Page 1: Support Notes
ZyXEL ES-3100 Series (ES-3124/ES-3124PWR/ES-3148/ES-3124-4F) Ethernet Switch Support Notes Version 3.60 September 2006...
Page 2 What is the default setting of the IP parameters? What is the default login Name and Password of the Web Configuration? How to access the Switch through the console port? All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 3 What is default login password of the console, telnet, and FTP? How to change the password? How to access the Command Line Interface? If I forgot the Switch password, how can I reset the password to default? How do I configure an IP address?
Page 4: Firmware Upgrade
Click on the “Click Here” link of the Firmware Upgrade to bring up the following screen. Browse the firmware located or type in the path into the “File Path” field. Click on the Upgrade button. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 5 Enter “ATGO” to restart the switch after done uploading the firmware. From Command Line FTP: Download (and unzipped) the correct model firmware to your computer. Launch the FTP client on your PC to login to Switch. (From the command prompt, type “ftp <Switch IP>” Press “Enter” for the User name Enter password to get the ftp prompt.
Page 6: Restore A Configuration File
Browse to locate the file with the file name or type in the path and the file name into the “File Path” field. Click on the Restore button. From Console Port: Connect to the console port and open the Terminal Emulation Software. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 7 From Command Line FTP: Download (and unzipped) the correct model firmware to your computer. Launch the FTP client on your PC to login to Switch. (From the command prompt, type “ftp <Switch IP>”. Press “Enter” for the User name Enter password to get the ftp prompt.
Page 8: Backing Up A Configuration File
From Console Port: Connect to the console port and open the Terminal Emulation Software. Restarting the Switch to enter the debug mode via the terminal. Enter “ATTD” All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 9 From Command Line FTP: Download (and unzipped) the correct model firmware to your computer. Launch the FTP client on your PC to login Switch. (From the command prompt, type “ftp <Switch IP>” Press “Enter” for the User name Enter password to get the ftp prompt.
Page 10: Load Factory Defaults
Click OK to go to the following dialog. Click on the OK button. Now, all switch configurations has been reset to the factory defaults and the system will be restarted. Please note that the switch IP address is now 192.168.1.1.
Page 11 In this scenario, two Switch with mini-Gb port connected together via its mini-GB Port with a LC/LC Fiber cable (62.5/125MM). PC “Alpha” is connected to the Switch on the left and another PC “Delta” is connected to the Switch on the right via the RJ45 Port (Cat 5 cable).
Page 12 ES-3100 Series Switch Support Notes Here is the photo of the SFP-SX Transceiver & the LC/LC Fiber Cable. Steps to complete this scenario 1. Find both Mini-GB ports on your Switch first. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 13 ES-3100 Series Switch Support Notes 2. Get one transceiver and plug it into the Mini-GB Port of your Switch 3. Plug another transceiver into the Mini-GB Port of the other Switch All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 14 4. Remove both side of the protection cap from the LC/LC Fiber Cable. 5. Plug the LC/LC Fiber Cable into the transceivers on both Switch. If you connected the cable correctly, the LED of the “LINK” will light up. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 15 6. Now, connect the first PC “Alpha” to the Switch on the left and the second PC “Delta” to the Switch on the right via the regular Ethernet cable. 7. Set the NICs in both computers to the same IP Domain.
Page 16: General Networking
Switch port, VLAN ID and option 82 string. They can easily to achieve this with DHCP Relay Option 82 feature and a DHCP server supporting Option 82 function. Network DHCP Server 192.168.1.99 Ethernet Port Port 25 DHCP Client All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 17: How To Set Up Dhcp Relay Option 82 Environment
Here, we will set up an environment to allow a PC to get DHCP IP address in specific IP pool according to its Switch port, VLAN ID and the option 82 string. In this case, we are using GS-3012 for the demonstration. PC is behind 25 Switch port and the option 82 string is a string “GS-3012”.
