ZyXEL Communications GS1920 Series Instruction Manual

1/100
www.zyxel.com
Version 1.0 Edition
User Handbook
Switch Series
Zyxel GS1920 / GS2210 / XGS2210 / GS3700 / XGS3700 /
XGS4600 / XS1920 / XS3700
Default
Login
Details
LAN IP Address https://192.168.1.1
User Name admin
Password 1234
Copyright © 2016 Zyxel Communications Corporation

2/100
www.zyxel.com
This handbook is a series of tutorials that guides you through various applications of the Zyxel. The
purpose of the handbook is to show you how to proceed through an application rather than
explain the meaning of GUI features. For the latter, see the Related Information section.
Note: IP addresses, port numbers, and object names are just examples used in these tutorials, so
you must replace them with the corresponding information from your own network
environment when implementing a tutorial.
Bold text indicates the name of a GUI menu, field or field choice.
The handbook is for Zyxel Enterprise Switch series products. Not all products support all firmware
features. Screenshots and graphics in this handbook may differ slightly from your product due to
differences in your product firmware or your computer operating system. Every effort has been
made to ensure that the information in this handbook is accurate at the time of writing.
Related Documentation
 User’s Guide
The User’s Guide introduces the Zyxel Enterprise Switch series, describes the hardware and
explains how to use the Web Configuration to configure the Zyxel Switch.
 CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the Zyxel Switch.
Note: It is recommended you use the Web Configuration to configure the Zyxel Switch.
 More Information
Go to support.zyxel.com to find other information on the Zyxel Switch.

3/100
www.zyxel.com
Table Of Content
Configure the basic information on Switch ................................................. 6
1.1 General Settings ............................................................................................................. 6
1.1.1 How to configure management IP address? ............................................... 6
1.1.2 How to configure switch host name? ............................................................ 9
1.1.3 How to configure system time?..................................................................... 10
Maintain Devices and Network .................................................................. 11
2.1 Firmware......................................................................................................................... 11
2.1.1 How to upgrade firmware from GUI? .......................................................... 11
2.1.2 How to upgrade firmware from FTP? ........................................................... 13
2.2 Reset ............................................................................................................................... 15
2.2.1 How to reset switch? ....................................................................................... 15
VLAN ............................................................................................................. 16
3.1 Virtual Local Area Network ........................................................................................ 16
3.1.1 How to configure Static VLAN on the switch? ........................................... 17
3.1.2 How to configure Subnet Base VLAN on the switch? ............................... 19
3.1.3 How to configure Protocol Base VLAN on the switch? ............................ 21
3.1.4 How to configure Voice VLAN on the switch? ........................................... 23
3.1.5 How to configure MAC Base VLAN on the switch? .................................. 25
3.1.6 How to configure GVRP on the switch? ...................................................... 27

4/100
www.zyxel.com
3.1.7 How to configure VLAN Trunking on the switch?....................................... 30
Improve network reliability ......................................................................... 32
4.1 STP (Spanning Tree Protocol) ..................................................................................... 32
4.1.1 How to configure RSTP on the switch? ........................................................ 33
4.1.2 How to configure MSTP on the switch? ....................................................... 36
4.1.3 How to configure MRSTP on the switch? ..................................................... 39
4.2 Link Aggregation .......................................................................................................... 42
4.2.1 How to configure Static Trunk on the switch? ............................................ 43
4.2.2 How to configure LACP on the switch? ....................................................... 45
4.3 VRRP (Layer 3) ............................................................................................................... 47
4.3.1 How to set VRRP on the switch? ................................................................... 48
How to setup CCTV? .................................................................................... 51
5.1 IGMP Routing ................................................................................................................ 51
5.1.1 How to setup IPTV Layer3 environment? ..................................................... 51
5.2 IGMP Snooping ............................................................................................................. 56
5.2.1 How to setup IPTV Layer3 environment? ..................................................... 56
How to protect network? ............................................................................ 59
6.1 MAC Filter....................................................................................................................... 59
6.1.1 How to set MAC filter? .................................................................................... 60
6.2 Layer 2 isolation ............................................................................................................ 61
6.2.1 How to setup L2 isolation? .............................................................................. 62

