ZyXEL Communications XGS3700-24HP Owner's manual

ZyXEL XGS3700-24HP V4.20(AAGD.1)C0
Release Note/Manual Supplement
Date: May. 18, 2015
This document describes the features in the XGS3700-24HP for its 4.20(AAGD.1)C0 release.
Support Platforms:
ZyXEL XGS3700-24HP V4.20(AAGD.1)C0 supports models: ZyXEL XGS3700-24HP
Version:
ZyNOS Version : V4.20(AAGD.1) | 05/05/2015 15:3:14
Bootbase Version : V2.00 | 07/21/2014 15:38:56
Default Bootbase Setting:
ZyNOS Version
V4.20(AAGD.1) | 05/05/2015 15:3:14
Bootbase Version
V2.00 | 07/21/2014 15:38:56
Serial Number
Xxxxxxxxxxxxxxx
Vendor Name
ZyXEL
Product Model
XGS3700-24HP
ZyNOS Code Model
GS3700
ZyNOS ROM address
bdc00000
System Type
14
First MAC Address
0019CB000001
Last MAC Address
0019CB00001E
MAC Address Quantity
30
Default Country Code
FF
Boot Module Debug Flag
00
CPLD Version
N/A
RomFile Version
00
RomFile Checksum
0ced
ZyNOS Checksum
5471
SNMP MIB level & OID
060102030405060708091011121314151617181920
Main Feature Bits
C0
Other Feature Bits
02 45 00 00 00 00 00 00-00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00-00 13 00 00 00 00
Features:
1. Complies with IEEE802.3, IEEE802.3u, IEEE802.3z/ab, IEEE802.3x, IEEE802.3ae,
IEEE802.3af, IEEE802.3at, IEEE802.3az, IEEE802.1p
2. 24 fixed 100/1000Mbps auto-sensing, auto-MDIX on all RJ45
3. 4 SFP+ 10G ports (two will be occupied in stacking mode)
(Port 27/28 on XGS3700-24/24HP and Port 51/52 on XGS3700-48/48HP)
4. PWM Fan Module
5. Local console
6. 1 10/100Mbps auto-sensing, auto-MDIX , Management RJ45 port
7. Fan-speed monitoring
8. 16K layer 2 MAC addresses table

9. 1K IP address table
10. 64 routing path
11. 1K multicasting group
12. 2MB packet buffer.
13. IEEE 802.1D transparent bridging
14. Port-based VLAN (Standalone Only)
15. IEEE 802.1Q tag-based VLAN
16. Protocol-based VLAN
17. IP subnet based VLAN
18. GVRP
19. VRRP
20. IEEE802.1ad Double tagging
21. Selective QinQ
22. MAC filtering
23. Management through console, telnet, SNMP or web management
24. Firmware upgrade by FTP/TFTP
25. TFTP client / server
26. Configuration saving and retrieving
27. Overheat detection
28. LED indications for link status
29. 9K jumbo frame
30. Filtering/Mirroring by L2/L3/L4 rules
31. Bandwidth control by L2/L3/L4 rules
32. Egress traffic shaping per port at 64Kbps step
33. BPDU transparency.
34. SSHv1/SSHv2/SSL
35. RFC 3164 Syslog
36. IGMP filtering
37. MVR
38. IGMP v1/v2/v3 snooping
39. IGMP snooping fast leave
40. IGMP snooping statistics
41. IGMP throttling
42. Static multicast
43. Administration user management
44. Multiple RADIUS server
45. Multiple TACACS+ servers
46. IEEE 802.1w RSTP
47. ZyXEL MRSTP
48. IEEE 802.1s MSTP
49. IEEE 802.3ah OAM
50. SNMPv3 support
51. 1K IP source guard
52. TRTCM
53. MAC authentication
54. Authentication & accounting by RADIUS / TACACS+
55. Loopguard
56. Daylight saving time support
57. IEEE 802.1ag CFM
58. IEEE 802.1AB LLDP
59. Link aggregation algorithm of source/destination IP address
60. MAC search
61. VLAN search
62. VLAN translation
63. VLAN MAC limit
64. Support transceiver DDMI information(including MIB)
65. Authorization on TACACS+
66. Layer 2 protocol tunneling
67. Support 802.3ah standard MIB
68. MLD snooping proxy

