ZyXEL Communications ES-2108 manual

ES-2108/ES-2108-G Ethernet Switch User ’ s Guide V ersion 3.60 10/2005 Edition 1[...]

ES-2108/ES- 2108-G Use r’s Guide Copyright 1 Copyright Copyright © 2005 by ZyXEL Communication s Corporation . The contents of this publication ma y not be reproduced in any part or as a whol e, transcribed, stored in a retrieval system, translated into an y language, or transmitted in any fo rm or by any means, electronic, mechanical, magnetic,[...]

ES-2108/ES-2108-G User’s Gu ide 2 Interference Statements and War nings Interference S t atement s and Wa r n i n g s FCC St atement This switch complies with Part 15 of the FCC rules. Operation is subj ect to the following two conditions: 1 This switch may not ca use harmful interference. 2 This switch must accept any interference received , inc[...]

ES-2108/ES- 2108-G Use r’s Guide Interference Statements an d Warnings 3 Certifications 1 Go to www .zyxel.com 2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3 Select the certification you wi sh to view from this page. Registration Register your product online for free future product up[...]

ES-2108/ES-2108-G User’s Gu ide 4 ZyXEL Limited Warranty ZyXEL Limited W arranty ZyXEL warrants to the original end user (purchaser) th at this product is free from any defects in materials or workmanship for a period of up to two year s from the date of purchase. During the warranty period, and upon proof of purchase, sh ould the product have in[...]

ES-2108/ES- 2108-G Use r’s Guide Customer Support 5 Customer Support Please have the following information rea dy when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your device. • Brief description of the problem an d the steps you took to solve it. METHOD LOCATION SUPP[...]

ES-2108/ES-2108-G User’s Gu ide 6 Customer Suppo rt POLAND info@pl.zyxel.com +48-22-5286603 www .pl.zyxel.com ZyXEL Communications ul.Emilli Plater 53 00-1 13 W arszawa Poland +48-22-5206701 RUSSIA http://zyxel.ru/support +7-095-542- 89-29 www .zyxel.ru ZyXEL Russia Ostrovityanova 37a S tr . Moscow , 1 17279 Russia sales@zyxel.ru +7-095-542-89-25[...]

ES-2108/ES- 2108-G Use r’s Guide Table of Contents 7 T able of Content s Copyright .................................... .............................................................................. 1 Interference S tatement s and W arnings ......................................... ......................... 2 ZyXEL Limited W arranty .............[...]

ES-2108/ES-2108-G User’s Gu ide 8 Table of Contents 3.1.1 Console Port .. ................. ................ ................ ................ ................ ........ 34 3.1.2 Ethernet Ports ........... ................ ................ ................. ................ .............. 34 3.1.2.1 Default Ethernet Set tings .... ................[...]

ES-2108/ES- 2108-G Use r’s Guide Table of Contents 9 7.7 IP Setup ........ ................ ................ ................ ................ ................ ................. . 62 7.7.1 Management IP Addresses . ................ ................... ................ ................. . 62 7.8 Port Setup .............. ................. ........[...]

ES-2108/ES-2108-G User’s Gu ide 10 Table of Contents Chapter 13 Broadcast St orm Control .................................................... .................................. 89 13.1 Overview ..................... ................ ................ ................ ................ ................ ..... 89 13.2 Broadcast S torm Control Setup . [...]

ES-2108/ES- 2108-G Use r’s Guide Table of Contents 11 Chapter 20 Differentiated Services ........................................................................................ 107 20.1 Overview ..................... ................ ................ ................ ................ ................ ... 107 20.1.1 DSCP and Per-Hop Behavior ....[...]

ES-2108/ES-2108-G User’s Gu ide 12 Table of Contents 22.10 Service Port Access Control .. ... .......... ................ ................ ................ ...... 128 22.1 1 Remote Management ......... ......... ... ................. ................ ................ ......... 129 Chapter 23 Diagnostic.............................................[...]

ES-2108/ES- 2108-G Use r’s Guide Table of Contents 13 27.8 Saving Y our Configuration ................ ............. ................ ................ ................ 149 27.8.1 Logging Out ................ ................ .................... ................ ................ ...... 149 27.9 Command Summary ... ................ ...............[...]

ES-2108/ES-2108-G User’s Gu ide 14 Table of Contents Chapter 29 IEEE 802.1Q T agged VLAN Commands ................................................... .......... 181 29.1 IEEE 802.1Q T agged VL AN Overview ....... ................ ................ ............. ...... 181 29.2 VLAN Databases ........... ................ ................ ..........[...]

ES-2108/ES- 2108-G Use r’s Guide List of Figure s 15 List of Figures Figure 1 Backbone Application ................ ................ .................... ................ .......... 26 Figure 2 Bridging Application .. .......... ... ................ ................ ................ ................. 26 Figure 3 High Performance Switched Applicat[...]

ES-2108/ES-2108-G User’s Gu ide 16 List of Figures Figure 39 Filtering .... ... .......... ................ ................ ................ ................ ................. 79 Figure 40 S panning T ree Prot ocol: S tatus ......... ................ ................ ................ .... 83 Figure 41 S panning T ree Prot ocol: Config uration . [...]

ES-2108/ES- 2108-G Use r’s Guide List of Figure s 17 Figure 82 Diagnostic ................ ................ ................ ................. ................... .......... 131 Figure 83 Clustering Applicat ion Example .. .................... ................ ................... .... 133 Figure 84 Cluster Management: S tatus .......... .........[...]

ES-2108/ES-2108-G User’s Gu ide 18 List of Figures Figure 125 qos priority Command Example ............ ................. ................... .......... 179 Figure 126 name Command Example ............... ................... ................ ................. 180 Figure 127 speed-duplex Command Example .. ................ ................ .......[...]

ES-2108/ES- 2108-G Use r’s Guide List of Tables 19 List of T ables T able 1 Front Panel ........... ................ ................... ................ .................... ............. 33 T able 2 Front Panel LED s ........ ................ ................ .................... ................ .......... 37 T able 3 Navigation Panel Sub-link[...]

ES-2108/ES-2108-G User’s Gu ide 20 List of Tables T able 39 DiffServ: DSCP Setting .......... ................ .................... ................ ............. 109 T able 40 Maintenance .......... ................ ................ .................... ................ ............. 1 1 1 T able 41 Filename Conventions ........ ................[...]

ES-2108/ES- 2108-G Use r’s Guide Preface 21 Preface Congratulations on your p u rchase of the ES-2108/ES-2 108-G Ethernet Switch. This preface introduces you to the ES-2108/ ES-2108-G Ethernet Switch and discusses the conventions of this User ’ s Guide. It also provides information on other related documentation. Note: Register your product onl[...]

ES-2108/ES-2108-G User’s Gu ide 22 Preface Graphics Icons Key User Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The T echnical W riting T eam, ZyXEL Communications Corp., 6 In novatio n Road II, Science-Based Industrial Park, H[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 1 Getting to K now Your Switch 23 C HAPTER 1 Getting to Know Y our Switch This chapter introduces the main feat ures and applications of the switch. 1.1 Introduction The switch is a stand-alone layer-2 Ethernet switch with eight 10/100Mbps ports. The ES- 2108-G also includes one Gigabit /Mini-GBIC port. W [...]

ES-2108/ES-2108-G User’s Gu ide 24 Chapte r 1 Getting to Know Your Switch Queuing Queuing is used to help solv e performance degradation when there is network congestion. T wo scheduling services are supported: Strict Priority Queuing (SPQ ) and W eighted R ound Robin (WRR). This allows the switch to main tain separate que ues for packets from ea[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 1 Getting to K now Your Switch 25 Cluster management (also kn own as iStackin g) allows you to ma nage switches through one switch, called the cluster manager . The switc hes must be directly connected and be in the same VLAN group s o as to be ab le to communicate with one another . • Configuration and [...]

