Page 1 ES-4024A Ethernet Switch User’s Guide Version 3.60 8/2005...
Page 2: Copyright
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 3: Interference Statements And Warnings
FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications.
Page 4: Safety Warnings
2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3 Select the certification you wish to view from this page. Registration Register your product online for free future product updates and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.
Page 5: Zyxel Limited Warranty
ES-4024A User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or...
Page 6: Customer Support
+34 902 195 420 www.zyxel.es +34 913 005 345 +46 31 744 7700 www.zyxel.se +46 31 744 7701 ES-4024A User’s Guide REGULAR MAIL ZyXEL Communications Corp. 6 Innovation Road II Science Park Hsinchu 300 Taiwan ZyXEL Communications Czech s.r.o. Modranská 621 143 01 Praha 4 - Modrany Ceská...
Page 7 * “+” is the (prefix) number you enter to make an international telephone call. TELEPHONE* WEB SITE FTP SITE +44 (0) 1344 303044 www.zyxel.co.uk 08707 555779 (UK only) +44 (0) 1344 303034 ftp.zyxel.co.uk REGULAR MAIL ZyXEL Communications UK Ltd.,11 The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK) Customer Support...
Page 8: Table Of Contents
Table of Contents ... 7 List of Figures ... 17 List of Tables ... 23 Preface ... 27 Chapter 1 Getting to Know Your Switch... 29 1.1 Introduction ... 29 1.2 Software Features ... 29 1.3 Hardware Features ... 32 1.4 Applications ... 33 1.4.1 Backbone Application ...
Page 9 ... 49 4.3 The Status Screen 4.3.1 Change Your Password 4.4 Switch Lockout ... 54 4.5 Resetting the Switch 4.5.1 Reload the Configuration File ... 55 4.6 Logging Out of the Web Configurator ... 56 4.7 Help ... 56 Chapter 5 Initial Setup Example...
Page 10 7.3 General Setup ... 71 7.4 Introduction to VLANs ... 73 7.5 IGMP Snooping ... 73 7.6 Switch Setup Screen ... 74 7.7 IP Setup ... 75 7.7.1 IP Interfaces ... 76 7.8 Port Setup ... 77 Chapter 8 VLAN ... 79 8.1 Introduction to IEEE 802.1Q Tagged VLAN...
Page 11 ES-4024A User’s Guide Chapter 12 Bandwidth Control... 101 12.1 Bandwidth Control Setup ... 101 Chapter 13 Broadcast Storm Control ... 103 13.1 Overview ... 103 13.2 Broadcast Storm Control Setup ... 103 Chapter 14 Mirroring ... 105 14.1 Overview ... 105 14.2 Port Mirroring Setup ...
Page 12 Chapter 19 Access Control... 125 19.1 Overview ... 125 19.2 The Access Control Main Screen ... 125 19.3 About SNMP ... 126 19.3.1 Supported MIBs 19.3.2 SNMP Traps ... 127 19.3.3 Configuring SNMP ... 128 19.3.4 Setting Up Login Accounts ... 128 19.4 Service Port Access Control ...
Page 13 ES-4024A User’s Guide 23.3.2.2 Priority ... 150 23.3.2.3 Preempt Mode ... 150 23.3.3 Configuring VRRP Parameters ... 151 23.4 VRRP Configuration Summary ... 152 23.5 VRRP Configuration Examples ... 152 23.5.1 One Subnet Network Example ... 152 23.5.2 Two Subnets Example ... 154 Chapter 24 Static Route ...
Page 14 Cluster Management... 185 31.1 Overview ... 185 31.2 Cluster Management Status ... 186 31.2.1 Cluster Member Switch Management ... 187 31.2.1.1 Uploading Firmware to a Cluster Member Switch 31.3 Configuring Cluster Management ... 188 Chapter 32 MAC Table... 191 32.1 Overview ... 191 32.2 Viewing the MAC Table ...
Page 15 36.3 Displaying Detail DHCP Server Information ... 200 Chapter 37 Introducing the Commands ... 203 37.1 Overview ... 203 37.1.1 Switch Configuration File ... 203 37.2 Accessing the CLI ... 203 37.2.1 Access Priority ... 204 37.2.2 The Console Port ... 204 37.2.2.1 Initial Screen ...
Page 16 38.2.4 show interface ... 231 38.2.5 show mac address-table ... 231 38.3 ping ... 232 38.4 traceroute ... 233 38.5 Restarting the Switch ... 233 38.5.1 Resetting to the Factory Default ... 234 38.6 no Command Examples ... 234 38.6.1 no mirror-port ... 234 38.6.2 no trunk ...
Page 17 39.8 Show VLAN Setting ... 252 Chapter 40 Troubleshooting... 255 40.1 Problems Starting Up the Switch ... 255 40.2 Problems Accessing the Switch ... 255 40.2.1 Pop-up Windows, JavaScripts and Java Permissions ... 256 40.2.1.1 Internet Explorer Pop-up Blockers ... 256 40.2.1.2 JavaScripts ...
Page 18: List Of Figures
Figure 20 Web Configurator Home Screen (Status) ... 50 Figure 21 Change Administrator Login Password ... 54 Figure 22 Resetting the Switch: Via the Console Port ... 56 Figure 23 Web Configurator: Logout Screen ... 56 Figure 24 Initial Setup Network Example: IP Interface ... 57 Figure 25 Initial Setup Network Example: VLAN ...
Page 19 ES-4024A User’s Guide Figure 39 Port Based VLAN Setup (All Connected) ... 87 Figure 40 Port Based VLAN Setup (Port Isolation) ... 88 Figure 41 Static MAC Forwarding ... 91 Figure 42 Filtering ... 93 Figure 43 Spanning Tree Protocol: Status ... 97 Figure 44 Spanning Tree Protocol: Configuration ...
Page 20 Figure 86 VRRP Configuration Example: Two Virtual Router Network ... 154 Figure 87 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch A ... 155 Figure 88 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch B ... 155 Figure 89 VRRP Example 2: VRRP Status on Switch A ...
Page 21 ES-4024A User’s Guide Figure 125 Routing Table Status ... 197 Figure 126 DHCP Server Status ... 199 Figure 127 DHCP Server Status Detail ... 200 Figure 128 Initial Console Port Screen ... 204 Figure 129 CLI: Login Screen ... 205 Figure 130 CLI Help: List of Commands: Example 1 ...
Page 22 ES-4024A User’s Guide Figure 168 frame type Command Example ... 250 Figure 169 no gvrp Example ... 250 Figure 170 Modifying Static VLAN Example ... 251 Figure 171 no vlan Command Example ... 252 Figure 172 show vlan Command Example ... 253 Figure 173 Pop-up Blocker ...
Page 23 ES-4024A User’s Guide List of Figures...
Page 24: List Of Tables
Table 26 Mirroring: Mirror Port Setting ... 106 Table 27 Trunk Groups ... 107 Table 28 Link Aggregation ID: Local Switch ... 108 Table 29 Link Aggregation ID: Peer Switch ... 108 Table 30 Link Aggregation Control Protocol Status ... 109 Table 31 Link Aggregation: Configuration ...
Page 25 ES-4024A User’s Guide Table 39 SNMP Traps ... 127 Table 40 Access Control: SNMP ... 128 Table 41 Access Control: Logins ... 129 Table 42 Access Control: Service Access Control ... 130 Table 43 Access Control: Remote Management ... 131 Table 44 Classifier ...
Page 26 Table 86 interface route-domain Commands ... 226 Table 87 Command Summary: config-vlan Commands ... 227 Table 88 Troubleshooting the Start-Up of Your Switch ... 255 Table 89 Troubleshooting Accessing the Switch ... 255 Table 90 Troubleshooting the Password ... 263 Table 91 General Product Specifications ...
Page 27 ES-4024A User’s Guide List of Tables...
Page 28: Preface
• For brevity’s sake, we will use “e.g.,” as a shorthand for “for instance”, and “i.e.,” for “that is” or “in other words” throughout this manual. • The ES-4024A Ethernet Switch may be referred to as “the ES-4024A” or “the switch” in this User’s Guide.
Page 29: User Guide Feedback
Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.
Page 30: Getting To Know Your Switch
TCP/IP configuration at start-up from a server. You can configure the switch as a DHCP server or disable it. When configured as a server, the switch provides the TCP/IP configuration for the clients. If you disable the DHCP service, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Page 31: Port Mirroring
IP Multicast With IP multicast, the switch delivers IP packets to a group of hosts on the network - not everybody. In addition, the switch can send packets to Ethernet devices that are not VLAN- aware by untagging (removing the VLAN tags) IP multicast packets.
Page 32 DVMRP (Distance Vector Multicast Routing Protocol) is a protocol used for routing multicast data within an autonomous system (AS). DVMRP provides multicast forwarding capability to a layer 3 switch that runs both the IPv4 protocol (with IP Multicast support) and the IGMP protocol.
Page 33: Hardware Features
The ports allow the switch to connect to another Ethernet devices. Gigabit Ethernet Ports The ports allow the switch to connect to another WAN switch or daisy-chain to other switches. Mini-GBIC Slots Install SPF transceivers in these slots to connect to other Ethernet switches at longer distances than the Ethernet port.
Page 34: Applications
This section shows a few examples of using the switch in various network environments. 1.4.1 Backbone Application In this application, the switch is an ideal solution for small networks where rapid growth can be expected in the near future. The switch can be used standalone for a group of heavy traffic users. You can connect computers directly to the switch’s port or connect other switches to the switch.
Page 35: High Performance Switched Example
Figure 2 Bridging Application 1.4.3 High Performance Switched Example The switch is ideal for connecting two networks that need high bandwidth. In the following example, use trunking to connect these two networks. Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance.
Page 36: Tag-Based Vlan Example
In this example, only ports that need access to the server need belong to VLAN 1. Ports can belong to other VLAN groups too. Chapter 1 Getting to Know Your Switch ES-4024A User’s Guide Chapter 8, “VLAN,” on page...
Page 37: Figure 5 Shared Server Using Vlan Example
ES-4024A User’s Guide Figure 5 Shared Server Using VLAN Example Chapter 1 Getting to Know Your Switch...
Page 38: Hardware Installation And Connection
For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and 3.4 inches (8 cm) at the back of the switch. This is especially important for enclosed rack installations. Chapter 2 Hardware Installation and Connection ES-4024A User’s Guide...
Page 39: Mounting The Es-4024A On A Rack
ES-4024A User’s Guide 2.2 Mounting the ES-4024A on a Rack This section lists the rack mounting requirements and precautions and describes the installation steps. 2.2.1 Rack-mounted Installation Requirements • Two mounting brackets. • Eight M3 flat head screws and a #2 Philips screwdriver. •...
Page 40: Figure 8 Mounting The Es-4024A On A Rack
ES-4024A User’s Guide Figure 8 Mounting the ES-4024A on a Rack 2 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. 3 Repeat steps to attach the second mounting bracket on the other side of the rack. Chapter 2 Hardware Installation and Connection...
