ZyXEL Communications ES-4124 User's Guide

www.zyxel.comES-4124Intelligent Layer 3+ SwitchUser’s GuideVersion 3.84/2007Edition 1DEFAULT LOGINIP Address http://192.168.1.1User Name adminPasswor

Contents OverviewES-4124 User’s Guide10IP Multicast ...

Chapter 8 VLANES-4124 User’s Guide100The following table describes the labels in this screen. 8.10 Create an IP-based VLAN ExampleThis example shows

Chapter 8 VLANES-4124 User’s Guide1016 Leave the priority set to 0 and click Add. Figure 40 Protocol Based VLAN Configuration Example To add more p

Chapter 8 VLANES-4124 User’s Guide102The port-based VLAN setup screen is shown next. The CPU management port forms a VLAN with all Ethernet ports.8.11

Chapter 8 VLANES-4124 User’s Guide103Figure 42 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation)

Chapter 8 VLANES-4124 User’s Guide104The following table describes the labels in this screen. Table 20 Advanced Application > VLAN: Port Based VL

ES-4124 User’s Guide105CHAPTER 9 Static MAC Forward SetupUse these screens to configure static MAC address forwarding.9.1 OverviewThis chapter discu

Chapter 9 Static MAC Forward SetupES-4124 User’s Guide106The following table describes the labels in this screen. Table 21 Advanced Application >

ES-4124 User’s Guide107CHAPTER 10 FilteringThis chapter discusses MAC address port filtering.10.1 Configure a Filtering Rule Filtering means sifti

Chapter 10 FilteringES-4124 User’s Guide108Action Select Discard source to drop frame from the source MAC address (specified in the MAC field). The Sw

ES-4124 User’s Guide109CHAPTER 11 Spanning Tree ProtocolThe Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and Mul

Table of ContentsES-4124 User’s Guide11Table of ContentsAbout This User's Guide ...

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide110Path cost is the cost of transmitting a frame onto a LAN through that port. The recommended co

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide11111.1.3 STP Port States STP assigns five port states to eliminate packet looping. A bridge po

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide11211.1.5 Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible wit

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide113Figure 47 MSTP Network Example 11.1.5.2 MST Region An MST region is a logical grouping of

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide114Figure 48 MSTIs in Different Regions 11.1.5.4 Common and Internal Spanning Tree (CIST) A CI

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide115Figure 50 Advanced Application > Spanning Tree Protocol This screen differs depending on

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide11611.4 Configure Rapid Spanning Tree Protocol Use this screen to configure RSTP settings, see

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide117Bridge Priority Bridge priority is used in determining the root switch, root port and designa

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide11811.5 Rapid Spanning Tree Protocol Status Click Advanced Application > Spanning Tree P

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide11911.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in th

Table of ContentsES-4124 User’s Guide123.1.3 Mini-GBIC Slots ...

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide120Active Select this check box to activate an STP tree. Clear this checkbox to disable an STP tr

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide12111.7 Multiple Rapid Spanning Tree Protocol Status Click Advanced Application > Spann

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide12211.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advance

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide123Figure 56 Advanced Application > Spanning Tree Protocol > MSTP

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide124The following table describes the labels in this screen. Table 30 Advanced Application >

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide12511.9 Multiple Spanning Tree Protocol Status Click Advanced Application > Spanning Tr

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide126" This screen is only available after you activate MSTP on the Switch. Figure 57 Advanc

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide127Forwarding Delay (second)This is the time (in seconds) the root switch will wait before chang

Chapter 11 Spanning Tree ProtocolES-4124 User’s Guide128

ES-4124 User’s Guide129CHAPTER 12 Bandwidth ControlThis chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen.12

Table of ContentsES-4124 User’s Guide137.4 Introduction to VLANs ...

Chapter 12 Bandwidth ControlES-4124 User’s Guide130Figure 58 Advanced Application > Bandwidth Control The following table describes the related l

ES-4124 User’s Guide131CHAPTER 13 Broadcast Storm ControlThis chapter introduces and shows you how to configure the broadcast storm control feature.

Chapter 13 Broadcast Storm ControlES-4124 User’s Guide132The following table describes the labels in this screen. Table 33 Advanced Application >

ES-4124 User’s Guide133CHAPTER 14 MirroringThis chapter discusses port mirroring setup screens.14.1 Port Mirroring Setup Port mirroring allows you t

Chapter 14 MirroringES-4124 User’s Guide134The following table describes the labels in this screen. Table 34 Advanced Application > Mirroring LAB

ES-4124 User’s Guide135CHAPTER 15 Link AggregationThis chapter shows you how to logically aggregate physical links to form one logical, higher-bandwi

Chapter 15 Link AggregationES-4124 User’s Guide136• You must connect all ports point-to-point to the same Ethernet switch and configure the ports for

Chapter 15 Link AggregationES-4124 User’s Guide13715.4 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregat

Chapter 15 Link AggregationES-4124 User’s Guide138The following table describes the labels in this screen.15.5 Link Aggregation Control Protocol Cl

Chapter 15 Link AggregationES-4124 User’s Guide139Figure 63 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP The

Table of ContentsES-4124 User’s Guide1411.1 STP/RSTP Overview ...

Chapter 15 Link AggregationES-4124 User’s Guide14015.6 Static Trunking ExampleThis example shows you how to create a static port trunk group for port

Chapter 15 Link AggregationES-4124 User’s Guide141Figure 65 Trunking Example - Configuration ScreenYour trunk group 1 (T1) configuration is now com

Chapter 15 Link AggregationES-4124 User’s Guide142

ES-4124 User’s Guide143CHAPTER 16 Port AuthenticationThis chapter describes the IEEE 802.1x and MAC authentication methods.16.1 Port Authentication

Chapter 16 Port AuthenticationES-4124 User’s Guide144Figure 66 IEEE 802.1x Authentication Process 16.1.2 MAC Authentication MAC authentication wo

Chapter 16 Port AuthenticationES-4124 User’s Guide14516.2 Port Authentication Configuration To enable port authentication, first activate the port a

Chapter 16 Port AuthenticationES-4124 User’s Guide146The following table describes the labels in this screen. 16.2.2 Activate MAC Authentication Use

Chapter 16 Port AuthenticationES-4124 User’s Guide147Figure 70 Advanced Application > Port Authentication > MAC Authentication The following

Chapter 16 Port AuthenticationES-4124 User’s Guide148* Use this row to make the setting the same for all ports. Use this row first and then make adjus

ES-4124 User’s Guide149CHAPTER 17 Port SecurityThis chapter shows you how to set up port security.17.1 About Port Security Port security allows only

Table of ContentsES-4124 User’s Guide1516.1.2 MAC Authentication ...

Chapter 17 Port SecurityES-4124 User’s Guide150Figure 71 Advanced Application > Port Security The following table describes the labels in this sc

Chapter 17 Port SecurityES-4124 User’s Guide151Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes

Chapter 17 Port SecurityES-4124 User’s Guide152

ES-4124 User’s Guide153CHAPTER 18 ClassifierThis chapter introduces and shows you how to configure the packet classifier on the Switch.18.1 About th

Chapter 18 ClassifierES-4124 User’s Guide154Figure 72 Advanced Application > Classifier The following table describes the labels in this screen.

Chapter 18 ClassifierES-4124 User’s Guide155Ethernet TypeSelect an Ethernet type or select Other and enter the Ethernet type number in hexadecimal va

Chapter 18 ClassifierES-4124 User’s Guide15618.3 Viewing and Editing Classifier ConfigurationTo view a summary of the classifier configuration, scrol

Chapter 18 ClassifierES-4124 User’s Guide157Some of the most common IP ports are: 18.4 Classifier ExampleThe following screen shows an example where

Chapter 18 ClassifierES-4124 User’s Guide158Figure 74 Classifier: Example

ES-4124 User’s Guide159CHAPTER 19 Policy RuleThis chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A classifier distingu

Table of ContentsES-4124 User’s Guide16Chapter 22Multicast ...