ES-2108/ES-2108-G User’s Gu ide 26 Chapte r 1 Getting to Know Your Switch Figure 1 Backbone Application 1.4.2 Bridging Example In this example application the switch connects dif ferent company departme nts ( RD and Sales ) to the corpora te backbone. It can allevi ate bandwidth conten tion and eliminate server and network bottlenecks. All users [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 1 Getting to K now Your Switch 27 Switching to higher-speed LA Ns such as A T M (Asynchronous T ransmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring y our network and comp lex maintenance. The switch can provide the [...]

ES-2108/ES-2108-G User’s Gu ide 28 Chapte r 1 Getting to Know Your Switch Figure 4 T ag-based VLAN Application 1.4.4.2 VLAN Shared Server Exa mple Shared resources such as a server can be us ed by all ports in the same VLAN as the server , as shown in the following example. In this example, only ports that need access to the server need belong to[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 2 Hardware Installation and Connection 29 C HAPTER 2 Hardware Inst allation and Connection This chapter shows you how to in stall and connect the switch. 2.1 Freest anding Inst allation 1 Make sure the switch is clean and dry . 2 Set the switch on a smooth, level surface st rong enough to support the weigh[...]

ES-2108/ES-2108-G User’s Gu ide 30 Chapter 2 Hardware Inst allation and Conne ction 2.2 Mounting the Switch on a Rack This section lists the rack mounting requirements and precautions and describes the installation steps. 2.2.1 Rack-mounted Installation Requirement s • T wo mounting brackets. • Eight M3 flat head screws and a #2 Philips screw[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 2 Hardware Installation and Connection 31 Figure 8 Mounting the Switch on a Ra ck 2 Using a #2 Philips screwdriver , install the M5 flat head screws through the mounting bracket holes into the rack. 3 Repeat steps 1 and 2 to attach the second mounting bracke t on the other side of the rack.[...]

ES-2108/ES-2108-G User’s Gu ide 32 Chapter 2 Hardware Inst allation and Conne ction[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 3 Hardware Overview 33 C HAPTER 3 Hardware Overview This chapter describes the front panel a nd rear pa nel of the switch and shows you how to make the hardware conn ections. 3.1 Front Panel Connection The figure below shows the fro nt panel of the switch. Figure 9 Front Panel: ES-2108 Figure 10 Front Pane[...]

ES-2108/ES-2108-G User’s Gu ide 34 Chapter 3 Hardware Overview 3.1.1 Console Port For local management, you can use a computer w ith terminal emulation software configured to the following parameters: • VT100 terminal emulation • 9600 bps • No parity , 8 data bits, 1 stop bit • No flow control Connect the male 9-pin end of the console cab[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 3 Hardware Overview 35 There is one Gigabit Ethernet and mini -GBIC port each. The mini-GBIC port has priority over the Gigabit port. This means that if the mini-GBIC port and the corresponding Gi gabit port are connected at the same time, the Gigabit port will be disabled. Y ou can change transceivers whi[...]

ES-2108/ES-2108-G User’s Gu ide 36 Chapter 3 Hardware Overview Figure 12 Installed T ran sceiver 3.1.3.2 T ranscei v er Removal Use the following steps to remove a mini GBIC transceiver (SFP module). 1 Open the transceiver ’ s latch (latch styles vary). Figure 13 Opening the T ransceiver ’s Latch Example 2 Pull the transceiver out of the slot[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 3 Hardware Overview 37 3.2 Rear Panel The following figure shows the rear panel of the switch. The power receptacle is on the rear panel. Figure 15 Rear Panel 3.2.1 Power Connector Make sure you are using the correct power source as shown on the panel. T o connect the power to the sw itch, insert the femal[...]

ES-2108/ES-2108-G User’s Gu ide 38 Chapter 3 Hardware Overview 100/1000 Green On The link to a 1000 Mbps Ethernet network is up. Amber On The link to a 100 Mbps Ethernet network is up. Off The link to an Ethernet network is dow n. ACT Green Blinking The po rt is receiving or transmitting data. On The port has a connection to an Ethernet network b[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 4 The Web Configurator 39 C HAPTER 4 The W eb Configurator This section introduces the con figuration and functions of the web configurator . 4.1 Introduction The web configu rator is an HTML-based mana ge ment interface that allows easy switch setup and management via Interne t browser . Use In ternet Exp[...]

ES-2108/ES-2108-G User’s Gu ide 40 Chapter 4 The Web Configurator 4 Click OK to view the first web configurator screen. 4.3 The St atus Screen The St a t u s screen is the first screen that displa ys when yo u access the web configura tor . The following figure shows the navigat ing co mponen ts of a web configurator screen. Figure 17 Web Configu[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 4 The Web Configurator 41 The following table lists the various web configurator screens within the sub-links. The following table describes the links in the navigation panel. Table 4 Web Configurator Screen Sub- links Details BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT System Info General[...]

ES-2108/ES-2108-G User’s Gu ide 42 Chapter 4 The Web Configurator Advanced Application VLAN This link takes you to screens where you can configure port-based or 802 .1Q VLAN (depending on what you configur ed in the Switch Setup menu). St a t i c M A C Forwarding This link takes you to screens where you can configure static MAC addresses for a po[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 4 The Web Configurator 43 4.3.1 Change Y our Password After you log in for the first time, it is reco mmended y ou change the default admin istrator password. Click Management , Access Control and then Logins to display the next screen. Figure 18 Change Administr ator Login Password 4.4 Switch Lockout Y ou[...]

ES-2108/ES-2108-G User’s Gu ide 44 Chapter 4 The Web Configurator 4.5.1 Reload the Factory-default Con figuration File Uploading the factory-default conf iguration file replaces the current configuration file with the factory-default configuration file. This means that you will lose all pr evious configurations and the speed of the console port w[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 4 The Web Configurator 45 Figure 20 Web Configu rator: Logout Screen 4.7 Help The web configur ator ’ s online help has des criptions of individual screen s and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen.[...]

ES-2108/ES-2108-G User’s Gu ide 46 Chapter 4 The Web Configurator[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 5 Initial Setup Example 47 C HAPTER 5 Initial Setup Example This chapter shows how to set up the switch for an example network. 5.1 Overview The following lists the configuration steps for the initial setup: • Create a V LAN • Set port VLAN ID • Configure the switch IP management address 5.1.1 Creati[...]

ES-2108/ES-2108-G User’s Gu ide 48 Chapter 5 Initial Setup Example 1 Click Advanced App lication and VLAN in the navigation panel and click the St a t i c VLAN link. 2 In the S tatic VLAN screen, select ACTIVE , enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field i[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 5 Initial Setup Example 49 In the example network, configure 2 as the port VID on port 5 so that any untagged frames received on that port get sent to VLAN 2. Figure 22 Initial Setup Network Example: Port VID 1 Click Advanced Applications and VLAN in the navigation panel. Then click the VLAN Port Setting l[...]

ES-2108/ES-2108-G User’s Gu ide 50 Chapter 5 Initial Setup Example Figure 23 Initial Setup Examp le: Management IP Address 1 Connect your computer to any Ethernet port on the switch. Make sure yo ur computer is in the same subnet as the switch. 2 Open your web browser and enter 19 2.168.1.1 (the default IP add ress) in the address bar to access t[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 6 Syst em Status an d Port Statistics 51 C HAPTER 6 System S t atus and Port S t atistics This chapter describes the system status (web configurator ho me page) and port details screens. 6.1 Overview The home screen o f the web configurator dis plays a port statistical summary table with links to each port[...]

ES-2108/ES-2108-G User’s Gu ide 52 Chapter 6 System Status and Port Statistics 6.2.1 St atus: Port Details Click a number in the Port column in the St a t u s screen to display indivi dual port statistics. Use this screen to check status and detailed performance data about an individual port on the switch. Table 6 Status LABEL DESCRIPTION System [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 6 Syst em Status an d Port Statistics 53 Figure 25 S tatus: Port Details The following table describes the labels in this screen. Table 7 Status: Port Details LABEL DESCRIPTION Port Info Link This field shows whe ther the Ethernet connection is do wn, and the speed /duplex mode. S tatus This field shows th[...]

