GS-1524 / GS-1548

Web Managed GbE Switch

Default Login Details

IP Address User Name Password http://192.168.1.1 admin 1234
Firmware Version 1.12 www.zyxel.com Edition 2, 5/2009

www.zyxel.com

Copyright 2009 ZyXEL Communications Corporation

About This User's Guide

Intended Audience
This manual is intended for people who want to configure the Switch using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology.

Related Documentation

Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your hardware connections. Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information.
Note: It is recommended you use the web configurator to configure the Switch.
Supporting Disc Refer to the included CD for support documents. ZyXEL Web Site Please refer to www.zyxel.com for additional support documentation and product certifications.

User Guide Feedback

Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: techwriters@zyxel.com.tw

Customer Support

In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/
GS-1524/GS-1548 Users Guide
About This User's Guide web/contact_us.php for contact information. Please have the following information ready when you contact an office. Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it.

Document Conventions

Warnings and Notes
These are how warnings and notes are shown in this Users Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.

Syntax Conventions

The GS-1524 / GS-1548 may be referred to as the Switch, the device, or the system in this Users Guide. Product labels, screen names, field labels and field choices are all in bold font. A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the enter or return key on your keyboard. Enter means for you to type one or more characters and then press the [ENTER] key. Select or choose means for you to use one of the predefined choices. A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Maintenance > Log > Log Setting means you first click Maintenance in the navigation panel, then the Log sub menu and finally the Log Setting tab to get to that screen. Units of measurement may denote the metric value or the scientific value. For example, k for kilo may denote 1000 or 1024, M for mega may denote 1000000 or 1048576 and so on. e.g., is a shorthand for for instance, and i.e., means that is or in other words.

18.5 SNMP Notification....116 18.6 SNMP Trap Station....117 18.6.1 SNMP Trap Station: Create...119 18.6.2 SNMP Trap Station: Modify...119
Chapter 19 RMON-Lite..... 121
19.1 RMON-Lite Overview.... 121 19.2 RMON Statistics: Overview.... 122 19.3 RMON-Lite Statistics: Port.... 123 19.4 RMON-Lite History MIB.... 124 19.4.1 RMON History Control: Overview... 125 19.4.2 RMON History Control: Modify... 126 19.4.3 RMON History Statistics: Overview... 127 19.4.4 RMON History Statistics: Control... 128 19.5 RMON Alarm: Overview.... 129 19.5.1 RMON Alarm: Create New Alarm.. 130 19.6 RMON Event: Overview.... 132 19.6.1 RMON Event: Create New Event... 133 19.7 RMON Event Log: Overview... 134 19.7.1 RMON Event Log: Event.... 135
Chapter 20 Dynamic ARP.... 137
20.1 ARP Table Overview... 137 20.1.1 ARP Table Entries... 137 20.1.2 How Dynamic ARP Works 20.3 Viewing ARP Table Entries 20.4 Adding ARP Table Entries... 137 20.2 Enabling Dynamic ARP... 138... 139... 140
Chapter 21 Troubleshooting.... 141
21.1 Power, Hardware Connections, and LEDs... 141 21.2 Switch Access and Login.... 142
Chapter 22 Product Specifications.... 145
22.1 General Switch Specifications.... 145
Part IV: Appendices and Index... 151
Appendix A IP Addresses and Subnetting... 153 Appendix B Legal Information.... 163 Index..... 167

P ART I

Introduction and Hardware Overview
Getting to Know Your Switch (19) Hardware Installation and Connection (23) Hardware Overview (27)

CHAPTER

Getting to Know Your Switch
This chapter introduces the main features and applications of the Switch.

1.1 Introduction

Your Switch is an intelligent layer 2 switch with 1000BASE-T RJ-45 ports and miniGBIC slots for fiber-optic transceivers. The Switch features dual-personality ports, each of which consists of one 1000BASE-T RJ-45 port and one mini-GBIC slot, with either interface active at one time. The GS-1524 has 20 1000BASE-T RJ-45 ports, and four dual-personality ports. The GS-1548 has 44 1000BASE-T RJ-45 ports, and four dual-personality ports. With its built-in web configurator, managing and configuring the Switch is easy. See Chapter 22 on page 145 for a full list of software features available on the Switch.