Chapter 19 Policy RuleES-4124 User’s Guide16019.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to S

Chapter 19 Policy RuleES-4124 User’s Guide161The following table describes the labels in this screen. Table 47 Advanced Application > Policy Rul

Chapter 19 Policy RuleES-4124 User’s Guide16219.3 Viewing and Editing Policy ConfigurationTo view a summary of the classifier configuration, scroll d

Chapter 19 Policy RuleES-4124 User’s Guide16319.4 Policy ExampleThe figure below shows an example Policy screen where you configure a policy to limi

Chapter 19 Policy RuleES-4124 User’s Guide164

ES-4124 User’s Guide165CHAPTER 20 Queuing MethodThis chapter introduces the queuing methods supported.20.1 Queuing Method Overview Queuing is used t

Chapter 20 Queuing MethodES-4124 User’s Guide16620.1.3 Weighted Round Robin Scheduling (WRR) Round Robin Scheduling services queues on a rotating bas

Chapter 20 Queuing MethodES-4124 User’s Guide167Figure 78 Advanced Application > Queuing Method The following table describes the labels in this

Chapter 20 Queuing MethodES-4124 User’s Guide168* Settings in this row apply to all ports.Use this row only if you want to make some settings the same

ES-4124 User’s Guide169CHAPTER 21 VLAN StackingThis chapter shows you how to configure VLAN stacking on your Switch. See the chapter on VLANs for mor

Table of ContentsES-4124 User’s Guide1724.5.2 DHCP Snooping VLAN Configure ...

Chapter 21 VLAN StackingES-4124 User’s Guide170Figure 79 VLAN Stacking Example 21.2 VLAN Stacking Port RolesEach port can have three VLAN stacking

Chapter 21 VLAN StackingES-4124 User’s Guide17121.3 VLAN Tag FormatA VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of t

Chapter 21 VLAN StackingES-4124 User’s Guide17221.4 Configuring VLAN StackingClick Advanced Applications > VLAN Stacking to display the screen as

Chapter 21 VLAN StackingES-4124 User’s Guide173Role Select Normal to have the Switch ignore frames received (or transmitted) on this port with VLAN s

Chapter 21 VLAN StackingES-4124 User’s Guide174

ES-4124 User’s Guide175CHAPTER 22 MulticastThis chapter shows you how to configure various multicast features. 22.1 Multicast Overview Traditionally

Chapter 22 MulticastES-4124 User’s Guide176The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping

Chapter 22 MulticastES-4124 User’s Guide177Figure 82 Advanced Application > Multicast > Multicast Setting The following table describes the l

Chapter 22 MulticastES-4124 User’s Guide17822.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Mult

Chapter 22 MulticastES-4124 User’s Guide179Figure 83 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN The followi

Table of ContentsES-4124 User’s Guide1829.1 IGMP Overview ...

Chapter 22 MulticastES-4124 User’s Guide18022.5 IGMP Filtering Profile An IGMP filtering profile specifies a range of multicast groups that clients c

Chapter 22 MulticastES-4124 User’s Guide18122.6 MVR Overview Multicast VLAN Registration (MVR) is designed for applications (such as Media-on-Demand

Chapter 22 MulticastES-4124 User’s Guide18222.6.2 MVR ModesYou can set your Switch to operate in either dynamic or compatible mode. In dynamic mode,

Chapter 22 MulticastES-4124 User’s Guide183" Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLA

Chapter 22 MulticastES-4124 User’s Guide18422.8 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receiv

Chapter 22 MulticastES-4124 User’s Guide185Figure 88 Advanced Application > Multicast > Multicast Setting > MVR: Group ConfigurationThe fo

Chapter 22 MulticastES-4124 User’s Guide186Figure 89 MVR Configuration Example To configure the MVR settings on the Switch, create a multicast group

Chapter 22 MulticastES-4124 User’s Guide187Figure 91 MVR Group Configuration Example Figure 92 MVR Group Configuration Example

Chapter 22 MulticastES-4124 User’s Guide188

ES-4124 User’s Guide189CHAPTER 23 Authentication & AccountingThis chapter describes how to configure authentication and accounting settings on th

Table of ContentsES-4124 User’s Guide1933.5 Configuring DHCP VLAN Settings ...

Chapter 23 Authentication & AccountingES-4124 User’s Guide19023.1.2 RADIUS and TACACS+ RADIUS and TACACS+ are security protocols used to authenti

Chapter 23 Authentication & AccountingES-4124 User’s Guide191Figure 95 Advanced Application > Auth and Acct > RADIUS Server Setup The fol

Chapter 23 Authentication & AccountingES-4124 User’s Guide19223.2.2 TACACS+ Server Setup Use this screen to configure your TACACS+ server sett

Chapter 23 Authentication & AccountingES-4124 User’s Guide193Figure 96 Advanced Application > Auth and Acct > TACACS+ Server Setup The fo

Chapter 23 Authentication & AccountingES-4124 User’s Guide19423.2.3 Authentication and Accounting Setup Use this screen to configure authentic

Chapter 23 Authentication & AccountingES-4124 User’s Guide195Figure 97 Advanced Application > Auth and Acct > Auth and Acct Setup The fol

Chapter 23 Authentication & AccountingES-4124 User’s Guide196Login These fields specify which database the Switch should use (first, second and th

Chapter 23 Authentication & AccountingES-4124 User’s Guide19723.2.4 Vendor Specific AttributeRFC 2865 standard specifies a method for sending ve

Chapter 23 Authentication & AccountingES-4124 User’s Guide19823.2.4.1 Tunnel Protocol Attribute You can configure tunnel protocol attributes on t

Chapter 23 Authentication & AccountingES-4124 User’s Guide19923.3.1 Attributes Used for Authentication The following sections list the attribute

Table of ContentsES-4124 User’s Guide2036.3.4 Configuring SNMP ...

Chapter 23 Authentication & AccountingES-4124 User’s Guide20023.3.2.2 Attributes Used for Accounting Exec EventsThe attributes are listed in the

Chapter 23 Authentication & AccountingES-4124 User’s Guide201Calling-Station-IdDD DNAS-IdentifierDD DNAS-Port-TypeDD DAcct-Status-TypeDD DAcct-De

Chapter 23 Authentication & AccountingES-4124 User’s Guide202

ES-4124 User’s Guide203CHAPTER 24 IP Source GuardUse IP source guard to filter unauthorized DHCP and ARP packets in your network.24.1 IP Source Guar

Chapter 24 IP Source GuardES-4124 User’s Guide204Trusted ports are connected to DHCP servers or other switches. The Switch discards DHCP packets from

Chapter 24 IP Source GuardES-4124 User’s Guide20524.1.1.3 DHCP Relay Option 82 InformationThe Switch can add information to DHCP requests that it do

Chapter 24 IP Source GuardES-4124 User’s Guide20624.1.2.1 ARP Inspection and MAC Address FiltersWhen the Switch identifies an unauthorized ARP packet

Chapter 24 IP Source GuardES-4124 User’s Guide20724.2 IP Source GuardUse this screen to look at the current bindings for DHCP snooping and ARP inspe

Chapter 24 IP Source GuardES-4124 User’s Guide208Figure 101 IP Source Guard Static BindingThe following table describes the labels in this screen.Ta

Chapter 24 IP Source GuardES-4124 User’s Guide20924.4 DHCP SnoopingUse this screen to look at various statistics about the DHCP snooping database. T

Table of ContentsES-4124 User’s Guide2142.1 ARP Table Overview ...

