manualshive.com logo in svg

ZyXEL Communications ES-2108, User Manual, Page: 173 / 284

Share
Download
ZyXEL Communications ES-2108 User Manual Download Page 173

 Chapter 21 IP Source Guard

ES-2108 Series User’s Guide

173

The following table describes the labels in this screen.

21.5.2  ARP Inspection VLAN Configure

Use this screen to enable ARP inspection on each VLAN and to specify when the Switch 
generates log messages for receiving ARP packets from each VLAN. To open this screen, 
click 

Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN

.

Figure 97   

Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN

The following table describes the labels in this screen.

Table 62   

Advanced Application > IP Source Guard > ARP Inspection > Configure > Port

LABEL

DESCRIPTION

Port

This field displays the port number. If you configure the 

*

 port, the settings 

are applied to all of the ports.

Trusted State

Select whether this port is a trusted port (

Trusted

) or an untrusted port 

(

Untrusted

).

The Switch does not discard ARP packets on trusted ports for any reason.
The Switch discards ARP packets on untrusted ports if the sender’s 
information in the ARP packet does not match any of the current bindings.

Apply

Click 

Apply

 to save your changes to the Switch’s run-time memory. The 

Switch loses these changes if it is turned off or loses power, so use the 

Save

 link on the top navigation panel to save your changes to the non-

volatile memory when you are done configuring.

Cancel

Click this to reset the values in this screen to their last-saved values.

Table 63   

Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN

LABEL

DESCRIPTION

VLAN

Use this section to specify the VLANs you want to manage in the section 
below.

Start VID

Enter the lowest VLAN ID you want to manage in the section below.

End VID

Enter the highest VLAN ID you want to manage in the section below.

Apply

Click this to display the specified range of VLANs in the section below.

VID

This field displays the VLAN ID of each VLAN in the range specified above. 
If you configure the 

*

 VLAN, the settings are applied to all VLANs.

Enabled

Select 

Yes

 to enable ARP inspection on the VLAN. Select 

No

 to disable 

ARP inspection on the VLAN.

Summary of Contents for ES-2108

Page 1: ...www zyxel com ES 2108 Series Ethernet Switch User s Guide Version 3 8 10 2007 Edition 2 DEFAULT LOGIN IP Address http 192 168 1 1 User Name admin Password 1234...

Page 2: ......

Page 3: ...supplementary information Ethernet Switch CLI Reference Guide The CLI Reference Guide explains how to use the Command Line Interface CLI to configure the Switch It is recommended you use the web conf...

Page 4: ...A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENT...

Page 5: ...Guide 5 Icons Used in Figures Figures in this User s Guide may use the following generic icons The Switch icon is not an exact representation of your device The Switch Computer Notebook computer Serv...

Page 6: ...will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect it to the r...

Page 7: ...Safety Warnings ES 2108 Series User s Guide 7 This product is recyclable Dispose of it properly...

Page 8: ...Safety Warnings ES 2108 Series User s Guide 8...

Page 9: ...cs 65 Basic Setting 71 Advanced Setup 85 VLAN 87 Static MAC Forwarding 97 Filtering 99 Spanning Tree Protocol 101 Bandwidth Control 115 Broadcast Storm Control 117 Mirroring 119 Link Aggregation 121 P...

Page 10: ...Contents Overview ES 2108 Series User s Guide 10 Syslog 223 Cluster Management 227 MAC Table 233 ARP Table 235 Configure Clone 237 Troubleshooting and Appendices 239 Troubleshooting 241...

Page 11: ...32 1 1 3 High Performance Switched Example 33 1 1 4 IEEE 802 1Q VLAN Application Examples 33 1 2 Ways to Manage the Switch 34 1 3 Good Habits for Managing the Switch 35 Chapter 2 Hardware Installatio...

Page 12: ...ssword 56 4 4 Saving Your Configuration 57 4 5 Switch Lockout 57 4 6 Resetting the Switch 58 4 6 1 Reload the Factory default Configuration File 58 4 7 Logging Out of the Web Configurator 59 4 8 Help...

Page 13: ...AN Type 89 8 5 Static VLAN 89 8 5 1 Static VLAN Status 90 8 5 2 Static VLAN Details 90 8 5 3 Configure a Static VLAN 91 8 5 4 Configure VLAN Port Settings 92 8 6 Port Based VLAN Setup 94 8 6 1 Configu...

