ZyXEL Communications ES-3124-4F Bedienungsanleitung

ZyXEL ES-3100 Series (ES-3124/ES-3124PWR/ES-3148/ES-3124-4F) Ethernet Switch Support Notes V ersion 3.60 September 2006[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 2 INDEX How to manage & maintain your Switch? Firmware Upgrade Restore a Configuration File Backing Up a Configuration File Load Factory Default s Physical Switch connection Connecting two switches via Fiber Channel General Networking DHCP[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 3 What is default login p assword of the console, telnet, and FTP? How to change the password? How to access the Command Line Interface? If I forgot the Switch p assword, how can I reset the password to default? How do I configure an IP addres[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 4 How to manage & maint ain your Switch? Firmware Upgrade From Web GUI: 1. Download (and unzipped) the correc t model firmware to your computer . 2. Click Management and then Maintenance in the navigator panel to bring up the following scr[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 5 From Console Port: 1. Download (and unzipped) the correc t model firmware to your computer . 2. Connect to the console port and open the T erminal Emulation Software. 3. Restarting the switch to enter the debug mode via the terminal. 4. Ente[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 6 Restore a Configuration File From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” link of the Re store Configuration to bring up the following screen[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 7 2. Restarting the Switch to ent er the debug mode via the terminal. 3. Enter “A TLC” 4. Use X-modem protocol to tr ansfer (Send File) the firmware. 5. Enter “A TGO” to restart the Switch af ter done uploading the configuration file. [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 8 Backing Up a Configuration File From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” link of the Backup Configuration to bring up the following scree[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 9 4. Use X-modem protocol to trans fer (Receive File) the firmware. 5. Enter “A TGO” to restart the Switch af ter done uploading the configuration file. From Command Line FTP: 1. Download (and unzipped) the correc t model firmware to your [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 10 Load Factory Default s From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” button of the Load Factory Defaults to bring up the following screen. 3.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 Physical Switch connection How to connect two switches via Fiber Channel Y our Switch may come with one or m any mini-Gb ports. ZyXEL offers Small Form-factor Pluggable (SFP) transceiver s for Gigabit Ethernet and Fiber Channel applications[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 12 Here is the photo of the SFP-SX Tran sceiver & the LC/LC Fiber Cable. Steps to complete this scenario 1. Find both Mini-GB ports on your Switch first.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 13 2. Get one transceiver and plug it into the Mini-GB Port of your Switch 3. Plug another transceiver into the Mini-GB Port of the other Switch[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 14 4. Remove both side of the protecti on cap from the LC/LC Fiber Cable. 5. Plug the LC/LC Fiber Cable into the transceivers on both Switch. If you connected the cable correctly, the LED of the “L INK” will light up.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 15 6. Now, connect the first PC “Alpha” to the Switch on the left and the second PC “Delta” to the Switch on the ri ght via the regular Ethernet cable. 7. Set the NICs in both comput ers to the same IP Domain. (ex, PC “Alpha” :192.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 16 General Networking DHCP Relay Option 82 Application ISP may want to limit the number of IP address or deliver some specific IP addresses according to certain Switch port, VLAN ID and option 82 string. They can easily to achieve this wit h D[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 17 How to set up DHCP Relay Option 82 Environment Here, we will set up an environment to a llow a PC to get DHCP IP address in specific IP pool according to its Switch port, VLAN ID and the option 82 string. In this case, we are using GS-3012 [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 18 3. IP Commander settings Open IP Commander . Right click “IP commander and then click “ connect new server ”. Input the DHCP IP addre ss or domain name and click “ok”. Our IP is 192.168.1.99.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 19 Input user name and passwor d. The default user name is “administrator” and password is “incognito”.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 20 It will bring up the following screen, please make sure that your DHCP is in “ online ” status. Then click “ wiza rd ” in the top tool bars and select “ ru le wiza rd ”.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 21 Give a name and description to the new rule.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 22 Assign a range of IP addresses or just one IP address to this rule. In our case, we set the IP pool from 192.168.1.201 to 192.168.1.203. After input IP pool, we select “DHCP Option” in Keywords combobox.