Page 1 ES-2024 Series Ethernet Switch User’s Guide Version 3.80 11/2007 Edition 2 DEFAULT LOGIN IP Address http://192.168.1.1 User Name admin Password 1234 www.zyxel.com...
Page 3: About This User's Guide
• Supporting Disk Refer to the included CD for support documents. • ZyXEL Web Site Please refer to www.zyxel.com for additional support documentation and product certifications. User Guide Feedback Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead.
Page 4: Document Conventions
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
Page 5 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ES-2024 Series User’s Guide...
Page 6: Safety Warnings
Safety Warnings Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. •...
Page 7 Safety Warnings This product is recyclable. Dispose of it properly. ES-2024 Series User’s Guide...
Page 8 Safety Warnings ES-2024 Series User’s Guide...
Page 9: Table Of Contents
Contents Overview Contents Overview Introduction ..........................27 Getting to Know Your Switch ..................... 29 Hardware Installation and Connection ..................33 Hardware Overview ........................37 Basic Configuration ....................... 43 The Web Configurator ....................... 45 Initial Setup Example ......................... 55 System Status and Port Statistics ....................59 Basic Setting ..........................
Page 10 Contents Overview Syslog ............................217 Cluster Management ....................... 221 MAC Table ..........................227 ARP Table ..........................229 Configure Clone ........................231 Appendices and Index ......................233 ES-2024 Series User’s Guide...
Page 11: Table Of Contents
Table of Contents Table of Contents About This User's Guide ......................3 Document Conventions......................4 Safety Warnings........................6 Contents Overview ........................9 Table of Contents........................11 List of Figures ......................... 19 List of Tables........................... 23 Part I: Introduction................. 27 Chapter 1 Getting to Know Your Switch....................
Page 12 Table of Contents 3.1.3 Mini-GBIC Slots ......................39 3.2 Rear Panel ........................... 40 3.2.1 Power Connector ....................... 40 3.3 LEDs ............................ 41 Part II: Basic Configuration..............43 Chapter 4 The Web Configurator ......................45 4.1 Introduction .......................... 45 4.2 System Login ........................
Page 13 Table of Contents 7.6.1 IP Interfaces ....................... 72 7.7 Port Setup ........................... 74 Part III: Advanced Setup................ 77 Chapter 8 VLAN ............................79 8.1 Introduction to IEEE 802.1Q Tagged VLANs ..............79 8.1.1 Forwarding Tagged and Untagged Frames ..............79 8.2 Automatic VLAN Registration .....................
Page 14 Table of Contents 11.5 Configure Multiple Spanning Tree Protocol ..............103 11.6 Multiple Spanning Tree Protocol Status ..............105 Chapter 12 Bandwidth Control........................ 109 12.1 Bandwidth Control Setup ....................109 Chapter 13 Broadcast Storm Control ..................... 111 13.1 Broadcast Storm Control Setup ..................111 Chapter 14 Mirroring ..........................
Page 15 Table of Contents 18.2 Configuring Queuing ......................130 Chapter 19 Multicast ..........................131 19.1 Multicast Overview ......................131 19.1.1 IP Multicast Addresses ................... 131 19.1.2 IGMP Filtering ......................131 19.1.3 IGMP Snooping ..................... 131 19.1.4 IGMP Snooping and VLANs ................... 132 19.2 Multicast Status ......................
Page 16 Table of Contents 21.5 ARP Inspection Configure ....................164 21.5.1 ARP Inspection Port Configure ................166 21.5.2 ARP Inspection VLAN Configure ................167 Chapter 22 Loop Guard..........................169 22.1 Loop Guard Overview ..................... 169 22.2 Loop Guard Setup ......................171 Part IV: IP Application................
Page 17 Table of Contents Chapter 26 Maintenance .......................... 191 26.1 The Maintenance Screen ....................191 26.2 Load Factory Default ...................... 192 26.3 Save Configuration ......................192 26.4 Reboot System ........................ 193 26.5 Firmware Upgrade ......................193 26.6 Restore a Configuration File ..................
Page 18 Table of Contents Chapter 29 Syslog ............................ 217 29.1 Syslog Overview ......................217 29.2 Syslog Setup ........................217 29.3 Syslog Server Setup ....................... 218 Chapter 30 Cluster Management......................221 30.1 Clustering Management Status Overview ..............221 30.2 Cluster Management Status ................... 222 30.2.1 Cluster Member Switch Management ..............
Page 19: List Of Figures
List of Figures List of Figures Figure 1 Backbone Application ......................29 Figure 2 Bridging Application ........................ 30 Figure 3 High Performance Switched Workgroup Application ............... 31 Figure 4 Shared Server Using VLAN Example ..................31 Figure 5 Attaching Rubber Feet ......................33 Figure 6 Attaching the Mounting Brackets .....................
Page 20 List of Figures Figure 39 Advanced Application > Static MAC Forwarding ..............91 Figure 40 Advanced Application > Filtering ................... 93 Figure 41 STP/RSTP Network Example ....................98 Figure 42 MSTP Network Example ......................98 Figure 43 MSTIs in Different Regions ....................99 Figure 44 MSTP and Legacy RSTP Network Example .................
Page 21 List of Figures Figure 82 IP Source Guard ........................161 Figure 83 IP Source Guard Static Binding .................... 162 Figure 84 ARP Inspection Status ......................163 Figure 85 ARP Inspection Log Status ....................164 Figure 86 ARP Inspection Configure ....................165 Figure 87 ARP Inspection Port Configure ....................
Page 22 List of Figures Figure 125 Management > Access Control > Service Access Control ..........211 Figure 126 Management > Access Control > Remote Management ..........212 Figure 127 Management > Diagnostic ....................215 Figure 128 Management > Syslog ....................... 218 Figure 129 Management > Syslog > Server Setup ................219 Figure 130 Clustering Application Example ..................
Page 23: List Of Tables
List of Tables List of Tables Table 1 Front Panel ..........................38 Table 2 LEDs ............................41 Table 3 Navigation Panel Sub-links Overview ..................47 Table 4 Web Configurator Screen Sub-links Details ................48 Table 5 Navigation Panel Links ......................49 Table 6 Status ............................
Page 24 List of Tables Table 39 Advanced Application > Queuing Method ................130 Table 40 Multicast Status ........................132 Table 41 Advanced Application > Multicast > Multicast Setting ............133 Table 42 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN ....135 Table 43 Advanced Application >...
Page 25 Table 88 Management > Syslog ......................218 Table 89 Management > Syslog > Server Setup ................. 219 Table 90 ZyXEL Clustering Management Specifications ..............221 Table 91 Management > Cluster Management ..................223 Table 92 FTP Upload to Cluster Member Example ................224 Table 93 Management >...
Page 26 List of Tables ES-2024 Series User’s Guide...
Page 27: Introduction
Introduction Getting to Know Your Switch (29) Hardware Installation and Connection (33) Hardware Overview (37)
Page 29: Getting To Know Your Switch
H A P T E R Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction The Switch is a stand-alone layer-2 Ethernet switch with 24 10/100Mbps ports and two Gigabit Ethernet/mini-GBIC ports. The ES-2024PWR comes with the Power-over-Ethernet (PoE) feature.
Page 30: Bridging Example
Chapter 1 Getting to Know Your Switch 1.1.2 Bridging Example In this example application the Switch connects different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the Switch.
Page 31: Ieee 802.1Q Vlan Application Examples
Chapter 1 Getting to Know Your Switch Figure 3 High Performance Switched Workgroup Application 1.1.4 IEEE 802.1Q VLAN Application Examples A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network belong to one group. A station can belong to more than one group.
Page 32: Ways To Manage The Switch
Chapter 1 Getting to Know Your Switch 1.2 Ways to Manage the Switch Use any of the following methods to manage the Switch. • Web Configurator. This is recommended for everyday management of the Switch using a (supported) web browser. See Chapter 4 on page •...
Page 33: Hardware Installation And Connection
H A P T E R Hardware Installation and Connection This chapter shows you how to install and connect the Switch. 2.1 Freestanding Installation 1 Make sure the Switch is clean and dry. 2 Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and the connected cables.
Page 34: Mounting The Switch On A Rack
Chapter 2 Hardware Installation and Connection Do NOT block the ventilation holes. Leave space between devices when stacking. For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and 3.4 inches (8 cm) at the back of the Switch. This is especially important for enclosed rack installations.
Page 35: Mounting The Switch On A Rack
