ZyXEL Communications MGS-3712 User manual

www.zyxel.com
MGS-3712/3712F
MetroGigabit Switch
User’s Guide
Version 3.80
2/2008
Edition 1
DEFAULT LOGIN
IP Address http://192.168.1.1
User Name admin
Password 1234

About This User's Guide
MGS-3712/MGS-3012F User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the Switch using the web
configurator. You should have at least a basic knowledge of TCP/IP networking concepts and
topology.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains
information on setting up your network and configuring for Internet access.
• Command Line Interface (CLI) Reference Guide
Line commands offer an alternative to the web configurator and in some cases are
necessary to configure advanced features.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
"It is recommended you use the web configurator to configure the Switch.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]

Document Conventions
MGS-3712/MGS-3012F User’s Guide
4
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The MGS-3712 and MGS-3712F models may be referred to as the “Switch”, the “device”,
the “system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
MGS-3712/MGS-3012F User’s Guide 5
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The Switch icon is not an
exact representation of your device.
The Switch Computer Notebook computer
Server DSLAM Firewall
Telephone Router

Safety Warnings
MGS-3712/MGS-3012F User’s Guide
6
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• For continued protection against risk of fire replace only with same type and rating of
fuse.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• The length of exposed (bare) power wire should not exceed 7mm.
This product is recyclable. Dispose of it properly.

Safety Warnings
MGS-3712/MGS-3012F User’s Guide 7

Safety Warnings
MGS-3712/MGS-3012F User’s Guide
8

Contents Overview
MGS-3712/MGS-3012F User’s Guide 9
Contents Overview
Introduction and Hardware ................................................................................................... 29
Getting to Know Your Switch ..................................................................................................... 31
Hardware Installation and Connection ....................................................................................... 35
Hardware Overview ................................................................................................................... 39
Basic Configuration ............................................................................................................... 49
The Web Configurator ............................................................................................................... 51
Initial Setup Example ................................................................................................................. 61
System Status and Port Statistics ..............................................................................................65
Basic Setting .............................................................................................................................. 71
Advanced ................................................................................................................................ 83
VLAN ......................................................................................................................................... 85
Static MAC Forward Setup ........................................................................................................ 97
Filtering ...................................................................................................................................... 99
Spanning Tree Protocol ........................................................................................................... 101
Bandwidth Control ....................................................................................................................119
Broadcast Storm Control ......................................................................................................... 121
Mirroring .................................................................................................................................. 123
Link Aggregation ...................................................................................................................... 125
Port Authentication .................................................................................................................. 133
Port Security ............................................................................................................................ 139
Classifier .................................................................................................................................. 143
Policy Rule .............................................................................................................................. 149
Queuing Method ...................................................................................................................... 155
Multicast .................................................................................................................................. 157
Authentication & Accounting ....................................................................................................171
IP Source Guard ...................................................................................................................... 185
Loop Guard .............................................................................................................................. 205
Two Rate Three Color Marker ................................................................................................. 209
IP Application ....................................................................................................................... 215
Static Route ............................................................................................................................. 217
DHCP ...................................................................................................................................... 221
Management ......................................................................................................................... 229
Maintenance ............................................................................................................................ 231

Contents Overview
MGS-3712/MGS-3012F User’s Guide
10
Access Control ........................................................................................................................ 237
Diagnostic ................................................................................................................................ 255
Syslog ...................................................................................................................................... 257
Cluster Management ............................................................................................................... 261
MAC Table ............................................................................................................................... 267
ARP Table ................................................................................................................................ 269
Configure Clone ....................................................................................................................... 271
Troubleshooting & Product Specifications .......................................................................273
Troubleshooting ....................................................................................................................... 275
Product Specifications ............................................................................................................. 279
Appendices and Index ........................................................................................................ 285