Page 14: ...Mirroring Setup 119 Chapter 15 Link Aggregation 121 15 1 Link Aggregation Overview 121 15 2 Dynamic Link Aggregation 121 15 2 1 Link Aggregation ID 122 15 3 Link Aggregation Control Protocol Status 1...

Page 15: ...6 2 MVR Modes 144 19 6 3 How MVR Works 144 19 7 General MVR Configuration 145 19 8 MVR Group Configuration 146 19 8 1 MVR Configuration Example 148 Chapter 20 Authentication Accounting 151 20 1 Authen...

Page 16: ...onfiguring Static Routing 181 Chapter 24 Differentiated Services 185 24 1 DiffServ Overview 185 24 1 1 DSCP and Per Hop Behavior 185 24 1 2 DiffServ Network Example 185 24 2 Activating DiffServ 186 24...

Page 17: ...27 1 Access Control Overview 203 27 2 The Access Control Main Screen 203 27 3 About SNMP 204 27 3 1 SNMP v3 and Security 205 27 3 2 Supported MIBs 205 27 3 3 SNMP Traps 205 27 3 4 Configuring SNMP 20...

Page 18: ...r 31 MAC Table 233 31 1 MAC Table Overview 233 31 2 Viewing the MAC Table 234 Chapter 32 ARP Table 235 32 1 ARP Table Overview 235 32 1 1 How ARP Works 235 32 2 Viewing the ARP Table 235 Chapter 33 Co...

Page 19: ...Table of Contents ES 2108 Series User s Guide 19 Appendix C Legal Information 267 Appendix D Customer Support 271 Index 277...

Page 20: ...Table of Contents ES 2108 Series User s Guide 20...

Page 21: ...ample 45 Figure 18 Rear Panel AC Model 46 Figure 19 Rear Panel DC Model 46 Figure 20 Web Configurator Login 52 Figure 21 Web Configurator Home Screen Status 52 Figure 22 Management Access Control Logi...

Page 22: ...113 Figure 59 Advanced Application Bandwidth Control 115 Figure 60 Advanced Application Broadcast Storm Control 117 Figure 61 Advanced Application Mirroring 119 Figure 62 Advanced Application Link Agg...

Page 23: ...73 Figure 98 Loop Guard vs STP 175 Figure 99 Switch in Loop State 176 Figure 100 Loop Guard Probe Packet 176 Figure 101 Loop Guard Network Loop 176 Figure 102 Advanced Application Loop Guard 177 Figur...

Page 24: ...agement Cluster Member Web Configurator Screen 229 Figure 142 Example Uploading Firmware to a Cluster Member Switch 230 Figure 143 Management Cluster Management Configuration 231 Figure 144 MAC Table...

Page 25: ...ation Static MAC Forwarding 98 Table 21 Advanced Application FIltering 99 Table 22 STP Path Costs 102 Table 23 STP Port States 103 Table 24 Advanced Application Spanning Tree Protocol Configuration 10...

Page 26: ...DIUS Attributes Exec Events via Console 162 Table 57 Advanced Application IP Source Guard 167 Table 58 Advanced Application IP Source Guard Static Binding 168 Table 59 Advanced Application IP Source G...

Page 27: ...e 230 Table 96 Management Cluster Management Configuration 231 Table 97 Management MAC Table 234 Table 98 Management ARP Table 236 Table 99 Management Configure Clone 238 Table 100 Troubleshooting the...

Page 28: ...List of Tables ES 2108 Series User s Guide 28...

Page 29: ...29 PART I Introduction Getting to Know Your Switch 31 Hardware Installation and Connection 37 Hardware Overview 41...

Page 30: ...30...

Page 31: ...and configuring the Switch is easy In addition the Switch can also be managed via Telnet SSH Secure SHell any terminal emulator program on the console port or third party SNMP management 1 1 1 Backbo...

Page 32: ...re 1 Backbone Application 1 1 2 Bridging Example In this example application the Switch connects different company departments RD and Sales to the corporate backbone It can alleviate bandwidth content...

