Page 1 ES-3124 Series Intelligent Layer 2+ Switch User’s Guide Version 3.80 8/2007 Edition 1 DEFAULT LOGIN In-band IP Address http://192.168.1.1 Out-of-band IP Address http://192.168.0.1 User Name admin Password 1234 www.zyxel.com...
Page 3: About This User's Guide
• Supporting Disk Refer to the included CD for support documents. • ZyXEL Web Site Please refer to www.zyxel.com for additional support documentation and product certifications. User Guide Feedback Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead.
Page 4: Document Conventions
Syntax Conventions • The ES-3124, ES-3124PWR, ES-3124-4F, and ES-3124F may be referred to as the “Switch”, the “device”, the “system” or the “product” in this User’s Guide. Distinction is made where necessary.
Page 5 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ES-3124 Series User’s Guide...
Page 6: Safety Warnings
Safety Warnings Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. •...
Page 7 Safety Warnings • The length of exposed (bare) power wire should not exceed 7 mm. This product is recyclable. Dispose of it properly. ES-3124 Series User’s Guide...
Page 8 Safety Warnings ES-3124 Series User’s Guide...
Page 9: Table Of Contents
Contents Overview Contents Overview Introduction ..........................31 Introducing the Switch ....................... 33 Hardware ..........................39 Hardware Installation and Connection ..................41 Hardware Overview ........................45 Web Configurator ........................53 The Web Configurator ....................... 55 Initial Setup Example ......................... 65 System Status and Port Statistics ....................69 Basic Setting ..........................
Page 10 Contents Overview Cluster Management ....................... 273 MAC Table ..........................279 ARP Table ..........................281 Configure Clone ........................283 Troubleshooting and Specifications .................. 285 Troubleshooting ........................287 Product Specifications ......................291 Appendices and Index ......................299 ES-3124 Series User’s Guide...
Page 11: Table Of Contents
Table of Contents Table of Contents About This User's Guide ......................3 Document Conventions......................4 Safety Warnings........................6 Contents Overview ........................9 Table of Contents........................11 List of Figures ......................... 21 List of Tables........................... 27 Part I: Introduction................. 31 Chapter 1 Introducing the Switch ......................
Page 12 Table of Contents 3.1 Panel Connections ......................45 3.1.1 Console Port ......................47 3.1.2 Ethernet Ports ......................47 3.1.3 Transceiver Slots ....................... 48 3.2 Rear Panel ........................... 49 3.2.1 Power Connector ....................... 50 3.2.2 External Backup Power Supply Connector ..............50 3.3 LEDs ..........................
Page 13 Table of Contents 7.3 General Setup ......................... 77 7.4 Introduction to VLANs ......................79 7.5 Switch Setup Screen ......................80 7.6 IP Setup ..........................82 7.6.1 IP Interfaces ....................... 82 7.7 Port Setup ........................... 84 Chapter 8 VLAN ............................87 8.1 Introduction to IEEE 802.1Q Tagged VLANs ..............
Page 14 Table of Contents 11.1.3 STP Port States ......................111 11.1.4 Multiple RSTP .......................111 11.1.5 Multiple STP ......................112 11.2 Spanning Tree Protocol Status Screen ................114 11.3 Spanning Tree Configuration ...................115 11.4 Configure Rapid Spanning Tree Protocol ..............116 11.5 Rapid Spanning Tree Protocol Status .................117 11.6 Configure Multiple Rapid Spanning Tree Protocol ............119...
Page 15 Table of Contents 16.2.2 Activate MAC Authentication ................. 144 Chapter 17 Port Security.......................... 147 17.1 About Port Security ......................147 17.2 Port Security Setup ......................147 Chapter 18 Classifier..........................151 18.1 About the Classifier and QoS ..................151 18.2 Configuring the Classifier ....................151 18.3 Viewing and Editing Classifier Configuration ..............
Page 16 Table of Contents 22.1.1 IP Multicast Addresses ................... 173 22.1.2 IGMP Filtering ......................173 22.1.3 IGMP Snooping ..................... 173 22.1.4 IGMP Snooping and VLANs ................... 174 22.2 Multicast Status ......................174 22.3 Multicast Setting ......................174 22.4 IGMP Snooping VLAN ....................176 22.5 IGMP Filtering Profile .....................
Page 17 Table of Contents 24.6.2 ARP Inspection Log Status ..................215 24.7 ARP Inspection Configure ....................217 24.7.1 ARP Inspection Port Configure ................218 24.7.2 ARP Inspection VLAN Configure ................219 Chapter 25 Loop Guard..........................221 25.1 Loop Guard Overview ..................... 221 25.2 Loop Guard Setup ......................
Page 18 Table of Contents 29.2 Load Factory Default ...................... 242 29.3 Save Configuration ......................242 29.4 Reboot System ........................ 243 29.5 Firmware Upgrade ......................243 29.6 Restore a Configuration File ..................244 29.7 Backup a Configuration File ..................244 29.8 FTP Command Line ......................245 29.8.1 Filename Conventions ..................
Page 19 Table of Contents 32.3 Syslog Server Setup ....................... 270 Chapter 33 Cluster Management......................273 33.1 Clustering Management Status Overview ..............273 33.2 Cluster Management Status ................... 274 33.2.1 Cluster Member Switch Management ..............275 33.3 Clustering Management Configuration ................276 Chapter 34 MAC Table..........................
Page 20 Table of Contents Appendix C IP Addresses and Subnetting ................331 Appendix D Common Services .................... 341 Appendix E Importing Certificates ..................345 Appendix F Legal Information ....................351 Appendix G Customer Support .................... 355 Index............................361 ES-3124 Series User’s Guide...
Page 21: List Of Figures
Figure 8 Mounting the Switch on a Rack ....................43 Figure 9 Front Panel: ES-3124 ....................... 45 Figure 10 Front Panel: ES-3124-4F ....................... 45 Figure 11 Front Panel: ES-3124PWR ..................... 46 Figure 12 Front Panel: ES-3124F ......................46 Figure 13 Transceiver Installation Example ................... 48 Figure 14 Installed Transceiver ......................
Page 22 List of Figures Figure 39 Advanced Application > VLAN > VLAN Port Setting ............. 93 Figure 40 Subnet Based VLAN Application Example ................94 Figure 41 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN ......95 Figure 42 Protocol Based VLAN Application Example ................
Page 23 List of Figures Figure 82 Advanced Application > Queuing Method ................164 Figure 83 VLAN Stacking Example ..................... 168 Figure 84 Advanced Application > VLAN Stacking ................170 Figure 85 Advanced Application > Multicast ..................174 Figure 86 Advanced Application > Multicast > Multicast Setting ............175 Figure 87 Advanced Application >...
Page 24 List of Figures Figure 125 TRTCM - Color-aware Mode ..................... 229 Figure 126 IP Application > DiffServ ....................230 Figure 127 IP Application > DiffServ > 2-rate 3 Color Marker ............. 231 Figure 128 IP Application > DiffServ > DSCP Setting ................. 232 Figure 129 IP Application >...
Page 25 List of Figures Figure 168 Console/Dial Backup Port Pin Layout ................296 Figure 169 WIndows 95/98/Me: Network: Configuration ..............302 Figure 170 Windows 95/98/Me: TCP/IP Properties: IP Address ............303 Figure 171 Windows 95/98/Me: TCP/IP Properties: DNS Configuration ..........304 Figure 172 Windows XP: Start Menu ....................
Page 26 List of Figures Figure 211 Network Number and Host ID ..................... 332 Figure 212 Subnetting Example: Before Subnetting ................334 Figure 213 Subnetting Example: After Subnetting ................335 Figure 214 Conflicting Computer IP Addresses Example ..............339 Figure 215 Conflicting Computer IP Addresses Example ..............339 Figure 216 Conflicting Computer and Router IP Addresses Example ..........
Page 27: List Of Tables
List of Tables List of Tables Table 1 Model-specific Features ......................33 Table 2 Panel Connections ........................46 Table 3 LEDs ............................50 Table 4 Navigation Panel Sub-links Overview ..................57 Table 5 Web Configurator Screen Sub-links Details ................58 Table 6 Navigation Panel Links ......................
Page 28 List of Tables Table 39 Advanced Application > Link Aggregation > Link Aggregation Setting ......... 136 Table 40 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP ....137 Table 41 Advanced Application > Port Authentication > 802.1x ............144 Table 42 Advanced Application >...
Page 29 Table 111 Management > Syslog ......................270 Table 112 Management > Syslog > Server Setup ................271 Table 113 ZyXEL Clustering Management Specifications ..............273 Table 114 Management > Cluster Management .................. 275 Table 115 FTP Upload to Cluster Member Example ................276 Table 116 Management >...
Page 30 List of Tables Table 125 IP Address Network Number and Host ID Example ............332 Table 126 Subnet Masks ........................333 Table 127 Maximum Host Numbers ....................333 Table 128 Alternative Subnet Mask Notation ..................333 Table 129 Subnet 1 ..........................335 Table 130 Subnet 2 ..........................
Page 31: Introduction
Introduction Introducing the Switch (33)
Page 33: Introducing The Switch
This User’s Guide covers the following models: ES-3124, ES-3124-4F, ES-3124-PWR and ES-3124F. The following table lists features that are specific to individual models. Table 1 Model-specific Features MODEL ES-3124 ES-3124-4F ES-3124PWR ES-3124F FEATURE Dual Personality Port 2 RJ-45 Gigabit ports for stacking 2 Mini-GBIC ports for stacking 24 Fast Ethernet SFP Slots IEEE 802.3af Power over Ethernet...
Page 34: Bridging Example
Chapter 1 Introducing the Switch Figure 1 Backbone Application 1.1.2 Bridging Example The Switch can connect different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the Switch.
Page 35: High-Performance Switched Example
Chapter 1 Introducing the Switch 1.1.3 High-performance Switched Example The Switch is ideal for connecting two networks that need high bandwidth. Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring your network, and complex maintenance.
Page 36: Ways To Manage The Switch
Chapter 1 Introducing the Switch Figure 4 Tag-based VLAN Application 1.1.4.2 VLAN Shared Server Example Shared resources such as a server can be used by all ports in the same VLAN as the server, as shown in the following example. In this example, only ports that need access to the server need belong to VLAN 1.
Page 37: Good Habits For Managing The Switch
Chapter 1 Introducing the Switch • SNMP. The device can be monitored and/or managed by an SNMP manager. See Section 30.3 on page 248. 1.3 Good Habits for Managing the Switch Do the following things regularly to make the Switch more secure and to manage the Switch more effectively.
Page 38 Chapter 1 Introducing the Switch ES-3124 Series User’s Guide...
Page 39: Hardware
Hardware Hardware Installation and Connection (41) Hardware Overview (45)
Page 41: Hardware Installation And Connection
H A P T E R Hardware Installation and Connection This chapter shows you how to install and connect the Switch. 2.1 Freestanding Installation 1 Make sure the Switch is clean and dry. 2 Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and the connected cables.
Page 42: Mounting The Switch On A Rack
Chapter 2 Hardware Installation and Connection Do NOT block the ventilation holes. Leave space between devices when stacking. For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and 3.4 inches (8 cm) at the back of the Switch. This is especially important for enclosed rack installations.
Page 43: Mounting The Switch On A Rack
Chapter 2 Hardware Installation and Connection 2 Using a #2 Phillips screwdriver, install the M3 flat head screws through the mounting bracket holes into the Switch. 3 Repeat steps to install the second mounting bracket on the other side of the Switch.
Page 44 Chapter 2 Hardware Installation and Connection ES-3124 Series User’s Guide...
Page 45: Hardware Overview
H A P T E R Hardware Overview This chapter describes the front panel and rear panel of the Switch and shows you how to make the hardware connections. 3.1 Panel Connections The figure below shows the front panel of the Switch. Figure 9 Front Panel: ES-3124 RJ-45 Gigabit Ports for Stacking Console Port...
Page 46: Figure 11 Front Panel: Es-3124Pwr
Chapter 3 Hardware Overview Figure 11 Front Panel: ES-3124PWR RJ-45 Gigabit Ports for Stacking Console Port Management Port 10/100 Mbps PoE Ethernet Ports LEDs RJ-45 Gigabit / Mini-GBIC Dual Personality Interfaces Figure 12 Front Panel: ES-3124F Mini-GBIC Ports for Stacking...
Page 47: Console Port