Table of Contents
MGS-3712/MGS-3012F User’s Guide 11
Table of Contents
About This User's Guide .......................................................................................................... 3
Document Conventions............................................................................................................4
Safety Warnings........................................................................................................................ 6
Contents Overview ................................................................................................................... 9
Table of Contents.................................................................................................................... 11
List of Figures ......................................................................................................................... 21
List of Tables........................................................................................................................... 25
Part I: Introduction and Hardware ........................................................ 29
Chapter 1
Getting to Know Your Switch.................................................................................................31
1.1 Introduction .......................................................................................................................... 31
1.1.1 Backbone Application ................................................................................................. 31
1.1.2 Bridging Example ....................................................................................................... 32
1.1.3 High Performance Switching Example ....................................................................... 32
1.1.4 IEEE 802.1Q VLAN Application Examples ................................................................ 33
1.2 Ways to Manage the Switch ................................................................................................ 34
1.3 Good Habits for Managing the Switch ................................................................................. 34
Chapter 2
Hardware Installation and Connection ................................................................................. 35
2.1 Installation Scenarios .......................................................................................................... 35
2.2 Desktop Installation Procedure ............................................................................................ 35
2.3 Mounting the Switch on a Rack ........................................................................................... 36
2.3.1 Rack-mounted Installation Requirements .................................................................. 36
2.3.2 Attaching the Mounting Brackets to the Switch .......................................................... 36
2.3.3 Mounting the Switch on a Rack .................................................................................. 37
Chapter 3
Hardware Overview................................................................................................................. 39
3.1 Front Panel .......................................................................................................................... 39
3.1.1 Console Port .............................................................................................................. 41

Table of Contents
MGS-3712/MGS-3012F User’s Guide
12
3.1.2 Gigabit Ethernet Ports ............................................................................................... 42
3.1.3 Mini-GBIC Slots ..........................................................................................................42
3.1.4 Management Port ....................................................................................................... 44
3.1.5 Power Connector ....................................................................................................... 44
3.1.6 ALARM Slot ................................................................................................................ 45
3.2 Rear Panel ........................................................................................................................... 47
3.3 LEDs ................................................................................................................................... 47
3.4 Configuring the Switch ......................................................................................................... 48
Part II: Basic Configuration................................................................... 49
Chapter 4
The Web Configurator ............................................................................................................51
4.1 Introduction .......................................................................................................................... 51
4.2 System Login .................................................................................................................... 51
4.3 The Status Screen .......................................................................................................... 52
4.3.1 Change Your Password .......................................................................................... 57
4.4 Saving Your Configuration ................................................................................................... 58
4.5 Switch Lockout .................................................................................................................. 58
4.6 Resetting the Switch ......................................................................................................... 59
4.6.1 Reload the Configuration File ..................................................................................... 59
4.7 Logging Out of the Web Configurator .................................................................................. 60
4.8 Help ..................................................................................................................................... 60
Chapter 5
Initial Setup Example.............................................................................................................. 61
5.1 Overview .............................................................................................................................. 61
5.1.1 Creating a VLAN ........................................................................................................ 61
5.1.2 Setting Port VID .........................................................................................................62
5.2 Configuring Switch Management IP Address ...................................................................... 63
Chapter 6
System Status and Port Statistics......................................................................................... 65
6.1 Overview .............................................................................................................................. 65
6.2 Port Status Summary ...................................................................................................... 65
6.2.1 Status: Port Details ................................................................................................66
Chapter 7
Basic Setting .......................................................................................................................... 71
7.1 Overview .............................................................................................................................. 71
7.2 System Information ........................................................................................................... 71

Table of Contents
MGS-3712/MGS-3012F User’s Guide 13
7.3 General Setup ................................................................................................................. 72
7.4 Introduction to VLANs .......................................................................................................... 74
7.5 Switch Setup Screen ........................................................................................................ 75
7.6 IP Setup ............................................................................................................................... 77
7.6.1 Management IP Addresses ........................................................................................ 77
7.7 Port Setup ............................................................................................................................ 79
Part III: Advanced................................................................................... 83
Chapter 8
VLAN ........................................................................................................................................ 85
8.1 Introduction to IEEE 802.1Q Tagged VLANs .................................................................. 85
8.1.1 Forwarding Tagged and Untagged Frames ................................................................ 85
8.2 Automatic VLAN Registration .............................................................................................. 86
8.2.1 GARP ......................................................................................................................... 86
8.2.2 GVRP ......................................................................................................................... 86
8.3 Port VLAN Trunking ............................................................................................................. 87
8.4 Select the VLAN Type ......................................................................................................... 87
8.5 Static VLAN ......................................................................................................................... 87
8.5.1 Static VLAN Status ..................................................................................................... 88
8.5.2 VLAN Details .............................................................................................................. 88
8.5.3 Configure a Static VLAN ........................................................................................ 89
8.5.4 Configure VLAN Port Settings ................................................................................ 90
8.6 Subnet Based VLANs .......................................................................................................... 92
8.7 Configuring Subnet Based VLAN ...................................................................................... 93
8.8 Port-based VLAN Setup .................................................................................................94
8.8.1 Configure a Port-based VLAN .................................................................................... 95
Chapter 9
Static MAC Forward Setup..................................................................................................... 97
9.1 Overview .............................................................................................................................. 97
9.2 Configuring Static MAC Forwarding ............................................................................... 97
Chapter 10
Filtering.................................................................................................................................... 99
10.1 Configure a Filtering Rule ............................................................................................... 99
Chapter 11
Spanning Tree Protocol........................................................................................................ 101
11.1 STP/RSTP Overview ....................................................................................................... 101
11.1.1 STP Terminology .................................................................................................... 101