Page 41 ES-4024A User’s Guide Chapter 2 Hardware Installation and Connection...
Page 42: Chapter 3 Hardware Overview
Table 1 Front Panel LABEL DESCRIPTION CONSOLE Only connect this port if you want to configure the switch using the command line interface (CLI) via the console port. 24 10/100 Connect these ports to a computer, a hub, an Ethernet switch or router.
Page 43: Ethernet Ports
ES-4024A User’s Guide Connect the male 9-pin end of the console cable to the console port of the switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. 3.1.2 Ethernet Ports The ES-4024A has 24 10/100Mbps auto-negotiating, auto-crossover Ethernet ports. In 10/ 100Mbps Fast Ethernet, the speed can be 10Mbps or 100Mbps and the duplex mode can be half duplex or full duplex.
Page 44: Transceiver Installation
1 Insert the transceiver into the slot with the exposed section of PCB board facing down. Figure 10 Transceiver Installation Example 2 Press the transceiver firmly until it clicks into place. 3 The switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. Figure 11 Installed Transceiver 3.1.3.2 Transceiver Removal...
Page 45: Rear Panel
Figure 13 Transceiver Removal Example 3.2 Rear Panel The following figure shows the rear panel of the switch. The rear panel contains the stacking ports, a connector for backup power supply (BPS) and the power receptacle. Figure 14 Rear Panel 3.2.1 Power Connector...
Page 46: External Backup Power Supply Connector
The backup power supply constantly monitors the status of the internal power supply. The backup power supply automatically provides power to the switch in the event of a power failure. Once the switch receives power from the backup power supply, it will not automatically switch back to using the internal power supply even when the power is resumed.
Page 47: Stacking Scenario Examples
ES-4024A User’s Guide Table 2 Front Panel LEDs (continued) COLOR 100/1000 Green Amber Green LNK (mini Green GBIC Slots) ACT(mini Green GBIC Slots) 3.4 Stacking Scenario Examples Use Ethernet cables when stacking the switches. See the following figures for example stacking scenarios using the stacking module.
Page 48: Uplink Scenario Example
Use Ethernet cables when daisy-chaining/uplinking the switches. See the following figure for an example uplink connection using the stacking module. You must uplink to a Gigabit switch using a category 5 Ethernet cable supporting Gigabit line rate when uplinking using the stacking module.
Page 49: Figure 18 Uplink Example
ES-4024A User’s Guide Figure 18 Uplink Example Chapter 3 Hardware Overview...
Page 50: The Web Configurator
4.2 System Login 1 Start your web browser. 2 Type “http://” and the IP address of the switch (for example, the default is 192.168.1.1) in the Location or Address field. Press 3 The login screen appears. The default username is admin and associated default password is 1234.
Page 51: The Status Screen
ES-4024A User’s Guide 4 Click OK to view the first web configurator screen. 4.3 The Status Screen The Status screen is the first screen that displays when you access the web configurator. The following figure shows the navigating components of a web configurator screen. Figure 20 Web Configurator Home Screen (Status) In the navigation panel, click a main link to reveal a list of submenu links.
Page 52: Table 3 Navigation Panel Sub-Links Overview
APPLICATION The following table lists the various web configurator screens within the sub-links. Table 4 Web Configurator Screen Sub-links Details BASIC SETTING System Info General Setup Switch Setup IP Setup Port Setup Chapter 4 The Web Configurator ROUTING PROTOCOL ADVANCED...
Page 53: Table 5 Navigation Panel Links
This link takes you to a screen where you can configure general identification information about the switch. Switch Setup This link takes you to a screen where you can set up global switch parameters such as VLAN type, MAC address learning, IGMP snooping, GARP and priority queues. IP Setup...
Page 54 This link takes you to screens where you can change the system login password and configure SNMP and remote management. Classifier This link takes you to a screen where you can configure the switch to group packets based on the specified criteria. DiffServ This link takes you to screens where you can enable DiffServ, configure marking rules and set DSCP-to-IEEE802.1p mappings.
Page 55: Change Your Password
Click Advanced Application, Access Control and then Logins to display the next screen. Figure 21 Change Administrator Login Password 4.4 Switch Lockout Note: You cannot log into the switch using the same administrator account concurrently on different IP routing domains. Chapter 4 The Web Configurator...
Page 56: Resetting The Switch
Note: Be careful not to lock yourself and others out of the switch. 4.5 Resetting the Switch If you lock yourself (and others) from the switch or forget the ES-4024A password, you will need to reload the factory-default configuration file or reset the switch back to the factory defaults.
Page 57: Logging Out Of The Web Configurator
262144 bytes received. Erasing.. ES-4024A> atgo The switch is now reinitialized with a default configuration file including the default password of “1234”. 4.6 Logging Out of the Web Configurator Click Logout in a screen to exit the web configurator. You have to log in with your password again after you log out.
Page 58: Initial Setup Example
5.1.1 Configuring an IP Interface On a layer-3 switch, an IP interface (also known as an IP routing domain) is not bound to a physical port. The default IP address of the switch is 192.168.1.1 with a subnet mask of 255.255.255.0.
Page 59: Configuring Dhcp Server Settings
6 Click Add. 5.1.2 Configuring DHCP Server Settings You can set the switch to assign network information (such as the IP address, DNS server, etc.) to DHCP clients on the network. For the example network, configure two DHCP client pools on the switch for the DHCP clients in the RD and Sales networks.
Page 60: Creating A Vlan
5.1.3 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the port(s) belongs. You can do this with port-based VLAN or tagged static VLAN with fixed port members. In this example, you want to configure port 10 as a member of VLAN 2. Figure 25 Initial Setup Network Example: VLAN 1 Click Advanced Application and VLAN in the navigation panel and click the Static VLAN link.
Page 61: Setting Port Vid
4 To ensure that VLAN-unaware devices (such as computers and hubs) can receive frames properly, clear the TX Tagging check box to set the switch to remove VLAN tags before sending. 5 Click Add to save the settings. 5.1.4 Setting Port VID Use PVID to add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines.
Page 62 1 Click Advanced Applications and VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 10 and click Apply to save the settings. Chapter 5 Initial Setup Example ES-4024A User’s Guide...
Page 63 ES-4024A User’s Guide Chapter 5 Initial Setup Example...
Page 64: System Status And Port Statistics
System Status and Port This chapter describes the system status (web configurator home page) and port details screens. 6.1 Overview The home screen of the web configurator displays a port statistical summary table with links to each port showing statistical details. 6.2 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next.
Page 65: Port Details
6.2.1 Port Details Click a number in the Port column in the Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the switch. Figure 28 on page 65).
Page 66: Figure 28 Status: Port Details
Figure 28 Status: Port Details The following table describes the labels in this screen. Table 7 Status: Port Details LABEL DESCRIPTION Port Info Link This field shows whether the Ethernet connection is down, and the speed/duplex mode. Status This field shows the training state of the ports. The states are FORWARDING (forwarding), which means the link is functioning normally or STOP (the port is stopped to break a loop or duplicate path).
Page 67 ES-4024A User’s Guide Table 7 Status: Port Details (continued) LABEL DESCRIPTION Rx KB/s This field shows the number of kilobytes per second received on this port. Up Time This field shows the total amount of time the connection has been up. Tx Packet The following fields display detailed information about packets transmitted.
Page 68 Table 7 Status: Port Details (continued) LABEL DESCRIPTION Late This is the number of times a late collision is detected, that is, after 512 bits of the packets have already been transmitted. Error Packet The following fields display detailed information about packets received that were in error.
Page 69 ES-4024A User’s Guide Chapter 6 System Status and Port Statistics...
Page 70: Chapter 7 Basic Setting
The real time is then displayed in the switch logs. The Switch Setup screen allows you to set up and configure global switch features. The IP Setup screen allows you to configure a switch IP address in each routing domain, subnet mask(s) and DNS (domain name server) for management purposes.
Page 71: Figure 29 System Info
You may choose the temperature unit (Centigrade or Fahrenheit) in this field. Temperature MAC, CPU and PHY refer to the location of the temperature sensors on the switch printed circuit board. Current This shows the current temperature in degrees centigrade at this sensor.
Page 72: General Setup
This field displays the maximum voltage measured at this point. This field displays the minimum voltage measured at this point. Threshold This field displays the percentage tolerance of the voltage with which the switch still works. Status Normal indicates that the voltage is within an acceptable operating range at this point;...
Page 73: Figure 30 General Setup
Location Enter the geographic location (up to 30 characters) of your switch. Contact Person's Enter the name (up to 30 characters) of the person in charge of this switch. Name Use Time Server Enter the time service protocol that a timeserver sends when you turn on the switch.
Page 74: Introduction To Vlans
Chapter 8 on page 79 7.5 IGMP Snooping A switch can passively snoop on IGMP Query, Report and Leave (IGMP version 2) packets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly.
Page 75: Switch Setup Screen
ES-4024A User’s Guide 7.6 Switch Setup Screen Click Basic Setting and then Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to the chapter on VLAN.
