Setting up the IGMP Snooping/IGMP Filtering............29 Limit the users behind the certain DSL port ............. 31 DHCP Relay Option 82 Application................32 Filter Some Certain Packet ..................42 VDSL Application- Triple Play .................. 45 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Application Notes Provide Different DSL Port Speeds to different subscribers An ISP may provide different Line speeds for each DSL port. In our IES-5000 have an easy way to configure the line speed for each port. It can create some profiles which can set different parameters to meet the different users’...
Page 4
MSG1000G> port enable 7-1~48 MSG1000G> port pvc set 7-1~48-0/33 DEFVAL llc 1 0 MSG1000G> config save 2. Prestige 660R-61 Settings We configure Prestige 660R-61 as bridge mode. The default VPI/VCI of IES-5000 is All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 5
The encapsulation must be RFC 1483 for bridge mode. The Multiplexing should be the same as IES-5000. The LLC-based is default mode of IES-5000. Additionally, we must check if the VPI/VCI is the same as IES-5000. The default VPI/VCI of IES-5000 is 0/33.
Page 6
IES-5000 Support Notes will enter Menu 11.6. 2.4 Menu11.6: Remote Node ATM Layer Options Check the values above are the same as the IES-5000. All contents copyright (c) 2006 ZyXEL Communications Corporation.
We use ZyXEL Prestige ADSL 660R-61(or you may use P791 for SLC-1248G) CPE here. Because the two ports belong to different VLAN want to go to the Internet via Uplink port of IES-5000, we need to set up an extra VLAN and let the two ports be members of this VLAN.
Page 8
After set up the three VLAN, then, set the PVID. We assign VLAN 200(PVID) to ENET1, ENET2. Also, we assign VLAN 10 and VLAN 20 to Port1 and port2, respectively as shown. All contents copyright (c) 2006 ZyXEL Communications Corporation.
TGE1> port pvc set 7-1-0/33 DEFVAL llc 10 0 TGE1> port pvc set 7-2-0/33 DEFVAL llc 20 0 1.3 Port Isolation If we just want to isolate ports of IES-5000 and don’t want to set any VLAN, there is another easy way to do this, setup Port isolation.
Page 10
VLAN 10 How to set up a Multiple PVCs environment. Following procedures will introduce the settings of IES-5000, VLAN-aware switch and ADSL (SHDSL) CPE. We use ZyXEL ES-2024 and Prestige 660R-61(You may use P791 for SLC-1248G) as VLAN-aware switch and xDSL CPE, respectively.
Page 11
1.2 VC profile setup Add Defval_CBR VC profile for Profile Setup. Set up Encap, Class, PCR and CDVT as shown. Encap should be LLC the same as IES-5000. Class should be CBR which has higher priority in ATM QoS. CI command TGE1>...
Page 12
IES-5000 Support Notes 2.2 Menu11.6: Remote Node ATM Layer Options We should set up another VPI/VCI with 0/34 the same as the IES-5000. 3. ES-2024 settings 3.1 VALN Click Advanced Application and VLAN in navigation panel to display configuration screen as shown. Click Static VLAN to show VLAN setup screen.
Page 13
IES-5000 Support Notes Add VLAN10. Assign Port 1, Port 10 to be members of VLAN10 as show. We need to check the Tx Tagging on Port 10. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 14
Tx Tagging on Port 10. 3.2 PVID setup Click Advanced Application and VLAN in navigation panel to display configuration screen as shown. Click VLAN Port Setting to show PVID setup screen. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 15
Let 10 be the PVID of Port 1 and 20 be the PVID of Port 2. In this application, you will see the video traffic will go via 0/33 and data traffic will All contents copyright (c) 2006 ZyXEL Communications Corporation.
If PC1 is not unauthorized, the traffic from PC1 to application server will be blocked. If PC2 is an authorized client, then it can access to the application server. From the figure, IES-5000 acts as an authenticator. Authentication...