Chapter 2 Hardware Installation and Connection 2 Using a #2 Philips screwdriver, install the M3 flat head screws through the mounting bracket holes into the Switch. 3 Repeat steps to install the second mounting bracket on the other side of the Switch.
Page 36 Chapter 2 Hardware Installation and Connection ES-2024 Series User’s Guide...
Page 37: Hardware Overview
H A P T E R Hardware Overview This chapter describes the front panel and rear panel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel Connection The figure below shows the front panel of the Switch. Figure 8 Front Panel: ES-2024A Console Port Gigabit Ethernet/...
Page 38: Console Port
Chapter 3 Hardware Overview The following table describes the port labels on the front panel. Table 1 Front Panel LABEL DESCRIPTION CONSOLE Only connect this port if you want to configure the Switch using the command line interface (CLI) via the console port. 24 10/100 Connect these ports to a computer, a hub, an Ethernet switch or router.
Page 39: Mini-Gbic Slots
Chapter 3 Hardware Overview 3.1.3 Mini-GBIC Slots These are slots for mini-GBIC (Gigabit Interface Converter) transceivers. A transceiver is a single unit that houses a transmitter and a receiver. The Switch does not come with transceivers. You must use transceivers that comply with the SFP Transceiver MultiSource Agreement (MSA).
Page 40: Rear Panel
Chapter 3 Hardware Overview Figure 12 Opening the Transceiver’s Latch Example 2 Pull the transceiver out of the slot. Figure 13 Transceiver Removal Example 3.2 Rear Panel The following figures show the rear panel of the Switch. The power receptacle is on the rear panel.
Page 41: Leds
Chapter 3 Hardware Overview 3.3 LEDs The LEDs are located on the front panel. The following table describes the LEDs on the front panel. Table 2 LEDs COLOR STATUS DESCRIPTION Green The system is turned on. The system is off. Green Blinking The system is rebooting and performing self-diagnostic tests.
Page 42 Chapter 3 Hardware Overview ES-2024 Series User’s Guide...
Page 43: Basic Configuration
Basic Configuration The Web Configurator (45) Initial Setup Example (55) System Status and Port Statistics (59) Basic Setting (65)
Page 45: The Web Configurator
H A P T E R The Web Configurator This section introduces the configuration and functions of the web configurator. 4.1 Introduction The web configurator is an HTML-based management interface that allows easy Switch setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions.
Page 46: The Status Screen
Chapter 4 The Web Configurator Figure 16 Web Configurator: Login 4 Click OK to view the first web configurator screen. 4.3 The Status Screen The Status screen is the first screen that displays when you access the web configurator. The following figure shows the navigating components of a web configurator screen. Figure 17 Web Configurator Home Screen (Status) B C D E A - Click the menu items to open submenu links, and then click on a submenu link to open the...
Page 47: Table 3 Navigation Panel Sub-Links Overview
Chapter 4 The Web Configurator B - Click this link to save your configuration into the Switch’s nonvolatile memory. Nonvolatile memory is saved in the configuration file from which the Switch booted from and it stays the same even if the Switch’s power is turned off. See Section 26.3 on page 192 information on saving your settings to a specific configuration file.
Page 48: Table 4 Web Configurator Screen Sub-Links Details
Chapter 4 The Web Configurator The following table lists the various web configurator screens within the sub-links. Table 4 Web Configurator Screen Sub-links Details ADVANCED BASIC SETTING IP APPLICATION MANAGEMENT APPLICATION System Info VLAN Status Static Routing Maintenance General Setup VLAN Port Setting DiffServ Firmware Upgrade...
Page 49: Table 5 Navigation Panel Links
Chapter 4 The Web Configurator The following table describes the links in the navigation panel. Table 5 Navigation Panel Links LINK DESCRIPTION Basic Settings System Info This link takes you to a screen that displays general system and hardware monitoring information. General Setup This link takes you to a screen where you can configure general identification information about the Switch.
Page 50: Change Your Password
Chapter 4 The Web Configurator Table 5 Navigation Panel Links (continued) LINK DESCRIPTION Static Route This link takes you to screens where you can configure static routes. A static route defines how the Switch should forward traffic by configuring the TCP/IP parameters manually.
Page 51: Saving Your Configuration
Chapter 4 The Web Configurator 4.4 Saving Your Configuration When you are done modifying the settings in a screen, click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off.
Page 52: Reload The Configuration File
Chapter 4 The Web Configurator 4.6.1 Reload the Configuration File Uploading the factory-default configuration file replaces the current configuration file with the factory-default configuration file. This means that you will lose all previous configurations and the speed of the console port will be reset to the default of 9600 bps with 8 data bits, no parity, one stop bit and flow control set to none.
Page 53: Help
Chapter 4 The Web Configurator Figure 20 Web Configurator: Logout Screen 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen.
Page 54 Chapter 4 The Web Configurator ES-2024 Series User’s Guide...
Page 55: Initial Setup Example
H A P T E R Initial Setup Example This chapter shows how to set up the Switch for an example network. 5.1 Overview The following lists the configuration steps for the initial setup: • Create a VLAN • Set port VLAN ID •...
Page 56: Setting Port Vid
Chapter 5 Initial Setup Example 1 Click Advanced Application and VLAN in the navigation panel and click the Static VLAN link. 2 In the Static VLAN screen, select ACTIVE, enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network.
Page 57: Configuring Switch Management Ip Address
Chapter 5 Initial Setup Example Figure 22 Initial Setup Network Example: Port VID 1 Click Advanced Applications and VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 10 and click Apply to set the VLAN port setting and click the Save button to save the...
Page 58 Chapter 5 Initial Setup Example 1 Click Basic Setting and IP Setup in the navigation panel. 2 Configure the related fields in the IP Setup screen. For the VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask.
Page 59: System Status And Port Statistics
H A P T E R System Status and Port Statistics This chapter describes the system status (web configurator home page) and port details screens. 6.1 Overview The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details.
Page 60: Status: Port Details
Chapter 6 System Status and Port Statistics Table 6 Status (continued) LABEL DESCRIPTION State If STP (Spanning Tree Protocol) is enabled, this field displays the STP state of the port (see Section 11.1.3 on page 97 for more information). If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP.
Page 61: Figure 25 Status: Port Details
Chapter 6 System Status and Port Statistics Figure 25 Status: Port Details The following table describes the labels in this screen. Table 7 Status > Port Details LABEL DESCRIPTION Port Info Port NO. This field displays the port number you are viewing. Name This field displays the name of the port.
Page 62 Chapter 6 System Status and Port Statistics Table 7 Status > Port Details (continued) LABEL DESCRIPTION This field is available for the PWR model only. MaxPower This field displays the maximum amount of power consumed by devices (powered devices, or PD) that use Power over Ethernet (PoE) to get power from the Switch on this port.
Page 63 Chapter 6 System Status and Port Statistics Table 7 Status > Port Details (continued) LABEL DESCRIPTION This field shows the number of packets (including bad packets) received that were 64 octets in length. 65-127 This field shows the number of packets (including bad packets) received that were between 65 and 127 octets in length.
Page 64 Chapter 6 System Status and Port Statistics ES-2024 Series User’s Guide...
Page 65: Basic Setting
H A P T E R Basic Setting This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Port Setup screens. 7.1 Overview The System Info screen displays general Switch information (such as firmware version number) and hardware polling information (such as fan speeds).
Page 66: Figure 26 Basic Setting > System Info
Chapter 7 Basic Setting Figure 26 Basic Setting > System Info The following table describes the labels in this screen. Table 8 Basic Setting > System Info LABEL DESCRIPTION System Name This field displays the descriptive name of the Switch for identification purposes. ZyNOS F/W This field displays the version number of the Switch's current firmware including the Version...
Page 67: General Setup
Chapter 7 Basic Setting Table 8 Basic Setting > System Info (continued) LABEL DESCRIPTION Current This shows the current temperature at this sensor. This field displays the maximum temperature measured at this sensor. This field displays the minimum temperature measured at this sensor. Threshold This field displays the upper temperature limit at this sensor.
Page 68: Figure 27 Basic Setting > General Setup
Chapter 7 Basic Setting Figure 27 Basic Setting > General Setup The following table describes the labels in this screen. Table 9 Basic Setting > General Setup LABEL DESCRIPTION System Name Choose a descriptive name for identification purposes. This name consists of up to 64 printable characters;...
Page 69: Introduction To Vlans