ES-2108/ES-2108-G User’s Gu ide 54 Chapter 6 System Status and Port Statistics TX Packet This field shows the number of good packets (unicast, multicast and broadcast) transmitte d. Multicast This field shows the number of good multicast packets transmitted. Broadcast This field shows the number of good broadcast packets transmitted. Pause This f[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 6 Syst em Status an d Port Statistics 55 Poll Interval(s) The text box displays how often (in seconds) this screen refreshes. Y ou may change the refresh interval by typing a new number in the text bo x and then clicking Set Interval . S top Click St op to stop port statistic polling. Table 7 Status: Port [...]

ES-2108/ES-2108-G User’s Gu ide 56 Chapter 6 System Status and Port Statistics[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 7 Basic Setting 57 C HAPTER 7 Basic Setting This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. 7.1 Overview The System Info screen displays general switch info rmation (such as fi rmware version number) and hardware polling inform ation [...]

ES-2108/ES-2108-G User’s Gu ide 58 Chapter 7 Basic Setting 7.3 General Setup Click Basic Setting and General Setup in the navigation panel to display the screen as sh own. Figure 27 General Setup The following table describes the labels in this screen. Poll Interval(s) The text box displays how often (in seconds) this screen refreshes. Y ou may c[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 7 Basic Setting 59 7.4 Introduction to VLANs A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Device s on a logical network belong to one group. A device can belong to more than one group. W ith VLAN, a device cannot directly talk to or hear f[...]

ES-2108/ES-2108-G User’s Gu ide 60 Chapter 7 Basic Setting In MTU (Multi-T enant Unit) app lications, VLAN is v ital in providing is olation and security among the subscribers. When properly conf igured, VLAN prevents one subscr iber from accessing the network resources of another on the same LAN, thus a user will not see the printers and hard di[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 7 Basic Setting 61 Figure 28 Switch Setup The following table describes the labels in this screen. Table 10 Switch Setup LABEL DESCRIPTION VLAN T ype Choose 802.1Q or Port Based . The VLAN Se tup screen changes d epending on whether you choose 802.1Q VLAN type or Port Based VLAN type in th is screen. See C[...]

ES-2108/ES-2108-G User’s Gu ide 62 Chapter 7 Basic Setting 7.7 IP Setup Use the IP Setup screen to configure the default gate way device, the default domain name server and add switch IP address. 7.7.1 Manage ment IP Addresses The switch needs an IP address for it to be mana ged over the network. The factory default IP address is 192.168.1.1. The[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 7 Basic Setting 63 Figure 29 IP Setup The following table describes the labels in this screen. Ta b l e 11 IP Setup LABEL DESCRIPTION Domain Name Server DNS (Domain Name System) is for mapping a doma in name to its corresponding IP address and vice versa. Enter a domain name serve r IP address in order to [...]

ES-2108/ES-2108-G User’s Gu ide 64 Chapter 7 Basic Setting 7.8 Port Setup Click Basic Setting and the n Port Setup in the navig ation pane l to enter the por t configuration screen. VID Enter the VLAN identification number asso ci ated with the switch IP address. This is the VLAN ID of the CPU and is used for managem ent only . The default is &qu[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 7 Basic Setting 65 Figure 30 Port Setup The following table describes the labels in this screen. Table 12 Port Setup LABEL DESCRIPTION Port This is the port index number . Active Select this check box to enable a port. The factory default for all ports is enabled. A port must be enabled for data transmissi[...]

ES-2108/ES-2108-G User’s Gu ide 66 Chapter 7 Basic Setting 802.1P Priority This prio rity value is added to inco ming frames without a (802. 1p) priority queue tag. See Priority Queue Assi gnment in T able 10 on page 61 for more information. Apply Click Apply t o save the settings. Cancel Click Cance l to reset the fields to your previous configu[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 8 VLAN 67 C HAPTER 8 VLAN The type of screen you see here depends o n the VLAN T ype you selected in the Switch Setup screen. This chapter shows you how to conf igure 802.1Q tagge d and port-based VLANs. 8.1 Introduction to IEEE 802.1Q T agged VLAN A tagged VLAN uses an explicit tag (VLAN ID) in the MAC he[...]

ES-2108/ES-2108-G User’s Gu ide 68 Chapter 8 VLAN 8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to auto matically register VLAN membership acros s switches. 8.2.1 GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de- register attribute values with other GARP par ticipants within a b[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 8 VLAN 69 8.3 Port VLAN T runking Enable VLAN T runking on a port to allow frames b elonging to unknown VLAN groups to pass through that port. This is useful if yo u want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices. Refer to the following fi[...]

ES-2108/ES-2108-G User’s Gu ide 70 Chapter 8 VLAN Figure 32 Switch Setup: Se lect VLAN T ype 8.5 St atic VLAN Use a static VLAN to decide whether an incoming frame on a port should be • sent to a VLAN group as normal d epends on its VLAN tag. • sent to a group whether it has a VLAN tag or not. • blocked from a VLAN group regardless of its V[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 8 VLAN 71 8.5.2 Configure a St atic VLAN T o configure a static VLAN, click St a t i c V L A N in the VLAN S tatus scree n to display the screen as shown next. Port Number This column displays the ports that are participating in a VLAN. A tagged port is marked as T , an untagged port is marked as U and por[...]

ES-2108/ES-2108-G User’s Gu ide 72 Chapter 8 VLAN Figure 34 VLAN: S tatic VLAN The following table describes the rela ted labels in this screen. Table 15 VLAN: S tatic VLAN LABEL DESCRIPTION ACTIVE Select this check box to act ivate the VLAN settings. Name Enter a de scriptive name for the VL AN group fo r identification purposes. VLAN Group ID E[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 8 VLAN 73 8.5.3 Configure VLAN Port Settings T o configure the VLAN settings on a port, click the VLAN Port Setting link in the VLAN St a t u s screen. Figure 35 VLAN: VLAN Port Setting The following table describes the labels in this screen. Table 16 VLAN: VLAN Port Setting LABEL DESCRIPTION GVRP GVRP (GA[...]

ES-2108/ES-2108-G User’s Gu ide 74 Chapter 8 VLAN 8.6 Port-based VLAN Setup Port-based VLANs are VLANs where the packet forwarding de cision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each port. Therefore, if you wish to allow two subscriber ports to talk to e[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 8 VLAN 75 Figure 36 Port Based VLAN Se tup (All Conn ected) Figure 37 Port Based VLAN Setu p (Port Isolation) The following table describes the labels in this screen.[...]

ES-2108/ES-2108-G User’s Gu ide 76 Chapter 8 VLAN Table 17 Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose All connected or Port isolat ion . All connecte d mea ns all ports can communicate wit h each other , th at is, there are no virtual LANs. All incoming and outgoi ng ports are selected. This option is th e most flexible but al [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 9 Static MAC Fo rwarding 77 C HAPTER 9 S t atic MAC Forwarding Use these screens to configure static MAC address forwarding. 9.1 Overview A static MAC address is an address that has been ma nually entered in the MAC addres s table. St atic MAC addresses d o not age out. Wh en you set up static MAC address [...]

ES-2108/ES-2108-G User’s Gu ide 78 Chapter 9 Static MAC Forwarding Table 18 S tatic MAC Forw arding LABEL DESCRIPTION Active Select this check box to activate your rule. Y ou may temporarily deacti vate a rule without deleting it by clearing this check box. Name Ente r a descriptive name for identification purposes for this static MAC address for[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 10 Filtering 79 C HAPTER 10 Filtering This chapter discusses static IP and MAC address port filtering. 10.1 Overview Port filtering means discarding (or dropping ) packets based on th e MAC addresses and VLAN group. 10.2 Configure a Filtering Rule Click Advanced App lication and Filtering in the navigation[...]

ES-2108/ES-2108-G User’s Gu ide 80 Chapter 10 Fil tering Add Click Add to save the new ru le to the switch. It then displays in the summary table at the bottom of the screen. Cancel Click Cancel to reset the fi elds to your previous configuration. Clear Click Clear to clear the fields to the factory defaults. Index This field displays the index n[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 11 S panning Tr ee Protocol 81 C HAPTER 11 S p anning T ree Protocol This chapter introduces the Sp anning T ree Protocol (STP). 1 1.1 Overview STP detects and breaks network loops and provide s backup links betw een switches, bridge s or routers. It allows a switch to interact with other STP- compliant sw[...]

