ZyXEL Communications IES-5005 manual

IES-5000/5005/6000 Integrated Ethernet Switch Support Notes July 2008 Edition 3[...]

IES-5000/5005/6000 Support Notes 1 INDEX Application Notes ............................................................................................................................ 2 T riple play Application (with VLC Line Card) .............................................................. 2 T riple play Application (with ALC/SLC Line Card) ...[...]

IES-5000/5005/6000 Support Notes 2 Application Notes T riple play Application (with VLC Line Card) The triple play service is a marketing term for the provisioning of two broadband services, high-speed Internet access and televisio n, and one narrowband service, telephone, over a single broadband conn ection. T riple Play focuses on a combi ned bus[...]

IES-5000/5005/6000 Support Notes 3 T riple Play scenario topology All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 4 Hardware connections: P-870H-51 1. DSL: Connect the DSL jack to the VLC1348G-51 card on IES-5000. 2. Ethernet: Connect the client s to the Ethernet jacks: (1).IP Phone to the Ethernet 1 (2).IP STB to the Ethernet 2 (3).PC to the Ethernet 3 IES-5000M (Main Chassis) 1. Install the MSC10 00G in SL OT1 . 2. Install th[...]

IES-5000/5005/6000 Support Notes 5 Firmware versions: ES-2024A V3.80(TX.0)C0 IES-5000 MSC1000G: V3.90(LU.1)C0 VLC1348G-51: V3.90(BHB.0)b1 P-870H-51 1.00(A WG .6)G0 All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 6 Configure the P-870H-51: In this scenario, we will use the CPE P-870H-51 with fact ory-default setting. How to set the P-870H-51 to factory -default? Press the RESET button on the back-end plane of the housi ng (you can see it in the following picture). Keep it pressed down for se veral secon ds, until you see tha[...]

IES-5000/5005/6000 Support Notes 7 Configure the IES-5000 1. System login. a. Connect to the IES-5000 via Internet brow ser . 192.168.1.1 is the default in-band management IP address and 192.168.0.1 is the default out-of-band (management port) IP address. Enter the default username (“admin” ) and the p assword (“1234”) to access the device:[...]

IES-5000/5005/6000 Support Notes 8 2. Configure the VLC1348G-51. a. Click Port > VDSL . b. Choose slot 3 and port 1, and click Load to open the page shown below: c. Select the Enable check-box to enable the VDSL port1, click Apply to save the settings . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 9 d. Click the Setup button in sub-step (1) of the VLAN to open the page rel evant for sub-step (2) & (3): Sub-step (1): Open VLAN setup pa ge. Sub-step (2): Join VLAN 100 to VDSL port 1. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 10 Sub-step (3): Join VLAN 500 to VDSL port 1. Sub-step (4): Check the final VLAN setup st at us, you should see two entries as below . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 11 Sub-step (5): Set the default PVID/Priority for the VDSL Port1 , click Apply to save the changes. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 12 3. Configure the MSC1000G . a. Click VLAN > VLAN b. Select VLAN 100 and click Modify , then set the port UP1 as Fix and Ta g , then click Apply to save the changes: 2 1 c. Select VLAN 500 and cli ck Modify , then set the port UP1 as Fix and Ta g , then click Apply to save the changes: 2 1 All contents c opyrig[...]

IES-5000/5005/6000 Support Notes 13 d. Check the final VLAN setup statu s of the MSC1000G All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 14 4. Use ACL rule to replace the VID / Priority for the PPPoE p ackets. [Note]: So far ACL-rule feature does not support W EB-GUI, we use the CLI method to configure it. a. Login : Connect your PC to the out-of-band MGMT port of MSC1000G , and call the Windows MS-DOS, then use Te l n e t method to login (use the de[...]

IES-5000/5005/6000 Support Notes 15 b. ACL-rule profile CLI synt ax : (1). < rule > is for picking out the traf fic by specific parameters, e.g. the vid (802.1q), mac, etype (Ethernet T ype), priority (802.1p) etc. (2). < action > can apply actions to the traf fics picked out by the <rule>, e.g. rate (limit the rate), rvlan (repla[...]

