ZyXEL Communications IES-5000 Support Notes
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Switch
  5. IES-5000 Series
  6. Support notes
ZyXEL Communications IES-5000 Support Notes

ZyXEL Communications IES-5000 Support Notes

Zyxel ies-5000: user guide
Hide thumbs Also See for IES-5000:
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual, Support Notes
IES-5000
Support Notes
Oct 2006

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications IES-5000

Summary of Contents for ZyXEL Communications IES-5000

  • Page 1 IES-5000 Support Notes Oct 2006...

  • Page 2: Table Of Contents

    IGMP Snooping/IGMP Filtering Application ..............29 Limiting Internet access to users on specific DSL ports ..........31 DHCP Relay Option 82 Application................... 32 Packet Filtering ........................43 VDSL Application- Triple Play .................... 46 All contents copyright (c) 2005 ZyXEL Communications Corporation.

  • Page 3: Application Notes

    2M/512K 25M/1M Configuring and applying the profiles to subscriber ports For this example, we will use configure the profile on an IES-5000 that connects to ADSL CPEs (ZyXEL Prestige 660R-61). 1. IES-5000 1.1 Profile Setup Configure a profile to set low line speed. Enter a descriptive name for this profile (for...
  • Page 4 MSG1000G> config save 2. Prestige 660R-61 Next configure the CPE device. Set the Prestige 660R-61 to work in bridge mode using the VPI/VCI settings of 0/33 (the default on IES-5000). Since the Prestige All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 5 For bridge mode, select RFC 1483 in the Encapsulation field with LLC-based multiplexing. Also set the Prestige to use the same VPI and VCI settings as the IES-5000 (the default is 0 and 33 respectively). 2.3 Menu11.1: Remote Node Profile In menu 11.1, select Yes in the Active field to activate this remote node profile.
  • Page 6 Edit ATM Options field and press [ENTER] to enter menu 11.6. 2.4 Menu11.6: Remote Node ATM Layer Options Make sure the VPI and VCI settings are the same as on the IES-5000 (the default is 0 and 33 respectively).

  • Page 7: Configuring 802.1Q Vlan

    VLAN10 Setting up a VLAN For this application, we will use an IES-5000 and Prestige ADSL 660R-61 CPE (any DSL CPE or P791 if you have the SLC-1248G line card installed on the IES). Since the two ports belonging to different VLANs need Internet access via the Uplink port...
  • Page 8 IES-5000 Support Notes on the IES-5000, another VLAN (to which the two ports are a member of) need to be configured. 1. IES-5000 Settings 1.1 VLAN settings Create a VLAN group with VID 10 and set Port 1, ENET1 and ENET2 to be members of this VLAN.

  • Page 9: Triple Play Application

    This helps eliminate congestion and to allow smooth transmission of real time data (such as audio and video). In this application, we will show you how to set up multiple PVCs using the IES-5000. The following figure shows a network example where the computers want to get different services (data service for Internet access and video service) from two networks.
  • Page 10 This section shows you how to configure settings on the devices for this application. In this network application, we will use an IES-5000, a ZyXEL ES-2024 VLAN-aware switch and Prestige 660R-61 CPE (you may also use P791 if you have the SLC-1248G line card installed on the IES).
  • Page 11 2. Prestige 660R-61(P791) Settings On the CPE, we need to configure two channels: 0/33 and 0/34. The previous application example already shows you how to configure a channel (0/33) on the CPE. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 12 Edit ATM Options field and press [ENTER] to enter menu 11.6. 2.2 Menu11.6: Remote Node ATM Layer Options Make sure the VPI and VCI settings are the same as on the IES-5000 (the default is 0 and 34 respectively).
  • Page 13 IES-5000 Support Notes Create a VLAN with VID of 10. Assign ports 1 and 10 to be members of VLAN10. Select the Tx Tagging option to enable egress tagging on port 10. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 14 Select the Tx Tagging option to enable egress tagging on port 10. 3.2 PVID setup Click Advanced Application and VLAN in navigation panel to display the configuration screen as shown. Clic k VLAN Port Setting to show VLAN Port Setting screen. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 15 IES-5000 Support Notes Set the PVIDs on port 1 and 2 to 10 and 20 respectively. After the configuration on the devices are complete, video traffic will go through the All contents copyright (c) 2005 ZyXEL Communications Corporation.