5/100
www.zyxel.com
7.1 802.1x Authentication ................................................................................................. 64
7.1.1 How to Implement 802.1X Port Authentication with Dynamic VLAN
Assignment (Radius Server) ..................................................................................... 65
8.1 IP Source Guard ........................................................................................................... 79
8.1.1 How to set DHCP snooping? (Dynamic) ..................................................... 80
8.1.2 How to set static MAC binding? (Static) ..................................................... 84
8.1.3 How to set ARP inspection? ........................................................................... 86
9.1 Access Control List (ACL) ............................................................................................ 89
9.1.1 How to block host to access internet? ........................................................ 90
9.1.2 How to configure classifier on the switch? ................................................. 93
10.1 Management ............................................................................................................. 98
10.1.1 How to change password? ......................................................................... 98
10.1.2 How to configure remote management service? .................................. 99

6/100
www.zyxel.com
Configure the basic information on Switch
1.1 General Settings
1.1.1 How to configure management IP address?
Overview
Management IP address provides to connect to the switch by using web browser
to configure settings & save configuration of the entire switch.
1. Open a browser (IE, Chrome, Safari, Firefox, etc….)
2. Go to website https://192.168.1.1 (default management IP address).
3. Default – (username: admin) (password: 1234), Log in.
Figure 1

7/100
www.zyxel.com
Figure 2 Dashboard

8/100
www.zyxel.com
1. The highlight part, please enter the IP address & subnet mask of the switch. For
example: (192.168.1.2, 255.255.255.0). Then click Apply to save the
configuration.
Figure 3 Basic Setting > IP Setup
Verify
1. In this screen is to check the IP Address Information.
Figure 4 Quick Button > Status

9/100
www.zyxel.com
1.1.2 How to configure switch host name?
Overview
Configure the switch with hostname for identification purpose.
1. Enter a hostname for identification purpose of the switch, and then click Apply
to save the configuration.
Figure 1 Basic setting > General setup
Verify
1. In the screen it will display the system status Device information > System name.
Figure 2 Basic Setting > System Info.

10/100
www.zyxel.com
1.1.3 How to configure system time?
Overview
Set the system date and time for the switch.
1. First change the New Date, second change the New Time, and then click
Apply to save the configuration.
Figure 1 Basic Setting > General Setup
Verify
1. In this screen is to check the Device Information > System time
Figure 2 Quick Button > Status

11/100
www.zyxel.com
Maintain Devices and Network
2.1 Firmware
2.1.1 How to upgrade firmware from GUI?
Overview
The switch can be maintained by upgrading it to the latest new firmware version.
But make sure you have downloaded (and unzipped) the correct model firmware
and version to your computer before uploading to the device, uploading the
wrong model firmware may damage your device.
1. Select Firmware Upgrade.
Figure 1 Management > Maintenance > Firmware Upgrade

12/100
www.zyxel.com
2. To upgrade firmware image, users can select to upload firmware image to
image 1 or 2 and click upgrade to activate the process. Firmware upgrades
are only applied after a reboot. To reboot, go to Management > Maintenance
> Reboot System and select which configuration will switch use when it restart.
Figure 2 Management > Maintenance > Firmware Upgrade
3. Users can select which boot image 1 or 2 to use. Then click Apply to save the
settings into the memory of the switch. The saved settings will take effect when
the switch reboot.
Figure 3 Management > Maintenance > Firmware Upgrade
Verify
1. In this screen to check Device Information >Firmware Version
Figure 4 Basic Setting > System Info.

13/100
www.zyxel.com
2.1.2 How to upgrade firmware from FTP?
Overview
Upgrade firmware by using File Transfer Protocol (FTP).
1. On the operating system open the Command Processor (CMD).
Figure 1 PC > Start > All Programs > Accessories > Command Prompt
2. Use a FTP client to access the switch>ftp (switch IP address)>Enter username &
password> put 430XXXX0C0.bin ras-0. Ras-0: firmware image 1. Ras-1: firmware
image 2. Ras: only for Switch model series with only single image.
Note: The firmware image (.bin file) should be in the same directory of the cmd
command page.
Figure 2

14/100
www.zyxel.com
Verify
1. Go to website https://192.168.1.1, click the quick button (Status). Check in the
Device Information >Firmware Version
Figure 3 Basic Setting > System Info.