Chapter 24 IP Source GuardES-4124 User’s Guide210The following table describes the labels in this screen.Table 71 DHCP SnoopingLABEL DESCRIPTIONData

Chapter 24 IP Source GuardES-4124 User’s Guide211Successful writes This field displays the number of times the Switch updated the bindings in the DHC

Chapter 24 IP Source GuardES-4124 User’s Guide21224.5 DHCP Snooping ConfigureUse this screen to enable DHCP snooping on the Switch (not on specific V

Chapter 24 IP Source GuardES-4124 User’s Guide21324.5.1 DHCP Snooping Port ConfigureUse this screen to specify whether ports are trusted or untruste

Chapter 24 IP Source GuardES-4124 User’s Guide214Figure 104 DHCP Snooping Port ConfigureThe following table describes the labels in this screen.Tabl

Chapter 24 IP Source GuardES-4124 User’s Guide21524.5.2 DHCP Snooping VLAN ConfigureUse this screen to enable DHCP snooping on each VLAN and to spec

Chapter 24 IP Source GuardES-4124 User’s Guide21624.6 ARP Inspection StatusUse this screen to look at the current list of MAC address filters that we

Chapter 24 IP Source GuardES-4124 User’s Guide217Figure 107 ARP Inspection VLAN StatusThe following table describes the labels in this screen.24.6.

Chapter 24 IP Source GuardES-4124 User’s Guide218Figure 108 ARP Inspection Log StatusThe following table describes the labels in this screen.Table 7

Chapter 24 IP Source GuardES-4124 User’s Guide21924.7 ARP Inspection ConfigureUse this screen to enable ARP inspection on the Switch. You can also c

Table of ContentsES-4124 User’s Guide22Chapter 46User and Enable Mode Commands...

Chapter 24 IP Source GuardES-4124 User’s Guide22024.7.1 ARP Inspection Port ConfigureUse this screen to specify whether ports are trusted or untruste

Chapter 24 IP Source GuardES-4124 User’s Guide221The following table describes the labels in this screen.24.7.2 ARP Inspection VLAN ConfigureUse thi

Chapter 24 IP Source GuardES-4124 User’s Guide222The following table describes the labels in this screen.Table 80 ARP Inspection VLAN ConfigureLABEL

ES-4124 User’s Guide223CHAPTER 25 Loop GuardThis chapter shows you how to configure the Switch to guard against loops on the edge of your network.25.

Chapter 25 Loop GuardES-4124 User’s Guide224The following figure shows port N on switch A connected to switch B. Switch B is in loop state. When broad

Chapter 25 Loop GuardES-4124 User’s Guide225" After resolving the loop problem on your network you can re-activate the disabled port via the web

Chapter 25 Loop GuardES-4124 User’s Guide226Active Select this check box to enable the loop guard feature on this port. The Switch sends probe packets

227PART IVIP ApplicationStatic Route (229)RIP (231)OSPF (233)IGMP (245)DVMRP (249)IP Multicast (253)Differentiated Services (255)DHCP (263)VR

228

ES-4124 User’s Guide229CHAPTER 26 Static RouteThis chapter shows you how to configure static routes.26.1 Configuring Static Routing Static routes t

Table of ContentsES-4124 User’s Guide2348.2.6 mirror ...

Chapter 26 Static RouteES-4124 User’s Guide230Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count

ES-4124 User’s Guide231CHAPTER 27 RIP This chapter shows you how to configure RIP (Routing Information Protocol).27.1 RIP OverviewRIP (Routing Infor

Chapter 27 RIP ES-4124 User’s Guide232Figure 118 IP Application > RIP The following table describes the labels in this screen. Table 83 IP Appl

ES-4124 User’s Guide233CHAPTER 28 OSPFThis chapter describes the OSPF (Open Shortest Path First) routing protocol and shows you how to configure OSPF

Chapter 28 OSPFES-4124 User’s Guide234The following figure depicts an OSPF network example. The backbone is area 0 with a backbone router. The interna

Chapter 28 OSPFES-4124 User’s Guide235Figure 120 OSPF Router Election ExampleYou can assign a priority to an interface which determines whether thi

Chapter 28 OSPFES-4124 User’s Guide236Figure 121 IP Application > OSPF Status The following table describes the labels in this screen.The followi

Chapter 28 OSPFES-4124 User’s Guide23728.3 OSPF Configuration Use this screen to activate OSPF and set general settings. Click IP Application >

Chapter 28 OSPFES-4124 User’s Guide238Figure 122 IP Application > OSPF Configuration: Activating and General Settings The follow table describes

Chapter 28 OSPFES-4124 User’s Guide23928.4 Configure OSPF Areas To ensure that the Switch receives only routing information from a trusted layer 3 d

Table of ContentsES-4124 User’s Guide2452.1 Problems Starting Up the Switch ...

Chapter 28 OSPFES-4124 User’s Guide24028.4.1 View OSPF Area Information TableThe bottom of the OSPF Configuration screen displays a summary table of

Chapter 28 OSPFES-4124 User’s Guide241In the OSPF Configuration screen, click Interface to display the OSPF Interface screen. Figure 125 IP Applica

Chapter 28 OSPFES-4124 User’s Guide24228.6 OSPF Virtual-Links Configure and view virtual link settings in this screen. See Section 28.1 on page 233

Chapter 28 OSPFES-4124 User’s Guide243The following table describes the related labels in this screen.Table 92 IP Application > OSPF Configurati

Chapter 28 OSPFES-4124 User’s Guide244

ES-4124 User’s Guide245CHAPTER 29 IGMPThis chapter shows you how to configure the Switch as a multicast router. See also Section 22.4 on page 178 for

Chapter 29 IGMPES-4124 User’s Guide246IGMP (Internet Group Management Protocol) is used by multicast hosts to indicate their multicast group membershi

Chapter 29 IGMPES-4124 User’s Guide247Figure 129 IGMP Version 2 Example IGMP version 3 allows a multicast host to join a multicast group and specif

Chapter 29 IGMPES-4124 User’s Guide248Figure 131 IP Application > IGMP The following table describes the labels in this screen. Table 93 IP App

ES-4124 User’s Guide249CHAPTER 30 DVMRPThis chapter introduces DVMRP and tells you how to configure it.30.1 DVMRP OverviewDVMRP (Distance Vector Mul

List of FiguresES-4124 User’s Guide25List of FiguresFigure 1 Backbone Application ...

Chapter 30 DVMRPES-4124 User’s Guide250Figure 132 How DVMRP Works 30.2.1 DVMRP Terminology DVMRP probes are used to discover other DVMRP Neighbors

Chapter 30 DVMRPES-4124 User’s Guide25130.3.1 DVMRP Configuration Error Messages You must have IGMP/RIP enabled when you enable DVMRP; otherwise you

Chapter 30 DVMRPES-4124 User’s Guide252Figure 136 DVMRP: Duplicate VID Error Message 30.4 Default DVMRP Timer Values The following are some default

ES-4124 User’s Guide253CHAPTER 31 IP MulticastThis chapter shows you how to configure the IP Multicast screen. 31.1 IP Multicast OverviewTraditiona

Chapter 31 IP MulticastES-4124 User’s Guide254Table 96 IP Application > IP Multicast LABEL DESCRIPTIONPort This read-only field displays the port

ES-4124 User’s Guide255CHAPTER 32 Differentiated ServicesThis chapter shows you how to configure Differentiated Services (DiffServ) on the Switch.32.

Chapter 32 Differentiated ServicesES-4124 User’s Guide25632.1.2 DiffServ Network Example The following figure depicts a DiffServ network consisting o

Chapter 32 Differentiated ServicesES-4124 User’s Guide257• Green (low loss priority level) packets are forwarded.TRTCM operates in one of two modes:

Chapter 32 Differentiated ServicesES-4124 User’s Guide25832.3 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority m

Chapter 32 Differentiated ServicesES-4124 User’s Guide259" You cannot enable both TRTCM and Bandwidth Control at the same time. Figure 143 IP

List of FiguresES-4124 User’s Guide26Figure 39 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN ...

