ZyXEL Communications IES-5000 Support Notes

Hide thumbs Also See for IES-5000:

Advertisement

IES-5000
Support Notes
Oct 2006

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications IES-5000

  • Page 1 IES-5000 Support Notes Oct 2006...
  • Page 2: Table Of Contents

    Setting up the IGMP Snooping/IGMP Filtering............29 Limit the users behind the certain DSL port ............. 31 DHCP Relay Option 82 Application................32 Filter Some Certain Packet ..................42 VDSL Application- Triple Play .................. 45 All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 3: Application Notes

    Application Notes Provide Different DSL Port Speeds to different subscribers An ISP may provide different Line speeds for each DSL port. In our IES-5000 have an easy way to configure the line speed for each port. It can create some profiles which can set different parameters to meet the different users’...
  • Page 4 MSG1000G> port enable 7-1~48 MSG1000G> port pvc set 7-1~48-0/33 DEFVAL llc 1 0 MSG1000G> config save 2. Prestige 660R-61 Settings We configure Prestige 660R-61 as bridge mode. The default VPI/VCI of IES-5000 is All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 5 The encapsulation must be RFC 1483 for bridge mode. The Multiplexing should be the same as IES-5000. The LLC-based is default mode of IES-5000. Additionally, we must check if the VPI/VCI is the same as IES-5000. The default VPI/VCI of IES-5000 is 0/33.
  • Page 6 IES-5000 Support Notes will enter Menu 11.6. 2.4 Menu11.6: Remote Node ATM Layer Options Check the values above are the same as the IES-5000. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 7: How To Configure 802.1Q Vlan

    We use ZyXEL Prestige ADSL 660R-61(or you may use P791 for SLC-1248G) CPE here. Because the two ports belong to different VLAN want to go to the Internet via Uplink port of IES-5000, we need to set up an extra VLAN and let the two ports be members of this VLAN.
  • Page 8 After set up the three VLAN, then, set the PVID. We assign VLAN 200(PVID) to ENET1, ENET2. Also, we assign VLAN 10 and VLAN 20 to Port1 and port2, respectively as shown. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 9: Triple Play Application

    TGE1> port pvc set 7-1-0/33 DEFVAL llc 10 0 TGE1> port pvc set 7-2-0/33 DEFVAL llc 20 0 1.3 Port Isolation If we just want to isolate ports of IES-5000 and don’t want to set any VLAN, there is another easy way to do this, setup Port isolation.
  • Page 10 VLAN 10 How to set up a Multiple PVCs environment. Following procedures will introduce the settings of IES-5000, VLAN-aware switch and ADSL (SHDSL) CPE. We use ZyXEL ES-2024 and Prestige 660R-61(You may use P791 for SLC-1248G) as VLAN-aware switch and xDSL CPE, respectively.
  • Page 11 1.2 VC profile setup Add Defval_CBR VC profile for Profile Setup. Set up Encap, Class, PCR and CDVT as shown. Encap should be LLC the same as IES-5000. Class should be CBR which has higher priority in ATM QoS. CI command TGE1>...
  • Page 12 IES-5000 Support Notes 2.2 Menu11.6: Remote Node ATM Layer Options We should set up another VPI/VCI with 0/34 the same as the IES-5000. 3. ES-2024 settings 3.1 VALN Click Advanced Application and VLAN in navigation panel to display configuration screen as shown. Click Static VLAN to show VLAN setup screen.
  • Page 13 IES-5000 Support Notes Add VLAN10. Assign Port 1, Port 10 to be members of VLAN10 as show. We need to check the Tx Tagging on Port 10. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 14 Tx Tagging on Port 10. 3.2 PVID setup Click Advanced Application and VLAN in navigation panel to display configuration screen as shown. Click VLAN Port Setting to show PVID setup screen. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 15 Let 10 be the PVID of Port 1 and 20 be the PVID of Port 2. In this application, you will see the video traffic will go via 0/33 and data traffic will All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 16: 802.1X Application