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 23 After select the “DHCP Option”, it will pop up “Add DHCP Option Rule” dialog. Select “option 82 Relay Agent Information” , sub-option 1, binary data. For port 25, VLAN 1, “GS-3012”, please key in “0019000147532d33303 132?[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 24 After you finish above step, y ou will see the following figure.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 25 Then pop up the following screen and you can just press Next button. Then you can add DHCP template (option) such as gateway , DNS server and so on.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 26 Here we use “192.168.1.1” as gateway IP address of DHCP client PC.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 27 Y ou can apply DDNS service to DHCP server or not. The rule creation has been finished.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 28 After finishing all above procedures , your PC will get the IP address 192.168.1.201 when you send a DHCP request.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 29 Sep arating a physical network into many virtual networks What is V irtual LAN? • VLAN Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networ ks. S tations on a logical networ[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 30 outgoing port s allowed for each port when using port-based VLANs. Note that VLAN only governs the outgoing traffic, in the other word, it is unidirectional. Therefore, if you wish to allow two subscr iber ports to t alk to each other , e.g[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 31 Port-based VLAN definition : • Egress port for port 1: port 2, port 4, port 5 • Egress port for port 2: port 1, port 3 • Egress port for port 3: port 2 • Egress port for port 4: port 1, port 5 • Egress port for port 5: port 1, por[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 32 For Switch-2, port 1, port 2, and port 3 are allowed to communicate back and forth with uplink port 4, but not with other ports. • Switch-2 VLAN 1 member port: port 1 and port 4 • Switch-2 VLAN 2 member port: port 2 and port 4 • Switc[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 33 For Switch-1, port 1, port2, and port 3 are allowed to communicate back and forth with uplink port 4, but not with other ports. • Switch-1 VLAN 1 member port: port 1 and port 4 • Switch-1 VLAN 2 member port: port 2 and port 4 • Switch[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 34 Scenario In this scenario, Port Based VLAN is used to separate one physical Switch into two smaller logical Switches. Port 1~4 and 9, 10 are in one group. And Port 5~10 are in another group. Po rt-based VLANs are specific only to the switch[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 35 Configuring your Switch to fulfill this scenario (GUI) 1. Connect port 1 with a PC or Notebook via the RJ45 Cable. 2. By default the MGMT IP on every port is 192.168.1.1/24 3. Set your NIC to 192.168.1.2/24 4. Open an Internet browser such [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 36 8. Now, you need to tell the Switch how you are going to separate the physical Switch into some logical small Switches. Thus, we click “Advanced Application” then “VLAN”. On the ri ght screen, check the boxes to suit your need. In t[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 37 9. Finally, you can now verify your re sult. If everything works fine, PC A can ping PC B and PC Z. But it cannot ping PC C or PC D. On the same time, this should work vice versa. 10. For example, PC A: 192.168.1.4/24 PC B: 192.168.1.5/24 P[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 38 12. PING PC Z from PC A (Should work) 13. PING PC C from PC A (Should NOT work)[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 39 Configuring your Switch to fulfill this scenario (CLI) 1. Connect the Switch Console por t with your PC or Notebook. 2. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 3. Make sure that your port settings are bps:9600 Data[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 40 scenario. 7. When all of the above are done, do not forget to give the “write memory” command under the enable mode to save your configuration. What is IEEE 802.1Q T ag-based VLAN? • T ag-based VLAN Overview Regarding IEEE 802.1Q stan[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 41 process the frame across the network. A tagged frame is four bytes longer than an untagged frame and cont ains two bytes of TPID (T ag Protocol Identifier , residing within the type/length field of the Ethernet frame) and two bytes of TCI ([...