Page 18 3. IP Commander settings Open IP Commander. Right click “IP commander and then click “connect new server”. Input the DHCP IP address or domain name and click “ok”. Our IP is 192.168.1.99. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 19 ES-3100 Series Switch Support Notes Input user name and password. The default user name is “administrator” and password is “incognito”. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 20 ES-3100 Series Switch Support Notes It will bring up the following screen, please make sure that your DHCP is in “online” status. Then click “wizard” in the top tool bars and select “rule wizard”. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 21 ES-3100 Series Switch Support Notes Give a name and description to the new rule. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 22 Assign a range of IP addresses or just one IP address to this rule. In our case, we set the IP pool from 192.168.1.201 to 192.168.1.203. After input IP pool, we select “DHCP Option” in Keywords combobox. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 23 25, VLAN 1, “GS-3012”, please key in “0019000147532d33303132” as the key value and click OK. Please note that the first 2 bytes define port number, the second 2 bytes is VLAN ID and the other bytes are the Option 82 string. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 24 ES-3100 Series Switch Support Notes After you finish above step, you will see the following figure. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 25 ES-3100 Series Switch Support Notes Then pop up the following screen and you can just press Next button. Then you can add DHCP template (option) such as gateway, DNS server and so on. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 26 ES-3100 Series Switch Support Notes Here we use “192.168.1.1” as gateway IP address of DHCP client PC. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 27 ES-3100 Series Switch Support Notes You can apply DDNS service to DHCP server or not. The rule creation has been finished. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 28 ES-3100 Series Switch Support Notes After finishing all above procedures, your PC will get the IP address 192.168.1.201 when you send a DHCP request. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 29: Vlan Overview
Tagged VLAN can across Layer-2 switch but Port-based VLAN cannot. Port-based VLAN Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes You must define...
Page 30 An egress port is an outgoing port, that is, a port through which a data packet leaves. There are 5 hosts (Host A, B, C, D and E) connected to a 5-port layer-2 switch which supported port-based VLAN.
Page 31 Egress port for port 5: port 1, port 4 Port-based VLAN across different switch Port-based VLAN is specific only to the switch on which it was created. Definitely, Port-based VLAN can't across different switches. As the following network diagram shown in most MTU case, for the sake of security, subscribers are isolated with each other except for the gateway.
Page 32 Switch-2 VLAN 3 member port: port 4 and port 1 Host A can't talk to Host B due to the port-based VLAN in Switch-2, and Host C can't talk to Host D due to the port-based VLAN in Switch-3. But both Switch-2 and Switch-3 uplink to the none VLAN Switch-1.
Page 33 For Switch-1, port 1, port2, and port 3 are allowed to communicate back and forth with uplink port 4, but not with other ports. Switch-1 VLAN 1 member port: port 1 and port 4 Switch-1 VLAN 2 member port: port 2 and port 4...
Page 34 ES-3100 Series Switch Support Notes Scenario In this scenario, Port Based VLAN is used to separate one physical Switch into two smaller logical Switches. Port 1~4 and 9, 10 are in one group. And Port 5~10 are in another group. Port-based VLANs are specific only to the switch on which they were created.
Page 35 6. After you login successfully, you will see a similar screen like below. 7. First, we need to tell the Switch to run VLAN as port based instead of 802.1q based. In order to do so, we first click on the “Basic Setting”, then “Switch Setup”;...
Page 36 ES-3100 Series Switch Support Notes 8. Now, you need to tell the Switch how you are going to separate the physical Switch into some logical small Switches. Thus, we click “Advanced Application” then “VLAN”. On the right screen, check the boxes to suit your need.
Page 37 10. For example, PC A: 192.168.1.4/24 PC B: 192.168.1.5/24 PC C: 192.168.1.6/24 PC D: 192.168.1.7/24 PC Z: 192.168.1.99/24 11. PING PC B from PC A (Should work) All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 38 ES-3100 Series Switch Support Notes 12. PING PC Z from PC A (Should work) 13. PING PC C from PC A (Should NOT work) All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 39 5. Put “en” or “enable” to go into the privileged mode. Then put “config” to go into the configuration mode. 6. Put the following commands to setup Port Based VLAN on your Switch in this All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 40 VLAN and QoS (Quality of Service) priority identification. The VLANs can be created statically by hand or dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN and provides the information that switches need to All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 41 VID (VLAN Identifier) of null (0) is called a priority frame, meaning that only the priority level is significant and the default VID of the ingress port is given as the VID of the frame. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 42 How 802.1Q VLAN works According to the VID information in the tag, the switch forward and filter the frames among ports. These ports with same VID can communicate with each other. IEEE 802.1Q VLAN function contains the following three tasks, Ingress Process, Forwarding Process and Egress Process.