  • Page 16: 802.1X Application

    RFC2138, 2139) for centralized user profile management on a network RADIUS server. The following figure shows a network example where the IES-5000 acts as an authenticator to provide 802.1x authentication. In this example, the supplicants (PC1 and PC2) want to gain access to the application server.
  • Page 17 Enable 802.1x Authentication and specify the RADIUS server IP address, UDP port and shared Secret on the IES-5000. Make sure you enter the same UDP port and shared secret as the RADIUS server. Then save the settings to make them take effect.
  • Page 18 Microsoft 802.1x client software. 3.1 802.1x/MD5-challenge setup Open the Local Area connection Properties screen and click the Authentication tab. Select Enable IEEE 802.1x authentication for this network and select MD5-challenge in the EAP type field. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 19 The following figure shows an example. Click on the message balloon to display the login screen where you can enter your account All contents copyright (c) 2005 ZyXEL Communications Corporation.

  • Page 20: Syslog Server Application

    (such as Syslodd in Unix and Kiwi Syslog Daemon ( http://www.kiwisys log.com/ When the DSL or Ethernet connections are up or down, the IES-5000 sends a log record to the syslog server. You must install the syslog server on the network that the IES-5000 can access.
  • Page 21 ADSL/SHDSL modem Setting up a Syslog server In this section, we will show you how to configure the IES-5000 and Kiwi Syslog server. The subsequent sections describe the detailed configuration steps. 1. Installing and Running Kiwi’s Syslog Server Download the Kiwi syslog daemon installation file from the web site and double-click the file to start the installation process.
  • Page 22 TGE1> sys syslog facility 1 TGE1> config save When the DSL connection is up or down, the IES-5000 sends a log record to the syslog server. You can see the new entry in the syslog server. The following shows an example.

  • Page 23: Ring Topology Application

    Setting up a Ring Environment This section shows you how to set up a ring network using an IES-5000, IES-2000 and an ES-4024 switch. The computers should be able to connect to each other even though an uplink connection is down. The following sections describes the configuration steps in detail.
  • Page 24 In the web configurator, click Port Setup in the navigation panel to display the configuration screen as shown. Click msc to display the configuration screen for the Ethernet ports on the MSC line card. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 25 IES-5000 Support Notes Click Uplink2 to configure this port. Select Rapid Spanning Tree Protocol to enable it on the port. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 26 IES-5000 Support Notes Follow the same procedure to activate STP on uplink port 1. The following figure shows an example. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 27 Tree Protocol in the navigation panel. The main Spanning Tree Protocol Status screen displays. Click Configuration to configure spanning tree protocol settings. Select Active to enable Spanning Tree Protocol on the system and then enable STP on All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 28 2 becomes BLOCKING. To test the RSTP/STP mechanism, disconnect the Ethernet cable between uplink port 1 on the IES-5000 and port 1 on the ES-4024. The computers can still access the network through the CPE devices since traffic now goes through IES-2000.

  • Page 29: Igmp Snooping/Igmp Filtering Application

    IGMP groups. This feature is useful for video service providers as they only need to allow certain, but not all, channels (or multicast groups) on specific ports. Internet Video Server IES-5000(ALC/SLC) IGMP Ethernet Port Router Port 1 ADSL/SHDSL Video Client All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 30 On the IES-5000, create an IGMP filter profile (Subscriber1) and apply the profile to port 1. Then apply the profile to the subscriber port (7-1). Save the settings to make it take effect.

  • Page 31: Limiting Internet Access To Users On Specific Dsl Ports

    PC 2 PC 3 Setting up MAC Filter/Port Security In this section, we will show you how to configure the IES-5000 to allow only computers with the specified MAC addresses to access the Internet through port 3. 1. IES-5000 settings 1.1 Configuring MAC filter...