Chapter 7 Basic Setting Table 9 Basic Setting > General Setup (continued) LABEL DESCRIPTION Time Zone Select the time difference between UTC (Universal Time Coordinated, formerly known as GMT, Greenwich Mean Time) and your time zone from the drop-down list box.
Page 70: Switch Setup Screen
Chapter 7 Basic Setting VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain.
Page 71: Ip Setup
Chapter 7 Basic Setting Table 10 Basic Setting > Switch Setup (continued) LABEL DESCRIPTION GARP Timer: Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations.
Page 72: Ip Interfaces
Chapter 7 Basic Setting 7.6.1 IP Interfaces The Switch needs an IP address for it to be managed over the network. The factory default IP address is 192.168.1.1. The subnet mask specifies the network number portion of an IP address. The factory default subnet mask is 255.255.255.0. Configure IP addresses for accessing and managing the Switch from the ports belonging to the pre-defined VLAN(s).
Page 73 Chapter 7 Basic Setting Table 11 Basic Setting > IP Setup (continued) LABEL DESCRIPTION Static IP Select this option if you don't have a DHCP server or if you wish to assign static IP Address address information to the Switch. You need to fill in the following fields when you select this option.
Page 74: Port Setup
Chapter 7 Basic Setting 7.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to display the configuration screen. Figure 30 Basic Setting > Port Setup The following table describes the labels in this screen. Table 12 Basic Setting >...
Page 75 Chapter 7 Basic Setting Table 12 Basic Setting > Port Setup (continued) LABEL DESCRIPTION Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses. Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port.
Page 76 Chapter 7 Basic Setting ES-2024 Series User’s Guide...
Page 77: Advanced Setup
Advanced Setup VLAN (79) Static MAC Forward Setup (91) Filtering (93) Spanning Tree Protocol (95) Bandwidth Control (109) Broadcast Storm Control (111) Mirroring (113) Link Aggregation (115) Port Authentication (121) Port Security (125) Queuing Method (129) Multicast (131) Authentication & Accounting (145) IP Source Guard (159) Loop Guard (169)
Page 79: Vlan
H A P T E R VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-based VLANs. 8.1 Introduction to IEEE 802.1Q Tagged VLANs A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the switch on which they were created.
Page 80: Automatic Vlan Registration
Chapter 8 VLAN 8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN membership across switches. 8.2.1 GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de- register attribute values with other GARP participants within a bridged LAN. GARP is a protocol that provides a generic mechanism for protocols that serve a more specific application, for example, GVRP.
Page 81: Port Vlan Trunking
Chapter 8 VLAN 8.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Page 82: Static Vlan Status
Chapter 8 VLAN 8.5.1 Static VLAN Status Section 8.1 on page 79 for more information on Static VLAN. Click Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. Figure 33 Advanced Application > VLAN: VLAN Status The following table describes the labels in this screen.
Page 83: Configure A Static Vlan
Chapter 8 VLAN The following table describes the labels in this screen. Table 15 Advanced Application > VLAN > VLAN Detail LABEL DESCRIPTION VLAN Status Click this to go to the VLAN Status screen. This is the VLAN identification number that was configured in the Static VLAN screen.
Page 84: Configure Vlan Port Settings
Chapter 8 VLAN The following table describes the related labels in this screen. Table 16 Advanced Application > VLAN > Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings. Name Enter a descriptive name for the VLAN group for identification purposes. This name consists of up to 64 printable characters;...
Page 85: Figure 36 Advanced Application > Vlan > Vlan Port Setting
Chapter 8 VLAN Figure 36 Advanced Application > VLAN > VLAN Port Setting The following table describes the labels in this screen. Table 17 Advanced Application > VLAN > VLAN Port Setting LABEL DESCRIPTION GVRP GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network.
Page 86: Port-Based Vlan Setup
Chapter 8 VLAN Table 17 Advanced Application > VLAN > VLAN Port Setting (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 87: Figure 37 Advanced Application > Vlan: Port Based Vlan Setup (All Connected)
Chapter 8 VLAN Figure 37 Advanced Application > VLAN: Port Based VLAN Setup (All Connected) ES-2024 Series User’s Guide...
Page 88: Figure 38 Advanced Application > Vlan: Port Based Vlan Setup (Port Isolation)
Chapter 8 VLAN Figure 38 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) ES-2024 Series User’s Guide...
Page 89: Table 18 Advanced Application > Vlan: Port Based Vlan Setup
Chapter 8 VLAN The following table describes the labels in this screen. Table 18 Advanced Application > VLAN: Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose All connected or Port isolation. All connected means all ports can communicate with each other, that is, there are no virtual LANs.
Page 90 Chapter 8 VLAN ES-2024 Series User’s Guide...
Page 91: Static Mac Forward Setup
H A P T E R Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 9.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your network. 9.2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the MAC address table.
Page 92: Table 19 Advanced Application > Static Mac Forwarding
Chapter 9 Static MAC Forward Setup The following table describes the labels in this screen. Table 19 Advanced Application > Static MAC Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by clearing this check box.
Page 93: Filtering
H A P T E R Filtering This chapter discusses MAC address port filtering. 10.1 Configure a Filtering Rule Filtering means sifting traffic going through the Switch based on the MAC addresses and VLAN group (ID). Click Advanced Application > Filtering in the navigation panel to display the screen as shown next.
Page 94 Chapter 10 Filtering Table 20 Advanced Application > Filtering (continued) LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to clear the fields to the factory defaults. Index This field displays the index number of the rule. Click an index number to change the settings.
Page 95: Spanning Tree Protocol
H A P T E R Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning Tree Protocol • IEEE 802.1w Rapid Spanning Tree Protocol •...
Page 96: How Stp Works
Chapter 11 Spanning Tree Protocol Path cost is the cost of transmitting a frame onto a LAN through that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost.
Page 97: Stp Port States
Chapter 11 Spanning Tree Protocol 11.1.3 STP Port States STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate transient loops. Table 22 STP Port States PORT STATE DESCRIPTION Disabled STP is disabled (default).
Page 98: Figure 41 Stp/Rstp Network Example
Chapter 11 Spanning Tree Protocol Figure 41 STP/RSTP Network Example VLAN 1 VLAN 2 With MSTP, VLANs 1 and 2 are mapped to different spanning trees in the network. Thus traffic from the two VLANs travel on different paths. The following figure shows the network example using MSTP.
Page 99: Spanning Tree Configuration Screen
Chapter 11 Spanning Tree Protocol 11.1.4.3 MST Instance An MST Instance (MSTI) is a spanning tree instance. VLANs can be configured to run on a specific MSTI. Each created MSTI is identified by a unique number (known as an MST ID) known internally to a region.
Page 100: Configure Rapid Spanning Tree Protocol
Chapter 11 Spanning Tree Protocol Figure 45 Advanced Application > Spanning Tree Protocol Select the STP mode you want to configure on the Switch. 11.3 Configure Rapid Spanning Tree Protocol Use this screen to configure RSTP settings, see Section 11.1 on page 95 for more information on RSTP.
Page 101 Chapter 11 Spanning Tree Protocol Table 23 Advanced Application > Spanning Tree Protocol > RSTP (continued) LABEL DESCRIPTION Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch.
Page 102: Rapid Spanning Tree Protocol Status
Chapter 11 Spanning Tree Protocol 11.4 Rapid Spanning Tree Protocol Status Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 11.1 on page 95 for more information on RSTP. This screen is only available after you activate RSTP on the Switch.
Page 103: Configure Multiple Spanning Tree Protocol
Chapter 11 Spanning Tree Protocol 11.5 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 11.1.4 on page 97 for more information on MSTP. Figure 48 Advanced Application > Spanning Tree Protocol > MSTP ES-2024 Series User’s Guide...
Page 104: Table 25 Advanced Application > Spanning Tree Protocol > Mstp
Chapter 11 Spanning Tree Protocol The following table describes the labels in this screen. Table 25 Advanced Application > Spanning Tree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 49 on page 106).
Page 105: Multiple Spanning Tree Protocol Status
Chapter 11 Spanning Tree Protocol Table 25 Advanced Application > Spanning Tree Protocol > MSTP (continued) LABEL DESCRIPTION Port This field displays the port number. Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 106: Figure 49 Advanced Application > Spanning Tree Protocol > Status: Mstp
Chapter 11 Spanning Tree Protocol Figure 49 Advanced Application > Spanning Tree Protocol > Status: MSTP The following table describes the labels in this screen. Table 26 Advanced Application > Spanning Tree Protocol > Status: MSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you want to activate. Click MSTP to edit MSTP settings on the Switch.
Page 107 Chapter 11 Spanning Tree Protocol Table 26 Advanced Application > Spanning Tree Protocol > Status: MSTP (continued) LABEL DESCRIPTION Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. Configuration This field displays the configuration name for this MST region.