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 42 • How 802.1Q VLAN works According to the VID information in the t ag, the switch forward and filter the frames among ports. These ports with sa me VID can communicate with each other . IEEE 802.1Q VLAN function contai ns the following thr[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 43 untagged frame is received, Ingress Process insert a t ag cont ained the PVID into the untagged frame. Each physical port has a default VI D called PVID (Port VID). PVID is assigned to untagged frames or priority t agged frames (frames with[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 44 • Forbidden registration: This port is forbidden to be the egress port of specified VID.. • Fixed registration: While ad control is fixed registration, it means this is a static registration entry . This port is the egress port of the s[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 45 Filtering Database. If the value is t agged, the outgoing frame on the egress port is tagged. If the value is unt agged, the t ag will be removed before frame leaves the egress port. How to connect two switches using VLAN? I want to make VL[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 46 -------------------------- ----------- 2. Configuration of VLAN on switch B Answer: -------------------------- ----------- In switch A, add port 25 in each VLAN VID:101 (port 1,2,3,"25 T AG") VID:102 (port 4,5,6,,"25 T AG&quo[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 47 VID:102 (port 6,7,8,9,10,"25 T AG") VID:103 (port 1 1,12,13,14,"25 T AG") VID:104 (port 15,16,17,18,"25 T AG") VID:105 (port 19,20, 21,23,22"25 T AG) Clients in same VLAN on both switches can communicate e[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 48 Setting up VLAN T runking With the benefit of deploying VLAN trunki ng, we can connect two switches by a port that is configured as VLAN trunk ing port. PC1 with each VLAN tag frames from switch 1 can communicate with PC2 with another VLAN [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 49 In the switch 2, t he configuration is In the switch 1, we set port 2 as VLAN 2 unt ag[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 50 In the switch 2, we set port 6 as VLAN 2 unt ag. The switch 1 IP address: 192.168.1.31 The switch 2 IP address: 192.168.1.21 After the configuration, we can obse rve that in the switch 1, the PC 1 running on port 2 can find the PC 2 running[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 51 How to configure GVRP? Description: In this scenario, PCs belong to di f ferent divisions within a single corporation can not communicate with eac h other , and we leave some ports of switches for GVRP-aware PC and others for VLAN-unaware P[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 52 Please enter VLAN setting under Advanced Application menu and click “static VLAN” to bring up the following screen, adding VLAN 10: port 3, fixed, untag; port 23, fixed, Tx t agging”. Add VLAN 20 to this switch, VLAN 20: port 4, fixed[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 53 2. For Switch B on Floor 1: Please follow the same steps to adding VLAN 10: port 3, fixed, unt ag; port 23, fixed, Tx t agging; por t 24, fixed, Tx t agging”. Add VLAN 20 to this switch, VLAN 20: port 4, fixed, unt ag; port 23, fixed, Tx [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 54 Please click VLAN port setting to bring up the following screen, setup PVID 10 for port 3, PVID 20 for port 4, and enable GVRP on the top of the screen and port 1, port 2, port 23, port 24. 3. For Switch C on Basement: Please set static VLA[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 55 Please set static VLAN 20: port 23, fixed, unt ag . Please add VLAN 30: port 1, fixed, unt ag; port23, fixed, unt ag; port 24, fixed, Tx t agging.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 56 Please setup PVID 30 for port 1 and enable GVRP on port 3 and port 24. Then, this scenario is done here.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 57 IP Multicasting How to setup IGMP snooping in your switch? Figure 1: IGMP and IGMP snooping IGMP snooping is designed for application wit h deployment of multicast traffic. It operates on the underlying IGMP mec hanism where a layer two swi[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 58 Configuration of IGMP snooping by web In this example, we enable the IGMP f unction on the GS-4024 (an IGMP router) to connect to a multimedia server . Al so, we enable IGMP snooping function on the ES-3124 or other ZyXEL L2 Switch to conne[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 59 S tep two : In the L2 Switch, click Basic Setting and then Swi tch Se tup where we can enable IGMP snooping function with WEB-GUI. Figure 4: IGMP Snooping Setup Configuration of IGMP and IGMP snooping by CLI S tep one: Enable IGMP function [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 60 In the configure mode of CLI, L2Switch(config)# igmp-snooping S tep three: Display the IGMP S tatus In the exec mode of CLI GS-4024# show router igmp S tep Four: Display the IGMP snooping S tatus In the exec mode of CLI L2Switch# show igmp-[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 61 Overview of MVR MVR refers to Multicast VLAN Registra tion that enables a media server to transmit multicast stream in a single multicast VLAN while clients receiving multicast VLAN stream can reside in different VLANs. Clients in dif feren[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 62 Figure 2 MVR Mode  Dynamic Mode If we select the dynamic mode in MVR setting, IGMP report message transmitted from the receiver port will be forwarded to a multicast router through its source port. Multicast router knows which multicast [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 63 configured multicast MAC addre ss. If matches, the switch CPU modifies the hardware address table to include this receiver port and VLAN as a forwarding destination of the MVLAN  Leave Operation Subscriber sends an IGMP leave message to [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 64 Scenario of MVR In the following section, we will prov ide an exampl e to illustrate how to configure MVR. In this scenario, the m edia stream from t he media servers will be transmitted from port 24 of GS- 4024 (as an IGMP Router) to ES-31[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 65 Configuration via W eb [GS-4024] 1. First of all, you need to create all those IP domains on the GS-4024 Switch. Once you completed those VLANs, your VLAN status should looks like the same as below . 2. Below are their related PVID settings[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 66 3. Right after the VLAN, you should add the IP domains to the related VLANs. 4. Since this GS-4024 works as an IG MP Router , you need to enable IGMP V2 on the multicast ip interface (whi ch is the dummy interface). Please notice that since[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 67 Here we have done everything w e n eed on the IGMP Router <GS-4024>.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 68 Configuration via W eb [ES-3124] 1. At the very beginning, you can cr eate your MVR VLAN First (which is VLAN100). T o create this multicast VLAN , we do it in another way . First, access to the GUI of your Switch. T hen click “Advanced A[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 69 3. First of all, please choose the Mult icast VLAN ID that we just created (which is VLAN100). Then give a name to this group, as long as you can understand. Place the range of Multicast group s her e with the start address and End address.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 70 5. Right after that you will need to creat e all other non-Multicast VLANs on this Switch. Once you completed those VLANs, your VLAN status should looks like the same as below . 6. Below are their related PVID settings.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 71 Here we have done everything w e need on the Edge Switch <ES-3124>.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 72 Configuration via W eb [GS-4012F] 1. At the very beginning, you can cr eate your MVR VLAN First (which is VLAN100). T o create this multicast VLAN , we do it in another way . First, access to the GUI of your Switch. T hen click “Advanced [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 73 3. First of all, please choose the Mult icast VLAN ID that we just created (which is VLAN100). Then give a name to this group, as long as you can understand. Place the range of Multicast group s her e with the start address and End address.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 74 V ideo with no subscriber . (No body joining that multicast group). 5. Right after that you will need to creat e all other non-Multicast VLANs on this Switch. Once you completed those VLANs, your VLAN status should looks like the same as be[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 75 Here we have done everything w e need on the Edge Switch <GS-4012F>.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 76 Configuration via CLI [GS-4024] Connect the Switch Console port with your PC or Notebook. 8. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 9. Make sure that your port settings are bps:9600 Data bits:8 Parity: None Stop b[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 77 forbidden "" untagged "" ip addres s 1 1 1.1 1 1.1 1 1.1 1 1 255.255.255.0 exit T o Create VLAN101 with its related IP domain: vlan 101 name 101 normal 1-10,12-23 fixed 1 1,24 forbidden "" untagged 1 1 ip addre[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 78 name 1 10 normal 1-9,1 1-23 fixed 10,24 forbidden "" untagged 10 ip addres s 192.168.1 10.1 255.255.255.0 exit T o enable IGMP Routing: router igmp exit T o set PVID of Port 2: interface port-channel 2 pvid 2 exit T o set PVID of [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 79 T o enable IGMP v2 on the dummy IP interface: interface route-domain 1 1 1.1 1 1.1 1 1.1 1 1/24 ip igmp v2 exit[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 80 Configuration via CLI [ES-3124] Connect the Switch Console port with your PC or Notebook. 1. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 2. Make sure that your port settings are bps:9600 Data bits:8 Parity: None Stop b[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 81 untagged 2 exit T o enable IGMP Sooping with unknown Multicast “Drop”: igmp-snooping igmp-snooping unknown-multicast-frame drop T o set PVID of Port 1: interface port-channel 1 pvid 101 exit T o set PVID of Port 2: interface port-channe[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 82 Configuration via CLI [GS-4012F] Connect the Switch Console port with your PC or Notebook. 1. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 2. Make sure that your port settings are bps:9600 Data bits:8 Parity: None Stop [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 83 exit T o enable IGMP Sooping with unknown Multicast “Drop”: igmp-snooping igmp-snooping unknown-multicast-frame drop T o set PVID of Port 9: interface port-channel 9 pvid 109 exit T o set PVID of Port 10: interface port-channel 10 pvid [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 84 T o ring a network by building reducdent links and connections between Switch What is S p anning T ree Protocol • Sp anning T ree Overview Spanning-Tree Protocol (STP) is a Layer 2 protocol designed to run on bridges and switches. The spe[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 85 2. Filtering Database Instability: When multiple copies of a frame arrive at different ports of a switch, the MAC entry instability in Filtering Database will occur. 1. Host sends an unicast frame to Router (source MAC address is Host'[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 86 How STP Works Spanning Tree provide a loop-free net work. When a switch supported STP recognize a loop in the network topol ogy, it blocks one or more redundant ports. Spanning Tree Protocol continually explore the network, so when the netw[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 87 2. The bridge ID includes two parts , bridge priority (2 bytes) and bridge MAC address (6 bytes). The 802.1d default bridge priority is 32768. For example, a switch with default priority 32768 (8000 hex), MAC address is 00:A0:C5:12: 34:56, [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 88 For each LAN segment (collision domai n), there is a designated port. The designated port has the lowest cost to the root bridge. De signated ports are normally in the forwarding state to forw ard and receive traffic to the segment. If more[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 89 1. Switch A bridge ID = 8000:00A0:C511:1111, Switch B bridge ID = 8000:00A0:C522:2222, Switch C bridge ID = 0001:00A0:C533:3333. Switch C has the lowest bridge ID, so Switch C is the root bridge. A ll ports of the root bridge are designated[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 90 Switching security MAC freeze As an added protection against network intrusion attacks, ZyXEL has implemented the MAC Freeze featur e on ES-2108 Series, ES-3124, ES-2024, ES-3100 Series and ES-4024A. Security has been the focus of our Ether[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 91 Y ou can display the St atic MAC Address screen in the web configurator to view the copied MAC addresses. Figure 2: Displaying MAC A ddresses From MAC Freeze After you enabled MAC freeze on port 6 using the CLI command, the switch automatic[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 92[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 93 Setting up 802.1x Radius Authentication. Port-Authentication -- RADIUS settings: Click Advanced Application , Port Authentication in the navigation panel to display configurat ion screen as shown. Click Enable Authentication Server and set [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 94 RADIUS server setup Click RADIUS , RADIUS SERVER in the navigation panel to display configuration screen as s hown. Y ou can use the default values or change the Authentication port , Shared Secret . Remember these values MUST be the as the[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 95 802.1x client as an example here. 802.1x/MD5-challenge setup Open the Local Area connection Properties , and then click Authentication page. Check the Enable IEEE 802.1x authentication for this network and select the MD5-challenge in EAP ty[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 96 After click the icon, th ere will be a dialog for ent ering the user name and password. Click ok af ter input th e correct user name and password that are in the database of authentication server . The settings of client site are finished.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 97 After finishing the above procedures , we can allow the authenticated port the access the server . If the swit ch port doesn’t be authenticated, the PCs behind the port can’t access the network.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 98 Setting up Classifier & Policy rule to perform Access Control on your Switch Introduction on ACL ACL (Access Control List) is the name of a combination of Classifier and Policy Rule. A classifier groups traf fic into dat a flows accordi[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 99 higher weight of parameter ju st gets the highest weight at all. For example, you have defined the first classifier to have “Source Port” plus “Source Socket” as your rule parameters; and your second cl assifier has only “Destinat[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 100 QoS ACL Flow Example Here is another scenario to help you understanding the flow of ACL. There are totally 4 rules. First rule contains the following: • When there is traffic from Layer 2 VLAN ID = 4094 Any matched packet will be set the[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 101 higher weight than s hallower parameters.