    If PC1 is not unauthorized, the traffic from PC1 to application server will be blocked. If PC2 is an authorized client, then it can access to the application server. From the figure, IES-5000 acts as an authenticator. Authentication...
  • Page 17 Click RADIUS, RADIUS SERVER in the navigation panel to display configuration screen as shown. You can use the default values or change the Authentication port, Shared Secret. Remember these values MUST be the as the settings of client. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 18 Open the Local Area connection Properties, and then click Authentication page. Check the Enable IEEE 802.1x authentication for this network and select the MD5-challenge in EAP type combobox. Please see the following figure. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 19 After click the icon, there will be a dialog for entering the user name and password. Click ok after input the correct user name and password that are in the database of authentication server. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 20: Setting Up The Syslog Server

    Syslogd and Kiwi's Syslog Daemon ( http://www.kiwisyslog.com/ ). When DSL or Ethernet ports are linked up/down, IES-5000 sends a record to Syslog server. The Syslog server can be placed on the network, which IES-5000 can access. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 21 How to set up a Syslog server. We should configure IES-5000 and Syslog server in this application. Here, we use the Kiwi's Syslog Daemon as an example. Following sections will describe the detailed procedures to set up the environment.
  • Page 22 TGE1> sys syslog server 192.168.1.77 TGE1> sys syslog facility 1 TGE1> config save When DSL ports are linked up/down, IES-5000 sends a record to Syslog server. We can see these logs in Kiwi’s Syslog server. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 23: Setting Up The Ring Environment

    How to set up a Ring Environment. We set up Ring environment with one IES-5000, one IES-2000 and one ES-4024. A PC behind IES can connect the PC in the network even one of the links broken. Following sections will describe the detailed procedures to set up the environment.
  • Page 24 Spanning Tree Protocol to enable it. 2.2 Enable Spanning Tree protocol on Ethernet ports Click Port Setup in the navigation panel to display configuration screen as shown. Click msc to display MSC card Port setup. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 25 IES-5000 Support Notes Click Uplink2 to set up this port. Check Spanning Tree Protocol to enable it. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 26 IES-5000 Support Notes Take the same procedures with Uplink1. Please see the following figure. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 27 You will see the Spanning Tree Protocol Status page. Configuration to configure panning tree protocol settings. Click Active to enable Spanning Tree Protocol. Then enable it on Port 1 and Port 2. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 28 We can see the link between port 2 of ES-4024 and Uplink1 of IES-2000 will be blocked as shown after we connect. After we remove the cable between port 1 of IES-5000 and port 1 of ES-4024, the connection still exists. We can remove any one of the cable. That will not affect the connection.
  • Page 29: Setting Up The Igmp Snooping/Igmp Filtering

    IGMP groups. This can be applied in Video service providers. They can only open some specific channels (groups) to specific ports. Internet Video Server IES-5000(ALC/SLC) IGMP Ethernet Port Router Port 1 ADSL/SHDSL Video Client All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 30 IES-5000 Support Notes How to set up IGMP snooping/IGMP filtering Here, we only set up the IES-5000 to support IGMP snooping and IGMP filtering. Please refer to the user guide of the Video Server and the subscriber device. We assume the video server provides three channels, movie 1 on 240.10.10.8 group, movie 2 on 240.10.10.9 group and movie 3 on 240.10.10.10 group.
  • Page 31: Limit The Users Behind The Certain Dsl Port

    Enable the MAC filter for port 3, input the MAC address you allow to access the Internet. Save the configuration to take effective. Only the MAC addresses listed here can access the Internet behind certain ports. CI command: TGE1> lcman port macfilter enable 7-3 All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 32: Dhcp Relay Option 82 Application