Table of Contents
MGS-3712/MGS-3012F User’s Guide
14
11.1.2 How STP Works ..................................................................................................... 102
11.1.3 STP Port States ...................................................................................................... 103
11.1.4 Multiple RSTP ........................................................................................................ 103
11.1.5 Multiple STP ........................................................................................................... 104
11.2 Spanning Tree Protocol Status Screen ............................................................................ 106
11.3 Spanning Tree Configuration ........................................................................................... 107
11.4 Configure Rapid Spanning Tree Protocol ..................................................................... 108
11.5 Rapid Spanning Tree Protocol Status ........................................................................ 109
11.6 Configure Multiple Rapid Spanning Tree Protocol .........................................................111
11.7 Multiple Rapid Spanning Tree Protocol Status ............................................................112
11.8 Configure Multiple Spanning Tree Protocol ...................................................................114
11.9 Multiple Spanning Tree Protocol Status ......................................................................116
Chapter 12
Bandwidth Control................................................................................................................ 119
12.1 Bandwidth Control Overview ............................................................................................119
12.1.1 CIR and PIR ............................................................................................................119
12.2 Bandwidth Control Setup ..................................................................................................119
Chapter 13
Broadcast Storm Control ..................................................................................................... 121
13.1 Broadcast Storm Control Setup ....................................................................................... 121
Chapter 14
Mirroring ................................................................................................................................ 123
14.1 Port Mirroring Setup ........................................................................................................ 123
Chapter 15
Link Aggregation .................................................................................................................. 125
15.1 Link Aggregation Overview .............................................................................................. 125
15.2 Dynamic Link Aggregation ............................................................................................... 125
15.2.1 Link Aggregation ID ................................................................................................ 126
15.3 Link Aggregation Status ...................................................................................................126
15.4 Link Aggregation Setting ................................................................................................. 127
15.5 Link Aggregation Control Protocol ................................................................................ 128
15.6 Static Trunking Example .................................................................................................. 130
Chapter 16
Port Authentication............................................................................................................... 133
16.1 Port Authentication Overview .......................................................................................... 133
16.1.1 IEEE 802.1x Authentication ................................................................................... 133
16.1.2 MAC Authentication ............................................................................................... 134
16.2 Port Authentication Configuration .................................................................................... 135

Table of Contents
MGS-3712/MGS-3012F User’s Guide 15
16.2.1 Activate IEEE 802.1x Security ........................................................................... 135
16.2.2 Activate MAC Authentication .................................................................................. 136
Chapter 17
Port Security.......................................................................................................................... 139
17.1 About Port Security .......................................................................................................... 139
17.2 Port Security Setup .......................................................................................................... 139
Chapter 18
Classifier................................................................................................................................ 143
18.1 About the Classifier and QoS .......................................................................................... 143
18.2 Configuring the Classifier ................................................................................................143
18.3 Viewing and Editing Classifier Configuration ................................................................... 146
18.4 Classifier Example ........................................................................................................... 147
Chapter 19
Policy Rule............................................................................................................................ 149
19.1 Policy Rules Overview .....................................................................................................149
19.1.1 DiffServ .................................................................................................................. 149
19.1.2 DSCP and Per-Hop Behavior ................................................................................. 149
19.2 Configuring Policy Rules ................................................................................................. 150
19.3 Viewing and Editing Policy Configuration ........................................................................ 152
19.4 Policy Example ................................................................................................................ 152
Chapter 20
Queuing Method.................................................................................................................... 155
20.1 Queuing Method Overview .............................................................................................. 155
20.1.1 Strictly Priority Queuing .......................................................................................... 155
20.1.2 Weighted Round Robin Scheduling (WRR) ........................................................... 155
20.2 Configuring Queuing ........................................................................................................ 156
Chapter 21
Multicast ................................................................................................................................ 157
21.1 Multicast Overview .......................................................................................................... 157
21.1.1 IP Multicast Addresses ........................................................................................... 157
21.1.2 IGMP Filtering ........................................................................................................ 157
21.1.3 IGMP Snooping ...................................................................................................... 157
21.1.4 IGMP Snooping and VLANs ................................................................................... 158
21.2 Multicast Status ............................................................................................................... 158
21.3 Multicast Setting .............................................................................................................. 158
21.4 IGMP Snooping VLAN ..................................................................................................... 160
21.5 IGMP Filtering Profile ...................................................................................................... 162
21.6 MVR Overview ................................................................................................................. 163