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 102 ACL Scenario How should I configure if I only allow certain IP address on a cert ain port to forward its traf fic but deny all others? In the beginning, we need to set up the classifier to group traffic into data flows based on some such a[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 103 GUI configuration of classifier and policy rule. Classifier 1[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 104 Classifier 2[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 105 Classifier 3[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 106 Policy Rule Configuration Policy rule on Classifier 1 Policy rule on classifier 2[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 107 Policy rule on classifier 3[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 108 CLI configuration of classifier and policy rule. Please logon to the Switch by ei ther telnet, SSH or Console. S tep into the configuration mode and put the follow commands: Classifier 1 Switch(config)# classifier AllPort2 source-port 2 Cl[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 109 V erifying your result Connect a PC “A” to the Switch on port2. Connect another PC “B” to the Switch on port10 with IP 172.23.3.191. First set the IP of PC “A” to 172.23.3.120. At this time, PC “A” can ping PC “B”. Howe[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 0 Centralized Management Introduction of SNMPc and NetAtlas With the number of network device increase, the demand to detect and respond to the network failure or external event in a very short time posts a great challenge to network admini[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 111 Overview of SNMPc The following diagram shows the main elements of SNMPc. SNMPc includes the following function ♦ Main Button Bar : Button and controls to execute commands quickly ♦ Edit Button Bar : Button to quickly insert map elemen[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 2 Overview of EMS The following diagram illustrates the main elements in EMS. EMS contains the four main functions. ♦ Menu Shortcut Bar : The buttons execute common commands ♦ Device Panel : This is a graphical device display . ♦ Devi[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 3 Configuration of adding a new device via SNMPc In the following example, we will illustrate how to get started with SNMPc and Netatlas with adding a new device. Follow the procedures from S tep 1 to S tep 11 . Ste p 1 : In the edit button[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 4 Step 2: In the map object prop erties, give the label name and enter the IP address of the selected device. In this example, we configure 172.23.3.1 1 as its IP address of your Switch as shown in Figure 5 Figure 5 Map Object Properties St[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 5 Read Access Mode to SNMP V2c. Figure 6 Read Access mode Step 5: In the map object properti es, select Access tab to set the pa rameters of Read /Write Access Mode to SNMP V2 c shown in Figure 7. Change the value of Read/write Access Mode [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 6 Step 6: In the map object properti es, select Access tab to set the pa rameters of Read community to public as shown in Figure 8. Figure 8 Read Community[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 7 Step 7: In the map object propeies, select Access t ab to set the parameters of Read community to public in Figure 9. Change the value of Read//write Community to Public. Figure 9 Read/write Community Step 8: In the Selection tool menu, C[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 8 Step 9: Af ter the selection, a pop-up m enu will display the NetAtlas switch manager diagram. Click the Switch Manager to enter the EMS Mapping shown in Figure 1 1 Figure 1 1 Device Selection Step 10: In the EMS mapping, it display a l o[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 9 Figure 12. Figure 12 Rootmap Ste p 1 1: Click the your Switch to confi gure the device shown in Figure 13. Figure 13 Device mapping[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 120 VLAN Configuration via EMS In this section, we will give an example to illustrate how to use EMS to create a VLAN2 in GS-4024. Here are the procedures. S tep 1: In the device panel list shown in Figure 12, right-click Configuration , Switc[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 121 Figure 14 Selecting a VLAN T ype After the VLAN type selection, a pop- up window indicate s that you have finished the configuration. Then af ter we have defined the VLAN type to be the 802.1Q, go back to click the Configur ation and then [...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 122 Figure 15. Figure 15 VLAN Configuration Click the New button to create a new VLAN ID in Figure 16. Figure 16 Creating a new VLAN ID Selecting Egress ports and defines them to be tagged or unt agged in Figure 17 Figure 17 Selecting the port[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 123 For more information, reference the user guide of NetAtlas.