Page 76: Ip Setup
Use the next two fields to configure the priority level-to-physical queue mapping. The switch has four physical queues that you can map to the 8 priority levels. On the switch, traffic assigned to higher index queues gets through faster while traffic in lower index queues is dropped if the network is congested.
Page 77: Ip Interfaces
The factory default subnet mask is 255.255.255.0. On the switch, as a layer-3 device, an IP address is not bound to any physical ports. Since each IP address on the switch must be in a separate subnet, the configured IP address is also known as IP interface (or routing domain).
Page 78: Port Setup
Mask example, 255.255.255.0. Enter the VLAN identification number to which an IP routing domain belongs. Click Add to save the new rule to the switch. It then displays in the summary table at the bottom of the screen. Cancel Click Cancel to reset the fields to your previous configuration.
Page 79: Table 12 Port Setup
When auto-negotiation is turned on, a port on the switch negotiates with the peer automatically to determine the connection speed and duplex mode. If the peer port does not support auto-negotiation or turns off this feature, the switch determines the connection speed by detecting the signal on the cable and using half duplex mode.
Page 80: Chapter 8 Vlan
The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-based VLANs. 8.1 Introduction to IEEE 802.1Q Tagged VLAN A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the switch on which they were created.
Page 81: Automatic Vlan Registration
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network. Enable this function to permit VLANs groups beyond the local switch. Please refer to the following table for common IEEE 802.1Q VLAN terminology.
Page 82: Port Vlan Trunking
C, D and E; otherwise they will drop frames with unknown VLAN group tags. However, with VLAN Trunking enabled on a port(s) in each intermediary switch you only need to create VLAN groups in the end devices (A and B). C, D and E automatically allow frames with VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to pass through their VLAN trunking port(s).
Page 83: Static Vlan
ES-4024A User’s Guide Figure 35 Switch Setup: Select VLAN Type 8.5 Static VLAN Use a static VLAN to decide whether an incoming frame on a port should be • sent to a VLAN group as normal depends on its VLAN tag.
Page 84: Configure A Static Vlan
This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up. Status This field shows how this VLAN was added to the switch; dynamically using GVRP or statically, that is, added as a permanent entry. Poll Interval(s) The text box displays how often (in seconds) this screen refreshes.
Page 85: Figure 37 Vlan: Static Vlan
ES-4024A User’s Guide Figure 37 VLAN: Static VLAN The following table describes the related labels in this screen. Table 15 VLAN: Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings. Name Enter a descriptive name for the VLAN group for identification purposes. VLAN Group ID Enter the VLAN ID for this static entry;...
Page 86: Configure Vlan Port Settings
VLAN members on ports across the network. Select this check box to permit VLAN groups beyond the local switch. Port Isolation Port Isolation allows each port (1 to 26) to communicate only with the CPU management port but not communicate with each other.
Page 87: Port-Based Vlans
(an egress port is an outgoing port, that is, a port through which a data packet leaves) for both ports. Port-based VLANs are specific only to the switch on which they were created. Note: When you activate port-based VLAN, the ES-4024A uses a default VLAN ID of 1.
Page 88: Figure 39 Port Based Vlan Setup (All Connected)
ES-4024A User’s Guide Figure 39 Port Based VLAN Setup (All Connected) Chapter 8 VLAN...
Page 89: Figure 40 Port Based Vlan Setup (Port Isolation)
ES-4024A User’s Guide Figure 40 Port Based VLAN Setup (Port Isolation) The following table describes the labels in this screen. Chapter 8 VLAN...
Page 90: Table 17 Port Based Vlan Setup
(its outgoing port). CPU refers to the switch management port. By default it forms a VLAN with all Ethernet ports. If it does not form a VLAN with a particular port then the switch cannot be managed from that port.
Page 91 ES-4024A User’s Guide Chapter 8 VLAN...
Page 92: Static Mac Forwarding
MAC addresses for a port. This may reduce the need for broadcasting. Static MAC address forwarding together with port security allow only computers in the MAC address table on a port to access the switch. See on port security.
Page 93: Table 18 Static Mac Forwarding
ES-4024A User’s Guide Table 18 Static MAC Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by clearing this check box. Name Enter a descriptive name for identification purposes for this static MAC address forwarding rule.
Page 94: Chapter 10 Filtering
This chapter discusses static IP and MAC address port filtering. 10.1 Overview Port filtering means discarding (or dropping) traffic flow based on the source and/or destination IP and/or MAC addresses and VLAN group. You must first configure rules to classify traffic flows in the Classifier screen. 10.2 Configure a Filtering Rule Activate filtering on a specified traffic flow in the Filtering screen.
Page 95 ES-4024A User’s Guide Table 19 Filtering (continued) LABEL DESCRIPTION Classifier A classifier groups traffic flow based on the specified criteria. This field displays the name(s) of the classifier(s) you configure in the Classifier screen. Select a classifier (or traffic flow) to which the rule is to apply. Click Add to inset the entry to the summary table below.
Page 96: Chapter 11 Spanning Tree Protocol
On each bridge, the root port is the port through which this bridge communicates with the root. It is the port on this switch with the lowest path cost to the root (the root path cost). If there is no root port, then this switch has been accepted as the root bridge of the spanning tree network.
Page 97: How Stp Works
ES-4024A User’s Guide 11.1.2 How STP Works After a bridge determines the lowest cost-spanning tree with STP, it enables the root port and the ports that are the designated ports for connected LANs, and disables all other ports that participate in STP. Network packets are therefore only forwarded between enabled ports, eliminating any possible network loops.
Page 98: Figure 43 Spanning Tree Protocol: Status
This switch may also be the root bridge. Bridge ID This is the unique identifier for this bridge, consisting of bridge priority plus MAC address. This ID is the same for Root and Our Bridge if the switch is the root switch. Hello Time...
Page 99: Configure Stp
ES-4024A User’s Guide Table 22 Spanning Tree Protocol: Status (continued) LABEL DESCRIPTION Poll Interval(s) The text box displays how often (in seconds) this screen refreshes. You may change the refresh interval by typing a new number in the text box and then clicking Set Interval.
Page 100 (provided in the last BPDU) becomes the designated port for the attached LAN. If it is a root port, a new root port is selected from among the switch ports attached to the network. The allowed range is 6 to 40 seconds.
Page 101 ES-4024A User’s Guide Chapter 11 Spanning Tree Protocol...
Page 102: Chapter 12 Bandwidth Control
This chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen. 12.1 Bandwidth Control Setup Bandwidth control means defining a maximum allowable bandwidth for the specified traffic flow. Click Advanced Application, Bandwidth Control in the navigation panel to bring up the screen as shown next.
Page 103 ES-4024A User’s Guide Table 24 Bandwidth Control (continued) LABEL DESCRIPTION Cancel Click Cancel to reset the fields back to your previous configuration. Clear Click Clear to reset the fields back to the factory defaults. Chapter 12 Bandwidth Control...
Page 104: Broadcast Storm Control
Broadcast storm control limits the number of broadcast frames that can be stored in the switch buffer or sent out from the switch. Broadcast frames that arrive when the buffer is full are discarded. Enable this feature to reduce broadcast traffic coming into your network.
Page 105: Table 25 Broadcast Storm Control
Select a time period from 64, 1024, 8000, 256000 microseconds. Direction Choose to monitor broadcast packets coming into the switch (Incoming) or going out of the switch (Outgoing). Port This field displays a port number.
Page 106: Chapter 14 Mirroring
This chapter discusses the Mirror setup screens. 14.1 Overview Port mirroring allows you to copy a traffic flow to a mirror port (the port you copy the traffic to) in order that you can examine the traffic from the mirror port without interference. 14.2 Port Mirroring Setup Click Advanced Application, Mirroring in the navigation panel to display the Mirroring screen.
Page 107: Table 26 Mirroring: Mirror Port Setting
LABEL DESCRIPTION Active Clear this check box to deactivate port mirroring on the switch. Mirror Port The mirror port is the port you copy the traffic to in order to examine it in more detail without interfering with the traffic flow on the original port(s). Select this port from this drop-down list box.
Page 108: Chapter 15 Link Aggregation
This chapter shows you how to logically aggregate physical links to form one logical, higher- bandwidth link. 15.1 Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.
Page 109: Link Aggregation Id
ES-4024A User’s Guide • You must connect all ports point-to-point to the same Ethernet switch and configure the ports for LACP trunking. • LACP only works on full-duplex links. • All ports in the same trunk group must have the same media type, speed, duplex mode and flow control settings.
Page 110: Link Aggregation Setup
Figure 48 Link Aggregation Control Protocol Status The following table describes the labels in this screen. Table 30 Link Aggregation Control Protocol Status LABEL DESCRIPTION Index This field displays the trunk ID to identify a trunk group, that is, one logical link containing multiple ports.
Page 111: Figure 49 Link Aggregation: Configuration
Select this checkbox to enable Link Aggregation Control Protocol (LACP). System LACP system priority is a number between 1 and 65535. The switch with the lowest Priority system priority (and lowest port number if system priority is the same) becomes the LACP “server”.