Page 108 Chapter 11 Spanning Tree Protocol ES-2024 Series User’s Guide...
Page 109: Bandwidth Control
H A P T E R Bandwidth Control This chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen. 12.1 Bandwidth Control Setup Bandwidth control means defining a maximum allowable bandwidth for incoming and/or out- going traffic flows on a port.
Page 110 Chapter 12 Bandwidth Control Table 27 Advanced Application > Bandwidth Control (continued) LABEL DESCRIPTION Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 111: Broadcast Storm Control
H A P T E R Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature. 13.1 Broadcast Storm Control Setup Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports.
Page 112: Table 28 Advanced Application > Broadcast Storm Control
Chapter 13 Broadcast Storm Control The following table describes the labels in this screen. Table 28 Advanced Application > Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature.
Page 113: Mirroring
H A P T E R Mirroring This chapter discusses port mirroring setup screens. 14.1 Port Mirroring Setup Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffic to) in order that you can examine the traffic from the monitor port without interference. Click Advanced Application >...
Page 114: Table 29 Advanced Application > Mirroring
Chapter 14 Mirroring The following table describes the labels in this screen. Table 29 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this check box to activate port mirroring on the Switch. Clear this check box to disable the feature. Monitor The monitor port is the port you copy the traffic to in order to examine it in more detail Port...
Page 115: Link Aggregation
H A P T E R Link Aggregation This chapter shows you how to logically aggregate physical links to form one logical, higher- bandwidth link. 15.1 Link Aggregation Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link.
Page 116: Link Aggregation Id
Chapter 15 Link Aggregation • You must connect all ports point-to-point to the same Ethernet switch and configure the ports for LACP trunking. • LACP only works on full-duplex links. • All ports in the same trunk group must have the same media type, speed, duplex mode and flow control settings.
Page 117: Link Aggregation Setting
Chapter 15 Link Aggregation Table 32 Advanced Application > Link Aggregation Status (continued) LABEL DESCRIPTION Aggregator ID Link Aggregator ID consists of the following: system priority, MAC address, key, port priority and port number. Refer to Section 15.2.1 on page 116 for more information on this field.
Page 118: Link Aggregation Control Protocol
Chapter 15 Link Aggregation Table 33 Advanced Application > Link Aggregation > Link Aggregation Setting (continued) LABEL DESCRIPTION Port This field displays the port number. Group Select the trunk group to which a port belongs. Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 119: Static Trunking Example
Chapter 15 Link Aggregation The following table describes the labels in this screen. Table 34 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP LABEL DESCRIPTION Link Note: Do not configure this screen unless you want to enable Aggregation dynamic link aggregation.
Page 120: Figure 56 Trunking Example - Physical Connections
Chapter 15 Link Aggregation Figure 56 Trunking Example - Physical Connections 2 Configure static trunking - Click Advanced Application > Link Aggregation > Link Aggregation Setting. In this screen activate trunking group T1 and select the ports that should belong to this group as shown in the figure below. Click Apply when you are done.
Page 121: Port Authentication
H A P T E R Port Authentication This chapter describes the IEEE 802.1x methods. 16.1 Port Authentication Overview Port authentication is a way to validate access to ports on the Switch to clients based on an external server (authentication server). The Switch supports IEEE 802.1x authentication, in which an authentication server validates access to a port based on a username and password provided by the user.
Page 122: Port Authentication Configuration
Chapter 16 Port Authentication Figure 58 IEEE 802.1x Authentication Process New Connection Login Info Request Login Credentials Authentication Request Authentication Reply Session Granted/Denied 16.2 Port Authentication Configuration To enable port authentication, first activate the port authentication method(s) you want to use (both on the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct >...
Page 123: Figure 60 Advanced Application > Port Authentication > 802.1X
Chapter 16 Port Authentication Figure 60 Advanced Application > Port Authentication > 802.1x The following table describes the labels in this screen. Table 35 Advanced Application > Port Authentication > 802.1x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the Switch. Note: You must first enable 802.1x authentication on the Switch before configuring it on each port.
Page 124 Chapter 16 Port Authentication ES-2024 Series User’s Guide...
Page 125: Port Security
H A P T E R Port Security This chapter shows you how to set up port security. 17.1 Port Security Overview Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. See Chapter 9 on page 91 information on configuring static MAC address forwarding.
Page 126: Figure 61 Advanced Application > Port Security
Chapter 17 Port Security Figure 61 Advanced Application > Port Security The following table describes the labels in this screen. Table 36 Advanced Application > Port Security LABEL DESCRIPTION Active Select this check box to enable the port security feature on the Switch. Port This field displays a port number.
Page 127: Port Security Example
Chapter 17 Port Security Table 36 Advanced Application > Port Security (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 128: Table 37 Port Security Example
Chapter 17 Port Security The following table is a summary of configuration and results of this example. Table 37 Port Security Example SETTINGS PORT ACTIVATE ACTIVATE LIMIT NO. OF RESULT PORT ADDRESS LEARNED MAC SECURITY LEARNING ADDRESSES 0 (disables limits) Forward all packets, learn all MAC addresses.
Page 129: Queuing Method
H A P T E R Queuing Method This chapter introduces the queuing methods supported. 18.1 Queuing Method Overview Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignment in Switch Setup and 802.1p Priority in Port Setup for related information.
Page 130: Configuring Queuing
Chapter 18 Queuing Method Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services queues based on their priority and queue weight (the number you configure in the queue Weight field) rather than a fixed amount of bandwidth. WRR is activated only when a port has more traffic than it can handle.
Page 131: Multicast
H A P T E R Multicast This chapter shows you how to configure various multicast features. 19.1 Multicast Overview Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast delivers IP packets to just a group of hosts on the network.
Page 132: Igmp Snooping And Vlans
Chapter 19 Multicast The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group. IGMP snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your Switch.
Page 133: Figure 65 Advanced Application > Multicast > Multicast Setting
Chapter 19 Multicast Figure 65 Advanced Application > Multicast > Multicast Setting The following table describes the labels in this screen. Table 41 Advanced Application > Multicast > Multicast Setting LABEL DESCRIPTION IGMP Snooping Use these settings to configure IGMP Snooping. Active Select Active to enable IGMP Snooping to forward group multicast traffic only to ports that are members of that group.
Page 134: Igmp Snooping Vlan
Chapter 19 Multicast Table 41 Advanced Application > Multicast > Multicast Setting (continued) LABEL DESCRIPTION Port This field displays the port number. Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by- port basis.
Page 135: Figure 66 Advanced Application > Multicast > Multicast Setting > Igmp Snooping Vlan
Chapter 19 Multicast Figure 66 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN The following table describes the labels in this screen. Table 42 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN LABEL DESCRIPTION Mode Select auto to have the Switch learn multicast group membership information of any VLANs automatically.
Page 136: Igmp Filtering Profile
Chapter 19 Multicast Table 42 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN LABEL DESCRIPTION Index This is the number of the IGMP snooping VLAN entry in the table. Name This field displays the descriptive name for this VLAN group. This field displays the ID number of the VLAN group.
Page 137: Mvr Overview
Chapter 19 Multicast Table 43 Advanced Application > Multicast > Multicast Setting > IGMP Filtering Profile LABEL DESCRIPTION Click Add to save the profile to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 138: Mvr Modes
Chapter 19 Multicast 19.6.2 MVR Modes You can set your Switch to operate in either dynamic or compatible mode. In dynamic mode, the Switch sends IGMP leave and join reports to the other multicast devices (such as multicast routers or servers) in the multicast VLAN. This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to the receiver ports.
Page 139: Figure 70 Advanced Application > Multicast > Multicast Setting > Mvr
Chapter 19 Multicast Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. Figure 70 Advanced Application > Multicast > Multicast Setting > MVR The following table describes the related labels in this screen. Table 44 Advanced Application >...
Page 140: Mvr Group Configuration