Page 43 VID: VLAN ID Port: The switch port number Ad Control: Registration administration control. There are 3 type of ad control, including forbidden registration, fixed registration and normal registration. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 44 3. Egress Process: The Egress Process decides if the outgoing frames but be sent tagged or untagged. The Egress Process refers to the egress tag control information in All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes Port...
Page 45 7 VLAN on second switch. Trunk port will be port 25 on both switches as well. I made VLAN s on both switch, but I did not find trunk options on both switches. How can I use Port 25 as trunk port?
Page 46 VID:103 (port 7,8,9,10,"25 TAG") VID:104 (port 23,24,"25 TAG") VID:105 (port 11,12,13,14,"25 TAG") VID:106 (port 15,16,17,"25 TAG") VID:107 (port 18,19.20,21,"25 TAG") ------------------------------------- In switch B, add port 25 in each VLAN VID:101 (port 1,2,3,,4,"25 TAG") All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 47 Port 1, 2, 3, 4 : Port 6, 7, 8, 9, 10, : Port 11, 12, 13, 14, : Port 15, 16, 17, 18: Port 19, 20, 21, 22, 23: Port 25:PVID=any All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 48 1 can communicate with PC2 with another VLAN tag frames in switch 2 via VLAN trunking port. In our example, we set up port 5 in switch 1 as the VLAN Trunking port while in switch 2, we set up port 10 as the VLAN Trunking port.
Page 49 ES-3100 Series Switch Support Notes In the switch 2, the configuration is In the switch 1, we set port 2 as VLAN 2 untag All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 50 In the switch 2, we set port 6 as VLAN 2 untag. The switch 1 IP address: 192.168.1.31 The switch 2 IP address: 192.168.1.21 After the configuration, we can observe that in the switch 1, the PC running on port 2 can find the PC running on port 6 in the switch 2.
Page 51 VLAN10/20/30 dynamically. Please Note: all clients connecting to switches in this scenario should be located in the same subnet (in this example, the subnet is 192.168.1.0/24) How to configure this scenario: 1. For Switch A on Floor 2: All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 52 VLAN” to bring up the following screen, adding VLAN 10: port 3, fixed, untag; port 23, fixed, Tx tagging”. Add VLAN 20 to this switch, VLAN 20: port 4, fixed, untag; port 23, fixed, Tx tagging. Please click VLAN port setting to bring up the following screen, setup PVID 10 for port 3, PVID 20 for port 4, and enable GVRP on the top of the screen and port 1, port 2, port 23.
Page 53 Please follow the same steps to adding VLAN 10: port 3, fixed, untag; port 23, fixed, Tx tagging; port 24, fixed, Tx tagging”. Add VLAN 20 to this switch, VLAN 20: port 4, fixed, untag; port 23, fixed, Tx tagging; port 24, fixed, Tx tagging.
Page 54 3, PVID 20 for port 4, and enable GVRP on the top of the screen and port 1, port 2, port 23, port 24. 3. For Switch C on Basement: Please set static VLAN 10: port 23, fixed, untag. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 55 ES-3100 Series Switch Support Notes Please set static VLAN 20: port 23, fixed, untag. Please add VLAN 30: port 1, fixed, untag; port23, fixed, untag; port 24, fixed, Tx tagging. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 56 ES-3100 Series Switch Support Notes Please setup PVID 30 for port 1 and enable GVRP on port 3 and port 24. Then, this scenario is done here. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 57 IGMP router. Thus this significantly reduces the multicast traffic forwarded down to the clients. Another advantage of IGMP snooping is to allow the intermediate switch to learn multicast group information without manually configuring switches. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 58: Configuration Of Igmp Snooping By Web
In this example, we enable the IGMP function on the GS-4024 (an IGMP router) to connect to a multimedia server. Also, we enable IGMP snooping function on the ES-3124 or other ZyXEL L2 Switch to connect to the multimedia clients. Figure 2: IGMP snooping Example...