    ISP may want to limit the number of IP address or deliver some specific IP addresses according to certain DSL port, VLAN ID and option 82 string. They can easily to achieve this with DHCP Relay Option 82 feature and a DHCP server supporting Option 82 function. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 33 The IP address is 192.168.1.99 in our case. Also, enter “5000” as the Option 82 string. CI command: TGE1> ip dhcprelay enable TGE1> ip dhcprelay relay enable TGE1> ip dhcprelay server 1 192.168.1.99 TGE1> ip dhcprelay relayinfo add 5000 All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 34 3. IP Commander settings Open IP Commander. Right click “IP commander and then click “connect new server”. Input the DHCP IP address or domain name and click “ok”. Our IP is 192.168.1.99. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 35 IES-5000 Support Notes Input user name and password. The default user name is “administrator” and password is “incognito”. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 36 It will bring up the following screen, please make sure that your DHCP is in “online” status. Then click “wizard” in the top tool bars and select “rule wizard”. Give a name and description to the new rule. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 37 IES-5000 Support Notes Assign a range of IP addresses or just one IP address to this rule. In our case, we set the IP pool from 192.168.1.201 to 192.168.1.203. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 38 VLAN 1, “5000”, please key in “0019000131323438” as the key value and click OK. Please note that the first 2 bytes define port number, the second 2 bytes is VLAN ID and the other bytes are the Option 82 string. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 39 IES-5000 Support Notes After you finish above step, you will see the following figure. Then pop up the following screen and you can just press Next button. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 40 IES-5000 Support Notes Then you can add DHCP template (option) such as gateway, DNS server and so on. Here we use “192.168.1.1” as gateway IP address of DHCP client PC. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 41 IES-5000 Support Notes You can apply DDNS service to DHCP server or not. The rule creation has been finished. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 42: Filter Some Certain Packet

    After finishing all above procedures, your PC will get the IP address 192.168.1.201 when you send a DHCP request. Filter Some Certain Packet ISP may want to filter some kinds of packets. IES-5000 provide “Packet Filter” function to filter some specific packets, like IP, ARP, DHCP, EAPoL, PPPoE, NETBIOS and IGMP.
  • Page 43 Display the port filter status on slot 7. CI command: TGE1> lcman port pktfilter show 7 port filter ----- ------------------------------------- 7- 1 netbios 7- 2 accept-all 7- 3 accept-all 7- 4 accept-all All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 44 7-27 accept-all 7-28 accept-all 7-29 accept-all 7-30 accept-all 7-31 accept-all 7-32 accept-all 7-33 accept-all 7-34 accept-all 7-35 accept-all 7-36 accept-all 7-37 accept-all 7-38 accept-all 7-39 accept-all 7-40 accept-all 7-41 accept-all 7-42 accept-all All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 45: Vdsl Application- Triple Play