Chapter 32 Differentiated ServicesES-4124 User’s Guide26032.4 DSCP-to-IEEE 802.1p Priority Settings You can configure the DSCP to IEEE 802.1p m

Chapter 32 Differentiated ServicesES-4124 User’s Guide261The following table describes the labels in this screen. Table 100 IP Application > Dif

Chapter 32 Differentiated ServicesES-4124 User’s Guide262

ES-4124 User’s Guide263CHAPTER 33 DHCPThis chapter shows you how to configure the DHCP feature. 33.1 DHCP Overview DHCP (Dynamic Host Configuration

Chapter 33 DHCPES-4124 User’s Guide26433.2 DHCP Status Click IP Application > DHCP in the navigation panel. The DHCP Status screen displays. Figur

Chapter 33 DHCPES-4124 User’s Guide265The following table describes the labels in this screen. 33.4 DHCP Relay Configure DHCP relay on the Switch if

Chapter 33 DHCPES-4124 User’s Guide266The DHCP Relay Agent Information feature adds an Agent Information field to the Option 82 field. The Option 82 f

Chapter 33 DHCPES-4124 User’s Guide26733.4.3 Global DHCP Relay Configuration ExampleThe follow figure shows a network example where the Switch is us

Chapter 33 DHCPES-4124 User’s Guide26833.5 Configuring DHCP VLAN Settings Use this screen to configure your DHCP settings based on the VLAN domain

Chapter 33 DHCPES-4124 User’s Guide269The following table describes the labels in this screen. Table 105 IP Application > DHCP > VLAN LABEL

List of FiguresES-4124 User’s Guide27Figure 82 Advanced Application > Multicast > Multicast Setting ...

Chapter 33 DHCPES-4124 User’s Guide27033.5.1 Example: DHCP Relay for Two VLANsThe following example displays two VLANs (VIDs 1 and 2) for a campus ne

ES-4124 User’s Guide271CHAPTER 34 VRRPThis chapter shows you how to configure and monitor the Virtual Router Redundancy Protocol (VRRP) on the Switch

Chapter 34 VRRPES-4124 User’s Guide272If switch A (the master router) is unavailable, switch B takes over. Traffic is then processed by switch B. 34.

Chapter 34 VRRPES-4124 User’s Guide27334.3 VRRP Configuration The following sections describe the different parts of the VRRP Configuration screen.3

Chapter 34 VRRPES-4124 User’s Guide27434.3.2 VRRP Parameters This section describes the VRRP parameters. 34.3.2.1 Advertisement Interval The master

Chapter 34 VRRPES-4124 User’s Guide27534.3.3 Configuring VRRP ParametersAfter you set up an IP interface, configure the VRRP parameters in the VRRP

Chapter 34 VRRPES-4124 User’s Guide27634.3.4 Configuring VRRP ParametersView the VRRP configuration summary at the bottom of the screen. Figure 157

Chapter 34 VRRPES-4124 User’s Guide277Figure 158 VRRP Configuration Example: One Virtual Router Network You want to set switch A as the master rout

Chapter 34 VRRPES-4124 User’s Guide278Figure 162 VRRP Example 1: VRRP Status on Switch B 34.4.2 Two Subnets Example The following figure depicts an

Chapter 34 VRRPES-4124 User’s Guide279Figure 165 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch B After configuring and saving the VRRP

List of FiguresES-4124 User’s Guide28Figure 125 IP Application > OSPF Configuration > OSPF Interface ...

Chapter 34 VRRPES-4124 User’s Guide280

281PART VManagementMaintenance (283)Access Control (289)Diagnostic (307)Syslog (309)Cluster Management (313)MAC Table (319)IP Table (321)ARP Ta

282

ES-4124 User’s Guide283CHAPTER 35 MaintenanceThis chapter explains how to configure the maintenance screens that let you maintain the firmware and co

Chapter 35 MaintenanceES-4124 User’s Guide28435.2 Load Factory Default Follow the steps below to reset the Switch back to the factory defaults. 1 In

Chapter 35 MaintenanceES-4124 User’s Guide28535.4 Reboot SystemReboot System allows you to restart the Switch without physically turning the power o

Chapter 35 MaintenanceES-4124 User’s Guide28635.6 Restore a Configuration File Restore a previously saved configuration from your computer to the S

Chapter 35 MaintenanceES-4124 User’s Guide28735.8 FTP Command LineThis section shows some examples of uploading to or downloading files from the Swi

Chapter 35 MaintenanceES-4124 User’s Guide2885 Enter bin to set transfer mode to binary.6 Use put to transfer files from the computer to the Switch, f

ES-4124 User’s Guide289CHAPTER 36 Access ControlThis chapter describes how to control access to the Switch.36.1 Access Control Overview A console

List of FiguresES-4124 User’s Guide29Figure 168 Management > Maintenance ...

Chapter 36 Access ControlES-4124 User’s Guide29036.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to m

Chapter 36 Access ControlES-4124 User’s Guide29136.3.1 SNMP v3 and SecuritySNMP v3 enhances security for SNMP management. SNMP managers can be requi

Chapter 36 Access ControlES-4124 User’s Guide292 temperature TemperatureEventOn 1.3.6.1.4.1.890.1.5.8.24.31.2.1 This trap is sent when the temperatur

Chapter 36 Access ControlES-4124 User’s Guide293 autonegotiation AutonegotiationFailedEventOn1.3.6.1.4.1.890.1.5.8.24.31.2.1 This trap is sent when

Chapter 36 Access ControlES-4124 User’s Guide294 36.3.4 Configuring SNMP From the Access Control screen, display the SNMP screen. You can click A

Chapter 36 Access ControlES-4124 User’s Guide295Figure 176 Management > Access Control > SNMP The following table describes the labels in thi

Chapter 36 Access ControlES-4124 User’s Guide29636.3.5 Configuring SNMP Trap Group From the SNMP screen, click Trap Group to view the screen as sho

Chapter 36 Access ControlES-4124 User’s Guide297Figure 177 Management > Access Control > SNMP > Trap Group The following table describes t

Chapter 36 Access ControlES-4124 User’s Guide298• A non-administrator (username is something other than admin) is someone who can view but not config

Chapter 36 Access ControlES-4124 User’s Guide29936.4 SSH OverviewUnlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a se

About This User's GuideES-4124 User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who want to configu

List of FiguresES-4124 User’s Guide30Figure 211 Java (Sun) ...

Chapter 36 Access ControlES-4124 User’s Guide3002 Encryption MethodOnce the identification is verified, both the client and server must agree on the t

Chapter 36 Access ControlES-4124 User’s Guide301Figure 181 HTTPS Implementation" If you disable HTTP in the Service Access Control screen, the

Chapter 36 Access ControlES-4124 User’s Guide30236.8.2 Netscape Navigator Warning MessagesWhen you attempt to access the Switch HTTPS server, a Websi

Chapter 36 Access ControlES-4124 User’s Guide303Figure 185 Example: Lock Denoting a Secure Connection36.9 Service Port Access Control Service Ac

Chapter 36 Access ControlES-4124 User’s Guide304The following table describes the fields in this screen. 36.10 Remote Management From the Acces

Chapter 36 Access ControlES-4124 User’s Guide305Te l n e t / F T P/HTTP/ICMP/SNMP/SSH/HTTPSSelect services that may be used for managing the Switch f

Chapter 36 Access ControlES-4124 User’s Guide306

ES-4124 User’s Guide307CHAPTER 37 DiagnosticThis chapter explains the Diagnostic screen.37.1 Diagnostic Click Management > Diagnostic in the navi

Chapter 37 DiagnosticES-4124 User’s Guide308

ES-4124 User’s Guide309CHAPTER 38 SyslogThis chapter explains the syslog screens.38.1 Syslog Overview The syslog protocol allows devices to send eve

List of TablesES-4124 User’s Guide31List of TablesTable 1 Panel Connections ...