24 100 Mbps Connect these ports to a computer or switch. Fast Ethernet SFP Slots ES-3124 and ES-3124PWR 2 100/1000 Connect these ports to high-bandwidth backbone network Ethernet switches or use Mbps RJ-45 them to daisy-chain other switches. Use 1000Base-T compatible Category 5/5e/6 Ports copper cables.
Page 48: Transceiver Slots
Chapter 3 Hardware Overview • Flow control: Off 3.1.3 Transceiver Slots These are slots for mini-GBIC (Gigabit Interface Converter) transceivers or 100Mbps SFP (Small Form-Factor Pluggable) transceivers. A transceiver is a single unit that houses a transmitter and a receiver. The Switch does not come with transceivers. You must use transceivers that comply with the SFP Transceiver MultiSource Agreement (MSA).
Page 49: Rear Panel
Chapter 3 Hardware Overview Figure 14 Installed Transceiver 3.1.3.2 Transceiver Removal Use the following steps to remove a mini GBIC transceiver (SFP module). 1 Open the transceiver’s latch (latch styles vary). Figure 15 Opening the Transceiver’s Latch Example 2 Pull the transceiver out of the slot. Figure 16 Transceiver Removal Example 3.2 Rear Panel The following figure shows the rear panel of the Switch.
Page 50: Power Connector
Chapter 3 Hardware Overview Figure 18 Rear Panel (DC models) 3.2.1 Power Connector Make sure you are using the correct power source as shown on the panel. To connect the power to the Switch, insert the female end of power cord to the power receptacle on the rear panel.
Page 51 The link to an Ethernet network is down. Amber The port is negotiating in full-duplex mode. The port is negotiating in half-duplex mode and no collisions are occurring. Ethernet ports (ES-3124PWR only) LNK/ACT Green Blinking The Switch is transmitting/receiving to/from a 10 Mbps Ethernet network.
Page 52 Chapter 3 Hardware Overview Table 3 LEDs (continued) COLOR STATUS DESCRIPTION Green Blinking The Switch is transmitting/receiving to/from an Ethernet device. The port is connected at 10 Mbps. The port is not connected at 10 Mbps or to an Ethernet device. Amber Blinking The Switch is transmitting/receiving to/from an Ethernet device.
Page 53: Web Configurator
Web Configurator The Web Configurator (55) Initial Setup Example (65) System Status and Port Statistics (69) Basic Setting (75) VLAN (87) Static MAC Forward Setup (105) Filtering (107) Spanning Tree Protocol (109) Bandwidth Control (127) Broadcast Storm Control (129) Mirroring (131) Link Aggregation (133) Port Authentication (141) Port Security (147)
Page 54 Differentiated Services (227) DHCP (235) Maintenance (241) Access Control (247) Diagnostic (267) Syslog (269) Cluster Management (273) MAC Table (279) ARP Table (281) Configure Clone (283)
Page 55: The Web Configurator
H A P T E R The Web Configurator This section introduces the configuration and functions of the web configurator. 4.1 Introduction The web configurator is an HTML-based management interface that allows easy Switch setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions.
Page 56: The Status Screen
Chapter 4 The Web Configurator Figure 19 Web Configurator: Login 4 Click OK to view the first web configurator screen. 4.3 The Status Screen The Status screen is the first screen that displays when you access the web configurator. The following figure shows the navigating components of a web configurator screen. Figure 20 Web Configurator Home Screen (Status) B C D E A - Click the menu items to open submenu links, and then click on a submenu link to open the...
Page 57: Table 4 Navigation Panel Sub-Links Overview
Chapter 4 The Web Configurator B - Click this link to save your configuration into the Switch’s nonvolatile memory. Nonvolatile memory is saved in the configuration file from which the Switch booted from and it stays the same even if the Switch’s power is turned off. See Section 29.3 on page 242 information on saving your settings to a specific configuration file.
Page 58: Table 5 Web Configurator Screen Sub-Links Details
Chapter 4 The Web Configurator The following table lists the various web configurator screens within the sub-links. Table 5 Web Configurator Screen Sub-links Details ADVANCED BASIC SETTING IP APPLICATION MANAGEMENT APPLICATION System Info VLAN Status Static Routing Maintenance General Setup VLAN Detail DiffServ Firmware Upgrade...
Page 59: Table 6 Navigation Panel Links
Chapter 4 The Web Configurator Table 5 Web Configurator Screen Sub-links Details (continued) ADVANCED BASIC SETTING IP APPLICATION MANAGEMENT APPLICATION Authentication and Accounting RADIUS Server Setup TACACS+ Server Setup Auth and Acct Setup IP Source Guard IP Source Guard Static Binding DHCP Snooping DHCP Snooping Configure...
Page 60 Chapter 4 The Web Configurator Table 6 Navigation Panel Links (continued) LINK DESCRIPTION Spanning Tree This link takes you to screens where you can configure the RSTP/MRSTP/MSTP to Protocol prevent network loops. Bandwidth This link takes you to screens where you can cap the maximum bandwidth allowed Control from specified source(s) to specified destination(s).
Page 61: Change Your Password
Chapter 4 The Web Configurator Table 6 Navigation Panel Links (continued) LINK DESCRIPTION Syslog This link takes you to screens where you can setup system logs and a system log server. Cluster This link takes you to a screen where you can configure clustering management Management and view its status.
Page 62: Switch Lockout
Chapter 4 The Web Configurator Use the Save link when you are done with a configuration session. 4.5 Switch Lockout You could block yourself (and all others) from using in-band-management (managing through the data ports) if you do one of the following: 1 Delete the management VLAN (default is VLAN 1).
Page 63: Logging Out Of The Web Configurator
Chapter 4 The Web Configurator 3 When you see the message “ Press any key to enter Debug Mode within 3 ” press any key to enter debug mode. seconds ... 4 Type after the “ ” message. atlc Enter Debug Mode 5 Wait for the “...
Page 64: Help
Chapter 4 The Web Configurator 4.8 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. ES-3124 Series User’s Guide...
Page 65: Initial Setup Example
H A P T E R Initial Setup Example This chapter shows how to set up the Switch for an example network. 5.1 Overview The following lists the configuration steps for the initial setup: • Create a VLAN • Set port VLAN ID •...
Page 66: Setting Port Vid
Chapter 5 Initial Setup Example 2 In the Static VLAN screen, select ACTIVE, enter a descriptive name in the Name field, and enter 2 in the VLAN Group ID field for the VLAN2 network. The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID.
Page 67: Configuring Switch Management Ip Address
Chapter 5 Initial Setup Example 1 Click Advanced Application > VLAN > VLAN Port Setting. 2 Enter 2 in the PVID field for port 1, and click Apply to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch’s power is turned off.
Page 68 Chapter 5 Initial Setup Example 3 Click Basic Setting > IP Setup. 4 Configure the related fields in the IP Setup screen. For the VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask. 5 In the VID field, enter the ID of the VLAN group to which you want this management IP address to belong.
Page 69: System Status And Port Statistics
H A P T E R System Status and Port Statistics This chapter describes the system status (web configurator home page) and port details screens. 6.1 Overview The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details.
Page 70: Status: Port Details
Chapter 6 System Status and Port Statistics Table 7 Status (continued) LABEL DESCRIPTION State If STP (Spanning Tree Protocol) is enabled, this field displays the STP state of the port (see Section 11.1.3 on page 111 for more information). If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP.
Page 71: Figure 28 Status: Port Details
Chapter 6 System Status and Port Statistics Figure 28 Status: Port Details The following table describes the labels in this screen. Table 8 Status > Port Details LABEL DESCRIPTION Port Info Port NO. This field displays the port number you are viewing. Name This field displays the name of the port.
Page 72 Chapter 6 System Status and Port Statistics Table 8 Status > Port Details (continued) LABEL DESCRIPTION This field is available for PWR models only and is not available for the Gigabit and MaxCurre mini-GBIC ports. nt (mA) This field shows the maximum current a powered device can get from the Switch. If the powered device’s power consumption exceeds the maximum power offered by the Switch, the Switch stops sending power.
Page 73 Chapter 6 System Status and Port Statistics Table 8 Status > Port Details (continued) LABEL DESCRIPTION RX CRC This field shows the number of packets received with CRC (Cyclic Redundant Check) error(s). Length This field shows the number of packets received with a length that was out of range. Runt This field shows the number of packets received that were too short (shorter than 64 octets), including the ones with CRC errors.
Page 74 Chapter 6 System Status and Port Statistics ES-3124 Series User’s Guide...
Page 75: Basic Setting
H A P T E R Basic Setting This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Port Setup screens. 7.1 Overview The System Info screen displays general Switch information (such as firmware version number) and hardware polling information (such as fan speeds).
Page 76: Figure 29 Basic Setting > System Info
Chapter 7 Basic Setting Figure 29 Basic Setting > System Info The following table describes the labels in this screen. Table 9 Basic Setting > System Info LABEL DESCRIPTION System Name This field displays the descriptive name of the Switch for identification purposes. ZyNOS F/W This field displays the version number of the Switch 's current firmware including the Version...
Page 77: General Setup
Chapter 7 Basic Setting Table 9 Basic Setting > System Info (continued) LABEL DESCRIPTION Temperature The Switch has temperature sensors that are capable of detecting and reporting if the Unit temperature rises above the threshold. You may choose the temperature unit (Centigrade or Fahrenheit) in this field.
Page 78: Figure 30 Basic Setting > General Setup
Chapter 7 Basic Setting Figure 30 Basic Setting > General Setup The following table describes the labels in this screen. Table 10 Basic Setting > General Setup LABEL DESCRIPTION System Name Choose a descriptive name for identification purposes. This name consists of up to 64 printable characters;...
Page 79: Introduction To Vlans
Chapter 7 Basic Setting Table 10 Basic Setting > General Setup (continued) LABEL DESCRIPTION Time Zone Select the time difference between UTC (Universal Time Coordinated, formerly known as GMT, Greenwich Mean Time) and your time zone from the drop-down list box.
Page 80: Switch Setup Screen
Chapter 7 Basic Setting VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain.
Page 81 Chapter 7 Basic Setting Table 11 Basic Setting > Switch Setup (continued) LABEL DESCRIPTION Aging Time Enter a time from 10 to 3000 seconds. This is how long all dynamically learned MAC addresses remain in the MAC address table before they age out (and must be relearned).
Page 82: Ip Setup
Chapter 7 Basic Setting 7.6 IP Setup Use the IP Setup screen to configure the default gateway device, the default domain name server and add IP domains. 7.6.1 IP Interfaces The Switch needs an IP address for it to be managed over the network. The factory default IP address is 192.168.1.1.
Page 83: Table 12 Basic Setting > Ip Setup
Chapter 7 Basic Setting The following table describes the labels in this screen. Table 12 Basic Setting > IP Setup LABEL DESCRIPTION Domain DNS (Domain Name System) is for mapping a domain name to its corresponding IP Name Server address and vice versa. Enter a domain name server IP address in order to be able to use a domain name instead of an IP address.
Page 84: Port Setup
Chapter 7 Basic Setting Table 12 Basic Setting > IP Setup (continued) LABEL DESCRIPTION Type the VLAN group identification number. Default Enter the IP address of the default outgoing gateway in dotted decimal notation. Gateway Manageable Select this option to allow the Switch to be managed using this specified IP address. Click Add to save the new rule to the Switch’s run-time memory.
Page 85: Table 13 Basic Setting > Port Setup
Chapter 7 Basic Setting The following table describes the labels in this screen. Table 13 Basic Setting > Port Setup LABEL DESCRIPTION Port This is the port index number. Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 86 Chapter 7 Basic Setting Table 13 Basic Setting > Port Setup (continued) LABEL DESCRIPTION BPDU Control Configure the way to treat BPDUs received on this port. You must activate bridging control protocol transparency in the Switch Setup screen first. Select Peer to process any BPDU (Bridge Protocol Data Units) received on this port. Select Tunnel to forward BPDUs received on this port.
Page 87: Vlan
H A P T E R VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-based VLANs. 8.1 Introduction to IEEE 802.1Q Tagged VLANs A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the switch on which they were created.
Page 88: Automatic Vlan Registration
Chapter 8 VLAN 8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN membership across switches. 8.2.1 GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and de- register attribute values with other GARP participants within a bridged LAN. GARP is a protocol that provides a generic mechanism for protocols that serve a more specific application, for example, GVRP.
Page 89: Port Vlan Trunking
Chapter 8 VLAN 8.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Page 90: Static Vlan Status
Chapter 8 VLAN 8.5.1 Static VLAN Status Section 8.1 on page 87 for more information on Static VLAN. Click Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. Figure 36 Advanced Application > VLAN: VLAN Status The following table describes the labels in this screen.