ES-2108/ES-2108-G User’s Gu ide 82 Chapter 11 Spanning Tree Prot ocol 1 1.1.2 How STP Works After a bridge determines the lowest cost-spanni ng tree with STP , it enables the root port and the ports that are the designat ed ports for connected LANs, a nd disables all other ports that participate in STP . Network packets are ther efore only forwar[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 11 S panning Tr ee Protocol 83 Figure 40 S panning T ree Protocol: S tatus The following table describes the labels in this screen. Table 22 S panning T ree Protocol: S tatus LABEL DESCRIPTION S panning Tree Protocol This field displ ays Running if STP is activated. Otherwise, it displays Down . Configurat[...]

ES-2108/ES-2108-G User’s Gu ide 84 Chapter 11 Spanning Tree Prot ocol 1 1.3 Configure STP T o configure STP , click the Configuration link in the Spanning T ree Pr otocol screen as shown next. Figure 41 S panning T ree Protocol: Configuration The following table describes the labels in this screen. Polling Interval The text box displays how often[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 11 S panning Tr ee Protocol 85 Bridge Prio rity Bridge priority is used in determini ng the root switch, root port and designated port. The switch with the highest priority (low est numeric value) becomes the STP root switch. If all switches have the same priority , the switch with the lowest MAC address w[...]

ES-2108/ES-2108-G User’s Gu ide 86 Chapter 11 Spanning Tree Prot ocol[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 12 Bandwidth Control 87 C HAPTER 12 Bandwid th Control This chapter shows you h o w you can cap the maximum bandwi dth using the Bandwidth Control screen. 12.1 Bandwid th Control Setup Bandwidth control mean s defining a maximum allowable bandwidth for incoming and/or out- going traf fic flows on a port. C[...]

ES-2108/ES-2108-G User’s Gu ide 88 Chapter 12 Bandwidth Control Ingress Rate S pecify the maximum bandwidth allowed in Kilo bits per second (Kbps) for the incoming traff i c flow on a port. If you enter a number between 64 and 1728, th e switch automatically rounds the number down to the nearest multipl e of 64. If you enter a number between 1729[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 13 Broadcast Storm Control 89 C HAPTER 13 Broadcast S torm Control This chapter introduces and sh ows you how to configure t he broadcast storm control feat ure. 13.1 Overview Broadcast storm control limits the number o f broa dcast frames that can be stored in the switch buffer or sent out from the switch[...]

ES-2108/ES-2108-G User’s Gu ide 90 Ch apter 13 Broadcast Sto rm Control Table 25 Broadcast S torm Control LABEL DESCRIPTION Active Select this check box to enable broadcast storm cont rol on the switch. Clear this check box to disable the feature. Port This field displays a port number . Active Select this check box to enable broadcast storm cont[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 14 Mirroring 91 C HAPTER 14 Mirroring This chapter discusses the Mirror setup screens. 14.1 Overview Port mirroring allows you to copy a traf fic flow to a mirror port (the port you copy the traffic to) in order that you can examine the traffi c from the mirror port without interference. 14.2 Port Mirrorin[...]

ES-2108/ES-2108-G User’s Gu ide 92 Chapter 14 Mirroring Table 26 Mirroring LABEL DESCRIPTION Active Clear this check box to deactivate port mirroring on the switch. Mirror Port The mirror port is the port you copy the tr affic to in order to examine it in more detail without interfering with the traffic flow on the original port(s). Select this p[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 15 Link Aggregation 93 C HAPTER 15 Link Aggregation This chapter shows you how to logically aggreg ate physical links to fo rm one logical, higher - bandwidth link. 15.1 Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. Y ou may want to trunk port[...]

ES-2108/ES-2108-G User’s Gu ide 94 Chapter 15 Link Aggregation 15.2.1 Link Aggregation ID LACP aggregation ID consists of the following information 1 : 15.3 Link Aggregation St atus Click Advanced App lication , Link Aggr egation in the navigation panel. The Li nk Aggregation Control Pr otocol S t atus screen displays by default. Figure 45 Link A[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 15 Link Aggregation 95 15.4 Link Aggregation Setup Click Configuration in the Link Aggr egation Control P rotocol S tatus screen to display the screen shown next. Table 29 Link Aggregation Control Protocol S tatus LABEL DESCRIPTION Index This field di splays the trunk ID to identif y a trunk group, that is[...]

ES-2108/ES-2108-G User’s Gu ide 96 Chapter 15 Link Aggregation Figure 46 Link Aggregation: Configuration The following table describes the labels in this screen. Table 30 Link Aggregation Control Protocol: Configur ation LABEL DESCRIPTION Link Aggregation Control Protocol Active Select this checkbox to enable Link Aggregati on Control Protocol (L[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 16 Port Authentication 97 C HAPTER 16 Port Authentication This chapter describes the 802.1x authenti cation method and RADIUS server connection setup. 16.1 Overview IEEE 802.1x is an extended authenticat ion protocol 2 that allows support of RADIUS (Remote Authentication Dial In User Service, RFC 2138, 213[...]

ES-2108/ES-2108-G User’s Gu ide 98 Chapter 16 P ort Authenticati on Figure 48 Port Authentication 16.2.1 Activate IEEE 802.1x Security From the Port Authentication screen, display the config uration screen as shown. Figure 49 Port Authentication: 802.1x The following table describes the labels in this screen. Table 31 Port Authentication: 802.1x [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 16 Port Authentication 99 16.2.2 Configuring RADI US Server Settings From the Port Authentication screen, click RADIUS to display the conf iguration screen as shown. Figure 50 Port Authentication: RADIUS The following table describes the labels in this screen. Table 32 Port Authentication: RADIUS LABEL DES[...]

ES-2108/ES-2108-G User’s Gu ide 100 Chapter 1 6 Port Aut hentication[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 17 Port Security 101 C HAPTER 17 Port Security This chapter shows you how to set up port security . 17.1 Overview Port security allows only packets w ith dynami cally learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch. For maximum port security , enable this f[...]

ES-2108/ES-2108-G User’s Gu ide 102 Chapter 17 Port Security The following table describes the labels in this screen. Table 33 Port Security LABEL DESCRIPTION Active Select th is check box to enable the port security feature on the switch. Port This field displays a port number . Active Select th is check box to enable the port security feature o[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 18 Q ueuing Me thod 103 C HAPTER 18 Queuing Method This chapter introduces th e queuing methods sup ported. 18.1 Overview Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorith ms for outgoing traf fic. See also Pr[...]

ES-2108/ES-2108-G User’s Gu ide 104 Chapter 18 Que uing Method W eighted Round Robin Sc heduling (WRR) uses the same alg orithm as round robin scheduling, but services queues based on their priority and queue weig ht (the number you configure in the queue We i g h t field) rather than a fixe d amount of bandwidth. WRR is activated only when a por[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 19 Static Rout e 105 C HAPTER 19 S t atic Route This chapter shows you how to configure static routes. 19.1 Configuring S t atic Route Stat ic routes tell the switch how to forwar d IP traffic when you configure the TCP/IP parameters manually . Click IP Application , S tatic Routing in the navigation panel[...]

ES-2108/ES-2108-G User’s Gu ide 106 Chapter 19 Static Route Metric The metric represents the “cost” of trans mission for routing pu rposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number ne ed not be precise, but it [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 20 Different iated Services 107 C HAPTER 20 Differentiated Services This chapter shows you how to configure Dif ferentiated Servi ces (Dif fServ) on the switch. 20.1 Overview Quality of Service (QoS) mechanisms provide th e best service on a per -flow guarantee. T o fine-tune the levels of services on the [...]

