User Guide
Page 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking ...50... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
... from stations that are not in the same group(s) unless such traffic first goes through a router. 1.1.4.1 Tag-based VLAN Example Ports in the same VLAN group share the same frame broadcast domain, thus increasing network performance by adding, moving or changing ports without any re-cabling...a physical network to be modified at any time by reducing broadcast traffic. VLAN groups can connect computers and servers directly to the Switch's port or connect other switches to a data server and the Internet. GS1910/XGS1910 Series User's Guide 7 To expand the network, simply add more groups...
... from stations that are not in the same group(s) unless such traffic first goes through a router. 1.1.4.1 Tag-based VLAN Example Ports in the same VLAN group share the same frame broadcast domain, thus increasing network performance by adding, moving or changing ports without any re-cabling...a physical network to be modified at any time by reducing broadcast traffic. VLAN groups can connect computers and servers directly to the Switch's port or connect other switches to a data server and the Internet. GS1910/XGS1910 Series User's Guide 7 To expand the network, simply add more groups...
User Guide
Page 8
... Protocol (a protocol used by an SNMP manager. 1.3 Good Habits for Managing the Switch Do the following things regularly to make the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to other IPv6 devices... browser. • SNMP. At the time of the Switch using ping SNMP and HTTP services • ICMPv6 to report errors encountered in the same VLAN as "ping" • IPv4/IPv6 dual stack; Ports can be part of the following figure only ports that need access to the server need to...
... Protocol (a protocol used by an SNMP manager. 1.3 Good Habits for Managing the Switch Do the following things regularly to make the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to other IPv6 devices... browser. • SNMP. At the time of the Switch using ping SNMP and HTTP services • ICMPv6 to report errors encountered in the same VLAN as "ping" • IPv4/IPv6 dual stack; Ports can be part of the following figure only ports that need access to the server need to...
User Guide
Page 28
... can configure MSTI priority settings. LLDP allows a network device to advertise its identity and capabilities on the Switch. MED) for each multicast VLAN. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION Ports This link takes you to a screen where you ...on the local network. You can change the system login password, manage the privilege levels for individual Switch ports. Private VLANs 28 GS1910/XGS1910 Series User's Guide It also allows the device to maintain and store information from adjacent devices which are directly ...
... can configure MSTI priority settings. LLDP allows a network device to advertise its identity and capabilities on the Switch. MED) for each multicast VLAN. Chapter 4 The Web Configurator Table 4 Navigation Panel Links (continued) LINK DESCRIPTION Ports This link takes you to a screen where you ...on the local network. You can change the system login password, manage the privilege levels for individual Switch ports. Private VLANs 28 GS1910/XGS1910 Series User's Guide It also allows the device to maintain and store information from adjacent devices which are directly ...
User Guide
Page 29
... screen where you can examine the traffic from one port or ports to another port in the same VLAN. QoS Control List This link takes you to different packet types. Monitor GS1910/XGS1910 Series User's Guide 29 Port DSCP This link takes you to a screen where you can configure... a Voice VLAN for traffic on the XGS1910-24 or XGS1910-48. VLAN Voice VLAN Configuration This link takes you to a screen where you...
... screen where you can examine the traffic from one port or ports to another port in the same VLAN. QoS Control List This link takes you to different packet types. Monitor GS1910/XGS1910 Series User's Guide 29 Port DSCP This link takes you to a screen where you can configure... a Voice VLAN for traffic on the XGS1910-24 or XGS1910-48. VLAN Voice VLAN Configuration This link takes you to a screen where you...
User Guide
Page 30
...takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Port Statistics This link takes you to a screen where you can view the status of RMON groups which ...a screen that displays view system logs for authentication and accounting servers. Log This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Channel This link takes you to a screen that you selected. Chapter 4 The Web Configurator Table 4 Navigation Panel...
...takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Port Statistics This link takes you to a screen where you can view the status of RMON groups which ...a screen that displays view system logs for authentication and accounting servers. Log This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Channel This link takes you to a screen that you selected. Chapter 4 The Web Configurator Table 4 Navigation Panel...
