ZyXEL Communications XS3800-28 User manual

Default Login Details
User’s Guide
XS3800-28
28-port 10GbE L2+ Managed Switch
Copyright © 2019 Zyxel Communications Corporation
Out-of-Band
MGMT Port
http://192.168.0.1
In-Band Ports http://DHCP-assigned IP
or
http://192.168.1.1
User Name admin
Password 1234
Version 4.60 Edition 2, 05/2019

XS3800-28 User’s Guide
2
IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Screenshots and graphics in this book may differ slightly from your product due to differences in your
product firmware or your computer operating system. Every effort has been made to ensure that the
information in this manual is accurate.
Related Documentation
•CLIReferenceGuide
This guide explains how to use the Command-Line Interface (CLI) to configure the Switch.
Note: It is recommended you use the Web Configurator to configure the Switch.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary information.
•MoreInformation
Go to https://businessforum.zyxel.com for product discussions.
Go to support.zyxel.com to find other information on the Switch.

Contents Overview
XS3800-28 User’s Guide
3
Contents Overview
User’s Guide ......................................................................................................................................21
Getting to Know Your Switch .............................................................................................................. 22
Hardware Installation and Connection ............................................................................................. 32
Hardware Overview ............................................................................................................................. 35
The Web Configurator ......................................................................................................................... 43
Initial Setup Example ............................................................................................................................ 59
Tutorials .................................................................................................................................................. 63
Technical Reference ........................................................................................................................74
Status ...................................................................................................................................................... 75
Basic Setting ......................................................................................................................................... 79
VLAN .................................................................................................................................................... 119
Static MAC Forward Setup ................................................................................................................ 143
Static Multicast Forward Setup ......................................................................................................... 146
Filtering ................................................................................................................................................. 150
Spanning Tree Protocol ...................................................................................................................... 152
Bandwidth Control ............................................................................................................................. 178
Broadcast Storm Control ................................................................................................................... 181
Mirroring ............................................................................................................................................... 184
Link Aggregation ................................................................................................................................ 196
Port Authentication ............................................................................................................................ 206
Port Security ......................................................................................................................................... 220
Time Range ......................................................................................................................................... 225
Classifier ............................................................................................................................................... 227
Policy Rule .......................................................................................................................................... 236
Queuing Method ................................................................................................................................ 241
VLAN Stacking .................................................................................................................................... 245
Multicast .............................................................................................................................................. 254
AAA ...................................................................................................................................................... 280
IP Source Guard .................................................................................................................................. 292
Loop Guard ......................................................................................................................................... 327
VLAN Mapping ................................................................................................................................... 331
Layer 2 Protocol Tunneling ................................................................................................................ 335
sFlow ..................................................................................................................................................... 340
PPPoE ................................................................................................................................................... 344
Error Disable ......................................................................................................................................... 353
MAC Pinning ....................................................................................................................................... 361
Private VLAN ....................................................................................................................................... 364

Contents Overview
XS3800-28 User’s Guide
4
Green Ethernet ................................................................................................................................... 368
Link Layer Discovery Protocol (LLDP) ................................................................................................ 371
Anti-Arpscan ....................................................................................................................................... 399
BPDU Guard ........................................................................................................................................ 405
OAM ..................................................................................................................................................... 409
ZULD ...................................................................................................................................................... 419
NLB ........................................................................................................................................................ 425
Wol Relay ............................................................................................................................................. 430
Static Route ......................................................................................................................................... 432
Policy Routing ..................................................................................................................................... 436
Differentiated Services ....................................................................................................................... 440
DHCP .................................................................................................................................................... 445
VRRP ..................................................................................................................................................... 463
Router Setup ........................................................................................................................................ 472
ARP Setup ............................................................................................................................................ 474
Maintenance ...................................................................................................................................... 480
Access Control .................................................................................................................................... 495
Diagnostic ........................................................................................................................................... 518
System Log .......................................................................................................................................... 522
Syslog Setup ........................................................................................................................................ 523
Cluster Management ......................................................................................................................... 526
MAC Table ........................................................................................................................................... 531
IP Table ................................................................................................................................................. 534
ARP Table ............................................................................................................................................ 536
Routing Table ...................................................................................................................................... 538
Path MTU Table ................................................................................................................................... 540
Configure Clone ................................................................................................................................. 541
IPv6 Neighbor Table ........................................................................................................................... 545
Port Status ............................................................................................................................................ 547
Troubleshooting and Appendices .................................................................................................557
Troubleshooting .................................................................................................................................. 558