Page 112: Chapter 16 Port Authentication
This chapter describes the 802.1x authentication method and RADIUS server connection setup. 16.1 Overview IEEE 802.1x is an extended authentication protocol Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. 16.1.1 RADIUS RADIUS (Remote Authentication Dial-In User Service) authentication is a popular protocol used to authenticate users by means of an external server instead of (or in addition to) an...
Page 113: Activate Ieee 802.1X Security
Active Select this checkbox to permit 802.1x authentication on this port. You must first allow 802.1x authentication on the switch before configuring it on each port. Reauthentication Specify if a subscriber has to periodically re-enter his or her username and password to stay connected to the port.
Page 114: Configuring Radius Server Settings
Specify a password (up to 30 alphanumeric characters) as the key to be shared between the external RADIUS server and the switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the switch.
Page 115 ES-4024A User’s Guide Chapter 16 Port Authentication...
Page 116: Chapter 17 Port Security
Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch. The switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K.
Page 117: Figure 54 Port Security
MAC addresses aged out. MAC address aging out time can be set in the Switch Setup screen. The valid range is from “0” to “254”. “0” means this feature is disabled, so the switch will learn MAC addresses up to the global limit of 16K.
Page 118: Chapter 18 Dhcp
This chapter shows you how to configure the DHCP feature. 18.1 Overview DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server. You can configure the ES- 4024A as a DHCP server or disable it. When configured as a server, the ES-4024A provides the TCP/IP configuration for the clients.
Page 119: Figure 55 Dhcp: Server
ES-4024A User’s Guide Figure 55 DHCP: Server The following table describes the DHCP server related labels in this screen. Table 35 DHCP: Server LABEL DESCRIPTION Active Select this check box to enable the DHCP settings. Enter the ID number of the VLAN group to which this DHCP settings apply. DHCP Status Select Sever to set the ES-4024A to act as a DHCP server.
Page 120: Dhcp Server Configuration Example
Click Cancel to clear the Delete check boxes. 18.2.1 DHCP Server Configuration Example The follow figure shows a network example where the switch is used to assign network information to the DHCP clients in the RD and Sales network. Figure 56 DHCP Server Network Example In the DHCP Server screen, configure two DHCP client IP address pools for the two networks.
Page 121: Configuring Dhcp Relay
Figure 57 DHCP Server Configuration Example 18.3 Configuring DHCP Relay Configure DHCP relay on the switch if the DHCP clients and the DHCP server are not in the same subnet. During the initial IP address leasing, the switch helps to relay network information (such as the IP address and subnet mask) between a DHCP client and a DHCP server.
Page 122: Figure 58 Dhcp: Relay
Figure 58 DHCP: Relay The following table describes the DHCP relay related labels in this screen. Table 36 DHCP: Relay LABEL DESCRIPTION Active Select this check box to enable the DHCP settings. Enter the ID number of the VLAN group to which this DHCP settings apply. DHCP Status Select Sever to set the ES-4024A to act as a DHCP server.
Page 123: Dhcp Relay Configuration Example
Click Cancel to clear the Delete check boxes. 18.3.1 DHCP Relay Configuration Example The follow figure shows a network example where the switch is used to relay DHCP requests for the RD and Sales network. There is only one DHCP server that services the DHCP clients in both networks.
Page 124: Figure 60 Dhcp Relay Configuration Example
ES-4024A User’s Guide Figure 60 DHCP Relay Configuration Example Chapter 18 DHCP...
Page 125 ES-4024A User’s Guide Chapter 18 DHCP...
Page 126: Chapter 19 Access Control
• A console port access control session and Telnet access control session cannot coexist. The console port has higher priority. If you telnet to the switch and someone is already logged in from the console port, then you will see the following message.
Page 127: About Snmp
An SNMP managed network consists of two main components: agents and a manager. An agent is a management software module that resides in a managed switch (the ES-4024A). An agent translates the local management information from the managed switch into a form compatible with SNMP.
Page 128: Supported Mibs
SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a request and the agent returns responses using the following protocol operations: Table 38 SNMP Commands COMMAND DESCRIPTION Allows the manager to retrieve an object variable from the agent. GetNext Allows the manager to retrieve the next object variable from a table or list within an agent.
Page 129: Configuring Snmp
Click Cancel to begin configuring this screen afresh. 19.3.4 Setting Up Login Accounts Up to five people (one administrator and four non-administrators) may access the switch via web configurator at any one time. • An administrator is someone who can both view and configure switch changes. The username for the Administrator is always admin.
Page 130: Service Port Access Control
Retype to Retype your new system password for confirmation confirm Apply Click Apply to save your changes back to the switch. Cancel Click Cancel to begin configuring this screen afresh. 19.4 Service Port Access Control Service Access Control allows you to decide what services you may use to access the ES- 4024A.
Page 131: Remote Management
From the Access Control screen, display the Remote Management screen as shown next. You can specify a group of one or more “trusted computers” from which an administrator may use a service to manage the switch. Click Access Control to return to the Access Control screen.
Page 132: Table 43 Access Control: Remote Management
Configure the IP address range of trusted computers from which you can manage this switch. End Address The switch checks if the client IP address of a computer requesting a service or protocol matches the range set here. The switch immediately disconnects the session if it does not match.
Page 133 ES-4024A User’s Guide Chapter 19 Access Control...
Page 134: Chapter 20 Classifier
This chapter introduces and shows you how to configure the packet classifier on the switch. 20.1 Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
Page 135: Figure 68 Classifier
ES-4024A User’s Guide Figure 68 Classifier The following table describes the labels in this screen. Table 44 Classifier LABEL DESCRIPTION Active Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes. Layer 2 Specify the fields below to configure a layer 2 classifier.
Page 136 Select an IP protocol type or select Other and enter the protocol number in decimal value. Refer to You may select Establish Only for TCP protocol type. This means that the switch will pick out the packets that are sent to establish TCP connections.
Page 137: Classifier Configuration Example
ES-4024A User’s Guide The following table shows some other common Ethernet types and the corresponding protocol number. Table 45 Common Ethernet Types and Protocol Number ETHERNET TYPE IP ETHII X.75 Internet NBS Internet ECMA Internet Chaosnet X.25 Level 3 XNS Compat Banyan Systems BBN Simnet IBM SNA...
Page 138: Figure 69 Classifier Example
ES-4024A User’s Guide Figure 69 Classifier Example Chapter 20 Classifier...
Page 139 ES-4024A User’s Guide Chapter 20 Classifier...
Page 140: Differentiated Services
Differentiated Services This chapter shows you how to configure Differentiated Services (DiffServ) on the ES-4024A. 21.1 Overview Quality of Service (QoS) mechanisms provide the best service on a per-flow guarantee. To fine-tune the levels of services on the priority of the traffic flow using QoS places a heavy burden on the network infrastructure.
Page 141: Activating Diffserv
ES-4024A User’s Guide Figure 71 DiffServ Network Example Switch A marks traffic flowing into the network based on the configured marking rules. Intermediary network devices 1 and 2 allocate network resources (such as bandwidth) by mapping the DSCP values and the associated policies.
Page 142: Configuring Marking Rules
Table 47 DiffServ LABEL DESCRIPTION Active Select this option to enable DiffServ on the switch. Default DSCP Enter the default DSCP value (between 0 to 63) to use if no marking rule is configured for a traffic type. Port This field displays the index number of a port on the ES-4024A.
Page 143: Dscp-To-Ieee802.1P Priority Mapping
ES-4024A User’s Guide Table 48 DiffServ: Marking Rule Setting (continued) LABEL DESCRIPTION Classifier A classifier groups traffic flow based on the specified criteria. This field displays the name(s) of the classifier(s) you configure in the Classifier screen. Select a classifier (or traffic flow) to which the rule is applied. Click Add to inset the entry to the summary table below.
Page 144: Figure 74 Diffserv: Dscp Setting
Figure 74 DiffServ: DSCP Setting The following table describes the labels in this screen. Table 50 DiffServ: DSCP Setting LABEL DESCRIPTION 0 … 63 This is the DSCP classification identification number. To set the IEEE802.1p priority mapping, select the priority level from the drop-down list box. Apply Click Apply to save the changes.
Page 145 ES-4024A User’s Guide Chapter 21 Differentiated Services...
Page 146: Chapter 22 Queuing Method
Strict Priority Queuing (SPQ) services queues based on priority only. As traffic comes into the switch, traffic on the highest priority queue, Q3 is transmitted first. When that queue empties, traffic on the next highest-priority queue, Q2 is transmitted until Q2 empties, and then traffic is transmitted on Q1 and so on.
Page 147: Figure 75 Queuing Method
Queues with larger weights get more service than queues with smaller weights. Apply Click Apply to save your changes back to the switch. Cancel Click Cancel to begin configuring this screen afresh. Calculate Click Calculate to make sure the WFQ queuing weights total to 100%;...
Page 148: Chapter 23 Vrrp
VR1 to ensure the link between the host X and the uplink gateway G. Host X is configured to use VR1 (192.168.1.20) as the default gateway. If switch A has a higher priority, it is the master router. Switch B, having a lower priority, is the backup router.