Page 17
Click RADIUS, RADIUS SERVER in the navigation panel to display configuration screen as shown. You can use the default values or change the Authentication port, Shared Secret. Remember these values MUST be the as the settings of client. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 18
Open the Local Area connection Properties, and then click Authentication page. Check the Enable IEEE 802.1x authentication for this network and select the MD5-challenge in EAP type combobox. Please see the following figure. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 19
After click the icon, there will be a dialog for entering the user name and password. Click ok after input the correct user name and password that are in the database of authentication server. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Syslogd and Kiwi's Syslog Daemon ( http://www.kiwisyslog.com/ ). When DSL or Ethernet ports are linked up/down, IES-5000 sends a record to Syslog server. The Syslog server can be placed on the network, which IES-5000 can access. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 21
How to set up a Syslog server. We should configure IES-5000 and Syslog server in this application. Here, we use the Kiwi's Syslog Daemon as an example. Following sections will describe the detailed procedures to set up the environment.
Page 22
TGE1> sys syslog server 192.168.1.77 TGE1> sys syslog facility 1 TGE1> config save When DSL ports are linked up/down, IES-5000 sends a record to Syslog server. We can see these logs in Kiwi’s Syslog server. All contents copyright (c) 2006 ZyXEL Communications Corporation.
How to set up a Ring Environment. We set up Ring environment with one IES-5000, one IES-2000 and one ES-4024. A PC behind IES can connect the PC in the network even one of the links broken. Following sections will describe the detailed procedures to set up the environment.
Page 24
Spanning Tree Protocol to enable it. 2.2 Enable Spanning Tree protocol on Ethernet ports Click Port Setup in the navigation panel to display configuration screen as shown. Click msc to display MSC card Port setup. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 25
IES-5000 Support Notes Click Uplink2 to set up this port. Check Spanning Tree Protocol to enable it. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 26
IES-5000 Support Notes Take the same procedures with Uplink1. Please see the following figure. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 27
You will see the Spanning Tree Protocol Status page. Configuration to configure panning tree protocol settings. Click Active to enable Spanning Tree Protocol. Then enable it on Port 1 and Port 2. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 28
We can see the link between port 2 of ES-4024 and Uplink1 of IES-2000 will be blocked as shown after we connect. After we remove the cable between port 1 of IES-5000 and port 1 of ES-4024, the connection still exists. We can remove any one of the cable. That will not affect the connection.
IGMP groups. This can be applied in Video service providers. They can only open some specific channels (groups) to specific ports. Internet Video Server IES-5000(ALC/SLC) IGMP Ethernet Port Router Port 1 ADSL/SHDSL Video Client All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 30
IES-5000 Support Notes How to set up IGMP snooping/IGMP filtering Here, we only set up the IES-5000 to support IGMP snooping and IGMP filtering. Please refer to the user guide of the Video Server and the subscriber device. We assume the video server provides three channels, movie 1 on 240.10.10.8 group, movie 2 on 240.10.10.9 group and movie 3 on 240.10.10.10 group.