IES-5000/5005/6000 Support Notes 16 c. Set ACL-rules to pick out PPPoE tra ffic and replace it s VID / Priorit y . (1) Create ACL profiles // ‘pppoe1’ & ‘pppoe2’ are the Profile names, and ‘34915’ is the decimal value for hexadecimal value 0x8863, and ‘34916’ is for 0x8864.// (2) Apply the ACL profile to th e VDSL po rt 3-1 // ?[...]

IES-5000/5005/6000 Support Notes 17 5. Use MVR to configure the IPTV settin g on MSC1000G . a. Login : As in the step 4 , use Te l n e t to login. b. Set VDSL port 3-1 to join the MVR VLAN 700 . c. Set multicast group range for MVR VLAN 700 //Since we are using 239.255.255.2 as the multicast group IP in this case, we set the group range starting fr[...]

IES-5000/5005/6000 Support Notes 18 6. Configure the IGMP-Proxy and S tatic Query VLAN a. Login : We are using the WEB to configure agai n. b. Click Multicast , then Enable IGMP Proxy V2 mode, and click Appl y to save the changes. c. Add St atic Query VLAN 500 , and click Apply to save the changes. [Note:] As we don’t have any IGMP-rout er in thi[...]

IES-5000/5005/6000 Support Notes 19 d. Check the Query VLAN st atus. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 20 7. Save configuration for the IPDSLAM. (1). Open Config Save , then click the Save button to save all your settings to NVRAM. (2). If setting is successful, result is as below . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 21 Configure the ES-2024A: 1. System login. a. Connect to the ES-2024A via Internet br owser . 192.168.1.1 is the default in-ban d management IP address. Enter the default username (“admin ”) and the password (“1234”) to access the device: b. The main screen appears af ter clicking OK. All contents c opyrigh[...]

IES-5000/5005/6000 Support Notes 22 2. Configure VLANs. a. Click Advanced Application > VLAN , after ente r the VLAN setting page, and then choose the St atic VLAN link. b. Create VLAN 100 / 500 / 700 for PPPoE / V oIP / IPTV respectively . [Note:] Don’t forget to click the Add button at the bottom of the page. (1). VLAN 100 for PPPoE. All con[...]

IES-5000/5005/6000 Support Notes 23 (2). VLAN 500 for V oIP . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 24 (3). VLAN 700 for IPTV . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 25 (4). Check final status of the VLAN settings. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 26 c. Set the default PVID for the relative ports in this scenario. (1). Click Advance Application > VLAN , then choose the VLAN Port Setting (2).Set port 1 / 5 / 7’s PVID as 100 / 500 / 700 as below: Don’t forget to click Apply to save the settings. All contents c opyright (c) 2008 ZyXEL Comm unications Corp[...]

IES-5000/5005/6000 Support Notes 27 d. Set the default 802.1p Priority value for the respective ports in this scenario. (1). Click Basic Setting > Port Setup to call the page below . (2). Click Apply at bottom to save the settings . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 28 e. Save all the settings for the ES-2024A. (1). Click Management > Mainten ance , then choose the Config 1 in Save Configuration. (2). Or you can choose the Save button on the top of the page. If saving was successful, you would see result shown below . All contents c opyright (c) 2008 ZyXEL Comm unications Co[...]

IES-5000/5005/6000 Support Notes 29 T riple play Application (with ALC/SLC Line Card) On the IES-5000, you can use dif ferent cha nnels (also known as Permanent V irtual Circuits or PVCs) for dif ferent services. Define channels on each DSL port for dif ferent services and assign each channe l a priority , VLAN and A TM Quality of Service (QoS). Th[...]

IES-5000/5005/6000 Support Notes 30 In this network application, we will use an IES-5000, a ZyXEL ES-2024 VLAN-aware switch and Prestige 660R-61 CP E (you may also use P791 if you have the SLC-1248G line card installed on the IES). 1. IES-5000 Settings 1.1 VLAN setup Follow the procedure as described in the VLAN Application secti on to configure th[...]

IES-5000/5005/6000 Support Notes 31 Since we want to give the 0/33 VPI/VC I a higher priority , change the VCI/VPI priority in the Defval_CBR prof ile that was just created. CI command: TGE1> port pvc set 7-1-0/33 Defval_CBR llc 0 7 Create another PVC with a VPI/VCI of 0/34 and apply the DEFV AL profile to this channel. CI command: TGE1> port[...]