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 124 Cluster Management Overview Cluster Management allows you to manage up to 24 switches through a single IP to manage up to 24 switches simultaneously in the same broadcast domain and the same VLAN group ID. The cluster manager which can man[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 125 A clustering member listens on UDP port 263. When a clustering member receives a request with the matching signature, it ans wers with a HDAP Discover Response. In the response, the clustering member provides identity information about its[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 126 slave switch. • How to set up Cluster Management in switch S tep 1: Go to menu: “Management” Æ ”Cluster Management” Æ ”Clustering Management Configuration” In “Clustering Management Configuration” pages, check the “Ac[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 127 Select a device in the Clustering Candidate table and enter the p assword which is the admin password for the candidate device to add the clustering member . S tep 3:[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 128 Click on the index number to manage the selected clustering member . S tep 4: In “ Member Menu ” p ages, you can change any setting of the clustering member , except Cluster Management, Firmware Upgrade and Restore Configuration. S tep[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 129 Enter “ Management ”->” Cluster Management ”->” Clustering Management Stat us :” In “ Clustering Management St atus ” p ages, you can check the status for each member . S tep 6: Enter “ Management ”->” Cluste[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 130 checking the remove checkbox and then, click on the Remove button to remove a cluster member .[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 131 Overview of RMON Remote Monitoring (RMON) is a st andard monitoring specification that enables various network monitors and console systems to exchange network-monitoring data. RMON provides network administrators with more freedom in sele[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 132 requirements. Each group is optional so that vendors do not need to support all the groups within the Management Info rmation Base (MIB). Some RMON groups require support of other RMON groups to function properly. Table 1 summarizes the ni[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 133 Matrix Stores and retrieve s statistics for conversations between sets of two addresses. Source and destination address pairs and packets, bytes, and errors for each pair. Filters Enables packets to be matched by a filter equation for capt[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 134 Event (1.3.6.1.2.1.16.9) All groups in this MIB ar e optional. (MIB-II is mandatory ) Scenario (ES-3100 Series supports RMON 1.2.3.9) In this illustration, SNMPc En terprise Edition Version 5.1.6c is installed on the PC. And this PC is def[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 135 In this scenario, we are going to m onitor the Broadcast Packets by using the RMON MIB. The following wi ll demonstrate the steps to monitor the Broadcast Packets by using SNMPc Enterprise Edition Version 5.1.6c. 1. Methodology of Scenario[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 136 2. Secondly, click on the “Mib” tab a nd expend the SNMP Mi bs’ tree. You will find that there is an “r mon” group over there and again you can expend its sub-tree.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 137 3. Right click the “etherStat sTable” and choose “View Table”[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 138 4. Find the interface or port that you ar e looking for. And you can look at the corresponding field and ther efore find the value that you want to monitor. In this case, we are looking for the Broadcast Packets.[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 139 Try to generate some broadcast tr affic from the probe or your network device, then you should see the BroadcastPkts increasing. 5. In conclusion, if the Switch supports RMON, then you can get the values from the Switch in the RMON Group(s[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 140 FA Q What is the default setting of the IP parameters? IP address: 192.168.1.1 Subnet: 255.255.255.0 What is the default logi n Name and Password of the Web Configurator? ID: admin Password: 1234 How to access my SWITCH through the console[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 141 How to change the password? Web Configurator is the only place y ou can change the p assword. After you log in for the first time, it is recommended you change the default administrator password. From Web Configurator: Click Advanced Appli[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 142 2. Power off and then power on the Swit ch, and press any key to enter the debug mode when the screen shows “Pre ss any key to enter Debug Mode within 3 seconds.” 3. T ype “atlc” and press the enter key 4. When the message “start[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 143 Is Online Help available on the Web Configurator? Y es, the Web Configurator ’s Online Help is available. Clicking on the Help link will bring up a description of t he online help of that screen. How to restart device from W eb? 1. Click[...]

ES-3100 Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 144 operating. What is so called "Dual-Personality interface" in Ethernet Switching? Dual-Personality GbE interface means that one 1000Base-T Copper port and one SFP port share the same physical inte rface. Only one of them can be us[...]