Page 91: Configure A Static Vlan
Chapter 8 VLAN The following table describes the labels in this screen. Table 16 Advanced Application > VLAN > VLAN Detail LABEL DESCRIPTION VLAN Status Click this to go to the VLAN Status screen. This is the VLAN identification number that was configured in the Static VLAN screen.
Page 92: Configure Vlan Port Settings
Chapter 8 VLAN The following table describes the related labels in this screen. Table 17 Advanced Application > VLAN > Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings. Name Enter a descriptive name for the VLAN group for identification purposes. This name consists of up to 64 printable characters;...
Page 93: Figure 39 Advanced Application > Vlan > Vlan Port Setting
Chapter 8 VLAN Figure 39 Advanced Application > VLAN > VLAN Port Setting The following table describes the labels in this screen. Table 18 Advanced Application > VLAN > VLAN Port Setting LABEL DESCRIPTION GVRP GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network.
Page 94: Subnet Based Vlans
Chapter 8 VLAN Table 18 Advanced Application > VLAN > VLAN Port Setting (continued) LABEL DESCRIPTION VLAN Trunking Enable VLAN Trunking on ports connected to other switches or routers (but not ports directly connected to end users) to allow frames belonging to unknown VLAN groups to pass through the Switch.
Page 95: Configuring Subnet Based Vlan
Chapter 8 VLAN 8.7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. Subnet based VLAN applies to un-tagged packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 41 Advanced Application >...
Page 96: Protocol Based Vlans
Chapter 8 VLAN Table 19 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN Setup LABEL DESCRIPTION Active Check this box to activate the IP subnet VLAN you are creating or editing. Name Enter up to 32 alpha numeric characters to identify this subnet based VLAN. Enter the IP address of the subnet for which you want to configure this subnet based VLAN.
Page 97: Configuring Protocol Based Vlan
Chapter 8 VLAN For example, port 1, 2, 3 and 4 belong to static VLAN 100, and port 4, 5, 6, 7 belong to static VLAN 120. You configure a protocol based VLAN A with priority 3 for ARP traffic received on port 1, 2 and 3.
Page 98: Figure 43 Advanced Application > Vlan > Vlan Port Setting > Protocol Based Vlan
Chapter 8 VLAN Figure 43 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN The following table describes the labels in this screen. Table 20 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN Setup LABEL DESCRIPTION Active...
Page 99: Create An Ip-Based Vlan Example
Chapter 8 VLAN Table 20 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN Setup LABEL DESCRIPTION This field shows the VLAN ID of the port. Priority This field shows the priority which is assigned to frames belonging to this protocol based VLAN.
Page 100: Port-Based Vlan Setup
Chapter 8 VLAN 8.11 Port-based VLAN Setup Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each port. Therefore, if you wish to allow two subscriber ports to talk to each other, for example, between conference rooms in a hotel, you must define the egress (an egress port is an outgoing port, that is, a port through which a data packet leaves) for both ports.
Page 101: Figure 45 Advanced Application > Vlan: Port Based Vlan Setup (All Connected)
Chapter 8 VLAN Figure 45 Advanced Application > VLAN: Port Based VLAN Setup (All Connected) ES-3124 Series User’s Guide...
Page 102: Figure 46 Advanced Application > Vlan: Port Based Vlan Setup (Port Isolation)
Chapter 8 VLAN Figure 46 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) ES-3124 Series User’s Guide...
Page 103: Table 21 Advanced Application > Vlan: Port Based Vlan Setup
Chapter 8 VLAN The following table describes the labels in this screen. Table 21 Advanced Application > VLAN: Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose All connected or Port isolation. All connected means all ports can communicate with each other, that is, there are no virtual LANs.
Page 104 Chapter 8 VLAN ES-3124 Series User’s Guide...
Page 105: Static Mac Forward Setup
H A P T E R Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 9.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your network. 9.2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the MAC address table.
Page 106: Table 22 Advanced Application > Static Mac Forwarding
Chapter 9 Static MAC Forward Setup The following table describes the labels in this screen. Table 22 Advanced Application > Static MAC Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by clearing this check box.
Page 107: Filtering
H A P T E R Filtering This chapter discusses MAC address port filtering. 10.1 Configure a Filtering Rule Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). Click Advanced Application > Filtering in the navigation panel to display the screen as shown next.
Page 108 Chapter 10 Filtering Table 23 Advanced Application > FIltering (continued) LABEL DESCRIPTION Action Select Discard source to drop frame from the source MAC address (specified in the MAC field). The Switch can still send frames to the MAC address. Select Discard destination to drop frames to the destination MAC address (specified in the MAC address).
Page 109: Spanning Tree Protocol
H A P T E R Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning Tree Protocol • IEEE 802.1w Rapid Spanning Tree Protocol •...
Page 110: How Stp Works
Chapter 11 Spanning Tree Protocol Path cost is the cost of transmitting a frame onto a LAN through that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost.
Page 111: Stp Port States
11.1.4 Multiple RSTP MRSTP (Multiple RSTP) is ZyXEL’s proprietary feature that is compatible with RSTP and STP. With MRSTP, you can have more than one spanning tree on your Switch and assign port(s) to each tree. Each spanning tree operates independently with its own bridge information.
Page 112: Multiple Stp
Chapter 11 Spanning Tree Protocol 11.1.5 Multiple STP Multiple Spanning Tree Protocol (IEEE 802.1s) is backward compatible with STP/RSTP and addresses the limitations of existing spanning tree protocols (STP and RSTP) in networks to include the following features: • One Common and Internal Spanning Tree (CIST) that represents the entire network’s connectivity.
Page 113: Figure 51 Mstp Network Example
Chapter 11 Spanning Tree Protocol Figure 51 MSTP Network Example VLAN 1 VLAN 2 11.1.5.2 MST Region An MST region is a logical grouping of multiple network devices that appears as a single device to the rest of the network. Each MSTP-enabled device can only belong to one MST region.
Page 114: Spanning Tree Protocol Status Screen
Chapter 11 Spanning Tree Protocol Figure 52 MSTIs in Different Regions 11.1.5.4 Common and Internal Spanning Tree (CIST) A CIST represents the connectivity of the entire network and it is equivalent to a spanning tree in an STP/RSTP. The CIST is the default MST instance (MSTID 0). Any VLANs that are not members of an MST instance are members of the CIST.
Page 115: Spanning Tree Configuration
Chapter 11 Spanning Tree Protocol Figure 54 Advanced Application > Spanning Tree Protocol This screen differs depending on which STP mode (RSTP, MRSTP or MSTP) you configure on the Switch. This screen is described in detail in the section that follows the configuration section for each STP mode.
Page 116: Configure Rapid Spanning Tree Protocol
Chapter 11 Spanning Tree Protocol 11.4 Configure Rapid Spanning Tree Protocol Use this screen to configure RSTP settings, see Section 11.1 on page 109 for more information on RSTP. Click RSTP in the Advanced Application > Spanning Tree Protocol screen. Figure 56 Advanced Application >...
Page 117: Rapid Spanning Tree Protocol Status
Chapter 11 Spanning Tree Protocol Table 27 Advanced Application > Spanning Tree Protocol > RSTP (continued) LABEL DESCRIPTION Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds.
Page 118: Figure 57 Advanced Application > Spanning Tree Protocol > Status: Rstp
Chapter 11 Spanning Tree Protocol This screen is only available after you activate RSTP on the Switch. Figure 57 Advanced Application > Spanning Tree Protocol > Status: RSTP The following table describes the labels in this screen. Table 28 Advanced Application > Spanning Tree Protocol > Status: RSTP LABEL DESCRIPTION Configuration...
Page 119: Configure Multiple Rapid Spanning Tree Protocol
Chapter 11 Spanning Tree Protocol 11.6 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, click MRSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 11.1 on page 109 for more information on MRSTP. Figure 58 Advanced Application > Spanning Tree Protocol > MRSTP The following table describes the labels in this screen.
Page 120: Multiple Rapid Spanning Tree Protocol Status
Chapter 11 Spanning Tree Protocol Table 29 Advanced Application > Spanning Tree Protocol > MRSTP (continued) LABEL DESCRIPTION Hello Time This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds.
Page 121: Figure 59 Advanced Application > Spanning Tree Protocol > Status: Mrstp
Chapter 11 Spanning Tree Protocol This screen is only available after you activate MRSTP on the Switch. Figure 59 Advanced Application > Spanning Tree Protocol > Status: MRSTP The following table describes the labels in this screen. Table 30 Advanced Application > Spanning Tree Protocol > Status: MRSTP LABEL DESCRIPTION Configuration...
Page 122: Configure Multiple Spanning Tree Protocol
Chapter 11 Spanning Tree Protocol 11.8 Configure Multiple Spanning Tree Protocol To configure MSTP, click MSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 11.1.5 on page 112 for more information on MSTP. Figure 60 Advanced Application > Spanning Tree Protocol > MSTP ES-3124 Series User’s Guide...
Page 123: Table 31 Advanced Application > Spanning Tree Protocol > Mstp
Chapter 11 Spanning Tree Protocol The following table describes the labels in this screen. Table 31 Advanced Application > Spanning Tree Protocol > MSTP LABEL DESCRIPTION Status Click Status to display the MSTP Status screen (see Figure 61 on page 125).
Page 124: Multiple Spanning Tree Protocol Status
Chapter 11 Spanning Tree Protocol Table 31 Advanced Application > Spanning Tree Protocol > MSTP (continued) LABEL DESCRIPTION VLAN Range Enter the start of the VLAN ID range that you want to add or remove from the VLAN range edit area in the Start field. Enter the end of the VLAN ID range that you want to add or remove from the VLAN range edit area in the End field.
Page 125: Figure 61 Advanced Application > Spanning Tree Protocol > Status: Mstp
Chapter 11 Spanning Tree Protocol This screen is only available after you activate MSTP on the Switch. Figure 61 Advanced Application > Spanning Tree Protocol > Status: MSTP The following table describes the labels in this screen. Table 32 Advanced Application > Spanning Tree Protocol > Status: MSTP LABEL DESCRIPTION Configuration...
Page 126 Chapter 11 Spanning Tree Protocol Table 32 Advanced Application > Spanning Tree Protocol > Status: MSTP (continued) LABEL DESCRIPTION Forwarding Delay This is the time (in seconds) the root switch will wait before changing states (that (second) is, listening to learning to forwarding). Cost to Bridge This is the path cost from the root port on this Switch to the root switch.
Page 127: Bandwidth Control
H A P T E R Bandwidth Control This chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen. 12.1 Bandwidth Control Overview Bandwidth control means defining a maximum allowable bandwidth for incoming and/or out- going traffic flows on a port.
Page 128: Figure 62 Advanced Application > Bandwidth Control
Chapter 12 Bandwidth Control Figure 62 Advanced Application > Bandwidth Control The following table describes the related labels in this screen. Table 33 Advanced Application > Bandwidth Control LABEL DESCRIPTION Active Select this check box to enable bandwidth control on the Switch. Port This field displays the port number.
Page 129: Broadcast Storm Control
H A P T E R Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature. 13.1 Broadcast Storm Control Setup Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports.
Page 130: Table 34 Advanced Application > Broadcast Storm Control
Chapter 13 Broadcast Storm Control The following table describes the labels in this screen. Table 34 Advanced Application > Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable traffic storm control on the Switch. Clear this check box to disable this feature.
Page 131: Mirroring
H A P T E R Mirroring This chapter discusses port mirroring setup screens. 14.1 Port Mirroring Setup Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffic to) in order that you can examine the traffic from the monitor port without interference. Click Advanced Application >...
Page 132: Table 35 Advanced Application > Mirroring
Chapter 14 Mirroring The following table describes the labels in this screen. Table 35 Advanced Application > Mirroring LABEL DESCRIPTION Active Select this check box to activate port mirroring on the Switch. Clear this check box to disable the feature. Monitor The monitor port is the port you copy the traffic to in order to examine it in more detail Port...
Page 133: Link Aggregation
H A P T E R Link Aggregation This chapter shows you how to logically aggregate physical links to form one logical, higher- bandwidth link. 15.1 Link Aggregation Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link.
Page 134: Link Aggregation Id
Chapter 15 Link Aggregation • You must connect all ports point-to-point to the same Ethernet switch and configure the ports for LACP trunking. • LACP only works on full-duplex links. • All ports in the same trunk group must have the same media type, speed, duplex mode and flow control settings.