IES-5000/5005/6000 Support Notes 32 3. ES-2024 settings 3.1 V ALN Click Advanced Application and VLAN in navigation panel to display the configuration screen as shown. Click St a t i c V L A N to display the St a t i c V L A N screen. Create a VLAN with VID of 10. Assign ports 1 and 10 to be members of VLAN10. Select the Tx T agging option to enabl[...]

IES-5000/5005/6000 Support Notes 33 Create a VLAN with VID of 20. Assign ports 2 and 10 to be members of VLAN20. Select the Tx T agging option to enable egress tagging on port 10. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 34 3.2 PVID setup Click Advanced Application and VLAN in navigation panel to display the configuration screen as shown. Click VLAN Port Setting to show VLAN Port Setting screen. Set the PVIDs on port 1 and 2 to 10 and 20 respectively . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 35 After the configuration on the devices are complete, video traffic will go through the 0/33 channel and the data traf fic will go th rough the 0/34 channel. Since the 0/33 channel has a higher priority , video traffic will get processed and sent first if both traffic types arrive at the same time. All contents c [...]

IES-5000/5005/6000 Support Notes 36 VDSL2 to ADSL2+ Fallback The VLC1348G-51 can au tomatically use ADSL2+ for connections where VDS L2 training fails. This allows a longer connection di stance. Y ou can also specify ADSL2+ as the only protocol that can be used on the port connected to an ADSL2+ CPE. P ‐ 660H ‐ 61 ADS L 2 +  CP E IE S ‐ 50[...]

IES-5000/5005/6000 Support Notes 37 Configure the P-660H-61 1. T elnet into the P-660H-61 a. In Windows, click Star t (usually in the bottom lef t corner), Run and then type “telnet 192.168.1.1” (the default IP address) and click OK . b. Enter “1234” in the Password field. c. After entering the password you will see the main menu. All conte[...]

IES-5000/5005/6000 Support Notes 38 2. General Setup a. Enter 1 in the Main Menu to open Menu 1 – General Setup . b. T ype a name in the System Name field. c. Select No in the Route IP field. d. Select Ye s in the Bridge field. e. Press ENTER to confirm your changes. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 39 3. Remote Node Setup a. Enter 11 in the Main Menu to open Menu 1 1 – Remote Node Setup . b. Enter 1 to configure the remote node of My ISP (ISP , SUA) . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 40 c. Menu 1 1.1 – Remote Node Profile appears. d. Select Ye s in the Active field. e. Select RFC 1483 in the Encap sulation field. f. Select LLC-based in the Multiplexing field. g. Select None in the Route field. h. Select Ye s in the Bridge field. i. Select Ye s in the Edit A TM Options field and press ENTER to [...]

IES-5000/5005/6000 Support Notes 41 j. Menu 1 1.6 – Remote Node A TM Layer Options appea rs. k. S pecify VPI and VCI. In this case, we type 8 in the VPI # field and 35 in the VCI # field. l. Press ENTER to confirm your changes. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 42 Configure the VLC1348G-51 1. Login a. Connect to the IES-5000 via Internet brow ser . 192.168.1.1 is the default in-band management IP address and 192.168.0.1 is the default out-of-band (management port) IP address. Enter the default username (“admin” ) and the p assword (“1234”) to access the device: Fir[...]

IES-5000/5005/6000 Support Notes 43 All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 44 2. VDSL Port Setup a. Click Port > VDSL . b. Select slot 3 and port 1 , and click Load to display the settings as shown in this screen. c. Select Enable. d. Select auto from the second VDSL Profi le drop-down list box to automatically detect the protocol used on the connected line. e. Click Apply . All content[...]

IES-5000/5005/6000 Support Notes 45 3. PVC Setup a. Click Port > PVC . b. Select slot 3 and port 1 , and click Load to display the settings as shown in this screen. c. Select index 1 , and click Delete to delete the default PVC (0/33). d. T ype 8/35 in the VPI/VCI field. e. Click Apply to create the PVC. All contents c opyright (c) 2008 ZyXEL Co[...]

