Manuel d'utilisation / d'entretien du produit ES-4124 du fabricant ZyXEL Communications
Aller à la page of 466
www .zyxel.com ES-4124 Intelligent Layer 3+ Switch User ’ s Guide Ve r s i o n 3 . 8 4/2007 Edition 1 DEFAULT LOGIN IP Address http://1 92 .168.1.1 User Name admin Password 1234.
.
About This User's Guide ES-4124 User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who wa nt to configu re the ES-4124 using the web configurator or via commands. Y ou should have at least a basic knowledg e of TCP/IP networking conce pts and topology .
Document Conventions ES-4124 User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide.
Document Conventions ES-4124 User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The Switch icon is n ot an exact representation of your device.
Safety Warnings ES-4124 User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids.
Safety Warnings ES-4124 User’s Guide 7 This product is recyclable . Dispose of it properly ..
Safety Warnings ES-4124 User’s Guide 8.
Contents Overview ES-4124 User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 35 Getting to Know Y our Sw itch .............. ..
Contents Overview ES-4124 User’s Guide 10 IP Multicast ..................... ................. ................ ............. ................ ................ ............... ........... . 253 Differentiated Services ................. .............
Table of Contents ES-4124 User’s Guide 11 Table of Contents About This User's Guide ..................................................... ................................................... .. 3 Document Conventions.............................
Table of Contents ES-4124 User’s Guide 12 3.1.3 Mini-GBIC Slots ............... ................ ................ ................ ................ ................ ......... .4 6 3.2 Rear Panel ............. ............. ................ .........
Table of Contents ES-4124 User’s Guide 13 7.4 Introduction to VLANs .... ................ ................ ................ ................ ................. .............. ..... 79 7.5 Switch Setup Screen . ................ ................ ......
Table of Contents ES-4124 User’s Guide 14 1 1.1 STP/R STP Overview ... ................ ................ ................ ................ ................. ................ . 1 09 1 1.1.1 STP T erminology . ................ ................ .......
Table of Contents ES-4124 User’s Guide 15 16.1.2 MAC Authentication ............................. ................ ................ ................. ................ . 144 16.2 Port Authentication Config uration ..... ................ .............
Table of Contents ES-4124 User’s Guide 16 Chapter 22 Multicast .......................................................................................... ................................ ...... 175 22.1 Multicast Overview ............. .............
Table of Contents ES-4124 User’s Guide 17 24.5.2 DHCP Snooping VLAN Configure ........ ... ................. ................ ................ ............. . 215 24.6 ARP Inspection S tatus ...... ................ ................ .................
Table of Contents ES-4124 User’s Guide 18 29.1 IGMP Overview ....................... ................ ................ ................ ................ ................ ..... ... 245 29.1.1 How IGMP Works ........... ................ ..............
Table of Contents ES-4124 User’s Guide 19 33.5 Configuring DHCP VLAN Settings ........ ................ ................ ............. ................ ........... 268 33.5.1 Example: DHCP Relay for T wo VLA Ns ... ............. ............. ......
Table of Contents ES-4124 User’s Guide 20 36.3.4 Configuring SNMP .................. ................. ................ ................ ................ ........... 294 36.3.5 Configuring SNMP Trap Group ......... ............. ................ ...
Table of Contents ES-4124 User’s Guide 21 42.1 ARP T able Overview ........ ................ ................ ................. ................ ................ ............. .3 2 3 42.1.1 How ARP Works ........ ................ ................. .
Table of Contents ES-4124 User’s Guide 22 Chapter 46 User and Enable Mode Commands .................................................................... ................. 385 46.1 Overview ................. ................. ............ ............
Table of Contents ES-4124 User’s Guide 23 48.2.6 mirror ...... ................ ................ ................ ................. ................ ................ ......... ..... 407 48.2.7 gvrp . ................. ................ ..............
Table of Contents ES-4124 User’s Guide 24 52.1 Problems S tarting Up the Switch ......... ................. ............. ................ ................ .............. 425 52.2 Problems Accessing the Sw itch .............. ................ ......
List of Figures ES-4124 User’s Guide 25 List of Figures Figure 1 Backbone Application ....................... ................ ................ ................... ................. ..... .............. 37 Figure 2 Bridging Application ......... ...
List of Figure s ES-4124 User’s Guide 26 Figure 39 Advanced Application > VL AN > VLAN Port Setting > Protocol Bas ed VLAN ... ................ ... 99 Figure 40 Protocol Based VLAN C onfiguration Example .. .................... ............
List of Figures ES-4124 User’s Guide 27 Figure 82 Advanced Application > Mu lticast > Multicast Setting . ................ ................ ................... ..... 177 Figure 83 Advanced Application > Multicast > Multicast Setting > IGMP Snooping VLAN .
List of Figure s ES-4124 User’s Guide 28 Figure 125 IP Application > OSP F Configuration > O SPF Interfac e ..... ................ ................ .............. 241 Figure 126 IP Application > OSP F Configuration > O SPF Virtual Link .
List of Figures ES-4124 User’s Guide 29 Figure 168 Management > Maintenance ....... ................ ................... ................ .................... ........... ... 2 83 Figure 169 Load Factory Default: S tart ........... ... ..........
List of Figure s ES-4124 User’s Guide 30 Figure 21 1 Java (Sun) ........ ... ................ ................ ................ ................. ................ ............. ......... ........ 431 Figure 212 Network Number and Host ID ...........
List of Tables ES-4124 User’s Guide 31 List of Tables T able 1 Panel Connections ... ................ ................ .................... ................ ................ ............. ............. ... 45 T able 2 LEDs . ................ .......
List of Tables ES-4124 User’s Guide 32 T able 39 Advanced Applicat ion > Link Aggregation > Link Aggregation Setting > LACP ................... . 139 T able 40 Advanced Applicati on > Port Authenticat ion > 802.1x ..... ..............
List of Tables ES-4124 User’s Guide 33 T able 82 IP Application > S tatic Routing .. ................ .................... ................ ................ ............... ........ . 229 T able 83 IP Application > RIP ............ ...........
List of Tables ES-4124 User’s Guide 34 T able 125 Management > D iagnostic .......... ................ ................ ................ ................... ............... ..... . 307 T able 126 Syslog Sev erity Levels ................... ......
35 P ART I Introduction Getting to Know Y our Switch (37) Hardware Installation and Connectio n (41) Hardware Overview (45).
36.
ES-4124 User’s Guide 37 C HAPTER 1 Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction The ES-4124 is a stand-alone layer 3 Etherne.
Chapter 1 Getting to Know Your Switch ES-4124 User’s Guide 38 1.1.2 Bridging Example In this example application the Switch co nnects dif ferent company de partments ( RD and Sales ) to the corpora te backbone. It can al levi ate bandwidth contention and eliminate server and network bottlenecks.
Chapter 1 Getting to Kn ow Your Switch ES-4124 User’s Guide 39 Figure 3 High Performance Switched Workgroup Ap plication 1.1.4 IEEE 802.1Q VLAN Application Examples A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks.
Chapter 1 Getting to Know Your Switch ES-4124 User’s Guide 40 • W eb Configurator . This is recommended for everyday management of the Switch using a (supported) web browser . See Chapter 4 o n page 53 . • Command Line Interface. Line commands offe r an alternative to the W e b Configurator and may be necessary to configure advanced features.
ES-4124 User’s Guide 41 C HAPTER 2 Hardware Installation and Connection This chapter shows you how to in stall and connect the Switch. 2.1 Freest anding Inst allation 1 Make sure the Switch is clean and dry . 2 Set the Switch on a smooth, level surface stro ng enou gh to support the weight of the Switch and the connected cables.
Chapter 2 Hardware Installation and Connection ES-4124 User’s Guide 42 " For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and 3.4 inches (8 cm) at the back of the Switch. This is especially important for enclosed rack installations.
Chapter 2 Hard ware Installation an d Connection ES-4124 User’s Guide 43 3 Repeat steps 1 and 2 to install the second mounting br acket on the other side of the Switch.
Chapter 2 Hardware Installation and Connection ES-4124 User’s Guide 44.
ES-4124 User’s Guide 45 C HAPTER 3 Hardware Overview This chapter describes the front panel and rear panel of the Switc h and shows you how to make the hardware conn ections. 3.1 Panel Connections The figure below shows the fro nt panel of the Switch.
Chapter 3 Hard ware Overview ES-4124 User’s Guide 46 3.1.1 Console Port For local management, you can use a computer w ith terminal emulation software configured to the following parameters: • VT1.
Chapter 3 Hardware Overview ES-4124 User’s Guide 47 There are two pairs of Gigabit Ethernet/mini-GB IC ports. The mini-GBI C ports have priority over the Gigabit port s. This means that if a mini-GBIC port and the corresponding Gigabit port are connected at the same time, the Gigabit port will be disabled.
Chapter 3 Hard ware Overview ES-4124 User’s Guide 48 Figure 1 1 Opening the T ransceiver’s Latch Example 2 Pull the transceiver out of the slot. Figure 12 T ransceiver Removal Example 3.2 Rear Panel The following figures sh ow the rear panels of the AC an d DC power input model switches.
Chapter 3 Hardware Overview ES-4124 User’s Guide 49 T o connect the power to the ES- 4124 AC unit, insert the female end of power cord to the power receptacle on the rear panel. Connect th e other end of the supplied power cord to a 100~240V AC, 1.5A power outlet.
Chapter 3 Hard ware Overview ES-4124 User’s Guide 50 Gigabit Ports LNK/ACT Green Blinking The system is trans mitting/receiving to/from a 10/1000 Mbps Ethernet network. On The link to a 10/1000 Mbps Ethernet network is up. Amber Blinking The system is transmitting/re ceiving to/from a 100 Mbps Ethernet network.
51 P ART II Basic Configuration The W eb Configurator (53 ) Initial Setup Example (63) System Status and Port S tatistics (69) Basic Setting (75).
52.
ES-4124 User’s Guide 53 C HAPTER 4 The Web Configurator This section introduces the con figuration and functions of the web config urator . 4.1 Introduction The web configurator is an HTML-based mana ge ment inter face that a llows easy Switch setup and management via Interne t browser .
Chapter 4 The Web Configurator ES-4124 User’s Guide 54 Figure 15 Web Configura t or: Login 4 Click OK to view the first w eb configurator screen. 4.3 The St atus Screen The St a t u s screen is the firs t screen that displa ys when you acces s the web configurator .
Chapter 4 The Web Configurator ES-4124 User’s Guide 55 B - Click this link to save your configuration into the Switch’ s nonvolatile memory . Nonvolatile memory is saved in the configuration file from which the Switch booted from and it stays the same even if the Switch’ s power is turned off.
Chapter 4 The Web Configurator ES-4124 User’s Guide 56 The following table lists the various web configurator screens within the sub-links. T able 4 W eb Configurat or Screen Sub -links Details BASI.
Chapter 4 The Web Configurator ES-4124 User’s Guide 57 The following table describes the links in the navigation panel. T able 5 Navigation Panel Links LINK DESCRIPTION Basic Settings System Info This link takes you to a scr een that displays general system and hardware monitoring information.
Chapter 4 The Web Configurator ES-4124 User’s Guide 58 Auth and Acct This link takes you to a scr een where yo u can configure authentica tion and accounting services via external servers. The external servers can be either RADIUS (Remote Authentication Dial-In User Service) or T ACACS+ (T erminal Access Controller Access-Control System Plus).
Chapter 4 The Web Configurator ES-4124 User’s Guide 59 4.3.1 Change Y our Password After you log in for the first time, it is reco mmended y o u change the default ad ministrator password. Click Management , Access Control and then Logins to display the next screen.
Chapter 4 The Web Configurator ES-4124 User’s Guide 60 6 Forget the password and/or IP address. 7 Prevent all services from accessing the Switch. 8 Change a service port nu mber but forget it. " Be careful not to lock y ourself and others out of the Switch.
Chapter 4 The Web Configurator ES-4124 User’s Guide 61 Figure 18 Resetting the Switch: V ia the Console Port The Switch is now reinitialized wi th a defau lt configuration file including the default password of “1234”. 4.7 Logging Out of the W eb Configurator Click Logout in a screen to exit the web configurator .
Chapter 4 The Web Configurator ES-4124 User’s Guide 62.
ES-4124 User’s Guide 63 C HAPTER 5 Initial Setup Example This chapter shows how to set up the Switch for an example network. 5.1 Overview The following lists the configura tion steps for the example network: • Configure an IP interface • Configure DHCP server settings • Create a V LAN • Set port VLAN ID • Enable RIP 5.
Chapter 5 Initial Set up Example ES-4124 User’s Guide 64 2 Open your web browser and enter 19 2.168.0.1 (the default MGMT port IP address) in the address bar to access the web configurat or . See Section 4.2 on page 53 for more information. 3 Click Basic Setting and IP Setup in the navigation panel.