Table of Contents
XS3800-28 User’s Guide
5
Table of Contents
Contents Overview .............................................................................................................................3
Table of Contents.................................................................................................................................5
Part I: User’s Guide..........................................................................................21
Chapter 1
Getting to Know Your Switch ............................................................................................................22
1.1 Introduction ..................................................................................................................................... 22
1.1.1 Multi-Gigabit .......................................................................................................................... 23
1.1.2 Stacking Mode ...................................................................................................................... 24
1.1.3 Management Method ......................................................................................................... 25
1.1.4 Management Modes ........................................................................................................... 25
1.1.5 Mode Changing ................................................................................................................... 26
1.1.6 ZON Utility ............................................................................................................................... 27
1.2 Applications .................................................................................................................................... 28
1.2.1 Bridging Example .................................................................................................................. 28
1.2.2 High Performance Switching Example ............................................................................... 28
1.2.3 IEEE 802.1Q VLAN Application Example ............................................................................. 29
1.2.4 IPv6 Support ........................................................................................................................... 30
1.3 Ways to Manage the Switch ......................................................................................................... 30
1.4 Good Habits for Managing the Switch ........................................................................................31
Chapter 2
Hardware Installation and Connection ...........................................................................................32
2.1 Freestanding Installation ............................................................................................................... 32
2.2 Rack Mounting ............................................................................................................................... 33
2.2.1 Installation Requirements ..................................................................................................... 33
2.2.2 Attaching the Mounting Brackets to the Switch ............................................................... 33
2.2.3 Mounting the Switch on a Rack .......................................................................................... 34
Chapter 3
Hardware Overview...........................................................................................................................35
3.1 Front Panel Connections .............................................................................................................. 35
3.1.1 SFP/SFP+ Slots ........................................................................................................................ 36
3.1.2 Ethernet Ports ......................................................................................................................... 37
3.1.3 Dual Personality Interfaces .................................................................................................. 38
3.1.4 Management Port ................................................................................................................ 38

Table of Contents
XS3800-28 User’s Guide
6
3.1.5 Console Port ......................................................................................................................... 38
3.2 Rear Panel ....................................................................................................................................... 39
3.2.1 Grounding .............................................................................................................................. 39
3.2.2 AC Power Connection ......................................................................................................... 40
3.3 LEDs .............................................................................................................................................. 40
Chapter 4
The Web Configurator........................................................................................................................43
4.1 Introduction ..................................................................................................................................... 43
4.2 System Login ............................................................................................................................... 43
4.3 Zyxel One Network (ZON) Utility ................................................................................................... 46
4.3.1 Requirements ......................................................................................................................... 46
4.3.2 Run the ZON Utility ................................................................................................................. 47
4.4 The Web Configurator Layout ..................................................................................................... 50
4.4.1 Change Your Password ..................................................................................................... 55
4.5 Saving Your Configuration ............................................................................................................. 56
4.6 Switch Lockout .............................................................................................................................. 56
4.7 Resetting the Switch .................................................................................................................... 57
4.7.1 Using the RESTORE Button ..................................................................................................... 57
4.7.2 Reload the Configuration File ............................................................................................. 57
4.8 Logging Out of the Web Configurator .......................................................................................58
4.9 Help ................................................................................................................................................. 58
Chapter 5
Initial Setup Example.........................................................................................................................59
5.1 Overview ......................................................................................................................................... 59
5.1.1 Creating a VLAN ................................................................................................................... 59
5.1.2 Setting Port VID ...................................................................................................................... 60
5.1.3 Configuring Switch Management IP Address .................................................................... 61
Chapter 6
Tutorials...............................................................................................................................................63
6.1 Overview ......................................................................................................................................... 63
6.2 How to Use DHCPv4 Snooping on the Switch ............................................................................. 63
6.3 How to Use DHCPv4 Relay on the Switch .................................................................................... 66
6.3.1 DHCP Relay Tutorial Introduction ........................................................................................ 67
6.3.2 Creating a VLAN ................................................................................................................... 67
6.3.3 Configuring DHCPv4 Relay .................................................................................................. 69
6.3.4 Troubleshooting ..................................................................................................................... 70
6.4 How to Use Auto Configuration via a DHCP Server on the Switch ........................................... 70
Part II: Technical Reference...........................................................................74

