switch puts unauthenticated clients in VLAN 1. GS1910/XGS1910 Series User's Guide 43 The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest VLAN. 4 Set Admin State to Port-based 802.1x for ports 1 to 8 to turn on IEEE 802.1x authentication... on these ports. 5 Select the Guest VLAN Enabled check box on the Switch. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his or her ...
User Guide
Page 44
...the web configurator through the uplink port in VLAN 1 and private VLAN 1. By default, all ports on which port isolation will not be enabled. 2 Go to block traffic between ports. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide You want to ...allow ports to do port isolation in private VLAN 25 and enable port isolation to Configuration > Private VLANs > PVLAN Membership. Port isolation prevents communication between ports 2, 3 and 4. 5.6.1 Creating a Private VLAN Follow the steps below to the XGS1910-24 or XGS1910-48. An isolated port is not...
...the web configurator through the uplink port in VLAN 1 and private VLAN 1. By default, all ports on which port isolation will not be enabled. 2 Go to block traffic between ports. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide You want to ...allow ports to do port isolation in private VLAN 25 and enable port isolation to Configuration > Private VLANs > PVLAN Membership. Port isolation prevents communication between ports 2, 3 and 4. 5.6.1 Creating a Private VLAN Follow the steps below to the XGS1910-24 or XGS1910-48. An isolated port is not...
User Guide
Page 45
... the packet. The Switch builds the binding table by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. This can prevent ...bindings) and from unauthorized DHCP servers. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that...
... the packet. The Switch builds the binding table by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. This can prevent ...bindings) and from unauthorized DHCP servers. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that...
User Guide
Page 46
... port 5 to assign IP addresses to all DHCP requests if you enable ARP inspection. Trusted ports are connected to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Create a VLAN containing ports 5, 6 and 7. Connect a computer (M) to the Switch's port which is either a trusted port or an... untrusted port for DHCP snooping. M VLAN 100 CB A The settings in the following . Untrusted Ports Every port is not in the ...
... port 5 to assign IP addresses to all DHCP requests if you enable ARP inspection. Trusted ports are connected to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Create a VLAN containing ports 5, 6 and 7. Connect a computer (M) to the Switch's port which is either a trusted port or an... untrusted port for DHCP snooping. M VLAN 100 CB A The settings in the following . Untrusted Ports Every port is not in the ...