Chapter 19 Multicast Table 44 Advanced Application > Multicast > Multicast Setting > MVR (continued) LABEL DESCRIPTION Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 141: Mvr Configuration Example
Chapter 19 Multicast Figure 71 Advanced Application > Multicast > Multicast Setting > MVR: Group Configuration The following table describes the labels in this screen. Table 45 Advanced Application > Multicast > Multicast Setting > MVR: Group Configuration LABEL DESCRIPTION Multicast Select a multicast VLAN ID (that you configured in the MVR screen) from the drop- VLAN ID...
Page 142: Figure 72 Mvr Configuration Example
Chapter 19 Multicast Figure 72 MVR Configuration Example To configure the MVR settings on the Switch, create a multicast group in the MVR screen and set the receiver and source ports. Figure 73 MVR Configuration Example To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen.
Page 143: Figure 74 Mvr Group Configuration Example
Chapter 19 Multicast Figure 74 MVR Group Configuration Example Figure 75 MVR Group Configuration Example ES-2024 Series User’s Guide...
Page 144 Chapter 19 Multicast ES-2024 Series User’s Guide...
Page 145: Authentication & Accounting
H A P T E R Authentication & Accounting This chapter describes how to configure authentication and accounting settings on the Switch. 20.1 Authentication, Authorization and Accounting Authentication is the process of determining who a user is and validating access to the Switch. The Switch can authenticate users who try to log in based on user accounts configured on the Switch itself.
Page 146: Radius And Tacacs
Chapter 20 Authentication & Accounting 20.1.2 RADIUS and TACACS+ RADIUS and TACACS+ are security protocols used to authenticate users by means of an external server instead of (or in addition to) an internal device user database that is limited to the memory capacity of the device.
Page 147: Figure 78 Advanced Application > Auth And Acct > Radius Server Setup
Chapter 20 Authentication & Accounting Figure 78 Advanced Application > Auth and Acct > RADIUS Server Setup The following table describes the labels in this screen. Table 47 Advanced Application > Auth and Acct > RADIUS Server Setup LABEL DESCRIPTION Authentication Use this section to configure your RADIUS authentication settings.
Page 148: Tacacs+ Server Setup
Chapter 20 Authentication & Accounting Table 47 Advanced Application > Auth and Acct > RADIUS Server Setup (continued) LABEL DESCRIPTION Delete Check this box if you want to remove an existing RADIUS server entry from the Switch. This entry is deleted when you click Apply. Apply Click Apply to save your changes to the Switch’s run-time memory.
Page 149: Figure 79 Advanced Application > Auth And Acct > Tacacs+ Server Setup
Chapter 20 Authentication & Accounting Figure 79 Advanced Application > Auth and Acct > TACACS+ Server Setup The following table describes the labels in this screen. Table 48 Advanced Application > Auth and Acct > TACACS+ Server Setup LABEL DESCRIPTION Authentication Use this section to configure your TACACS+ authentication settings.
Page 150: Authentication And Accounting Setup
Chapter 20 Authentication & Accounting Table 48 Advanced Application > Auth and Acct > TACACS+ Server Setup (continued) LABEL DESCRIPTION Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network.
Page 151: Figure 80 Advanced Application > Auth And Acct > Auth And Acct Setup
Chapter 20 Authentication & Accounting Figure 80 Advanced Application > Auth and Acct > Auth and Acct Setup The following table describes the labels in this screen. Table 49 Advanced Application > Auth and Acct > Auth and Acct Setup LABEL DESCRIPTION Authentication...
Page 152 Chapter 20 Authentication & Accounting Table 49 Advanced Application > Auth and Acct > Auth and Acct Setup (continued) LABEL DESCRIPTION Login These fields specify which database the Switch should use (first, second and third) to authenticate administrator accounts (users for Switch management). Configure the local user accounts in the Access Control >...
Page 153: Vendor Specific Attribute
The VSAs are composed of the following: • Vendor-ID: An identification number assigned to the company by the IANA (Internet Assigned Numbers Authority). ZyXEL’s vendor ID is 890. • Vendor-Type: A vendor specified attribute, identifying the setting you want to modify.
Page 154: Supported Radius Attributes
Chapter 20 Authentication & Accounting Table 50 Supported VSAs FUNCTION ATTRIBUTE Egress Bandwidth Vendor-Id = 890 Assignment Vendor-Type = 2 Vendor-data = egress rate (Kbps in decimal format) Privilege Assignment Vendor-ID = 890 Vendor-Type = 3 Vendor-Data = "shell:priv-lvl=N" Vendor-ID = 9 (CISCO) Vendor-Type = 1 (CISCO-AVPAIR)
Page 155: Attributes Used For Authentication
Chapter 20 Authentication & Accounting 20.3.1 Attributes Used for Authentication The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 20.3.1.1 Attributes Used for Authenticating Privilege Access User-Name - the format of the User-Name attribute is $enab#$, where # is the privilege level (1- User-Password NAS-Identifier NAS-IP-Address...
Page 156: Table 52 Radius Attributes - Exec Events Via Console
Chapter 20 Authentication & Accounting 20.3.2.2 Attributes Used for Accounting Exec Events The attributes are listed in the following table along with the time that they are sent (the difference between Console and Telnet/SSH Exec events is that the Telnet/SSH events utilize the Calling-Station-Id attribute): Table 52 RADIUS Attributes - Exec Events via Console ATTRIBUTE...
Page 157 Chapter 20 Authentication & Accounting Table 54 RADIUS Attributes - Exec Events via Console (continued) ATTRIBUTE START INTERIM-UPDATE STOP NAS-Port-Type Acct-Status-Type Acct-Delay-Time Acct-Session-Id Acct-Authentic Acct-Input-Octets Acct-Output-Octets Acct-Session-Time Acct-Input-Packets Acct-Output-Packets Acct-Terminate-Cause Acct-Input-Gigawords Acct-Output-Gigawords ES-2024 Series User’s Guide...
Page 158 Chapter 20 Authentication & Accounting ES-2024 Series User’s Guide...
Page 159: Ip Source Guard
H A P T E R IP Source Guard Use IP source guard to filter unauthorized ARP packets in your network. 21.1 IP Source Guard Overview IP source guard uses a binding table to distinguish between authorized and unauthorized ARP packets in your network.
Page 160 Chapter 21 IP Source Guard In this example, computer B tries to establish a connection with computer A. Computer X is in the same broadcast domain as computer A and intercepts the ARP request for computer A. Then, computer X does the following things: •...
Page 161: Ip Source Guard
Chapter 21 IP Source Guard 21.2 IP Source Guard Use this screen to look at the current bindings for ARP inspection. Bindings are used by ARP inspection to distinguish between authorized and unauthorized packets in the network. The Switch learns the bindings from information provided manually by administrators (static bindings).
Page 162: Figure 83 Ip Source Guard Static Binding
Chapter 21 IP Source Guard Figure 83 IP Source Guard Static Binding The following table describes the labels in this screen. Table 56 IP Source Guard Static Binding LABEL DESCRIPTION MAC Address Enter the source MAC address in the binding. IP Address Enter the IP address assigned to the MAC address in the binding.
Page 163: Arp Inspection Status
Chapter 21 IP Source Guard 21.4 ARP Inspection Status Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unauthorized ARP packet. When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet.
Page 164: Arp Inspection Configure
Chapter 21 IP Source Guard Figure 85 ARP Inspection Log Status The following table describes the labels in this screen. Table 58 ARP Inspection Log Status LABEL DESCRIPTION Clearing log status table Click Apply to remove all the log messages that were generated by ARP packets and that have not been sent to the syslog server yet.
Page 165: Figure 86 Arp Inspection Configure
Chapter 21 IP Source Guard Figure 86 ARP Inspection Configure The following table describes the labels in this screen. Table 59 ARP Inspection Configure LABEL DESCRIPTION Active Select this to enable ARP inspection on the Switch. You still have to enable ARP inspection on specific VLAN and specify trusted ports.
Page 166: Arp Inspection Port Configure
Chapter 21 IP Source Guard Table 59 ARP Inspection Configure (continued) LABEL DESCRIPTION Syslog rate Enter the maximum number of syslog messages the Switch can send to the syslog server in one batch. This number is expressed as a rate because the batch frequency is determined by the Log Interval.
Page 167: Arp Inspection Vlan Configure
Chapter 21 IP Source Guard The following table describes the labels in this screen. Table 60 ARP Inspection Port Configure LABEL DESCRIPTION Port This field displays the port number. If you configure the * port, the settings are applied to all of the ports. Trusted State Select whether this port is a trusted port (Trusted) or an untrusted port (Untrusted).
Page 168 Chapter 21 IP Source Guard Table 61 ARP Inspection VLAN Configure (continued) LABEL DESCRIPTION Specify when the Switch generates log messages for receiving ARP packets from the VLAN. None: The Switch does not generate any log messages when it receives an ARP packet from the VLAN.
Page 169: Loop Guard
H A P T E R Loop Guard This chapter shows you how to configure the Switch to guard against loops on the edge of your network. 22.1 Loop Guard Overview Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch.
Page 170: Figure 90 Switch In Loop State