Chapter 38 SyslogES-4124 User’s Guide310Figure 189 Management > Syslog The following table describes the labels in this screen. 38.3 Syslog Serv

Chapter 38 SyslogES-4124 User’s Guide311Figure 190 Management > Syslog > Server Setup The following table describes the labels in this screen

Chapter 38 SyslogES-4124 User’s Guide312

ES-4124 User’s Guide313CHAPTER 39 Cluster ManagementThis chapter introduces cluster management.39.1 Clustering Management Status Overview Cluster Ma

Chapter 39 Cluster ManagementES-4124 User’s Guide314Figure 191 Clustering Application Example 39.2 Cluster Management Status Click Management >

Chapter 39 Cluster ManagementES-4124 User’s Guide315The following table describes the labels in this screen. 39.2.1 Cluster Member Switch Management

Chapter 39 Cluster ManagementES-4124 User’s Guide31639.2.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a

Chapter 39 Cluster ManagementES-4124 User’s Guide317Figure 195 Management > Clustering Management > Configuration The following table descri

Chapter 39 Cluster ManagementES-4124 User’s Guide318Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these cha

ES-4124 User’s Guide319CHAPTER 40 MAC TableThis chapter introduces the MAC Table screen.40.1 MAC Table Overview The MAC Table screen (a MAC table is

List of TablesES-4124 User’s Guide32Table 39 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP ...

Chapter 40 MAC TableES-4124 User’s Guide32040.2 Viewing the MAC Table Click Management > MAC Table in the navigation panel to display the follo

ES-4124 User’s Guide321CHAPTER 41 IP TableThis chapter introduces the IP table.41.1 IP Table Overview The IP Table screen shows how packets are forw

Chapter 41 IP TableES-4124 User’s Guide32241.2 Viewing the IP TableClick Management > IP Table in the navigation panel to display the following sc

ES-4124 User’s Guide323CHAPTER 42 ARP TableThis chapter introduces ARP Table.42.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol

Chapter 42 ARP TableES-4124 User’s Guide324Figure 200 Management > ARP Table The following table describes the labels in this screen. Table 135

ES-4124 User’s Guide325CHAPTER 43 Routing TableThis chapter introduces the routing table. 43.1 OverviewThe routing table contains the route informat

Chapter 43 Routing TableES-4124 User’s Guide326

ES-4124 User’s Guide327CHAPTER 44 Configure CloneThis chapter shows you how you can copy the settings of one port onto other ports.44.1 Configure Cl

Chapter 44 Configure CloneES-4124 User’s Guide328The following table describes the labels in this screen. Table 137 Management > Configure Clone

329PART VICommands and TroubleshootingIntroducing Commands (331)User and Enable Mode Commands (385)Configuration Mode Commands (391)Interface Comma

List of TablesES-4124 User’s Guide33Table 82 IP Application > Static Routing ...

330

ES-4124 User’s Guide331CHAPTER 45 Introducing CommandsThis chapter introduces commands and gives a summary of commands available.45.1 OverviewIn ad

Chapter 45 Introducing CommandsES-4124 User’s Guide332• 9600 bps• No parity• 8 data bits• 1 stop bit• No flow control45.2.1.1 Initial ScreenWhen you

Chapter 45 Introducing CommandsES-4124 User’s Guide333• The required fields in a command are enclosed in angle brackets <>, for instance, ping

Chapter 45 Introducing CommandsES-4124 User’s Guide33445.7 Privilege LevelsYou can use a command whose privilege level is equal to or less than that

Chapter 45 Introducing CommandsES-4124 User’s Guide335The following table describes command interpreter modes and how to access them.Enter exit to qu

Chapter 45 Introducing CommandsES-4124 User’s Guide33645.9.1 List of Available CommandsEnter “help” to display a list of available commands and the c

Chapter 45 Introducing CommandsES-4124 User’s Guide337Enter <command> ? to display detailed help information about the sub commands and paramet

Chapter 45 Introducing CommandsES-4124 User’s Guide33845.11.1 Switch Configuration FileWhen you configure the Switch using either the CLI (Command Li

Chapter 45 Introducing CommandsES-4124 User’s Guide33945.12.2 Enable ModeThe following table describes the commands available for Enable mode.

List of TablesES-4124 User’s Guide34Table 125 Management > Diagnostic ...

Chapter 45 Introducing CommandsES-4124 User’s Guide340cable-diagnostics<port-list> Perform a physical wire-pair test of the Ethernet connections

Chapter 45 Introducing CommandsES-4124 User’s Guide341erase running-config Resets to the factory default settings. 13help Displays help information f

Chapter 45 Introducing CommandsES-4124 User’s Guide342renew dhcp snooping databaseLoads dynamic bindings from the default DHCP snooping database.13ren

Chapter 45 Introducing CommandsES-4124 User’s Guide343log Displays the log settings configured on the Switch. It also displays the log entries record

Chapter 45 Introducing CommandsES-4124 User’s Guide344ethernet oam discovery <port-list>Displays OAM configuration details and operational stat

Chapter 45 Introducing CommandsES-4124 User’s Guide345protocol-based-vlanDisplays the protocol based VLAN settings for the specified port(s).3i p

Chapter 45 Introducing CommandsES-4124 User’s Guide346source binding [<mac-addr>] [...]Displays the static bindings configured on the Switch bas

Chapter 45 Introducing CommandsES-4124 User’s Guide347mstp Displays MSTP configuration for the Switch.3instance <0-16> Displays MSTP instance c

Chapter 45 Introducing CommandsES-4124 User’s Guide348running-config Displays current operating configuration.3interface port-channel <

Chapter 45 Introducing CommandsES-4124 User’s Guide34945.12.3 General Configuration ModeThe following table lists the commands in Configuration (or

35PART IIntroductionGetting to Know Your Switch (37)Hardware Installation and Connection (41)Hardware Overview (45)

Chapter 45 Introducing CommandsES-4124 User’s Guide350exec <start-stop|stop-only> <radius|tacacs+> [broadcast]Enables sending accounting i

Chapter 45 Introducing CommandsES-4124 User’s Guide351log buffer entries <0-1024>Specifies the maximum number (1-1024) of log messages that ca

Chapter 45 Introducing CommandsES-4124 User’s Guide352classifier <name> <[packet-format <802.3untag|802.3tag| EtherIIuntag| EtherIItag>

Chapter 45 Introducing CommandsES-4124 User’s Guide353dhcp dhcp-vlan <vlan-id>Specifies the VLAN ID of the DHCP VLAN.13dhcp relay <vlan-id&g

Chapter 45 Introducing CommandsES-4124 User’s Guide354database <tftp://host/filename>Specifies the location of the DHCP snooping database. The l

Chapter 45 Introducing CommandsES-4124 User’s Guide355https cert-regeneration <rsa|dsa>Re-generates a certificate. 13timeout <0-65535> Se

Chapter 45 Introducing CommandsES-4124 User’s Guide356route <ip> <mask> <next-hop-ip>Creates a static route. 13<ip> <mask&g

Chapter 45 Introducing CommandsES-4124 User’s Guide357inactive Disables a static MAC address port filtering rule.13mac-forward name <name> mac

Chapter 45 Introducing CommandsES-4124 User’s Guide358max-hop <1-255> Sets the maximum hop value before BPDUs are discarded in the MST Region.13

Chapter 45 Introducing CommandsES-4124 User’s Guide359vlan <vlan-list> loggingDisables logging of messages generated by ARP inspection for the

36

Chapter 45 Introducing CommandsES-4124 User’s Guide360vlan <vlan-list> optionSets the Switch to not add the slot number, port number and VLAN ID

Chapter 45 Introducing CommandsES-4124 User’s Guide361source binding <mac-addr> vlan <vlan-id>13lacp Disables the link aggregation contr

Chapter 45 Introducing CommandsES-4124 User’s Guide362instance <0-16> interface port-channel <port-list>Disables the assignment of specifi

Chapter 45 Introducing CommandsES-4124 User’s Guide363service-control ftp Disables FTP access to the Switch.13http Disables web browser control to th

Chapter 45 Introducing CommandsES-4124 User’s Guide364enable traps system <options>Disables sending all system type traps to a manager. The opti