Enable the MAC filter for port 3, input the MAC address you allow to access the Internet. Save the configuration to take effective. Only the MAC addresses listed here can access the Internet behind certain ports. CI command: TGE1> lcman port macfilter enable 7-3 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ISP may want to limit the number of IP address or deliver some specific IP addresses according to certain DSL port, VLAN ID and option 82 string. They can easily to achieve this with DHCP Relay Option 82 feature and a DHCP server supporting Option 82 function. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 33
The IP address is 192.168.1.99 in our case. Also, enter “5000” as the Option 82 string. CI command: TGE1> ip dhcprelay enable TGE1> ip dhcprelay relay enable TGE1> ip dhcprelay server 1 192.168.1.99 TGE1> ip dhcprelay relayinfo add 5000 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 34
3. IP Commander settings Open IP Commander. Right click “IP commander and then click “connect new server”. Input the DHCP IP address or domain name and click “ok”. Our IP is 192.168.1.99. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 35
IES-5000 Support Notes Input user name and password. The default user name is “administrator” and password is “incognito”. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 36
It will bring up the following screen, please make sure that your DHCP is in “online” status. Then click “wizard” in the top tool bars and select “rule wizard”. Give a name and description to the new rule. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 37
IES-5000 Support Notes Assign a range of IP addresses or just one IP address to this rule. In our case, we set the IP pool from 192.168.1.201 to 192.168.1.203. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 38
VLAN 1, “5000”, please key in “0019000131323438” as the key value and click OK. Please note that the first 2 bytes define port number, the second 2 bytes is VLAN ID and the other bytes are the Option 82 string. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 39
IES-5000 Support Notes After you finish above step, you will see the following figure. Then pop up the following screen and you can just press Next button. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 40
IES-5000 Support Notes Then you can add DHCP template (option) such as gateway, DNS server and so on. Here we use “192.168.1.1” as gateway IP address of DHCP client PC. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 41
IES-5000 Support Notes You can apply DDNS service to DHCP server or not. The rule creation has been finished. All contents copyright (c) 2006 ZyXEL Communications Corporation.
After finishing all above procedures, your PC will get the IP address 192.168.1.201 when you send a DHCP request. Filter Some Certain Packet ISP may want to filter some kinds of packets. IES-5000 provide “Packet Filter” function to filter some specific packets, like IP, ARP, DHCP, EAPoL, PPPoE, NETBIOS and IGMP.
Page 43
Display the port filter status on slot 7. CI command: TGE1> lcman port pktfilter show 7 port filter ----- ------------------------------------- 7- 1 netbios 7- 2 accept-all 7- 3 accept-all 7- 4 accept-all All contents copyright (c) 2006 ZyXEL Communications Corporation.
For the Triple-play scenario, 3 PVCs for multiple services (Data, Voice and Video) on the VDSL port of IES-5000 VDSL line card are to be configured. The IEEE VLAN & 802.1p mechanism is used to guarantee the Voice stream and Video stream running smoothly without interruption.
Page 46
IES-5000 Support Notes # IES5000 Settings 1. Connect to the IES-5000 using Web GUI. The default Inband IP address of IES-5000 is 192.168.1.1. Enter the default id ‘admin’ and password ‘1234’ to access the device. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 47
IES-5000 Support Notes 2. Set the IES-5000’s IP address to ‘192.168.1.100’. Click the Sys > IP Setup. Type in the IP address ‘192.168.1.100’ and subnet mask ‘255.255.255.0’. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 48
3. Create a VDSL profile Type in the Name and select the Latency Mode. Then set the Max Rate of Downstream/Upstream (here is an example ‘U35D65_INTE’ for 65Mbps/35Mbps line) and the other related parameters. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 49
Then select to which VDSL ports you would like to apply the VDSL profile you just created. Click Port > VDSL Choose Slot 3 and Port 1. Check ‘Enable’. Choose ‘U35D65_INTE’ in the VDSL Profile option. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 50
IES-5000 Support Notes 5. Then click Setup in the VLAN option to create 3 VLANs: VLAN 1 (for DATA), VLAN 102 (for VOICE) and VLAN 103 (for VIDEO) for the VDSL port. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 51
IES-5000 Support Notes a. Create VLAN 1 VLAN 1 is created by default. Click Modify and check the Tag box. Click Apply to finish the VLAN 1 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 52