Page 149: Viewing Vrrp Status
ES-4024A User’s Guide 23.2 Viewing VRRP Status Click Advanced Application, VRRP in the navigation panel to display the VRRP Status screen as shown next. Figure 77 VRRP Status The following table describes the labels in this screen. Table 52 VRRP Status LABEL DESCRIPTION Index...
Page 150: Configuring Vrrp
23.3 Configuring VRRP Follow the instructions in the follow sections to configure VRRP on the ES-4024A. 23.3.1 IP Interface Setup Before configuring VRRP, first create an IP interface (or routing domain) in the IP Setup screen (see the Section 7.7 on page 75 Click Advanced Application, VRRP and click the Configuration link to display the VRRP Configuration screen as shown next.
Page 151: Vrrp Parameters
ES-4024A User’s Guide Table 53 VRRP Configuration: IP Interface LABEL DESCRIPTION Index This field displays the index number of an entry. Network This field displays the IP address and number of subnet mask bit of an IP domain. Authentication Select None to disable authentication. This is the default setting. Select Simple to use a simple password to authenticate VRRP packet exchanges on this interface.
Page 152: Configuring Vrrp Parameters
23.3.3 Configuring VRRP Parameters After you set up an IP interface, configure the VRRP parameters in the VRRP Configuration screen. Figure 79 VRRP Configuration: VRRP Parameters The following table describes the labels in this screen. Table 54 VRRP Configuration: VRRP Parameters LABEL Active Name...
Page 153: Vrrp Configuration Summary
ES-4024A User’s Guide 23.4 VRRP Configuration Summary To view a summary of all VRRP configurations on the ES-4024A, scroll down to the bottom of the VRRP Configuration screen. Figure 80 VRRP Configuration: Summary The following table describes the labels in this screen. Table 55 VRRP Configuring: VRRP Parameters LABEL DESCRIPTION...
Page 154: Figure 81 Vrrp Configuration Example: One Virtual Router Network
ES-4024A User’s Guide Figure 81 VRRP Configuration Example: One Virtual Router Network You want to set switch A as the master router. Configure the VRRP parameters in the VRRP Configuration screens on the ES-4024As as shown in the figures below.
Page 155: Two Subnets Example
VRRP. You wish to configure switch A as the master router for virtual router VR1 and as a backup for virtual router VR2. On the other hand, switch B is the master for VR2 and a backup for VR1.
Page 156: Figure 87 Vrrp Example 2: Vrrp Parameter Settings For Vr2 On Switch A
ES-4024A User’s Guide Figure 87 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch A Figure 88 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch B After configuring and saving the VRRP configuration, the VRRP Status screens for both switches are shown next.
Page 157 ES-4024A User’s Guide Chapter 23 VRRP...
Page 158: Chapter 24 Static Route
This chapter shows you how to configure static routes. 24.1 Configuring Static Routes Static routes tell the ES-4024A how to forward IP traffic when you configure the TCP/IP parameters manually. Click Routing Protocol, Static Routing in the navigation panel to display the screen as shown.
Page 159 Gateway IP Enter the IP address of the gateway. The gateway is an immediate neighbor of your Address switch that will forward the packet to the destination. The gateway must be a router on the same segment as your switch. Metric The metric represents the “cost”...
Page 160: Chapter 25 Rip
This chapter shows you how to configure RIP (Routing Information Protocol). 25.1 Overview RIP (Routing Information Protocol allows a routing device to exchange routing information with other routers. The Direction field controls the sending and receiving of RIP packets. When set to: •...
Page 161 The following table describes the labels in this screen. Table 57 RIP LABEL DESCRIPTION Active Select this check box to enable RIP on the switch. Index This field displays the index number of the entry. Network This field displays the IP domain configured on the switch.
Page 162: Chapter 26 Igmp
Table 58 IGMP LABEL DESCRIPTION Active Select this check box to enable IGMP on the switch. Note: You can NOT enable both IGMP snooping and IGMP at the same time. Refer to the section on IGMP snooping. Index This field displays an index number of an entry.
Page 163: Table 58 Igmp
LABEL DESCRIPTION Network This field displays the IP domain configured on the switch. Refer to the IP Setup section for more information on configuring IP domains. Version Select an IGMP version from the drop-down list box. Choices are IGMP-v1, IGMP-v2 and None.
Page 164: Chapter 27 Dvmrp
(AS). This DVMRP implementation is based on draft-ietf- idmr-dvmrp-v3-10. DVMRP provides multicast forwarding capability to a layer 3 switch that runs both the IPv4 protocol (with IP Multicast support) and the IGMP protocol. The DVMRP metric is a hop count of 32.
Page 165: Dvmrp Terminology
27.3 Configuring DVMRP Configure DVMRP on the switch when you wish it to act as a multicast router (“mrouter”). Click Routing Protocol, DVMRP in the navigation panel to display the screen as shown. Figure 95 DVMRP The following table describes the labels in this screen.
Page 166: Dvmrp Configuration Error Messages
LABEL DESCRIPTION Active Select Active to enable DVMRP on the switch. You should do this if you want the switch to act as a multicast router. Index Index is the DVMRP configuration for the IP routing domain defined under Network. The maximum number of DVMRP configurations allowed is the maximum number of IP routing domains allowed on the switch.
Page 167: Default Dvmrp Timer Values
ES-4024A User’s Guide Figure 98 DVMRP: Duplicate VID Error Message 27.4 Default DVMRP Timer Values The following are some default DVMRP timer values. These may be changed using line commands. Please see the commands chapter later in this User's Guide. Table 60 DVMRP: Default Timer Values DVMRP FIELD Probe interval...
Page 168: Chapter 28 Ospf
This chapter describes the OSPF (Open Shortest Path First) routing protocol and shows you how to configure OSPF on the ES-4024A. 28.1 Overview OSPF (Open Shortest Path First) is a link-state protocol designed to distribute routing information within an autonomous system (AS). An autonomous system is a collection of networks using a common routing protocol to exchange routing information.
Page 169: How Ospf Works
ES-4024A User’s Guide The following figure depicts an OSPF network example. The backbone is area 0 with a backbone router. The internal routers are in area 1 and 2. The area border routers connect area 1 and 2 to the backbone. Figure 99 OSPF Network Example 28.1.2 How OSPF Works Layer 3 devices exchange routing information to build synchronized link state database within...
Page 170: Ospf Status
28.2 OSPF Status To view current OSPF status, click Routing Protocol, OSPF in the navigation panel to display the screen as shown next. Figure 100 OSPF Status The following table describes the labels in this screen. Table 63 OSPF Status LABEL DESCRIPTION OSPF...
Page 171: Enabling Ospf And General Settings
ES-4024A User’s Guide The following table describes some common output fields. Table 64 OSPF Status: Common Output Fields FIELD DESCRIPTION Interface Internet Address This field displays the IP address and subnet bits of an IP routing domain. Area This field displays the area ID. Router ID This field displays the unique ID of the ES-4024A.
Page 172: Figure 101 Ospf Configuration: Activating And General Settings
Figure 101 OSPF Configuration: Activating and General Settings The follow table describes the related labels in this screen. Table 65 OSPF Configuration: Activating and General Settings LABEL DESCRIPTION Active OSPF is disabled by default. Select this option to enable it. Router ID Router ID uniquely identifies the ES-4024A in an OSPF.
Page 173: Configuring Ospf Areas
ES-4024A User’s Guide 28.4 Configuring OSPF Areas To ensure that the ES-4024A receives only routing information from a trusted layer 3 devices, activate authentication. The OSPF supports three authentication methods: • None – no authentication is used. • Simple – authenticate link state updates using an 8 printable ASCII character password. •...
Page 174: Viewing Ospf Area Information Table
Table 66 OSPF Configuration: Area Setup (continued) LABEL DESCRIPTION Area ID Enter a 32-bit ID (that uses the format of an IP address in dotted decimal notation) that uniquely identifies an area. A value of 0.0.0.0 indicates that this is a backbone (also known as Area 0). You can create only one backbone area on the ES-4024A.
Page 175: Configuring Ospf Interfaces
ES-4024A User’s Guide Table 67 OSPF Configuration: Summary Table (continued) LABEL DESCRIPTION Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. 28.5 Configuring OSPF Interfaces To configure an OSPF interface, first create an IP routing domain in the IP Setup screen (see Section 7.7 on page 75 interface entry is automatically created.
Page 176: Configuring Ospf Virtual Links
Table 68 OSPF Interface (continued) LABEL DESCRIPTION Key ID When you select MD5 in the Authentication field, specify the identification number of the authentication you want to use. When you select Simple in the Authentication field, enter a password eight-character long.
Page 177 ES-4024A User’s Guide Table 69 OSPF Virtual Link (continued) LABEL DESCRIPTION Note: Virtual interface(s) must use the same authentication method Authentication Select an authentication method. Choices are Same-as-Area, None (default), Simple and MD5. To exchange OSPF packets with peer border router, you must set the authentication method and/or password the same as the peer border router.
Page 178: Chapter 29 Maintenance
Figure 107 Firmware Upgrade Type the path and file name of the firmware file you wish to upload to the switch in the File Path text box or click Browse to locate it. After you have specified the file, click Upgrade.
Page 179: Restore A Configuration File
Back up your current switch configuration to a computer using the Backup Configuration screen. Figure 109 Backup Configuration Follow the steps below to back up the current switch configuration to your computer in this screen. 1 Click Backup. 2 Click Save to display the Save As screen.