User Guide
Page 31
... via LLDP. This link takes you to a screen where you can view the MAC-based VLAN settings. This link takes you to a screen where you can view detailed VLAN settings on a port. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can view ...VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can reboot the system without turning the power off. This link takes you to a screen where you can view sFlow receiver state and sFlow packet statistics on the XGS1910-24...
... via LLDP. This link takes you to a screen where you can view the MAC-based VLAN settings. This link takes you to a screen where you can view detailed VLAN settings on a port. GS1910/XGS1910 Series User's Guide 31 This link takes you to a screen where you can view ...VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can reboot the system without turning the power off. This link takes you to a screen where you can view sFlow receiver state and sFlow packet statistics on the XGS1910-24...
User Guide
Page 32
.... This is recommended after you log out. You have to view an online help has descriptions of the following: 1 Delete the management VLAN (default is recommended you do one of individual screens and some supplementary information. Click Configuration > Security > Switch > Users to exit the...web configurator. Note: Be careful not to lock yourself and others ) from accessing the Switch. 6 Change a service port number but forget it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of the...
.... This is recommended after you log out. You have to view an online help has descriptions of the following: 1 Delete the management VLAN (default is recommended you do one of individual screens and some supplementary information. Click Configuration > Security > Switch > Users to exit the...web configurator. Note: Be careful not to lock yourself and others ) from accessing the Switch. 6 Change a service port number but forget it is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of the...
User Guide
Page 33
Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168.1.1. You can configure the IP address to ... Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic •...
Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168.1.1. You can configure the IP address to ... Accounts and Privilege Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic •...
User Guide
Page 34
...enter 192.168.1.1 (the default management IP address) in the address bar to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide This is working as a DHCP client and get an IP address from the DHCP server to Configure Login Accounts and ...the DHCP Client check box to have an IP address in the range between "192.168.1.2" and "192.168.1.254". 3 Log in the Configuration > VLANs > VLAN Membership screen. See Section 4.2 on page 25 for the Switch's dynamically assigned IP address when it is the same as the gateway's IP address. The...
...enter 192.168.1.1 (the default management IP address) in the address bar to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide This is working as a DHCP client and get an IP address from the DHCP server to Configure Login Accounts and ...the DHCP Client check box to have an IP address in the range between "192.168.1.2" and "192.168.1.254". 3 Log in the Configuration > VLANs > VLAN Membership screen. See Section 4.2 on page 25 for the Switch's dynamically assigned IP address when it is the same as the gateway's IP address. The...
User Guide
Page 38
... ingress port itself), thus confining the broadcast to a specific domain. A tagged VLAN uses an explicit tag (VLAN ID) in VLAN 1. they were created. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide In this screen. 5.4 How to Create a VLAN VLANs confine broadcast frames to the VLAN group in which they are not confined to the switch on...
... ingress port itself), thus confining the broadcast to a specific domain. A tagged VLAN uses an explicit tag (VLAN ID) in VLAN 1. they were created. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide In this screen. 5.4 How to Create a VLAN VLANs confine broadcast frames to the VLAN group in which they are not confined to the switch on...
User Guide
Page 39
Click Add New VLAN to the VLAN group that the tag defines. GS1910/XGS1910 Series User's Guide 39 Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on the Switch, select port 1's ...check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on ...
Click Add New VLAN to the VLAN group that the tag defines. GS1910/XGS1910 Series User's Guide 39 Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on the Switch, select port 1's ...check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on ...
User Guide
Page 40
.... 4 click Save to save your changes back to VLAN 2. Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the TX Tag... set the Switch to remove any VLAN tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as computers... and hubs) can receive frames properly, you can either select Untag_all in the Port VLAN ID field for port 1. ...
.... 4 click Save to save your changes back to VLAN 2. Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the TX Tag... set the Switch to remove any VLAN tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is the same as computers... and hubs) can receive frames properly, you can either select Untag_all in the Port VLAN ID field for port 1. ...