Chapter 5 Initial Set up Example ES-4124 User’s Guide 65 5.1.3 Creating a VLAN VLANs confine broadcast frames to the VLAN gr oup in which the port(s) belongs. Y ou can do this with port-based VLAN or tagged static VLAN with fixed port members. In this example, you want to con figure port 1 as a member of VLAN 2.
Chapter 5 Initial Set up Example ES-4124 User’s Guide 66 " The VLAN Group ID field in this screen and the VID field in the IP Se tup screen refer to t he same VLAN ID. 3 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to configure port 1 to be a permanent member of the VLAN only .
Chapter 5 Initial Set up Example ES-4124 User’s Guide 67 5.1.5 Enabling RIP T o exchange routing information with other ro uting devices across different routing domains , enable RIP (Routing Inform ation Protocol) in the RIP screen. 1 Click IP Application and RIP in the navigation panel.
Chapter 5 Initial Set up Example ES-4124 User’s Guide 68.
ES-4124 User’s Guide 69 C HAPTER 6 System Status and Port Statistics This chapter describes the system status (web configurator ho me page) and port details screens. 6.1 Overview The home screen of the web configurato r displays a port statistical summary with links to each port showing statistical details.
Chapter 6 S ystem Status and Port Statist ics ES-4124 User’s Guide 70 6.2.1 St atus: Port Det ails Click a number in the Port column in the St a t u s screen to display indivi dual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch.
Chapter 6 System Status and Port Statistics ES-4124 User’s Guide 71 Figure 24 S tatus: Port Deta ils The following table describes the labels in this screen. T able 7 S tatus > Port Details LABEL DESCRIPTION Port Info Port NO. T his field displays the port number you a re viewing.
Chapter 6 S ystem Status and Port Statist ics ES-4124 User’s Guide 72 Up T ime This field shows the total amount of time the connection has been up. Tx Packet The following fields display detailed information about packets transmitted. TX Packet This field shows the number of good packet s (unicast, mu lticast and broadcast) transmitted.
Chapter 6 System Status and Port Statistics ES-4124 User’s Guide 73 512-1023 This field shows th e number of packet s (including bad packets) received that were between 512 and 1023 octets in length . 1024- 1518 This field shows the number of packets (including bad packet s) received tha t were between 1024 and 1518 octe ts in length.
Chapter 6 S ystem Status and Port Statist ics ES-4124 User’s Guide 74.
ES-4124 User’s Guide 75 C HAPTER 7 Basic Setting This chapter describes how to configure the System Info, General Setup , Switch Setup , IP Setup and Port Setup screens. 7.1 Overview The System Info screen displays general Switch inform ation (such as firmware version number) and hardware polling inform ation (such as fan speeds).
Chapter 7 Basic Setting ES-4124 User’s Guide 76 Figure 25 Basic Setting > System Info The following table describes the labels in this screen. T able 8 B asic Setting > System Info LABEL DESCRIPTION System Name This field displ ays th e descriptive name of the Switch for identificati on purposes.
Chapter 7 Basic Setting ES-4124 User’s Guide 77 7.3 General Setup Use this screen to configure general settings such as the system name and time. Cl ick Basic Setting and General Setup in the navigation panel to di splay the screen as shown.
Chapter 7 Basic Setting ES-4124 User’s Guide 78 The following table describes the labels in this screen. T able 9 B asic Setting > General Setup LABEL DESCRIPTION System Name Choose a descriptive name fo r identifi cati on purposes. This name consists of up to 64 printable characters; spaces are allowed.
Chapter 7 Basic Setting ES-4124 User’s Guide 79 7.4 Introduction to VLANs A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Device s on a logical network belong to one group. A device can belong to more than one group.
Chapter 7 Basic Setting ES-4124 User’s Guide 80 Figure 27 Basic Setting > Switch Setup The following table describes the labels in this screen. T able 10 Basic Setting > Switch Setup LABEL DESCRIPTION VLAN T ype Choose 802.1Q or Port Ba sed . The VLAN Setup screen changes depend ing on whether you choose 802.
Chapter 7 Basic Setting ES-4124 User’s Guide 81 7.6 IP Setup Use the IP Setup screen to configure the default gate way device, the default domain name server and add IP domains. 7.6.1 IP Interfaces The Switch needs an IP address for it to be mana ged over the network.
Chapter 7 Basic Setting ES-4124 User’s Guide 82 Figure 28 Basic Setting > IP Setup The following table describes the labels in this screen. Ta b l e 1 1 Basic Setting > IP Setup LABEL DESCRIPTION Default Gateway Enter the IP address of the default outgoi ng gatewa y in dotted decimal notation, for example 192.
Chapter 7 Basic Setting ES-4124 User’s Guide 83 7.7 Port Setup Use this screen to configure Switch port settings.Click Basic Setting > Port Setup in the navigation panel to di splay the configuration screen. Apply Click Apply to save your chan ges to the Switch ’s run-time memory .
Chapter 7 Basic Setting ES-4124 User’s Guide 84 Figure 29 Basic Setting > Port Setup The following table describes the labels in this screen. T able 12 Basic Setting > Port Setup LABEL DESCRIPTION Port This is the port index numbe r . * Settings in this row apply to all port s.
Chapter 7 Basic Setting ES-4124 User’s Guide 85 Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses. Flow Control is used to regul ate transmission of signals to match the bandwidth of the receiving port.
Chapter 7 Basic Setting ES-4124 User’s Guide 86.
87 P ART III Advanced Setup VLAN (89) Stat ic MAC Forward Setup (105) Filtering (107) Spanning T ree Protocol (109) Bandwidth Control (129) Broadcast Storm Control (131) Mirroring (133) Link Aggregati.
88.
ES-4124 User’s Guide 89 C HAPTER 8 VLAN The type of screen you see here depends o n the VLAN T ype you selected in the Switch Setup screen. This chapter shows you how to conf igure 802.
Chapter 8 VLAN ES-4124 User’s Guide 90 8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to auto matically register VLAN membership acros s switches.
Chapter 8 VLAN ES-4124 User’s Guide 91 8.3 Port VLAN T runking Enable VLAN T runking on a port to allow frames belong ing to unknown VLAN groups to pass through that port. This is useful if yo u want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices.
Chapter 8 VLAN ES-4124 User’s Guide 92 8.5.1 St atic VLAN S tatus See Section 8.1 on page 8 9 for more information on Stat ic VLAN. Click Advanced Application > VLAN from the navigation panel to display the VLAN S tatus screen as shown next.
Chapter 8 VLAN ES-4124 User’s Guide 93 The following table describes the labels in this screen. 8.5.3 Configure a St atic VLAN Use this screen to configure and view 80 2.1Q VLAN parameters for the Switch. See Section 8.1 on page 89 for more information on static VLAN.
Chapter 8 VLAN ES-4124 User’s Guide 94 The following table describes the rela ted labels in this screen. 8.5.4 Configure VLAN Port Settings Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q) settings on a port. See Section 8.
Chapter 8 VLAN ES-4124 User’s Guide 95 Figure 35 Advanced Application > VL AN > VLAN Port Setting The following table describes the labels in this screen.
Chapter 8 VLAN ES-4124 User’s Guide 96 8.6 Subnet Based VLANs Subnet based VLANs allow yo u to group traffi c into logical VLANs based on the source IP subnet you specify . When a frame is received on a port , the Switch checks if a tag is added already and the IP subnet it came from.
Chapter 8 VLAN ES-4124 User’s Guide 97 8.7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. " Subnet based VLAN applie s to un-tagged p ackets and is applicable only when you use IEEE 802.
Chapter 8 VLAN ES-4124 User’s Guide 98 8.8 Protocol Based VLANs Protocol based VLANs allow you to group traffi c into logical VLANs based on the protocol you specify . When an upstream frame is receive d on a port (configured fo r a protocol based VLAN), the Switch checks if a tag is added already and its protocol.
Chapter 8 VLAN ES-4124 User’s Guide 99 For example, port 1, 2, 3 and 4 belon g to static VLAN 100, and port 4, 5, 6, 7 be long to static VLAN 120. Y ou c onfigure a protoc ol based VLAN A w ith priority 3 for ARP traffic received on port 1, 2 and 3.
Chapter 8 VLAN ES-4124 User’s Guide 100 The following table describes the labels in this screen. 8.10 Create an IP-based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. Follow these steps: 1 Activate this protocol based VLAN.
Chapter 8 VLAN ES-4124 User’s Guide 101 6 Leave the priority set to 0 and click Ad d . Figure 40 Protocol Based VLAN Con figuration Example T o add more ports to th is protocol based VLAN. 1 Click the index number of the pr otocol based VLAN entry .
Chapter 8 VLAN ES-4124 User’s Guide 102 The port-based VLAN setup sc reen is shown next. The CPU management port forms a VLAN with all Ethernet ports. 8.1 1.1 Configure a Port-based VLAN Select Port Based as the VLAN T ype in the Switch Setup screen and then click VLAN from the navigation panel to display the next screen.
Chapter 8 VLAN ES-4124 User’s Guide 103 Figure 42 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation).
Chapter 8 VLAN ES-4124 User’s Guide 104 The following table describes the labels in this screen. T able 20 Advanced Application > VLAN : Port Based VLAN S etup LABEL DESCRIPTION Setting Wizard Choo se All connected or Po rt isolation . All connected means all p orts can communicate with each other, that is, there are no virtual LANs.
ES-4124 User’s Guide 105 C HAPTER 9 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 9.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of device s on your network.
Chapter 9 Static MAC Forward Setup ES-4124 User’s Guide 106 The following table describes the labels in this screen. T able 21 Advanced Application > S tatic MAC Forwardin g LABEL DESCRIPTION Active Select this check box to activate your rule. Y ou may temporarily deactivate a rule without deleting it by clearing this check box.
ES-4124 User’s Guide 107 C HAPTER 10 Filtering This chapter discusses MAC address port filtering. 10.1 Configure a Filtering Rule Filtering means sifting traffic going through the Switch based on the sour ce and/or destination MAC addresses and VLAN group (ID).
Chapter 10 Filtering ES-4124 User’s Guide 108 Action Select Discar d source to d rop frame from the source MAC address (specified in the MAC field). The Switch can still send frames to the MAC address. Select Discard destination to drop frames to the destination MAC address (specified in the MAC address).
ES-4124 User’s Guide 109 C HAPTER 11 Spanning Tree Protocol The Switch supports Spanning T ree Protocol (STP), Rapid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protocol (MSTP) as defined in the followi ng standards. • IEEE 802.1D Span ning T ree Protocol • IEEE 802.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 0 Path cost is the cost of tr ansmitting a frame onto a LAN thro ugh that port. The recommended cost is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 111 1 1.1.3 STP Port St ates STP assigns five port states to eliminate packet looping. A bridge port is not allowed to go directly from blocking state to forwarding st ate so as to eliminate transient loops.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 2 1 1.1.5 Multiple STP Multiple Spanning T ree Protocol (IEEE 802.1s ) is backward compatibl e with STP/RSTP and addresses the limitations.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 3 Figure 47 MSTP Network Example 1 1.1.5.2 MST Regio n An MST region is a logical grouping of multiple network devices that appears as a single device to the rest of the network. Each MS TP-enabled device can only belong to one MST region.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 4 Figure 48 MSTIs in Different Regions 1 1.1.5.4 Co mmon and Internal Sp anning T ree (CIST) A CIST represents the connectivity of the entire ne twork and it is equivalent to a spanning tree in an STP/RSTP .
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 5 Figure 50 Advanced Application > S pann ing Tree Protocol This screen differs depending on which STP mode (RSTP , MRSTP or MSTP) y ou configure on the Switch. This screen is described in detail in the sectio n that follows the configuration section for each STP mode.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 6 1 1.4 Configure Rapid Sp a nning T ree Protocol Use this screen to configure RSTP settings, see Section 11.1 on page 109 for more information on RSTP . Click RSTP in the Advanced Application > Spanning T ree Pr otocol screen.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 7 Bridge Priority Bridg e priority is used in determini ng the root switch, root port and d esignated port. The switch with the highest priority (low est numeric value) be comes the STP root switch.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 8 1 1.5 Rapid Sp anning T r ee Protocol S tatus Click Advanced App lication > Spanning T ree Protocol in the navigation panel to display the status screen as shown next. See Section 1 1.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 11 9 1 1.6 Configure Multiple Rapid Sp anning T ree Protocol T o configure MRSTP , cli c k MRSTP in the Advanced Application > Spanning T r ee Pro tocol screen. See Section 1 1.1 on page 109 for more information on MRSTP .