ES-2108/ES-2108-G User’s Gu ide 108 Chapter 20 Differentiated Services Figure 55 DiffServ Network Exam ple Switch A marks traf fic flowing into the network based on the configured marking rules. Intermediary network devices 1 and 2 allocate network resources (such as bandwidth ) by mapping the DSCP values and the associated polic ies. 20.2 Activa[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 20 Different iated Services 109 20.3 DSCP-to-IEEE802.1p Priority Mapping Y ou can configure the DSCP to IEEE802.1p mapp ing to allow the switch to prioritize all traffic based on the incoming D SCP value accord ing to the DiffServ to IEEE802.1p mapping table. The following table shows t he default DSCP-to-[...]

ES-2108/ES-2108-G User’s Gu ide 110 Chapter 20 Differentiated Services[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 21 Maintenance 111 C HAPTER 21 Maintenance This chapter explains how to configure the ma intenance screens that let you maintain the firmware and configuration files. 21.1 The Maintenance Screen Click Management , Maintenance in the navigation panel to open the following scre en. Figure 58 Maintenanc e The[...]

ES-2108/ES-2108-G User’s Gu ide 112 Chapter 21 Maintenance 21.2 Firmware Upgrade Make sure you have downloaded (and unzip ped ) the correct model firmware and version to your computer b efore uploading to t he device. Note: Be sure to upload the correct model firmware as uplo ading the wrong model firmware may damage your device. From the Mainten[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 21 Maintenance 113 21.4 Backing Up a Configuration File Backing up your switc h configurations allow s you to create various “snap shots” of your device from which yo u may restore at a later date. Back up your current switch config uration to a computer using the Back up Configura tion screen. Figure [...]

ES-2108/ES-2108-G User’s Gu ide 114 Chapter 21 Maintenance Figure 63 Load Factory Default: S tart 3 Click OK to begin resetting all switch configurations to the factory defaults and then wait for the switch to restart. This takes up to two minutes. If you want to access the switch web configurator again, yo u may need to change the IP address of [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 21 Maintenance 115 ZyNOS (ZyXEL Network Operating System someti mes referred to as the “ras” file) is the system firmware and has a “bin” filename extension. 21.7.1.1 Example FTP Commands ftp> put firmware.bin ras This is a sample FTP session showing the transfer of the computer file "firmw[...]

ES-2108/ES-2108-G User’s Gu ide 116 Chapter 21 Maintenance 7 Enter quit to exit the ftp prompt. 21.7.3 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients. 21.7.4 FTP Restrictions FTP will not work when: • FTP service is disabled in the Access Control screen. • The IP address(es) [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 22 Access Control 117 C HAPTER 22 Access Control This chapter describes how to control access to the switch. 22.1 Overview • A console port access control session and T e lnet access control session cannot coexist. The console port has higher priority . If you telnet to the switch an d someone is already[...]

ES-2108/ES-2108-G User’s Gu ide 118 Chapter 22 Access Control 22.3 About SNMP Simple Network Management Protocol (SNMP) is an application lay e r protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between th e network manageme nt system (NMS) and a network element (NE). A manager station can [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 22 Access Control 119 22.3.1 Supported MIBs MIBs let administrators collect statisti c s and monitor status and performance. The switch supports the following MIBs: • SNMP MIB II (RFC 1213) • RFC 1 157 SNMP v1 • RFC 1493 Bridge MIBs • RFC 1643 Ethernet MIBs • RFC 1 155 SMI • RFC 2674 SNMPv2, SN[...]

ES-2108/ES-2108-G User’s Gu ide 120 Chapter 22 Access Control Figure 69 Access Control: SNMP The following table describes the labels in this screen. 22.4 Setting Up Login Account s Up to five people (one ad ministrator and fo ur non-administrators) may access the switch via web configurator at any one time. • An administrator is someone who ca[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 22 Access Control 121 Figure 70 Access Control: Logins The following table describes the labels in this screen. 22.5 SSH Overview Unlike T elnet or FTP , which transmit data in clear text, SSH (Secure Shell) is a secure communication protoc ol that combines authenticatio n and data encryption to provide se[...]

ES-2108/ES-2108-G User’s Gu ide 122 Chapter 22 Access Control Figure 71 SSH Communication Example 22.6 How SSH works The following table summarizes how a secure c onnection is establishe d between two re mote hosts. Figure 72 How SSH W orks 1 Host Identification The SSH client s ends a conn ection request to the SSH server . The server identifies[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 22 Access Control 123 3 Authentication and Data T ransmission After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server . The client then sends its authentication information (user name and password) to the server to log in to the s[...]

ES-2108/ES-2108-G User’s Gu ide 124 Chapter 22 Access Control Figure 73 SSH Login Example 22.8 Introduction to HTTPS HTTPS (Hyper T ext T ransfer Protocol over Secure Socket Layer , or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application- level protocol that enables secure transactions[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 22 Access Control 125 1 HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the switch’ s WS (web server). 2 HTTP connection requests from a web browser go to port 80 (by default) on the switch’ s WS (web server). Figure 74 HTTPS Implementation Note: If you disable HT[...]

ES-2108/ES-2108-G User’s Gu ide 126 Chapter 22 Access Control Figure 75 Security Aler t Dialog Box (I nternet Explor er) 22.9.2 Net scape Navigator W arning Messages When you attempt to access the switch HTTPS server , a W ebsite Certified by an Unknown Authority screen pops up asking if you trus t the server certificate. Click Examine Certi fica[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 22 Access Control 127 Figure 77 Security Certificate 2 (Net scape) 22.9.3 The Main Screen After you accept the certificat e an d enter the login username and password, the switch main screen appears. The lock displayed in the botto m right of the browser status bar denotes a secure conn ection.[...]

ES-2108/ES-2108-G User’s Gu ide 128 Chapter 22 Access Control Figure 78 Login Screen (Internet Explo r er) Figure 79 Login Screen (Net scape) 22.10 Service Port Access Control Service Access Control allows you to decide what services you may use to access the switch. Y ou may also change the default service port an d config ure “trusted co mput[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 22 Access Control 129 back to the main Access Control screen. Figure 80 Access Control: Service Access Control The following table describes th e fields in this screen. 22.1 1 Remote Management From the Access Control screen, display the Remote Management screen as shown next. Y ou can specify a group of o[...]

ES-2108/ES-2108-G User’s Gu ide 130 Chapter 22 Access Control Figure 81 Access Control: Remote Management The following table describes the labels in this screen. Table 48 Access Control: Remote Management LABEL DESCRIPTION Entry This is the client set index number. A “cl i ent set” is a group of one or more “trusted computers” from which[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 23 Diagnostic 131 C HAPTER 23 Diagnostic This chapter explains the Diagnostic screen. 23.1 Diagnostic Click Management , Diagnostic in the navi gation pane l to open th is scree n. Use this screen to check system logs, reset the sy stem or ping IP addresses. Figure 82 Diagnostic The following table describ[...]

ES-2108/ES-2108-G User’s Gu ide 132 Chapter 23 Diagnostic[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 24 Clu ster Manage ment 133 C HAPTER 24 Cluster Management This chapter introduces cluster management. 24.1 Overview Cluster Managemen t allows you to manage s witches through one switch, ca lled the cluster manager . The switches must be directly connec ted and be in the same VLAN group so as to be able t[...]

ES-2108/ES-2108-G User’s Gu ide 134 Chapter 24 Cluste r Management 24.2 Cluster Management S t atus Click Management , Cluster Management in the navigation panel to display the following screen. Note: A cluster can only have one manager . Figure 84 Cluster Managemen t: S tatus The following table describes the labels in this screen. Table 51 Clus[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 24 Clu ster Manage ment 135 24.2.1 Cluster Member Switch Management Go to the Clustering Management S tatus screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web configurator home page. This cluster me mber web config[...]

ES-2108/ES-2108-G User’s Gu ide 136 Chapter 24 Cluste r Management Figure 86 Example: Up loading Firmw are to a Cluster Member Switch The following table explains some of the FTP parameters. 24.3 Configuring Cluster Management Click Configuration from the Clu ster Management screen to display the next screen. C:>ftp 192.168.1.1 Connected to 1[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 24 Clu ster Manage ment 137 Figure 87 Clustering Managemen t Configuration The following table describes the labels in this screen. Table 53 Clustering Mana gement Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this switch become the cluster manager switch. A cluster can on[...]