IES-5000/5005/6000 Support Notes 46 4. Config save a. Click Config Save on the navigation panel. b. Click the Save button to save your configuration to nonvolatile memory . All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 47 5. Check st atus a. Click St atistics > Port St atistics . b. Click ID 3 to display the Counter screen. Protocol shows adsl2plus when port 1 is up. c. Click Diagnostic > Loopback . d. Select port 1 . e. T ype 8 in VPI and 35 in VCI. f. Click the T est button to perform an OAM F5 loopback test on port 1 . Al[...]

IES-5000/5005/6000 Support Notes 48 All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 49 Impulse Noise Pr otection (INP) The impulse noise gene rator is required to pr ove the burst noise immunity of the VDSL transceiver . The noise shall consist of burst s of additive white Gau ssian noise (A WGN) injected onto the line with suff icient power to ensure effective erasure of the dat a for the period o[...]

IES-5000/5005/6000 Support Notes 50 Upstr eam Power Back-Off (UPBO) What is UPBO? Upstream Po wer back-of (UPBO) help s to run services over loop s with different len gth co-located in the sam e cable binder (“mix ed length” deployment s), especially in FEXT -dominated noise environment. S trong FEXT generated by short loops can significa ntly [...]

IES-5000/5005/6000 Support Notes 51 The followings are gene ral conclusions for applying UPBO in real n etwork. • Non-FEXT dominated environment: Do not apply UPBO! It only causes SNR reduction in sh ort loops with no SNR improvem ent in long loops. • FEXT -dominated environment: Apply UPBO for all loops shorter than th e longest one! It always[...]

IES-5000/5005/6000 Support Notes 52 3. Improved performance of short loop s The goal of this mode is to maximize the performance of short loop s keeping performance degradation of the Long loop s limited. NEG: Can be implemented for only one short loop. With more than one short loop performance degradation o f long loops can’t be limited. 4. Spec[...]

IES-5000/5005/6000 Support Notes 53 802.1ag CFM What is CFM? IEEE 802.1ag Connectivity Fault Management (CFM) allows serv ice providers to manage each customer service inst ance individually . A cu stomer service i nstance, or Ethernet V irtual Connection (EVC),is the service that is sold to a customer and is designated by the Service-VLAN t ag. He[...]

IES-5000/5005/6000 Support Notes 54 Often there a re three different organizations i nvolved in a Metro Ethernet service: customers, service providers, and operators. Custom ers purchase Ethernet service from service providers. Service providers may use their own networks, or the networ ks of other operators to provide connectivity for the requeste[...]

IES-5000/5005/6000 Support Notes 55 LBM—Loop Back Message L TM—Link T race Message • MIP--Maintenance Intermediate Poi nt o An MIP port forwards the CCMs, LBMs, and L TMs and replies the LBMs and L TMs by sending LBRs and L TRs. An MIP port f orwards the CCMs, LBMs, and L TMs and replies the LBMs and L TMs by sending LBRs and L TRs. CCM—Con[...]

IES-5000/5005/6000 Support Notes 56 WEB GUI Introduction 1. CFM MD Screen CFM Enable: Select or deselect the check box and c lick Apply to turn the CFM feature on or off. MD Name: T ype a name (up to 31 pri ntable ACSII characters) for this MD. This is for the purpose of identification. Level: T ype a level number (0~7) for this MD. All contents c [...]

IES-5000/5005/6000 Support Notes 57 2. CFM MA Screen MA Name: T ype a name (u p to 15 printable AC SII characters) for this MA. This is for identification purpose. Primary VLAN: T ype the primary VLAN ID (1~4094). CCI Interval: Select a number to spe cify how often the device sends a Continuity Che ck Message. (1 se c/10 sec/60 sec/10 min ) Add MEP[...]

IES-5000/5005/6000 Support Notes 58 3. CFM MEP Screen End point ID : Select a valid MEP ID which is defined in the CFM maintenance association screen. Port : This binds the MEP ID to a physical port on the device. Y ou can select a n Ethernet port or a DSL port. Direction : Select whether to send CCMs (Continuity Check Me ssages) from the end point[...]