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 120 Active Select this check box to activate an STP tree. Clear this checkbox to disable an STP tree. Note: Y ou must also activate Multiple Rapid Sp anning T ree in the Advanced Application > S panning T ree Protocol > Configuration screen to enable MRSTP on the Switch.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 121 1 1.7 Multiple Rapid Sp anning T r ee Protocol S tatus Click Advanced App lication > Spanning T ree Protocol in the navigation panel to display the status screen as shown next. See Section 1 1.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 122 1 1.8 Configure Multiple Sp anning T ree Protocol T o configure MSTP , cl ick MSTP in the Advanced Application > Spanning T ree Pr otocol screen. See Section 1 1.1.5 on page 1 12 for more information on MSTP .
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 123 Figure 56 Advanced Application > S pann ing Tree Protocol > MSTP.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 124 The following table describes the labels in this screen. T able 30 Advanc ed Application > S panning T r ee Protocol > MSTP LABEL DESCRIPTION S tatus Click St a tu s to display the MSTP St atus screen (see Figure 57 on page 126 ).
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 125 1 1.9 Multiple Sp anning T ree Protocol St atus Click Advanced App lication > Spanning T ree Protocol in the navigation panel to display the status screen as shown next. See Section 1 1.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 126 " This screen is only available afte r you activate MSTP on the Switch. Figure 57 Advanced Application > S pann ing Tree Protocol > S tatus: MSTP The following table describes the labels in this screen.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 127 Forwarding Delay (secon d) This is the time (in seconds) the root swit ch will wait before changing states (that is, listening to learning to forwarding ). Cost to Bridge This is the path cost from the root port on this Switch to the root switch.
Chapter 11 Spanning T ree Protoc ol ES-4124 User’s Guide 128.
ES-4124 User’s Guide 129 C HAPTER 12 Bandwidth Control This chapter shows you h ow you can cap the maximum bandwi dth using the Bandwidth Control screen. 12.1 Bandwid th Control Overview Bandwidth control mean s defining a maximum allowable bandwidth for incoming and/or out- going traf fic flows on a port.
Chapter 12 Bandwidth Control ES-4124 User’s Guide 130 Figure 58 Advanced Application > Bandwidth Control The following table describes the re lated labels in this screen. T able 32 Advanc ed Application > Bandwidth Control LABEL DESCRIPTION Active Select this check box to enable bandwidth control on th e Switch.
ES-4124 User’s Guide 131 C HAPTER 13 Broadcast Storm Control This chapter introduces and sh ows you how to configure the broadcast storm co ntrol feature. 13.1 Broadcast S torm Control Setup Broadcast storm control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Swit ch receives per second on the ports.
Chapter 13 Broadcast Storm Control ES-4124 User’s Guide 132 The following table describes the labels in this screen. T able 33 Advanc ed Application > Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable traf fic storm control on the Switch.
ES-4124 User’s Guide 133 C HAPTER 14 Mirroring This chapter discusses port mirroring setup screens. 14.1 Port Mirroring Setup Port mirroring allows you to copy a traffic flow to a monitor port (the port you copy the traffi c to) in order that you can examine the traffi c from the monitor port without interference.
Chapter 14 Mirr oring ES-4124 User’s Guide 134 The following table describes the labels in this screen. T able 34 Advanc ed Application > Mirroring LABEL DESCRIPTION Active Select this check box to activate port mirrori ng on the Switch. Clear this check box to disable the featu re.
ES-4124 User’s Guide 135 C HAPTER 15 Link Aggregation This chapter shows you how to logically aggreg ate physical links to form one logical, high er- bandwidth link. 15.1 Link Aggregation Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher -c apacity link.
Chapter 15 Link Aggregation ES-4124 User’s Guide 136 • Y ou must connect all ports point-to-point to the same Ethernet sw itch and configure the ports for LACP trunking. • LACP only works on full-duplex links. • All ports in the same trunk group must have the same media type, speed, duplex mode and flow control settings.
Chapter 15 Link Aggregation ES-4124 User’s Guide 137 15.4 Link Aggregation Setting Click Advanced App lication > Link Aggregation > Link Aggr egation Setting to display the screen shown next. See Section 15.1 on p age 135 for more information on link aggregation.
Chapter 15 Link Aggregation ES-4124 User’s Guide 138 The following table describes the labels in this screen. 15.5 Link Aggregation Control Protocol Click in the Advanced Application > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next.
Chapter 15 Link Aggregation ES-4124 User’s Guide 139 Figure 63 Advanced Application > Link Aggregatio n > Link Aggre gation Setting > LACP The following table describes the labels in this screen.
Chapter 15 Link Aggregation ES-4124 User’s Guide 140 15.6 S tatic T runking Example This example shows you how to create a static port trunk group for ports 2-5. 1 Make your physi cal conn ections - make sure that the ports that you want to belong to the trunk group are connected to the same de stination.
Chapter 15 Link Aggregation ES-4124 User’s Guide 141 Figure 65 T runking Example - Configuration Screen Y our trunk group 1 ( T1 ) configuration is now complete; you do not need to go to any additional screens.
Chapter 15 Link Aggregation ES-4124 User’s Guide 142.
ES-4124 User’s Guide 143 C HAPTER 16 Port Authentication This chapter describes the IEEE 802. 1x and MAC authentication methods. 16.1 Port Authentication Overview Port authentication is a way to validate access to ports on the Switch to clients based on an external server (authentication server).
Chapter 16 Port Authentication ES-4124 User’s Guide 144 Figure 66 IEEE 802.1x Authentic ation Process 16.1.2 MAC Authentication MAC authentication works in a very similar wa y to IEEE 802.1x authentication. The main difference is that the Switch does not prompt the client for login credentials.
Chapter 16 Port Au thentication ES-4124 User’s Guide 145 16.2 Port Authentication Configuration T o enable port authentication, first activate the port authentica tion method(s) you want to use (both on the Switch and the port(s)) then co nfigure the RADIUS server settings in the Auth and Acct > Radius Server Setup screen.
Chapter 16 Port Authentication ES-4124 User’s Guide 146 The following table describes the labels in this screen. 16.2.2 Activate MAC Authentication Use this screen to activate MAC authentication. In the Port Authentication screen click MAC Authentication to display the configuratio n screen as shown.
Chapter 16 Port Au thentication ES-4124 User’s Guide 147 Figure 70 Advanced Application > Port Au thentication > MAC Authentication The following table describes the labels in this screen.
Chapter 16 Port Authentication ES-4124 User’s Guide 148 * Use this row to make the setting the same for al l ports. Use this row first a nd then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the port s as soon as you make them.
ES-4124 User’s Guide 149 C HAPTER 17 Port Security This chapter shows you how to set up port security . 17.1 About Port Security Port security allows only packets w ith dynami cally learned MAC addresses and/or configured static MAC addresses to pass through a port on the Switch.
Chapter 17 Port Secu rity ES-4124 User’s Guide 150 Figure 71 Advanced Application > Port Security The following table describes the labels in this screen. T able 42 Advanced Application > Port Security LABEL DESCRIPTION Active Select this option to enable port security on the Switch.
Chapter 17 Port Security ES-4124 User’s Guide 151 Apply Click Apply to save your changes to the Switch’s run-time memory . The Switch loses these changes if it i s turned off or loses powe r , so use the Save link on th e top navigation panel to save your changes to the non-volatile memory whe n you are done configuring.
Chapter 17 Port Secu rity ES-4124 User’s Guide 152.
ES-4124 User’s Guide 153 C HAPTER 18 Classifier This chapter introduces and shows you how to configure the packet cl assifier on the Switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a networ k's ability to deliver data with minimum delay , and the networking methods used to control th e use of bandwidth.
Chapter 18 Classifier ES-4124 User’s Guide 154 Figure 72 Advanced Application > Classifier The following table describes the labels in this screen. T able 43 Advanc ed Applicat ion > Classifier LABEL DESCRIPTION Active Select this optio n to enable this rule.
Chapter 18 Classifier ES-4124 User’s Guide 155 Ethernet Ty p e Select an Ethernet type or select Other and enter the Ethernet type number in hexadecimal value. Refer to T able 45 on page 156 for information. Source MAC Address Select Any to apply the rule to all MAC addresses.
Chapter 18 Classifier ES-4124 User’s Guide 156 18.3 V iewing and Editing Classifier Configuration T o view a summary of the classifier configuration, scroll down to th e summar y table at the bottom of the Clas sifier screen. T o change the settings of a rule, click a number in the Index field.
Chapter 18 Classifier ES-4124 User’s Guide 157 Some of the most common IP ports are: 18.4 Classifier Example The following screen shows an example where yo u configure a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2.
Chapter 18 Classifier ES-4124 User’s Guide 158 Figure 74 Classifier: Example.
ES-4124 User’s Guide 159 C HAPTER 19 Policy Rule This chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A classifier distinguishes traffic into flows based on the configured criteria (refer to Chapter 18 on page 153 for more information).
Chapter 19 Policy Rule ES-4124 User’s Guide 160 19.2 Configuring Policy Rules Y ou must first configure a classifier in the Classifier screen. Refer to Section 18.2 on page 153 for more information. Click Advanced App lications > Policy Rule in the navigation panel to display the screen as shown.
Chapter 19 Policy Rule ES-4124 User’s Guide 161 The following table describes the labels in this screen. T able 47 Advanced Application > Policy R ule LABEL DESCRIPTION Active Select this option to enable the policy . Name Enter a descriptive name for identification purposes.
Chapter 19 Policy Rule ES-4124 User’s Guide 162 19.3 V iewing and Editing Policy Configuration T o view a summary of the classifier configuration, scroll down to th e summar y table at the bottom of the Policy screen. T o change the settings of a rule, click a number in the Index field.
Chapter 19 Policy Rule ES-4124 User’s Guide 163 19.4 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out-of-profile traffi c on a traf fic flow cla ssified using the Example classifier (refer to Section 18.
Chapter 19 Policy Rule ES-4124 User’s Guide 164.
ES-4124 User’s Guide 165 C HAPTER 20 Queuing Method This chapter introduces th e queuing methods sup ported. 20.1 Queuing Method Overview Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traf fic.
Chapter 20 Que uing Method ES-4124 User’s Guide 166 20.1.3 We ighted Round Robin Scheduling (WRR) Round Robin Scheduling services queues on a rotati ng basis and is activated only when a port has more traffic than it can handle. A queue is a given an amount of bandwidth irrespective of the incoming traf fic on that port .
Chapter 20 Queuing Me thod ES-4124 User’s Guide 167 Figure 78 Advanced Application > Queuing Method The following table describes the labels in this screen. T able 49 Advanced Application > Queuing Method LABEL DESCRIPTION Method Select SPQ (Strictly Priority Queuing), WF Q (Weighted Fair Queuin g) or WRR (Weighted Round Robi n) .
Chapter 20 Que uing Method ES-4124 User’s Guide 168 * Settings in this row apply to all port s. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis.
ES-4124 User’s Guide 169 C HAPTER 21 VLAN Stacking This chapter shows you h o w to configure VLAN stacking on your Switch. See the chapter on VLANs for more background informatio n on V irtual LAN 21.
Chapter 21 VLAN Stacking ES-4124 User’s Guide 170 Figure 79 VLAN S tacking Exam ple 21.2 VLAN S tacking Port Roles Each port can have three VLAN stacking “roles”, Normal , Access Port and T unnel (the latter is for Gigabit ports only). • Select Normal for “regular” (non-VLAN stacking) IEEE 802.
Chapter 21 VLAN Stacking ES-4124 User’s Guide 171 21.3 VLAN T ag Format A VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of the following three fields. Ty p e is a standard Ethernet type code identifyi ng the frame and indicates that whether the frame carries IEEE 802.
Chapter 21 VLAN Stacking ES-4124 User’s Guide 172 21.4 Configuring VLAN S tacking Click Advanced App lications > VLAN S tacking to dis play the screen as shown. Figure 80 Advanced Application > VLAN S tacking The following table describes the labels in this screen.
Chapter 21 VLAN Stacking ES-4124 User’s Guide 173 Role Select Normal to have th e Switch ignore frames received (or transmitted) on this port with VLAN stacking tags. Anything you configure in SPVID and Priority are ignored. Select Access Port to have the Switch add the SP TPID t ag to al l incoming frames received on this port.
Chapter 21 VLAN Stacking ES-4124 User’s Guide 174.
ES-4124 User’s Guide 175 C HAPTER 22 Multicast This chapter shows you how to conf igure various multicast features. 22.1 Multicast Overview T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybod y on the network).
Chapter 22 Multicast ES-4124 User’s Guide 176 The Switch forwards multicast tr affic destined for multicast gr oups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of that group.
Chapter 22 Multicast ES-4124 User’s Guide 177 Figure 82 Advanced Application > Mult icast > Multicast Setting The following table describes the labels in this screen. T able 55 Advanced Application > Mult icast > Multicast S etting LABEL DESCRIPTION IGMP Snooping Use these settings to configure IGMP Snooping.
