System
What You Can Do
• Use the Cloud Management screen (Cloud Management) to turn on Nebula Control Center (NCC) discovery on the Switch.
• Use the General Setup screen (General Setup) to configure general settings such as the system name and time.
• Use the IP Setup screen (IP Setup) to configure the default gateway device, the default domain name server and add IP domains.
• Use the Logins screen (Set Up Login Accounts) to configure the user name and password, and passwords and privilege level for up to 4 users.
• Use the SNMP User screen (Configure SNMP User) to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups.
• Use the SNMP Trap Group screen (Configure SNMP Trap Group) to specify the types of SNMP traps that should be sent to each SNMP manager.
• Use the SNMP Trap Port screen (Enable or Disable Sending of SNMP Traps on a Port) to enable/disable sending SNMP traps on a port.
Cloud Management
The Switch supports NebulaFlex which can set the Switch to operate in either standalone or Nebula cloud management mode. When the Switch is in standalone mode, it can be configured and managed by the Web Configurator. When the Switch is in Nebula cloud management mode, it can be managed and provisioned by the Zyxel Nebula Control Center (NCC).
The Zyxel Nebula Control Center (NCC) is a cloud-based network management system that allows you to remotely manage and monitor Zyxel Nebula APs, Ethernet switches and security gateways.
The Switch is managed and provisioned automatically by the NCC (Nebula Control Center) when:
• The Switch is connected to the Internet.
• The Nebula Control Center Discovery feature is enabled.
• The Switch has been registered in the NCC.
The Cloud Management screen displays links to Nebula Switch Registration which has a QR code containing the Switch’s serial number and MAC address for handy registration of the Switch at NCC.
Select ON to turn on NCC discovery on the Switch. If the Switch has Internet access and has been registered in the NCC, it will go into cloud management mode.
In cloud management mode, then NCC will first check if the firmware on the Switch needs to be upgraded. If it does, the Switch will upgrade the firmware immediately. If the firmware does not need to be upgraded, but there is newer firmware available for the Switch, then it will be upgraded according to the firmware upgrade schedule for the Switch on the NCC. Below is the process for upgrading firmware:
1 Download firmware through the NCC.
2 Upgrade the firmware and reboot.
While the Switch is rebooting, do NOT turn off the power.Disable ON to turn off NCC discovery on the Switch. The Switch will NOT discover the NCC and remain in standalone mode.
This screen has a QR code containing the Switch’s serial number and MAC address for handy NCC registration of the Switch using the Nebula Mobile app. First, download the app from the Google Play store for Android devices or the App Store for iOS devices and create an organization and site.
General Setup
Use this screen to configure general settings such as the system name and time.
The following table describes the labels in this screen.
label | description |
|---|---|
System Name | Choose a descriptive name for identification purposes. This name consists of up to 64 printable characters; spaces are allowed. |
Location | Enter the geographic location of your Switch. You can use up to 128 printable ASCII characters; spaces are allowed. |
Contact Person's Name | Enter the name of the person in charge of this Switch. You can use up to 32 printable ASCII characters; spaces are allowed. |
Use Time Server when Bootup | Enter the time service protocol that your time server uses. Not all time servers support all protocols, so you may have to use trial and error to find a protocol that works. The main differences between them are the time format. When you select the Daytime (RFC 867) format, the Switch displays the day, month, year and time with no time zone adjustment. When you use this format it is recommended that you use a Daytime timeserver within your geographical time zone. Time (RFC-868) format displays a 4-byte integer giving the total number of seconds since 1970/1/1 at 0:0:0. NTP (RFC-1305) is similar to Time (RFC-868). None is the default value. Enter the time manually. Each time you turn on the Switch, the time and date will be reset to 1970-1-1 0:0:0. |
Time Server IP Address | Enter the IP address or domain name of your timeserver. The Switch searches for the timeserver for up to 60 seconds. |
Time Server Sync Interval | Enter the period in minutes between each time server synchronization. The Switch checks the time server after every synchronization interval. |
Current Time | This field displays the time you open this menu (or refresh the menu). |
New Time (hh:min:ss) | Enter the new time in hour, minute and second format. The new time then appears in the Current Time field after you click Apply. |