ES-2108/ES-2108-G User’s Gu ide 138 Chapter 24 Cluste r Management Password Each cluster member ’s p assword is its web configurator password. Select a member in the Clustering Cand idate list and then enter its web configurator password. If that switch administrato r changes the web configurator password afterwards, then it cannot be managed f[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 25 MAC Table 139 C HAPTER 25 MAC T able This chapter introduces the MAC T able scre en. 25.1 Overview The MAC T able screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the switch’ s ports. It shows what device MAC address, belonging to what VLAN g[...]

ES-2108/ES-2108-G User’s Gu ide 140 Chapter 25 MAC Table 25.2 V iewing the MAC T able Click Management , MAC T able in the navigation panel to di splay the following screen. Figure 89 MAC T able The following table describes the labels in this screen. Table 54 MAC Table LABEL DESCRIPTION Sort by Click one of the followi ng buttons to di splay and[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 26 ARP Table 141 C HAPTER 26 ARP T able This chapter introduces ARP T able. 26.1 Overview Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on the local area network. An[...]

ES-2108/ES-2108-G User’s Gu ide 142 Chapter 26 ARP Table Figure 90 ARP T able The following table describes the labels in this screen. Table 55 ARP Table LABEL DESCRIPTION Index This is the ARP T able entry number . IP Address This is the learned IP address of a device connecte d to a switch port with corresponding MAC address below . MAC Address[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 143 C HAPTER 27 Introducing the Commands This chapter introduces th e commands and gives a summary of commands available. 27.1 Overview In addition to the web con figurator , you can us e line commands to conf igure the switch. Use line commands for ad vanced switch diagn osi[...]

ES-2108/ES-2108-G User’s Gu ide 144 Chapter 27 Introducing the Co mmands 27.2.1 Access Priority • Y ou can only access the CLI with the admini strator ac count (the default username is admin and password is 1234 ). • By default, only one CLI management session is allowed via either the console port or T elnet. Console port access has higher p[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 145 27.2.4 SSH Y ou can use an SSH client program to access the switch. The following figure shows an example using a text-based SSH client program. Refer to the documenta tion that comes with your SSH program for information on using it. Figure 92 SSH Login Example 27.3 The [...]

ES-2108/ES-2108-G User’s Gu ide 146 Chapter 27 Introducing the Co mmands 27.4 Command Synt ax Conventions The rules of the commands are listed next. • The command keywords are in courier new font. • The required fields in a command are enclosed in angle bracke ts <> , for instance, ping <ip> means that you must specify an IP numbe[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 147 Figure 94 CLI Help: List of Commands: Examp le 1 Figure 95 CLI Help: List of Commands: Examp le 2 27.5.2 Det ailed Command Information Enter <command> help to display detailed sub command and parameters. Enter <command> ? to display detailed help inform ation [...]

ES-2108/ES-2108-G User’s Gu ide 148 Chapter 27 Introducing the Co mmands Figure 96 CLI Help: Detailed Command Information: Example 1 Figure 97 CLI: Help: Det a iled Command Information : Example 2 27.6 Command Modes There are three CLI command modes: User, Enable and Configure. When you first log into the CLI, the initial command mode is the User[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 149 27.7 Using Command History The switch keeps a list of up to 256 commands you have entered for the c urrent CLI session. Y ou can use any commands in the history again by pressing the up ( y ) or down ( z ) arrow key to scroll through the previous ly used commands and pres[...]

ES-2108/ES-2108-G User’s Gu ide 150 Chapter 27 Introducing the Co mmands 27.9.1 User Mode The following table describes the co mmands available for User mode. 27.9.2 Enable Mode The following table describes the co mmands available for Enable mode. Table 56 Command Summary: User Mode COMMAND DESCRIPTION enable Accesses Enable (or privileged) mode[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 151 enable Accesses Enable (or privileged) mode. erase running-config Resets to the factory default sett ings. exit Exits Enable (or privileged) mode. help Displays help information. history Displays a list of co mmand(s) that you have previously executed. logout Exits Enable[...]

ES-2108/ES-2108-G User’s Gu ide 152 Chapter 27 Introducing the Co mmands bstorm-control Displays broadcast storm control settings. egress Displays outgoing port information. i p Displays IP related information. arp Displays the ARP table. route Displays IP routing information. route static Displays IP static route information. lacp Displays LACP [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 153 27.9.3 General Configuration Mode The following table lists the commands in Configuration (or Config) mode. session Displays current SSH session(s). system-information Displays general system information. t i m e Displays current system time and date. timesync Displays ti[...]

ES-2108/ES-2108-G User’s Gu ide 154 Chapter 27 Introducing the Co mmands exit Exits from the CLI. garp join <100-65535> leave <msec> leaveall <msec> Configures GARP time settings. help Displays help information. history Displays a list of previous command(s) that you have executed. hostname <name_string> Sets the switch’[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 155 mac-forward name <name> mac <mac-addr> vlan <vlan-id> interface <interface-id> Configures a static MAC address forwarding rule. inactive Disables a static MAC address forwarding rule. mirror-filter egress mac <mac-addr> Sets port mirror ing f[...]

ES-2108/ES-2108-G User’s Gu ide 156 Chapter 27 Introducing the Co mmands mac-filter mac <mac-addr> vlan <vlan-id> drop <src/dst/ both> inactive Enables the sp ecif ied MAC-filter rule. mac <mac-addr> vlan <vlan-id> drop <src/dst/ both> Disables the specified MAC filter rule. mac-forward mac <mac-addr> vla[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 157 https Disables secure web browse r access to the switch. icmp Disables ICMP access to the switch such as pinging and tracerouting. snmp Disables SNMP management. ssh Disables SSH (Secure Shell) server access to the switch. telnet Disables telnet access to the switch. snmp[...]

ES-2108/ES-2108-G User’s Gu ide 158 Chapter 27 Introducing the Co mmands <port-list> Enables 802.1x authenti cation on the spec ified port (s). reauthenticate Sets a subscriber to periodically re-enter his or her username and password to st ay connected to a specified port. reauth-period <reauth-period> S pecifies how often a client h[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 159 get-community <property> Sets the get community . set-community <property> Sets the set community . trap-community <property> Sets the trap community . trap-destination <ip> Sets the IP addresses of up to four stations to send your SNMP trap s to. [...]

ES-2108/ES-2108-G User’s Gu ide 160 Chapter 27 Introducing the Co mmands 27.9.4 interface port-channel Commands The following table lists the interface port-channel commands in configuration mode. Use these commands to configure the ports. <T1|T2>lacp Enables LACP for a trun k group. interface <port- list> timeout <lacp-timeout>[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 161 egress set <port- list> Sets the outgoing traffic port list for a port-based VLAN. exit Exits from the interface port- channel command mode. flow-control Enables interface flow control. Flow control regulates transmissions to match the bandwidth of the receiving por[...]

ES-2108/ES-2108-G User’s Gu ide 162 Chapter 27 Introducing the Co mmands 27.9.5 config-vlan Commands The following table lists the vlan commands in configuration mode. pvid <1-4094> The default PVID is VLAN 1 for all ports. Sets a PVID in the range 1 to 4094 for th e specified interface. qos priority <0 .. 7> Set s th e quality of ser[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 27 Introd u cing the Co mmands 163 default-gateway <ip-address> Sets a default gateway IP address for this VLAN. default- management dhcp- bootp Sets the dynamic in-band IP address default- management <ip- address> <mask> Sets a static in-band IP address and subnet mask. default- manageme[...]

ES-2108/ES-2108-G User’s Gu ide 164 Chapter 27 Introducing the Co mmands[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 165 C HAPTER 28 Command Examples This chapter describes some commands in more detail. 28.1 Overview These are commands that you may use fre quently in maintaining your switch. 28.2 show Commands These are the commonly used show commands. 28.2.1 show system-information Syntax: show sys[...]