Chapter 22 Multicast ES-4124 User’s Guide 178 22.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the screen as shown. See Section 22.
Chapter 22 Multicast ES-4124 User’s Guide 179 Figure 83 Advanced Application > Multicast > Mult icast Setting > IGMP Snooping VLAN The following table describes the labels in this screen.
Chapter 22 Multicast ES-4124 User’s Guide 180 22.5 IGMP Filtering Profile An IGMP filtering profile specif ies a range of multicas t groups that clients connected to the Switch are able to join. A profile contains a range of multicast IP addresses which you want clients to be able to join.
Chapter 22 Multicast ES-4124 User’s Guide 181 22.6 MVR Overview Multicast VLAN Registration (MVR) is designed for applications (such as M e dia-on-Demand (MoD)) that use multicast traffi c across an Ethe rnet ring-based servic e provider network. MVR allows one single multicast VLAN to be shared among dif ferent subscriber VLANs on the network.
Chapter 22 Multicast ES-4124 User’s Guide 182 22.6.2 MVR Modes Y ou can set your Switch to operate in either dynamic or compatible mode. In dynamic mo de, the Switch send s IGMP leave and join reports to the other multicast devices (such as multicast routers or servers) in the mu lticast VLAN.
Chapter 22 Multicast ES-4124 User’s Guide 183 " Y our Switch automatically creates a st atic VLAN (with th e same VID) when you create a multicast VLAN in this screen. Figure 87 Advanced Application > Multic ast > Multicast Setting > MVR The following table describes the re lated labels in this screen.
Chapter 22 Multicast ES-4124 User’s Guide 184 22.8 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Configure MVR IP multicast group address(es) in the Group Configuration screen.
Chapter 22 Multicast ES-4124 User’s Guide 185 Figure 88 Advanced Application > Multicast > Multic ast Setting > MVR: Group Configuration The following table describes the labels in this screen. 22.8.1 MVR Conf iguration Example The following figure shows a n e twork example where ports 1, 2 and 3 on the Switch belong to VLAN 1.
Chapter 22 Multicast ES-4124 User’s Guide 186 Figure 89 MVR Configuration Example T o configure the MVR settings on the Switch, create a multic ast group in the MVR screen and set the receiver and source ports.
Chapter 22 Multicast ES-4124 User’s Guide 187 Figure 91 MVR Group Configuration Exampl e Figure 92 MVR Group Configuration Exampl e.
Chapter 22 Multicast ES-4124 User’s Guide 188.
ES-4124 User’s Guide 189 C HAPTER 23 Authentication & Accounting This chapter describes how to configure authen tication and accounting settings on the Switch. 23.1 Authentication, Auth orization and Accounting Authentication is the process of determining who a user is and validating access to the Switch.
Chapter 23 Authen tication & Accounting ES-4124 User’s Guide 190 23.1.2 RADIUS and T ACACS+ RADIUS and T ACACS+ are security protocols used to authenticate users by means of an external server instead of (or in addition to) an internal device user data base that is limited to the memory capacity of the device.
Chapter 23 Authentication & Accounting ES-4124 User’s Guide 191 Figure 95 Advanced Application > Auth an d Acct > RADIUS Server Setup The following table describes the labels in this screen.
Chapter 23 Authen tication & Accounting ES-4124 User’s Guide 192 23.2.2 T ACACS+ Server Setup Use this screen to configure your T ACACS+ server settings. See Section 23.1.2 on page 190 for more information on T ACACS+ servers. Click on the T ACACS+ Server Setup link in the Authentication and Accounting screen to view the screen as show n.
Chapter 23 Authentication & Accounting ES-4124 User’s Guide 193 Figure 96 Advanced Application > Auth an d Acct > T ACACS+ Server Setup The following table describes the labels in this screen.
Chapter 23 Authen tication & Accounting ES-4124 User’s Guide 194 23.2.3 Authentication an d Accounting Setup Use this screen to configure authentication a nd accounting settings on th e Switch. Click on the Auth and Acct Setup link in the Authentication and Accounting screen to view the screen as shown.
Chapter 23 Authentication & Accounting ES-4124 User’s Guide 195 Figure 97 Advanced Application > Auth and Acct > Auth and Acct Setup The following table describes the labels in this screen.
Chapter 23 Authen tication & Accounting ES-4124 User’s Guide 196 Login The se fields specify which database the S witch sho uld use (first, second and th ird) to authenticate administrator accounts (users for Switch management). Configure the local user accounts in the Access Control > Logins screen .
Chapter 23 Authentication & Accounting ES-4124 User’s Guide 197 23.2.4 V endor Specific Attribute RFC 2865 standard specifies a method for sending vendor -sp ecific information between a RADIUS server and a network acce ss device (for example, the Switch).
Chapter 23 Authen tication & Accounting ES-4124 User’s Guide 198 23.2.4.1 T unnel Protocol Attribute Y ou can configure tunnel protocol attributes on the RADIUS server (refer to your RADIUS server documentation) to assign a port on the Switch to a VLAN based on IEEE 802.
Chapter 23 Authentication & Accounting ES-4124 User’s Guide 199 23.3.1 Attributes U sed for Authentication The following sections list the attributes sent from the Switch to the RADIUS server when performing authentication.
Chapter 23 Authen tication & Accounting ES-4124 User’s Guide 200 23.3.2.2 Attributes Used for Acc ounting Exec Events The attributes are listed in th e following table along with the time that t.
Chapter 23 Authentication & Accounting ES-4124 User’s Guide 201 Calling-S tation-Id DD D NAS-Identifier DD D NAS-Port-T ype DD D Acct-S tatus-T ype DD D Acct-Delay-T ime DD D Acct-Session-Id DD .
Chapter 23 Authen tication & Accounting ES-4124 User’s Guide 202.
ES-4124 User’s Guide 203 C HAPTER 24 IP Source Guard Use IP source guard to filter unauthorized DHCP and ARP packets in your network. 24.1 IP Source Guard Overview IP source guard u s es a binding tabl e to distinguish between authorized and unauthorized DHCP and ARP packets in your network.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 204 T rusted ports are connected to DHCP servers or other switches. The Switch discards DHCP packets from trusted ports only if the rate at which DHCP packets arrive is too high. The Switch learns dynamic bindings from trusted ports.
Chapter 24 IP Source Guard ES-4124 User’s Guide 205 24.1.1.3 DHCP Relay Option 82 Informa tion The Switch can add information to DHCP requests that it does not discard. This provides the DHCP server more information about the source of the requests.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 206 24.1.2.1 ARP Inspection and MAC Address Filters When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet.
Chapter 24 IP Source Guard ES-4124 User’s Guide 207 24.2 IP Source Guard Use this screen to look at the current bi ndings for DHCP snooping and ARP inspection. Bindings are used by DHCP snoo ping and ARP inspection to distinguis h between authorized and unauthorized packets in the network.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 208 Figure 101 IP Source Guard S tatic Binding The following table describes the labels in this screen. T able 70 IP Source Guard Static Binding LABEL DESCRIPTION MAC Address Enter the source MAC add ress in the binding.
Chapter 24 IP Source Guard ES-4124 User’s Guide 209 24.4 DHCP Snooping Use this screen to look at various statistics ab ou t the DHCP snooping da tabase.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 210 The following table describes the labels in this screen. T able 71 DHCP Snooping LABEL DESCRIPTION Dat abase S tatus This section displays the current settings for the DHCP snoo ping database. Y ou can co nfigure them in the DHCP Snooping Configure screen.
Chapter 24 IP Source Guard ES-4124 User’s Guide 21 1 Successful writes Thi s field displays the nu mber of times the Switch updated the bindings in the DHCP snooping da tabase successfully . Failed writes This field displays the number of times th e Switch was u nable to update the bindings in the DHCP snooping database.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 212 24.5 DHCP Snooping Configure Use this scr een to enable DHCP snoopin g on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and configure the DHCP snooping database.
Chapter 24 IP Source Guard ES-4124 User’s Guide 213 24.5.1 DHCP Snoopi ng Port Configure Use this screen to specify whether ports are tr usted or untrusted ports for DHCP snoopin g . " The Switch will drop al l DHCP requests if you enable DHCP sn ooping and there are no trusted ports.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 214 Figure 104 DHCP Snooping Port Configure The following table describes the labels in this screen. T able 73 DHCP Snooping Port Configure LABEL DESCRIPTION Port This field displays the port number .
Chapter 24 IP Source Guard ES-4124 User’s Guide 215 24.5.2 DHCP Snoo ping VLAN Configure Use this scr een to enable DHCP snoopin g on each VLAN and to specify whether or not the Switch adds DHCP relay agen t option 82 informat ion ( Ch apter 33 on page 263 ) to DHCP requests that the Switch relays to a DHCP serve r for each VLAN.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 216 24.6 ARP Inspection St atus Use this screen to look at the current list of MAC address f ilters that were cr eated because the Switch identified an unauthoriz ed A RP packet.
Chapter 24 IP Source Guard ES-4124 User’s Guide 217 Figure 107 ARP Inspection VLAN S tatus The following table describes the labels in this screen. 24.6.2 ARP Inspection Log St atus Use this screen to look at log messages that we re generated by ARP packets and th at have not been sent to the syslog server ye t.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 218 Figure 108 ARP Inspection Log S tatus The following table describes the labels in this screen. T able 77 ARP Inspection Log Status LABEL DESCRIPT.
Chapter 24 IP Source Guard ES-4124 User’s Guide 219 24.7 ARP Inspection Configure Use this screen to enable ARP in spection on the Switch. Y ou can also configure the length of time the Switch stores records of discarded AR P packets and global settings for the ARP inspection log.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 220 24.7.1 ARP Inspection Port Configure Use this screen to specify whether ports are trus ted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at whic h the Switch receives ARP packets on each untrusted port.
Chapter 24 IP Source Guard ES-4124 User’s Guide 221 The following table describes the labels in this screen. 24.7.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packet s from each VLAN.
Chapter 24 IP Source Gua rd ES-4124 User’s Guide 222 The following table describes the labels in this screen. T able 80 ARP Inspec tion VLAN Configure LABEL DESCRIPTION VLAN Use this section to specify the VLANs you want to manage in the section below .
ES-4124 User’s Guide 223 C HAPTER 25 Loop Guard This chapter shows you how to configure the Switch to guard against loops on the edge of your network. 25.1 Loop Guard Overview Loop guard allows you to config ure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch.
Chapter 25 Lo op Guard ES-4124 User’s Guide 224 The following figure shows port N on switch A connected to switch B . Switch B is in loop state. When broadcast or multicast packets leave port N and reach switch B , they are sent back to port N on A as they are rebroadcast from B.
Chapter 25 Loop Guar d ES-4124 User’s Guide 225 " After resolving the loop problem on your network you can re-activate the disabled port via the w eb configurator (see Section 7.7 on page 83 ) or via commands (see Section 45.12.4 on p age 375 ) .
Chapter 25 Lo op Guard ES-4124 User’s Guide 226 Active Select this check box to enable the loop guard feature on this port. The Switch sends probe packets from this port to check if the Sw itch it is connected to is in loop state. If the Switch that this port is connected is in loop state the Switch will shu t down this port.
227 P ART IV IP Application S tatic Route (229) RIP (231) OSPF (233) IGMP (245) DVMRP (249) IP Multicast (253) Differentiated Services (255) DHCP (263) VRRP (271).
228.
ES-4124 User’s Guide 229 C HAPTER 26 Static Route This chapter shows you how to configure static routes. 26.1 Configuring S tatic Routing Stat ic routes tell the Switch how to forward IP traffic when you configure the TCP/IP parameters manually . Click IP Application > S tatic Routing in the navigation pa nel to display th e screen as shown.
Chapter 26 Static Rou te ES-4124 User’s Guide 230 Metric The metric represen ts the “cost” of transmission for rout ing purposes. IP ro uting uses hop count as the measurement of cost, wi th a minimum o f 1 for directly connected networks. Enter a number that approximates the cost for this link.
ES-4124 User’s Guide 231 C HAPTER 27 RIP This chapter shows you h o w to configure RIP (Routi ng Information Protocol). 27.1 RIP Overview RIP (Routing Information Protocol) allows a ro uting device to exchan ge routing information with other routers.
Chapter 27 RIP ES-4124 User’s Guide 232 Figure 1 18 IP Application > RIP The following table describes the labels in this screen. T able 83 IP Application > RIP LABEL DESCRIPTION Active Select this check box to enabl e RIP on the Switch. Index This field disp lays the index number of an IP interface.
ES-4124 User’s Guide 233 C HAPTER 28 OSPF This chapter describes the OSPF (Open Shortest Path First) routing protocol and shows you how to configure OSPF . 28.1 OSPF Overview OSPF (Open Shortest Path First) i s a link-state protocol designed to distribut e routing information within an autonomo us system (AS).