IES-5000/5005/6000 Support Notes 59 4. Loopback Diagnosis MD: Select an MD name. MA: Select an MA name under the selected MD. MEPID: Select an MEP ID to specify which ME P port on the device initiates the test. Ta r g e t : S pecify the destination of the link you are checking. Y ou can select MEPID and enter a remote MEP’s ID or select MAC and e[...]

IES-5000/5005/6000 Support Notes 60 CLI Command Introduction • Enable CFM MSC1000G> switch cfm enable • Disable CFM MSC1000G>swtichcfm disa ble • Create a MD MSC1000G> swit ch cfmmd set <md-nam e><level> • Delete a MD MSC1000G> swit ch cfmmd delete <md-name> • Create a MA MSC1000G> switch cfm ma set <md[...]

IES-5000/5005/6000 Support Notes 61 MSC1000G> diagnosti c cfmlinktrace set <md-name><ma-name><ep-id ><remote-ep-id>|<mac><ttl> All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 62 Setting up differ ent DSL port speeds to different subscribers An ISP may want to configure a dif ferent line speeds for each DSL port. This can be easily and ef ficiently done in the ZyXEL IE S-5000 using profiles. Y ou can configure line profiles with dif ferent parameter sett ings based on the user requirement[...]

IES-5000/5005/6000 Support Notes 63 Similarly , configure a profile to allow a high line speed. Enter a descriptive name for the profile (for example, “Profile_HighSpeed”) and se t the maximum upstream and downstream rates (for exampl e, 1280Kbps and 24992Kbps). Configuration example using the CLI: a.)High Speed (1M/24M) profile setup: MSG1000G[...]

IES-5000/5005/6000 Support Notes 64 2.1 Menu 1: General Setup Go to Menu 1 to set the Prestige 660R-61 in bridge mode. In this menu, select No in the Route IP field and Ye s in the B ridge field. 2.2 Menu 4: Internet Access Setup For bridge mode, select RFC 1483 in the Encapsulation field with LLC-based multiplexing. Also set the Prestige to use th[...]

IES-5000/5005/6000 Support Notes 65 2.4 Menu1 1.6: Remote Node A TM Layer Options Make sure the VPI and VCI settings are the same as on the IES-5000 (the default is 0 and 33 respectively). All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 66 Configuring 802.1Q VLAN A VLAN (V irtual Area Network) allows a phys ical network to be partitioned into multiple logical networks. S tations on a logical network belong to one group called VLAN group. A station can bel ong to more than one group. The stations on the same VLAN group can communicate with each othe[...]

IES-5000/5005/6000 Support Notes 67 on the IES-5000, another VLAN (to which the two ports are a m ember of) need to be configured. 1. IES-5000 Settings 1.1 VLAN settings Create a VLAN group with VID 10 and set Port 1, ENET1 and ENET2 to be members of this VLAN. CI command: TGE1> vlan set 10 up1 fix untag TGE1> vlan set 10 up2 fix untag TGE1&g[...]

IES-5000/5005/6000 Support Notes 68 For this example, assign VLAN 200(PV ID) to ENET1 and ENET2. Also, assign VLAN 10 and VLAN 20 to Port1 and port2 respectively . CI command: TGE1> switch port pvid up1 200 TGE1> switch port pvid up2 200 TGE1> port pvc set 7-1-0/33 DEFV AL llc 10 0 TGE1> port pvc set 7-2-0/33 DEFV AL llc 20 0 1.3 Port I[...]

IES-5000/5005/6000 Support Notes 69 St ation/ Application server Authentication Server (RADIUS) Authorized Unauthorized X SHDSL/ADSL modem SHDSL/ADSL modem IES-5000(SLC/ALC) (Authenticator) PC 1 (Supplicant) PC 2 (Supplicant) Port x Port y Setting up 802.1x Setting up 802.1x T o set up an 802.1x infrastructure, we need to configure the authenticato[...]

IES-5000/5005/6000 Support Notes 70 2. RADIUS Setup: V antage 50 Y ou can use any RADIUS server (such as Funk Steel-Belted RADIUS, Cisco Access Control Server or MeetingHouse Aegis serve r). In this ex am ple, we will use ZyXEL V antage 50 as the RADIUS server . Y ou can configure V antage 50 through its web configurator (the default ma nagement IP[...]