Current Date | This field displays the date you open this menu. |
New Date (yyyy-mm-dd) | Enter the new date in year, month and day format. The new date then appears in the Current Date field after you click Apply. |
Time Zone | Select the time difference between UTC (Universal Time Coordinated, formerly known as GMT, Greenwich Mean Time) and your time zone from the drop-down list box. |
Daylight Saving Time | Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Set the switch to ON if you use Daylight Saving Time. |
Start Date | Configure the day and time when Daylight Saving Time starts if you selected Daylight Saving Time. The time is displayed in the 24 hour format. Here are a couple of examples: Daylight Saving Time starts in most parts of the United States on the second Sunday of March. Each time zone in the United States starts using Daylight Saving Time at 2 A.M. local time. So in the United States you would select Second, Sunday, March and 2:00. Daylight Saving Time starts in the European Union on the last Sunday of March. All of the time zones in the European Union start using Daylight Saving Time at the same moment (1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, March and the last field depends on your time zone. In Germany for instance, you would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). |
End Date | Configure the day and time when Daylight Saving Time ends if you selected Daylight Saving Time. The time field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time ends in the United States on the first Sunday of November. Each time zone in the United States stops using Daylight Saving Time at 2 A.M. local time. So in the United States you would select First, Sunday, November and 2:00. Daylight Saving Time ends in the European Union on the last Sunday of October. All of the time zones in the European Union stop using Daylight Saving Time at the same moment (1 A.M. GMT or UTC). So in the European Union you would select Last, Sunday, October and the last field depends on your time zone. In Germany for instance, you would select 2:00 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). |
Apply | Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. |
Cancel | Click Cancel to begin configuring this screen afresh. |
IP Setup
Use the IP Setup screen to configure the default gateway device, the default domain name server and add IP domains.
The following table describes the labels in this screen.
label | description |
|---|---|
Domain Name Server | |
Domain Name Server 1/2 | Enter a domain name server IPv4 address in order to be able to use a domain name instead of an IP address. |
Default Management IP Address Use these fields to create or edit IP routing domains on the Switch. | |
DHCP Client | Select this option if you have a DHCP server that can assign the Switch an IP address, subnet mask, a default gateway IP address and a domain name server IP address automatically. |
Static IP Address | Select this option if you do not have a DHCP server or if you wish to assign static IP address information to the Switch. You need to fill in the following fields when you select this option. |
IP Address | Enter the IP address of your Switch in dotted decimal notation, for example, 172.21.40.x. This is the IP address of the Switch in an IP routing domain. |
IP Subnet Mask | Enter the IP subnet mask of an IP routing domain in dotted decimal notation, for example, 255.255.252.0. |
Default Gateway | Type the IP address of the default outgoing gateway in dotted decimal notation, for example 172.21.43.254. |
VID | Enter the VLAN identification number to which an IP routing domain belongs. |
Apply | Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. |
Cancel | Click Cancel to reset the fields to your previous configuration. |
Management IP Address Use these fields to set the settings for the management port. | |
Select an entry’s checkbox to select a specific entry. Otherwise, select the checkbox in the table heading row to select all entries. | |
Index | This field displays the index number of an entry. |
IP Address | This field displays IP address of the Switch in the IP domain. |
IP Subnet Mask | This field displays the subnet mask of the Switch in the IP domain. |
VID | This field displays the VLAN identification number of the IP domain on the Switch. |
Default Gateway | This field displays the IP address of the default outgoing gateway in dotted decimal notation. |
Add/Edit | Click this button to create new / configure settings for the management port. |
Delete | Click this button to remove the ttings for the management port. |
Set Up Login Accounts
Up to 5 people (one administrator and four non-administrators) may access the Switch through Web Configurator at any one time.
• An administrator is someone who can both view and configure Switch changes. The username for the Administrator is always admin. The default administrator password is 1234.