Page 59: Configuration Of Igmp And Igmp Snooping By Cli
Figure 4: IGMP Snooping Setup Configuration of IGMP and IGMP snooping by CLI Step one: Enable IGMP function In the configure mode GS-4024(config)# router igmp Step two: Enable IGMP snooping All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 60 In the exec mode of CLI L2Switch# show igmp-snooping ______________________________________________________________ Note: One thing needs to be mentioned is that in the IGMP router, we do not need to enable IGMP snooping function. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 61: Overview Of Mvr
6 times. In the Figure 2, on the contrary, with MVR, a media server is required to transmit multicast traffic once to clients in different VLANs. Figure 1 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 62: Mvr Mode
Multicast router must be statically configured. Operation Mode Join Operation A subscriber sends an IGMP report message to the switch to join the appropriate multicast. Whether IGMP report matches the switch All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 63 Immediate Leave Operation Subscriber sends an IGMP leave message to the switch to leave the multicast. Subscribers do not need to wait the switch CPU to send an IGMP group-specific query through the receiver port VLAN. The switch will immediately eliminate this receiver port.
Page 64: Scenario Of Mvr
GS-4024 to separate VLAN hosts located on ES-3124 and GS-4012F. Moreover, we created a dummy ip interface for the multicast VLAN (VLAN100) on GS-4024. VLAN100 will be the Multicast VLAN in this scenario. Illustration of this scenario All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 65 Configuration via Web [GS-4024] 1. First of all, you need to create all those IP domains on the GS-4024 Switch. Once you completed those VLANs, your VLAN status should looks like the same as below. 2. Below are their related PVID settings.
Page 66 V2 on the multicast ip interface (which is the dummy interface). Please notice that since GS-4024 works here as an IGMP Router, you cannot enable IGMP Snooping on the same time because IGMP Snooping is a L2 feature. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 67 ES-3100 Series Switch Support Notes Here we have done everything we need on the IGMP Router <GS-4024>. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 68 1. At the very beginning, you can create your MVR VLAN First (which is VLAN100). To create this multicast VLAN, we do it in another way. First, access to the GUI of your Switch. Then click “Advanced Application” on the left and choose “Multicast”. Finally, you should click MVR on the right frame to setup your Multicast VLAN.
Page 69 Snooping” here. (Since MVR needs IGMP Snooping). For Unknown Multicast Frame, we prefer “Drop” here in order to avoid any Multicast Video with no subscriber. (No body joining that multicast group). All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 70 5. Right after that you will need to create all other non-Multicast VLANs on this Switch. Once you completed those VLANs, your VLAN status should looks like the same as below. 6. Below are their related PVID settings. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 71 ES-3100 Series Switch Support Notes Here we have done everything we need on the Edge Switch <ES-3124>. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 72 1. At the very beginning, you can create your MVR VLAN First (which is VLAN100). To create this multicast VLAN, we do it in another way. First, access to the GUI of your Switch. Then click “Advanced Application” on the left and choose “Multicast”. Finally, you should click MVR on the right frame to setup your Multicast VLAN.
Page 73 4. At this point we go back to the “Multicast Setting” page, enable “IGMP Snooping” here. (Since MVR needs IGMP Snooping). For Unknown Multicast Frame, we prefer “Drop” here in order to avoid any Multicast All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 74 5. Right after that you will need to create all other non-Multicast VLANs on this Switch. Once you completed those VLANs, your VLAN status should looks like the same as below. 6. Below are their related PVID settings. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 75 ES-3100 Series Switch Support Notes Here we have done everything we need on the Edge Switch <GS-4012F>. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 76 2 ip address 192.168.2.1 255.255.255.0 exit To Create VLAN100 (Multicast VLAN) with its related IP domain (the dummy interface): vlan 100 name MVR normal 1-23 fixed 24 All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 77 109 name 109 normal 1-8,10-23 fixed 9,24 forbidden "" untagged 9 ip address 192.168.109.1 255.255.255.0 exit To Create VLAN110 with its related IP domain: vlan 110 All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 78 110 exit To set PVID of Port 11: interface port-channel 11 pvid 101 exit To set PVID of Port 12: interface port-channel 12 pvid 102 exit All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 79 ES-3100 Series Switch Support Notes To enable IGMP v2 on the dummy IP interface: interface route-domain 111.111.111.111/24 ip igmp v2 exit All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 80 101 name Data normal 2-27 fixed 1,28 forbidden "" untagged 1 exit To Setup VLAN 102: vlan 102 name Data normal 1,3-27 fixed 2,28 forbidden "" All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 81 To create the MVR VLAN 100 with group information: mvr 100 source-port 27-28 receiver-port 1-2 name 100 tagged 27-28 group 224.10.10.0 start-address 224.10.10.0 end-address 224.10.10.50 exit All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 82 109 normal 1-8,10,12 fixed 9,11 forbidden "" untagged 9 exit To Setup VLAN 110: vlan 110 name 110 normal 1-9,12 fixed 10-11 forbidden "" untagged 10 All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 83 To create the MVR VLAN 100 with group information: mvr 100 source-port 11 receiver-port 9-10 name 100 tagged 11 group 100 start-address 224.10.10.0 end-address 224.10.10.50 exit All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 84: What Is Spanning Tree Protocol
When the broadcast frame arrives at Switch B, Switch will repeat above process, flood it to Segment A. The broadcast frame will endlessly travel around the loop network even Router has already received this frame. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 85 2. Filtering Database Instability: When multiple copies of a frame arrive at different ports of a switch, the MAC entry instability in Filtering Database will occur. Host sends an unicast frame to Router (source MAC address is Host's MAC, destination MAC address is Router's MAC). Both Switch A and Switch B will receive this frame and learn MAC address of Host on Port 2.