Chapter 22 Loop Guard The following figure shows port N on switch A connected to switch B. Switch B is in loop state. When broadcast or multicast packets leave port N and reach switch B, they are sent back to port N on A as they are rebroadcast from B. Figure 90 Switch in Loop State The loop guard feature checks to see if a loop guard enabled port is connected to a switch in loop state.
Page 171: Loop Guard Setup
Chapter 22 Loop Guard After resolving the loop problem on your network you can re-activate the disabled port (see Section 7.7 on page 74). 22.2 Loop Guard Setup Click Advanced Application > Loop Guard in the navigation panel to display the screen as shown.
Page 172 Chapter 22 Loop Guard Table 62 Advanced Application > Loop Guard (continued) LABEL DESCRIPTION Active Select this check box to enable the loop guard feature on this port. The Switch sends probe packets from this port to check if the Switch it is connected to is in loop state. If the Switch that this port is connected is in loop state the Switch will shut down this port.
Page 173: Ip Application
IP Application Static Route (175) Differentiated Services (179) DHCP (183)
Page 175: Static Route
H A P T E R Static Route This chapter shows you how to configure static routes. 23.1 Static Routing Overview The Switch uses IP for communication with management computers, for example using HTTP, telnet, SSH, or SNMP. Use IP static routes to have the Switch respond to remote management stations that are not reachable through the default gateway.
Page 176: Figure 95 Ip Application > Static Routing
Chapter 23 Static Route Figure 95 IP Application > Static Routing The following table describes the related labels you use to create a static route. Table 63 IP Application > Static Routing LABEL DESCRIPTION Active This field allows you to activate/deactivate this static route. Name Enter a descriptive name (up to 32 English keyboard characters) for identification purposes.
Page 177 Chapter 23 Static Route Table 63 IP Application > Static Routing (continued) LABEL DESCRIPTION Gateway This field displays the IP address of the gateway. The gateway is an immediate Address neighbor of your Switch that will forward the packet to the destination. Metric This field displays the cost of transmission for routing purposes.
Page 178 Chapter 23 Static Route ES-2024 Series User’s Guide...
Page 179: Differentiated Services
H A P T E R Differentiated Services This chapter shows you how to configure Differentiated Services (DiffServ) on the Switch. 24.1 DiffServ Overview Quality of Service (QoS) is used to prioritize source-to-destination traffic flows. All packets in the flow are given the same priority. You can use CoS (class of service) to give different priorities to different packet types.
Page 180: Diffserv Network Example
Chapter 24 Differentiated Services 24.1.2 DiffServ Network Example The following figure depicts a DiffServ network consisting of a group of directly connected DiffServ-compliant network devices. The boundary node (A in Figure 97) in a DiffServ network classifies (marks with a DSCP value) the incoming packets into different traffic flows (Platinum, Gold, Silver, Bronze) based on the configured marking rules.
Page 181: Dscp-To-Ieee 802.1P Priority Settings
Chapter 24 Differentiated Services Figure 98 IP Application > DiffServ The following table describes the labels in this screen. Table 64 IP Application > DiffServ LABEL DESCRIPTION Active Select this option to enable DiffServ on the Switch. Port This field displays the index number of a port on the Switch. Settings in this row apply to all ports.
Page 182: Configuring Dscp Settings
Chapter 24 Differentiated Services The following table shows the default DSCP-to-IEEE802.1p mapping. Table 65 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 – 7 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 –...
Page 183: Dhcp
H A P T E R DHCP This chapter shows you how to configure the DHCP feature. 25.1 DHCP Overview DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server. You can configure the Switch as a DHCP relay agent.
Page 184: Dhcp Relay
Chapter 25 DHCP Figure 100 IP Application > DHCP Status The following table describes the labels in this screen. Table 67 IP Application > DHCP Status LABEL DESCRIPTION Relay Status This section displays configuration settings related to the Switch’s DHCP relay mode.
Page 185: Configuring Dhcp Global Relay
Chapter 25 DHCP Table 68 Relay Agent Information FIELD LABELS DESCRIPTION VLAN ID (2 bytes) This is the VLAN that the port belongs to. Information (up to 32 bytes) This optional, read-only field is set according to system name set in Basic Settings > General Setup. 25.3.2 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP Relay screen.
Page 186: Configuring Dhcp Vlan Settings
Chapter 25 DHCP Figure 102 Global DHCP Relay Network Example DHCP Server: 192.168.1.100 VLAN2 VLAN1 Configure the DHCP Relay screen as shown. Make sure you select the Option 82 check box to set the Switch to send additional information (such as the VLAN ID) together with the DHCP requests to the DHCP server.
Page 187: Figure 104 Ip Application > Dhcp > Vlan
Chapter 25 DHCP Figure 104 IP Application > DHCP > VLAN The following table describes the labels in this screen. Table 70 IP Application > DHCP > VLAN LABEL DESCRIPTION Enter the ID number of the VLAN to which these DHCP settings apply. Remote DHCP Enter the IP address of a DHCP server in dotted decimal notation.
Page 188: Example: Dhcp Relay For Two Vlans
Chapter 25 DHCP 25.4.1 Example: DHCP Relay for Two VLANs The following example displays two VLANs (VIDs 1 and 2) for a campus network. Two DHCP servers are installed to serve each VLAN. The system is set up to forward DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.168.1.100.
Page 189: Management
Management Maintenance (191) Access Control (197) Diagnostic (215) Syslog (217) Cluster Management (221) MAC Table (227) ARP Table (229) Configure Clone (231)
Page 191: Maintenance
H A P T E R Maintenance This chapter explains how to configure the maintenance screens that let you maintain the firmware and configuration files. 26.1 The Maintenance Screen Use this screen to manage firmware and your configuration files. Click Management > Maintenance in the navigation panel to open the following screen.
Page 192: Load Factory Default
Chapter 26 Maintenance Table 71 Management > Maintenance (continued) LABEL DESCRIPTION Save Click Config 1 to save the current configuration settings to Configuration 1 on the Configuration Switch. Reboot Click Config 1 to reboot the system and load Configuration 1 on the Switch. System Note: Make sure to click the Save button in any screen to save your settings to the current configuration on the Switch.
Page 193: Reboot System
Chapter 26 Maintenance 26.4 Reboot System Reboot System allows you to restart the Switch without physically turning the power off. The Switch loads configuration one (Config 1) when you reboot. Follow the steps below to reboot the Switch. 1 In the Maintenance screen, click the Config 1 button next to Reboot System to reboot and load configuration one.
Page 194: Restore A Configuration File
Chapter 26 Maintenance 26.6 Restore a Configuration File Restore a previously saved configuration from your computer to the Switch using the Restore Configuration screen. Figure 111 Management > Maintenance > Restore Configuration Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to display the Choose File screen (below) from which you can locate it.
Page 195: Ftp Command Line
Switch’s settings, they can be saved back to your computer under a filename of your choosing. ZyNOS (ZyXEL Network Operating System sometimes referred to as the “ras” file) is the system firmware and has a “bin” filename extension.
Page 196: Gui-Based Ftp Clients
Chapter 26 Maintenance 5 Enter to set transfer mode to binary. 6 Use to transfer files from the computer to the Switch, for example, transfers the firmware on your computer (firmware.bin) to the firmware.bin ras Switch and renames it to “ras”. Similarly, transfers the put config.cfg config configuration file on your computer (config.cfg) to the Switch and renames it to...
Page 197: Access Control
H A P T E R Access Control This chapter describes how to control access to the Switch. 27.1 Access Control Overview A console port and FTP are allowed one session each, Telnet and SSH share nine sessions, up to five Web sessions (five different usernames and passwords) and/or limitless SNMP access control sessions are allowed.
Page 198: About Snmp
Chapter 27 Access Control 27.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between the network management system (NMS) and a network element (NE). A manager station can manage and monitor the Switch through the network via SNMP version one (SNMPv1), SNMP version 2c or SNMP version 3.
Page 199: Snmp V3 And Security
Chapter 27 Access Control 27.3.1 SNMP v3 and Security SNMP v3 enhances security for SNMP management. SNMP managers can be required to authenticate with agents before conducting SNMP management sessions. Security can be further enhanced by encrypting the SNMP messages sent from the managers. Encryption protects the contents of the SNMP messages.
Page 200: Table 77 Snmp Interface Traps
Chapter 27 Access Control Table 76 SNMP System Traps (continued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION voltage VoltageEventOn 1.3.6.1.4.1.890.1.5.8.27.27.2.1 This trap is sent when the voltage goes above or below the normal operating range. VoltageEventClear 1.3.6.1.4.1.890.1.5.8.27.27.2.2 This trap is sent when the voltage returns to the normal operating range.
Page 201: Table 78 Aaa Traps