3.2 LEDs

The following table describes the LEDs.

Table 2 LEDs

PWR SYS

STATUS

Green Off Green Off On On
The system is turned on. The system is off. The system is on and functioning properly. The system is off or is malfunctioning.
Chapter 3 Hardware Overview

Table 2 LEDs (continued)

LINK/ACT
Green Amber Blinking Off On On
The link to a 10/1000 Mbps Ethernet network is up. The link to a 100 Mbps Ethernet network is up. The port is transmitting/receiving data. The link to an Ethernet network is down. On Off The port is negotiating in full-duplex mode. The port is negotiating in half-duplex mode and no collisions are occurring. The link to a 10/1000 Mbps Ethernet network is up. The link to a 100 Mbps Ethernet network is up. The port is transmitting/receiving data. The link to an Ethernet network is down. On Off Blinking Off The port has a successful connection. No Ethernet device is connected to this port. The port is receiving or transmitting data. The link to an Ethernet network is down.
Gigabit Ethernet Ports (GS-1524 ONLY)
Gigabit Ethernet Ports (GS-1548 ONLY) 1 ~ 48 Green Amber Blinking Off GBIC Slots LNK ACT Green Green On On

3.3 Rear Panel

The following figures show the rear panels of the AC power input model Switch. The rear panel contains a receptacle for the power cord. The GS-1524s rear panel also contains the RESET button.
Figure 14 GS-1524 Rear Panel
Figure 15 GS-1548 Rear Panel

3.3.1 Power Connector

Make sure you are using the correct power source as shown on the panel.

3.4.1 Power Connector

Make sure you are using the correct power source as shown on the panel. To connect the power to the Switch, insert the female end of the power cord into the power receptacle on the rear panel. Connect the other end of the supplied power cord to a 100~240V AC, 50/60 Hz power outlet capable of supplying at least 0.9A (G-1524) or 1.5A (GS-1548).

P ART II

Basic & Advanced Settings

Status Password Firmware Restart/ Reset Port Statistics

VLAN Trunk Groups Mirror

QoS Rate Port Rate Storm Control L2 Address Manageme nt Display Cable Diagnostic Auto DoS Auto VoIP Logging Settings RAM Logs
Chapter 4 The Web Configurator
Table 4 Navigation Panel Links (continued)
Flash Logs SNMP Engine ID Group User Community Trap Station RMON-Lite Dynamic ARP Settings ARP Entries Logout
Use this screen to configure logs which are saved to non-volatile memory. These logs can be seen even after the Switch is rebooted. Use these screens to configure SNMP management settings. Use this screen to configure SNMP engine ID. Use this screen to configure groups with different access rights for SNMP management. Use this screen to create users and assign them to pre-defined SNMP groups. Use this screen to define security parameters for SNMP v1 and SNMP v2c. Use this screen to configure settings that define when notifications are sent to an external management station. Use this screen to configure Remote Network Monitoring Management Information Base (RMON MIB) settings. Use these screens to enable and configure ARP table settings. Use this screen to configure ARP table settings. Use this screen to enter and view MAC address to IP address mappings. Click this to logout of the web configurator.
4.3.3 Change Your Password
After you log in for the first time, it is recommended you change the default administrator password. Click System, Password to display the next screen.
Figure 19 Change Administrator Login Password
4.4 Saving Your Configuration
When you are done modifying the settings in a screen, click Apply to save your changes back to the Switch.

4.5 Switch Lockout

You could block yourself (and all others) from using the web configurator if you: 1 Remove all the ports from the default VLAN (default is VLAN 1) when no other VLANs exist. Disable all ports. Forget the password and/or IP address. Enable Dynamic ARP without entering the proper MAC to IP address binding.

4.6 Resetting the Switch

If you lock yourself (and others) from the Switch or forget the administrator password, you will need to reset the Switch back to the factory defaults. Use the RESET button to reset the Switch back to factory defaults. Press and hold the RESET button for one second. The Switch will reload its factory defaults. The Switch is now reinitialized with a default configuration file including the default administrator username (admin) and password (1234). The IP address of the Switch also reverts to the default 192.168.1.1.