Chapter 45 Introducing CommandsES-4124 User’s Guide365trtcm Disables the Two Rate Three Color Marker feature on the Switch.13trunk <T1|T2|T3|T4|T5

Chapter 45 Introducing CommandsES-4124 User’s Guide366policy <name> classifier <classifier-list> <[vlan<vlan-id>] [egress-po

Chapter 45 Introducing CommandsES-4124 User’s Guide367port-securityEnables port security on the device. 13<port-list> Enables port security on

Chapter 45 Introducing CommandsES-4124 User’s Guide368exit Leaves the IGMP configuration mode. 13non-querier Sets the Switch to Non-Querier mode. (If

Chapter 45 Introducing CommandsES-4124 User’s Guide369area <area-id> virtual-link <router-id> name <name>Sets a descriptive name fo

ES-4124 User’s Guide37CHAPTER 1 Getting to Know Your SwitchThis chapter introduces the main features and applications of the Switch.1.1 Introduction

Chapter 45 Introducing CommandsES-4124 User’s Guide370redistribute rip metric-type <1|2> metric <0-65535>Sets the Switch to learn RIP rout

Chapter 45 Introducing CommandsES-4124 User’s Guide371http <socket-number> <timeout>Allows HTTP access on the specified service port and

Chapter 45 Introducing CommandsES-4124 User’s Guide372ip <options> Enables sending all IP type traps to a manager. The options are “ping” or “tr

Chapter 45 Introducing CommandsES-4124 User’s Guide373ssh known-hosts <host-ip> <1024|ssh-rsa|ssh-dsa> <key>Adds a remote host to w

Chapter 45 Introducing CommandsES-4124 User’s Guide374mode <index-priority|round-robin>Specifies the mode for TACACS+ server selection.13time &l

Chapter 45 Introducing CommandsES-4124 User’s Guide37545.12.4 interface port-channel CommandsThe following table lists the interface port-channel co

Chapter 45 Introducing CommandsES-4124 User’s Guide376egress Enables bandwidth limits allowed for outgoing traffic on the port(s).13egress <Kbps&g

Chapter 45 Introducing CommandsES-4124 User’s Guide377flow-control Enables interface flow control. Flow control regulates transmissions to match the

Chapter 45 Introducing CommandsES-4124 User’s Guide378dir <ingress| egress|both>Enables port mirroring for incoming, outgoing or both incoming a

Chapter 45 Introducing CommandsES-4124 User’s Guide379gvrp Disable GVRP on the port(s). 13igmp-filtering profileDisables IGMP filtering. 13igmp-gro

Chapter 1 Getting to Know Your SwitchES-4124 User’s Guide381.1.2 Bridging ExampleIn this example application the Switch connects different company de

Chapter 45 Introducing CommandsES-4124 User’s Guide38045.12.5 interface route-domain CommandsThe following table lists the interface route-domain com

Chapter 45 Introducing CommandsES-4124 User’s Guide381Use these commands to configure the IP routing domains. Table 143 interface route-domain Comm

Chapter 45 Introducing CommandsES-4124 User’s Guide38245.12.6 config-vlan CommandsThe following table lists the vlan commands in configuration mode.n

Chapter 45 Introducing CommandsES-4124 User’s Guide38345.13 mvr CommandsThe following table lists the mvr commands in configuration mode. name <n

Chapter 45 Introducing CommandsES-4124 User’s Guide384group <name-str> Disables the specified MVR group setting.13inactive Enables MVR. 13receiv

ES-4124 User’s Guide385CHAPTER 46 User and Enable ModeCommandsThis chapter describes some commands which you can perform in the User and Enable modes

Chapter 46 User and Enable Mode CommandsES-4124 User’s Guide38646.2.2 show ipSyntax: show ipThis command displays the IP related information (such as

Chapter 46 User and Enable Mode CommandsES-4124 User’s Guide387This command displays statistics of a port. The following example shows that port 2 is

Chapter 46 User and Enable Mode CommandsES-4124 User’s Guide38846.3 ping Syntax: ping <ip|host-name> < [in-band|out-of-band|vlan <vlan-id

Chapter 46 User and Enable Mode CommandsES-4124 User’s Guide389This command displays information about the route to an Ethernet device. The following

Chapter 1 Getting to Know Your SwitchES-4124 User’s Guide39Figure 3 High Performance Switched Workgroup Application 1.1.4 IEEE 802.1Q VLAN Applica

Chapter 46 User and Enable Mode CommandsES-4124 User’s Guide39046.6.1 Using a Different Configuration FileYou can store up to two configuration files

ES-4124 User’s Guide391CHAPTER 47 Configuration Mode CommandsThis chapter describes how to enable and configure your Switch’s features using commands

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide392An example is shown next.• Enable IGMP snooping on the Switch. • Set the host-timeout and

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide39347.3 Enabling STPUse the spanning-tree or the mrstp commands to enable and configure ST

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide394An example using spanning-tree command is shown next.• Enable STP on the Switch. • Set th

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide395Disables port mirroring on the Switch.47.4.2 Resetting CommandsUse the no command to re

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide396where An example is shown next. • Disable trunk one (T1).• Disable LAPC on trunk three (

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide397where An example is shown next.• Disable the secure shell RSA1 encryption key.• Remove t

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide39847.6 Static Route CommandsYou can create and configure static routes on the Switch by us

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide399where An example is shown next.• Create a filtering rule called “filter1”. • Drop packe

Document ConventionsES-4124 User’s Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s Guide. 1 Warn

Chapter 1 Getting to Know Your SwitchES-4124 User’s Guide40• Web Configurator. This is recommended for everyday management of the Switch using a (supp

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide400• Enable dynamic link aggregation (LACP) on trunk 1. 47.9 Enabling Port AuthenticationT

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide401See Section 47.9.2 on page 401 for an example.47.9.2 Port Authentication SettingsUse th

Chapter 47 Configuration Mode CommandsES-4124 User’s Guide402• Specify the timeout period of 30 seconds that the Switch will wait for a response from

ES-4124 User’s Guide403CHAPTER 48 Interface CommandsThese are some commonly used configuration commands that belong to the interface group of command

Chapter 48 Interface CommandsES-4124 User’s Guide404The Switch supports the following IEEE 802.3ah features:• Discovery - this identifies the devices

Chapter 48 Interface CommandsES-4124 User’s Guide405• Perform a remote loopback test from port 7. 48.2.3 bpdu-control Syntax:bpdu-control <peer|t

Chapter 48 Interface CommandsES-4124 User’s Guide406An example is shown next.• Enable ports 1, 3, 4 and 5 for configuration.• Set the BPDU control to

Chapter 48 Interface CommandsES-4124 User’s Guide407• Enable port one for configuration.• Set the outgoing traffic bandwidth limit to 5000Kbps.• Set

Chapter 48 Interface CommandsES-4124 User’s Guide408• Enable the IEEE 802.1Q tagged VLAN command to configure tagged VLAN for the Switch.• Enable port

Chapter 48 Interface CommandsES-4124 User’s Guide409whereAn example is shown next. • Enable WFQ queuing on the Switch.• Enable port 2 and ports 6 to

ES-4124 User’s Guide41CHAPTER 2 Hardware Installation andConnectionThis chapter shows you how to install and connect the Switch. 2.1 Freestanding I

Chapter 48 Interface CommandsES-4124 User’s Guide410• Set the IEEE 802.1p quality of service priority as four (4).48.2.13 nameSyntax:name <port-na

Chapter 48 Interface CommandsES-4124 User’s Guide411• Select ports 3-6 for internal loopback test.• Execute the test command.• View the results. 48.3

Chapter 48 Interface CommandsES-4124 User’s Guide412

ES-4124 User’s Guide413CHAPTER 49 IEEE 802.1Q Tagged VLANCommandsThis chapter describes the IEEE 802.1Q Tagged VLAN and associated commands. 49.1 Co