Page 180: Load Factory Defaults
3 Click OK to begin resetting all switch configurations to the factory defaults and then wait for the switch to restart. This takes up to two minutes. If you want to access the switch web configurator again, you may need to change the IP address of your computer to be in the same subnet as that of the default switch IP address (192.168.1.1).
Page 181: Ftp Command Line
ES-4024A User’s Guide Figure 113 Reboot System: Start 3 Click OK again and then wait for the switch to restart. This takes up to two minutes. This does not affect the switch’s configuration. 29.7 FTP Command Line This section shows some examples of uploading to or downloading files from the switch using FTP commands.
Page 182: Ftp Command Line Procedure
If your (T)FTP client does not allow you to have a destination filename different than the source, you will need to rename them as the switch only recognizes “config” and “ras”. Be sure you keep unaltered copies of both files for later use.
Page 183: Ftp Over Wan Restrictions
• Telnet service is disabled in Secured Client Sets. • The IP address(es) in the Secured Client Sets menu does not match the client IP address. If it does not match, the switch will disconnect the Telnet session immediately. Chapter 29 Maintenance...
Page 184: Chapter 30 Diagnostic
IP Ping Type the IP address of a device that you want to ping in order to test a connection. Click Ping to have the switch ping the IP address (in the field to the left). Ethernet Port Test From the Port drop-down list box, select a port number and click Port Test to perform internal loopback test.
Page 185 ES-4024A User’s Guide Chapter 30 Diagnostic...
Page 186: Chapter 31 Cluster Management
Cluster Member Models Cluster Manager Cluster Members In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. Figure 115 Clustering Application Example Chapter 31 Cluster Management...
Page 187: Cluster Management Status
This field displays the role of this switch within the cluster. Manager Member (you see this if you access this screen in the cluster member switch directly and not via the cluster manager) None (neither a manager nor a member of a cluster) Manager This field displays the cluster manager switch’s hardware MAC address.
Page 188: Cluster Member Switch Management
Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web configurator home page. This cluster member web configurator home page and the home page that you'd see if you accessed it directly are different.
Page 189: Configuring Cluster Management
User Password 350du1b2.bin fw-00-a0-c5-5e-df-f9 config-00-a0-c5-5e-df-f9 The cluster member switch’s configuration file name as seen in the 31.3 Configuring Cluster Management Click Configuration from the Cluster Management screen to display the next screen. 1810050 Jul 01 12:00 ras 262144 Jul 01 12:00 rom-0...
Page 190: Figure 119 Clustering Management Configuration
Type a name to identify the Clustering Manager. You may use up to 20 printable characters (no spaces are allowed). This is the Management VLAN ID and is only applicable if the switch is set to 802.1Q VLAN. All switches must be in the same management VLAN group to belong to the same cluster.
Page 191 If multiple devices have the same password then hold [SHIFT] and click those switches to select them. Then enter their common web configurator password. Click Add to save this part of the screen to the switch. Click Cancel to begin configuring this part of the screen afresh.
Page 192: Chapter 32 Mac Table
(learned by the switch) or static (manually entered in the Static MAC Forwarding screen). The switch uses the MAC table to determine how to forward frames. See the following figure. 1 The switch examines a received frame and learns the port on which this source MAC address came.
Page 193: Viewing The Mac Table
Port This is the port from which the above MAC address was learned. Type This shows whether the MAC address is dynamic (learned by the switch) or static (manually entered in the Static MAC Forwarding screen). Chapter 32 MAC Table...
Page 194: Chapter 33 Ip Table
This chapter introduces the IP table. 33.1 Overview The IP Table screen shows how packets are forwarded or filtered across the switch’s ports. It shows what device IP address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the IP address is dynamic (learned by the switch) or static (belonging to the switch).
Page 195: Viewing The Ip Table
This is the port from which the above IP address was learned. This field displays CPU to indicate the IP address belongs to the switch. Type This shows whether the IP address is dynamic (learned by the switch) or static (belonging to the switch). Chapter 33 IP Table...
Page 196: Chapter 34 Arp Table
If no entry is found for the IP address, ARP broadcasts the request to all the devices on the LAN. The switch fills in its own MAC and IP address in the sender address fields, and puts the known IP address of the target in the target IP address field. In addition, the switch puts all ones in the target MAC field (FF.FF.FF.FF.FF.FF is the Ethernet broadcast address).
Page 197: Figure 124 Arp Table
Index This is the ARP Table entry number. IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below. MAC Address This is the MAC address of the device with corresponding IP address above.
Page 198: Chapter 35 Routing Table
This chapter introduces the routing table. 35.1 Overview The routing table contains the route information to the network(s) that the ES-4024A can reach. The ES-4024A automatically updates the routing table with the RIP information received from other Ethernet devices. 35.2 Viewing the Routing Table Click Management, Routing Table in the navigation panel to display the screen as shown.
Page 199 ES-4024A User’s Guide Chapter 35 Routing Table...
Page 200: Chapter 36 Dhcp Server Status
This chapter shows you how to view the DHCP server status. 36.1 Overview The DHCP Server Status screen displays the summary table about the DHCP server(s) you configured in the DHCP screen. You can also view detail DHCP server information in the Server Status Detail screen.
Page 201: Displaying Detail Dhcp Server Information
ES-4024A User’s Guide Table 80 DHCP Server Status (continued) LABEL DESCRIPTION Server Status This field displays the starting IP address of the client address pool. IP Pool Size This field displays the count of the DHCP client IP address pool. Poll Interval(s) The text box displays how often (in seconds) this screen refreshes.
Page 202 Table 81 DHCP Server Status Detail (continued) LABEL Address Leases Index IP Address Timer Hardware Address Hostname Poll Interval(s) Stop Chapter 36 DHCP Server Status DESCRIPTION This field displays the index number. This field displays the IP address assigned to a DHCP client device. This field displays the time (in seconds) the DHCP client is allowed to use the assigned IP address.
Page 203 ES-4024A User’s Guide Chapter 36 DHCP Server Status...
Page 204: Introducing The Commands
37.1.1 Switch Configuration File When you configure the switch using either the CLI or web configurator, the settings are saved as a series of commands in a configuration file on the switch. You can perform the following with a configuration file: •...
Page 205: Access Priority
Use the following steps to telnet into your switch. 1 Make sure your computer IP address and the switch IP address are on the same subnet. In Windows, click Start (usually in the bottom left corner), Run and then type (the default IP address) and click OK.
Page 206: The Login Screen
For example, if you enter automatically displays. • Each interface refers to an Ethernet port on the switch. Commands configured after the interface command correspond to those ports. • Type multiple ports or port ranges separated by a comma. Ranges of port numbers are typed separated by a dash.
Page 207: List Of Available Commands
ES-4024A User’s Guide • Detailed descriptions of the commands. 37.5.1 List of Available Commands Enter to display a list of available commands and the corresponding sub commands. help Enter to display a list of commands you can use. Figure 130 CLI Help: List of Commands: Example 1 ras>...
Page 208: Command Modes
37.7 Using Command History The switch keeps a list of up to 256 commands you have entered for the current CLI session. You can use any commands in the history again by pressing the up ( ) or down ( ) arrow key to scroll through the previously used commands and press to display the list of commands.
Page 209: Saving Your Configuration
In User mode, enter the 37.9 Command Summary The following sections summarize the commands available in the switch together with a brief description of each command. Commands listed in the tables are in the same order as they are displayed in the CLI. See the related section in the User’s Guide for more background information.
Page 210: User Mode
209. Logs out from the CLI. Displays help information. Displays a list of previously command(s) that you have executed. The switch stores up to 256 commands in history. Exits from the CLI. Sends a Ping request to an Ethernet device.
Page 211 ES-4024A User’s Guide Table 83 Command Summary: Enable Mode (continued) COMMAND logging ping <IP|host-name> reload show bandwidth-control broadcast-storm- control classifier cluster dhcp diffserv filter garp hardware-monitor interface <port- number> interfaces config <port-list> DESCRIPTION Disables syslog logging. Sends Ping request to an Ethernet device.
Page 212: Ospf Area
Table 83 Command Summary: Enable Mode (continued) COMMAND ip arp ip dvmrp ip igmp ip iptable ip route ip ospf lacp logging mac-aging-time marking-rule mirror port-access- authenticator radius-server remote-management router Chapter 37 Introducing the Commands DESCRIPTION Displays the ARP table. Displays DVMRP settings.
Page 213: General Configuration Mode
Displays port isolation settings. port-isolation Determines the path a packet takes to a device. Displays command information. Saves current configuration to the configuration file the switch is currently using. DESCRIPTION Changes the administrator password. Enables bandwidth control for a traffic flow.