ES-2108/ES-2108-G User’s Gu ide 166 Chapter 28 Co mmand Examples 28.2.2 show ip Syntax: show ip This command displays the IP re lated information (such as IP address and subnet mask) on all switch interfaces. The following figure shows th e default interface settings. Figure 101 show ip Command Example 28.2.3 show logging Note: This command is no[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 167 Figure 102 show logging Comma nd Example Note: If you clear a log (by entering y at the Clear Error Log (y/n): prompt), you cannot view it again. 28.2.4 show interface Syntax: show interface [port-number] This command displays statistics of a port. The following ex ample shows tha[...]

ES-2108/ES-2108-G User’s Gu ide 168 Chapter 28 Co mmand Examples Figure 103 show interface Command Examp le 28.2.5 show mac address-table Syntax: show mac address-table <all <sort>|s tatic> Where <sort> = Specifies the sorting criteria (MAC, VID or port). This command displays the MAC address(es) st ored in the switch. The follo[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 169 Figure 104 show mac address-t able Command Example 28.3 ping Syntax: ping <ip> < [vlan <vlan-id> ] [ size <0-8024> ] [ -t ]> where This command sends Ping packets to an Ethe rnet device. The following examp le sends Ping requests to and displays th e replie[...]

ES-2108/ES-2108-G User’s Gu ide 170 Chapter 28 Co mmand Examples This command displays information about the route to an Ethernet device. The following example displays route information to an Ethernet device with an IP address of 192.168.1.100 . Figure 106 traceroute C ommand Exam ple 28.5 Enabling RSTP T o enable RSTP on a port. Enter spanning-[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 171 Figure 108 CLI: boot config Command Example Use the reload config command to restart the system. The following figure shows an example. Figure 109 CLI: reload config Command Example 28.6.2 Resetting to the Factory Default Follow the steps below to reset the sw itch back to the fac[...]

ES-2108/ES-2108-G User’s Gu ide 172 Chapter 28 Co mmand Examples Figure 1 1 1 no mirror-port Com mand Example 28.7.2 no http s timeout Syntax: no https timeout Resets the https session timeout to default. An example is shown next. The session ti meout is reset to 300 seconds. Figure 1 12 no http s timeout Command Example 28.7.3 no trunk Syntax: n[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 173 Figure 1 13 no trunk Comm and Example 28.7.4 no port-access-authenticator Syntax: no port-access-authenticator no port-access-authenticator <port-l ist> reauthenticate no port-access-authenticator <port- list> where An example is shown next. • Disable authentication [...]

ES-2108/ES-2108-G User’s Gu ide 174 Chapter 28 Co mmand Examples An example is shown next. • Disable the secure shell RSA1 encryption key . • Remove the remote host with IP ad dress 172.165.1.8 from the list of known hosts. • Remove the remote host with IP address 172.165.1.9 and with an SSH-RSA encryption key from the list of known h o sts[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 175 Figure 1 17 wrr Command Examp le 28.10 interface Commands These are some commonly used commands that belong to the interface grou p of commands. 28.10.1 interface port-channel Syntax: interface port-channel <port-list> Use this command to enable the specified ports for confi[...]

ES-2108/ES-2108-G User’s Gu ide 176 Chapter 28 Co mmand Examples An example is shown next. • Enable port one for config uration. • Enable broadca st control. • Set the broadband packet traffi c the interface receives per second. Figure 1 19 broadcast-limit Command Example 28.10.3 bandwid th-limit Syntax: bandwidth-limit bandwidth-limit egre[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 177 where An example is shown next. • Enable port mirroring. • Enable the monitor port three. • Enable ports one, four, fiv e and six for configuration. • Enable port mirroring on the ports. • Enable port mirroring for outgoing traffic. T raf fic is copied from ports one, fo[...]

ES-2108/ES-2108-G User’s Gu ide 178 Chapter 28 Co mmand Examples Figure 122 gvrp Command Examp le 28.10.6 frame-type Syntax: frame-type <all|tagged> where An example is shown next. • Enable ports one, three, four an d five for configuration. • Enable tagged frame-types on the interface. Figure 123 frame-type Co mmand Example 28.10.7 egr[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 28 C ommand Exam ples 179 Figure 124 egress set Command Exa m ple 28.10.8 qos priority Syntax: qos priority <0 .. 7> where An example is shown next. • Enable ports one, three, four an d five for configuration. • Set the IEEE 802.1p quality of service priority as four (4). Figure 125 qos priority [...]

ES-2108/ES-2108-G User’s Gu ide 180 Chapter 28 Co mmand Examples Figure 126 name Command Example 28.10.10 speed-duplex Syntax: speed-duplex <auto|10-half|10-full|1 00-half|100-full|1000-full> where An example is shown next. • Enable ports one, three, four an d five for configuration. • Set the speed to 10 Mbps in half duplex mode. Figur[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 29 IEEE 802.1Q Tagg ed VLAN Commands 181 C HAPTER 29 IEEE 802.1Q T agged VLAN Commands This chapter describes the IEEE 802.1Q T agged VLAN and associated commands. 29.1 IEEE 802.1Q T agged VLAN Overview See the VLAN chapter for more information on VLANs. There are two kin ds of tagging: 1 Explicit T agging[...]

ES-2108/ES-2108-G User’s Gu ide 182 Chapter 29 IEEE 802.1Q Tagged VLAN Commands 29.2.2 Dynamic Entries (DVLAN T able) Dynamic entries are learned by the switch and ca nnot be c reated or updated by administrators. The switch learns this informa tion by obse rving what port, so urce address and VLAN ID (or VID) is associated with a frame. Entri es[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 29 IEEE 802.1Q Tagg ed VLAN Commands 183 Figure 129 CPU VLAN Configuration and Activation Example 29.4 Global VLAN1Q T agged VLAN Configuration Commands This section shows you how to configure and monitor the IEEE 802.1Q T agged VLAN. 29.4.1 GARP St atus Syntax: show garp This command shows the switch’ s[...]

ES-2108/ES-2108-G User’s Gu ide 184 Chapter 29 IEEE 802.1Q Tagged VLAN Commands This command sets the switch’ s GARP timer settings, including the join, leave and leave all timers. Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP . Declarations are withdraw n by issuing a Leave mes sage. A [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 29 IEEE 802.1Q Tagg ed VLAN Commands 185 This command turns on GVRP in order to propagate VLAN information beyond the switch. 29.4.5 Disable GVRP Syntax: no vlan1q gvrp This command turns off GVRP so that the switch does not propagate VLAN information to other switches. 29.4.6 Enable Ingress Checking Synta[...]

ES-2108/ES-2108-G User’s Gu ide 186 Chapter 29 IEEE 802.1Q Tagged VLAN Commands Figure 134 vlan1q port default vid Command Example 29.5.2 Set Accept able Frame T ype Syntax: frame-type <all|tagged> where This command sets the specified port to accept all Ethernet frames or only those with an IEEE 802.1Q VLAN tag. The following example sets [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 29 IEEE 802.1Q Tagg ed VLAN Commands 187 Syntax: vlan <vlan-id> fixed <port-list> forbidden <port-list> name <name-str> normal <port-list> untagged <port-list> no fixed <port-list> no forbidden <port-list> no untagged <port-list> where •E n t e r fixe[...]

ES-2108/ES-2108-G User’s Gu ide 188 Chapter 29 IEEE 802.1Q Tagged VLAN Commands 4 Then the switch applies the port filter to finish the forwar ding decision. This means that frames may be d ropped even if the SVLAN says to forward them. Fr ames might also be dropped if they are sent to a CPE (customer premises equipment) DSL device that does not [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 29 IEEE 802.1Q Tagg ed VLAN Commands 189 29.7 Disable VLAN Syntax: vlan <vlan-id> inactive This command disables the specified VLAN ID in the SVLAN (S tatic VLAN) table. 29.8 Show VLAN Setting Syntax: show vlan This command shows the IEEE 802.1Q T agged SVLAN (Stat ic VLAN) table. An example is shown[...]