Page 135: Link Aggregation Setting
Chapter 15 Link Aggregation Table 38 Advanced Application > Link Aggregation Status (continued) LABEL DESCRIPTION Synchronized These are the ports that are currently transmitting data as one logical link in this trunk Ports group. Aggregator ID Link Aggregator ID consists of the following: system priority, MAC address, key, port priority and port number.
Page 136: Link Aggregation Control Protocol
Chapter 15 Link Aggregation The following table describes the labels in this screen. Table 39 Advanced Application > Link Aggregation > Link Aggregation Setting LABEL DESCRIPTION Link This is the only screen you need to configure to enable static link aggregation. Aggregation Setting Group ID...
Page 137: Figure 67 Advanced Application > Link Aggregation > Link Aggregation Setting > Lacp
Chapter 15 Link Aggregation Figure 67 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP The following table describes the labels in this screen. Table 40 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP LABEL DESCRIPTION Link Note: Do not configure this screen unless you want to enable...
Page 138: Static Trunking Example
Chapter 15 Link Aggregation Table 40 Advanced Application > Link Aggregation > Link Aggregation Setting > LACP LABEL DESCRIPTION Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 139: Figure 69 Trunking Example - Configuration Screen
Chapter 15 Link Aggregation Figure 69 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete; you do not need to go to any additional screens. ES-3124 Series User’s Guide...
Page 140 Chapter 15 Link Aggregation ES-3124 Series User’s Guide...
Page 141: Port Authentication
H A P T E R Port Authentication This chapter describes the IEEE 802.1x and MAC authentication methods. 16.1 Port Authentication Overview Port authentication is a way to validate access to ports on the Switch to clients based on an external server (authentication server).
Page 142: Mac Authentication
Chapter 16 Port Authentication Figure 70 IEEE 802.1x Authentication Process New Connection Login Info Request Login Credentials Authentication Request Authentication Reply Session Granted/Denied 16.1.2 MAC Authentication MAC authentication works in a very similar way to IEEE 802.1x authentication. The main difference is that the Switch does not prompt the client for login credentials.
Page 143: Port Authentication Configuration
Chapter 16 Port Authentication 16.2 Port Authentication Configuration To enable port authentication, first activate the port authentication method(s) you want to use (both on the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct > Radius Server Setup screen. Click Advanced Application >...
Page 144: Activate Mac Authentication
Chapter 16 Port Authentication The following table describes the labels in this screen. Table 41 Advanced Application > Port Authentication > 802.1x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the Switch. Note: You must first enable 802.1x authentication on the Switch before configuring it on each port.
Page 145: Figure 74 Advanced Application > Port Authentication > Mac Authentication
Chapter 16 Port Authentication Figure 74 Advanced Application > Port Authentication > MAC Authentication The following table describes the labels in this screen. Table 42 Advanced Application > Port Authentication > MAC Authentication LABEL DESCRIPTION Active Select this check box to permit MAC authentication on the Switch. Note: You must first enable MAC authentication on the Switch before configuring it on each port.
Page 146 Chapter 16 Port Authentication Table 42 Advanced Application > Port Authentication > MAC Authentication (continued) LABEL DESCRIPTION Use this row to make the setting the same for all ports. Use this row first and then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them.
Page 147: Port Security
H A P T E R Port Security This chapter shows you how to set up port security. 17.1 About Port Security Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch. The Switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K.
Page 148: Figure 75 Advanced Application > Port Security
Chapter 17 Port Security Figure 75 Advanced Application > Port Security The following table describes the labels in this screen. Table 43 Advanced Application > Port Security LABEL DESCRIPTION Active Select this option to enable port security on the Switch. Port This field displays a port number.
Page 149 Chapter 17 Port Security Table 43 Advanced Application > Port Security (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 150 Chapter 17 Port Security ES-3124 Series User’s Guide...
Page 151: Classifier
H A P T E R Classifier This chapter introduces and shows you how to configure the packet classifier on the Switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth.
Page 152: Figure 76 Advanced Application > Classifier
Chapter 18 Classifier Figure 76 Advanced Application > Classifier The following table describes the labels in this screen. Table 44 Advanced Application > Classifier LABEL DESCRIPTION Active Select this option to enable this rule. Name Enter a descriptive name for this rule for identifying purposes. Packet Specify the format of the packet.
Page 153 Chapter 18 Classifier Table 44 Advanced Application > Classifier (continued) LABEL DESCRIPTION Ethernet Select an Ethernet type or select Other and enter the Ethernet type number in Type hexadecimal value. Refer to Table 46 on page 154 for information. Source Select Any to apply the rule to all MAC addresses.
Page 154: Viewing And Editing Classifier Configuration
Chapter 18 Classifier Table 44 Advanced Application > Classifier (continued) LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh. Clear Click Clear to set the above fields back to the factory defaults. 18.3 Viewing and Editing Classifier Configuration To view a summary of the classifier configuration, scroll down to the summary table at the bottom of the Classifier screen.
Page 155: Classifier Example
Chapter 18 Classifier Table 46 Common Ethernet Types and Protocol Number (continued) ETHERNET TYPE PROTOCOL NUMBER XNS Compat 0807 Banyan Systems 0BAD BBN Simnet 5208 IBM SNA 80D5 AppleTalk AARP 80F3 In the Internet Protocol, there is a field called “Protocol” to identify the IP protocol type. The following table shows some common protocol types and the corresponding protocol number.
Page 156: Figure 78 Classifier: Example
Chapter 18 Classifier Figure 78 Classifier: Example ES-3124 Series User’s Guide...
Page 157: Policy Rule
H A P T E R Policy Rule This chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 18 on page 151 for more information). A policy rule ensures that a traffic flow gets the requested treatment in the network.
Page 158: Configuring Policy Rules
Chapter 19 Policy Rule 19.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to Section 18.2 on page for more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown.
Page 159: Table 49 Advanced Application > Policy Rule
Chapter 19 Policy Rule The following table describes the labels in this screen. Table 49 Advanced Application > Policy Rule LABEL DESCRIPTION Active Select this option to enable the policy. Name Enter a descriptive name for identification purposes. Classifier(s) This field displays the active classifier(s) you configure in the Classifier screen. Select the classifier(s) to which this policy rule applies.
Page 160: Viewing And Editing Policy Configuration
Chapter 19 Policy Rule Table 49 Advanced Application > Policy Rule (continued) LABEL DESCRIPTION Outgoing Select Send the packet to the mirror port to send the packet to the mirror port. Select Send the packet to the egress port to send the packet to the egress port. Select Send the matching frames (broadcast or DLF, multicast, marked for dropping or to be sent to the CPU) to the egress port to send the broadcast, multicast, DLF, marked-to-drop or CPU frames to the egress port.
Page 161: Policy Example
Chapter 19 Policy Rule 19.4 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 18.4 on page 155).
Page 162 Chapter 19 Policy Rule ES-3124 Series User’s Guide...
Page 163: Queuing Method
H A P T E R Queuing Method This chapter introduces the queuing methods supported. 20.1 Queuing Method Overview Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignment in Switch Setup and 802.1p Priority in Port Setup for related information.
Page 164: Weighted Round Robin Scheduling (Wrr)
Chapter 20 Queuing Method 20.1.3 Weighted Round Robin Scheduling (WRR) Round Robin Scheduling services queues on a rotating basis and is activated only when a port has more traffic than it can handle. A queue is a given an amount of bandwidth irrespective of the incoming traffic on that port.
Page 165: Table 51 Advanced Application > Queuing Method
Chapter 20 Queuing Method The following table describes the labels in this screen. Table 51 Advanced Application > Queuing Method LABEL DESCRIPTION Method Select SPQ (Strictly Priority Queuing), WFQ (Weighted Fair Queuing) or WRR (Weighted Round Robin). Strictly Priority services queues based on priority only. When the highest priority queue empties, traffic on the next highest-priority queue begins.
Page 166 Chapter 20 Queuing Method ES-3124 Series User’s Guide...
Page 167: Vlan Stacking
H A P T E R VLAN Stacking This chapter shows you how to configure VLAN stacking on your Switch. See the chapter on VLANs for more background information on Virtual LAN 21.1 VLAN Stacking Overview A service provider can use VLAN stacking to allow it to distinguish multiple customers VLANs, even those with the same (customer-assigned) VLAN ID, within its network.
Page 168: Vlan Stacking Port Roles
Chapter 21 VLAN Stacking Figure 83 VLAN Stacking Example 21.2 VLAN Stacking Port Roles Each port can have three VLAN stacking “roles”, Normal, Access Port and Tunnel (the latter is for Gigabit ports only). • Select Normal for “regular” (non-VLAN stacking) IEEE 802.1Q frame switching. •...
Page 169: Vlan Tag Format
Chapter 21 VLAN Stacking 21.3 VLAN Tag Format A VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of the following three fields. Table 52 VLAN Tag Format Type Priority Type is a standard Ethernet type code identifying the frame and indicates that whether the frame carries IEEE 802.1Q tag information.
Page 170: Configuring Vlan Stacking
Chapter 21 VLAN Stacking Table 54 802.1Q Frame (SP)TPID (Service Provider) Tag Protocol IDentifier Data Frame data VLAN ID Frame Check Sequence 21.4 Configuring VLAN Stacking Click Advanced Applications > VLAN Stacking to display the screen as shown. Figure 84 Advanced Application > VLAN Stacking The following table describes the labels in this screen.
Page 171 Chapter 21 VLAN Stacking Table 55 Advanced Application > VLAN Stacking (continued) LABEL DESCRIPTION Role Select Normal to have the Switch ignore frames received (or transmitted) on this port with VLAN stacking tags. Anything you configure in SPVID and Priority are ignored. Select Access Port to have the Switch add the SP TPID tag to all incoming frames received on this port.
Page 172 Chapter 21 VLAN Stacking ES-3124 Series User’s Guide...
Page 173: Multicast
H A P T E R Multicast This chapter shows you how to configure various multicast features. 22.1 Multicast Overview Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast delivers IP packets to just a group of hosts on the network.
Page 174: Igmp Snooping And Vlans
Chapter 22 Multicast The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group. IGMP snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your Switch.
Page 175: Figure 86 Advanced Application > Multicast > Multicast Setting
Chapter 22 Multicast Figure 86 Advanced Application > Multicast > Multicast Setting The following table describes the labels in this screen. Table 57 Advanced Application > Multicast > Multicast Setting LABEL DESCRIPTION IGMP Snooping Use these settings to configure IGMP Snooping. Active Select Active to enable IGMP Snooping to forward group multicast traffic only to ports that are members of that group.
Page 176: Igmp Snooping Vlan
Chapter 22 Multicast Table 57 Advanced Application > Multicast > Multicast Setting (continued) LABEL DESCRIPTION Reserved Multicast addresses (224.0.0.0 to 224.0.0.255) are reserved for the local scope. Multicast Group For examples, 224.0.0.1 is for all hosts in this subnet, 224.0.0.2 is for all multicast routers in this subnet, etc.
Page 177: Figure 87 Advanced Application > Multicast > Multicast Setting > Igmp Snooping Vlan
Chapter 22 Multicast Figure 87 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN The following table describes the labels in this screen. Table 58 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN LABEL DESCRIPTION Mode Select auto to have the Switch learn multicast group membership information of any VLANs automatically.
Page 178: Igmp Filtering Profile
Chapter 22 Multicast Table 58 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN LABEL DESCRIPTION Index This is the number of the IGMP snooping VLAN entry in the table. Name This field displays the descriptive name for this VLAN group. This field displays the ID number of the VLAN group.
Page 179: Mvr Overview
Chapter 22 Multicast Table 59 Advanced Application > Multicast > Multicast Setting > IGMP Filtering Profile LABEL DESCRIPTION Click Add to save the profile to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 180: Mvr Modes
Chapter 22 Multicast 22.6.2 MVR Modes You can set your Switch to operate in either dynamic or compatible mode. In dynamic mode, the Switch sends IGMP leave and join reports to the other multicast devices (such as multicast routers or servers) in the multicast VLAN. This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to the receiver ports.
