User Guide
Page 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
...Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding ...Configurator ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... Port Isolation ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... Port Isolation ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking... via the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
... so on a logical network belong to one or more groups. VLAN groups can share high-speed applications on the server and access the.... Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified... The Switch is an ideal solution for a group of copper cabling. With VLAN, a station cannot directly talk to or hear from stations that are not in...traffic first goes through a router. 1.1.4.1 Tag-based VLAN Example Ports in the same VLAN group share the same frame broadcast domain, thus increasing...
... so on a logical network belong to one or more groups. VLAN groups can share high-speed applications on the server and access the.... Figure 3 Gigabit to the Desktop Internet 1.1.4 IEEE 802.1Q VLAN Application Example A VLAN (Virtual Local Area Network) allows a physical network to be modified... The Switch is an ideal solution for a group of copper cabling. With VLAN, a station cannot directly talk to or hear from stations that are not in...traffic first goes through a router. 1.1.4.1 Tag-based VLAN Example Ports in the same VLAN group share the same frame broadcast domain, thus increasing...
User Guide
Page 8
.... At the time of the Switch using ping SNMP and HTTP services • ICMPv6 to Manage the Switch Use any of VLAN 1. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following features. • Static... 1.3 Good Habits for everyday management of writing, the Switch supports the following things regularly to make the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide The increase in the same VLAN as a server can be used to manage the Switch. • Web Configurator.
.... At the time of the Switch using ping SNMP and HTTP services • ICMPv6 to Manage the Switch Use any of VLAN 1. Figure 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following features. • Static... 1.3 Good Habits for everyday management of writing, the Switch supports the following things regularly to make the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide The increase in the same VLAN as a server can be used to manage the Switch. • Web Configurator.
User Guide
Page 28
...configure MLD snooping. MLD Snooping This link takes you to screens where you can configure the MSTI (Multiple Spanning Tree Instance) to VLAN mapping settings. It also allows the device to maintain and store information from adjacent devices which are directly connected to advertise its ...services via the Switch, configure the access control list, DHCP snooping, DHCP relay, IP source guard and ARP inspection settings. Private VLANs 28 GS1910/XGS1910 Series User's Guide Network This link takes you to screens where you can logically aggregate physical links to form one of MAC...
...configure MLD snooping. MLD Snooping This link takes you to screens where you can configure the MSTI (Multiple Spanning Tree Instance) to VLAN mapping settings. It also allows the device to maintain and store information from adjacent devices which are directly connected to advertise its ...services via the Switch, configure the access control list, DHCP snooping, DHCP relay, IP source guard and ARP inspection settings. Private VLANs 28 GS1910/XGS1910 Series User's Guide Network This link takes you to screens where you can logically aggregate physical links to form one of MAC...
User Guide
Page 29
...link takes you to a screen where you to a screen to enable stacking and manage other members in the VLAN tag for incoming traffic on the XGS1910-24 or XGS1910-48. OUI This link takes you to a screen where you can configure an Organizationally Unique Identifier (OUI) address table...WRED This link takes you to a screen where you can configure the weighted Random Early Detection (RED) settings for telephony devices detecting. Monitor GS1910/XGS1910 Series User's Guide 29 Port Mirroring This link takes you to a screen where you can copy traffic from the first port without ...
...link takes you to a screen where you to a screen to enable stacking and manage other members in the VLAN tag for incoming traffic on the XGS1910-24 or XGS1910-48. OUI This link takes you to a screen where you can configure an Organizationally Unique Identifier (OUI) address table...WRED This link takes you to a screen where you can configure the weighted Random Early Detection (RED) settings for telephony devices detecting. Monitor GS1910/XGS1910 Series User's Guide 29 Port Mirroring This link takes you to a screen where you can copy traffic from the first port without ...
User Guide
Page 30
... the settings or traffic statistics of the Switch connections. MVR Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. Ports State This link takes you to a screen where you can view the status of RMON groups which ... takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide CPU Load This link takes you can view MVR SFM (Source-Filtered Multicast) information. Port Statistics This link takes...