Page 33: ...reely communicate with each other Figure 3 High Performance Switched Application 1 1 4 IEEE 802 1Q VLAN Application Examples This section shows a workgroup and a shared server example using 802 1Q tag...

Page 34: ...r Using VLAN Example 1 2 Ways to Manage the Switch Use any of the following methods to manage the Switch Web Configurator This is recommended for everyday management of the Switch using a supported we...

Page 35: ...es of characters such as numbers and letters Write down the password and put it in a safe place Back up the configuration and make sure you know how to restore it Restoring an earlier working configur...

Page 36: ...Chapter 1 Getting to Know Your Switch ES 2108 Series User s Guide 36...

Page 37: ...the Switch to allow air circulation and the attachment of cables and the power cord 4 Remove the adhesive backing from the rubber feet 5 Attach the rubber feet to each corner on the bottom of the Swi...

Page 38: ...the rack will safely support the combined weight of all the equipment it contains Make sure the position of the Switch does not make the rack unstable or top heavy Take all necessary precautions to a...

Page 39: ...Phillips screwdriver install the M5 flat head screws through the mounting bracket holes into the rack 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack 2 3 Wal...

Page 40: ...ging pipes or cables located inside the wall when drilling holes for the screws 3 Do not screw the screws all the way into the wall Leave a small gap of about 0 5 cm between the heads of the screws an...

Page 41: ...itch and shows you how to make the hardware connections 3 1 Front Panel Connection The figure below shows the front panel of the Switch Figure 10 Front Panel ES 2108 Figure 11 Front Panel ES 2108 F Co...

Page 42: ...J 45 Ethernet Ports Connect these ports to a computer a hub an Ethernet switch or router ES 2108 F Fast Ethernet SFP Slot Use a 100 Base FX 100 Base LX or 100 Base BX Small Form Factor Pluggable SFP t...

Page 43: ...it port are connected at the same time the Gigabit port will be disabled The speed of the Gigabit Ethernet mini GBIC slot can be 100Mbps or 1000Mbps and the duplex mode can be half duplex at 100 Mbps...

Page 44: ...GBIC Slot This is a slot for mini GBIC Gigabit Interface Converter transceivers A transceiver is a single unit that houses a transmitter and a receiver The Switch does not come with transceivers You m...

Page 45: ...sceiver Removal Use the following steps to remove a mini GBIC transceiver SFP module 1 Open the transceiver s latch latch styles vary Figure 16 Opening the Transceiver s Latch Example 2 Pull the trans...

Page 46: ...18 Rear Panel AC Model Figure 19 Rear Panel DC Model 3 2 1 Power Connections Make sure you are using the correct power source as shown on the Switch s panel To connect the power to the AC powered vers...

Page 47: ...Switch is supplying power to the connected device that supports PoE Off No device is connected to this port or the Switch is not supplying power via the Ethernet cable Amber Blinking The system is tra...

Page 48: ...Hardware Overview ES 2108 Series User s Guide 48 ACT 100 FX Green Blinking The port is sending or receiving data Off The port is not sending or receiving data Table 3 LEDs continued LED COLOR STATUS D...

Page 49: ...49 PART II Basic Configuration The Web Configurator 51 Initial Setup Example 61 System Status and Port Statistics 65 Basic Setting 71...

Page 50: ...50...

Page 51: ...ater versions The recommended screen resolution is 1024 by 768 pixels In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled...

Page 52: ...re 21 Web Configurator Home Screen Status A Click the menu items to open submenu links and then click on a submenu link to open the screen in the main window B C D E These are quick links which allow...

Page 53: ...gurator E Click this link to display web help pages The help pages provide descriptions for all of the configuration screens In the navigation panel click a main link to reveal a list of submenu links...

Page 54: ...tting Status LACP Port Authentication 802 1x Port Security Queuing Method Multicast Multicast Status Multicast Setting IGMP Snooping VLAN IGMP Filtering Profile MVR Group Configuration Auth and Acct R...

Page 55: ...s you to screens where you can cap the maximum bandwidth allowed from specified source s to specified destination s Broadcast Storm Control This link takes you to a screen to set up broadcast filters...

Page 56: ...nfiguration file maintenance as well as reboot the system Access Control This link takes you to screens where you can change the system login password and configure SNMP and remote management Diagnost...