IES-5000 Support Notes b. Create VLAN 102 Fill in VID with ‘102’ and check the Tag box. Click Apply to finish the VLAN 102 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 53
IES-5000 Support Notes c. Create VLAN 103 Fill in VID with ‘103’ and check the Tag box. Click Apply to finish the VLAN 103 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 54
IES-5000 Support Notes 6. Configure VLANs on ENET Port 3 (up1) Configure VLAN 1 Select Index 1 and click Modify. Check the Tag box on up1. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 55
IES-5000 Support Notes b. Configure VLAN 102 Select Index 2 and click Modify. Choose the Registration as ‘Fix’ and check the Tag box on up1. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 56
IES-5000 Support Notes c. Configure VLAN 103 Select Index 3 and click Modify. Choose the Registration as ‘Fix’ and check the Tag box on up1. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 57
Click Multicast > IGMP. Choose the IGMP Mode as Enable_IGMP_Proxy and click Apply to finish the setup. Fill in Add Static Query VLAN with ‘103’ and then click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 58
Click Config Save > Config Save and click the Save button to save your configurations. # P870MH-C1 Installation 1. Get into the device by Telent. Access the SMT menu 24.8 into CI command mode. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 59
VID whcich we just configured. Boundle VLAN1 on port 1, VLAN 102 on port 2, Vlan 103 on port 3 without transmission any Tagged frame. Also, add the VLAN tag(1, 102 & 103) onto outgoing VDSL port. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 60
For Port 1's traffic, we can assign the priority as 'Low' since the Internet access traffic is not time sensitive. 5. Check whether all the settings are correct. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 61
IES-5000 Support Notes # ES2024A Settings 5. Connect to IES-1248 by Web GUI. The default IP address of ES-2024A is 192.168.1.1. Enter the default password ‘1234’ to get into the device. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 62
IES-5000 Support Notes 6. Set the IES-1248’s IP address to ‘192.168.1.200’. Open Basic Setting> IP setup. Type in the IP address ‘192.168.1.100’ and its subnet mask ‘255.255.255.0’. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 63
1. Check the Active Box then check the Tx Tagging Box on Port 24 (for the other ports have this option unchecked) and swith Ports 1, 2 and 4 to status ‘Forbidden’. Click Add to finish the VLAN 1 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 64
Box, type in a name for VLAN as well as VLAN ID102. Then check the Tx Tagging Box on Port 24 24 (for the other ports have this option unchecked) and switch Ports 1, 2 and 24 to status ‘Fixed’. Click Add to finish the VLAN 102 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 65
Box, fill in a name for VLAN as well as VLAN ID 103. Then check the Tx Tagging Box on Port 24 24 (for the other ports have this option unchecked) and switch Ports 4 and 24 to status ‘Fixed’. Click Add to finish the VLAN 103 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 66
9. Connect to the P660HW-61 using Telnet. The default IP address of P660H-61 is 192.168.1.1. Enter the default password ‘1234’ to access the device. 10. Disable the VC hunt mechanism and Reboot the device. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 67
Access the SMT menu 1 and type in the System Name and enable the Bridge=Yes. 4. Change the P660H-61’s IP address to 192.168.1.10 and disable the DHCP server function in SMT menu 3.2. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 68
Create a PVC for the Data access(Internet access) Get into SMT menu 11.1 and switch the Rem Node Name=Data, Active=Yes, Encapsulation= RFC 1483, Multiplexing= LLC-based and Route=None Bridge=Yes. Select the ATM options=Yes, VPI/VCI=0/33 then press‘Enter’ to apply the changes. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 69
Get into SMT menu 11.2, select the Rem Node Name=Voice , Active=Yes, Encapsulation= RFC 1483, Multiplexing= LLC-based and Route=None Bridge=Yes. Select the ATM options=Yes, VPI/VCI=0/34 then press ‘Enter’ to apply the changes. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 70
Access the SMT menu 11.3 and select the Rem Node Name=Video, Active=Yes, Encapsulation= RFC 1483, Multiplexing= LLC-based and Route=None Bridge=Yes. Select the ATM options=Yes, VPI/VCI=0/35 then press ‘Enter’ to apply the changes. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 71
Type ‘sys triple port set 2 2’ to map the Ehternet port 2 to PVC 2(Voice) Type ‘sys triple port set 3 3’ to map the Ehternet port 3 to PVC 3(Video) All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 72
IES-5000 Support Notes 7. Check whether the ADSL physical layer is UP in the SMT menu 24.1. if the PVC counter is running. All contents copyright (c) 2006 ZyXEL Communications Corporation.