用户手册 — ZyXEL GS-3012

目录

• User’s Guide

  1
  • About This User's Guide

    3
  • Document Conventions

    4
  • Safety Warnings

    6
  • Contents Overview

    9
  • Table of Contents

    11
  • List of Figures

    21
  • List of Tables

    25
• Introduction and Hardware

  29
  • Getting to Know Your Switch

    31
    • 1.1 Introduction

      31
      • 1.1.1 Backbone Application

        31
      • 1.1.2 Bridging Example

        32
      • 1.1.3 High Performance Switching Example

        32
      • 1.1.4 IEEE 802.1Q VLAN Application Examples

        33
    • 1.2 Ways to Manage the Switch

      34
    • 1.3 Good Habits for Managing the Switch

      34
• Basic Configuration

  35
  • Hardware Installation and Connection

    37
    • 2.1 Installation Scenarios

      37
    • 2.2 Desktop Installation Procedure

      37
    • 2.3 Mounting the Switch on a Rack

      38
      • 2.3.1 Rack-mounted Installation Requirements

        38
      • 2.3.2 Attaching the Mounting Brackets to the Switch

        38
      • 2.3.3 Mounting the Switch on a Rack

        39
  • Hardware Overview

    41
    • 3.1 Front Panel

      41
      • 3.1.1 Console Port

        42
      • 3.1.2 Gigabit Ports

        42
      • 3.1.3 Mini-GBIC Slots

        43
      • 3.1.4 Management Port

        45
    • 3.2 Rear Panel

      45
      • 3.2.1 Power Connector

        45
    • 3.3 LEDs

      46
    • 3.4 Configuring the Switch

      47
  • The Web Configurator

    49
    • 4.1 Introduction

      49
    • 4.2 System Login

      49
    • 4.3 The Status Screen

      50
      • 4.3.1 Change Your Password

        54
    • 4.4 Saving Your Configuration

      55
    • 4.5 Switch Lockout

      55
    • 4.6 Resetting the Switch

      56
      • 4.6.1 Reload the Configuration File

        56
    • 4.7 Logging Out of the Web Configurator

      57
    • 4.8 Help

      57
  • Initial Setup Example

    59
    • 5.1 Overview

      59
      • 5.1.1 Creating a VLAN

        59
      • 5.1.2 Setting Port VID

        60
    • 5.2 Configuring Switch Management IP Address

      61
  • System Status and Port Statistics

    63
    • 6.1 Overview

      63
    • 6.2 Port Status Summary

      63
      • 6.2.1 Status: Port Details

        64
  • Basic Setting

    69
    • 7.1 Overview

      69
    • 7.2 System Information

      69
    • 7.3 General Setup

      71
    • 7.4 Introduction to VLANs

      73
    • 7.5 Switch Setup Screen

      73
    • 7.6 IP Setup

      75
      • 7.6.1 Management IP Addresses

        75
    • 7.7 Port Setup

      78
• Advanced

  81
  • VLAN

    83
    • 8.1 Introduction to IEEE 802.1Q Tagged VLANs

      83
      • 8.1.1 Forwarding Tagged and Untagged Frames

        83
    • 8.2 Automatic VLAN Registration

      84
      • 8.2.1 GARP

        84
      • 8.2.2 GVRP

        84
    • 8.3 Port VLAN Trunking

      85
    • 8.4 Select the VLAN Type

      85
    • 8.5 Static VLAN

      85
      • 8.5.1 Static VLAN Status

        86
      • 8.5.2 VLAN Details

        86
      • 8.5.3 Configure a Static VLAN