... the settings or traffic statistics of the Switch connections. MVR Statistics This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. Ports State This link takes you to a screen where you can view the status of RMON groups which ... takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide CPU Load This link takes you can view MVR SFM (Source-Filtered Multicast) information. Port Statistics This link takes...
User Guide
Page 31
... your current Switch configuration to the Switch. This link takes you to a screen where you can back up your computer to a computer. GS1910/XGS1910 Series User's Guide 31 Maintenance Restart Device Factory Defaults Software Upload Image Select VeriPHY® cable diagnostics provide extensive network cable information such .... This link takes you to a screen where you can view the MAC-based VLAN settings. This link takes you can view status of MAC address it is not available on the XGS1910-24 or XGS1910-48. This link takes you to a screen where you can switch to a screen ...
... your current Switch configuration to the Switch. This link takes you to a screen where you can back up your computer to a computer. GS1910/XGS1910 Series User's Guide 31 Maintenance Restart Device Factory Defaults Software Upload Image Select VeriPHY® cable diagnostics provide extensive network cable information such .... This link takes you to a screen where you can view the MAC-based VLAN settings. This link takes you can view status of MAC address it is not available on the XGS1910-24 or XGS1910-48. This link takes you to a screen where you can switch to a screen ...
User Guide
Page 32
... lock yourself and others ) from using in-band-management (managing through the data ports) if you do one of the following: 1 Delete the management VLAN (default is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all services from a web configurator screen to log.... Chapter 4 The Web Configurator 4.3.1 Change Your Password After you log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide
... lock yourself and others ) from using in-band-management (managing through the data ports) if you do one of the following: 1 Delete the management VLAN (default is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all services from a web configurator screen to log.... Chapter 4 The Web Configurator 4.3.1 Change Your Password After you log in for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide
User Guide
Page 33
... the IP address to be in the same subnet as your network or have the Switch obtain a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • ... management IP address of using the Web Configurator to Reduce Multicast Traffic Passing through your network. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The following figure shows an example. CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168...
... the IP address to be in the same subnet as your network or have the Switch obtain a dynamic IP address from a DHCP server in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic • How to Use DHCP Relay on the Switch • ... management IP address of using the Web Configurator to Reduce Multicast Traffic Passing through your network. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The following figure shows an example. CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168...
User Guide
Page 34
... when it is connected. Click Renew to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide This is in VLAN1 (the default management VLAN). 2 Open your web browser and enter 192.168.1.1 (the default management IP address) in the address ...of the admin account. Chapter 5 Tutorials 1 Connect your computer to the Switch's port which is the same as the VLAN ID you configure in the Configuration > VLANs > VLAN Membership screen. In this management IP address to belong. Alternatively, you can create new login accounts the user used to log...
... when it is connected. Click Renew to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide This is in VLAN1 (the default management VLAN). 2 Open your web browser and enter 192.168.1.1 (the default management IP address) in the address ...of the admin account. Chapter 5 Tutorials 1 Connect your computer to the Switch's port which is the same as the VLAN ID you configure in the Configuration > VLANs > VLAN Membership screen. In this management IP address to belong. Alternatively, you can create new login accounts the user used to log...
User Guide
Page 38
...a VLAN VLANs confine ... A tagged VLAN uses an explicit tag (VLAN ID) in VLAN 1. The VLAN ID associates...VLAN Registration Protocol (MVRP). The VLANs can do this example, you restore using IEEE 802.1Q tagged static VLAN with a specific VLAN and provides the information that is VLAN...VLAN tag. To forward a frame from an 802.1Q VLANunaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to identify the VLAN membership of VLAN...an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch,... the frame, and then inserts a VLAN tag reflecting the ingress port's default ...
...a VLAN VLANs confine ... A tagged VLAN uses an explicit tag (VLAN ID) in VLAN 1. The VLAN ID associates...VLAN Registration Protocol (MVRP). The VLANs can do this example, you restore using IEEE 802.1Q tagged static VLAN with a specific VLAN and provides the information that is VLAN...VLAN tag. To forward a frame from an 802.1Q VLANunaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to identify the VLAN membership of VLAN...an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware switch,... the frame, and then inserts a VLAN tag reflecting the ingress port's default ...