Table of Contents
MGS-3712/MGS-3012F User’s Guide
16
21.6.1 Types of MVR Ports ............................................................................................... 163
21.6.2 MVR Modes ........................................................................................................... 164
21.6.3 How MVR Works .................................................................................................... 164
21.7 General MVR Configuration ............................................................................................ 164
21.8 MVR Group Configuration ............................................................................................... 166
21.8.1 MVR Configuration Example .................................................................................. 167
Chapter 22
Authentication & Accounting .............................................................................................. 171
22.1 Authentication, Authorization and Accounting ................................................................. 171
22.1.1 Local User Accounts .............................................................................................. 171
22.1.2 RADIUS and TACACS+ ......................................................................................... 172
22.2 Authentication and Accounting Screens .......................................................................... 172
22.2.1 RADIUS Server Setup ........................................................................................ 172
22.2.2 TACACS+ Server Setup ..................................................................................... 174
22.2.3 Authentication and Accounting Setup ................................................................ 176
22.2.4 Vendor Specific Attribute ........................................................................................ 179
22.3 Supported RADIUS Attributes ......................................................................................... 180
22.3.1 Attributes Used for Authentication .......................................................................... 181
22.3.2 Attributes Used for Accounting ............................................................................... 181
Chapter 23
IP Source Guard.................................................................................................................... 185
23.1 IP Source Guard Overview .............................................................................................. 185
23.1.1 DHCP Snooping Overview ..................................................................................... 185
23.1.2 ARP Inspection Overview ...................................................................................... 187
23.2 IP Source Guard .............................................................................................................. 189
23.3 IP Source Guard Static Binding ....................................................................................... 189
23.4 DHCP Snooping .............................................................................................................. 191
23.5 DHCP Snooping Configure .............................................................................................. 194
23.5.1 DHCP Snooping Port Configure ............................................................................. 195
23.5.2 DHCP Snooping VLAN Configure .......................................................................... 197
23.6 ARP Inspection Status .....................................................................................................198
23.6.1 ARP Inspection VLAN Status ................................................................................. 198
23.6.2 ARP Inspection Log Status .................................................................................... 199
23.7 ARP Inspection Configure ............................................................................................... 201
23.7.1 ARP Inspection Port Configure .............................................................................. 202
23.7.2 ARP Inspection VLAN Configure ........................................................................... 203
Chapter 24
Loop Guard............................................................................................................................ 205
24.1 Loop Guard Overview ...................................................................................................... 205
24.2 Loop Guard Setup ........................................................................................................... 207

Table of Contents
MGS-3712/MGS-3012F User’s Guide 17
Chapter 25
Two Rate Three Color Marker .............................................................................................. 209
25.1 DiffServ Overview ............................................................................................................ 209
25.1.1 DSCP and Per-Hop Behavior ................................................................................ 209
25.1.2 DiffServ Network Example ..................................................................................... 210
25.2 Two Rate Three Color Marker Traffic Policing ................................................................. 210
25.2.1 trTCM - Color-blind Mode ........................................................................................211
25.2.2 trTCM - Color-aware Mode .....................................................................................211
25.2.3 Configuring Two Rate Three Color Marker Settings .............................................. 212
Part IV: IP Application.......................................................................... 215
Chapter 26
Static Route ........................................................................................................................... 217
26.1 Static Routing Overview .................................................................................................. 217
26.2 Configuring Static Routing ............................................................................................... 217
Chapter 27
DHCP...................................................................................................................................... 221
27.1 DHCP Overview .............................................................................................................. 221
27.1.1 DHCP Modes ........................................................................................................ 221
27.1.2 DHCP Configuration Options ................................................................................. 221
27.2 DHCP Status ................................................................................................................... 221
27.3 DHCP Relay .................................................................................................................... 222
27.3.1 DHCP Relay Agent Information ............................................................................. 222
27.3.2 Configuring DHCP Global Relay ............................................................................ 223
27.3.3 Global DHCP Relay Configuration Example .......................................................... 224
27.4 Configuring DHCP VLAN Settings ................................................................................ 224
27.4.1 Example: DHCP Relay for Two VLANs .................................................................. 226
Part V: Management............................................................................. 229
Chapter 28
Maintenance .......................................................................................................................... 231
28.1 The Maintenance Screen .............................................................................................. 231
28.2 Load Factory Default ....................................................................................................... 232
28.3 Save Configuration .......................................................................................................... 232
28.4 Reboot System ................................................................................................................ 233
28.5 Firmware Upgrade ........................................................................................................ 233