Type the existing system password (1234 is the default password when shipped). Enter your new system password. Enter up to 15 alpha-numeric characters; spaces are allowed. Retype your new system password for confirmation

5.3 Firmware Upgrade

Make sure you have downloaded (and unzipped) the correct model firmware and version to your computer before uploading to the device.
Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device.
Chapter 5 System From the System screen, click Upgrade in the Firmware Version field to display the screen as shown next.

Figure 27

Firmware Upgrade
Type the path and file name of the firmware file you wish to upload to the Switch in the File Path text box or click Browse to locate it. After you have specified the file, click Upgrade. After the firmware upgrade process is complete, see the System > Status screen to verify your current firmware version number.
5.3.1 System: Restart/Reset
Click System > Restart/Reset to perform a system restart (keep current configuration) or a system reset (restore the Switchs default configuration settings). Follow the instructions in the screen below to reset or restart the Switch.
Figure 28 System: Restart/Reset

Port Settings

This chapter describes how to view and configure the port settings on the Switch.

6.1 Port Status

Use this screen to view Switch port settings. Click Port in the navigation panel to display the Port Status screen.

Figure 29 Port Status

Table 8 Port Status
Refresh Port Link Status Speed Duplex
Click this to update the PORT Status screen. This identifies the Ethernet port. Click a port number to display the Port Configuration screen (refer to Section 6.2 on page 50). This field displays the link status of the port. Up, if the port is enabled and active or Down, if the port is disabled or not connected to any device. This field displays the speed either 10Mbps, 100Mbps or 1000Mbps and the duplex mode Full or Half.

Chapter 6 Port Settings

Table 8 Port Status (continued)

Flow Control

Enables access to buffering resources for the port thus ensuring lossless operation across network switches. This field displays either Enabled or Disabled. The PVID field specifies what tag the incoming untagged frames receive on that port so that the frames are forwarded to the VLAN group that the tag defines.

Chapter 11 QoS

11.1.2 Strict Priority
Strict priority scheduling singles out the highest priority queue and ensures all queued traffic in this queue is transmitted before servicing the lower priority queues. Strict priority scheduling services the remaining queues using WRR. As traffic comes into the Switch, traffic on the highest priority queue, Queue 3 is transmitted first. Only when that queue empties, traffic on the lower priority queues is transmitted using WRR scheduling.

11.2 QoS Enhancement

You can configure the Switch to prioritize traffic even if the incoming packets are not marked with IEEE 802.1p priority tags or change the existing priority tags based on the criteria you select. The Switch allows you to choose one of the following methods for assigning priority to incoming packets on the Switch: Port Based QoS - Assign priority to packets based on the incoming port on the Switch. See Section 11.4.1 on page 71. DSCP Based QoS - Assign priority to packets based on their Differentiated Services Code Points (DSCPs). See Section 11.4.2 on page 72. ToS Based QoS - Assign priority to packets based on their Type of Service (ToS) tagging. See Section 11.4.5 on page 74. IP Address Based QoS - Assign priority to packets based on their IP address. See Section 11.4.6 on page 75.
Note: Advanced QoS methods only affect the internal priority queue mapping for the Switch. The Switch does not modify the IEEE 802.1p value for the egress frames.
You can choose one of these ways to alter the way incoming packets are prioritized or you can choose not to use any QoS enhancement setting on the Switch.

11.3 Configuring QoS

Use the QoS Setting screen to specify a queuing method and configure queue weights for the Switch. Click QoS in the navigation panel to view the following screen.

Figure 38 QoS Setting

Table 17 QoS Setting
Advanced Number of queues Schedulin g Method
Click this link to configure QoS settings based on port number, IP address or configure DSCP or ToS priority to 802.1p priority mappings. This field displays the number of queues configurable on the Switch. Click Change to edit the number of queues on the Switch. Select Strict Priority or Weighted Round Robin. Strict Priority scheduling singles out the highest priority queue and ensures all queued traffic in this queue is transmitted before servicing the lower priority queues. Strict Priority scheduling services the remaining queues using WRR.
Note: Queue weights can only be changed when Weighted Round Robin is selected.