Chapter 27 Access Control Table 78 AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION authentication authenticationFailure 1.3.6.1.6.3.1.1.5.5 This trap is sent when authentication fails due to incorrect user name and/or password. AuthenticationFailureEvent 1.3.6.1.4.1.890.1.5.8.16.27.2.1 This trap is sent when authentication fails due to incorrect 1.3.6.1.4.1.890.1.5.8.27.27.2.1 user name and/or password.
Page 202: Configuring Snmp
Chapter 27 Access Control Table 80 SNMP Switch Traps (continued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION mactable MacTableFullEventOn 1.3.6.1.4.1.890.1.5.8.16.27.2.1 This trap is sent when more than 99% of the MAC table is used. 1.3.6.1.4.1.890.1.5.8.27.27.2.1 MacTableFullEventClear 1.3.6.1.4.1.890.1.5.8.16.27.2.2 This trap is sent when less than 95% of the MAC table is used.
Page 203: Table 81 Management > Access Control > Snmp
Chapter 27 Access Control The following table describes the labels in this screen. Table 81 Management > Access Control > SNMP LABEL DESCRIPTION General Setting Use this section to specify the SNMP version and community (password) values. Version Select the SNMP version for the Switch. The SNMP version on the Switch must match the version on the SNMP manager.
Page 204: Configuring Snmp Trap Group
Chapter 27 Access Control Table 81 Management > Access Control > SNMP (continued) LABEL DESCRIPTION Security Level Select whether you want to implement authentication and/or encryption for SNMP communication from this user. Choose: • noauth -to use the username as the password string to send to the SNMP manager.
Page 205: Setting Up Login Accounts
Chapter 27 Access Control The following table describes the labels in this screen. Table 82 Management > Access Control > SNMP > Trap Group LABEL DESCRIPTION Trap Destination Select one of your configured trap destination IP addresses. These are the IP addresses of the SNMP managers.
Page 206: Figure 117 Management > Access Control > Logins
Chapter 27 Access Control Figure 117 Management > Access Control > Logins The following table describes the labels in this screen. Table 83 Management > Access Control > Logins LABEL DESCRIPTION Administrator This is the default administrator account with the “admin” user name. You cannot change the default administrator user name.
Page 207: Ssh Overview
Chapter 27 Access Control 27.4 SSH Overview Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network. Figure 118 SSH Communication Example 27.5 How SSH works The following table summarizes how a secure connection is established between two remote...
Page 208: Ssh Implementation On The Switch
Chapter 27 Access Control 2 Encryption Method Once the identification is verified, both the client and server must agree on the type of encryption method to use. 3 Authentication and Data Transmission After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server.
Page 209: Https Example
Chapter 27 Access Control Figure 120 HTTPS Implementation If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts. 27.8 HTTPS Example If you haven’t changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address/”...
Page 210: Netscape Navigator Warning Messages
Chapter 27 Access Control 27.8.2 Netscape Navigator Warning Messages When you attempt to access the Switch HTTPS server, a Website Certified by an Unknown Authority screen pops up asking if you trust the server certificate. Click Examine Certificate if you want to verify that the certificate is from the Switch. If Accept this certificate temporarily for this session is selected, then click OK to continue in Netscape.
Page 211: Service Port Access Control
Chapter 27 Access Control Figure 124 Example: Lock Denoting a Secure Connection 27.9 Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure “trusted computer(s)” for each service in the Remote Management screen (discussed later).
Page 212: Remote Management
Chapter 27 Access Control The following table describes the fields in this screen. Table 84 Management > Access Control > Service Access Control LABEL DESCRIPTION Services Services you may use to access the Switch are listed here. Active Select this option for the corresponding services that you want to allow to access the Switch.
Page 213 Chapter 27 Access Control Table 85 Management > Access Control > Remote Management (continued) LABEL DESCRIPTION Telnet/FTP/ Select services that may be used for managing the Switch from the specified trusted HTTP/ICMP/ computers. SNMP/SSH/ HTTPS Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 214 Chapter 27 Access Control ES-2024 Series User’s Guide...
Page 215: Diagnostic
H A P T E R Diagnostic This chapter explains the Diagnostic screen. 28.1 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 127 Management >...
Page 216 Chapter 28 Diagnostic ES-2024 Series User’s Guide...
Page 217: Syslog
H A P T E R Syslog This chapter explains the syslog screens. 29.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server.
Page 218: Syslog Server Setup
Chapter 29 Syslog Figure 128 Management > Syslog The following table describes the labels in this screen. Table 88 Management > Syslog LABEL DESCRIPTION Syslog Select Active to turn on syslog (system logging) and then configure the syslog setting Logging Type This column displays the names of the categories of logs that the device can generate.
Page 219: Figure 129 Management > Syslog > Server Setup
Chapter 29 Syslog Figure 129 Management > Syslog > Server Setup The following table describes the labels in this screen. Table 89 Management > Syslog > Server Setup LABEL DESCRIPTION Active Select this check box to have the device send logs to this syslog server. Clear the check box if you want to create a syslog server entry but not have the device send logs to it (you can edit the entry later).
Page 220 Chapter 29 Syslog ES-2024 Series User’s Guide...
Page 221: Cluster Management
Table 90 ZyXEL Clustering Management Specifications Maximum number of cluster members Cluster Member Models Must be compatible with ZyXEL cluster management implementation. Cluster Manager The switch through which you manage the cluster member switches.
Page 222: Cluster Management Status
Chapter 30 Cluster Management Figure 130 Clustering Application Example 30.2 Cluster Management Status Click Management > Cluster Management in the navigation panel to display the following screen. A cluster can only have one manager. Figure 131 Management > Cluster Management ES-2024 Series User’s Guide...
Page 223: Cluster Member Switch Management
Chapter 30 Cluster Management The following table describes the labels in this screen. Table 91 Management > Cluster Management LABEL DESCRIPTION Status This field displays the role of this Switch within the cluster. Manager Member (you see this if you access this screen in the cluster member switch directly and not via the cluster manager) None (neither a manager nor a member of a cluster) Manager...
Page 224: Clustering Management Configuration
Chapter 30 Cluster Management 30.2.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. Figure 133 Example: Uploading Firmware to a Cluster Member Switch C:\>ftp 192.168.1.1 Connected to 192.168.1.1.
Page 225: Figure 134 Management > Clustering Management > Configuration
Chapter 30 Cluster Management Figure 134 Management > Clustering Management > Configuration The following table describes the labels in this screen. Table 93 Management > Clustering Management > Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this Switch become the cluster manager switch. A cluster can only have one manager.
Page 226 Chapter 30 Cluster Management Table 93 Management > Clustering Management > Configuration (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 227: Mac Table
H A P T E R MAC Table This chapter introduces the MAC Table screen. 31.1 MAC Table Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen).
Page 228: Viewing The Mac Table
Chapter 31 MAC Table 31.2 Viewing the MAC Table Click Management > MAC Table in the navigation panel to display the following screen. Figure 136 Management > MAC Table The following table describes the labels in this screen. Table 94 Management > MAC Table LABEL DESCRIPTION Sort by...
Page 229: Arp Table
H A P T E R ARP Table This chapter introduces ARP Table. 32.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network.
Page 230: Figure 137 Management > Arp Table
Chapter 32 ARP Table Figure 137 Management > ARP Table The following table describes the labels in this screen. Table 95 Management > ARP Table LABEL DESCRIPTION Index This is the ARP Table entry number. IP Address This is the learned IP address of a device connected to a Switch port with corresponding MAC address below.
Page 231: Configure Clone
H A P T E R Configure Clone This chapter shows you how you can copy the settings of one port onto other ports. 33.1 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports.
Page 232: Table 96 Management > Configure Clone
Chapter 33 Configure Clone The following table describes the labels in this screen. Table 96 Management > Configure Clone LABEL DESCRIPTION Source/ Enter the source port under the Source label. This port’s attributes are copied. Destination Enter the destination port or ports under the Destination label. These are the ports Port which are going to have the same attributes as the source port.
Page 233: Appendices And Index
Appendices and Index Product Specifications (235) IP Addresses and Subnetting (243) Legal Information (251) Customer Support (255) Index (261)
Page 235: Appendix A Product Specifications
P P E N D I X Product Specifications The following tables summarize the Switch’s hardware and firmware features. Table 97 Hardware Specifications SPECIFICATION DESCRIPTION Dimensions Standard 19” rack mountable ES-2024A: 438 mm (W) x 173 mm (D) x 44.5 mm (H) ES-2024PWR: 438 mm (W) x 270 mm (D) x 44.5 mm (H) Weight ES-2024A: 2.2 kg...
