User Guide
Page 3
......3 Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding Installation... ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
......3 Chapter 1 Getting to Know Your Switch...5 1.1 Introduction ...5 1.1.1 Bridging Example ...5 1.1.2 High Performance Switching Example 6 1.1.3 Gigabit Ethernet to the Desktop 7 1.1.4 IEEE 802.1Q VLAN Application Example 7 1.1.5 IPv6 Support ...8 1.2 Ways to Manage the Switch ...8 1.3 Good Habits for Managing the Switch 8 Chapter 2 Hardware Installation and Connection 11 2.1 Freestanding Installation... ...25 4.1 Introduction ...25 4.2 System Login ...25 4.3 The Web Configurator Layout ...26 4.3.1 Change Your Password ...32 4.4 Switch Lockout ...32 GS1910/XGS1910 Series User's Guide 3
User Guide
Page 4
... Port Isolation ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking... the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
... Port Isolation ...45 5.7 How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic 45 5.8 How to Use DHCP Relay on the Switch 48 5.8.1 Creating a VLAN ...49 5.8.2 Configuring DHCP Relay ...49 5.8.3 Troubleshooting ...50 5.9 How to Use Link Aggregation to Group Multiple Ports into One Logical Link 50 5.9.1 Static Port Trunking... the Console Port 66 Chapter 6 Troubleshooting...69 6.1 Power, Hardware Connections, and LEDs 69 6.2 Switch Access and Login ...70 Appendix A Legal Information...73 Index ...75 4 GS1910/XGS1910 Series User's Guide
User Guide
Page 7
... broadcast domain, thus increasing network performance by adding, moving or changing ports without any re-cabling. VLAN groups can connect computers and servers directly to the Switch's port or connect other switches to the Switch. GS1910/XGS1910 Series User's Guide 7 To expand the network, simply add more networking devices such as switches...
... broadcast domain, thus increasing network performance by adding, moving or changing ports without any re-cabling. VLAN groups can connect computers and servers directly to the Switch's port or connect other switches to the Switch. GS1910/XGS1910 Series User's Guide 7 To expand the network, simply add more networking devices such as switches...
User Guide
Page 8
... 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following methods to be part of the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide This... is designed to 3.4 x 1038 IP addresses. The device can be monitored and/or managed by all ports in the same VLAN as the server. The increase in IPv6 address size to 128...
... 4 Shared Server Using VLAN Example 1.1.5 IPv6 Support IPv6 (Internet Protocol version 6), is recommended for Managing the Switch Do the following methods to be part of the following things regularly to make the Switch more secure and to manage the Switch more effectively. 8 GS1910/XGS1910 Series User's Guide This... is designed to 3.4 x 1038 IP addresses. The device can be monitored and/or managed by all ports in the same VLAN as the server. The increase in IPv6 address size to 128...
User Guide
Page 28
... to learn on the Switch. Ports This link takes you to a screen where you can activate one logical, higher-bandwidth link. Private VLANs 28 GS1910/XGS1910 Series User's Guide Aggregation Static This link takes you to a screen where you can create multicast... VLANs and select the receiver port(s) and a source port for each multicast VLAN. MSTI Priorities This link takes you to a screen where you can configure CIST (Common and Internal Spanning Tree) ports....
... to learn on the Switch. Ports This link takes you to a screen where you can activate one logical, higher-bandwidth link. Private VLANs 28 GS1910/XGS1910 Series User's Guide Aggregation Static This link takes you to a screen where you can create multicast... VLANs and select the receiver port(s) and a source port for each multicast VLAN. MSTI Priorities This link takes you to a screen where you can configure CIST (Common and Internal Spanning Tree) ports....
User Guide
Page 29
... unicast, broadcast and unknown packets the Switch receives per second on a port. Monitor GS1910/XGS1910 Series User's Guide 29 VCL MAC-based VLAN This link takes you to a screen where you can configure the DSCP translation/mapping table ... you to different packet types. DSCP Classification This link takes you to a screen where you can create private VLANs on the Switch. Protocol-based This link takes you can configure whether and how the Switch modifies the DSCP... Switch. sFlow This link takes you can enable port isolation on the XGS1910-24 or XGS1910-48.
... unicast, broadcast and unknown packets the Switch receives per second on a port. Monitor GS1910/XGS1910 Series User's Guide 29 VCL MAC-based VLAN This link takes you to a screen where you can configure the DSCP translation/mapping table ... you to different packet types. DSCP Classification This link takes you to a screen where you can create private VLANs on the Switch. Protocol-based This link takes you can configure whether and how the Switch modifies the DSCP... Switch. sFlow This link takes you can enable port isolation on the XGS1910-24 or XGS1910-48.
User Guide
Page 30
...takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Ports State This link takes you to a screen where you can view the status of RMON groups which contain detailed...screen where you can view the packet statistics for access control. Switch This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Statistics This link takes you to a screen where you can view the settings or traffic statistics of the ...