  • Page 32: Dhcp Relay Option 82 Application

    To set up this flexible client IP address assignment scheme, configure the They DHCP Relay Option 82 feature and set up a DHCP server that supports the Option 82 function. The following figure shows a network example. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 33 (192.168.1.99) to assign this computer an IP address in the client IP pool of 192.168.1.201~192.168.1.203. 1. IES-5000 settings On the IES-5000, enable DHCP relay and specify the IP address of the DHCP server (192.168.1.99). Then enable Option82 and enter “5000” as the string. CI command: TGE1>...
  • Page 34 Display the IP Commander screen and right-click on IP Commander and then click Connect New Server”. Enter the IP address (for example, 192.168.1.99) or domain name of the DHCP server and click OK. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 35 IES-5000 Support Notes Enter the login user name and password. The default user name is “administrator” and the password is “incognito”. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 36 A screen displays as shown. Make sure that the status of your DHCP is online. Then click Wizards > Rule Wizard in the tool bar. Enter a name and description for the new rule. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 37 IES-5000 Support Notes Assign one or a range of IP addresses for this rule. For this example, set the client IP pool in the 192.168.1.201 ~ 192.168.1.203 range. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 38 For port 25, VLAN 1, option string “5000”, enter “0019000131323438” as the key value and click OK. Note that the first two bytes define the port number, the second two bytes define the VLAN ID and the subsequent bytes indicate the Option82 string. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 39 IES-5000 Support Notes After you have finished the rule wizard settings, the following screen displays. Click Next to continue. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 40 In the next wizard screen, click Next to continue. In next screen, you may specify a DHCP template (with the gateway and DNS settings) to use. Here we will create a ne w template. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 41 IES-5000 Support Notes For this template, we enter “192.168.1.1” as the gateway IP address for the DHCP client. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 42 IES-5000 Support Notes In the next screen, you may choose whether to apply automatic DDNS service on the DHCP server or not. Click Finish to complete the wizard setup. All contents copyright (c) 2005 ZyXEL Communications Corporation.

  • Page 43: Packet Filtering

    DHCP server once the computer is connected to the network. Packet Filtering The packet filtering feature on the IES-5000 allows ISPs to block certain packet types (such as IP, ARP, DHCP, EAPoL, PPPoE, NETBIOS and IGMP). All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 44 Packet. Ex. NetBIOS Client 1 Setting up Packet Filtering In this section, we will show you how to configure the IES-5000 to block NETBIOS protocol packets. 1. IES-5000 settings (ALC-1248G/SLC 1248G) Type the following commands to enable packet filtering on the specific slot-port.
  • Page 45 7-26 accept-all 7-27 accept-all 7-28 accept-all 7-29 accept-all 7-30 accept-all 7-31 accept-all 7-32 accept-all 7-33 accept-all 7-34 accept-all 7-35 accept-all 7-36 accept-all 7-37 accept-all 7-38 accept-all 7-39 accept-all 7-40 accept-all 7-41 accept-all All contents copyright (c) 2005 ZyXEL Communications Corporation.