Change Priority

ID, IP, MASK, Priority, Delete Apply Change Settings This is a summary table of your IP address based QoS settings. This table updates when you click the Change button in this screen. Click DELETE in the Delete column to remove this IP address based QoS entry from the Switch. Click this when you have reviewed the changes you want to make and you want to save them to the Switchs memory.
Port Rate Limit and Storm Control
This chapter shows you how you can manage bandwidth on each port and set up broadcast storm control settings using the Port Rate and Storm Control screens.

12.1 Port Rate Screen

Rate control means defining a maximum allowable bandwidth for incoming and/or out-going traffic flows on a port. Click Rate > Port Rate in the navigation panel to bring up the screen as shown next.
Figure 44 Port Rate Limit
Chapter 12 Port Rate Limit and Storm Control The following table describes the related labels in this screen.
Table 22 Rate Limit and Storm Control
Port Ingress Rate Egress Rate
This field displays the port number. Click on an individual port number to configure rate limits on that port. Displays the maximum bandwidth allowed in kilobits per second (Kbps) for the incoming traffic flow on a port. Displays the maximum bandwidth allowed in kilobits per second (Kbps) for the out-going traffic flow on a port.

12.1.1 Rate Limit Screen

Click a port number in the Port Rate screen to bring up the screen as shown next.
Figure 45 Rate Limit Configuration
The following table describes the related labels in this screen.
Table 23 Rate Limit Configuration
Ingress Rate Egress Traffic Shaping Rate
Specify the maximum bandwidth allowed in kilobits per second (Kbps) for the incoming traffic flow on a port. Select Disabled to not have any bandwidth limits for outgoing traffic on the port or select Enabled to enable bandwidth limits for outgoing traffic on the port. This is a read only field indicating the rate limit of outgoing traffic on the port in Kbps. This value changes depending on the number of Tokens Added Per Interval.
Chapter 12 Port Rate Limit and Storm Control
Table 23 Rate Limit Configuration (continued)
Tokens Added Per Interval
The Switch uses a Token Bucket algorithm to limit the outgoing rate on the ports and to limit the largest amount of packets that can leave the port in any one instance. In this algorithm each token represents an allowed amount of bandwidth to be sent out on the port. The bucket holds the tokens. In other words, the number of tokens in the bucket represents the maximum allowed bandwidth to go out on the port. The size of the bucket is specified by the burst size (see below). Every time traffic goes out on the port, tokens (representing used up bandwidth) are removed from the bucket, thus limiting the amount of traffic allowed to go out on the port. Tokens are also added to the bucket every Token Update Interval, thus resetting the amount of bandwidth allowed to go out. If the bucket is empty, the data packets are dropped until more tokens are added to the bucket. Select the number of tokens that should be added to the bucket per Token Update Interval. Each token represents.5 bit in bandwidth allowed to go out on the port.

17.3 Logging: Add Server

Use this screen to configure a new syslog entry. Click Add Server in the Logging screen to view the screen as shown.
Figure 55 Logging: Add Server
Table 34 Logging: Add Server
Name IP Address Port Facility Add
Enter a short descriptive name for identifying this server. You can use 112 printable ASCII characters. Spaces are allowed. Enter the IP address in dotted decimal notation of the syslog server you want to add. Specify the UDP port for sending log messages to this server. Typically port 514 is used with syslog. The log facility allows you to send logs to different files in the syslog server. Refer to the documentation of your syslog server for more details. Click Add to save this entry to the Switch and return to the Logging screen.
17.4 Viewing RAM and Flash Logs
Use these screens to view or export RAM or Flash logs. Click RAM Logs or Flash Logs in the navigation panel to view the Logs - RAM or Logs - Flash screen.
Note: The RAM Logs and Flash Logs screen contain the same fields as the Logs RAM or Logs - Flash screen in the following figure. Figure 56 Logs: RAM/Flash

Table 35 Logs: RAM/Flash

Search Export
Click this to search for specific log entries. Click this to export (save) the log. The logs default name is events.csv. A.csv (Comma Separated Values) file can be viewed by most spreadsheet software such as Microsofts Excel. This is the number of the log entry. The log entries with the lowest numerical value are the most recent. This field indicates the index number of the log. This number doesnt change even if some logs are deleted from the Switch due to memory limits. The index number increments by one for each recorded event. The largest number represents the most recent log event. This field displays the severity level of the log event. The possible severity levels are: Error - to record system failures, such as events which will cause the Switch to malfunction and events such as invalid user input in the web configurator. Warning - to record non critical errors on the Switch. The Switch will continue to function when warnings are recorded. Info - to record regular system events, such as configuration changes or logins. Debug - to record events which can be helpful for engineering debugging of the Switchs function. This field is not recommended to track as it creates many messages not helpful to typical users.