User Guide
Page 39
GS1910/XGS1910 Series User's Guide 39 Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on the Switch, select port ...1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
GS1910/XGS1910 Series User's Guide 39 Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on the Switch, select port ...1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on...
User Guide
Page 40
...so that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can... you can either select Untag_all in the TX Tag field to set the Switch to remove any VLAN tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is transmitted. 4 click Save to save your changes back to...
...so that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Figure 29 Port VID Example 1 Click Configuration > VLANs > Ports in the navigation panel. 2 Set Port VLAN Mode to Specific and enter 2 in the Port VLAN ID field for port 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can... you can either select Untag_all in the TX Tag field to set the Switch to remove any VLAN tags before sending or leave the TX Tag field at Untag_pvid to have the Switch remove a frame's VLAN tag when the frame's VLAN ID is transmitted. 4 click Save to save your changes back to...
User Guide
Page 41
VLAN 1 Guest VLAN 200 Ports 1, 2, 3 and 10 Internet 5.5.1 Creating a VLAN for example) when they fail to authenticate with IEEE 802.1x Authentication All ports on ports 1 to access the ports. GS1910/XGS1910 Series User's Guide 41 You want to assign clients that connect to these ports should provide the ...correct user name and password in VLAN 1 by default. Say you enable IEEE 802.1x authentication on ...
VLAN 1 Guest VLAN 200 Ports 1, 2, 3 and 10 Internet 5.5.1 Creating a VLAN for example) when they fail to authenticate with IEEE 802.1x Authentication All ports on ports 1 to access the ports. GS1910/XGS1910 Series User's Guide 41 You want to assign clients that connect to these ports should provide the ...correct user name and password in VLAN 1 by default. Say you enable IEEE 802.1x authentication on ...
User Guide
Page 42
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
User Guide
Page 43
... access the Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN Enabled check box on the Switch. GS1910/XGS1910 Series User's Guide 43 Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his or her...
... access the Internet via the Internet access gateway connected to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN Enabled check box on the Switch. GS1910/XGS1910 Series User's Guide 43 Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his or her...
User Guide
Page 44
By default, all ports on the Switch are in VLAN 1 and private VLAN 1. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide You use private VLAN to do port isolation in a VLAN This tutorial is not applicable to the XGS1910-24 or XGS1910-48. An isolated port cannot communicate with other isolated ports even when they...
By default, all ports on the Switch are in VLAN 1 and private VLAN 1. Internet In this private VLAN. 44 GS1910/XGS1910 Series User's Guide You use private VLAN to do port isolation in a VLAN This tutorial is not applicable to the XGS1910-24 or XGS1910-48. An isolated port cannot communicate with other isolated ports even when they...
User Guide
Page 45
... If there is not a binding, the Switch discards the packet. When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 ...DHCP snooping to filter unauthorized DHCP packets on the network and to the Switch. The Switch builds the binding table by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 From port 2, 3, or 4, you should be able to access the device that they cannot send traffic to ...
... If there is not a binding, the Switch discards the packet. When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 ...DHCP snooping to filter unauthorized DHCP packets on the network and to the Switch. The Switch builds the binding table by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 From port 2, 3, or 4, you should be able to access the device that they cannot send traffic to ...
User Guide
Page 46
...from trusted ports. Untrusted Ports Every port is not in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 1 and 100 1 and 100 PVID 100 100 100 DHCP SNOOPING PORT TRUSTED Yes No No 1 Access the Switch through http://192....are as the following example, you only want to use dynamic bindings to filter unauthorized ARP packets (typical implementation), you have to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Log into the Switch by entering the username (default: admin) and password (default: 1234). 2 See Section ...
...from trusted ports. Untrusted Ports Every port is not in this Tutorial HOST PORT CONNECTED DHCP Server (A) 5 DHCP Client (B) 6 DHCP Client (C) 7 VLAN 1 and 100 1 and 100 1 and 100 PVID 100 100 100 DHCP SNOOPING PORT TRUSTED Yes No No 1 Access the Switch through http://192....are as the following example, you only want to use dynamic bindings to filter unauthorized ARP packets (typical implementation), you have to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Log into the Switch by entering the username (default: admin) and password (default: 1234). 2 See Section ...