        87
      • 8.5.4 Configure VLAN Port Settings

        88
    • 8.6 Subnet Based VLANs

      90
    • 8.7 Configuring Subnet Based VLAN

      91
    • 8.8 Port-based VLAN Setup

      92
      • 8.8.1 Configure a Port-based VLAN

        93
  • Static MAC Forward Setup

    95
    • 9.1 Overview

      95
    • 9.2 Configuring Static MAC Forwarding

      95
  • Filtering

    97
    • 10.1 Configure a Filtering Rule

      97
  • Spanning Tree Protocol

    99
    • 11.1 STP/RSTP Overview

      99
      • 11.1.1 STP Terminology

        99
      • 11.1.2 How STP Works

        100
      • 11.1.3 STP Port States

        101
      • 11.1.4 Multiple RSTP

        101
      • 11.1.5 Multiple STP

        102
    • 11.2 Spanning Tree Protocol Status Screen

      104
    • 11.3 Spanning Tree Configuration

      105
    • 11.4 Configure Rapid Spanning Tree Protocol

      106
    • 11.5 Rapid Spanning Tree Protocol Status

      107
    • 11.6 Configure Multiple Rapid Spanning Tree Protocol

      109
    • 11.7 Multiple Rapid Spanning Tree Protocol Status

      110
    • 11.8 Configure Multiple Spanning Tree Protocol

      111
    • 11.9 Multiple Spanning Tree Protocol Status

      114
  • Bandwidth Control

    117
    • 12.1 Bandwidth Control Overview

      117
      • 12.1.1 CIR and PIR

        117
    • 12.2 Bandwidth Control Setup

      117
  • Broadcast Storm Control

    119
    • 13.1 Broadcast Storm Control Setup

      119
  • Mirroring

    121
    • 14.1 Port Mirroring Setup

      121
  • Link Aggregation

    123
    • 15.1 Link Aggregation Overview

      123
    • 15.2 Dynamic Link Aggregation

      123
      • 15.2.1 Link Aggregation ID

        124
    • 15.3 Link Aggregation Status

      124
    • 15.4 Link Aggregation Setting

      125
    • 15.5 Link Aggregation Control Protocol

      126
    • 15.6 Static Trunking Example

      128
  • Port Authentication

    131
    • 16.1 Port Authentication Overview

      131
      • 16.1.1 IEEE 802.1x Authentication

        131
      • 16.1.2 MAC Authentication

        132
    • 16.2 Port Authentication Configuration

      133
      • 16.2.1 Activate IEEE 802.1x Security

        133
      • 16.2.2 Activate MAC Authentication

        134
  • Port Security

    137
    • 17.1 About Port Security

      137
    • 17.2 Port Security Setup

      137
  • Classifier

    141
    • 18.1 About the Classifier and QoS

      141
    • 18.2 Configuring the Classifier

      141
    • 18.3 Viewing and Editing Classifier Configuration

      144
    • 18.4 Classifier Example

      145
  • Policy Rule

    147
    • 19.1 Policy Rules Overview

      147
      • 19.1.1 DiffServ

        147
      • 19.1.2 DSCP and Per-Hop Behavior

        147
    • 19.2 Configuring Policy Rules

      148
    • 19.3 Viewing and Editing Policy Configuration

      150
    • 19.4 Policy Example

      151
  • Queuing Method

    153
    • 20.1 Queuing Method Overview

      153
      • 20.1.1 Strictly Priority Queuing

        153
      • 20.1.2 Weighted Round Robin Scheduling (WRR)