...takes you to a screen where you can view IGMP snooping status, IGMP group information and SFM (Source-Filtered Multicast) information. 30 GS1910/XGS1910 Series User's Guide Ports State This link takes you to a screen where you can view the status of RMON groups which contain detailed...screen where you can view the packet statistics for access control. Switch This link takes you to a screen where you can view Multicast VLAN Registration (MVR) statistics. MVR Statistics This link takes you to a screen where you can view the settings or traffic statistics of the ...
User Guide
Page 31
...receiver state and sFlow packet statistics on the XGS1910-24 or XGS1910-48. This link takes you to a screen where you can view the MAC address and VLAN ID of MAC address it is not available on each port. GS1910/XGS1910 Series User's Guide 31 This link takes you...Configurator Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can reboot the system...
...receiver state and sFlow packet statistics on the XGS1910-24 or XGS1910-48. This link takes you to a screen where you can view the MAC address and VLAN ID of MAC address it is not available on each port. GS1910/XGS1910 Series User's Guide 31 This link takes you...Configurator Table 4 Navigation Panel Links (continued) LINK MLD Snooping LLDP Neighbours LLDP-MED Neighbours EEE Port Statistics MAC Table VLANs VLAN Membership VLAN Port Stack VCL MAC-based VLAN sFlow sFlow Statistics Diagnostic Ping Ping6 VeriPHY DESCRIPTION This link takes you to a screen where you can reboot the system...
User Guide
Page 32
... finish a management session for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Click the Help link from using in-band-management (managing through the data ports) if you change ...administrator password. Click Configuration > Security > Switch > Users to view an online help has descriptions of individual screens and some supplementary information. This is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of...
... finish a management session for security reasons. 4.6 Help The web configurator's online help description of that screen. 32 GS1910/XGS1910 Series User's Guide Click the Help link from using in-band-management (managing through the data ports) if you change ...administrator password. Click Configuration > Security > Switch > Users to view an online help has descriptions of individual screens and some supplementary information. This is VLAN 1). 2 Disable all ports. 3 Misconfigure the text configuration file. 4 Forget the password and/or IP address. 5 Prevent all others out of...
User Guide
Page 33
CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168.1.1. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and ... Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic ...
CHAPTER 5 Tutorials This chapter provides some examples of the Switch is 192.168.1.1. Figure 27 Initial Setup Example: Management IP Address GS1910/XGS1910 Series User's Guide 33 The tutorials include: • How to Change Switch Management IP Address • How to Configure Login Accounts and ... Levels • How to Manage a Configuration File • How to Create a VLAN • How to Set Up a Guest VLAN with IEEE 802.1x Authentication • How to Use Private VLAN to Do Port Isolation in a VLAN • How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic ...
User Guide
Page 34
Chapter 5 Tutorials 1 Connect your computer to the Switch's port which is in VLAN1 (the default management VLAN). 2 Open your changes back to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide Your computer must have the Switch act as the gateway's IP address. Click Renew to...
Chapter 5 Tutorials 1 Connect your computer to the Switch's port which is in VLAN1 (the default management VLAN). 2 Open your changes back to the Switch and manage the privilege levels for login accounts. 34 GS1910/XGS1910 Series User's Guide Your computer must have the Switch act as the gateway's IP address. Click Renew to...
User Guide
Page 38
...on ports that switches need to the VLAN group in VLAN 1. they are in which they were created. Each port on the Switch are not confined to a specific domain. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide The VLANs can be created statically by the system)... is known by hand or dynamically through Multiple VLAN Registration Protocol (MVRP). A broadcast frame (or a multicast frame for all...
...on ports that switches need to the VLAN group in VLAN 1. they are in which they were created. Each port on the Switch are not confined to a specific domain. Figure 28 VLAN Example 38 GS1910/XGS1910 Series User's Guide The VLANs can be created statically by the system)... is known by hand or dynamically through Multiple VLAN Registration Protocol (MVRP). A broadcast frame (or a multicast frame for all...
User Guide
Page 39
... that the tag defines. Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. GS1910/XGS1910 Series User's Guide 39 Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on ...the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on ...
... that the tag defines. Chapter 5 Tutorials 1 Access the Switch through http://192.168.1.1. GS1910/XGS1910 Series User's Guide 39 Log into the Switch with the admin account. 2 Click Configuration > VLANs > VLAN Membership in the VLAN Name field for the VLAN2 network. 4 Since the VLAN2 network is connected to port 1 on ...the Switch, select port 1's check box under Port Members to configure port 1 to be a permanent member of the VLAN. 5 Click Save to save the settings to the Switch. 5.4.1 Setting Port VID Use PVID to add a tag to incoming untagged frames received on ...
User Guide
Page 40
... 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, you can either select Untag_all in the TX Tag field to set the Switch to remove any untagged frames received on port 1 so that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Chapter... 5 Tutorials In the example network, configure 2 as the PVID of the port on which the frame is the same as the port VID on that any VLAN tags before sending or leave the TX Tag field at...