ES-2108/ES-2108-G User’s Gu ide 190 Chapter 29 IEEE 802.1Q Tagged VLAN Commands[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 30 Troubleshooting 191 C HAPTER 30 T roubleshooting This chapter covers potential problems and possible remedies. 30.1 Problems St arting Up the Switch 30.2 Problems Accessing the Switch Table 61 Troubleshootin g the Start-Up of Your Switch PROBLEM CORRECTIVE ACTION None of the LEDs turn on when you turn o[...]

ES-2108/ES-2108-G User’s Gu ide 192 Chapter 30 Troublesh ooting 30.2.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are [...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 30 Troubleshooting 193 Figure 141 Intern et Options 3 Click Apply to save this setting. 30.2.1.1.2 Enable pop-up Blockers with Exceptions Alternatively , if you only want to allow pop-up window s from your device, see th e following steps. 1 In Internet Explorer , select To o l s , Internet Options and the[...]

ES-2108/ES-2108-G User’s Gu ide 194 Chapter 30 Troublesh ooting Figure 142 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 30 Troubleshooting 195 Figure 143 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 30.2.1.2 JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , ch eck that JavaScripts are allowed. 1 In Internet Explorer , c[...]

ES-2108/ES-2108-G User’s Gu ide 196 Chapter 30 Troublesh ooting Figure 144 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default). 6 Click OK to clos e the window .[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 30 Troubleshooting 197 Figure 145 Security Settings - Java Scripting 30.2.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions ma ke sure that a safety level [...]

ES-2108/ES-2108-G User’s Gu ide 198 Chapter 30 Troublesh ooting Figure 146 Security Settings - Java 30.2.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 make sure that Use Java 2 for <applet> u nder Java (Sun) is selected. 3 Click OK to clos e the window .[...]

ES-2108/ES- 2108-G Use r’s Guide Chapter 30 Troubleshooting 199 Figure 147 Java (Sun) 30.3 Problems with the Password Table 63 Troubleshootin g the Password PROBLEM CORRECTIVE ACTION Cannot access the switch. The password field is case se nsitive. Make sure that you enter the correct password using the proper casing. The administrator username is[...]

ES-2108/ES-2108-G User’s Gu ide 200 Chapter 30 Troublesh ooting[...]

ES-2108/ES- 2108-G Use r’s Guide Product Specifications 201 A PPENDIX A Product S pecifications These are the switch product specifications. Table 64 General Product Specifications Fast Ethernet Interface Eight 10/100 Base-TX in terfaces Auto-negotiation Auto-MDI/MDIX Compliant with IEEE 802.3/802.3u Back pressure flow control for half duplex mod[...]

ES-2108/ES-2108-G User’s Gu ide 202 Product Specifications Table 65 Manageme nt Specifica tions System Management Alarm/S tatus surveillance LED indication for al arm and system status Performance monitoring Line speed Four RMON groups 1,2,3,9 (histo ry , statistics, alarms, and events) Throughput moni toring CMP packet transm ission Port mirrori[...]

ES-2108/ES- 2108-G Use r’s Guide Product Specifications 203 Power Supply Overload protection 100-240V AC, 50/60Hz, 0.5A Max. Safety S tandards UL 60950-1 CSA 60950-1 EN 60950-1 IEC 60950-1 EMC FCC Part 15 (Class A) CE EMC (Class A) Table 66 Physical and Environmental Specifications (continue d)[...]

ES-2108/ES-2108-G User’s Gu ide 204 Product Specifications[...]

ES-2108/ES- 2108-G Use r’s Guide IP Subnetting 205 A PPENDIX B IP Subnetting IP Addressing Routers “route” based on the network number . The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (ei ght bits), wri tten in dotted decimal notation, for example, [...]

ES-2108/ES-2108-G User’s Gu ide 206 IP Subnetting Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a valu e of 0 to 127. Similarly the first octet of a class “B” must begi n with “10”, therefore the first octet of a class “B” address has a valid range of 12[...]

ES-2108/ES- 2108-G Use r’s Guide IP Subnetting 207 Since the mask is always a continuous number of ones begin ning from the left, followe d by a continuous number of zeros for the remainder of the 32 bit mask, you can si mply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” foll[...]

ES-2108/ES-2108-G User’s Gu ide 208 IP Subnetting Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bit s. The number of “borrowed” host ID bits determines the number of sub nets y ou can have. The remaining number of host ID bits (af ter “borrowing”) det ermines t[...]

ES-2108/ES- 2108-G Use r’s Guide IP Subnetting 209 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mas k to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00 , 01, 10 a[...]

ES-2108/ES-2108-G User’s Gu ide 210 IP Subnetting Example Eight Subnet s Similarly use a 27-bit mask to create 8 subnets (001 , 010, 01 1, 100, 101, 1 10). The following table shows class C IP ad dress last octet values for each subnet. The following table is a summary for class “C” subnet planning. Table 77 Subnet 4 NETWORK NUMBER LAST OCT E[...]

ES-2108/ES- 2108-G Use r’s Guide IP Subnetting 211 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets ava ilable for subnetting and a class “A” ad[...]

ES-2108/ES-2108-G User’s Gu ide 212 IP Subnetting[...]

ES-2108/ES- 2108-G Use r’s Guide Index 213 Index Symbols “standby” ports 93 Numerics 11 0 V A C 3 230V AC 3 802.1P priority 66 A AC 3 Access control 11 7 Access priority 11 7 Limitation 11 7 Login account 120 Remote management 129 Service port 128 SNMP 11 8 Accessories 3 Address Resolution Protocol (ARP) 141 Administrator password 12 1 Aggreg[...]

ES-2108/ES-2108-G User’s Gu ide 214 Index Copyright 1 Corrosive Liquids 3 Covers 3 CPU management port 74 CRC (Cyclic Redundant Check) 54 Current date 59 Current time 59 Customer Support 5 D Damage 3 Dampness 3 Danger 3 Denmark, Contact Information 5 DHCP 23 DHCP (Dynamic Host C onfiguration Protocol) 23 Diagnostic 131 Ethernet port test 131 Ping[...]

ES-2108/ES- 2108-G Use r’s Guide Index 215 H Hardware installation 29 Hardware overview 33 High V oltage Points 3 Host IDs 205 How SSH works 122 HTTPS 124 HTTPS Example 125 I IEEE 802.1p 62 IEEE 802.1Q T agged VLAN 181 IEEE 802.1x 97 Activate 98 Note 97 Reauthentication 98 IGMP snooping 60 , 61 Ingress port 76 Installation Freest anding 29 Precau[...]

ES-2108/ES-2108-G User’s Gu ide 216 Index P Password 43 , 138 PHB (Per-Hop Behavior) 107 Ping 131 Pipes 3 Pool 3 Port authentication 97 IEEE802.1x 98 RADIUS server 99 Port Based VLAN T ype 61 Port details 52 Port isolation 73 , 76 Port Mirroring 161 , 177 Port mirroring 24 , 91 Mirror port 91 Port redundancy 93 Port security 24 , 101 Limit MAC ad[...]

ES-2108/ES- 2108-G Use r’s Guide Index 217 SSH Implement ation 123 S tatic MAC address 24 , 77 , 101 S tatic MAC forwarding 77 S tatic VLAN 71 Control 72 T agging 72 S tatus 40 , 51 LED 37 Link aggregati on 94 Port 51 Port details 52 STP 82 VLAN 70 STP 81 Bridge ID 83 Bridge priority 85 Configuration 84 Designated bridge 81 Forwarding Delay 85 He[...]

ES-2108/ES-2108-G User’s Gu ide 218 Index Number of VLANs 70 Port isolation 73 Port number 71 Port settings 73 Port-based VLAN 74 Registrati on Information 181 S tatic VLAN 71 S tatus 70 , 71 T agged 67 T runkin g 69 Ty p e 61 , 69 VLAN (Virtual Local Area Network) 23 , 59 VLAN Databases 181 VLAN number 64 VLAN trunking 73 vlan1q port accept 186 [...]