Chapter 28 OSPF ES-4124 User’s Guide 234 The following figure depicts an OSPF networ k example. The backbone is area 0 with a backbone router . The internal routers are in ar ea 1 and 2. The area border routers connect area 1 and 2 to the backbone. Figure 1 19 OSPF Network Examp le 28.
Chapter 28 OSPF ES-4124 User’s Guide 235 Figure 120 OSPF Router Election Example Y ou can assign a priority to an interface which determines whether this router will be elected to be a DR or BDR. The router with the highes t priority becomes the DR , while a router with a priority of 0 does not particip ate in router elections.
Chapter 28 OSPF ES-4124 User’s Guide 236 Figure 121 IP Application > OSPF S tatus The following table describes the labels in this screen. The following table describes some common output fields. T able 86 IP Application > OSPF S tatus LABEL DESCRIPTION OSPF This field displays whether OSPF is activate d ( Running ) or not ( Down ).
Chapter 28 OSPF ES-4124 User’s Guide 237 28.3 OSPF Configuration Use this screen to activate OSPF and set ge neral settings. Click IP Application > OSPF and the Configuration link to display the OSPF Configuration screen. See Section 28.1 on page 233 for more information on OSPF .
Chapter 28 OSPF ES-4124 User’s Guide 238 Figure 122 IP Application > OSPF Configuration: Activati ng and General Settings The follow table describes the related labels in this screen. T able 88 IP Application > OSPF Configuratio n: Activating and General Settings LABEL DESCRIPTION Active OSPF is disa bled by default.
Chapter 28 OSPF ES-4124 User’s Guide 239 28.4 Configure OSPF Areas T o ensure that the Switch receives only routin g information from a trusted layer 3 devices, activate authentication. The OSPF sup ports three authentication methods: • None – no authentication is used.
Chapter 28 OSPF ES-4124 User’s Guide 240 28.4.1 V iew OSPF Area Information T able The bottom of the OSPF Configuration screen displays a summary table of all the OSPF areas you have configured. Figure 124 IP Application > OSPF Configuration: Summary T able The following table describes the re lated labels in this screen.
Chapter 28 OSPF ES-4124 User’s Guide 241 In the OSPF Configuration screen, click Interface to display the OSPF Interface screen. Figure 125 IP Application > OSPF Configuration > OSPF Interface The following table describes the labels in this screen.
Chapter 28 OSPF ES-4124 User’s Guide 242 28.6 OSPF V irtual-Links Configure and view virtual link settings in this screen. See Section 28.1 on page 233 for more information on OSPF . In the OSPF Configuration screen, click V irtual-Link to display the sc reen as shown next.
Chapter 28 OSPF ES-4124 User’s Guide 243 The following table describes the re lated labels in this screen. T able 92 IP Application > OSPF Configuration > OSPF Vir t ual Link LABEL DESCRIPTION Name Enter a descriptive name (up to 32 prin table ASCII characters) for identification purposes.
Chapter 28 OSPF ES-4124 User’s Guide 244.
ES-4124 User’s Guide 245 C HAPTER 29 IGMP This chapter shows you how to configure the Switch as a multicast rout er . See al so Section 22.4 on page 178 for information on IGMP snooping. 29.1 IGMP Overview IP multicast is an IETF standard for distributi ng data to multiple recipients.
Chapter 29 IGM P ES-4124 User’s Guide 246 IGMP (Internet Group Management Protocol) is used by multicast host s to indicate their multicast group membership to multicast router s. Multicast routers can also use IGMP to periodically check if multicast ho sts still want to receive transmission from a multicast server .
Chapter 29 IGMP ES-4124 User’s Guide 247 Figure 129 IGMP V ersion 2 Example IGMP version 3 allows a multicast host to join a multicast group and specify from which source (multicast server) it wants to receive multi cast packets.
Chapter 29 IGM P ES-4124 User’s Guide 248 Figure 131 IP Application > IGMP The following table describes the labels in this screen. T able 93 IP Application > IGMP LABEL DESCRIPTION Active Select this check box to enable IGMP on the Switch. Note: Y ou cannot enable both IGMP snooping and IGMP at the same time.
ES-4124 User’s Guide 249 C HAPTER 30 DVMRP This chapter introduces DVMRP an d tells you how to configure it. 30.1 DVMRP Overview DVMRP (Distance V ector Multicast Routing Protoc ol) is a protocol used for routing multicast data within an autonomous system (AS).
Chapter 30 DVMR P ES-4124 User’s Guide 250 Figure 132 How DVMRP Works 30.2.1 DVMRP T erminology DVMRP probes are used to discover other DVMRP Neighbors on a network.
Chapter 30 DVMRP ES-4124 User’s Guide 251 30.3.1 DVMRP Configuration Error Messages Y ou must have IGMP/RIP enabled when you en able DVMRP; otherwise you see the scre en as in the next figure. Figure 134 DVMRP: IGMP/RIP Not Set Error When you disable IGMP , but DVMRP is still ac tive you also see another warning screen.
Chapter 30 DVMR P ES-4124 User’s Guide 252 Figure 136 DVMRP: Duplicate VID Error Message 30.4 Default DVMRP T imer V alues The following are some default DVMRP timer values.
ES-4124 User’s Guide 253 C HAPTER 31 IP Multicast This chapter shows you how to configure the IP Multicast screen. 31.1 IP Multicast Overview T raditionally , IP pack ets are transmitted in one of either tw o ways - Unicast (one sender to one recipient) or Broadcast (one sender to every body on the network).
Chapter 31 IP Multicast ES-4124 User’s Guide 254 T able 96 IP Application > IP Multicast LABEL DESCRIPTION Port This read-only field displays the port number . * S ettings in this row apply to all por ts. Use this row only if you want to make some se ttings the same for all ports.
ES-4124 User’s Guide 255 C HAPTER 32 Differentiated Services This chapter shows you how to configure Dif fe rentiated Services (DiffServ) on the Switch. 32.1 DiffServ Overview Quality of Service (QoS) is used to prioritize so urce-to-destination traffic flows.
Chapter 32 Differe ntiated Services ES-4124 User’s Guide 256 32.1.2 DiffServ Network Example The following figure depicts a DiffServ networ k consisting of a g roup of directly connected DiffServ-compliant network devices.
Chapter 32 Differentiated Se rvices ES-4124 User’s Guide 257 • Green (low loss priority level) packets are forwarded. TR TCM operates in one of two modes: color-bl ind or color-aware. In color-blind mode, packets are marked based on evaluating against the PIR and CIR regardless of if they have previously been marked or not.
Chapter 32 Differe ntiated Services ES-4124 User’s Guide 258 32.3 Activating DiffServ Activate DiffServ to apply marking rules or I EEE 802.1p pri o rity mapping on the selected port(s). Click IP Application > DiffServ in th e navigation panel to di splay the screen as shown.
Chapter 32 Differentiated Se rvices ES-4124 User’s Guide 259 " Y ou cannot enable both TRTCM and Bandwid th Control at the same time. Figure 143 IP Application > Dif fServ > 2-rate 3 Co lor Marker The following table describes the labels in this screen.
Chapter 32 Differe ntiated Services ES-4124 User’s Guide 260 32.4 DSCP-to-IEEE 802.1p Priority Settings Y ou can configure the DSCP to IEEE 80 2.1p ma pping to allow the Switch to prioritize all traffic based on the in coming DSCP value according to th e DiffServ to IEEE 802.
Chapter 32 Differentiated Se rvices ES-4124 User’s Guide 261 The following table describes the labels in this screen. T able 100 IP Application > DiffServ > DSCP Setting LABEL DESCRIPTION 0 … 63 This is the DSCP classification identification nu mber .
Chapter 32 Differe ntiated Services ES-4124 User’s Guide 262.
ES-4124 User’s Guide 263 C HAPTER 33 DHCP This chapter shows you how to configure the DHCP feature. 33.1 DHCP Overview DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132 ) allows individual computers to obtain TCP/IP configuration at start-up from a server .
Chapter 33 DHCP ES-4124 User’s Guide 264 33.2 DHCP S tatus Click IP Application > DHCP in the navigation panel. The DHCP S tatus screen displays. Figure 145 IP Application > DHCP S tatus The following table describes the labels in this screen.
Chapter 33 DHCP ES-4124 User’s Guide 265 The following table describes the labels in this screen. 33.4 DHCP Relay Configure DHCP relay on the Switch if the DH CP clients and the DHCP server are not in the same broadcast domain.
Chapter 33 DHCP ES-4124 User’s Guide 266 The DHCP Relay Agent Information feature adds an Agent Information field to the Option 82 field. The Option 82 field is in the DHCP headers of client DHCP request frames that the Switch relays to a DHCP server .
Chapter 33 DHCP ES-4124 User’s Guide 267 33.4.3 Global DHCP Re lay Configuration Example The follow figure shows a network exam ple where the Switch is used to relay DHCP reque sts for the VLAN1 and VLAN2 domains. There is only one DHCP server that s ervices the DHCP clients in both domains.
Chapter 33 DHCP ES-4124 User’s Guide 268 33.5 Configuring DHCP VLAN Settings Use this screen to configure your DHCP settin gs based on the VLAN domain of the DHCP clients. Click IP Application > DHCP in the navigation panel, then click the VLAN link In the DHCP S tatus screen that displays.
Chapter 33 DHCP ES-4124 User’s Guide 269 The following table describes the labels in this screen. T able 105 IP Application > DH CP > VLAN LABEL DESCRIPTION VID Enter the ID number of the VLAN to which these DHCP setting s apply . DHCP S tatus Select whether the Swit ch should function as a DHCP Se rver or Relay for the specified VID.
Chapter 33 DHCP ES-4124 User’s Guide 270 33.5.1 Example: DHCP Relay for T wo VLANs The following examp le displays two VLANs (VIDs 1 and 2) for a campus network . T wo DHCP servers are installed to serve each VLAN. The system is set up to forward DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.
ES-4124 User’s Guide 271 C HAPTER 34 VRRP This chapter shows you how to configure and monitor the V irtual Router Redundancy Protocol (VRRP) on the Switch. 34.1 VRRP Overview Each host on a network is configur ed to send pa ckets to a statically co nfigured default gateway (this Switch).
Chapter 34 VRRP ES-4124 User’s Guide 272 If switch A (the master router) is unavailable, switch B takes over . T raffic is then processed by switch B . 34.2 VRRP S tatus Click IP Application > VRRP in the navigation pa nel to display the VRRP S tatus screen as shown next.
Chapter 34 VR RP ES-4124 User’s Guide 273 34.3 VRRP Configuration The following sections describe the differen t parts of the VRR P Configuration screen. 34.3.1 IP Interface Setup Before configuring VRRP , first create an IP interface (or routing domain) in the IP Setup screen (see the Section 7.
Chapter 34 VRRP ES-4124 User’s Guide 274 34.3.2 VRRP Parameters This section describes the VRRP parameters. 34.3.2.1 Advertisement Interval The master router sends out Hello messages to le t the other backup routers know that it is still up and running.
Chapter 34 VR RP ES-4124 User’s Guide 275 34.3.3 Configuring VRRP Parameters After you set up an IP interface, co nfigure the VRRP parameters in the VRRP Configuration screen. Figure 156 IP Application > VRRP Confi guration > VRRP Parame ters The following table describes the labels in this screen.
Chapter 34 VRRP ES-4124 User’s Guide 276 34.3.4 Configuring VRRP Parameters V iew the VRRP configura tion summ ary at the bottom of the screen. Figure 157 VRRP Configuration: Summary The following table describes the labels in this screen. 34.4 VRRP Configuration Examples The following sections show two VRRP configuration examples on the Switch.
Chapter 34 VR RP ES-4124 User’s Guide 277 Figure 158 VRRP Configuration Example: One V irtual Router Network Y ou want to set switch A as the master r outer . Configure the VRRP parameters in the VRRP Configuration screens on the switches as shown in the figures below .
Chapter 34 VRRP ES-4124 User’s Guide 278 Figure 162 VRRP Example 1: VRRP S tatus on Switch B 34.4.2 T wo Subn et s Example The following figure depicts an example in which two switches share the network traffic. Hosts in the two network g roups use different de faul t gateways.
Chapter 34 VR RP ES-4124 User’s Guide 279 Figure 165 VRRP Example 2: VRRP Parameter Settings for VR2 on Switch B After configuring and saving the VRRP config uration, the VRRP S tatus screens for both switches are shown next.
Chapter 34 VRRP ES-4124 User’s Guide 280.
281 P ART V Management Maintenance (283) Access Control (289) Diagnostic (307) Syslog (309) Cluster Managemen t (313) MAC T able (319) IP T able (321) ARP T able (323) Routing T able (325) Configure C.
282.