Table of Contents
XS3800-28 User’s Guide
7
Chapter 7
Status...................................................................................................................................................75
7.1 Overview ......................................................................................................................................... 75
7.2 Status ................................................................................................................................................ 75
7.3 Neighbor Screen ............................................................................................................................ 77
Chapter 8
Basic Setting ......................................................................................................................................79
8.1 System Information ...................................................................................................................... 79
8.1.1 System Information Stacking Hardware Monitor .............................................................. 82
8.2 General Setup ............................................................................................................................... 84
8.3 Switch Setup ................................................................................................................................... 86
8.3.1 Introduction to VLANs .......................................................................................................... 86
8.4 IP Setup ......................................................................................................................................... 89
8.4.1 IP Interfaces .......................................................................................................................... 89
8.4.2 IP Status Details .................................................................................................................... 90
8.4.3 IP Configuration ................................................................................................................... 91
8.5 Port Setup ....................................................................................................................................... 94
8.6 Interface Setup ............................................................................................................................... 97
8.7 IPv6 ................................................................................................................................................... 98
8.7.1 IPv6 Interface Status ............................................................................................................. 98
8.7.2 IPv6 Configuration .............................................................................................................. 100
8.7.3 IPv6 Global Setup ................................................................................................................ 101
8.7.4 IPv6 Interface Setup ............................................................................................................ 102
8.7.5 IPv6 Link-Local Address Setup ............................................................................................103
8.7.6 IPv6 Global Address Setup ................................................................................................. 103
8.7.7 IPv6 Neighbor Discovery Setup ......................................................................................... 104
8.7.8 IPv6 Router Discovery Setup ..............................................................................................105
8.7.9 IPv6 Prefix Setup .................................................................................................................. 107
8.7.10 IPv6 Neighbor Setup ......................................................................................................... 108
8.7.11 DHCPv6 Client Setup ........................................................................................................ 109
8.8 Stacking ......................................................................................................................................... 111
8.8.1 Stacking Status .................................................................................................................... 112
8.8.2 Stacking Slot ....................................................................................................................... 113
8.8.3 Stacking Configuration ...................................................................................................... 114
8.9 DNS ................................................................................................................................................. 116
8.10 Cloud Management .................................................................................................................. 117
8.10.1 Nebula Center Control Discovery ................................................................................... 117
8.10.2 Nebula Switch Registration ..............................................................................................118
Chapter 9
VLAN..................................................................................................................................................119
9.1 Introduction to IEEE 802.1Q Tagged VLANs ............................................................................ 119

Table of Contents
XS3800-28 User’s Guide
8
9.1.1 Forwarding Tagged and Untagged Frames .................................................................... 119
9.2 Automatic VLAN Registration .................................................................................................... 120
9.2.1 GARP .................................................................................................................................... 120
9.2.2 GVRP .................................................................................................................................... 120
9.3 Port VLAN Trunking ...................................................................................................................... 121
9.4 Select the VLAN Type .................................................................................................................. 121
9.5 802.1Q Static VLAN ....................................................................................................................... 121
9.5.1 VLAN Status ......................................................................................................................... 122
9.5.2 VLAN Details ........................................................................................................................ 123
9.6 Private VLAN Status ..................................................................................................................... 124
9.7 VLAN Configuration .................................................................................................................... 125
9.7.1 Configure a Static VLAN ............................................................................................... 125
9.7.2 Configure VLAN Port Settings ........................................................................................ 128
9.7.3 Subnet Based VLANs .......................................................................................................... 130
9.7.4 Protocol Based VLANs ....................................................................................................... 133
9.8 Voice VLAN .................................................................................................................................. 136
9.9 MAC Based VLAN ......................................................................................................................... 138
9.10 Port-based VLAN Setup ......................................................................................................... 139
9.10.1 Configure a Port-based VLAN ........................................................................................ 139
Chapter 10
Static MAC Forward Setup ..............................................................................................................143
10.1 Overview ..................................................................................................................................... 143
10.2 Configuring Static MAC Forwarding ................................................................................... 143
Chapter 11
Static Multicast Forward Setup .......................................................................................................146
11.1 Static Multicast Forwarding Overview ..................................................................................... 146
11.2 Configuring Static Multicast Forwarding .................................................................................. 147
Chapter 12
Filtering..............................................................................................................................................150
12.1 Configure a Filtering Rule ........................................................................................................ 150
Chapter 13
Spanning Tree Protocol ...................................................................................................................152
13.1 Spanning Tree Protocol Overview ........................................................................................... 152
13.1.1 What You Need to Know ................................................................................................. 152
13.2 Spanning Tree Protocol Status Screen ..................................................................................... 154
13.3 Spanning Tree Configuration ................................................................................................... 155
13.4 Configure Rapid Spanning Tree Protocol ............................................................................. 156
13.5 Rapid Spanning Tree Protocol Status ....................................................................................158
13.6 Configure Multiple Rapid Spanning Tree Protocol .............................................................. 160