15/100
www.zyxel.com
2.2 Reset
2.2.1 How to reset switch?
Overview
Reset the switch to its default settings.
1. In this page click the Factory default Icon, the switch will reset back to default
settings. Then wait for the switch to restart.
Figure 1 Management > Maintenance
Verify
1. Go to website https://192.168.1.1, the entire switch configuration will be gone
and set to default configuration.
NOTE: Each Zyxel switch products has a different Reset web page settings &
hardware reset button, please kindly reference the User guides.

16/100
www.zyxel.com
VLAN
3.1 Virtual Local Area Network
Overview
VLAN is a group of end stations with a common set of requirements; Independent
of their physical location, floods traffic only to the ports belongs to that VLAN.
 VLAN characteristic:
 A broadcast domain.
 Logical network. (Subnet).
 An independent LAN network.
 Benefits of VLAN:
 Simple management.
 Increase performance.
 Flexible network segmentation.
 Enhance network security.
 Reduce costs.
VLAN topology:
Figure 1
Note: In the scenario it configured with 3 VLANs, divided into VLAN1 (server),
VLAN2 (laptop) & VLAN3 (wireless APs). Different VLAN group can’t communicate
with other VLAN, unless it goes through a router.

17/100
www.zyxel.com
3.1.1 How to configure Static VLAN on the switch?
Overview
Static VLAN is the widest used VLAN in real application. It can cross multiple
switches. It does add s 4 bytes to be tagged frame into its normal MTU.
Static VLAN topology,
Figure 1
Note: In the scenario, both switch is configured with VLAN10/20, in order to let the
same VLAN to communicate is to tag the frames with a VID number.
1. Check the Active to activate the VLAN settings. Enter a descriptive name for
VLAN group for identification purpose and enter the valid VLAN ID for this static
entry.
Figure 2 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup

18/100
www.zyxel.com
2. Choose which control to be configured, Normal: for the port to dynamically
join this VLAN group using GVRP. Fixed: to be permanent member of this VLAN
group. Forbidden: prohibit the port from joining this VLAN group. Check the
tagging to tag all outgoing frames with this VLAN group ID, then click Add.
Figure 3 Advanced Application > VLAN > VLAN Configuration > Static VLAN Setup
Verify
1. Check the VLAN status in the Index table, it will display the VLAN that been
configured. Example: (Figure 4) User configured VID 10, to check the status,
click Index no. 2, then it will display the configuration of the VID 10 as it show in
(Figure 5).
Figure 4 Advanced Application > VLAN
Figure 5 Advanced Application > VLAN > Index

19/100
www.zyxel.com
3.1.2 How to configure Subnet Base VLAN on the switch?
Overview
Subnet based VLANs allow to group traffic into logical VLANs based on the source
IP subnet you specify.
Note: Subnet based VLAN applies to un-tagged packets and is applicable only
when you use IEEE 802.1Q tagged VLAN.
Subnet based VLAN topology,
Figure 1
Note: In the scenario, switch is configured with a three specify IP source subnet. It
divided with Data (192.168.1.0), Video (10.59.1.0) & Voice (172.25.1.0). With this
feature if the switch receives an IP address of 192.168.1.1, the device will know
that the traffic is Data traffic.
1. Check the Active box to activate the subnet-based VLAN, and then click
Apply.
Figure 2 Advanced Application > VLAN > VLAN Configuration > Subnet-based
VLAN

20/100
www.zyxel.com
2. Check the Active box to activate the features and IP, Mask-bits & VID should
be filled. Click Add to save the configuration. For more details click the HELP
icon at the quick button.
Figure 3 Advanced Application > VLAN > VLAN Configuration > Subnet-based
VLAN
Verify:
1. Click the Index number to check & edit the settings.
Figure 4 Advanced Application > VLAN > VLAN Configuration > Subnet-based
VLAN
2. The device Mac Address should be listed inside the MAC table with a specified
VID group number configured by client.
Figure 5 Management > MAC Table