Page 181: Figure 91 Advanced Application > Multicast > Multicast Setting > Mvr
Chapter 22 Multicast Your Switch automatically creates a static VLAN (with the same VID) when you create a multicast VLAN in this screen. Figure 91 Advanced Application > Multicast > Multicast Setting > MVR The following table describes the related labels in this screen. Table 60 Advanced Application >...
Page 182: Mvr Group Configuration
Chapter 22 Multicast Table 60 Advanced Application > Multicast > Multicast Setting > MVR (continued) LABEL DESCRIPTION Settings in this row apply to all ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
Page 183: Mvr Configuration Example
Chapter 22 Multicast Figure 92 Advanced Application > Multicast > Multicast Setting > MVR: Group Configuration The following table describes the labels in this screen. Table 61 Advanced Application > Multicast > Multicast Setting > MVR: Group Configuration LABEL DESCRIPTION Multicast Select a multicast VLAN ID (that you configured in the MVR screen) from the drop- VLAN ID...
Page 184: Figure 93 Mvr Configuration Example
Chapter 22 Multicast Figure 93 MVR Configuration Example To configure the MVR settings on the Switch, create a multicast group in the MVR screen and set the receiver and source ports. Figure 94 MVR Configuration Example To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen.
Page 185: Figure 95 Mvr Group Configuration Example
Chapter 22 Multicast Figure 95 MVR Group Configuration Example Figure 96 MVR Group Configuration Example ES-3124 Series User’s Guide...
Page 186 Chapter 22 Multicast ES-3124 Series User’s Guide...
Page 187: Authentication & Accounting
H A P T E R Authentication & Accounting This chapter describes how to configure authentication and accounting settings on the Switch. 23.1 Authentication, Authorization and Accounting Authentication is the process of determining who a user is and validating access to the Switch. The Switch can authenticate users who try to log in based on user accounts configured on the Switch itself.
Page 188: Radius And Tacacs
Chapter 23 Authentication & Accounting 23.1.2 RADIUS and TACACS+ RADIUS and TACACS+ are security protocols used to authenticate users by means of an external server instead of (or in addition to) an internal device user database that is limited to the memory capacity of the device.
Page 189: Figure 99 Advanced Application > Auth And Acct > Radius Server Setup
Chapter 23 Authentication & Accounting Figure 99 Advanced Application > Auth and Acct > RADIUS Server Setup The following table describes the labels in this screen. Table 63 Advanced Application > Auth and Acct > RADIUS Server Setup LABEL DESCRIPTION Authentication Use this section to configure your RADIUS authentication settings.
Page 190: Tacacs+ Server Setup
Chapter 23 Authentication & Accounting Table 63 Advanced Application > Auth and Acct > RADIUS Server Setup (continued) LABEL DESCRIPTION Delete Check this box if you want to remove an existing RADIUS server entry from the Switch. This entry is deleted when you click Apply. Apply Click Apply to save your changes to the Switch’s run-time memory.
Page 191: Figure 100 Advanced Application > Auth And Acct > Tacacs+ Server Setup
Chapter 23 Authentication & Accounting Figure 100 Advanced Application > Auth and Acct > TACACS+ Server Setup The following table describes the labels in this screen. Table 64 Advanced Application > Auth and Acct > TACACS+ Server Setup LABEL DESCRIPTION Authentication Use this section to configure your TACACS+ authentication settings.
Page 192: Authentication And Accounting Setup
Chapter 23 Authentication & Accounting Table 64 Advanced Application > Auth and Acct > TACACS+ Server Setup (continued) LABEL DESCRIPTION Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. This key is not sent over the network.
Page 193: Figure 101 Advanced Application > Auth And Acct > Auth And Acct Setup
Chapter 23 Authentication & Accounting Figure 101 Advanced Application > Auth and Acct > Auth and Acct Setup The following table describes the labels in this screen. Table 65 Advanced Application > Auth and Acct > Auth and Acct Setup LABEL DESCRIPTION Authentication...
Page 194 Chapter 23 Authentication & Accounting Table 65 Advanced Application > Auth and Acct > Auth and Acct Setup (continued) LABEL DESCRIPTION Login These fields specify which database the Switch should use (first, second and third) to authenticate administrator accounts (users for Switch management). Configure the local user accounts in the Access Control >...
Page 195: Vendor Specific Attribute
The VSAs are composed of the following: • Vendor-ID: An identification number assigned to the company by the IANA (Internet Assigned Numbers Authority). ZyXEL’s vendor ID is 890. • Vendor-Type: A vendor specified attribute, identifying the setting you want to modify.
Page 196: Supported Radius Attributes
Chapter 23 Authentication & Accounting Table 66 Supported VSAs FUNCTION ATTRIBUTE Egress Bandwidth Vendor-Id = 890 Assignment Vendor-Type = 2 Vendor-data = egress rate (Kbps in decimal format) Privilege Assignment Vendor-ID = 890 Vendor-Type = 3 Vendor-Data = "shell:priv-lvl=N" Vendor-ID = 9 (CISCO) Vendor-Type = 1 (CISCO-AVPAIR)
Page 197: Attributes Used For Authentication
Chapter 23 Authentication & Accounting 23.3.1 Attributes Used for Authentication The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication. 23.3.1.1 Attributes Used for Authenticating Privilege Access User-Name - the format of the User-Name attribute is $enab#$, where # is the privilege level (1- User-Password NAS-Identifier NAS-IP-Address...
Page 198: Table 68 Radius Attributes - Exec Events Via Console
Chapter 23 Authentication & Accounting 23.3.2.2 Attributes Used for Accounting Exec Events The attributes are listed in the following table along with the time that they are sent (the difference between Console and Telnet/SSH Exec events is that the Telnet/SSH events utilize the Calling-Station-Id attribute): Table 68 RADIUS Attributes - Exec Events via Console ATTRIBUTE...
Page 199 Chapter 23 Authentication & Accounting Table 70 RADIUS Attributes - Exec Events via Console ATTRIBUTE START INTERIM-UPDATE STOP NAS-Port-Type Acct-Status-Type Acct-Delay-Time Acct-Session-Id Acct-Authentic Acct-Input-Octets Acct-Output-Octets Acct-Session-Time Acct-Input-Packets Acct-Output-Packets Acct-Terminate-Cause Acct-Input-Gigawords Acct-Output-Gigawords ES-3124 Series User’s Guide...
Page 200 Chapter 23 Authentication & Accounting ES-3124 Series User’s Guide...
Page 201: Ip Source Guard
H A P T E R IP Source Guard Use IP source guard to filter unauthorized DHCP and ARP packets in your network. 24.1 IP Source Guard Overview IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in your network.
Page 202: Figure 102 Dhcp Snooping Database File Format
Chapter 24 IP Source Guard Trusted ports are connected to DHCP servers or other switches. The Switch discards DHCP packets from trusted ports only if the rate at which DHCP packets arrive is too high. The Switch learns dynamic bindings from trusted ports. The Switch will drop all DHCP requests if you enable DHCP snooping and there are no trusted ports.
Page 203: Arp Inspection Overview
Chapter 24 IP Source Guard 24.1.1.3 DHCP Relay Option 82 Information The Switch can add information to DHCP requests that it does not discard. This provides the DHCP server more information about the source of the requests. The Switch can add the following information: •...
Page 204 Chapter 24 IP Source Guard 24.1.2.1 ARP Inspection and MAC Address Filters When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet.
Page 205: Ip Source Guard
Chapter 24 IP Source Guard 24.2 IP Source Guard Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are used by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized packets in the network. The Switch learns the bindings by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings).
Page 206: Figure 105 Advanced Application > Ip Source Guard > Static Binding
Chapter 24 IP Source Guard Figure 105 Advanced Application > IP Source Guard > Static Binding The following table describes the labels in this screen. Table 72 Advanced Application > IP Source Guard > Static Binding LABEL DESCRIPTION MAC Address Enter the source MAC address in the binding.
Page 207: Dhcp Snooping
Chapter 24 IP Source Guard 24.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 106 Advanced Application > IP Source Guard > DHCP Snooping ES-3124 Series User’s Guide...
Page 208: Table 73 Advanced Application > Ip Source Guard > Dhcp Snooping
Chapter 24 IP Source Guard The following table describes the labels in this screen. Table 73 Advanced Application > IP Source Guard > DHCP Snooping LABEL DESCRIPTION Database Status This section displays the current settings for the DHCP snooping database. You can configure them in the DHCP Snooping Configure screen.
Page 209 Chapter 24 IP Source Guard Table 73 Advanced Application > IP Source Guard > DHCP Snooping (continued) LABEL DESCRIPTION Successful writes This field displays the number of times the Switch updated the bindings in the DHCP snooping database successfully. Failed writes This field displays the number of times the Switch was unable to update the bindings in the DHCP snooping database.
Page 210: Dhcp Snooping Configure
Chapter 24 IP Source Guard 24.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and configure the DHCP snooping database. The DHCP snooping database stores the current bindings on a secure, external TFTP server so that they are still available after a restart.
Page 211: Dhcp Snooping Port Configure
Chapter 24 IP Source Guard Table 74 Advanced Application > IP Source Guard > DHCP Snooping > Configure LABEL DESCRIPTION Database If Timeout interval is greater than Write delay interval, it is possible that the next update is scheduled to occur before the current update has finished successfully or timed out.
Page 212: Figure 108 Advanced Application > Ip Source Guard > Dhcp Snooping > Configure > Port
Chapter 24 IP Source Guard Figure 108 Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port The following table describes the labels in this screen. Table 75 Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port LABEL DESCRIPTION Port...
Page 213: Dhcp Snooping Vlan Configure
Chapter 24 IP Source Guard 24.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Switch adds DHCP relay agent option 82 information (Chapter 28 on page 235) to DHCP requests that the Switch relays to a DHCP server for each VLAN.
Page 214: Arp Inspection Status
Chapter 24 IP Source Guard 24.6 ARP Inspection Status Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unauthorized ARP packet. When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet.
Page 215: Arp Inspection Log Status
Chapter 24 IP Source Guard Figure 111 ARP Inspection VLAN Status The following table describes the labels in this screen. Table 78 ARP Inspection VLAN Status LABEL DESCRIPTION Show VLAN range Use this section to specify the VLANs you want to look at in the section below.
Page 216: Figure 112 Advanced Application > Ip Source Guard > Arp Inspection > Log Status
Chapter 24 IP Source Guard Figure 112 Advanced Application > IP Source Guard > ARP Inspection > Log Status The following table describes the labels in this screen. Table 79 Advanced Application > IP Source Guard > ARP Inspection > Log Status LABEL DESCRIPTION Clearing log status table...
Page 217: Arp Inspection Configure
Chapter 24 IP Source Guard 24.7 ARP Inspection Configure Use this screen to enable ARP inspection on the Switch. You can also configure the length of time the Switch stores records of discarded ARP packets and global settings for the ARP inspection log.
Page 218: Arp Inspection Port Configure
Chapter 24 IP Source Guard Table 80 Advanced Application > IP Source Guard > ARP Inspection > Configure (continued) LABEL DESCRIPTION Syslog rate Enter the maximum number of syslog messages the Switch can send to the syslog server in one batch. This number is expressed as a rate because the batch frequency is determined by the Log Interval.
Page 219: Arp Inspection Vlan Configure
Chapter 24 IP Source Guard The following table describes the labels in this screen. Table 81 Advanced Application > IP Source Guard > ARP Inspection > Configure > Port LABEL DESCRIPTION Port This field displays the port number. If you configure the * port, the settings are applied to all of the ports.
Page 220: Table 82 Advanced Application > Ip Source Guard > Arp Inspection > Configure > Vlan
Chapter 24 IP Source Guard The following table describes the labels in this screen. Table 82 Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN LABEL DESCRIPTION VLAN Use this section to specify the VLANs you want to manage in the section below.
Page 221: Loop Guard
H A P T E R Loop Guard This chapter shows you how to configure the Switch to guard against loops on the edge of your network. 25.1 Loop Guard Overview Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch.
Page 222: Figure 117 Switch In Loop State
Chapter 25 Loop Guard The following figure shows port N on switch A connected to switch B. Switch B is in loop state. When broadcast or multicast packets leave port N and reach switch B, they are sent back to port N on A as they are rebroadcast from B. Figure 117 Switch in Loop State The loop guard feature checks to see if a loop guard enabled port is connected to a switch in loop state.
Page 223: Loop Guard Setup
Chapter 25 Loop Guard After resolving the loop problem on your network you can re-activate the disabled port via the web configurator (see Section 7.7 on page 84) or via commands (see the CLI Reference Guide 25.2 Loop Guard Setup Click Advanced Application >...