Table 38 SNMP Commands

COMMAND

Get GetNext

Allows the manager to retrieve an object variable from the agent. Allows the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations. Allows the manager to set values for object variables within an agent. Used by the agent to inform the manager of some events.

Set Trap

18.1.1 Supported MIBs
MIBs let administrators collect statistics and monitor status and performance. The Switch supports the following MIBs: RFC 1213 SNMP MIB II MIB II - System MIB II - Interface RFC 1398 MIB - Ether-like RFC 2674 SNMPv2, SNMPv2c RFC 2819 RMON Group 1 (Statistics) Group 2 (History) Group 3 (Alarm) Group 9 (Event)

Chapter 18 SNMP

18.1.2 SNMP Traps
The Switch sends traps to an SNMP manager when an event occurs. SNMP traps supported are outlined in the following table.

Table 39 SNMP Traps

OBJECT LABEL
authenticationFailure RFC2819 Traps (alarmEntry)

OBJECT ID

1.3.6.1.6.3.1.1.5.5 1.3.6.1.2.1.16.3.1.1
This trap is sent when an SNMP request comes from non-authenticated hosts. A RMON event has been triggered.
SNMPv1/SNMPv2 Trap/Inform Requests:
18.1.3 SNMP v3 and Authentication
SNMP v3 adds the concept of groups and users to enhance security for SNMP management. A user is an SNMP manager. A group is a group of SNMP managers that are assigned common access rights to MIBs. For example, one group of managers may only have access to agents with MIB II - System Group MIBs while another may have access to agents with the Ether-like MIB. In addition, SNMP managers can also be required to authenticate with agents before conducting SNMP management sessions.
Note: SNMP v3 is enabled when you create SNMP groups and users. Once SNMP v3 is enabled, you must configure unique SNMP communities for SNMP v1 and/or SNMP v2c access.

18.1.4 SNMP EngineID

The SNMP Engine ID is a unique identifier that identifies agents to the managers. The default SNMP Engine ID is the MAC address of the agent. You can change this. Use the SNMP EngineID screen to specify the Engine ID for the Switch. Click SNMP > EngineID in the navigation panel to view the screen as shown.

Figure 60 SNMP EngineID

Chapter 18 SNMP The following table describes the labels in this screen.

Table 40 SNMP EngineID

Engine ID
Select this radio button and enter a unique Engine ID for the Switch. The format is limited to hexadecimal characters (0~9 and a~f) and the maximum length is 27 octets (each octet is made up of a pair of hexadecimal characters). Select this radio button to use the default Engine ID (based on the MAC address of the Switch) for SNMP. Click this to save your changes to the Switch.

Remote Station IP Group Name Previous Page/ Next Page
18.4.1 SNMP Community: Create
Click on the Create New Community link in the SNMP Community screen to add an SNMP community. The screen displays as shown.
Figure 68 SNMP Community: Create
Table 48 SNMP Community: Create

Community String

An SNMP community string is a text string that acts as a password. It is used to authenticate messages that are sent between the management station (the SNMP manager) and the device (the SNMP agent). The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent. Type the community string for this community. You can use 1-33 any printable character. Spaces are allowed
Remote Station IP Group Name Create Cancel
Specify the IP address of the remote SNMP management station in dotted decimal notation. Select the SNMP group you want to belong to this community. Click this to add this SNMP community to the Switch. Click this to go back to the main SNMP Community screen without saving your changes.
18.4.2 SNMP Community: Modify
Click on the Community ID number or select a Community ID from the Community ID drop down list box in the SNMP Community screen to modify the settings of an existing community.
Figure 69 SNMP Community: Modify
Table 49 SNMP Community: Modify

Community ID

This field indicates which community you are modifying. Click on Remove This Community to delete this user configuration from the Switch. Click on Display All Community to view the main SNMP Community screen.
An SNMP community string is a text string that acts as a password. It is used to authenticate messages that are sent between the management station (the SNMP manager) and the device (the SNMP agent). The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent. Type the community string for this community.
Remote Station IP Group Name Apply
Specify the IP address of the remote SNMP management station in dotted decimal notation. Select the SNMP group you want to belong to this community. Click this to save your settings to the Switch.