    For the Triple-play scenario, 3 PVCs for multiple services (Data, Voice and Video) on the VDSL port of IES-5000 VDSL line card are to be configured. The IEEE VLAN & 802.1p mechanism is used to guarantee the Voice stream and Video stream running smoothly without interruption.
  • Page 46 IES-5000 Support Notes # IES5000 Settings 1. Connect to the IES-5000 using Web GUI. The default Inband IP address of IES-5000 is 192.168.1.1. Enter the default id ‘admin’ and password ‘1234’ to access the device. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 47 IES-5000 Support Notes 2. Set the IES-5000’s IP address to ‘192.168.1.100’. Click the Sys > IP Setup. Type in the IP address ‘192.168.1.100’ and subnet mask ‘255.255.255.0’. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 48 3. Create a VDSL profile Type in the Name and select the Latency Mode. Then set the Max Rate of Downstream/Upstream (here is an example ‘U35D65_INTE’ for 65Mbps/35Mbps line) and the other related parameters. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 49 Then select to which VDSL ports you would like to apply the VDSL profile you just created. Click Port > VDSL Choose Slot 3 and Port 1. Check ‘Enable’. Choose ‘U35D65_INTE’ in the VDSL Profile option. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 50 IES-5000 Support Notes 5. Then click Setup in the VLAN option to create 3 VLANs: VLAN 1 (for DATA), VLAN 102 (for VOICE) and VLAN 103 (for VIDEO) for the VDSL port. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 51 IES-5000 Support Notes a. Create VLAN 1 VLAN 1 is created by default. Click Modify and check the Tag box. Click Apply to finish the VLAN 1 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 52 IES-5000 Support Notes b. Create VLAN 102 Fill in VID with ‘102’ and check the Tag box. Click Apply to finish the VLAN 102 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 53 IES-5000 Support Notes c. Create VLAN 103 Fill in VID with ‘103’ and check the Tag box. Click Apply to finish the VLAN 103 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 54 IES-5000 Support Notes 6. Configure VLANs on ENET Port 3 (up1) Configure VLAN 1 Select Index 1 and click Modify. Check the Tag box on up1. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 55 IES-5000 Support Notes b. Configure VLAN 102 Select Index 2 and click Modify. Choose the Registration as ‘Fix’ and check the Tag box on up1. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 56 IES-5000 Support Notes c. Configure VLAN 103 Select Index 3 and click Modify. Choose the Registration as ‘Fix’ and check the Tag box on up1. Click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 57 Click Multicast > IGMP. Choose the IGMP Mode as Enable_IGMP_Proxy and click Apply to finish the setup. Fill in Add Static Query VLAN with ‘103’ and then click Apply to take effect. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 58 Click Config Save > Config Save and click the Save button to save your configurations. # P870MH-C1 Installation 1. Get into the device by Telent. Access the SMT menu 24.8 into CI command mode. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 59 VID whcich we just configured. Boundle VLAN1 on port 1, VLAN 102 on port 2, Vlan 103 on port 3 without transmission any Tagged frame. Also, add the VLAN tag(1, 102 & 103) onto outgoing VDSL port. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 60 For Port 1's traffic, we can assign the priority as 'Low' since the Internet access traffic is not time sensitive. 5. Check whether all the settings are correct. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 61 IES-5000 Support Notes # ES2024A Settings 5. Connect to IES-1248 by Web GUI. The default IP address of ES-2024A is 192.168.1.1. Enter the default password ‘1234’ to get into the device. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 62 IES-5000 Support Notes 6. Set the IES-1248’s IP address to ‘192.168.1.200’. Open Basic Setting> IP setup. Type in the IP address ‘192.168.1.100’ and its subnet mask ‘255.255.255.0’. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 63 1. Check the Active Box then check the Tx Tagging Box on Port 24 (for the other ports have this option unchecked) and swith Ports 1, 2 and 4 to status ‘Forbidden’. Click Add to finish the VLAN 1 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 64 Box, type in a name for VLAN as well as VLAN ID102. Then check the Tx Tagging Box on Port 24 24 (for the other ports have this option unchecked) and switch Ports 1, 2 and 24 to status ‘Fixed’. Click Add to finish the VLAN 102 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 65 Box, fill in a name for VLAN as well as VLAN ID 103. Then check the Tx Tagging Box on Port 24 24 (for the other ports have this option unchecked) and switch Ports 4 and 24 to status ‘Fixed’. Click Add to finish the VLAN 103 configuration. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 66 9. Connect to the P660HW-61 using Telnet. The default IP address of P660H-61 is 192.168.1.1. Enter the default password ‘1234’ to access the device. 10. Disable the VC hunt mechanism and Reboot the device. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 67 Access the SMT menu 1 and type in the System Name and enable the Bridge=Yes. 4. Change the P660H-61’s IP address to 192.168.1.10 and disable the DHCP server function in SMT menu 3.2. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 68 Create a PVC for the Data access(Internet access) Get into SMT menu 11.1 and switch the Rem Node Name=Data, Active=Yes, Encapsulation= RFC 1483, Multiplexing= LLC-based and Route=None Bridge=Yes. Select the ATM options=Yes, VPI/VCI=0/33 then press‘Enter’ to apply the changes. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 69 Get into SMT menu 11.2, select the Rem Node Name=Voice , Active=Yes, Encapsulation= RFC 1483, Multiplexing= LLC-based and Route=None Bridge=Yes. Select the ATM options=Yes, VPI/VCI=0/34 then press ‘Enter’ to apply the changes. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 70 Access the SMT menu 11.3 and select the Rem Node Name=Video, Active=Yes, Encapsulation= RFC 1483, Multiplexing= LLC-based and Route=None Bridge=Yes. Select the ATM options=Yes, VPI/VCI=0/35 then press ‘Enter’ to apply the changes. All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 71 Type ‘sys triple port set 2 2’ to map the Ehternet port 2 to PVC 2(Voice) Type ‘sys triple port set 3 3’ to map the Ehternet port 3 to PVC 3(Video) All contents copyright (c) 2006 ZyXEL Communications Corporation.
  • Page 72 IES-5000 Support Notes 7. Check whether the ADSL physical layer is UP in the SMT menu 24.1. if the PVC counter is running. All contents copyright (c) 2006 ZyXEL Communications Corporation.

Table of Contents