Table of Contents
XS3800-28 User’s Guide
9
13.7 Multiple Rapid Spanning Tree Protocol Status .................................................................... 163
13.8 Configure Multiple Spanning Tree Protocol .......................................................................... 165
13.8.1 Multiple Spanning Tree Protocol Port Configuration .................................................... 169
13.9 Multiple Spanning Tree Protocol Status .................................................................................171
13.10 Technical Reference ................................................................................................................ 175
13.10.1 MSTP Network Example .................................................................................................. 175
13.10.2 MST Region ....................................................................................................................... 176
13.10.3 MST Instance .................................................................................................................... 176
13.10.4 Common and Internal Spanning Tree (CIST) ............................................................... 177
Chapter 14
Bandwidth Control...........................................................................................................................178
14.1 Bandwidth Control Overview .................................................................................................. 178
14.1.1 CIR and PIR ........................................................................................................................ 178
14.2 Bandwidth Control Setup .......................................................................................................... 178
Chapter 15
Broadcast Storm Control.................................................................................................................181
15.1 Broadcast Storm Control Setup ............................................................................................... 181
Chapter 16
Mirroring............................................................................................................................................184
16.1 Port Mirroring .............................................................................................................................. 184
16.1.1 Local Port Mirroring ........................................................................................................... 186
16.1.2 Remote Port Mirroring ....................................................................................................... 188
16.1.3 Source ................................................................................................................................ 189
16.1.4 Destination ......................................................................................................................... 192
16.1.5 Connected Port ................................................................................................................ 193
Chapter 17
Link Aggregation .............................................................................................................................196
17.1 Link Aggregation Overview ...................................................................................................... 196
17.2 Dynamic Link Aggregation ...................................................................................................... 196
17.2.1 Link Aggregation ID ......................................................................................................... 197
17.3 Link Aggregation Status ............................................................................................................. 197
17.4 Link Aggregation Setting .......................................................................................................... 198
17.5 Link Aggregation Control Protocol ........................................................................................ 201
17.6 Static Trunking Example ............................................................................................................. 204
Chapter 18
Port Authentication..........................................................................................................................206
18.1 Port Authentication Overview ................................................................................................. 206
18.1.1 IEEE 802.1x Authentication ............................................................................................... 206

Table of Contents
XS3800-28 User’s Guide
10
18.1.2 MAC Authentication ........................................................................................................ 207
18.2 Port Authentication Configuration ........................................................................................... 208
18.2.1 Activate IEEE 802.1x Security ........................................................................................ 208
18.2.2 Guest VLAN ....................................................................................................................... 211
18.2.3 Activate MAC Authentication ....................................................................................... 213
18.3 Technical Reference .................................................................................................................. 216
18.3.1 IEEE 802.1x .......................................................................................................................... 216
18.3.2 RADIUS ................................................................................................................................ 217
18.3.3 EAP (Extensible Authentication Protocol) Authentication ........................................... 218
18.3.4 EAPOL (EAP over LAN) ...................................................................................................... 219
Chapter 19
Port Security......................................................................................................................................220
19.1 About Port Security ..................................................................................................................... 220
19.2 Port Security Setup ...................................................................................................................... 220
19.3 VLAN MAC Address Limit .......................................................................................................... 222
Chapter 20
Time Range.......................................................................................................................................225
20.1 About Time Range ..................................................................................................................... 225
20.2 Time Range Setup ...................................................................................................................... 225
Chapter 21
Classifier............................................................................................................................................227
21.1 About the Classifier and QoS .................................................................................................... 227
21.2 Classifier Status ............................................................................................................................ 227
21.3 Classifier Configuration .............................................................................................................. 228
21.3.1 Viewing and Editing Classifier Configuration ................................................................. 232
21.4 Classifier Global Setting Configuration .................................................................................... 233
21.5 Classifier Example ....................................................................................................................... 234
Chapter 22
Policy Rule .......................................................................................................................................236
22.1 Policy Rules Overview ............................................................................................................... 236
22.1.1 DiffServ ................................................................................................................................ 236
22.1.2 DSCP and Per-Hop Behavior ........................................................................................... 236
22.2 Configuring Policy Rules ............................................................................................................ 236
22.3 Policy Example ............................................................................................................................ 239
Chapter 23
Queuing Method..............................................................................................................................241
23.1 Queuing Method Overview ..................................................................................................... 241
23.1.1 Strictly Priority ..................................................................................................................... 241