Page 86: How Stp Works
STP operation is listed as the following: 1. Select a root bridge Only one switch/ bridge can be selected as the root bridge in a given network. All other decisions in the network, such as which port is blocked and which port is put in forwarding mode, are made regarding this root bridge.
Page 87 2. Select a root port for the non-root bridge For the non-root switch/bridge, there will be one root port. The root port is the port through which this non-root switch / bridge communicates with the root bridge (the "leaf"...
Page 88 Priority = 32768 Port 1 Port 2 Cost Cost Priority 128 Priority 128 All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes Switch C: MAC = 00A0C5333333 Priority = 1 Port 1 Port 2 Port 1...
Page 89 For non-root bridge Switch A, Port 1 path cost to root bridge is 19, Port 2 path cost is 119, 100 (Switch A Port 2) + 19 (Switch B Port 1). For Switch B, Port 1 path cost is 19, Port 2 path cost is 119. Root port = Port 1 of Switch A and Switch B because it has the lowest path cost to the root bridge Switch C.
Page 90: Switching Security
The following figure shows an example where the MAC freeze feature is enabled on port 6. The switch automatically copies all dynamically learnt MAC address on port 6 to the static MAC address. Figure 1: Enable MAC Freeze Example All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 91 MAC addresses. Figure 2: Displaying MAC Addresses From MAC Freeze After you enabled MAC freeze on port 6 using the CLI command, the switch automatically disables MAC address learning on that port. Display the Port Security screen to verify this.
Page 92 ES-3100 Series Switch Support Notes All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 93 Authentication and click Apply button to enable 802.1x authentication. Check Enable to turn on 802.1x authentication on that port. You can leave other settings as default values. Click Apply to save your changes. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 94 MUST use the account in RADIUS server. Windows XP(Supplicant) settings: There are many supplicants we can choose like MeetingHouse Aegis client, Funk Odyssey client and Microsoft 802.1x client. We take Microsoft All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 95 MD5-challenge in EAP type combobox. Please see the following figure. When the 802.1x starts, it will prompt you to enter the user name and password. Please see the following figure. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 96 After click the icon, there will be a dialog for entering the user name and password. Click ok after input the correct user name and password that are in the database of authentication server. The settings of client site are finished. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 97 ES-3100 Series Switch Support Notes After finishing the above procedures, we can allow the authenticated port the access the server. If the switch port doesn’t be authenticated, the PCs behind the port can’t access the network. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 98 13. [ Source – Socket ] 14. [ Destination – Socket ] 15. [ Establish Only ] If you choose a combination of parameters as your rules, the rule with a All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 99 (discard versus not-discard), a higher layer rule has priority over lower layer rule. In this case, the action of the second rule (Layer 4) is carried out because the first rule is only up to Layer 3. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 100 In conclusion, every parameter (or rule) in the packet header has a weight. The deeper the parameter in the packet header, the higher the weight is. Further more, the deeper parameter in the packet header has much more All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 101 ES-3100 Series Switch Support Notes higher weight than shallower parameters. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 102 In this example, we specify which format of the packet that the Switch applies its policy rules. We define three rules. Firstly, we define a classifier that is coming from port 2 and its source address is coming from 172.23.3.120;...