69. DHCPv6: client and relay
70. ICMPv6
71. IPv6 Path MTU
72. NDP: host and router
73. IPv6 address stateless auto-configuration: host and router
74. IPv6 static route
75. Guest VLAN
76. Password encryption
77. User access right
78. PPPoE IA and option 82
79. ECMP
80. 384 ACL
81. 64 Policy route
82. Configurable ARP learning mode
83. Recovery mechanism for error-disabled port/reason.
84. CPU protection
85. sFlow
86. Private VLAN
87. Authorization on console
88. ARP Freeze
89. Static ARP setting
90. MAC pinning
91. Interface related trap can be enable/disable by port
92. Multiple default route
93. 802.1AB LLDP-MED
94. DHCP option 82 profile
95. Remote port mirroring
96. ZyXEL new private MIB
97. Dual image
98. Dying gasp
99. DHCP Option82 per VLAN and per Port
100. Intrusion lock
101. DAC 10G
102. ES common MIB
103. ZyXEL One Network (ZON)
104. ZyXEL Neighbor Management
105. Web support : LLDP, LLDP-MED, Tech-support, Err-disable status, CPU utilization,
Memory Utilization
106. ECMP MAX Config
107. IP port move for VM
108. ACL 2.0
109. Voice VLAN
110. Load factory default
111. MAC based VLAN
Enhanced Features:
1. ESBU MIB update: calculating average of CPU loading.
2. Add the new CLI command to re-initial the certification.
Known Issue:
1. [ACL] Regardless of source MAC or destination MAC, the filtering rule with discard source
action will always filter packets.
2. [STP] Using three different spanning tree protocols (RSTP+MSTP+MRSTP) at same time
will cause the network loop.
[Workaround]
- Use the same STP protocol on the whole network.

3. [IPv6] Switch doesn’t support IPv6 address transfer if port movement.
[Workaround]
- Waiting for MAC address timeout
- Clear MAC address for the host entry.
4. [LACP] When RSTP is enabled with ring topology, LACP can’t be activated at the same
ports.
[Workaround]
- Change the LACP to Static Trunk.
5. [VLAN] Not recommend to configure private VLAN with follow features at same time:
- VLAN stacking
- VLAN mapping
- Remote port mirroring
[Symptom]
- Private VLAN behavior may be affected.
6. [VLAN] Not recommend to configure port isolation and remote port mirroring at same time.
[Symptom]
- Port isolation function may affect.
7. [Diagnostic] The cable diagnostic tolerance is +-10M length.
8. [Log] Alignment error packet will count into CRC error counter.
9. [Routing] Switch learn 1K hosts entry already, after clear all ARP entry, switch may need
3~4 minutes to re-learn all host entry.
[Symptom]
- Before all hosts re-learn back to switch, some of hosts will not be able to forward by
VLAN routing.
[Condition]
- 1K hosts connect to the switch, then reboot device.
- 1K hosts connect to the switch, then clear ARP table.
10. [LLDP] LLDP management address will not refresh immediately.
[Condition]
(192.168.1.1) Switch1------Switch2 (192.168.1.2)
- Switch1 and Switch2 enable LLDP.
- Switch1 can know the Switch2 management IP is 192.168.1.2 via LLDP.
- Switch2 changes ip address to 192.168.1.3
- Both 192.168.1.2 and 192.168.1.3 entry will display on the Switch1 LLDP page.
[Workaround]
Waiting for 30 seconds then it will automatic refresh.
Stacking Know Issue:
1. [Flow Control] Flow control does not support traffic cross stacking devices.
[Condition]
PC1------Slot1---Slot2----PC2
- The flow control will not inform PC1 to slow down when PC2 is overloading with this
topology.
2. [Log] When switch reboot, it will wait for 4 minutes then send the coldstart/warmstart trap.
3. [IPv6] Ipv6 static route setting will lost after switch reboot.
[Workaround]
Re-Configure ipv6 static route.
4. [CLI] If stacking member up to 8, “show running-config”will display slowly due to port
number increased.
5. [Stacking] Some setting will not erase to default when replacing inactive slot with different
model.
[Condition]
The following functions may not be erased to default when replacing the different model to
stacking system.
- IPv6
- Mirror
- RMirror
- IPSG
- MVR
- Link Aggregation