Table of Contents
MGS-3712/MGS-3012F User’s Guide
18
28.6 Restore a Configuration File ......................................................................................... 234
28.7 Backup a Configuration File ......................................................................................... 234
28.8 FTP Command Line ........................................................................................................ 235
28.8.1 Filename Conventions ........................................................................................... 235
28.8.2 FTP Command Line Procedure ............................................................................. 235
28.8.3 GUI-based FTP Clients .......................................................................................... 236
28.8.4 FTP Restrictions ..................................................................................................... 236
Chapter 29
Access Control...................................................................................................................... 237
29.1 Access Control Overview ............................................................................................ 237
29.2 The Access Control Main Screen .................................................................................... 237
29.3 About SNMP .................................................................................................................. 238
29.3.1 SNMP v3 and Security ........................................................................................... 239
29.3.2 Supported MIBs ..................................................................................................... 239
29.3.3 SNMP Traps .......................................................................................................... 239
29.3.4 Configuring SNMP ................................................................................................. 243
29.3.5 Configuring SNMP Trap Group ........................................................................... 245
29.3.6 Setting Up Login Accounts ................................................................................. 246
29.4 SSH Overview ................................................................................................................. 248
29.5 How SSH works ............................................................................................................... 248
29.6 SSH Implementation on the Switch ................................................................................. 249
29.6.1 Requirements for Using SSH ................................................................................. 249
29.7 Introduction to HTTPS .....................................................................................................250
29.8 HTTPS Example .............................................................................................................. 250
29.8.1 Internet Explorer Warning Messages ..................................................................... 251
29.8.2 Netscape Navigator Warning Messages ................................................................ 251
29.8.3 The Main Screen .................................................................................................... 252
29.9 Service Port Access Control ......................................................................................... 252
29.10 Remote Management ............................................................................................... 253
Chapter 30
Diagnostic.............................................................................................................................. 255
30.1 Diagnostic ........................................................................................................................ 255
Chapter 31
Syslog .................................................................................................................................... 257
31.1 Syslog Overview .............................................................................................................. 257
31.2 Syslog Setup ................................................................................................................... 257
31.3 Syslog Server Setup ........................................................................................................ 258
Chapter 32
Cluster Management.............................................................................................................261

Table of Contents
MGS-3712/MGS-3012F User’s Guide 19
32.1 Cluster Management Status Overview ............................................................................ 261
32.2 Cluster Management Status ............................................................................................ 262
32.2.1 Cluster Member Switch Management .................................................................... 263
32.3 Clustering Management Configuration .......................................................................... 264
Chapter 33
MAC Table.............................................................................................................................. 267
33.1 MAC Table Overview ....................................................................................................... 267
33.2 Viewing the MAC Table .................................................................................................... 268
Chapter 34
ARP Table .............................................................................................................................. 269
34.1 ARP Table Overview ........................................................................................................269
34.1.1 How ARP Works .................................................................................................... 269
34.2 Viewing the ARP Table .................................................................................................... 269
Chapter 35
Configure Clone .................................................................................................................... 271
35.1 Configure Clone ............................................................................................................... 271
Part VI: Troubleshooting & Product Specifications.......................... 273
Chapter 36
Troubleshooting.................................................................................................................... 275
36.1 Power, Hardware Connections, and LEDs ...................................................................... 275
36.2 Switch Access and Login ................................................................................................. 276
Chapter 37
Product Specifications .........................................................................................................279
Part VII: Appendices and Index .......................................................... 285
Appendix A Common Services.............................................................................................. 287
Appendix B Legal Information ............................................................................................... 291
Appendix C Customer Support.............................................................................................. 295
Index....................................................................................................................................... 301

Table of Contents
MGS-3712/MGS-3012F User’s Guide
20