IES-5000/5005/6000 Support Notes 71 3. Supplicant Setup: W indows XP Y ou can use any supplicant/client software (such as MeetingHouse Aegis client, Funk Odyssey client and Microsoft 802.1x client). In this example, we will use take Microsoft 802.1x client software. 3.1 802.1x/MD5-challenge setup Open the Local Area connection Properties screen and[...]

IES-5000/5005/6000 Support Notes 72 Click on the message balloon to display the login screen where you can enter your account user name and password. After enterin g the required information, click OK to continue. Once the authentication process is successful, client setup is complete. All contents c opyright (c) 2008 ZyXEL Comm unications Corporat[...]

IES-5000/5005/6000 Support Notes All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on. 73 Once you are authenticated su ccessfully , you can access the network. Otherwise, network access is not allowed through the DSL port on the CPE. 4. Prestige 660R-61 Settings Please refer to the procedures desc ribed in the previous application. [...]

IES-5000/5005/6000 Support Notes ADSL/SHDSL modem Syslog server U p link Network IES-5000 ALC-1248G SLC-1248G Setting up a Syslog server In this section, we will show you how to configure the IES-5000 and Kiwi Syslog . Installing and Running Kiwi’ s Syslog Server rom the web site and double-click server . The subsequent sections descri be the det[...]

IES-5000/5005/6000 Support Notes 75 After the installation process is com plete, start the daemon from the St a r t menu. A screen displays as shown. In this example, assume that the syslog serv er ’ s IP add ress is 192.168.1.77. 2. IES-5000 settings logs and then save the settings. CI command: TGE1> sys syslog enable TGE1> sys syslog serv[...]

IES-5000/5005/6000 Support Notes All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on. Ring T opology Application 76 A ring topology provides network redundancy . This m eans that when a link is down, the entire network can still be up as traf fic is forwarded through another route or , you must enable ple. Setting up a Ring Environm[...]

IES-5000/5005/6000 Support Notes 77 ports 1 and 2. The following shows the CLI comm ands. CI command: TGE1> sys sw rstp enable TGE1> sys sw rstp port enable 1 TGE1> sys sw rstp port enable 2 2. Setup IES-2000 2.1 Activating Spanning T ree pr otocol This section shows how to enable STP on the IES-2000 using the web configurat or . Access th[...]

IES-5000/5005/6000 Support Notes 78 Click Uplink2 to configure this port. Select Rapid Spanning T ree Pr otocol to enable it on the port. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 79 Follow the same procedure to activate STP on uplink port 1. The following figure shows an example. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 80 3. ES-4024 Settings 3.1 Activating Spanning T ree pr otocol This section shows you how to enable STP on the switch. Log into the web configurator on the E S-4024 and click Advanced Application > Spanning T ree Protocol in the navigation panel. The main Spanning T ree Pr otocol S tatus screen displays. Click Co[...]

IES-5000/5005/6000 Support Notes 81 ports 1 and 2. 4. S tatus Results After you connect the uplink port 1 on IES- 2000 to port 2 on the ES-4024, the state of port 2 becomes BLOCKING . T o test the RSTP/STP mechanism , disconn ect the Ethernet cable between uplink port 1 on the IES-5000 and port 1 on the ES- 4024. The computers can still access the [...]

IES-5000/5005/6000 Support Notes 82 IGMP Snooping/IGMP Filtering Application W ithout IGMP snooping, multicast traf fic is treated in the same manner as broadcast traf fic, that is, it is forwarded to all po rts. W ith IGMP snooping, multicast traf fic of a group is only forwarded to ports that ha ve members of that group. IGMP snooping generates n[...]

IES-5000/5005/6000 Support Notes 83 Setting up IGMP snooping/IGMP filtering In this section, we will show you how to configure IGMP snooping and filtering on the IES-5000. For details on configuring a video server and the corresponding subscriber device, refer to the documen tation that comes with the devices. For this application example, the vi d[...]