        153
    • 20.2 Configuring Queuing

      154
  • Multicast

    155
    • 21.1 Multicast Overview

      155
      • 21.1.1 IP Multicast Addresses

        155
      • 21.1.2 IGMP Filtering

        155
      • 21.1.3 IGMP Snooping

        155
      • 21.1.4 IGMP Snooping and VLANs

        156
    • 21.2 Multicast Status

      156
    • 21.3 Multicast Setting

      156
    • 21.4 IGMP Snooping VLAN

      158
    • 21.5 IGMP Filtering Profile

      160
    • 21.6 MVR Overview

      161
      • 21.6.1 Types of MVR Ports

        161
      • 21.6.2 MVR Modes

        162
      • 21.6.3 How MVR Works

        162
    • 21.7 General MVR Configuration

      162
    • 21.8 MVR Group Configuration

      164
      • 21.8.1 MVR Configuration Example

        165
  • Authentication & Accounting

    169
    • 22.1 Authentication, Authorization and Accounting

      169
      • 22.1.1 Local User Accounts

        169
      • 22.1.2 RADIUS and TACACS+

        170
    • 22.2 Authentication and Accounting Screens

      170
      • 22.2.1 RADIUS Server Setup

        170
      • 22.2.2 TACACS+ Server Setup

        172
      • 22.2.3 Authentication and Accounting Setup

        174
      • 22.2.4 Vendor Specific Attribute

        177
    • 22.3 Supported RADIUS Attributes

      178
      • 22.3.1 Attributes Used for Authentication

        179
      • 22.3.2 Attributes Used for Accounting

        179
  • IP Source Guard

    183
    • 23.1 IP Source Guard Overview

      183
      • 23.1.1 DHCP Snooping Overview

        183
      • 23.1.2 ARP Inspection Overview

        185
    • 23.2 IP Source Guard

      187
    • 23.3 IP Source Guard Static Binding

      187
    • 23.4 DHCP Snooping

      189
    • 23.5 DHCP Snooping Configure

      192
      • 23.5.1 DHCP Snooping Port Configure

        193
      • 23.5.2 DHCP Snooping VLAN Configure

        195
    • 23.6 ARP Inspection Status

      196
      • 23.6.1 ARP Inspection VLAN Status

        196
      • 23.6.2 ARP Inspection Log Status

        197
    • 23.7 ARP Inspection Configure

      199
      • 23.7.1 ARP Inspection Port Configure

        200
      • 23.7.2 ARP Inspection VLAN Configure

        201
  • Loop Guard

    203
    • 24.1 Loop Guard Overview

      203
    • 24.2 Loop Guard Setup

      205
  • Two Rate Three Color Marker

    207
    • 25.1 DiffServ Overview

      207
      • 25.1.1 DSCP and Per-Hop Behavior

        207
      • 25.1.2 DiffServ Network Example

        208
    • 25.2 Two Rate Three Color Marker Traffic Policing

      208
      • 25.2.1 trTCM - Color-blind Mode

        209
      • 25.2.2 trTCM - Color-aware Mode

        209
      • 25.2.3 Configuring Two Rate Three Color Marker Settings

        210
• IP Application

  213
  • Static Route

    215
    • 26.1 Static Routing Overview

      215
    • 26.2 Configuring Static Routing

      215
  • DHCP

    219
    • 27.1 DHCP Overview

      219
      • 27.1.1 DHCP Modes

        219
      • 27.1.2 DHCP Configuration Options

        219
    • 27.2 DHCP Status

      219
    • 27.3 DHCP Relay

      220
      • 27.3.1 DHCP Relay Agent Information

        220
      • 27.3.2 Configuring DHCP Global Relay

        221
      • 27.3.3 Global DHCP Relay Configuration Example

        222
    • 27.4 Configuring DHCP VLAN Settings

      222
      • 27.4.1 Example: DHCP Relay for Two VLANs

        224
• Management

  225
  • Maintenance

    227
    • 28.1 The Maintenance Screen

      227
    • 28.2 Load Factory Default

      228
    • 28.3 Save Configuration

      228
    • 28.4 Reboot System

      229
    • 28.5 Firmware Upgrade

      229
    • 28.6 Restore a Configuration File

      230
    • 28.7 Backup a Configuration File

      230
    • 28.8 FTP Command Line

      231
      • 28.8.1 Filename Conventions

        231
      • 28.8.2 FTP Command Line Procedure

        231
      • 28.8.3 GUI-based FTP Clients

        232
      • 28.8.4 FTP Restrictions

        232
  • Access Control

    233
    • 29.1 Access Control Overview

      233
    • 29.2 The Access Control Main Screen

      233
    • 29.3 About SNMP

      234
      • 29.3.1 SNMP v3 and Security

        235
      • 29.3.2 Supported MIBs

        235
      • 29.3.3 SNMP Traps

        235
      • 29.3.4 Configuring SNMP

        239
      • 29.3.5 Configuring SNMP Trap Group

        241
      • 29.3.6 Setting Up Login Accounts

        242
    • 29.4 SSH Overview

      244
    • 29.5 How SSH works

      244
    • 29.6 SSH Implementation on the Switch

      245
      • 29.6.1 Requirements for Using SSH

        245
    • 29.7 Introduction to HTTPS

      245
    • 29.8 HTTPS Example

      246
      • 29.8.1 Internet Explorer Warning Messages

        246
      • 29.8.2 Netscape Navigator Warning Messages

        247
      • 29.8.3 The Main Screen

        247
    • 29.9 Service Port Access Control

      248
    • 29.10 Remote Management

      249
  • Diagnostic

    251
    • 30.1 Diagnostic

      251
  • Syslog

    253
    • 31.1 Syslog Overview

      253
    • 31.2 Syslog Setup

      253
    • 31.3 Syslog Server Setup

      254
  • Cluster Management

    257
    • 32.1 Cluster Management Status Overview

      257
    • 32.2 Cluster Management Status

      258
      • 32.2.1 Cluster Member Switch Management

        259
    • 32.3 Clustering Management Configuration

      260
  • MAC Table

    263
    • 33.1 MAC Table Overview

      263
    • 33.2 Viewing the MAC Table

      264
  • ARP Table

    265
    • 34.1 ARP Table Overview

      265
      • 34.1.1 How ARP Works

        265
    • 34.2 Viewing the ARP Table

      265
  • Configure Clone

    267
    • 35.1 Configure Clone

      267
• Troubleshooting & Product Specifications

  269
  • Troubleshooting

    271
    • 36.1 Power, Hardware Connections, and LEDs

      271
    • 36.2 Switch Access and Login

      272
  • Product Specifications

    275
• Appendices and Index

  281
  • IP Addresses and Subnetting

    283
  • Common Services

    293
  • Legal Information

    297
  • Customer Support

    301
  • Index

    307