... 1. 3 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, you can either select Untag_all in the TX Tag field to set the Switch to remove any untagged frames received on port 1 so that port get sent to the Switch 40 GS1910/XGS1910 Series User's Guide Chapter... 5 Tutorials In the example network, configure 2 as the PVID of the port on which the frame is the same as the port VID on that any VLAN tags before sending or leave the TX Tag field at...
User Guide
Page 41
... to access other network resources, such as a member of the VLAN. Click Add New VLAN to create VLAN2. 3 Enter 200 in the VLAN ID field and enter a descriptive name (VLAN200 for example) in VLAN 1 by default. GS1910/XGS1910 Series User's Guide 41 Chapter 5 Tutorials 5.5 How to Set ...Up a Guest VLAN with the authentication server. Clients that connect to ports 1, 2 or 3 to a guest VLAN (200 for example) when they fail to authenticate...
... to access other network resources, such as a member of the VLAN. Click Add New VLAN to create VLAN2. 3 Enter 200 in the VLAN ID field and enter a descriptive name (VLAN200 for example) in VLAN 1 by default. GS1910/XGS1910 Series User's Guide 41 Chapter 5 Tutorials 5.5 How to Set ...Up a Guest VLAN with the authentication server. Clients that connect to ports 1, 2 or 3 to a guest VLAN (200 for example) when they fail to authenticate...
User Guide
Page 42
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
...Save to save your changes back to the Switch 5.5.2 Enabling IEEE 802.1x Port Authentication and Guest VLAN Follow the steps below to enable port authentication to validate access to ports 1~8 to activate IEEE 802...save the settings to the Switch. 6 Click Configuration > VLANs > Ports in the navigation panel. 7 Set Port VLAN Mode to Specific and enter 200 in the Port VLAN ID field for port 10 to add a tag to incoming... on these ports so that the frames are forwarded to the VLAN group that the tag defines. 8 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames ...
User Guide
Page 43
...XGS1910 Series User's Guide 43 The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest VLAN. 4 Set Admin State to Port-based 802.1x for ports 1 to 8 to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN... and can access the Internet via the Internet access gateway connected to port 10 which is also in VLAN 200, but cannot communicate with devices in the specified guest VLAN. 6 Click Save. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his ...
...XGS1910 Series User's Guide 43 The Switch will automatically create the guest VLAN and configure the IEEE 802.1x-enabled ports as a member of the guest VLAN. 4 Set Admin State to Port-based 802.1x for ports 1 to 8 to turn on IEEE 802.1x authentication on these ports. 5 Select the Guest VLAN... and can access the Internet via the Internet access gateway connected to port 10 which is also in VLAN 200, but cannot communicate with devices in the specified guest VLAN. 6 Click Save. Chapter 5 Tutorials 2 Select the Reauthentication Enabled check box to have a subscriber periodically re-enter his ...
User Guide
Page 44
... between ports. An isolated port cannot communicate with other isolated ports even when they are in a VLAN but still allow ports to the XGS1910-24 or XGS1910-48. You use private VLAN to do port isolation in VLAN 1 and private VLAN 1. An isolated port is enabled. Internet In this example, you put ports 2 to 4 and 25 in...
... between ports. An isolated port cannot communicate with other isolated ports even when they are in a VLAN but still allow ports to the XGS1910-24 or XGS1910-48. You use private VLAN to do port isolation in VLAN 1 and private VLAN 1. An isolated port is enabled. Internet In this example, you put ports 2 to 4 and 25 in...
User Guide
Page 45
The Switch builds the binding table by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save ... source guard uses a binding table to each other. When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. If there is not a binding, the Switch discards the packet. If there ...
The Switch builds the binding table by administrators (static bindings). GS1910/XGS1910 Series User's Guide 45 Chapter 5 Tutorials 5.6.2 Enabling Port Isolation Follow the steps below to configure port isolation. 1 Click Configuration > Private VLANs > Port Isolation. 2 Select the check boxes of ports 2, 3 and 4, and click Save ... source guard uses a binding table to each other. When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in your network. If there is not a binding, the Switch discards the packet. If there ...
User Guide
Page 46
...The source MAC address and source IP address in the packet do not match any of the current bindings. • The packet is not in VLAN 100. Table 5 Settings in this tutorial are connected to subscribers. Trusted vs. Connect a computer (M) to the Switch's port which is a ...DHCP snooping. Untrusted Ports Every port is either a trusted port or an untrusted port for how to create a VLAN and configure ports to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Create a VLAN containing ports 5, 6 and 7. Chapter 5 Tutorials If you want DHCP server A connected to port 5 to ...
...The source MAC address and source IP address in the packet do not match any of the current bindings. • The packet is not in VLAN 100. Table 5 Settings in this tutorial are connected to subscribers. Trusted vs. Connect a computer (M) to the Switch's port which is a ...DHCP snooping. Untrusted Ports Every port is either a trusted port or an untrusted port for how to create a VLAN and configure ports to join the VLAN. 46 GS1910/XGS1910 Series User's Guide Create a VLAN containing ports 5, 6 and 7. Chapter 5 Tutorials If you want DHCP server A connected to port 5 to ...