User Guide
Page 41
... for example) in the VLAN Name field for this guest VLAN, clients can surf the Internet through the Switch's port which is not IEEE 802.1x enabled Follow the steps below to configure port 10 as a member of the VLAN. GS1910/XGS1910 Series User's Guide 41 In this VLAN. 4 Configure port 10 to... be a permanent member of VLAN 200. 1 Access the web configurator through a gateway attached to port 10, but are in order ...
... for example) in the VLAN Name field for this guest VLAN, clients can surf the Internet through the Switch's port which is not IEEE 802.1x enabled Follow the steps below to configure port 10 as a member of the VLAN. GS1910/XGS1910 Series User's Guide 41 In this VLAN. 4 Configure port 10 to... be a permanent member of VLAN 200. 1 Access the web configurator through a gateway attached to port 10, but are in order ...
User Guide
Page 42
...back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports...TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save the settings ...Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to... so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) ...
...back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports...TX Tag field to set the Switch to remove VLAN tags before sending frames out of these ports. 9 click Save to save the settings ...Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to... so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) ...
User Guide
Page 43
...re-enter his or her username and password to stay connected to the port. 3 Select the Guest VLAN Enabled check box and enter the guest VLAN ID (200 in this example) to enable the guest VLAN on ports 1, 2 and 3. GS1910/XGS1910 Series User's Guide 43 The Switch will automatically create the guest... VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest VLAN. 4 Set Admin State to...
...re-enter his or her username and password to stay connected to the port. 3 Select the Guest VLAN Enabled check box and enter the guest VLAN ID (200 in this example) to enable the guest VLAN on ports 1, 2 and 3. GS1910/XGS1910 Series User's Guide 43 The Switch will automatically create the guest... VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest VLAN. 4 Set Admin State to...
User Guide
Page 44
... resources through the Switch's port on which port isolation is not applicable to the XGS1910-24 or XGS1910-48. An isolated port is a port on the Switch are in the same VLAN and same private VLAN. By default, all ports on which port isolation will not be members of private...2, 3, 4 and 25 as a member of this example, you put ports 2 to 4 and 25 in private VLAN 25 and enable port isolation to block traffic between ports. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide An isolated port cannot communicate with other isolated ports even when they are in...
... resources through the Switch's port on which port isolation is not applicable to the XGS1910-24 or XGS1910-48. An isolated port is a port on the Switch are in the same VLAN and same private VLAN. By default, all ports on which port isolation will not be members of private...2, 3, 4 and 25 as a member of this example, you put ports 2 to 4 and 25 in private VLAN 25 and enable port isolation to block traffic between ports. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide An isolated port cannot communicate with other isolated ports even when they are in...
User Guide
Page 45
.... 5 Click Save to save the settings to build the binding table dynamically. If there is a binding, the Switch forwards the packet. GS1910/XGS1910 Series User's Guide 45 If there is not a binding, the Switch discards the packet. This can prevent clients from getting IP addresses... IP traffic in the binding table. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that...
.... 5 Click Save to save the settings to build the binding table dynamically. If there is a binding, the Switch forwards the packet. GS1910/XGS1910 Series User's Guide 45 If there is not a binding, the Switch discards the packet. This can prevent clients from getting IP addresses... IP traffic in the binding table. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that...
User Guide
Page 46
... situations: • The packet is a DHCP server packet (for how to create a VLAN and configure ports to the Switch's port which is not in VLAN 100. Create a VLAN containing ports 5, 6 and 7. Connect a computer (M) to join the VLAN. 46 GS1910/XGS1910 Series User's Guide M VLAN 100 CB A The settings in this tutorial are connected to subscribers. Table...
... situations: • The packet is a DHCP server packet (for how to create a VLAN and configure ports to the Switch's port which is not in VLAN 100. Create a VLAN containing ports 5, 6 and 7. Connect a computer (M) to join the VLAN. 46 GS1910/XGS1910 Series User's Guide M VLAN 100 CB A The settings in this tutorial are connected to subscribers. Table...