18.5 SNMP Notification

SNMP supports a notification mechanism to alert SNMP managers when events occur. There are two types of notification mechanisms supported by the Switch. SNMP Notification - SNMP traps are sent to external SNMP management stations.
Chapter 18 SNMP Authentication Notification - Failed authentication attempts are logged by the Switch. Use the SNMP Notification section of the SNMP Trap Station screen to enable the notification mechanisms. Click SNMP > Trap Station to view the screen as shown.

Figure 70 SNMP Notification
Table 50 SNMP Notification
Enable SNMP Notification Enable Authenticatio n Notification Apply
Select this to enable the sending of SNMP traps to a remote SNMP management station. Select this to enable logging of failed authentication attempts. If an SNMP manager uses an unmatched community string to access an agent, the Switch will send a trap (notification). Click this to save your settings to the Switch.

18.6 SNMP Trap Station

SNMP traps are used to send out SNMP notifications of urgent or normal events in the system to external management stations. Use the SNMP Trap Station screen
Chapter 18 SNMP to enable the sending of SNMP traps to a remote SNMP management station(s). Click SNMP > Trap Station to view the screen as shown.
Figure 71 SNMP Trap Station
Table 51 SNMP Trap Station
Trap Station ID Create New Trap Station Trap Station ID Remote IP Address Community String
Select the SNMP trap station you want to edit. Click this to configure a new SNMP Trap Station. This field indicates the trap station number. It is used for identification only. Click on the individual trap station number to edit the trap station settings. This field displays the IP address of the remote SNMP management station. An SNMP community string is a text string that acts as a password. It is used to authenticate messages that are sent between the management station (the SNMP manager) and the device (the SNMP agent). The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent. This field displays the community string of this remote trap station.
Use these navigation links to browse all of your SNMP groups.
18.6.1 SNMP Trap Station: Create
Click on the Create New Trap Station link in the SNMP Trap Station screen to add an SNMP Trap Station. The screen displays as shown.
Figure 72 SNMP Trap Station: Create
Table 52 SNMP Trap Station: Create
Remote IP Address Community String Create Cancel
Enter the IP address of the remote trap station in dotted decimal notation. Specify the community string used with this remote trap station. Click this to add this SNMP user to the Switch. Click this to go back to the main SNMP Group screen without saving your changes.

Dynamic ARP

This chapter describes how to activate dynamic Address Resolution Protocol (ARP) learning and how to enter static ARP table entries.

20.1 ARP Table Overview

Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long. In an Ethernet LAN, MAC addresses are 48 bits long. The ARP table maintains an association between each MAC address and its corresponding IP address.

20.1.1 ARP Table Entries

The ARP table is populated with MAC and corresponding IP address mappings in two different ways. DHCP Snooping - The Switch listens to traffic from a DHCP server on a trusted port and learns IP-to-MAC address bindings by parsing DHCP ACK packets. Static Entries - The Switch administrator can enter static IP-to-MAC address mappings via the web configurator.
20.1.2 How Dynamic ARP Works
When an incoming ARP packet destined for a host device on a local area network arrives at the Switch, the Switch's ARP program looks in the ARP table and, if it finds the address, sends it to the device. If no entry is found for the IP address, dynamic ARP discards the ARP packet.

Chapter 20 Dynamic ARP

20.2 Enabling Dynamic ARP
Click Dynamic ARP > Settings in the navigation panel to open the following screen. Use the Dynamic ARP screen to configure ARP filtering on the specified VLANs.

Figure 86 Dynamic ARP

Table 66 ARP Table
Enable Dynamic ARP Aging Time
Select or deselect this to activate or deactivate Dynamic ARP on the Switch.
Note: You must activate dynamic ARP first if you want to add static ARP table entries.
Specify how long (in hours) the Switch remembers the learned ARP table entries. Specify 0 to have the Switch remember the ARP table entries for an unlimited time period. Packets arriving on trusted ports bypass all Dynamic ARP validation checks, and those arriving on untrusted ports undergo the validation process. Default state of all ports is untrusted. Select the trusted ports for each Dynamic ARP configuration you set up.