Chapter 49 IEEE 802.1Q Tagged VLAN CommandsES-4124 User’s Guide41449.2 Global VLAN1Q Tagged VLAN Configuration Commands This section shows you how to

Chapter 49 IEEE 802.1Q Tagged VLAN CommandsES-4124 User’s Guide415The following example sets the Join Timer to 300 milliseconds, the Leave Timer to 8

Chapter 49 IEEE 802.1Q Tagged VLAN CommandsES-4124 User’s Guide416The following example sets the default VID to 200 on ports 1 to 5. 49.3.2 Set Acce

Chapter 49 IEEE 802.1Q Tagged VLAN CommandsES-4124 User’s Guide417where•Enter fixed to register the <port-list> to the static VLAN table with &

Chapter 49 IEEE 802.1Q Tagged VLAN CommandsES-4124 User’s Guide41849.3.5 Delete VLAN ID Syntax:no vlan <vlan-id>whereThis command deletes the s

Chapter 49 IEEE 802.1Q Tagged VLAN CommandsES-4124 User’s Guide419•The TagCtl section of the last column shows which ports are tagged and which are u

Chapter 2 Hardware Installation and ConnectionES-4124 User’s Guide42" For proper ventilation, allow at least 4 inches (10 cm) of clearance at the

Chapter 49 IEEE 802.1Q Tagged VLAN CommandsES-4124 User’s Guide420

ES-4124 User’s Guide421CHAPTER 50 Multicast VLAN RegistrationCommandsThis chapter shows you how to use Multicast VLAN Registration (mvr) commands. 50

Chapter 50 Multicast VLAN Registration CommandsES-4124 User’s Guide422• Enter MVR mode. Create a multicast VLAN with the name multiVlan and the VLAN I

ES-4124 User’s Guide423CHAPTER 51 Routing Domain CommandExamples51.0.1 interface route-domain Syntax:interface route-domain <ip-address>/<m

Chapter 51 Routing Domain Command ExamplesES-4124 User’s Guide424

ES-4124 User’s Guide425CHAPTER 52 TroubleshootingThis chapter covers potential problems and possible remedies. 52.1 Problems Starting Up the Switch5

Chapter 52 TroubleshootingES-4124 User’s Guide42652.2.1 Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you nee

Chapter 52 TroubleshootingES-4124 User’s Guide427Figure 205 Internet Options3 Click Apply to save this setting.52.2.1.1.2 Enable pop-up Blockers

Chapter 52 TroubleshootingES-4124 User’s Guide428Figure 206 Internet Options3 Type the IP address of your device (the web page that you do not want

Chapter 52 TroubleshootingES-4124 User’s Guide4296 Click Apply to save this setting. 52.2.1.2 JavaScriptsIf pages of the web configurator do not dis

Chapter 2 Hardware Installation and ConnectionES-4124 User’s Guide433 Repeat steps 1 and 2 to install the second mounting bracket on the other side o

Chapter 52 TroubleshootingES-4124 User’s Guide430Figure 209 Security Settings - Java Scripting52.2.1.3 Java Permissions1 From Internet Explorer, cl

Chapter 52 TroubleshootingES-4124 User’s Guide43152.2.1.3.1 JAVA (Sun)1 From Internet Explorer, click Tools, Internet Options and then the Advanced

Chapter 52 TroubleshootingES-4124 User’s Guide432

433PART VIIAppendices and IndexProduct Specifications (355)IP Addresses and Subnetting (441)Legal Information (449)Customer Support (453)Index (4

434

ES-4124 User’s Guide435APPENDIX A Product SpecificationsThe following tables summarize the Switch’s hardware and firmware features.Table 149 Hardwa

Appendix A Product SpecificationsES-4124 User’s Guide436Table 150 Firmware Specifications FEATURE DESCRIPTIONDefault IP Address In band: 192.168.1.1

Appendix A Product SpecificationsES-4124 User’s Guide437Multicast VLAN Registration (MVR)Multicast VLAN Registration (MVR) is designed for applicatio

Appendix A Product SpecificationsES-4124 User’s Guide438 Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the w

Appendix A Product SpecificationsES-4124 User’s Guide439The following list, which is not exhaustive, illustrates the standards supported in the Switc

Chapter 2 Hardware Installation and ConnectionES-4124 User’s Guide44

Appendix A Product SpecificationsES-4124 User’s Guide440RFC 3164 SyslogRFC 3376 Internet Group Management Protocol, Version 3RFC 3414 User-based Secur

ES-4124 User’s Guide441APPENDIX B IP Addresses and SubnettingThis appendix introduces IP addresses and subnet masks. IP addresses identify individual

Appendix B IP Addresses and SubnettingES-4124 User’s Guide442Figure 212 Network Number and Host IDHow much of the IP address is the network number a

Appendix B IP Addresses and SubnettingES-4124 User’s Guide443Subnet masks are expressed in dotted decimal notation just like IP addresses. The follow

Appendix B IP Addresses and SubnettingES-4124 User’s Guide444SubnettingYou can use subnetting to divide one network into multiple sub-networks. In the

Appendix B IP Addresses and SubnettingES-4124 User’s Guide445Figure 214 Subnetting Example: After SubnettingIn a 25-bit subnet the host ID has 7 bi

Appendix B IP Addresses and SubnettingES-4124 User’s Guide446Example: Eight SubnetsSimilarly, use a 27-bit mask to create eight subnets (000, 001, 010

Appendix B IP Addresses and SubnettingES-4124 User’s Guide447Subnet PlanningThe following table is a summary for subnet planning on a network with a

Appendix B IP Addresses and SubnettingES-4124 User’s Guide448Configuring IP AddressesWhere you obtain your network number depends on your particular s

ES-4124 User’s Guide449APPENDIX C Legal InformationCopyrightCopyright © 2007 by ZyXEL Communications Corporation.The contents of this publication may

ES-4124 User’s Guide45CHAPTER 3 Hardware OverviewThis chapter describes the front panel and rear panel of the Switch and shows you how to make the ha

Appendix C Legal InformationES-4124 User’s Guide450FCC WarningThis device has been tested and found to comply with the limits for a Class A digital sw

Appendix C Legal InformationES-4124 User’s Guide451condition. Any replacement will consist of a new or re-manufactured functionally equivalent produc

Appendix C Legal InformationES-4124 User’s Guide452

ES-4124 User’s Guide453APPENDIX D Customer SupportPlease have the following information ready when you contact customer support.Required Information•

Appendix D Customer SupportES-4124 User’s Guide454Denmark• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +45-39-55-07-00•

Appendix D Customer SupportES-4124 User’s Guide455• Telephone: +7-3272-590-698• Fax: +7-3272-590-689• Web Site: www.zyxel.kz• Regular Mail: ZyXEL Kaz

Appendix D Customer SupportES-4124 User’s Guide456• Web Site: www.zyxel.es • Regular Mail: ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spa

IndexES-4124 User’s Guide457IndexNumerics802.1P priority 85Aaccess controllimitations 289login account 297remote management 304service port 303SNMP 29

IndexES-4124 User’s Guide458CLIsyntax conventions 332cloning a port See port cloningcluster management 313and switch passwords 318cluster manager 313,

IndexES-4124 User’s Guide459service level 255what it does 255DSCP (DiffServ Code Point) 255DVMRPAutonomous System 249default timer setting 252error me

Chapter 3 Hardware OverviewES-4124 User’s Guide463.1.1 Console Port For local management, you can use a computer with terminal emulation software con

IndexES-4124 User’s Guide460IEEE 802.1xactivate 145, 146, 192, 194reauthentication 146IEEE 802.1x, port authentication 143IGMP 249how it works 246over

IndexES-4124 User’s Guide461firmware 285restoring configuration 286maintenance 283current configuration 283main screen 283management 331Management Inf

IndexES-4124 User’s Guide462interface 234, 236, 240link state database 234, 236network example 234priority 234redistribute route 238route cost 240rout