ES-4124 User’s Guide 283 C HAPTER 35 Maintenance This chapter explains how to configure the ma intenance screens that let you maintain the firmware and configuration files. 35.1 The Maintenance Screen Use this screen to manage firmware and you r configuration files.
Chapter 35 Maintenance ES-4124 User’s Guide 284 35.2 Load Factory Default Follow the steps below to reset the Switch back to the factory defaults. 1 In the Maintenance screen, click the Click Here button next to Load Fac tory Default to clear all Switch configuration informatio n y ou configured and return to th e factory defaults.
Chapter 35 Maintenance ES-4124 User’s Guide 285 35.4 Reboot System Reboot System allows you to restart the Switch withou t physically turning the power off. It also allows you to lo ad configuration o ne ( Config 1 ) or configuration two ( Config 2 ) when you reboot.
Chapter 35 Maintenance ES-4124 User’s Guide 286 35.6 Restore a Configuration File Restore a previously saved configuration fro m your computer to the Switc h using the Restore Configuration screen.
Chapter 35 Maintenance ES-4124 User’s Guide 287 35.8 FTP Command Line This section shows some examples of uploadin g to or downloading files from the Switch using FTP commands.
Chapter 35 Maintenance ES-4124 User’s Guide 288 5 Enter bin to set transfer mode to binary . 6 Use put to transfer files from the comput er to the Switch, for example, put firmware.bin ras transfers the firmware on your computer (firmware.bin) to the Switch and renames it to “ras”.
ES-4124 User’s Guide 289 C HAPTER 36 Access Control This chapter describes how to control access to the Switch. 36.1 Access Control Overview A console port and FTP are allowe d one session each, T e.
Chapter 36 Access Control ES-4124 User’s Guide 290 36.3 About SNMP Simple Network Management Protocol (SNMP) is an applicatio n layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between th e network manageme nt system (NMS) and a network element (NE).
Chapter 36 Access Control ES-4124 User’s Guide 291 36.3.1 SNMP v3 and Security SNMP v3 enhances security for SNMP manage ment. SNMP managers can be required to authenticate with agents before co nducting SNMP mana gement sessions. Security can be further enhanced by encryp ting the SNMP mes sages sent from the managers.
Chapter 36 Access Control ES-4124 User’s Guide 292 temperature T emperatu reEventOn 1. 3.6.1.4.1.890.1. 5.8.24.31.2 .1 This trap is sent when the temperature goes above or below the normal operating rang e. T emperatur eEventClear 1.3.6.1.4.1.890.1.
Chapter 36 Access Control ES-4124 User’s Guide 293 autonegotiation Autonegotiation FailedEventO n 1.3.6.1.4.1.890.1.5. 8.24.31.2.1 This trap is sent when an Ethernet interface fails to auto- negotiate with the pee r Ethernet interafce. AutonegotiationFailedEve ntCl ear 1.
Chapter 36 Access Control ES-4124 User’s Guide 294 36.3.4 Configuring SNMP From the Access Control screen, display the SNMP screen. Y ou can click Access Control to go back to the Access C ontro l screen. T able 1 19 SNMP Switch Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION stp STPNewRoot 1.
Chapter 36 Access Control ES-4124 User’s Guide 295 Figure 176 Management > Acce ss Control > SNMP The following table describes the labels in this screen. T able 120 Management > Access Control > SNMP LABEL DESCRIPTION General Setting Use this section to specify the SNMP version and community (password) values.
Chapter 36 Access Control ES-4124 User’s Guide 296 36.3.5 Configuring SNMP T rap Group From the SNMP sc reen, click Tr a p G r o u p to view the screen as shown. Use the Tr a p Gr oup screen to specify the types of SNMP traps that should be sent to each SNMP manager .
Chapter 36 Access Control ES-4124 User’s Guide 297 Figure 177 Management > Acce ss Control > SNMP > Trap Group The following table describes the labels in this screen. 36.3.6 Setting Up Login Account s Up to five people (one ad ministrator and four non-administrators) may access the Switch via web configurator at any one time.
Chapter 36 Access Control ES-4124 User’s Guide 298 • A non-administrato r (username is something o ther than admin ) is some one who can view but not configure Switch settings. Click Management > Access Contr ol > Logins to view the screen as shown.
Chapter 36 Access Control ES-4124 User’s Guide 299 36.4 SSH Overview Unlike T elnet or FTP , which transmit data in clear text, SSH (Secure Shell) is a secure communication protoc ol that combines authenticatio n and data encryption to provide secure encrypted communication bet w een two hosts over an un secured network.
Chapter 36 Access Control ES-4124 User’s Guide 300 2 Encryption Method Once the identification is verified, both the c lient and server must agree on the type of encryption method to use.
Chapter 36 Access Control ES-4124 User’s Guide 301 Figure 181 HTTPS Implement ation " If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts.
Chapter 36 Access Control ES-4124 User’s Guide 302 36.8.2 Net scape Navigator W arning Messages When you attempt to access the Switch HTTPS server , a W ebsite Certified by an Unknown Authority screen pops up asking if you trus t the server certificate.
Chapter 36 Access Control ES-4124 User’s Guide 303 Figure 185 Example: Lock Denotin g a Secure Connectio n 36.9 Service Port Access Control Service Access Control allows you to decide wh at service s you may use to access the Switch.
Chapter 36 Access Control ES-4124 User’s Guide 304 The following table describes th e fields in this screen. 36.10 Remote Management From the Access Control screen, display the Remote Management screen as shown next.
Chapter 36 Access Control ES-4124 User’s Guide 305 Te l n e t / F T P / HTTP/ICMP/ SNMP/SSH/ HTTPS Select services that may be used for managi ng the Switch from the specified tru sted computers. Apply Click Apply to save your changes to the Switch ’s run-time memory .
Chapter 36 Access Control ES-4124 User’s Guide 306.
ES-4124 User’s Guide 307 C HAPTER 37 Diagnostic This chapter explains the Diagnostic screen. 37.1 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests.
Chapter 37 Diagnostic ES-4124 User’s Guide 308.
ES-4124 User’s Guide 309 C HAPTER 38 Syslog This chapter explains the syslog screens. 38.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event mes sages.
Chapter 38 Syslog ES-4124 User’s Guide 310 Figure 189 Management > Syslo g The following table describes the labels in this screen. 38.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to open the following screen. Use this screen to configure a list of external syslog servers.
Chapter 38 Sy slog ES-4124 User’s Guide 31 1 Figure 190 Management > Syslo g > Server Setup The following table describes the labels in this screen. T able 128 Management > Syslog > Server Setu p LABEL DESCRIPTION Active Select this check box to have the devic e send logs to this syslog server .
Chapter 38 Syslog ES-4124 User’s Guide 312.
ES-4124 User’s Guide 313 C HAPTER 39 Cluster Management This chapter introduces cluster management. 39.1 Clustering Management S tatus Overview Cluster Managemen t allows you to manage s w itches through one Switch, called the cluster manager .
Chapter 39 Cluster Management ES-4124 User’s Guide 314 Figure 191 Clustering Application Example 39.2 Cluster Management S tatus Click Management > Cluster Manage ment in the navigation panel to display the following screen. " A cluster can only have one manager .
Chapter 39 Cluster Management ES-4124 User’s Guide 315 The following table describes the labels in this screen. 39.2.1 Cluster Member Switch Management Go to the Clustering Management S tatus screen.
Chapter 39 Cluster Management ES-4124 User’s Guide 316 39.2.1.1 Uploading Firm ware to a Cluster Member Switch Y ou can use FTP to upload firmwa re to a cluster member switch thr ough the cluster manager switch as shown in the following example.
Chapter 39 Cluster Management ES-4124 User’s Guide 317 Figure 195 Management > Clusterin g Management > Configuration The following table describes the labels in this screen.
Chapter 39 Cluster Management ES-4124 User’s Guide 318 Apply Click Apply to save your changes to the Switch’s run-ti me memory . The Swi tch loses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring.
ES-4124 User’s Guide 319 C HAPTER 40 MAC Table This chapter introduces the MAC T able screen. 40.1 MAC T able Overview The MAC T able screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered ac ross the Switch’ s ports.
Chapter 40 MAC Ta ble ES-4124 User’s Guide 320 40.2 V iewing the MAC T able Click Management > MAC T ab le in the navigation panel to display the following screen. Figure 197 Management > MAC T able The following table describes the labels in this screen.
ES-4124 User’s Guide 321 C HAPTER 41 IP Table This chapter introduces the IP table. 41.1 IP T able Overview The IP T able screen shows how packets are forwarded or filtered across the Switch’ s ports.
Chapter 41 IP Table ES-4124 User’s Guide 322 41.2 V iewing the IP T able Click Management > IP T able in the navigation panel to display the following screen. Figure 199 Management > IP T abl e The following table describes the labels in this screen.
ES-4124 User’s Guide 323 C HAPTER 42 ARP Table This chapter introduces ARP T able. 42.1 ARP T able Overview Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on the local area network.
Chapter 42 ARP Table ES-4124 User’s Guide 324 Figure 200 Management > ARP T ab le The following table describes the labels in this screen. T able 135 Management > ARP Table LABEL DESCRIPTION Index This is the ARP T able entry number .
ES-4124 User’s Guide 325 C HAPTER 43 Routing Table This chapter introduces the routing table. 43.1 Overview The routing table contains the route information to the networ k(s) that the Switch can reach. The Switch automatically updates the routing table with the RIP information received from other Ethernet devices.
Chapter 43 Routin g Table ES-4124 User’s Guide 326.
ES-4124 User’s Guide 327 C HAPTER 44 Configure Clone This chapter shows you how you can copy the settings of one port onto other ports. 44.1 Configure Clone Cloning allows you to co py the basic and advanced settings fro m a sour ce port to a destination port or ports.
Chapter 44 Config ure Clone ES-4124 User’s Guide 328 The following table describes the labels in this screen. T able 137 Management > Configure Clone LABEL DESCRIPTION Source/ Destination Port Enter the source port under the Source label. This port’s attributes are copied.
329 P ART VI Commands and T roubleshooting Introducing Commands (331) User and Enable Mode Comman ds (385) Configuration Mode Comman ds (391) Interface Commands (403) IEEE 802.
330.
ES-4124 User’s Guide 331 C HAPTER 45 Introducing Commands This chapter introduces commands and gives a summary of commands available. 45.1 Overview In addition to the web con figurator , you can us e commands to conf igure the Switch. Use commands for advanced Switch diagnosis and troubleshooting.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 332 • 9600 bps • No parity • 8 data bits • 1 stop bit • No flow control 45.2.1.1 Initial Screen When you turn on your Switch, it performs severa l internal tests as well as line initialization.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 333 • The required fields in a command are enclose d in angle brackets <>, for instance, ping <ip> means that you must specify an IP number for this command.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 334 45.7 Privilege Levels Y ou can use a command whose privilege level is equal to or less than that of your login account. For example, if you r login account has a privilege level of 12, you can use all commands with privilege levels from 0 to 12.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 335 The following table describ es command interpreter mode s and how to access them. Enter exit to quit from the current mo de or enter logout to exit the comm and interpreter .
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 336 45.9.1 List of A vailable Commands Enter “ help ” to displa y a list of a vailable comma nds an d the corresponding sub commands. Enter “ ? ” to display a list of comman ds you can use.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 337 Enter <command> ? to display detailed help inform ation about the sub commands and parameters. 45.10 Using Command History The Switch keeps a list of re cently used commands available to you for reuse.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 338 45.1 1.1 Switch Configuration File When you config ure the Switch using either the CLI (Command Line Interface) or web configurator , the settings are saved as a series of commands in a conf i guration file on the Switch.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 339 45.12.2 Enable Mode The following table describes the co mmands available for Enable mode. enable Accesses Enable (or privileged) mode. See Section 45.12.2 on page 339 . Enable the highest privilege level for executing commands.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 340 cable- diagnostics <port-list> Perform a physical wire-p air test of the Ethernet connections on the specified port(s). 13 clear arp inspection filter Delete all ARP inspecti on filters from the Switch.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 341 erase running-config Reset s to th e factory default settings. 13 help Displays help information for this command. 13 interface port- channel <port- list> Resets to the factory default settings on a per port basis.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 342 renew dhcp snooping database Loads dynamic bindings from the default DHCP snooping database. 13 renew dhcp snooping database <tftp://host/ filename> Loads dynamic bindings from the specified DHCP snoopin g database.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 343 log Displays the log settings configured on the Switch. It also displays the log entries recorded on the Sw itch. 3 statistics Displays statistics regarding the total number of ARP packet s received on the Switch.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 344 ethernet oam discovery <port- list> Displays OAM configuration details and operational status of the specified ports. 3 ethernet oam statistics <port- list> Displays the number of OAM packet s transferred for the specified ports.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 345 protocol-based- vlan Displays the protocol based VLAN settings for the specified port(s). 3 i p Displays IP related information. 0 arp Displays the ARP table. 3 dvmrp group Displays DVMRP group informat ion.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 346 source binding [<mac-addr>] [...] Displays the static bindings configured on the Switch based on MAC address o r VLAN ID of the static binding. 3 source binding help Displays help information for the source binding command.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 347 mstp Displays MSTP configuration for the Switch. 3 instance <0-16> Displays MSTP instance configuration. 3 multicast Displays multicast status, including the port numb er , vlan ID and multicast group number of multicast group me mbers on the Switch.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 348 running-config Displays current operating configuration. 3 interface port- channel <port- list> [bandwidth- limit...] Displays current operating configuration on a port by port basis. Optionally specifies which settings are displayed.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 349 45.12.3 General Configuration Mode The following table lists the commands in Configuration (or Config) mode. [command </>] Connects to an SSH server with the specified SSH version and addition commands to be executed on the server .