Page 236: Table 98 Feature Descriptions
Appendix A Product Specifications Table 97 Hardware Specifications (continued) SPECIFICATION DESCRIPTION Storage Environment Temperature: -25º C ~ 70º C (13º F ~ 158º F) Humidity: 10 ~ 90% (non-condensing) Fast Ethernet Ports 24 100Base-Tx ports RJ-45 Ethernet cable connector Auto-negotiation Auto-MDI/MDI-X Compliant with 802.3/802.3u Back-pressure flow control in half duplex mode...
Page 237 The Switch can generate syslog messages and send it to a syslog server. Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator, CLI or an FTP/TFTP tool to put it on the Switch.
Page 238: Table 99 Firmware Specifications
Appendix A Product Specifications Table 99 Firmware Specifications FEATURE SPECIFICATION Default IP Address 192.168.1.1 Number of IP Addresses Configurable Default Subnet Mask 255.255.255.0 (24 bits) Administrator User Name admin Default Password 1234 Number of Login Accounts 4 management accounts configured on the Switch. Configurable on the Switch Authentication via RADIUS and TACACS+ also available.
Page 239 Appendix A Product Specifications Table 99 Firmware Specifications (continued) FEATURE SPECIFICATION Security Static MAC address forward Static MAC address filtering Block unresolved address forwarding/Port security Limiting number of dynamic address per port. 802.1x port authentication by RADIUS Management login by RADIUS authentication. SSHv1/v2 MAC freeze Intrusion lock...
Page 240: Table 100 Standards Supported
Appendix A Product Specifications The following list, which is not exhaustive, illustrates the standards supported in the Switch. Table 100 Standards Supported STANDARD DESCRIPTION RFC 826 Address Resolution Protocol (ARP) RFC 867 Daytime Protocol RFC 868 Time Protocol RFC 894 Ethernet II Encapsulation RFC 1112 Internet Group Management Protocol v1...
Page 241 Appendix A Product Specifications Table 100 Standards Supported (continued) STANDARD DESCRIPTION IEEE 802.3u Fast Ethernet IEEE 802.3x Flow Control Safety UL 60950-1 CSA 60950-1 EN 60950-1 IEC 60950-1 FCC Part 15 (Class A) CE EMC (Class A) ES-2024 Series User’s Guide...
Page 242 Appendix A Product Specifications ES-2024 Series User’s Guide...
Page 243: Appendix B Ip Addresses And Subnetting
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 244: Figure 140 Network Number And Host Id
Appendix B IP Addresses and Subnetting Figure 140 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask. Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation).
Page 245: Table 102 Subnet Masks
Appendix B IP Addresses and Subnetting Subnet masks are expressed in dotted decimal notation just like IP addresses. The following examples show the binary and decimal notation for 8-bit, 16-bit, 24-bit and 29-bit subnet masks. Table 102 Subnet Masks BINARY DECIMAL 4TH OCTET OCTET...
Page 246: Figure 141 Subnetting Example: Before Subnetting
Appendix B IP Addresses and Subnetting Table 104 Alternative Subnet Mask Notation (continued) ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.192 1100 0000 255.255.255.224 1110 0000 255.255.255.240 1111 0000 255.255.255.248 1111 1000 255.255.255.252 1111 1100 Subnetting You can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the company network for security reasons.
Page 247: Figure 142 Subnetting Example: After Subnetting
Appendix B IP Addresses and Subnetting Figure 142 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of 2 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address).
Page 248: Table 106 Subnet 2
Appendix B IP Addresses and Subnetting Table 106 Subnet 2 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 01000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.65 192.168.1.64 Broadcast Address: Highest Host ID: 192.168.1.126 192.168.1.127 Table 107 Subnet 3...
Page 249: Table 110 24-Bit Network Number Subnet Planning
Appendix B IP Addresses and Subnetting Table 109 Eight Subnets (continued) SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 110 24-bit Network Number Subnet Planning NO.
Page 250: Configuring Ip Addresses
Appendix B IP Addresses and Subnetting Table 111 16-bit Network Number Subnet Planning (continued) NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
Page 251: Appendix C Legal Information
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
Page 252: Zyxel Limited Warranty
3 Select the certification you wish to view from this page. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During...
Page 253 Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Page 254 Appendix C Legal Information ES-2024 Series User’s Guide...
Page 255: Appendix D Customer Support
• Sales E-mail: sales@zyxel.co.cr • Telephone: +506-2017878 • Fax: +506-2015098 • Web: www.zyxel.co.cr • FTP: ftp.zyxel.co.cr • Regular Mail: ZyXEL Costa Rica, Plaza Roble Escazú, Etapa El Patio, Tercer Piso, San José, Costa Rica Czech Republic • E-mail: info@cz.zyxel.com • Telephone: +420-241-091-350 •...
Page 256 • E-mail: info@zyxel.fr • Telephone: +33-4-72-52-97-97 • Fax: +33-4-72-52-19-20 • Web: www.zyxel.fr • Regular Mail: ZyXEL France, 1 rue des Vergers, Bat. 1 / C, 69760 Limonest, France Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • Telephone: +49-2405-6909-69 •...
Page 257 • Sales E-mail: sales@zyxel.in • Telephone: +91-11-30888144 to +91-11-30888153 • Fax: +91-11-30888149, +91-11-26810715 • Web: http://www.zyxel.in • Regular Mail: India - ZyXEL Technology India Pvt Ltd., II-Floor, F2/9 Okhla Phase -1, New Delhi 110020, India Japan • Support E-mail: support@zyxel.co.jp •...
Page 258 Appendix D Customer Support • Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • Telephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • Web: www.zyxel.no • Regular Mail: ZyXEL Communications A/S, Nils Hansens vei 13, 0667 Oslo, Norway Poland •...
Page 259 • Support E-mail: support@zyxel.co.th • Sales E-mail: sales@zyxel.co.th • Telephone: +662-831-5315 • Fax: +662-831-5395 • Web: http://www.zyxel.co.th • Regular Mail: ZyXEL Thailand Co., Ltd., 1/1 Moo 2, Ratchaphruk Road, Bangrak-Noi, Muang, Nonthaburi 11000, Thailand. Ukraine • Support E-mail: support@ua.zyxel.com • Sales E-mail: sales@ua.zyxel.com •...
Page 260 Appendix D Customer Support ES-2024 Series User’s Guide...
Page 261: Index
Index Index Numerics 802.1P priority back up, configuration file bandwidth control egress rate ingress rate basic settings binding binding table about the device building access control BPDUs (Bridge Protocol Data Units) limitations login account Bridge Protocol Data Units (BPDUs) remote management service port SNMP accounting...
Page 262 Index backup restore 52, 194 saving egress port configuration, saving Ethernet broadcast address connect power Ethernet port console port auto-crossover connector auto-negotiating default setting default setting copying port settings, See also port cloning Ethernet port test copyright Ethernet ports CPU management port external authentication server current date current time...
Page 263 Index interface type introduction transceiver installation transceiver removal interface general setup setup Gigabit Ethernet port IP source guard ARP inspection Gigabit Interface Converter See GBIC static bindings Gigabit/GBIC combo port GMT (Greenwich Mean Time) GVRP 80, 85 and port assignment GVRP (GARP VLAN Registration Protocol) LACP system priority...
Page 264 Index viewing 802.1 priority and IGMP maintenance IP addresses configuration backup overview current configuration setup 132, 133 firmware main screen multicast group restoring configuration multicast VLAN Management Information Base (MIB) Multiple Spanning Tree Instance, See MSTI. management IP address Multiple Spanning Tree Protocol, See MSTP. DHCP setup Multiple STP, see MSTP management port...
Page 265 Index port status related documentation port VLAN trunking remote management service port-based VLAN trusted computers all connected port isolation resetting 51, 192 settings wizard to factory default settings ports restoring configuration 51, 194 “standby” RFC 3164 diagnostics RSTP mirroring speed/duplex power voltage power connector...
Page 266 Index Static VLAN TACACS+ (Terminal Access Controller Access- Control System Plus) static VLAN control tagged VLAN ingress check temperature tagging temperature indicator status 46, 59 time current link aggregation time zone port Time (RFC-868) port details time server power time service protocol 102, 105 format VLAN...
Page 267 70, 81 VLAN (Virtual Local Area Network) warranty note web configurator 32, 45 getting help home login logout navigation panel screen summary Weighted Round Robin Scheduling (WRR) WRR (Weighted Round Robin Scheduling) ZyNOS (ZyXEL Network Operating System) ES-2024 Series User’s Guide...
Page 268 Index ES-2024 Series User’s Guide...

This manual is also suitable for:

Dimension es-2024a Dimension es-2024pwr Es-2024 series

ZyXEL Communications ES-2024 - V3.80 User Manual

Chapter 1 Getting to Know Your Switch

Chapter 2 Hardware Installation and Connection

Chapter 3 Hardware Overview

Chapter 4 The Web Configurator

Chapter 5 Initial Setup Example

Chapter 6 System Status and Port Statistics

Chapter 7 Basic Setting

Chapter 8 VLAN

Chapter 9 Static MAC Forward Setup

Chapter 10 Filtering

Chapter 11 Spanning Tree Protocol

Chapter 12 Bandwidth Control

Chapter 13 Broadcast Storm Control

Chapter 14 Mirroring

Chapter 15 Link Aggregation

Chapter 16 Port Authentication

Chapter 17 Port Security

Chapter 18 Queuing Method

Chapter 19 Multicast

Chapter 20 Authentication & Accounting

Quick Links

Related Manuals for ZyXEL Communications ES-2024 - V3.80

Summary of Contents for ZyXEL Communications ES-2024 - V3.80