Page 57: ...igurator to save your configuration to nonvolatile memory Nonvolatile memory refers to the Switch s storage that remains even if the Switch s power is turned off Use the Save link when you are done wi...

Page 58: ...l previous configurations and the speed of the console port will be reset to the default of 9600bps with 8 data bit no parity one stop bit and flow control set to none The password will also be reset...

Page 59: ...for security reasons and so as you don t lock out other administrators Figure 24 Web Configurator Logout Screen 4 8 Help The web configurator s online help has descriptions of individual screens and...

Page 60: ...Chapter 4 The Web Configurator ES 2108 Series User s Guide 60...

Page 61: ...s for the initial setup Create a VLAN Set port VLAN ID Configure the IP management address 5 1 1 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the port s belongs You can do...

Page 62: ...is screen and the VID field in the IP Setup screen refer to the same VLAN ID 3 Since the VLAN2 network is connected to port 5 on the Switch select Fixed to configure port 5 to be a permanent member of...

Page 63: ...2 Figure 26 Initial Setup Network Example Port VID 1 Click Advanced Applications VLAN in the navigation panel Then click the VLAN Port Setting link 2 Enter 2 in the PVID field for port 5 and click App...

Page 64: ...tion 4 2 on page 51 for more information 3 Click Basic Setting IP Setup in the navigation panel 4 Configure the related fields in the IP Setup screen For the VLAN2 network enter 192 168 2 1 as the IP...

Page 65: ...screen of the web configurator displays a port statistical summary table with links to each port showing statistical details To view the port statistics click Status in all web configurator screens t...

Page 66: ...he STP state of the port see Section 11 1 3 on page 103 for more information If STP is disabled this field displays FORWARDING if the link is up otherwise it displays STOP PD PWR model Only This field...

Page 67: ...and Port Statistics ES 2108 Series User s Guide 67 The ES 2108PWR screen is different from the other models covered in this UG The screen from ES 2108 G model is shown for comparison Figure 30 Status...

Page 68: ...et connection is down and the speed duplex mode Status If STP Spanning Tree Protocol is enabled this field displays the STP state of the port see Section 11 1 3 on page 103 for more information If STP...

Page 69: ...transmitted TX Packets This field shows the number of good packets unicast multicast and broadcast transmitted Multicast This field shows the number of good multicast packets transmitted Broadcast Th...

Page 70: ...between 65 and 127 octets in length 128 255 This field shows the number of packets including bad packets received that were between 128 and 255 octets in length 256 511 This field shows the number of...

Page 71: ...time and date from an external server when you turn on your Switch The real time is then displayed in the Switch logs The Switch Setup screen allows you to set up and configure global Switch features...

Page 72: ...e date created Ethernet Address This field refers to the Ethernet MAC Media Access Control address of the Switch PoE Status This section is only available on the PWR model Total Power W This is the to...

Page 73: ...cool operating environment in order for the device to stay within the temperature threshold Each fan has a sensor that is capable of detecting and reporting if the fan speed falls below the threshold...

Page 74: ...n you select the Daytime RFC 867 format the Switch displays the day month year and time with no time zone adjustment When you use this format it is recommended that you use a Daytime timeserver within...

Page 75: ...Sunday March and 2 00 Daylight Saving Time starts in the European Union on the last Sunday of March All of the time zones in the European Union start using Daylight Saving Time at the same moment 1 A...

Page 76: ...er and more manageable logical broadcast domain In traditional switched environments all broadcast packets go to each and every individual port With VLAN all broadcasts are confined to a specific broa...

Page 77: ...ve All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds Each port has a single Leave All Period timer Leave All Timer must be larger than Leave Timer the default is 10000...

Page 78: ...ion of an IP address The factory default subnet mask is 255 255 255 0 You can configure up to 64 IP addresses which are used to access and manage the Switch from the ports belonging to the pre defined...

Page 79: ...igure the fields to set the default management IP address DHCP Client Select this option if you have a DHCP server that can assign the Switch an IP address and subnet mask a default gateway IP address...

Page 80: ...y when you are done configuring Cancel Click Cancel to reset the fields to your previous configuration Management IP Addresses Configure the fields to set additional management IP address IP Address E...