Page 224 Chapter 25 Loop Guard Table 83 Advanced Application > Loop Guard (continued) LABEL DESCRIPTION Active Select this check box to enable the loop guard feature on this port. The Switch sends probe packets from this port to check if the Switch it is connected to is in loop state. If the Switch that this port is connected is in loop state the Switch will shut down this port.
Page 225: Static Routing
H A P T E R Static Routing This chapter shows you how to configure static routes. 26.1 Configuring Static Routing The Switch uses IP for communication with management computers, for example using HTTP, telnet, SSH, or SNMP. Use IP static routes to have the Switch respond to remote management stations that are not reachable through the default gateway.
Page 226 Chapter 26 Static Routing Table 84 IP Application > Static Routing (continued) LABEL DESCRIPTION Gateway IP Enter the IP address of the gateway. The gateway is an immediate neighbor of your Address Switch that will forward the packet to the destination. The gateway must be a router on the same segment as your Switch.
Page 227: Differentiated Services
H A P T E R Differentiated Services This chapter shows you how to configure Differentiated Services (DiffServ) on the Switch. 27.1 DiffServ Overview Quality of Service (QoS) is used to prioritize source-to-destination traffic flows. All packets in the flow are given the same priority. You can use CoS (class of service) to give different priorities to different packet types.
Page 228: Diffserv Network Example
Chapter 27 Differentiated Services 27.1.2 DiffServ Network Example The following figure depicts a DiffServ network consisting of a group of directly connected DiffServ-compliant network devices. The boundary node (A in Figure 123) in a DiffServ network classifies (marks with a DSCP value) the incoming packets into different traffic flows (Platinum, Gold, Silver, Bronze) based on the configured marking rules.
Page 229: Trtcm - Color-Blind Mode
Chapter 27 Differentiated Services • Green (low loss priority level) packets are forwarded. TRTCM operates in one of two modes: color-blind or color-aware. In color-blind mode, packets are marked based on evaluating against the PIR and CIR regardless of if they have previously been marked or not.
Page 230: Activating Diffserv
Chapter 27 Differentiated Services 27.3 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected port(s). Click IP Application > DiffServ in the navigation panel to display the screen as shown. Figure 126 IP Application > DiffServ The following table describes the labels in this screen.
Page 231: Figure 127 Ip Application > Diffserv > 2-Rate 3 Color Marker
Chapter 27 Differentiated Services You cannot enable both TRTCM and Bandwidth Control at the same time. Figure 127 IP Application > DiffServ > 2-rate 3 Color Marker The following table describes the labels in this screen. Table 86 IP Application > DiffServ > 2-rate 3 Color Marker LABEL DESCRIPTION Active...
Page 232: Dscp-To-Ieee 802.1P Priority Settings
Chapter 27 Differentiated Services Table 86 IP Application > DiffServ > 2-rate 3 Color Marker (continued) LABEL DESCRIPTION DSCP Use this section to specify the DSCP values that you want to assign to packets based on the color they are marked via TRTCM. green Specify the DSCP value to use for packets with low packet loss priority.
Page 233: Table 88 Ip Application > Diffserv > Dscp Setting
Chapter 27 Differentiated Services The following table describes the labels in this screen. Table 88 IP Application > DiffServ > DSCP Setting LABEL DESCRIPTION 0 … 63 This is the DSCP classification identification number. To set the IEEE 802.1p priority mapping, select the priority level from the drop-down list box.
Page 234 Chapter 27 Differentiated Services ES-3124 Series User’s Guide...
Page 235: Dhcp
H A P T E R DHCP This chapter shows you how to configure the DHCP feature. 28.1 DHCP Overview DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server. You can configure the Switch as a DHCP relay agent.
Page 236: Dhcp Relay
Chapter 28 DHCP Figure 129 IP Application > DHCP Status The following table describes the labels in this screen. Table 89 IP Application > DHCP Status LABEL DESCRIPTION Relay Status This section displays configuration settings related to the Switch’s DHCP relay mode.
Page 237: Configuring Dhcp Global Relay
Chapter 28 DHCP The following describes the DHCP relay information that the Switch sends to the DHCP server: Table 90 Relay Agent Information FIELD LABELS DESCRIPTION Slot ID (1 byte) This value is always 0 for stand-alone switches. Port ID (1 byte) This is the port that the DHCP client is connected to.
Page 238: Global Dhcp Relay Configuration Example
Chapter 28 DHCP 28.3.3 Global DHCP Relay Configuration Example The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains.
Page 239: Figure 133 Ip Application > Dhcp > Vlan
Chapter 28 DHCP You must set up a management IP address for each VLAN that you want to configure DHCP settings for on the Switch. See Section 7.6 on page 82 information on how to do this. Figure 133 IP Application > DHCP > VLAN The following table describes the labels in this screen.
Page 240: Example: Dhcp Relay For Two Vlans
Chapter 28 DHCP Table 92 IP Application > DHCP > VLAN (continued) LABEL DESCRIPTION Delete Select the configuration entries you want to remove and click Delete to remove them. Cancel Click Cancel to clear the Delete check boxes. 28.4.1 Example: DHCP Relay for Two VLANs The following example displays two VLANs (VIDs 1 and 2) for a campus network.
Page 241: Maintenance
H A P T E R Maintenance This chapter explains how to configure the maintenance screens that let you maintain the firmware and configuration files. 29.1 The Maintenance Screen Use this screen to manage firmware and your configuration files. Click Management > Maintenance in the navigation panel to open the following screen.
Page 242: Load Factory Default
Chapter 29 Maintenance Table 93 Management > Maintenance (continued) LABEL DESCRIPTION Save Click Config 1 to save the current configuration settings to Configuration 1 on the Configuration Switch. Click Config 2 to save the current configuration settings to Configuration 2 on the Switch.
Page 243: Reboot System
Chapter 29 Maintenance 29.4 Reboot System Reboot System allows you to restart the Switch without physically turning the power off. It also allows you to load configuration one (Config 1) or configuration two (Config 2) when you reboot. Follow the steps below to reboot the Switch. 1 In the Maintenance screen, click the Config 1 button next to Reboot System to reboot and load configuration one.
Page 244: Restore A Configuration File
Chapter 29 Maintenance 29.6 Restore a Configuration File Restore a previously saved configuration from your computer to the Switch using the Restore Configuration screen. Figure 140 Management > Maintenance > Restore Configuration Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to locate it.
Page 245: Ftp Command Line
Switch’s settings, they can be saved back to your computer under a filename of your choosing. ZyNOS (ZyXEL Network Operating System sometimes referred to as the “ras” file) is the system firmware and has a “bin” filename extension.
Page 246: Gui-Based Ftp Clients
Chapter 29 Maintenance 5 Enter to set transfer mode to binary. 6 Use to transfer files from the computer to the Switch, for example, transfers the firmware on your computer (firmware.bin) to the firmware.bin ras Switch and renames it to “ras”. Similarly, transfers the put config.cfg config configuration file on your computer (config.cfg) to the Switch and renames it to...
Page 247: Access Control
H A P T E R Access Control This chapter describes how to control access to the Switch. 30.1 Access Control Overview A console port and FTP are allowed one session each, Telnet and SSH share four sessions, up to five Web sessions (five different user names and passwords) and/or limitless SNMP access control sessions are allowed.
Page 248: About Snmp
Chapter 30 Access Control 30.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between the network management system (NMS) and a network element (NE). A manager station can manage and monitor the Switch through the network via SNMP version one (SNMPv1), SNMP version 2c or SNMP version 3.
Page 249: Snmp V3 And Security
In private MIBs, the OID for each model begins with the values in Table 98 on page 249. Table 98 Object ID by Model MODEL OBJECT ID (BEGINNING) ES-3124 1.3.6.1.4.1.890.1.5.8.12 ES-3124PWR 1.3.6.1.4.1.890.1.5.8.14 ES-3124-4F 1.3.6.1.4.1.890.1.5.8.26 ES-3124F 1.3.6.1.4.1.890.1.5.8.31 Table 99 SNMP System Traps OPTION...
Page 250 Chapter 30 Access Control Table 99 SNMP System Traps (continued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION fanspeed FanSpeedEventOn ES-3124: This trap is sent when the fan speed 1.3.6.1.4.1.890.1.5.8.12.27.2.1 goes above or below the normal operating range. ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.1 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.32.2.1 ES-3124F: 1.3.6.1.4.1.890.1.5.8.31.32.2.1...
Page 251 Chapter 30 Access Control Table 99 SNMP System Traps (continued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION reset UncontrolledResetEventOn ES-3124: This trap is sent when the Switch 1.3.6.1.4.1.890.1.5.8.12.27.2.1 automatically resets. ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.1 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.32.2.1 ES-3124F: 1.3.6.1.4.1.890.1.5.8.31.32.2.1 ControlledResetEventOn ES-3124: This trap is sent when the Switch 1.3.6.1.4.1.890.1.5.8.12.27.2.1 resets by an administrator through a management interface.
Page 252: Table 100 Snmp Interface Traps
Chapter 30 Access Control Table 100 SNMP Interface Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION linkup linkUp 1.3.6.1.6.3.1.1.5.4 This trap is sent when the Ethernet link is up. LinkDownEventClear ES-3124: This trap is sent when the 1.3.6.1.4.1.890.1.5.8.12.27.2.2 Ethernet link is up. ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.2 ES-3124-4F:...
Page 253: Table 101 Aaa Traps
Chapter 30 Access Control Table 101 AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION authentication authenticationFailure 1.3.6.1.6.3.1.1.5.5 This trap is sent when authentication fails due to incorrect user name and/or password. AuthenticationFailureEventO ES-3124: This trap is sent when 1.3.6.1.4.1.890.1.5.8.12.27.2.1 authentication fails due to incorrect user name and/or ES-3124 PWR: password.
Page 254: Table 102 Snmp Ip Traps
Chapter 30 Access Control Table 102 SNMP IP Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION ping pingProbeFailed 1.3.6.1.2.1.80.0.1 This trap is sent when a single ping probe fails. pingTestFailed 1.3.6.1.2.1.80.0.2 This trap is sent when a ping test (consisting of a series of ping probes) fails.
Page 255: Configuring Snmp
Chapter 30 Access Control Table 103 SNMP Switch Traps (continued) OPTION OBJECT LABEL OBJECT ID DESCRIPTION mactable MacTableFullEventOn ES-3124: This trap is sent when more than 1.3.6.1.4.1.890.1.5.8.12.27.2.1 99% of the MAC table is used. ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.1 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.32.2.1 ES-3124F: 1.3.6.1.4.1.890.1.5.8.31.32.2.1 MacTableFullEventClear ES-3124:...
Page 256: Table 104 Management > Access Control > Snmp
Chapter 30 Access Control The following table describes the labels in this screen. Table 104 Management > Access Control > SNMP LABEL DESCRIPTION General Setting Use this section to specify the SNMP version and community (password) values. Version Select the SNMP version for the Switch. The SNMP version on the Switch must match the version on the SNMP manager.
Page 257: Configuring Snmp Trap Group
Chapter 30 Access Control Table 104 Management > Access Control > SNMP (continued) LABEL DESCRIPTION Security Level Select whether you want to implement authentication and/or encryption for SNMP communication from this user. Choose: • noauth -to use the username as the password string to send to the SNMP manager.
Page 258: Setting Up Login Accounts
Chapter 30 Access Control The following table describes the labels in this screen. Table 105 Management > Access Control > SNMP > Trap Group LABEL DESCRIPTION Trap Destination Select one of your configured trap destination IP addresses. These are the IP addresses of the SNMP managers.
Page 259: Figure 146 Management > Access Control > Logins
Chapter 30 Access Control Figure 146 Management > Access Control > Logins The following table describes the labels in this screen. Table 106 Management > Access Control > Logins LABEL DESCRIPTION Administrator This is the default administrator account with the “admin” user name. You cannot change the default administrator user name.
Page 260: Ssh Overview
Chapter 30 Access Control 30.4 SSH Overview Unlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network. Figure 147 SSH Communication Example 30.5 How SSH works The following table summarizes how a secure connection is established between two remote...
Page 261: Ssh Implementation On The Switch
Chapter 30 Access Control 2 Encryption Method Once the identification is verified, both the client and server must agree on the type of encryption method to use. 3 Authentication and Data Transmission After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server.
Page 262: Https Example
Chapter 30 Access Control Figure 149 HTTPS Implementation If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts. 30.8 HTTPS Example If you haven’t changed the default HTTPS port on the Switch, then in your browser enter “https://Switch IP Address/”...
Page 263: Netscape Navigator Warning Messages