[Workaround]
- Delete the slot configuration before you insert the different model to stacking system.
- Strongly to recommend user to use the same model to replace stacking member.
Bug fix:
1. [LLDP] Fix the incompatibility issue with Microsoft Windows OS 8.1 LLDP that will cause
the switch loss of management.
2. [LLDP] Fix the incompatibility issue with some IP Phones that will cause the switch loss of
management.
3. [System] ”Show tech-support” cannot display “show run config” via web.
4. [PoE] Fix allocated power calculation error when connecting PDs with Class 2 over 25.
5. [Stacking_VLAN] Fix VLAN status displayed with wrong information.
6. [Stacking_STP] Switch does not refresh ARP table and MAC address table after STP
topology recovers.
7. [Ethernet] The last two 10G ports cannot learn any MAC address sometimes.
Limitation of Settings (Standalone Mode):
1. VLAN 1Q static entry 4K
2. Static MAC forwarding entry 256
3. MAC filtering entry 256
4. Cluster member 24
5. IP routing domain 128
6. IGMP Filtering entry 256
7. IGMP MVR entry 256
8. VRRP entry 64
9. Protocol based VLAN entries per port 7
10. Port-security max address-limit number 16K
11. DHCP Server 16
12. Syslog server entry 4
13. IP source guard entry 1K
14. IP subnet based VLAN entry 16
15. MVR VLAN entry 5
16. Vlan-stacking Selective QinQ entry 1K
17. Vlan-mapping entry 1K
18. MAC table 16K
19. Routing table 1k
20. DHCP snooping binding table 16K
21. Routing path 512
22. Multicast group 1K
23. ACL 384
24. Policy route 64
25. DHCP option 82 profile 130
26. Remote port monitoring vlan 10
27. trtcm DSCP profiles max number of port
28. static arp entry 256
29. Static route max entry 64
30. MAC-based VLAN 1024
31. Voice VLAN OUI entry 10
32. ZON neighbor per-port maximum clients 10
Limitation of Settings (Stacking Mode):
1. VLAN 1Q static entry 4K
2. Static MAC forwarding entry 256
3. MAC filtering entry 256
4. IP routing domain 128
5. IGMP Filtering entry 256

6. IGMP MVR entry 256
7. VRRP entry 64
8. Protocol based VLAN entries per port 7
9. Port-security max address-limit number 16K
10. DHCP Server 16
11. Syslog server entry 4
12. IP source guard entry 1K
13. IP subnet based VLAN entry 16
14. MVR VLAN entry 5
15. Vlan-stacking Selective QinQ entry 1K
16. Vlan-mapping entry 1K
17. MAC table 16K
18. Routing table 1k
19. DHCP snooping binding table 16K
20. Routing path 512
21. Multicast group 1K
22. ACL 384
23. Policy route 64
24. DHCP option 82 profile 130
25. Remote port monitoring vlan 10
26. trtcm DSCP profiles max number of port
27. static arp entry 256
28. Static route max entry 64
29. Stacking max devices 8
30. MAC-based VLAN 1024
31. Voice VLAN OUI entry 10
32. ZON neighbor per-port maximum clients 10
Firmware Upgrade:
The XGS3700-24HP uses FTP to upgrade firmware in run-time through its built-in FTP server.
You can use any FTP client (for example, ftp.exe in Windows) to upgrade XGS3700-24HP.
The upgrade procedure is as follows:
Upgrade XGS3700-24HP FW:
C:\> ftp <XGS3700-24HP IP address>
User : admin
Password: 1234
230 Logged in
ftp> put 420AAGD1C0.bin ras-0
ftp> bye
Where
User name : just press admin
Password : the management password, 1234 by default
420AAGD1C0.bin : the name of firmware file you want to upgrade
ras-0 : the internal firmware name in XGS3700-24HP
Configuration Upgrade:
The XGS3700-24HP uses FTP to upgrade firmware in run-time through its built-in FTP server.
You can use any FTP client (for example, ftp.exe in Windows) to upgrade XGS3700-24HP.
The upgrade procedure is as follows:

Upgrade XGS3700-24HP configuration:
C:\> ftp <XGS3700-24HP IP address>
User : admin
Password: 1234
230 Logged in
ftp> put 420AAGD1C0.rom rom-0
ftp> bye
Where
User name : just press admin
Password : the management password, 1234 by default
420AAGD1C0.rom : the name of configuration file you want to upgrade
rom-0 : the internal configuration name in XGS3700-24HP

ZyXEL XGS3700-24HP V4.20(AAGD.0)C0
Release Note/Manual Supplement
Date: Jan. 22, 2015
This document describes the features in the XGS3700-24HP for its 4.20(AAGD.0)C0 release.
Support Platforms:
ZyXEL XGS3700-24HP V4.20(AAGD.0)C0 supports models: ZyXEL XGS3700-24HP
Version:
ZyNOS Version : V4.20(AAGD.0) | 01/21/2015 17:9:17
Bootbase Version : V2.00 | 07/21/2014 15:38:56
Default Bootbase Setting:
ZyNOS Version
V4.20(AAGD.0) | 01/21/2015 17:9:17
Bootbase Version
V2.00 | 07/21/2014 15:38:56
Serial Number
xxxxxxxxxxxxxxx
Vendor Name
ZyXEL
Product Model
XGS3700-24HP
ZyNOS Code Model
GS3700
ZyNOS ROM address
bdc00000
System Type
14
First MAC Address
0019CB000001
Last MAC Address
0019CB00001E
MAC Address Quantity
30
Default Country Code
FF
Boot Module Debug Flag
00
CPLD Version
N/A
RomFile Version
00
RomFile Checksum
0ced
ZyNOS Checksum
5788
SNMP MIB level & OID
060102030405060708091011121314151617181920
Main Feature Bits
C0
Other Feature Bits
02 45 00 00 00 00 00 00-00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00-00 13 00 00 00 00
Features:
1. Complies with IEEE802.3, IEEE802.3u, IEEE802.3z/ab, IEEE802.3x, IEEE802.3ae,
IEEE802.3af, IEEE802.3at, IEEE802.3az, IEEE802.1p
2. 24 fixed 100/1000Mbps auto-sensing, auto-MDIX on all RJ45
3. 4 SFP+ 10G ports (two will be occupied in stacking mode)
(Port 27/28 on XGS3700-24/24HP and Port 51/52 on XGS3700-48/48HP)
4. PWM Fan Module
5. Local console
6. 1 10/100Mbps auto-sensing, auto-MDIX , Management RJ45 port
7. Fan-speed monitoring
8. 16K layer 2 MAC addresses table
9. 1K IP address table