Page 81: ...eer Ethernet port does not support auto negotiation or turns off this feature the Switch determines the connection speed by detecting the signal on the cable and using half duplex mode When the Switch...

Page 82: ...ll the ports as soon as you make them Port This is the port index number Active Select this check box to enable a port The factory default for all ports is enabled A port must be enabled for data tran...

Page 83: ...acket discards and frame losses Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port The Switch uses IEEE802 3x flow control in full duplex mode and ba...

Page 84: ...Chapter 7 Basic Setting ES 2108 Series User s Guide 84...

Page 85: ...ltering 99 Spanning Tree Protocol 101 Bandwidth Control 115 Broadcast Storm Control 117 Mirroring 119 Link Aggregation 121 Port Authentication 127 Port Security 131 Queuing Method 135 Multicast 137 Au...

Page 86: ...86...

Page 87: ...ived at an Ethernet port has a CFI set to 1 then that frame should not be forwarded as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096...

Page 88: ...ble this function to permit VLANs groups beyond the local Switch Please refer to the following table for common GARP terminology Table 14 IEEE 802 1q Terminology VLAN PARAMETER TERM DESCRIPTION VLAN T...

Page 89: ...ever with VLAN Trunking enabled on a port s in each intermediary switch you only need to create VLAN groups in the end devices A and B C D and E automatically allow frames with VLAN group tags 1 and 2...

Page 90: ...Figure 42 Advanced Application VLAN VLAN Detail Table 15 Advanced Application VLAN VLAN Status LABEL DESCRIPTION The Number of VLAN This is the number of VLANs configured on the Switch Index This is...

Page 91: ...AN VLAN Details LABEL DESCRIPTION VLAN Status Click this to go to the VLAN Status screen VID This is the VLAN identification number that was configured in the Static VLAN screen Port Number This colum...

Page 92: ...e copied to all the ports as soon as you make them Control Select Normal for the port to dynamically join this VLAN group using GVRP This is the default selection Select Fixed for the port to be a per...

Page 93: ...gress filtering the Switch Port This field displays the port number Settings in this row apply to all ports Use this row only if you want to make some settings the same for all ports Use this row firs...

Page 94: ...efault VLAN ID of 1 You cannot change it In screens such as IP Setup and Filtering that require a VID you must enter 1 as the VID The port based VLAN setup screen is shown next The CPU management port...

Page 95: ...Chapter 8 VLAN ES 2108 Series User s Guide 95 Figure 45 Advanced Application VLAN Port Based VLAN Setup All Connected Figure 46 Advanced Application VLAN Port Based VLAN Setup Port Isolation...

Page 96: ...hat is a port through which a data packet enters If you wish to allow two subscriber ports to talk to each other you must define the ingress port for both ports The numbers in the top row denote the i...

Page 97: ...ort to access the Switch See Chapter 17 on page 131 for more information on port security 9 2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the...

Page 98: ...witch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you are...

Page 99: ...g LABEL DESCRIPTION Active Make sure to select this check box to activate your rule You may temporarily deactivate a rule without deleting it by deselecting this check box Name Type a descriptive name...

Page 100: ...number of the rule Click an index number to change the settings Active This field displays Yes when the rule is activated and No when is it deactivated Name This field displays the descriptive name fo...

Page 101: ...liant switches in your network to ensure that only one path exists between any two stations on the network The Switch uses IEEE 802 1w RSTP Rapid Spanning Tree Protocol that allows faster convergence...

Page 102: ...for connected LANs and disables all other ports that participate in STP Network packets are therefore only forwarded between enabled ports eliminating any possible network loops STP aware switches exc...

Page 103: ...iple Spanning Tree Instance MSTI MSTI allows multiple VLANs to use the same spanning tree Load balancing is possible as traffic from different VLANs can use distinct paths in a region 11 1 4 1 MSTP Ne...

Page 104: ...ork devices that appears as a single device to the rest of the network Each MSTP enabled device can only belong to one MST region When BPDUs enter an MST region external path cost of paths outside thi...

Page 105: ...MST regions Regions 1 and 2 have 2 spanning tree instances Figure 51 MSTIs in Different Regions 11 1 4 4 Common and Internal Spanning Tree CIST A CIST represents the connectivity of the entire networ...