Page 103 ES-3100 Series Switch Support Notes GUI configuration of classifier and policy rule. Classifier 1 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 104 ES-3100 Series Switch Support Notes Classifier 2 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 105 ES-3100 Series Switch Support Notes Classifier 3 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 106: Policy Rule Configuration
ES-3100 Series Switch Support Notes Policy Rule Configuration Policy rule on Classifier 1 Policy rule on classifier 2 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 107 ES-3100 Series Switch Support Notes Policy rule on classifier 3 All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 108 AllowPort2IP120 priority dscp out-of-profile-dscp forward-action Policy rule on classifier 3 Switch(config)#policy DropAllPort2 priority dscp out-of-profile-dscp forward-action All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes source-port ethernet-type source-port ethernet-type source-port classifier vlan tagged classifier Port+IP bandwidth...
Page 109 ES-3100 Series Switch Support Notes Verifying your result Connect a PC “A” to the Switch on port2. Connect another PC “B” to the Switch on port10 with IP 172.23.3.191. First set the IP of PC “A” to 172.23.3.120. At this time, PC “A” can ping PC “B”. However, if you set the IP of PC “A”...
Page 110: Centralized Management
Castle Rock that constantly probe the network element (NE) and collect information of those NE for EMS. Underneath the EMS is Postgres SQL, the enterprise relational database system, provides query for EMS Figure 1 System Architecture All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 111 View Window Area: Map View, Mib Tables and Mib Graph windows are displayed here. View Window Area: Map View, Mib Tables and Mib Graph windows. Figure 2 Main elements of SNMPc All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 112 Green is working and Rd is no response from the device. System message Panel: View the alarm Status and port status of the selected switch. Figure 3 Overview of EMS All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 113 Netatlas with adding a new device. Follow the procedures from Step 1 to Step Step 1: In the edit button bar shown in the Figure 4 where you may select the icon to insert a new element. Figure 4 Adding a new Device All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 114 Figure 5 Map Object Properties Step 4: In the map object properties, select Access tab to set the parameters of Read Access Mode to SNMP V2c shown in Figure 6. Change the value of All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 115 Step 5: In the map object properties, select Access tab to set the parameters of Read /Write Access Mode to SNMP V2c shown in Figure 7. Change the value of Read/write Access Mode to SNMP V2c. Figure 7 Read/Write Access Mode All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 116 ES-3100 Series Switch Support Notes Step 6: In the map object properties, select Access tab to set the parameters of Read community to public as shown in Figure 8. Figure 8 Read Community All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 117 Read community to public in Figure 9. Change the value of Read//write Community to Public. Figure 9 Read/write Community Step 8: In the Selection tool menu, Click the name of your Switch to manage the device. Figure 10 Device Selection...
Page 118 ES-3100 Series Switch Support Notes Step 9: After the selection, a pop-up menu will display the NetAtlas switch manager diagram. Click the Switch Manager to enter the EMS Mapping shown in Figure 11 Figure 11 Device Selection Step 10: In the EMS mapping, it display a logical hierarchy for the device. In the device list, you may see the devices are added in the Rootmap shown in All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 119 ES-3100 Series Switch Support Notes Figure 12. Figure 12 Rootmap Step 11: Click the your Switch to configure the device shown in Figure 13. Figure 13 Device mapping All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 120 VLAN2 in GS-4024. Here are the procedures. Step 1: In the device panel list shown in Figure 12, right-click Configuration, Switch Configuration and then Switch Setup tab as shown in Figure 12 and Figure 13. Step 2: Define the VLAN type, there are two types of VLAN, one is 802.1Q and the other is Port-based VLAN.
Page 121 After the VLAN type selection, a pop-up window indicates that you have finished the configuration. Then after we have defined the VLAN type to be the 802.1Q, go back to click the Configuration and then VLAN configuration in All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 122 Click the New button to create a new VLAN ID in Figure 16. Figure 16 Creating a new VLAN ID Selecting Egress ports and defines them to be tagged or untagged in Figure 17 Figure 17 Selecting the ports All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 123 ES-3100 Series Switch Support Notes For more information, reference the user guide of NetAtlas. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 124: Cluster Management Overview
To discover the clustering members, the clustering Manager broadcasts a HDAP (Host Discovery and Address assignment Protocol) Discover request. Step 2: Cluster manager (Master device) All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes 1. HDAP Discover REQ 2. HDAP Discover RSP Cluster member...
Page 125: Cluster Member
"Set Address" request. The hardware address uniquely identifies the sender of this response. After the processes are done, the cluster master will be able to manage the All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes Cluster member...