Page 214 Table 84 Command Summary: Configuration Mode (continued) COMMAND direction <incoming|outgoing> monitor-interval <64|1024|8000|256000 > classifier <name> < [ethernet-type <ether- num|ip|ipx|arp|rarp| appletalk|decnet|sna |netbios|dlc> ] [vlan<vlan-id> ] [source-mac <src- mac-addr>] [source- port <port-num>] [destination-mac <dest-mac-addr>] [destination-port <port-num>] [ip-protocol <protocol- num|tcp|udp|icmp|egp |ospf|rsvp|igmp|igp| pim|dvmrp|ipsec>] [source-ip <src-ip- addr>...
Page 215 Disables filtering for the classified traffic flow. Configures GARP time settings. Displays help information. Displays a list of previous command(s) that you have executed. Sets the switch’s name for identification purposes. Enables IGMP snooping. Chapter 37 Introducing the Commands...
Page 216 Table 84 Command Summary: Configuration Mode (continued) COMMAND interface port-channel <port- list> route-domain <ip- address>/<mask-bits> default-gateway <ip> name-server route lacp system-priority logins username <name> password <pwd> logout mac-aging-time <10-3000> mac-forward name <name> mac <mac-addr> vlan <vlan-id> interface <interface-id> marking-rule classifier <classifier-name>...
Page 217 Changes the CLI mode to the ZyNOS format. Disable bandwidth control on the switch. Disables broadcast storm control on the switch. Disables the classifier. Each classifier has one rule. If you disable a classifier you cannot use rule related information.
Page 218 Disables a secure client set service entry number from using the <telnet|ftp|http| selected remote management icmp|snmp> service(s). Disables DVMRP on the switch. dvmrp Disables IGMP on the switch. igmp Disables OSPF on the switch. ospf Disable RIP on the switch.
Page 219 Disables the specified trunk <T1|T2|T3|T4|T5> group. Disables LACP in the trunk lacp groups. Deletes the static VLAN entry. <vlan-id> Disables GVRP on the switch. gvrp Disables port isolation. port-isolation Change the password for Enable mode. Enables 802.1x authentication on the switch.
Page 220 Table 84 Command Summary: Configuration Mode (continued) COMMAND Chapter 37 Introducing the Commands ES-4024A User’s Guide DESCRIPTION Enables MD5 authentication for area <area-id> the area. authentication message-digest Sets the cost to the area. area <area-id> default-cost <0- 65535> Sets a descriptive name for the area <area-id>...
Page 221 <area-id> area. virtual-link <router-id> Deletes the OSPF network. no network <ip- addr/bits> Sets the switch not to learn RIP no redistribute routing information. Sets the switch not to learn no redistribute static routing information. static Sets the switch to learn RIP redistribute rip routing information.
Page 222 (0.0.0.0). Enables preemption mode. preempt Sets the primary VRRP virtual primary-virtual- gateway IP address. ip <ip> Sets the priority of the switch in priority <1 .. the VRRP network. 254> Sets the secondary VRRP secondary- virtual gateway IP address.
Page 223 <802.1q|port-based> DESCRIPTION Sets the IP addresses of up to four stations to send your SNMP traps to. Enables STP on the switch. Sets Hello Time. maximum-age <6 .. 40> forward-delay <4 .. 30> Displays help information. Sets the bridge priority of the switch.
Page 224: Interface Port-Channel Commands
Enables a port or a list of ports for configuration. Limits the number of incoming bradcast frame the switch store. frames = 1, 2, 3 4, 6, 8, 12, 16, 24, 32, 48, 64, 96, 128, 192, 256, 384, 512, 768, 1024, 1536, 2048, 3072, 4096, 6144, 8192, 12288, 16384, 24576 or 32767.
Page 225 Exit from the exit Disables flow control on the flow-control port(s). Disable GVRP on the port(s). gvrp Enables the port(s) on the inactive switch. Disables ingress checking on ingress-check the port(s). Disables port authentication on port-access- the port. authenticator Disables port reauthenticateion.
Page 226: Interface Route-Domain Commands
VLAN groups to pass through the switch. Sets the port(s) to use Weighted Fair Queuing (WFQ). Sets the interface to use WFQ. A weight value of one to eight is...
Page 227: Config-Vlan Commands
Enables a routing domain for configuration. Exits from the interface routing-domain command mode. dvmrp Enables this function to permit VLAN groups beyond the local switch. igmp <v1|v2> Enables IGMP in this routing domain. Enables OSPF authentication in this routing ospf authentication- domain and sets the security key.
Page 228: Table 87 Command Summary: Config-Vlan Commands
VLAN group. Displays a list of available VLAN commands. Disables the specified VLAN. Sets the management IP address and <ip-address> subnet mask of the switch in the <mask> specified VLAN. Specifies a name for identification purposes. fixed <port-list>...
Page 229 ES-4024A User’s Guide Chapter 37 Introducing the Commands...
Page 230: Chapter 38 Command Examples
This chapter describes some commands in more detail. 38.1 Overview These are commands that you may use frequently in maintaining your switch. 38.2 show Commands These are the commonly used 38.2.1 show system-information Syntax: show system-information This command shows the general system information (such as the firmware version and system up time).
Page 231: Show Hardware-Monitor
ES-4024A User’s Guide 38.2.2 show hardware-monitor Syntax: show hardware-monitor [c|f] This command displays the current hardware status (such as temperature and voltage levels). The following figure shows an example using degree Celsius as the temperature unit. Figure 137 show hardware-monitor Command Example ras>...
Page 232: Show Interface
Figure 138 show logging Command Example ras# show logging 0 Thu Jan 1 00:00:11 1970 PP2b 7 Thu Jan 1 01:06:26 1970 PP23 10 Thu Jan 1 01:06:38 1970 PP23 13 Thu Jan 1 01:06:50 1970 PP23 16 Thu Jan 1 01:07:05 1970 PP23 20 Thu Jan 1 00:00:04 1970 PP0c -WARN...
Page 233: Ping
Where = Specifies the sorting criteria (MAC, VID or port). <sort> This command displays the MAC address(es) stored in the switch. The following example shows the static MAC address table. Figure 140 show mac address-table Command Example ras# show mac address-table static...
Page 234: Traceroute
1:192.168.1.100 (10 ms) (10 ms) (0 ms) traceroute done: 38.5 Restarting the Switch There are two ways in which you can set the switch to use a different configuration file: restart the switch (cold reboot) and restart the system (warm reboot). Use the command to restart the switch.
Page 235: Resetting To The Factory Default
Figure 144 CLI: reload config Command Example ras# reload config 2 Note: When you use the file index number, the switch saves the changes to the configuration file the switch is currently using. 38.5.1 Resetting to the Factory Default Follow the steps below to reset the switch back to the factory defaults.
Page 236: No Trunk
<port-list> An example is shown next. • Disable port access authentication on the switch. • Disable port access authentication on ports 10 to 15. • Disable reauthentication on the ports. Chapter 38 Command Examples Disables the trunk group.
Page 237: Interface Commands
ES-4024A User’s Guide Figure 148 no port-access-authenticator Command Example ras(config)# no port-access-authenticator ras(config)# interface port-channel 10-15 ras(config-interface)# no port-access-authenticator ras(config-interface)# no port-access-authenticator reauthenticate 38.7 interface Commands These are some commonly used commands that belong to the commands. 38.7.1 interface port-channel Syntax: interface port-channel <port-list>...
Page 238: Filter
= This is the IP address of the switch in the routing domain. Specify the IP <ip-address> = The number of bits in the subnet mask. Enter the subnet mask number <mask-bits> Use this command to enable/create the specified routing domain for configuration.
Page 239: Mirror
<classifier-name> <port-num> This command sets the switch to copy the incoming/outgoing traffic flow defined by a classifier to the specified mirror port. An example is shown next. • Create a classifier to define all IP traffic in VLAN 1 from port 3 to the destination device with a MAC address of 00:a0:c5:00:00:01.
Page 240: Ingress-Check
• Enable ports one, three, four and five for configuration. • Enable GVRP on the interface. Figure 153 gvrp Command Example ras(config)# vlan1q gvrp ras(config)# interface port-channel 1,3-5 ras(config-interface)# gvrp 38.7.6 ingress-check Syntax: ingress-check Enables the device to discard incoming frames for VLANs that are not included in a port member set.
Page 241: Spq
• Set the queue weights from Q0 to Q3. Note: Make sure the WFQ queuing weights total to 100. Enables WFQ (Weighted Fair Queuing) queuing method on the switch. Sets the interface to use WFQ queuing. A weight value of one to eight is...
Page 242: Egress Set
<port-list> An example is shown next. • Enable port-based VLAN tagging on the switch. • Enable ports one, three, four and five for configuration. • Set the outgoing traffic ports as the CPU (0), seven (7), eight (8) and nine (9).
Page 243: Name
ES-4024A User’s Guide Figure 159 qos priority Command Example ras(config)# interface port-channel 1,3-5 ras(config-interface)# qos priority 4 38.7.12 name Syntax: name <port-name-string> where <port-name-string> An example is shown next. • Enable ports one, three, four and five for configuration. • Set a name for the ports. Figure 160 name Command Example ras(config)# interface port-channel 1,3-5 ras(config-interface)# name Test...
Page 244: Activating Rstp On The Stacking Module
Figure 161 speed-duplex Command Example ras(config)# interface port-channel 1,3-5 ras(config-interface)# speed-duplex 10-half 38.8 Activating RSTP on the Stacking Module The following procedure shows you how to activate RSTP on the stacking module (port 25 and 26). 1 Access the port interface commands for ports 25 and 26. interface port-channel 25,26 2 Enabling RSTP on the ports.
Page 245 ES-4024A User’s Guide Chapter 38 Command Examples...
Page 246: Ieee 802.1Q Tagged Vlan Commands
39.2 VLAN Databases A VLAN database stores and organizes VLAN registration information useful for switching frames to and from a switch. A VLAN database consists of a static entries (Static VLAN or SVLAN table) and dynamic entries (Dynamic VLAN or DVLAN table).
Page 247: Dynamic Entries (Dvlan Table)
ES-4024A User’s Guide 39.2.2 Dynamic Entries (DVLAN Table) Dynamic entries are learned by the switch and cannot be created or updated by administrators. The switch learns this information by observing what port, source address and VLAN ID (or VID) is associated with a frame. Entries are added and deleted using GARP VLAN Registration Protocol (GVRP), where GARP is the Generic Attribute Registration Protocol.