  • Page 46: Vdsl Application- Triple Play

    The following figure depicts a network example where three PVCs are used for multiple services (Data, Voice and Video) on the IES-5000 on which a VDSL line card is installed. In addition, IEEE VLAN and 802.1p are set up to guarantee smooth Voice and Video streaming through the network.
  • Page 47 IES-5000 Support Notes # IES5000 Settings 1. Log into the web configurator on to the IES-5000. The default in-band management IP address of the IES-5000 is 192.168.1.1. On the login screen, enter the default user name (‘admin’) and password (‘1234’).
  • Page 48 IES-5000 Support Notes 2. Set up the IP address. Click Sys > IP Setup and set the IP address of the IES-5000 to 192.168.1.100 and the subnet mask to 255.255.255.0 for this example network. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 49 Enter a descriptive name in the Name field (for example, U35D65_INTE) and specify the Latency Mode. Then set the Max Rate of Downstream/Upstream fields (for example, 65Mbps/35Mbps) and configure the other related fields. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 50 VDSL ports you would like to apply the VDSL profile you have just created. For this example, choose Slot 3 and Port 1. Select Enable and select U35D65_INTE in the VDSL Profile field. Click Apply to save the changes. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 51 IES-5000 Support Notes 5. Click Setup in the VLAN field to create three VLANs: VLAN 1 (for DATA), VLAN 102 (for VOICE) and VLAN 103 (for VIDEO) on the VDSL port. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 52 IES-5000 Support Notes a. Create VLAN 1 VLAN 1 is created by default. Click Modify and select the Tag option. Click Apply save the configuration. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 53 IES-5000 Support Notes b. Create VLAN 102 Configure a new VLAN and enter 102 in the VID field. Select the Tag option. Click Apply to save the configuration. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 54 IES-5000 Support Notes c. Create VLAN 103 Configure the third VLAN and enter 103 in the VID field. Select the Tag option. Click Apply to save the configuration. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 55 IES-5000 Support Notes 6. Configure VLANs on ENET Port 3 (up1) Configure VLAN 1 Select Index 1 and click Modify. Select the Tag option for up1. Click Apply to save the changes. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 56 IES-5000 Support Notes b. Configure VLAN 102 Select Index 2 and click Modify. Select Fix in the Registration field and select the Tag option for up1. Click Apply to save the changes. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 57 IES-5000 Support Notes c. Configure VLAN 103 Select Index 3 and click Modify. Select Fix in the Registration field and select the Tag option for up1. Click Apply to save the changes. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 58 IES-5000 Support Notes 7. Enable IGMP Proxy on the IES-5000 Click Multicast > IGMP in the navigation panel to display the configuration screen. Select Enable_IGMP_Proxy in the IGMP Mode field and click Apply to save the changes. Enter 103 in the Add Static Query VLAN field and click Apply to save the changes.
  • Page 59 IES-5000 Support Notes 8. Save the configuration permanently on the IES-5000. Click Config Save > Config Save in the navigation panel and then click Save to save your configurations. # Configuring the P870MH-C1 1. Log into the management interface on the device through Telnet. Access SMT menu 24.8 to go into the command mode.
  • Page 60 VID. Associate VLAN1 to port 1, VLAN 102 to port 2 and VLAN 103 to port 3 without transmitting Tagged frames. Also, add the VLAN tags (1, 102 & 103) to the outgoing traffic on the VDSL port. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 61 2 and 3. This allows VoIP and IPTV traffic to get processed first during network congestion. On the other hand, assign a low priority on port 1 since Internet access is not time sensitive. 5. Check whether all the settings are correct. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 62 IES-5000 Support Notes # ES2024A Settings 5. Log into the web configurator on the ES-2024A. The default management IP address is 192.168.1.1. Enter the default password ‘1234’ to log into the device. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 63 6. Set the IP address of the ES-2024A to 192.168.1.200. Click Basic Setting> IP Setup in the navigation panel and enter 192.168.1.100 in the IP Address field and enter 255.255.255.0 in the IP Subnet Mask field. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 64 Select ACTIVE to enable this VLAN. Select Tx Tagging on port 24 and leave this option unchecked for all other fields. Select Forbidden for switch ports 1, 2 and 4. Then click Add to save the settings for VLAN 1. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 65 Select Tx Tagging on port 24 and leave this option unchecked for all other fields. Select Fixed for switch ports 1, 2 and 24. Then click Add to save the settings for VLAN 102. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 66 Select Tx Tagging on port 24 and leave this option unchecked for all other fields. Select Fixed for switch ports 4 and 24. Then click Add to save the settings for VLAN 103. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 67 # P660H settings 9. Access the management interface on the P660HW-61 using Telnet. The default management IP address of P660H-61 is 192.168.1.1. Enter the default password of ‘1234’ to log into the device. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 68 Access SMT menu 1 and specify the system name. Then select Y es in the Bridge field. 4. Access SMT menu 3.2. Change the P660H-61’s IP address to 192.168.1.10 and select None in the DHCP field to disable the DHCP server on the P-660H-61. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 69 Create a PVC for Data access (Internet access) Access SMT menu 11.1 and set the settings in the following fields. Rem Node Name=Data Active=Yes Encapsulation= RFC 1483 Multiplexing= LLC-based Route=None Bridge=Yes. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 70 Then press [ENTER] to save the changes. b. Create a PVC for the Voice channel Access SMT menu 11.2 and set the settings in the following fields: Rem Node Name=Voice Active=Yes Encapsulation= RFC 1483 Multiplexing= LLC-based Route=None Bridge=Yes. All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 71 Access SMT menu 11.3 and set the settings in the following fields: Rem Node Name=Video Active=Yes Encapsulation= RFC 1483 Multiplexing= LLC-based Route=None Bridge=Yes Select Y es in the ATM options field. Enter 0 and 35 in the VPI and VCI fields All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 72 Access SMT menu 24.8 Enter sys triple port set 1 1 to bind PVC1 to Ethernet port 1 (Data) Enter sys triple port set 2 2 to bind PVC 2 to Ethernet port 2 (Voice) All contents copyright (c) 2005 ZyXEL Communications Corporation.
  • Page 73 Enter sys triple port set 3 3 to bind PVC 3 to Ethernet port 3 (Video) 7. Access SMT menu 24.1 and check whether the ADSL physical layer is UP and check whether the PVC counter is counting. All contents copyright (c) 2005 ZyXEL Communications Corporation.

Table of Contents