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 350 exec <start- stop|stop-only> <radius|tacacs+ > [broadcast] Enables sending accounting information for ad ministrative sessions via SSH, T el net and console port sessions to all configured accounting servers at the same time.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 351 log buffer entries <0- 1024> S pecifies the maximum number (1-1024) of log messages that can be generated by ARP packets and not sent to the syslog server .
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 352 classifier <name> <[packet- format <802.3untag|802.3t ag| EtherIIuntag| EtherIItag>] [priority <0-7>] [vlan <vlan- .
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 353 dhcp dhcp-vlan <vlan- id> S pecifies the VLAN ID of the DHCP VLAN. 13 dhcp relay <vlan-id> helper-address <remote-dhcp- server1> Enables DHCP relay on the specified VLAN and sets the IP address of 1 DHCP server .
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 354 database <tftp://host/ filename> S pecifies the location of the DHCP snooping da tabase. The location should b e expressed like this: t ftp://{domain name or IP address}/directory , if applicable/file name ; for example, tftp://192.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 355 https cert-regeneration <rsa|dsa> Re-generates a certificate. 13 timeout <0-65535> Sets the HTTPS timeout period.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 356 route <ip> <mask> <next-hop-ip> Creates a static route. 13 <ip> <mask> <next-hop-ip> [metric <metric>] [name <name>] [inactive] Sets the metric of a static route or deactivates a static route.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 357 inactive Disables a static MAC address port filtering rule. 13 mac-forward name <name> mac <mac-addr> vlan <vlan-id> interface <interface-id> Configures a static MAC address forwarding rule.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 358 max-hop <1-255> Sets the maximum hop value before BPDUs are discarded in the MST Region. 13 revision <0-65535> Sets the revision number for this MST Region co nfiguration. 13 multi-login Enables multi-login.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 359 vlan <vlan- list> logging Disables logging of messa ges generated by ARP insp ection for the specified VLAN(s).
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 360 vlan <vlan- list> option Sets the Switch to not add the slot number , port number and VLAN ID to DHCP requests that it broadcasts to the DHCP VLAN, if specified, or VLAN. 13 database Removes the location of the DHCP snooping da tabase.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 361 source binding <mac-addr> vlan <vlan-id> 13 lacp Disables the link aggregation control protocol (dynamic trunking) on the Switch. 13 logins username <name> Disables login a ccess to the specified name.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 362 instance <0-16> interface port- channel <port- list> Disables the assignmen t of specific ports from an MST instance. 13 multi-login Disables another ad ministrator from logging into T e lnet or the CLI.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 363 service-control ftp Disables FTP access to the Switch. 13 http Disables web browse r control to the Switch. 13 https Disables secure web browser access to the Switch. 13 icmp Disables ICMP access to the Switch such as pi nging and tracerouting.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 364 enable traps system <options> Disables sending all system type traps to a manager . The options are “coldstart”, “warmstart”, “fanspeed”, “temperature”, “v oltage”, “reset”, “timesync”, “intrusionlock” or “loopguard”.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 365 trtcm Disables the T wo Rate Three Color Marker feature on the Switch. 13 trunk <T1|T2|T3|T4|T5 |T6> Disables the specified trunk group. 13 <T1|T2|T3|T4|T5 |T6> interface <port-list> Removes ports from the specified trunk group.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 366 policy <name> classifier <classifier-list> < [vlan<vlan-id>] [egress-port <port-num>] [priority <0-7>] [ds.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 367 port- security Enables port security on the device. 13 <port-list> Enables port security on the specified port(s). 13 address-limit <number> Limits the number of (dynamic) MAC addresses that may be learned on a port.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 368 exit Leaves the IGMP configuration mode. 13 non-querier Sets the Switch to Non-Querier mode. (If a multicast router with a lower IP address, it will stop sending Query messages on that netw ork.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 369 area <area-id> virtual-link <router-id> name <name> Sets a descriptive name for the virtual link for identificatio n purposes. 13 exit Leaves the router OSPF configuration mode.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 370 redistribute rip metric-type <1|2> metric <0- 65535> Sets the Switch to learn RIP routing information which wi ll use the specified metric information.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 371 http <socket- number> <timeout> Allows HTTP access on the specified service port an d defines the timeout period. 13 https <socket- number> Allows HTTPS access on the specified service port.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 372 ip <options> Enables sending all IP type traps to a manager . The options are “ping” or “traceroute”. 13 switch Enables sending all Switch type traps to a manager . 13 switch <options> Enables sending all Switch type traps to a manager .
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 373 ssh known-hosts <host- ip> <1024|ssh- rsa|ssh-dsa> <key> Adds a remote host to which the Switch can access using SSH service. 13 storm- control Enables broadcast storm control on the S witch.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 374 mode <index- priority|round- robin> S pecifies the mo de for T ACACS+ server selection. 13 time <Hour:Min:Sec> Sets the time in hour, minute and second format. 13 date <month/day/ year> Sets the date in year , month and day format.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 375 45.12.4 interface port-channel Commands The following table lists the interface port-channel commands in configuration mode. Use these commands to configure the ports. <SPTPID> Sets the SP TPID (Service Provider T ag Protocol Iden tifier).
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 376 egress En ables bandwidth limits allowed for outgoing traffic on the port(s). 13 egress <Kbps> Sets the maxi mum bandwidth allowed for outgoin g traffic on the port(s).
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 377 flow-control Enables interface flow control. Flow control reg ulates transmissions to match the bandwidth of the receiving port. 13 frame-type <all|tagged> Choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 378 dir <ingress| egress|both> Enables port mirroring for incoming, outgoing or both incoming and outgoing traffic. Port mirroring copies traffic from one or all ports to another or all ports for ex ternal analysis.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 379 gvrp Disable GVRP on the port(s). 13 igmp-filtering profile Disables IGMP filtering . 13 igmp-group-limit Disables IGMP group limitation. 13 igmp-immediate- leave Disables the IGMP immidiate leave function.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 380 45.12.5 interface route-domain Commands The following table lists the interface route-domain commands in configuration mo de.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 381 Use these comm ands to config ure the IP routing domains. T able 143 interface route-domain Commands COMMAND DESCRIPTION PRIVILEG E interface route-domain <ip-address>/ <mask-bits> Enables a routi ng domain for configuration.
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 382 45.12.6 config-vlan Commands The following table lists the vlan commands in configuration mode. no ip dvmrp Disables DVMRP in this routing domain. 13 ip igmp Disables IP IGMP in thi s routing domain.
Chapter 45 Introdu cing Command s ES-4124 User’s Guide 383 45.13 mvr Commands The following table lists the mvr commands in configuration mode. name <name-str> S pecifies a name for identification purposes. 13 no fixed <port-list> Sets fixed port(s) to normal port(s).
Chapter 45 Intro ducing Comma nds ES-4124 User’s Guide 384 group <name-str> Disables the specified MVR group setting. 13 inactive Enables MVR. 13 receiver-port <port-list> Disables the receiver port(s).An MVR receiver port can only receive multicast traffic in a multicast VLAN.
ES-4124 User’s Guide 385 C HAPTER 46 User and Enable Mode Commands This chapter describes some commands which yo u can perform in the User and Ena ble modes. 46.1 Overview The following command examples show how you can use User and Enab le mode s to diagnose and manage your Switch.
Chapter 46 User and Enable Mode Comma nds ES-4124 User’s Guide 386 46.2.2 show ip Syntax: show ip This command displays the IP re lated information (such as IP address and subnet mask) on all Switch interfaces. The following figure shows th e default interface settings.
Chapter 46 User and Enable Mode Commands ES-4124 User’s Guide 387 This command displays statistics of a port. The following ex ample shows that port 2 is up and the related information.
Chapter 46 User and Enable Mode Comma nds ES-4124 User’s Guide 388 46.3 ping Syntax: ping <ip|host-name> < [in-band|out-o f-band|vlan <vlan-id> ] [ size -> <0-1472> ] [ -t ]> where This command sends Ping packets to an Ethe rnet device.
Chapter 46 User and Enable Mode Commands ES-4124 User’s Guide 389 This command displays information about the route to an Ethernet device. The following example displays route information to an Ethernet device with an IP address of 192.168.1.100 . 46.
Chapter 46 User and Enable Mode Comma nds ES-4124 User’s Guide 390 46.6.1 Using a Different Configuration File Y ou can store up to two configuration files on th e Switch. Only one configuration file is used at a time. By default the Switch uses the first co nfiguration file (with an ind ex number of 1).
ES-4124 User’s Guide 391 C HAPTER 47 Configuration Mode Commands This chapter describes how to enable and conf igure your Switch’ s features using commands. For more background information, see the f eature specific chapters which proceed the commands chapters.
Chapter 47 Configurat ion Mode Com mands ES-4124 User’s Guide 392 An example is shown next. • Enable IGMP snooping on the Switch. • Set the host-timeout and leave-timeout values to 30 seconds • Set the Switch to drop packets from unknown multicast groups.
Chapter 47 Conf iguration Mode Commands ES-4124 User’s Guide 393 47.3 Enabling STP Use the spanning-tree or the mrstp commands to enable and configure STP on the Switch. The difference between the commands is that spanning-tree only allows you to set up one spanning tree configuration and the mrstp command allows you to set up mul tiple ones.
Chapter 47 Configurat ion Mode Com mands ES-4124 User’s Guide 394 An exampl e using spanning-tree command is shown next. • Enable STP on the Switch. • Set the bridge priority of the Switch to 0. • Set the Hello T ime to 4, Maximum Age to 20 and Forward Delay to 15 on the Switch.
Chapter 47 Conf iguration Mode Commands ES-4124 User’s Guide 395 Disables port mirroring on the Switch. 47.4.2 Resetting Commands Use the no command to reset Switch settin gs to their default values. Syntax: no https timeout Resets the https session timeout to default.
Chapter 47 Configurat ion Mode Com mands ES-4124 User’s Guide 396 where An example is shown next. • Disable trunk one (T 1). • Disable LAPC on trunk three (T3).
Chapter 47 Conf iguration Mode Commands ES-4124 User’s Guide 397 where An example is shown next. • Disable the secure shell RSA1 encryption key . • Remove the remote host with IP ad dress 172.165.1.8 from the list of known hosts. • Remove the remote host with IP address 172.
Chapter 47 Configurat ion Mode Com mands ES-4124 User’s Guide 398 47.6 S t atic Route Commands Y ou can create and configure static routes on the Switch by using the ip route command.
Chapter 47 Conf iguration Mode Commands ES-4124 User’s Guide 399 where An example is shown next. • Create a filtering rule cal led “filter1”. • Drop packets coming from and going to MAC address 00:12 :00:12:00:12 on VLAN.
Chapter 47 Configurat ion Mode Com mands ES-4124 User’s Guide 400 • Enable dynamic l ink aggregation (LACP) on trunk 1. 47.9 Enabling Port Authentication T o enable a port authentication, you need to specify yo ur RADIUS server details and select the ports which require external authentication.
Chapter 47 Conf iguration Mode Commands ES-4124 User’s Guide 401 See Section 47.9.2 on page 4 01 for an example. 47.9.2 Port Authentication Settings Use the port-access-authenticator command to configure po rt security on the Switch.
Chapter 47 Configurat ion Mode Com mands ES-4124 User’s Guide 402 • Specify the timeout period of 30 seconds that the Switch w ill wait for a response from the RADIUS server . • Enable port authentication on ports 4 to 8. • Activate reauthentication on the ports.
ES-4124 User’s Guide 403 C HAPTER 48 Interface Commands These are some commonly used configur ation commands that belong to the interface group of commands . 48.1 Overview The interface commands allow you to configure the Switch on a port by port basis.
Chapter 48 Inter face Command s ES-4124 User’s Guide 404 The Switch supports the followin g IEEE 802.3ah features: • Discovery - this identifies the devices on each end of the Ethernet link and their OAM configuration. • Remote Loopback - this can initiate a loopback test between Ethernet devices.