Chapter 30 Access Control 30.8.2 Netscape Navigator Warning Messages When you attempt to access the Switch HTTPS server, a Website Certified by an Unknown Authority screen pops up asking if you trust the server certificate. Click Examine Certificate if you want to verify that the certificate is from the Switch. If Accept this certificate temporarily for this session is selected, then click OK to continue in Netscape.
Page 264: Service Port Access Control
Chapter 30 Access Control Figure 153 Example: Lock Denoting a Secure Connection 30.9 Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure “trusted computer(s)” for each service in the Remote Management screen (discussed later).
Page 265: Remote Management
Chapter 30 Access Control The following table describes the fields in this screen. Table 107 Management > Access Control > Service Access Control LABEL DESCRIPTION Services Services you may use to access the Switch are listed here. Active Select this option for the corresponding services that you want to allow to access the Switch.
Page 266 Chapter 30 Access Control Table 108 Management > Access Control > Remote Management (continued) LABEL DESCRIPTION Telnet/FTP/ Select services that may be used for managing the Switch from the specified trusted HTTP/ICMP/ computers. SNMP/SSH/ HTTPS Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 267: Diagnostic
H A P T E R Diagnostic This chapter explains the Diagnostic screen. 31.1 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 156 Management >...
Page 268 Chapter 31 Diagnostic ES-3124 Series User’s Guide...
Page 269: Syslog
H A P T E R Syslog This chapter explains the syslog screens. 32.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server.
Page 270: Syslog Server Setup
Chapter 32 Syslog Figure 157 Management > Syslog The following table describes the labels in this screen. Table 111 Management > Syslog LABEL DESCRIPTION Syslog Select Active to turn on syslog (system logging) and then configure the syslog setting Logging Type This column displays the names of the categories of logs that the device can generate.
Page 271: Figure 158 Management > Syslog > Server Setup
Chapter 32 Syslog Figure 158 Management > Syslog > Server Setup The following table describes the labels in this screen. Table 112 Management > Syslog > Server Setup LABEL DESCRIPTION Active Select this check box to have the device send logs to this syslog server. Clear the check box if you want to create a syslog server entry but not have the device send logs to it (you can edit the entry later).
Page 272 Chapter 32 Syslog ES-3124 Series User’s Guide...
Page 273: Cluster Management
Table 113 ZyXEL Clustering Management Specifications Maximum number of cluster members Cluster Member Models Must be compatible with ZyXEL cluster management implementation. Cluster Manager The Switch through which you manage the cluster member switches.
Page 274: Cluster Management Status
Chapter 33 Cluster Management Figure 159 Clustering Application Example 33.2 Cluster Management Status Click Management > Cluster Management in the navigation panel to display the following screen. A cluster can only have one manager. Figure 160 Management > Cluster Management ES-3124 Series User’s Guide...
Page 275: Cluster Member Switch Management
Chapter 33 Cluster Management The following table describes the labels in this screen. Table 114 Management > Cluster Management LABEL DESCRIPTION Status This field displays the role of this Switch within the cluster. Manager Member (you see this if you access this screen in the cluster member switch directly and not via the cluster manager) None (neither a manager nor a member of a cluster) Manager...
Page 276: Clustering Management Configuration
Chapter 33 Cluster Management 33.2.1.1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example. Figure 162 Example: Uploading Firmware to a Cluster Member Switch C:\>ftp 192.168.1.1 Connected to 192.168.1.1.
Page 277: Figure 163 Management > Clustering Management > Configuration
Chapter 33 Cluster Management Figure 163 Management > Clustering Management > Configuration The following table describes the labels in this screen. Table 116 Management > Clustering Management > Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this Switch become the cluster manager switch. A cluster can only have one manager.
Page 278 Chapter 33 Cluster Management Table 116 Management > Clustering Management > Configuration (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
Page 279: Mac Table
H A P T E R MAC Table This chapter introduces the MAC Table screen. 34.1 MAC Table Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen).
Page 280: Viewing The Mac Table
Chapter 34 MAC Table 34.2 Viewing the MAC Table Click Management > MAC Table in the navigation panel to display the following screen. Figure 165 Management > MAC Table The following table describes the labels in this screen. Table 117 Management > MAC Table LABEL DESCRIPTION Sort by...
Page 281: Arp Table
H A P T E R ARP Table This chapter introduces ARP Table. 35.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network.
Page 282: Figure 166 Management > Arp Table
Chapter 35 ARP Table Figure 166 Management > ARP Table The following table describes the labels in this screen. Table 118 Management > ARP Table LABEL DESCRIPTION Index This is the ARP Table entry number. IP Address This is the learned IP address of a device connected to a Switch port with corresponding MAC address below.
Page 283: Configure Clone
H A P T E R Configure Clone This chapter shows you how you can copy the settings of one port onto other ports. 36.1 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports.
Page 284: Table 119 Management > Configure Clone
Chapter 36 Configure Clone The following table describes the labels in this screen. Table 119 Management > Configure Clone LABEL DESCRIPTION Source/ Enter the source port under the Source label. This port’s attributes are copied. Destination Enter the destination port or ports under the Destination label. These are the ports Port which are going to have the same attributes as the source port.
Page 285: Troubleshooting And Specifications
Troubleshooting and Specifications Troubleshooting (287) Product Specifications (291)
Page 287: Troubleshooting
H A P T E R Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Switch Access and Login 37.1 Power, Hardware Connections, and LEDs The Switch does not turn on.
Page 288: Switch Access And Login
Chapter 37 Troubleshooting 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 Turn the Switch off and on (DC models). 5 Disconnect and re-connect the power adaptor to the Switch (AC models). 6 If the problem continues, contact the vendor. 37.2 Switch Access and Login I forgot the IP address for the Switch.
Page 289 Chapter 37 Troubleshooting 4 Make sure your computer is in the same subnet as the Switch. (If you know that there are routers between your computer and the Switch, skip this step.) 5 Try to access the Switch using another service, such as Telnet. If you can access the Switch, check the remote management and secure client settings to find out why the Switch does not respond to HTTP.
Page 290 Chapter 37 Troubleshooting 1 You may have exceeded the maximum number of concurrent FTP sessions. Close other FTP sessions, or try connecting again later. 2 Try to access the Switch using another service, such as HTTP. If you can access the Switch, check the remote management and secure client settings to find out why the Switch does not respond to FTP.
Page 291: Product Specifications
Dimension 438 mm (W) x 270 mm (D) x 44.5 mm (H) (ES-3124, ES-3124-4F and ES- 3124F only) 438 mm (W) x 420 mm (D) x 44.45 mm (H) (ES-3124PWR only) Standard 19” rack mountable Device Weight 4 Kg (ES-3124F) 4.2 Kg (ES-3124 and ES-3124-4F)
Page 292 ES-3124-4F: 100 ~ 240 V, 60 W, 1.5 A max. ES-3124F: 100~ 240 V, 58 W, 1.5 A max. ES-3124PWR: 100 ~ 240 V, 600 W, 10 A max. DC version: There is no tolerance for the DC input voltage. Power wire 18 AWG or larger.
Page 293: Table 121 Feature Specifications
Chapter 38 Product Specifications Table 121 Feature Specifications FEATURE DESCRIPTION Layer 2 Bridging 16K MAC addresses Static MAC address filtering (port lock) Broadcast storm control Limited maximum number of MAC addresses per port Switching Switching fabric: 13.6Gbps, non-blocking Max. Frame size: 1522 bytes Forwarding frame: IEEE 802.3, IEEE 802.1q, Ethernet II, PPPoE Prevent the forwarding of corrupted packets IEEE 802.1D Spanning Tree Protocol...
Page 294: Table 122 Standards Supported
Chapter 38 Product Specifications Table 121 Feature Specifications (continued) FEATURE DESCRIPTION Management System Alarm/Status surveillance Control LED indication for alarm and system status Performance monitoring Line speed Four RMON groups (history, statistics, alarms, and events) Throughput monitoring CMP packet transmission Port mirroring and aggregation Spanning Tree Protocol Loopguard...
Page 295 Chapter 38 Product Specifications Table 122 Standards Supported (continued) STANDARD DESCRIPTION RFC 1757 Four groups of RMON RFC 1901 SNMPv2c Simple Network Management Protocol version 2c RFC 2011 SNMPv2 MIB for IP RFC 2012 SNMPv2 MIB for TCP RFC 2013 SNMPv2 MIB for UDP RFC 2131 DHCP (Dynamic Host Configuration Protocol)
Page 296: Cable Pin Assignments
Chapter 38 Product Specifications 38.2 Cable Pin Assignments In a serial communications connection, generally a computer is DTE (Data Terminal Equipment) and a modem is DCE (Data Circuit-terminating Equipment). The Switch is DCE when you connect a computer to the console port. The Switch is DTE when you connect a modem to the dial backup port.
Page 297 Chapter 38 Product Specifications Table 124 Ethernet Cable Pin Assignments WAN / LAN ETHERNET CABLE PIN LAYOUT 1 IRD + 1 OTD 1 IRD + 1 IRD + 2 IRD - 2 OTD - 2 IRD - 2 IRD - 3 OTD 3 IRD + 3 OTD +...
Page 298 Chapter 38 Product Specifications ES-3124 Series User’s Guide...
Page 299: Appendices And Index
Appendices and Index The appendices provide general information. Some details may not apply to your Switch. Setting up Your Computer’s IP Address (301) Pop-up Windows, JavaScripts and Java Permissions (323) IP Addresses and Subnetting (331) Common Services (341) Importing Certificates (345) Legal Information (351) Customer Support (355) Index (361)
Page 301: Appendix A Setting Up Your Computer's Ip Address
P P E N D I X Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vista, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ IP on your computer.
Page 302: Figure 169 Windows 95/98/Me: Network: Configuration
Appendix A Setting up Your Computer’s IP Address Figure 169 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add.
Page 303: Figure 170 Windows 95/98/Me: Tcp/Ip Properties: Ip Address
Appendix A Setting up Your Computer’s IP Address Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically. •...
Page 304: Figure 171 Windows 95/98/Me: Tcp/Ip Properties: Dns Configuration
Appendix A Setting up Your Computer’s IP Address Figure 171 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add. 5 Click OK to save and close the TCP/IP Properties window.
Page 305: Figure 172 Windows Xp: Start Menu
Appendix A Setting up Your Computer’s IP Address Figure 172 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 173 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. ES-3124 Series User’s Guide...
Page 306: Figure 174 Windows Xp: Control Panel: Network Connections: Properties
Appendix A Setting up Your Computer’s IP Address Figure 174 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 175 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
Page 307: Figure 176 Windows Xp: Internet Protocol (Tcp/Ip) Properties
Appendix A Setting up Your Computer’s IP Address Figure 176 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
Page 308: Figure 177 Windows Xp: Advanced Tcp/Ip Properties
Appendix A Setting up Your Computer’s IP Address Figure 177 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 309: Figure 178 Windows Xp: Internet Protocol (Tcp/Ip) Properties
Appendix A Setting up Your Computer’s IP Address Figure 178 Windows XP: Internet Protocol (TCP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window.
Page 310: Figure 179 Windows Vista: Start Menu
Appendix A Setting up Your Computer’s IP Address Figure 179 Windows Vista: Start Menu 2 In the Control Panel, double-click Network and Internet. Figure 180 Windows Vista: Control Panel 3 Click Network and Sharing Center. Figure 181 Windows Vista: Network And Internet 4 Click Manage network connections.
Page 311: Figure 183 Windows Vista: Network And Sharing Center
Appendix A Setting up Your Computer’s IP Address 5 Right-click Local Area Connection and then click Properties. During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 183 Windows Vista: Network and Sharing Center 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
Page 312: Figure 185 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties
Appendix A Setting up Your Computer’s IP Address 7 The Internet Protocol Version 4 (TCP/IPv4) Properties window opens (the General tab). • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields.
Page 313: Figure 186 Windows Vista: Advanced Tcp/Ip Properties
Appendix A Setting up Your Computer’s IP Address Figure 186 Windows Vista: Advanced TCP/IP Properties 9 In the Internet Protocol Version 4 (TCP/IPv4) Properties window, (the General tab): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 314: Figure 187 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties
Appendix A Setting up Your Computer’s IP Address Figure 187 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Version 4 (TCP/IPv4) Properties window. 11 Click Close to close the Local Area Connection Properties window. 12 Close the Network Connections window.