IndexES-4124 User’s Guide463and authentication 190Network example 189server 190settings 190setup 190Rapid Spanning Tree Protocol, See RSTP. 109rebootl

IndexES-4124 User’s Guide464Max Age 117, 118, 120, 122path cost 110, 117, 120port priority 117, 120port state 111root port 110status 118, 121, 125term

IndexES-4124 User’s Guide465Virtual Routerstatus 272Virtual Router (VR) 271Virtual Router Redundancy Protocol (VRRP) 271VLAN 79, 89, 438acceptable fra

IndexES-4124 User’s Guide466

Chapter 3 Hardware OverviewES-4124 User’s Guide47There are two pairs of Gigabit Ethernet/mini-GBIC ports. The mini-GBIC ports have priority over the

Chapter 3 Hardware OverviewES-4124 User’s Guide48Figure 11 Opening the Transceiver’s Latch Example 2 Pull the transceiver out of the slot.Figure 12

Chapter 3 Hardware OverviewES-4124 User’s Guide49To connect the power to the ES-4124 AC unit, insert the female end of power cord to the power recept

Document ConventionsES-4124 User’s Guide5Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The Switch icon is no

Chapter 3 Hardware OverviewES-4124 User’s Guide50Gigabit PortsLNK/ACT Green Blinking The system is transmitting/receiving to/from a 10/1000 Mbps Ether

51PART IIBasic ConfigurationThe Web Configurator (53)Initial Setup Example (63)System Status and Port Statistics (69)Basic Setting (75)

52

ES-4124 User’s Guide53CHAPTER 4 The Web ConfiguratorThis section introduces the configuration and functions of the web configurator. 4.1 Introductio

Chapter 4 The Web ConfiguratorES-4124 User’s Guide54Figure 15 Web Configurator: Login 4 Click OK to view the first web configurator screen.4.3 The

Chapter 4 The Web ConfiguratorES-4124 User’s Guide55B - Click this link to save your configuration into the Switch’s nonvolatile memory. Nonvolatile

Chapter 4 The Web ConfiguratorES-4124 User’s Guide56The following table lists the various web configurator screens within the sub-links. Table 4 Web

Chapter 4 The Web ConfiguratorES-4124 User’s Guide57The following table describes the links in the navigation panel. Table 5 Navigation Panel Links

Chapter 4 The Web ConfiguratorES-4124 User’s Guide58Auth and Acct This link takes you to a screen where you can configure authentication and accountin

Chapter 4 The Web ConfiguratorES-4124 User’s Guide594.3.1 Change Your Password After you log in for the first time, it is recommended you change t

Safety WarningsES-4124 User’s Guide6Safety Warnings1 For your safety, be sure to read and follow all warning notices and instructions.• Do NOT use thi

Chapter 4 The Web ConfiguratorES-4124 User’s Guide606 Forget the password and/or IP address.7 Prevent all services from accessing the Switch. 8 Change

Chapter 4 The Web ConfiguratorES-4124 User’s Guide61Figure 18 Resetting the Switch: Via the Console Port The Switch is now reinitialized with a def

Chapter 4 The Web ConfiguratorES-4124 User’s Guide62

ES-4124 User’s Guide63CHAPTER 5 Initial Setup ExampleThis chapter shows how to set up the Switch for an example network. 5.1 OverviewThe following

Chapter 5 Initial Setup ExampleES-4124 User’s Guide642 Open your web browser and enter 192.168.0.1 (the default MGMT port IP address) in the address b

Chapter 5 Initial Setup ExampleES-4124 User’s Guide655.1.3 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the port(s) bel

Chapter 5 Initial Setup ExampleES-4124 User’s Guide66" The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to t

Chapter 5 Initial Setup ExampleES-4124 User’s Guide675.1.5 Enabling RIP To exchange routing information with other routing devices across different

Chapter 5 Initial Setup ExampleES-4124 User’s Guide68

ES-4124 User’s Guide69CHAPTER 6 System Status and PortStatisticsThis chapter describes the system status (web configurator home page) and port detail

Safety WarningsES-4124 User’s Guide7This product is recyclable. Dispose of it properly.

Chapter 6 System Status and Port StatisticsES-4124 User’s Guide706.2.1 Status: Port Details Click a number in the Port column in the Status scree

Chapter 6 System Status and Port StatisticsES-4124 User’s Guide71Figure 24 Status: Port Details The following table describes the labels in this s

Chapter 6 System Status and Port StatisticsES-4124 User’s Guide72Up Time This field shows the total amount of time the connection has been up.Tx Pack

Chapter 6 System Status and Port StatisticsES-4124 User’s Guide73512-1023 This field shows the number of packets (including bad packets) received tha

Chapter 6 System Status and Port StatisticsES-4124 User’s Guide74

ES-4124 User’s Guide75CHAPTER 7 Basic SettingThis chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Port

Chapter 7 Basic SettingES-4124 User’s Guide76Figure 25 Basic Setting > System Info The following table describes the labels in this screen. Table

Chapter 7 Basic SettingES-4124 User’s Guide777.3 General Setup Use this screen to configure general settings such as the system name and time. Cl

Chapter 7 Basic SettingES-4124 User’s Guide78The following table describes the labels in this screen. Table 9 Basic Setting > General Setup LABE

Chapter 7 Basic SettingES-4124 User’s Guide797.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a physical network to be partitio

Safety WarningsES-4124 User’s Guide8

Chapter 7 Basic SettingES-4124 User’s Guide80Figure 27 Basic Setting > Switch Setup The following table describes the labels in this screen. Tab

Chapter 7 Basic SettingES-4124 User’s Guide817.6 IP Setup Use the IP Setup screen to configure the default gateway device, the default domain name

Chapter 7 Basic SettingES-4124 User’s Guide82Figure 28 Basic Setting > IP SetupThe following table describes the labels in this screen. Table 11

Chapter 7 Basic SettingES-4124 User’s Guide837.7 Port Setup Use this screen to configure Switch port settings.Click Basic Setting > Port Setup i

Chapter 7 Basic SettingES-4124 User’s Guide84Figure 29 Basic Setting > Port Setup The following table describes the labels in this screen. Table

Chapter 7 Basic SettingES-4124 User’s Guide85Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory c

Chapter 7 Basic SettingES-4124 User’s Guide86

87PART IIIAdvanced SetupVLAN (89)Static MAC Forward Setup (105)Filtering (107)Spanning Tree Protocol (109)Bandwidth Control (129)Broadcast Storm

88

ES-4124 User’s Guide89CHAPTER 8 VLANThe type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter sh

Contents OverviewES-4124 User’s Guide9Contents OverviewIntroduction ...

Chapter 8 VLANES-4124 User’s Guide908.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN membership a

Chapter 8 VLANES-4124 User’s Guide918.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass

Chapter 8 VLANES-4124 User’s Guide928.5.1 Static VLAN Status See Section 8.1 on page 89 for more information on Static VLAN. Click Advanced Applicati

Chapter 8 VLANES-4124 User’s Guide93The following table describes the labels in this screen.8.5.3 Configure a Static VLAN Use this screen to conf

Chapter 8 VLANES-4124 User’s Guide94The following table describes the related labels in this screen. 8.5.4 Configure VLAN Port Settings Use the

Chapter 8 VLANES-4124 User’s Guide95Figure 35 Advanced Application > VLAN > VLAN Port Setting The following table describes the labels in thi

Chapter 8 VLANES-4124 User’s Guide968.6 Subnet Based VLANs Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP su

Chapter 8 VLANES-4124 User’s Guide978.7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to display the con

Chapter 8 VLANES-4124 User’s Guide988.8 Protocol Based VLANs Protocol based VLANs allow you to group traffic into logical VLANs based on the protocol

Chapter 8 VLANES-4124 User’s Guide99For example, port 1, 2, 3 and 4 belong to static VLAN 100, and port 4, 5, 6, 7 belong to static VLAN 120. You con