Page 126 Cluster Manager. In the middle of this page, there is a table shows all the clustering candidates which can be selected and added as the clustering members. Step 2: All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 127 ES-3100 Series Switch Support Notes Select a device in the Clustering Candidate table and enter the password which is the admin password for the candidate device to add the clustering member. Step 3: All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 128 Click on the index number to manage the selected clustering member. Step 4: In “Member Menu” pages, you can change any setting of the clustering member, except Cluster Management, Firmware Upgrade and Restore Configuration. Step 5: All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 129 Enter “Management”->”Cluster Management”->”Clustering Management Status:” In “Clustering Management Status” pages, you can check the status for each member. Step 6: Enter “Management”->”Cluster Management”->”Clustering Management Configuration:” In “Clustering Management Configuration” pages , by All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 130 ES-3100 Series Switch Support Notes checking the remove checkbox and then, click on the Remove button to remove a cluster member. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 131: Overview Of Rmon
The SMON MIB extends RMON by providing RMON analysis for switched networks. RMON Groups RMON delivers information in nine RMON groups of monitoring elements, each providing specific sets of data to meet common network-monitoring All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 132 HostTopN Prepares tables that describe the top hosts. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes Elements Packets dropped, packets sent, bytes sent (octets), broadcast packets, multicast packets, CRC errors, runts,...
Page 133 Matrix (1.3.6.1.2.1.16.6) Filter (1.3.6.1.2.1.16.7) Capture (1.3.6.1.2.1.16.8) All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes Source and destination address pairs and packets, bytes, and errors for each pair. Bit-filter type (mask or not mask), filter expression (bit level), conditional expression (and, or not) to other filters.
Page 134 PC. And this PC is defined as “RMON management console”. This PC can ping both ZyXEL ES-3148 (both Switch A & Switch B). And there are some probes / networking devices to generate the traffic to the ZyXEL Switches in order to verify the RMON result.
Page 135 You can verify if your configuration is correct by using the “Poll Object” option. Just right click our mouse on the ES-3148 icon and it is located inside the “Tools”. All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 136 ES-3100 Series Switch Support Notes Secondly, click on the “Mib” tab and expend the SNMP Mibs’ tree. You will find that there is an “rmon” group over there and again you can expend its sub-tree. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 137 ES-3100 Series Switch Support Notes Right click the “etherStatsTable” and choose “View Table” All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 138 Find the interface or port that you are looking for. And you can look at the corresponding field and therefore find the value that you want to monitor. In this case, we are looking for the Broadcast Packets. All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 139 Switch RMON Group(s), otherwise, it will return 0 and always stays 0. Without the supporting of RMON, then it is impossible to monitor those elements in the RMON MIB Group All contents copyright (c) 2006 ZyXEL Communications Corporation.
Page 140 Connect the male 9-pin end of the console cable to the console port of the Switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer, which has terminal emulation software configured to...
Page 141 How to access the Command Line Interface? There are two ways to access the Command Line Interface. One is “Telnet to the switch” and another is “Connect a computer to the console port and use the terminal emulation software.” Please check “How to access the Switch through the console port?”...
Page 142 Power off and then power on the Switch, and press any key to enter the debug mode when the screen shows “Press any key to enter Debug Mode within 3 seconds.” Type “atlc” and press the enter key When the message “starting XMODEM upload” appears, do XMODEM upload of the default rom file to the Switch After it is done uploading the rom file successfully, type “atgo”...
Page 143 Is the mini GBIC transceiver hot-swappable? Yes, it is hot-swappable. You can change transceivers while the switch is All contents copyright (c) 2006 ZyXEL Communications Corporation. ES-3100 Series Switch Support Notes...
Page 144 Dual-Personality GbE interface means that one 1000Base-T Copper port and one SFP port share the same physical interface. Only one of them can be used at one of a time. Dual-Personality interface is also called "Combo Port" in some cases. All contents copyright (c) 2006 ZyXEL Communications Corporation.

This manual is also suitable for:

Es-3100 series Es-3124 Es-3124pwr Es-3148

ZyXEL Communications ZyXEL Dimension ES-3124-4F Support Notes

Quick Links

Support Notes

Need help?

Questions and answers

Related Manuals for ZyXEL Communications ZyXEL Dimension ES-3124-4F

Summary of Contents for ZyXEL Communications ZyXEL Dimension ES-3124-4F

This manual is also suitable for:

Table of Contents