Page 315: Figure 188 Macintosh Os 8/9: Apple Menu
Appendix A Setting up Your Computer’s IP Address Figure 188 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 189 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the following: •...
Page 316: Figure 190 Macintosh Os X: Apple Menu
Appendix A Setting up Your Computer’s IP Address • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your Switch in the Router address box. 5 Close the TCP/IP Control Panel.
Page 317: Figure 191 Macintosh Os X: Network
Appendix A Setting up Your Computer’s IP Address Figure 191 Macintosh OS X: Network 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. •...
Page 318: Figure 192 Red Hat 9.0: Kde: Network Configuration: Devices
Appendix A Setting up Your Computer’s IP Address Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network.
Page 319: Figure 194 Red Hat 9.0: Kde: Network Configuration: Dns
Appendix A Setting up Your Computer’s IP Address • If you have a dynamic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields.
Page 320: Figure 196 Red Hat 9.0: Dynamic Ip Address Setting In Ifconfig-Eth0
Appendix A Setting up Your Computer’s IP Address Figure 196 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet • If you have a static IP address, enter in the field. Type static BOOTPROTO= = followed by the IP address (in dotted decimal notation) and type IPADDR NETMASK...
Page 321: Figure 200 Red Hat 9.0: Checking Tcp/Ip Properties
Appendix A Setting up Your Computer’s IP Address Verifying Settings Enter in a terminal screen to check your TCP/IP properties. ifconfig Figure 200 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1...
Page 322 Appendix A Setting up Your Computer’s IP Address ES-3124 Series User’s Guide...
Page 323: Appendix B Pop-Up Windows, Javascripts And Java Permissions
P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Internet Explorer 6 screens are used here.
Page 324: Figure 202 Internet Options: Privacy
Appendix B Pop-up Windows, JavaScripts and Java Permissions 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 202 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps.
Page 325: Figure 203 Internet Options: Privacy
Appendix B Pop-up Windows, JavaScripts and Java Permissions Figure 203 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites. Figure 204 Pop-up Blocker Settings ES-3124 Series User’s Guide...
Page 326: Figure 205 Internet Options: Security
Appendix B Pop-up Windows, JavaScripts and Java Permissions 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Page 327: Figure 206 Security Settings - Java Scripting
Appendix B Pop-up Windows, JavaScripts and Java Permissions Figure 206 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected.
Page 328: Figure 208 Java (Sun)
Appendix B Pop-up Windows, JavaScripts and Java Permissions JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to close the window. Figure 208 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here.
Page 329: Figure 209 Mozilla Firefox: Tools > Options
Appendix B Pop-up Windows, JavaScripts and Java Permissions Figure 209 Mozilla Firefox: Tools > Options Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 210 Mozilla Firefox Content Security ES-3124 Series User’s Guide...
Page 330 Appendix B Pop-up Windows, JavaScripts and Java Permissions ES-3124 Series User’s Guide...
Page 331: Appendix C Ip Addresses And Subnetting
P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
Page 332: Figure 211 Network Number And Host Id
Appendix C IP Addresses and Subnetting Figure 211 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask. Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation).
Page 333: Table 126 Subnet Masks
Appendix C IP Addresses and Subnetting Subnet masks are expressed in dotted decimal notation just like IP addresses. The following examples show the binary and decimal notation for 8-bit, 16-bit, 24-bit and 29-bit subnet masks. Table 126 Subnet Masks BINARY DECIMAL 4TH OCTET OCTET...
Page 334: Figure 212 Subnetting Example: Before Subnetting
Appendix C IP Addresses and Subnetting Table 128 Alternative Subnet Mask Notation (continued) ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION (BINARY) (DECIMAL) 255.255.255.192 1100 0000 255.255.255.224 1110 0000 255.255.255.240 1111 0000 255.255.255.248 1111 1000 255.255.255.252 1111 1100 Subnetting You can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the company network for security reasons.
Page 335: Figure 213 Subnetting Example: After Subnetting
Appendix C IP Addresses and Subnetting Figure 213 Subnetting Example: After Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of 2 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address).
Page 336: Table 130 Subnet 2
Appendix C IP Addresses and Subnetting Table 130 Subnet 2 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 01000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.65 192.168.1.64 Broadcast Address: Highest Host ID: 192.168.1.126 192.168.1.127 Table 131 Subnet 3...
Page 337: Table 134 24-Bit Network Number Subnet Planning
Appendix C IP Addresses and Subnetting Table 133 Eight Subnets (continued) SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 134 24-bit Network Number Subnet Planning NO.
Page 338: Configuring Ip Addresses
Appendix C IP Addresses and Subnetting Table 135 16-bit Network Number Subnet Planning (continued) NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
Page 339: Figure 214 Conflicting Computer Ip Addresses Example
Appendix C IP Addresses and Subnetting IP Address Conflicts Each device on a network must have a unique IP address. Devices with duplicate IP addresses on the same network will not be able to access the Internet or other resources. The devices may also be unreachable through the network.
Page 340: Figure 216 Conflicting Computer And Router Ip Addresses Example
Appendix C IP Addresses and Subnetting Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet.
Page 341: Appendix D Common Services
7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. User-Defined The IPSEC ESP (Encapsulation Security (IPSEC_TUNNEL) Protocol) tunneling protocol uses this service. FINGER...
Page 342 Appendix D Common Services Table 136 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. H.323 1720 NetMeeting uses this protocol. HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide web.
Page 343 Appendix D Common Services Table 136 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION RTSP TCP/UDP The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. SFTP Simple File Transfer Protocol. SMTP Simple Mail Transfer Protocol is the message-exchange standard for the Internet.
Page 344 Appendix D Common Services ES-3124 Series User’s Guide...
Page 345: Appendix E Importing Certificates
P P E N D I X Importing Certificates This appendix shows importing certificates examples using Netscape Navigator and Internet Explorer 5. This appendix uses the ZyWALL 70 as an example. Other models should be similar. Import Switch Certificates into Netscape Navigator In Netscape Navigator, you can permanently trust the Switch’s server certificate by importing it into your operating system as a trusted certification authority.
Page 346: Figure 218 Login Screen
Appendix E Importing Certificates Figure 218 Login Screen 2 Click Install Certificate to open the Install Certificate wizard. Figure 219 Certificate General Information before Import 3 Click Next to begin the Install Certificate wizard. ES-3124 Series User’s Guide...
Page 347: Figure 220 Certificate Import Wizard 1
Appendix E Importing Certificates Figure 220 Certificate Import Wizard 1 4 Select where you would like to store the certificate and then click Next. Figure 221 Certificate Import Wizard 2 5 Click Finish to complete the Import Certificate wizard. ES-3124 Series User’s Guide...
Page 348: Figure 222 Certificate Import Wizard 3
Appendix E Importing Certificates Figure 222 Certificate Import Wizard 3 6 Click Yes to add the Switch certificate to the root store. Figure 223 Root Certificate Store ES-3124 Series User’s Guide...
Page 349: Figure 224 Certificate General Information After Import
Appendix E Importing Certificates Figure 224 Certificate General Information after Import ES-3124 Series User’s Guide...
Page 350 Appendix E Importing Certificates ES-3124 Series User’s Guide...
Page 351: Appendix F Legal Information
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
Page 352: Zyxel Limited Warranty
3 Select the certification you wish to view from this page. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During...
Page 353 Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Page 354 Appendix F Legal Information ES-3124 Series User’s Guide...
Page 355: Appendix G Customer Support
• Sales E-mail: sales@zyxel.co.cr • Telephone: +506-2017878 • Fax: +506-2015098 • Web: www.zyxel.co.cr • FTP: ftp.zyxel.co.cr • Regular Mail: ZyXEL Costa Rica, Plaza Roble Escazú, Etapa El Patio, Tercer Piso, San José, Costa Rica Czech Republic • E-mail: info@cz.zyxel.com • Telephone: +420-241-091-350 •...
Page 356 • E-mail: info@zyxel.fr • Telephone: +33-4-72-52-97-97 • Fax: +33-4-72-52-19-20 • Web: www.zyxel.fr • Regular Mail: ZyXEL France, 1 rue des Vergers, Bat. 1 / C, 69760 Limonest, France Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • Telephone: +49-2405-6909-69 •...
Page 357 • Sales E-mail: sales@zyxel.in • Telephone: +91-11-30888144 to +91-11-30888153 • Fax: +91-11-30888149, +91-11-26810715 • Web: http://www.zyxel.in • Regular Mail: India - ZyXEL Technology India Pvt Ltd., II-Floor, F2/9 Okhla Phase -1, New Delhi 110020, India Japan • Support E-mail: support@zyxel.co.jp •...
Page 358 • Support E-mail: support@zyxel.com.sg • Sales E-mail: sales@zyxel.com.sg • Telephone: +65-6899-6678 • Fax: +65-6899-8887 • Web: http://www.zyxel.com.sg • Regular Mail: ZyXEL Singapore Pte Ltd., No. 2 International Business Park, The Strategy #03-28, Singapore 609930 Spain • Support E-mail: support@zyxel.es • Sales E-mail: sales@zyxel.es •...
Page 359 • Support E-mail: support@zyxel.co.th • Sales E-mail: sales@zyxel.co.th • Telephone: +662-831-5315 • Fax: +662-831-5395 • Web: http://www.zyxel.co.th • Regular Mail: ZyXEL Thailand Co., Ltd., 1/1 Moo 2, Ratchaphruk Road, Bangrak-Noi, Muang, Nonthaburi 11000, Thailand. Ukraine • Support E-mail: support@ua.zyxel.com • Sales E-mail: sales@ua.zyxel.com •...
Page 360 Appendix G Customer Support ES-3124 Series User’s Guide...
Page 361: Index
Index Index Numerics binding binding table building 802.1P priority BPDUs (Bridge Protocol Data Units) Bridge Protocol Data Units (BPDUs) bridging access control limitations login account certifications remote management notices service port viewing SNMP CFI (Canonical Format Indicator) accounting setup changing the password address learning, MAC 95, 97 CIST...
Page 362 Index backup what it does restore 62, 244 DSCP (DiffServ Code Point) saving dual personality interfaces configuration, saving dynamic link aggregation connections hardware console port settings contact information copying port settings, See port cloning egress port copyright Ethernet broadcast address CPU management port Ethernet port test current date...
Page 363 Index GBIC ports 34, 48 precautions rack-mounting general features rubber feet general setup Internet Assigned Numbers Authority getting help See IANA GMT (Greenwich Mean Time) GVRP 88, 93 capability and port assignment interface GVRP (GARP VLAN Registration Protocol) services setup IP source guard ARP inspection 201, 203...
Page 364 Index MSTI MST ID MSTI (Multiple Spanning Tree Instance) MAC (Media Access Control) MSTP 109, 112 MAC address 76, 281 bridge ID 125, 126 maximum number per port configuration MAC address learning 80, 95, 97, 105, 148 configuration digest specify limit forwarding delay MAC authentication Hello Time...
Page 365 Index ping, test connection example hexadecimal notation for protocols 95, 98 policy 159, 160 isolate traffic and classifier priority 95, 98 and DiffServ configuration PVID 87, 93 example PVID (Priority Frame) overview rules 157, 158 viewing policy configuration port authentication and RADIUS IEEE802.1x 143, 144, 190, 192...
Page 366 Index 117, 120, 124 VLAN status lights safety warnings 109, 293 save configuration 61, 242 bridge ID 118, 121 screen summary bridge priority 116, 119 Secure Shell See SSH configuration 116, 119, 122 designated bridge security forwarding delay 117, 120 service access control Hello BPDU service port...
Page 367 WRR (Weighted Round Robin Scheduling ventilation ventilation holes hardware 87, 90, 91, 169 number of possible VIDs priority frame ZyNOS (ZyXEL Network Operating System) VID (VLAN Identifier) VLAN 79, 87, 293 acceptable frame type automatic registration ES-3124 Series User’s Guide...
Page 368 Index ES-3124 Series User’s Guide...

This manual is also suitable for:

Es-3124 - v3.80 Es-3124 Es-3124f Es-3124-4f

ZyXEL Communications ES-3124PWR User Manual

Chapter 1 Introducing the Switch

Chapter 2 Hardware Installation and Connection

Chapter 3 Hardware Overview

Chapter 4 The Web Configurator

Chapter 5 Initial Setup Example

Chapter 6 System Status and Port Statistics

Chapter 7 Basic Setting

Chapter 8 VLAN

Chapter 9 Static MAC Forward Setup

Chapter 10 Filtering

Chapter 11 Spanning Tree Protocol

Chapter 12 Bandwidth Control

Chapter 13 Broadcast Storm Control

Chapter 14 Mirroring

Chapter 15 Link Aggregation

Chapter 16 Port Authentication

Chapter 17 Port Security

Chapter 18 Classifier

Chapter 19 Policy Rule

Chapter 20 Queuing Method

Chapter 21 VLAN Stacking

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications ES-3124PWR

Summary of Contents for ZyXEL Communications ES-3124PWR