• A non-administrator (username is something other than admin) is someone who can view and/or configure Switch settings. The configuration right varies depending on the user’s privilege level.
The following table describes the labels in this screen.
LABEL | Description |
|---|---|
Administrator This is the default administrator account with the “admin” user name. You can change the default administrator user name. | |
User Name | Change the default “admin” user name (up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ], [ " ], or [ , ]). |
Old Password | Type the existing system password (1234 is the default password when shipped). |
New Password | Enter your new system password. |
Retype to confirm | Retype your new system password for confirmation. |
Edit Logins You may configure passwords for up to four users. These users can have read-only or read/write access. You can give users higher privileges through the Web Configurator or the CLI. For more information on assigning privileges through the CLI see the Ethernet Switch CLI Reference Guide. | |
Login | This field displays the index number of an entry. |
User Name | Set a user name (up to 32 ASCII characters long). |
Password | Enter your new system password. |
Retype to confirm | Retype your new system password for confirmation. |
Privilege | Type the privilege level for this user. At the time of writing, users may have a privilege level of 0, 3, 13, or 14 representing different configuration rights as shown below. • 0 – Display basic system information. • 3 – Display configuration or status. • 13 – Configure features except for login accounts, SNMP user accounts, the authentication method sequence and authorization settings, multiple logins, administrator and enable passwords, and configuration information display. • 14 – Configure login accounts, SNMP user accounts, the authentication method sequence and authorization settings, multiple logins, and administrator and enable passwords, and display configuration information. Users can run command lines if the session’s privilege level is greater than or equal to the command’s privilege level. The session privilege initially comes from the privilege of the login account. For example, if the user has a privilege of 5, he or she can run commands that requires privilege level of 5 or less but not more. |
Apply | Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. |
Cancel | Click Cancel to begin configuring this screen afresh. |
Configure SNMP
Use this screen to configure your SNMP settings. Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between the network management system (NMS) and a network element (NE). A manager station can manage and monitor the Switch through the network through SNMP version 1 (SNMPv1), SNMP version 2c or SNMP version 3. See About SNMP for more information.
The following table describes the labels in this screen.
LABEL | Description |
|---|---|
General Setting | Use this section to specify the SNMP version and community (password) values. |
Version | Select the SNMP version for the Switch. The SNMP version on the Switch must match the version on the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both (v3v2c). SNMP version 2c is backwards compatible with SNMP version 1. |
Get Community | Enter the Get Community string, which is the password for the incoming Get- and GetNext- requests from the management station. The Get Community string is only used by SNMP managers using SNMP version 2c or lower. |
Set Community | Enter the Set Community, which is the password for incoming Set- requests from the management station. The Set Community string is only used by SNMP managers using SNMP version 2c or lower. |
Trap Community | Enter the Trap Community string, which is the password sent with each trap to the SNMP manager. The Trap Community string is only used by SNMP managers using SNMP version 2c or lower. |
Trap Destination | Use this section to configure where to send SNMP traps from the Switch. |
Index | This field displays the index number of an entry. |
Version | Specify the version of the SNMP trap messages. |
IP | Enter the IP addresses of up to 4 managers to send your SNMP traps to. |
Port | Enter the port number upon which the manager listens for SNMP traps. |
Username | Enter the username to be sent to the SNMP manager along with the SNMP v3 trap. This username must match an existing account on the Switch (configured in the SYSTEM > SNMP > SNMP User screen). |
Apply | Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. |
Cancel | Click Cancel to begin configuring this screen afresh. |
Configure SNMP User
Use the SNMP User screen to view SNMP users for authentication with managers using SNMP v3. An SNMP user is an SNMP manager.
The following table describes the labels in this screen.
LABEL | Description |
|---|---|
Select an entry’s checkbox to select a specific entry. Otherwise, select the checkbox in the table heading row to select all entries. | |
Index | This is a read-only number identifying a login account on the Switch. Click on an index number to view more details and edit an existing account. |
Username | This field displays the username of a login account on the Switch. |
Security Level | This field displays whether you want to implement authentication and/or encryption for SNMP communication with this user. |
Authentication | This field displays the authentication algorithm used for SNMP communication with this user. |
Privacy | This field displays the encryption method used for SNMP communication with this user. |
Group | This field displays the SNMP group to which this user belongs. |
Add/Edit | SNMP users for authentication with managers. |
Delete | Click this button to remove the selected entry from the summary table. |
Use this screen to create or edit SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups.