Chapter 48 Inte rface Comma nds ES-4124 User’s Guide 405 • Perform a remote loopba ck test from port 7. 48.2.3 bp du-control Syntax: bpdu-control <peer|tunnel|discard|ne twork> where sysname.
Chapter 48 Inter face Command s ES-4124 User’s Guide 406 An example is shown next. • Enable ports 1, 3, 4 and 5 for configuration. • Set the BPDU control to tunnel , to forward BPDUs received on ports one, three, four and five. 48.2.4 broadcast-limit Syntax: broadcast-limit broadcast-limit <pkt/s> where An example is shown next.
Chapter 48 Inte rface Comma nds ES-4124 User’s Guide 407 • Enable port one for config uration. • Set the outgoing traffic bandwidth limit to 5000Kbps. • Set the guaranteed bandwidth allowe d for incoming traffic to 4000Kbps. • Set the maximum bandwidth allo wed for incoming traffic to 8000Kbps.
Chapter 48 Inter face Command s ES-4124 User’s Guide 408 • Enable the IEEE 802.1Q tagg ed VLAN command to configure tagged VLAN for the Switch. • Enable ports one, three, four an d five for configuration.
Chapter 48 Inte rface Comma nds ES-4124 User’s Guide 409 where An example is shown next. • Enable WFQ queuing on the Switch. • Enable port 2 and ports 6 to 8 for configuration. • Set the queue weights from Q0 to Q7. 48.2.1 1 egress set Syntax: egress set <port-list> where An example is shown next.
Chapter 48 Inter face Command s ES-4124 User’s Guide 410 • Set the IEEE 802.1p quality of service priority as four (4). 48.2.13 name Syntax: name <port-name-string> where An example is shown next. • Enable ports one, three, four an d five for configuration.
Chapter 48 Inte rface Comma nds ES-4124 User’s Guide 41 1 • Select ports 3-6 for internal loopback test. • Execute the test command. • V iew the results. 48.3 Interface no Command Examples Similar to the no commands in the Enable and Config mode s, the no commands for the Interface sub mode also disable certain features.
Chapter 48 Inter face Command s ES-4124 User’s Guide 412.
ES-4124 User’s Guide 413 C HAPTER 49 IEEE 802.1Q Tagged VLAN Commands This chapter describes the IEEE 802.1Q T agged VLAN and associated commands. 49.1 Configuring T agged VLAN The following procedur e shows you how to config ure tagged VLAN. 1 Use the IEEE 802.
Chapter 49 IEEE 802.1Q Tagged VLAN Co mmands ES-4124 User’s Guide 414 49.2 Global VLAN1Q T agged VLAN Configuration Commands This section shows you how to configure and monitor the IEEE 802.
Chapter 49 IEEE 802.1Q Tagged VLAN Commands ES-4124 User’s Guide 415 The following example sets th e Join T imer to 300 millisecon ds, the Leave T imer to 800 milliseconds and the Leave All T imer to 1 1000 milliseconds. 49.2.3 GVRP T imer Syntax: show vlan1q gvrp This command shows the Switch’ s GVRP settings.
Chapter 49 IEEE 802.1Q Tagged VLAN Co mmands ES-4124 User’s Guide 416 The following ex ample sets the default VID to 200 on port s 1 to 5. 49.3.2 Set Accept able Frame T ype Syntax: frame-type <all|tagged|untagged> where This command sets the specified port to accept all Ethernet frames or only those with an IEEE 802.
Chapter 49 IEEE 802.1Q Tagged VLAN Commands ES-4124 User’s Guide 417 where •E n t e r fixed to register the <port-list> to the static VLAN table with <vlan-id> . •E n t e r normal to confirm registration of the <port-list> to the static VLAN table with <vlan-id> .
Chapter 49 IEEE 802.1Q Tagged VLAN Co mmands ES-4124 User’s Guide 418 49.3.5 Delete VLAN ID Syntax: no vlan <vlan-id> where This command deletes the specified VLAN ID entry from the static VLAN table. The following example deletes entry 2 in the static VLAN table.
Chapter 49 IEEE 802.1Q Tagged VLAN Commands ES-4124 User’s Guide 419 •T h e TagCtl section of the last column shows wh ich ports are tagged and which are untagged.
Chapter 49 IEEE 802.1Q Tagged VLAN Co mmands ES-4124 User’s Guide 420.
ES-4124 User’s Guide 421 C HAPTER 50 Multicast VLAN Registration Commands This chapter shows you how to use Mu lticast VLAN Registration (mvr) commands. 50.1 Overview Use the mvr commands in the co nfiguration mode to create and configure multicast VLANs.
Chapter 50 Multicast VLAN Registration Commands ES-4124 User’s Guide 422 • Enter MVR mode. Create a multicast VLAN with the name multiV lan and the VLAN ID of 3. • Specify source ports 2, 3, 5 and receiver ports 6-8. • Specify dynamic mode for the multicast group.
ES-4124 User’s Guide 423 C HAPTER 51 Routing Domain Command Examples 51.0.1 interface route-domain Syntax: interface route-domain <ip-address>/ <mask-bits> where Use this command to enable/create the spec ified routing domain for configuration.
Chapter 51 Routing Doma in Command Examples ES-4124 User’s Guide 424.
ES-4124 User’s Guide 425 C HAPTER 52 Troubleshooting This chapter covers potential problems and possible remedies. 52.1 Problems St arting Up the Switch 52.2 Problems Accessing the Switch T able 146 Troubleshooting the Start-Up of Your Switch PROBLEM CORRECTIVE ACTION None of the LEDs turn on when you turn on the Switch.
Chapter 52 Trou bleshooting ES-4124 User’s Guide 426 52.2.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up windows fro m your device. • JavaScripts (enabled by default).
Chapter 52 Trou bleshooting ES-4124 User’s Guide 427 Figure 205 Intern et Option s 3 Click Apply to save this setting. 52.2.1.1.2 Enable pop-up Blockers with Exceptions Alternatively , if you only want to allow pop-up windows from your device, see the following steps.
Chapter 52 Trou bleshooting ES-4124 User’s Guide 428 Figure 206 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .
Chapter 52 Trou bleshooting ES-4124 User’s Guide 429 6 Click Apply to save this setting. 52.2.1.2 JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , check that JavaScripts are allowed. 1 In Internet Explorer , click T ools , Internet Options and then the Security tab.
Chapter 52 Trou bleshooting ES-4124 User’s Guide 430 Figure 209 Security Settings - Java Scripting 52.2.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM .
Chapter 52 Trou bleshooting ES-4124 User’s Guide 431 52.2.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the window .
Chapter 52 Trou bleshooting ES-4124 User’s Guide 432.
433 P ART VII Appendices and Index Product Specification s (355) IP Addresses and Subnetting (441) Legal Information (449) Customer Support (453) Index (457).
434.
ES-4124 User’s Guide 435 A PPENDIX A Product S pecifications The following tables summarize the Switc h’ s hardware and firmware features. T able 149 Hardware Specifications SPECIFICATIO N DESCRIPTION Dimensions S tandard 19” rack mountable 438 mm (W) x 270 mm (D) x 44.
Appendix A Product Specifications ES-4124 User’s Guide 436 T able 150 Firmware Specifications FEATURE DESCRIPTION Default IP Address In band: 192.168.
Appendix A Product Specifications ES-4124 User’s Guide 437 Multicast VLAN Registration (MVR) Multicast VLAN Registration (MVR) is designed fo r applications (such as Media-on-Demand (MoD)) using multicast traffic across a network. MVR allows one single multi cast VLAN to be shared among different subscriber VLANs on the network.
Appendix A Product Specifications ES-4124 User’s Guide 438 Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configu rator , CLI or an FTP/TFTP tool to put it on the Switch.
Appendix A Product Specifications ES-4124 User’s Guide 439 The following list, which is not exhaustive, i llustrates the standards su pported in the Switch.
Appendix A Product Specifications ES-4124 User’s Guide 440 RFC 3164 Syslog RFC 3376 Internet Group Man agement Protocol, V ersion 3 RFC 3414 User-ba sed Security Model (USM) for version 3 of the Sim ple Network Management Protocol (SNMP v3) RFC 3580 RADIUS - T unnel Protocol Attribute IEEE 802.
ES-4124 User’s Guide 441 A PPENDIX B IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.
Appendix B IP Addre sses and Subnetting ES-4124 User’s Guide 442 Figure 212 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask.
Appendix B IP Addresses and Subnetting ES-4124 User’s Guide 443 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks.
Appendix B IP Addre sses and Subnetting ES-4124 User’s Guide 444 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the foll owing example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons.
Appendix B IP Addresses and Subnetting ES-4124 User’s Guide 445 Figure 214 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address).
Appendix B IP Addre sses and Subnetting ES-4124 User’s Guide 446 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 001, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet.
Appendix B IP Addresses and Subnetting ES-4124 User’s Guide 447 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number .
Appendix B IP Addre sses and Subnetting ES-4124 User’s Guide 448 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
ES-4124 User’s Guide 449 A PPENDIX C Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a wh.
Appendix C Legal Info rmation ES-4124 User’s Guide 450 FCC W arning This device has been tested and foun d to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. Thes e limits are designed to provide reasonable protection against harmful interference in a co mmercial environment.
Appendix C Legal Infor m ation ES-4124 User’s Guide 451 condition. Any replacement will consist of a ne w or re-manufactured f unctionally equivalent product of equal or higher value, and will be so lely at the discretion of ZyXEL.
Appendix C Legal Info rmation ES-4124 User’s Guide 452.
ES-4124 User’s Guide 453 A PPENDIX D Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice.
Appendix D Custo mer Support ES-4124 User’s Guide 454 Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb Site: www .zyxel.dk • Re g u la r Ma i l : ZyXEL Communications A/ S, Columbusvej, 2860 Soebor g, Denmark Finland • Support E-mail: support@zyxel.
Appendix D Customer Support ES-4124 User’s Guide 455 • T elephone: +7-3272-590-698 • Fax: +7-327 2-590-689 • W eb Site: www .zyxel.kz • Re g u l ar Ma i l : ZyXEL Kazakhstan, 43, Dostyk ave.,O f fice 414, Dost yk Business Centre, 050010, Almaty , Republic of Kazakhstan North America • Support E-mail: support@zyxel.
Appendix D Custo mer Support ES-4124 User’s Guide 456 • W eb Site: www .zyxel.es • Re g ul a r M a il : ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spain Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb Site: www .
Index ES-4124 User’s Guide 457 Index Numerics 802.1P priority 85 A access control limitations 289 login account 297 remote management 304 service port 303 SNMP 290 accounting setup 194 accounts and .
Index ES-4124 User’s Guide 458 CLI syntax conventions 332 cloning a port See port cloning cluster management 313 and switch passwords 318 cluster manager 313 , 317 cluster me mber 313 , 318 cluster .
Index ES-4124 User’s Guide 459 service level 255 what it does 255 DSCP (DiffServ Code Point) 255 DVMRP Autonomous System 249 default timer setting 252 error message 251 graft 250 how it works 249 im.
Index ES-4124 User’s Guide 460 IEEE 802.1x activate 145 , 146 , 19 2 , 194 reauthentication 146 IEEE 802.1x, por t authentication 143 IGMP 249 how it works 246 overview 245 port based 247 setup 247 .
Index ES-4124 User’s Guide 461 firmware 285 restoring configuration 286 maintenance 283 current configuration 283 main screen 283 management 331 Management Information Base (MIB) 290 management interface, See also CLI management port 104 managing the device good habits 40 using FTP .
Index ES-4124 User’s Guide 462 interface 234 , 236 , 240 link state database 234 , 236 network example 234 priority 234 redistribute route 238 route cost 240 router elections 234 router ID 238 route.
Index ES-4124 User’s Guide 463 and authentication 190 Network example 189 server 190 settings 190 setup 190 Rapid S panning Tree Protocol, See RSTP .
Index ES-4124 User’s Guide 464 Max Age 11 7 , 11 8 , 120 , 122 path cost 11 0 , 11 7 , 120 port priority 11 7 , 120 port state 111 root port 11 0 status 11 8 , 121 , 125 terminology 109 vs loop guar.
Index ES-4124 User’s Guide 465 Virtual Router status 272 Virtual Router (VR) 271 Virtual Router Redundan cy Protocol (VRRP) 271 VLAN 79 , 89 , 438 acceptable frame type 95 automatic registration 90 .
Index ES-4124 User’s Guide 466.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté ZyXEL Communications ES-4124 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du ZyXEL Communications ES-4124 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation ZyXEL Communications ES-4124, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le ZyXEL Communications ES-4124 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le ZyXEL Communications ES-4124, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du ZyXEL Communications ES-4124.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le ZyXEL Communications ES-4124. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei ZyXEL Communications ES-4124 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