Page 248: Global Vlan1Q Tagged Vlan Configuration Commands
This section shows you how to configure and monitor the IEEE 802.1Q Tagged VLAN. 39.4.1 GARP Status Syntax: show garp This command shows the switch’s GARP timer settings, including the join, leave and leave all timers. An example is shown next. Figure 164 GARP STATUS Command Example...
Page 249: Gvrp Timer
<msec> leaveall <msec> This command sets the switch’s GARP timer settings, including the join, leave and leave all timers. Switches join VLANs by making a declaration. A declaration is made by issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave message. A Leave All message terminates all registrations.
Page 250: Disable Gvrp
This command turns on GVRP in order to propagate VLAN information beyond the switch. 39.4.5 Disable GVRP Syntax: no vlan1q gvrp This command turns off GVRP so that the switch does not propagate VLAN information to other switches. 39.5 Port VLAN Commands You must configure the switch port VLAN settings in config-interface mode.
Page 251: Enable Or Disable Port Gvrp
<port-list> where The VLAN ID [1 – 4094]. <vlan-id> A name to identify the SVLAN entry. <name-str> This is the switch port list. <port-list> = • Enter to register the fixed • Enter to confirm registration of the normal <vlan-id>...
Page 252: Modify A Static Vlan Table Example
The switch also does not forward frames to “forbidden” ports. 4 If after looking at the SVLAN, the switch does not have any ports to which it will send the frame, it won’t check the port filter.
Page 253: Enable Vlan
ES-4024A User’s Guide where The VLAN ID [1 – 4094]. <vlan-id> This command deletes the specified VLAN ID entry from the static VLAN table. The following example deletes entry 2 in the static VLAN table. Figure 171 no vlan Command Example ras (config)# no vlan 2 39.6 Enable VLAN Syntax:...
Page 254: Figure 172 Show Vlan Command Example
Figure 172 show vlan Command Example ras# show vlan 802.1Q VLAN Static Entry: idx. Name ---- ------------ ---- -------- ------------------------ Example ras# Chapter 39 IEEE 802.1Q Tagged VLAN Commands Active AdCtl / TagCtl active FFFFFFFFFFFFFFFFFFFFFFFFFFFF UUUUUUUUUUUUUUUUUUUUUUUUUUUU active ---------F------------------ TTTTTTTTTUTTTTTTTTTTTTTTTTTT ES-4024A User’s Guide...
Page 255 ES-4024A User’s Guide Chapter 39 IEEE 802.1Q Tagged VLAN Commands...
Page 256: Chapter 40 Troubleshooting
IP address, your computer’s IP address must match it. Refer to the chapter on access control for details. Your computer’s and the switch’s IP addresses must be on the same subnet. See the following section to check that pop-up windows, JavaScripts and Java permissions are allowed.
Page 257: Pop-Up Windows, Javascripts And Java Permissions
ES-4024A User’s Guide 40.2.1 Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
Page 258: Figure 174 Internet Options
Figure 174 Internet Options 3 Click Apply to save this setting. 40.2.1.1.2 Enable pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 2 Select Settings…to open the Pop-up Blocker Settings screen.
Page 259: Figure 175 Internet Options
ES-4024A User’s Guide Figure 175 Internet Options 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites. Chapter 40 Troubleshooting...
Page 260: Javascripts
Figure 176 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 40.2.1.2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer, click Tools, Internet Options and then the Security tab.
Page 261: Figure 177 Internet Options
ES-4024A User’s Guide Figure 177 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window.
Page 262: Java Permissions
Figure 178 Security Settings - Java Scripting 40.2.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window.
Page 263: Figure 179 Security Settings - Java
ES-4024A User’s Guide Figure 179 Security Settings - Java 40.2.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to close the window. Chapter 40 Troubleshooting...
Page 264: Problems With The Password
Figure 180 Java (Sun) 40.3 Problems with the Password Table 90 Troubleshooting the Password PROBLEM Cannot access the switch. Chapter 40 Troubleshooting CORRECTIVE ACTION The password field is case sensitive. Make sure that you enter the correct password using the proper casing.
Page 265 ES-4024A User’s Guide Chapter 40 Troubleshooting...
Page 266: Product Specifications
Product Specifications These are the ES-4024A product specifications. Table 91 General Product Specifications Ethernet Interface Uplink Interface Stacking Interface Layer 2 Bridging Features Switching Security VLAN Link aggregation Port mirroring Bandwidth control Product Specifications P P E N D I X 24 10/100 Base-TX interfaces Auto-negotiation Auto-MDI/MDIX...
Page 267: Table 92 Management Specifications
ES-4024A User’s Guide Table 91 General Product Specifications (continued) Layer 3 IP forwarding Features Routing protocols IP services Layer 4 TCP/UDP port-based filtering Features Bandwidth management Table 92 Management Specifications System Control Alarm/Status surveillance LED indication for alarm and system status Performance monitoring Line speed Four RMON groups (history, statistics, alarms, and events)
Page 268: Table 93 Physical And Environmental Specifications
Table 93 Physical and Environmental Specifications LEDs Per switch: S1, S2, PWR, SYS, ALARM Per Ethernet port: LNK/ACT, FDX/COL Dimension 438 mm (W) x 270 mm (D) x 44.45 mm (H) Standard 19” rack mountable Weight 3.6Kg Temperature Operating: 0º C ~ 45º C (32º F ~ 113º F) Storage: -25º...
Page 269 ES-4024A User’s Guide Product Specifications...
Page 270: Table 94 Classes Of Ip Addresses
IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.
Page 271: Appendix Bip Subnetting
ES-4024A User’s Guide Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B”...
Page 272: Table 97 Alternative Subnet Mask Notation
Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/”...
Page 273: Table 99 Subnet 1
ES-4024A User’s Guide Note: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after “borrowing”) determines the number of hosts you can have on each subnet.
Page 274: Table 101 Subnet 1
Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
Page 275: Table 104 Subnet 4
ES-4024A User’s Guide Table 104 Subnet 4 IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.192 Broadcast Address: 192.168.1.255 Example Eight Subnets Similarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110). The following table shows class C IP address last octet values for each subnet. Table 105 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS...
Page 276: Table 107 Class B Subnet Planning
Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A” address has three host ID octets (see The following table is a summary for class “B”...
Page 277 ES-4024A User’s Guide IP Subnetting...
Page 278: Index
Ethernet Type CLI Command Configure tagged VLAN example Static VLAN Table example Cluster management 32, 185 Cluster manager 185, 189 Cluster member 185, 189 Cluster member firmware upgrade Network example Setup Specification Status Switch models Web configurator Cluster manager Index...
Page 279 ES-4024A User’s Guide Cluster member Command Forwarding Process Example Summary Syntax conventions Command Line Interface Accessing Introduction Configuration file Backup Restore 55, 178 Configure QoS Connecting Cables Console port Settings Copyright Corrosive Liquids Covers CPU management port CRC (Cyclic Redundant Check) Current date Current time Customer Support...
Page 280 Compliance Feature Hardware File Transfer using FTP command example Filename convention Filtering Filtering database Finland, Contact Information Firmware Upgrade 177, 187 Flow control Back pressure IEEE802.3x France, Contact Information Front panel File transfer procedure Restrictions over WAN GARP 80, 246 GARP (Generic Attribute Registration Protocol) garp status GARP Status Command...
Page 281 ES-4024A User’s Guide Link aggregation 31, 107 Dynamic ID information Setup Status Link state database 168, 169 Liquids, Corrosive Lockout Login Password Login account Administrator Non-administrator Number of Login password LSA (Link State Advertisement) MAC (Media Access Control) MAC address 70, 195 Global MAC address table size Maximum number per port...
Page 282 Port mirroring 30, 105 Mirror port Port redundancy Port security 31, 115 Limit MAC address learning Port setup Port speed/duplex Port status Port VID Default for all ports Port VLAN trunking Port-based VLAN All connected Port isolation Setting Wizard Power Backup power supply connector Voltage Power Adaptor...
Page 283 Stub area 167, 173 Subnet Masks Subnetting Supply Voltage Support E-mail SVLAN Table Sweden, Contact Information Swimming Pool Switch lockout Switch reset Switch setup Syntax Conventions sys Commands examples 229, 234, 236 sys log disp 230, 234, 236 sys sw mac list...
Page 284 Virtual router Status Virtual router (VR) Virtual Routing Redundancy Protocol (VRRP) VLAN 73, 79 Acceptable frame type Automatic registration Explicit Tagging ID (VID) Implicit Tagging Ingress filtering Introduction Number of VLANs Port isolation Port number Port settings Port-based VLAN Registration Information Static VLAN Status 82, 83...

This manual is also suitable for:

Dimension es-4024a

ZyXEL Communications ZyXEL Dimension ES-4024 User Manual

Chapter 1 Getting to Know Your Switch

Chapter 2 Hardware Installation and Connection

Chapter 3 Hardware Overview

Chapter 4 The Web Configurator

Chapter 5 Initial Setup Example

Chapter 6 System Status and Port Statistics

Chapter 7 Basic Setting

Chapter 8 VLAN

Chapter 9 Static MAC Forwarding

Chapter 10 Filtering

Chapter 11 Spanning Tree Protocol

Chapter 12 Bandwidth Control

Chapter 13 Broadcast Storm Control

Chapter 14 Mirroring

Chapter 15 Link Aggregation

Chapter 16 Port Authentication

Chapter 17 Port Security

Chapter 18 DHCP

Chapter 19 Access Control

Chapter 20 Classifier

Chapter 21 Differentiated Services

Chapter 22 Queuing Method

Chapter 23 VRRP

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications ZyXEL Dimension ES-4024

Summary of Contents for ZyXEL Communications ZyXEL Dimension ES-4024