The following table describes the labels in this screen.
LABEL | Description |
|---|---|
Username | Specify the username of a login account on the Switch. |
Security Level | Select whether you want to implement authentication and/or encryption for SNMP communication from this user. Choose: • no auth – to use the username as the password string to send to the SNMP manager. This is equivalent to the Get, Set and Trap Community in SNMP v2c. This is the lowest security level. • auth – to implement an authentication algorithm for SNMP messages sent by this user. • priv – to implement authentication and encryption for SNMP messages sent by this user. This is the highest security level. The settings on the SNMP manager must be set at the same security level or higher than the security level settings on the Switch. |
Authentication | Select an authentication algorithm. MD5 (Message Digest 5) and SHA (Secure Hash Algorithm) are hash algorithms used to authenticate SNMP data. SHA authentication is generally considered stronger than MD5, but is slower. |
Password | Enter the password of up to 32 ASCII characters for SNMP user authentication. |
Privacy | Specify the encryption method for SNMP communication from this user. You can choose one of the following: • DES – Data Encryption Standard is a widely used (but breakable) method of data encryption. It applies a 56-bit key to each 64-bit block of data. • AES – Advanced Encryption Standard is another method for data encryption that also uses a secret key. AES applies a 128-bit key to 128-bit blocks of data. |
Password | Enter the password of up to 32 ASCII characters for encrypting SNMP packets. |
Group | SNMP v3 adopts the concept of View-based Access Control Model (VACM) group. SNMP managers in one group are assigned common access rights to MIBs. Specify in which SNMP group this user is. admin – Members of this group can perform all types of system configuration, including the management of administrator accounts. read-write – Members of this group have read and write rights, meaning that the user can create and edit the MIBs on the Switch, except the user account and AAA configuration. read-only – Members of this group have read rights only, meaning the user can collect information from the Switch. |
Apply | Click this to create a new entry or to update an existing one. This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. |
Clear | Click Clear to reset the fields to the factory defaults. |
Cancel | Click Cancel to reset the fields to your previous configuration. |
Configure SNMP Trap Group
The Switch sends traps to an SNMP manager when an event occurs. Use the SNMP Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager.
The following table describes the labels in this screen.
LABEL | Description |
|---|---|
Trap Destination IP | Select one of your configured trap destination IP addresses. These are the IP addresses of the SNMP managers. You must first configure a trap destination IP address in the SNMP Setting screen. Use the rest of the screen to select which traps the Switch sends to that SNMP manager. |
Type | Select the categories of SNMP traps that the Switch is to send to the SNMP manager. |
Options | Select the individual SNMP traps that the Switch is to send to the SNMP station. The traps are grouped by category. Selecting a category automatically selects all of the category’s traps. Clear the checkboxes for individual traps that you do not want the Switch to send to the SNMP station. Clearing a category’s checkbox automatically clears all of the category’s trap checkboxes (the Switch only sends traps from selected categories). |
Apply | Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. |
Cancel | Click Cancel to begin configuring this screen afresh. |
Enable or Disable Sending of SNMP Traps on a Port
Use this screen to set whether a trap received on the ports would be sent to the SNMP manager.
The following table describes the labels in this screen.
LABEL | Description |
|---|---|
Option | Select the trap type you want to configure here. |
Port | This field displays a port number. |
* | Settings in this row apply to all ports. Use this row only if you want to make some of the settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Changes in this row are copied to all the ports as soon as you make them. |
Active | Select this checkbox to enable the trap type of SNMP traps on this port. Deselect this checkbox to disable the sending of SNMP traps on this port. |
Apply | Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. |
Cancel | Click Cancel to begin configuring this screen afresh. |