10. 64 routing path
11. 1K multicasting group
12. 2MB packet buffer.
13. IEEE 802.1D transparent bridging
14. Port-based VLAN (Standalone Only)
15. IEEE 802.1Q tag-based VLAN
16. Protocol-based VLAN
17. IP subnet based VLAN
18. GVRP
19. VRRP
20. IEEE802.1ad Double tagging
21. Selective QinQ
22. MAC filtering
23. Management through console, telnet, SNMP or web management
24. Firmware upgrade by FTP/TFTP
25. TFTP client / server
26. Configuration saving and retrieving
27. Overheat detection
28. LED indications for link status
29. 9K jumbo frame
30. Filtering/Mirroring by L2/L3/L4 rules
31. Bandwidth control by L2/L3/L4 rules
32. Egress traffic shaping per port at 64Kbps step
33. BPDU transparency.
34. SSHv1/SSHv2/SSL
35. RFC 3164 Syslog
36. IGMP filtering
37. MVR
38. IGMP v1/v2/v3 snooping
39. IGMP snooping fast leave
40. IGMP snooping statistics
41. IGMP throttling
42. Static multicast
43. Administration user management
44. Multiple RADIUS server
45. Multiple TACACS+ servers
46. IEEE 802.1w RSTP
47. ZyXEL MRSTP
48. IEEE 802.1s MSTP
49. IEEE 802.3ah OAM
50. SNMPv3 support
51. 1K IP source guard
52. TRTCM
53. MAC authentication
54. Authentication & accounting by RADIUS / TACACS+
55. Loopguard
56. Daylight saving time support
57. IEEE 802.1ag CFM
58. IEEE 802.1AB LLDP
59. Link aggregation algorithm of source/destination IP address
60. MAC search
61. VLAN search
62. VLAN translation
63. VLAN MAC limit
64. Support transceiver DDMI information(including MIB)
65. Authorization on TACACS+
66. Layer 2 protocol tunneling
67. Support 802.3ah standard MIB
68. MLD snooping proxy
69. DHCPv6: client and relay

70. ICMPv6
71. IPv6 Path MTU
72. NDP: host and router
73. IPv6 address stateless auto-configuration: host and router
74. IPv6 static route
75. Guest VLAN
76. Password encryption
77. User access right
78. PPPoE IA and option 82
79. ECMP
80. 384 ACL
81. 64 Policy route
82. Configurable ARP learning mode
83. Recovery mechanism for error-disabled port/reason.
84. CPU protection
85. sFlow
86. Private VLAN
87. Authorization on console
88. ARP Freeze
89. Static ARP setting
90. MAC pinning
91. Interface related trap can be enable/disable by port
92. Multiple default route
93. 802.1AB LLDP-MED
94. DHCP option 82 profile
95. Remote port mirroring
96. ZyXEL new private MIB
97. Dual image
98. Dying gasp
99. DHCP Option82 per VLAN and per Port
100. Intrusion lock
101. DAC 10G
102. ES common MIB
103. ZyXEL One Network (ZON)
104. ZyXEL Neighbor Management
105. Web support : LLDP, LLDP-MED, Tech-support, Err-disable status, CPU utilization,
Memory Utilization
106. ECMP MAX Config
107. IP port move for VM
108. ACL 2.0
109. Voice VLAN
110. Load factory default
111. MAC based VLAN
Enhanced Features:
1. Stacking (XGS3700 series only)
(Stacking port are port 27/28 of XGS3700-24/24HP; Port 51/52 of XGS3700-48/48HP)
2. ACL 2.0
3. ECMP MAX Config
4. IP port move for VM
5. Voice VLAN
6. MAC based VLAN
7. LLDP enabled by default
8. Remove VLAN Counter