IES-5000/5005/6000 Support Notes 84 Limiting Internet access to users on specific DSL ports Some ISPs may want to lim it the number of computers behind cer tain DSL ports to access the Internet or allow com puters with specific MAC addresses to access the Internet. These tasks can be easily done with the port security and MAC address filtering feat[...]

IES-5000/5005/6000 Support Notes 85 will not be able to access the Internet on port 3. Save the settings to m ake the changes take ef fect. CI command: TGE1> lcman port macfilter enable 7-3 TGE1> lcman port macfilter set 7-3 00:a0:c5:12:34:56 TGE1> lcman port macfilter set 7-3 00:a0:c5:77:88:99 TGE1> config save 1.2 Configuring Port Sec[...]

IES-5000/5005/6000 Support Notes DHCP Server Network IES-5000(ALC/SLC) ADSL/SHDSL CPE DHCP Client Port 25 Setting up DHCP Relay Option 82 ow you how to configure the IES-5000 to ort, put er is connected to DSL port 25 with an ver . IES-5000 settings le DHCP relay and speci fy the IP address of the DHCP server I command: GE1> ip dhcprelay enable [...]

IES-5000/5005/6000 Support Notes 87 2. CPE settings evice to DSL port 25. Refer to the previous sections on how to . IP Commander settings creen and right-click on IP Commander and then click Connect a CPE d configure the CPE device. 3 Display the IP Commander s Connect New Server ”. Enter the IP address (for example, 192.168.1.99) or domain nam [...]

IES-5000/5005/6000 Support Notes 88 Enter the login user name and password. The default user name is “administrator” and the password is “incognito”. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 89 A screen displays as shown. Make sure that the status of your DHCP is online . Then click Wi za r d s > Ru l e Wi z a r d in the tool bar . Enter a name and description for the new rule. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 90 Assign one or a range of IP a ddresses for this rule. For this example, set the client IP pool in the 192.168.1.201 ~ 192.168.1.203 range. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 91 Select DHCP Option in the Keywords field. A configuration screen displays. Set th e fields in the screen as shown. Select 82 Relay Agent Information under the Option number field. Enter 1 in the Sub-option field and select the Binary data type. For port 25, VLAN 1, option string “5000”, enter “0019000131323[...]

IES-5000/5005/6000 Support Notes 92 After you have finished the rule wizard set tings, the following screen displays. Click Next to continue. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 93 In the next wizard screen, click Next to continue. In next screen, you may specify a DHCP template (with the gateway and DNS settings) to use. Here we will create a new tem plate. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 94 For this template, we enter “192.168.1.1” as the gateway IP address for the DHCP client. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 95 In the next screen, you may choose whethe r to apply automatic DDNS service on the DHCP server or not. Click Finish to complete the wizard setup. All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]

IES-5000/5005/6000 Support Notes 96 After the configuration, your computer should obtain an IP address of 192.168.1.201 from the DHCP server once the computer is connected to the network. Packet Filtering The packet filtering feature on the IES-5000 al lows ISPs to block certain packet types (such as IP , ARP , DHCP , EAPoL, PPPoE, NETBIOS and IGMP[...]

IES-5000/5005/6000 Support Notes All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on. 97 Setting up Packet Filtering u how to configure the IES-5000 to block N ETBIOS . IES-5000 settings (ALC-1248G/SLC 1248G) ype the following commands to enable p acket filtering on the specif ic s lot-port. GE1> lcman port pktfilter set 7 -1 net[...]

IES-5000/5005/6000 Support Notes 98 7- 4 accept-all 7- 5 accept-all 7- 6 accept-all 7- 7 accept-all 7- 8 accept-all 7- 9 accept-all 7-10 accept-all 7-1 1 accept-all 7-12 accept-all 7-13 accept-all 7-14 accept-all 7-15 accept-all 7-16 accept-all 7-17 accept-all 7-18 accept-all 7-19 accept-all 7-20 accept-all 7-21 accept-all 7-22 accept-all 7-23 acce[...]

IES-5000/5005/6000 Support Notes 99 7-42 accept-all 7-43 accept-all 7-44 accept-all 7-45 accept-all 7-46 accept-all 7-47 accept-all 7-48 accept-all TGE1> All contents c opyright (c) 2008 ZyXEL Comm unications Corporati on.[...]