Trusted ports

Enable Dynamic ARP for VLAN from. to.
Select the range of VLANs you want to perform validation checks based on the ARP entries in the ARP table.
Table 66 ARP Table (continued)
Disable Dynamic ARP for VLAN from. to. Current Enabled VLAN Apply

Select the range of VLANs you want to bypass validation checks based on the ARP entries in the ARP table.
This field shows the VLANs for which Dynamic ARP validation is enabled.
20.3 Viewing ARP Table Entries
Click Dynamic ARP > ARP Entries in the navigation panel to open the following screen. Use this screen to view and add entries to the ARP table.
Figure 87 Viewing ARP Table Entries

Table 67 ARP Table

Static MACIP binding: ADD Item MAC Address IP Address VLAN Type DELETE
This field is only available when you enable dynamic ARP in the Dynamic ARP > Settings screen. Click ADD to add a static entry to the ARP table. See Section 20.4 on page 140. This is the ARP table entry number. This is the MAC address of the device connected to the Switch with the corresponding IP address below. This is the learned IP address of a device connected to a Switch port with corresponding MAC address above. This is the VLAN number of the device connected to the Switch. This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Add Static MAC-IP binding screen). Click this to remove this ARP table entry.
20.4 Adding ARP Table Entries
Click ADD in the Dynamic ARP > ARP Entries screen to open the Add Static MAC-IP binding screen. Use this screen to add entries to the ARP table.
Figure 88 Viewing ARP Table Entries

Table 68 ARP Table

MAC Address (XX-XX-XXXX-XX-XX) IP Address
Enter the MAC address in 6 pair hexadecimal format of the network device you want to be allowed to communicate via the Switch. An example entry of a MAC address is 0a-b1-c2-d3-e4-f5. Enter the corresponding IP address (in dotted decimal notation, ex 192.168.1.5) of the network device you want to be allowed to communicate via the Switch. Select the VLAN ID for this ARP entry. Click this to save this entry to the ARP table and view the Dynamic ARP screen.

VLAN ID Add

Power, Hardware Connections, and LEDs Switch Access and Login

Troubleshooting

This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories.
21.1 Power, Hardware Connections, and LEDs
The Switch does not turn on. None of the LEDs turn on.
Make sure you are using the power adaptor or cord included with the Switch. Make sure the power adaptor or cord is connected to the Switch and plugged in to an appropriate power source. Make sure the power source is turned on. Disconnect and re-connect the power adaptor or cord to the Switch. If the problem continues, contact the vendor.

35% Off

Lifetime Warranty

Massive discounts on selected ZyXEL 24 and 48 port Unmanaged, Web Managed and Managed Switches
Part Number Product RRP WAS RRP NOW

ZyXEL Switches

Discount %
91-010-148005B 91-010-161003B 91-010-165005B 91-010-159003B 91-010-160003B 91-010-132005B 91-010-156003B 91-010-114010B
ZyXEL ESport 10/100 L3 Managed Switch ZyXEL GSport Gigabit L3 Managed Switch ZyXEL GSport Gigabit L3 Managed Switch ZyXEL GSport Gigabit Web Managed Switch ZyXEL GSport Gigabit Web Managed Switch ZyXEL ESport 10/100 Web Managed Switch ZyXEL ESport 10/100 Web Managed Switch ZyXEL GS1124A 24 port Gigabit Unmanaged Switch
400.81 1,216.04 2,031.25 241.20 460.75 125.54 260.84 213.79
264.00 790.43 1,320.32 216.00 368.60 112.99 234.77 171.04
35% Off 35% Off 35% Off 10% Off 20% Off 10% Off 10% Off 20% Off
Buy now whilst stocks last - call your Account Manager www.zyxel.co.uk/promoswitch
E&OE. Terms and conditions apply. Promotion valid from 1st April to 30th June 2009 or whilst stocks last.
HomePlug IP DSLAM Router Security Storage Switch VoIP

Wireless

Free UK Tech Support

Free Firmware Upgrades

ZyAssure Support Packs Available