Page 106: ...ing Tree Configuration screen to activate one of the STP modes on the Switch Click Configuration in the Advanced Application Spanning Tree Protocol Figure 54 Advanced Application Spanning Tree Protoco...

Page 107: ...09 Active Select this check box to activate an STP tree Clear this check box to disable an STP tree Bridge Priority Bridge priority is used in determining the root switch root port and designated port...

Page 108: ...esult The allowed range is 4 to 30 seconds As a general rule Note 2 Forward Delay 1 Max Age 2 Hello Time 1 Port This field displays the port number Settings in this row apply to all ports Use this row...

Page 109: ...MAC address This ID is the same for Root and Our Bridge if the Switch is the root switch Hello Time second This is the time interval in seconds at which the root switch transmits a configuration messa...

Page 110: ...Chapter 11 Spanning Tree Protocol ES 2108 Series User s Guide 110 Figure 57 Advanced Application Spanning Tree Protocol MSTP...

Page 111: ...e it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to a blocking state otherwise temporary data loops might result The allow...

Page 112: ...s check box to add this port to the MST instance Priority Configure the priority for each port here Priority decides which port should be disabled when more than one port forms a loop in the Switch Po...

Page 113: ...gs on the Switch CST This section describes the Common Spanning Tree settings Bridge Root refers to the base of the spanning tree the root bridge Our Bridge is this Switch This Switch may also be the...

Page 114: ...s This is the number of times the spanning tree has been reconfigured Time Since Last Change This is the time since the spanning tree was last reconfigured Instance These fields display the MSTI to VL...

Page 115: ...or incoming and or out going traffic flows on a port Click Advanced Application Bandwidth Control in the navigation panel to bring up the screen as shown next Figure 59 Advanced Application Bandwidth...

Page 116: ...the nearest multiple of 8000 for a number between 104000 and 1000000 Active Make sure to select this check box to activate egress limits on a port Egress Rate Specify the maximum bandwidth allowed in...

Page 117: ...he buffer is full are discarded Enable this feature to reduce broadcast traffic coming into your network Click Advanced Application Broadcast Storm Control in the navigation panel to display the scree...

Page 118: ...automatically rounds the number down to the nearest multiple of 64 If you enter a number between 1729 and 1999 the rate is fixed at 1792 If you enter a number between 2000 and 103999 the Switch round...

Page 119: ...display the Mirroring screen Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port Figure 61 Advanced Application Mirroring The following table descri...

Page 120: ...ect Source MAC to copy outgoing traffic from a specified MAC address on the mirrored port s Enter the source MAC address in the fields provided Port This field displays the port number Settings in thi...

Page 121: ...ion The Switch adheres to the IEEE 802 3ad standard for static and dynamic LACP port trunking The IEEE 802 3ad standard describes the Link Aggregation Control Protocol LACP for dynamically creating an...

Page 122: ...00 00 00 0000 00 0000 1 Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group not the individual port Table 34 Advanced Application Link Aggregation Status LABEL DESCRIPTI...

Page 123: ...nk Aggregation Setting This is the only screen you need to configure to enable static link aggregation Group ID The field identifies the link aggregation group that is one logical link containing mult...

Page 124: ...Do not configure this screen unless you want to enable dynamic link aggregation Active Select this checkbox to enable Link Aggregation Control Protocol LACP System Priority LACP system priority is a...

Page 125: ...t the common settings and then make adjustments on a port by port basis Note Changes in this row are copied to all the ports as soon as you make them LACP Timeout Timeout is the time interval between...

Page 126: ...ter 15 Link Aggregation ES 2108 Series User s Guide 126 Figure 66 Trunking Example Configuration Screen Your trunk group 1 T1 configuration is now complete you do not need to go to any additional scre...

Page 127: ...idate users See Section 20 2 1 on page 152 for more information on configuring your RADIUS server settings 16 1 1 IEEE 802 1x Authentication The following figure illustrates how a client connecting to...

Page 128: ...DIUS server settings Click Advanced Application Port Authentication in the navigation panel to display the screen as shown Figure 68 Advanced Application Port Authentication 16 2 1 Activate IEEE 802 1...

Page 129: ...n a port by port basis Note Changes in this row are copied to all the ports as soon as you make them Active Select this check box to permit 802 1x authentication on this port You must first allow 802...

Page 130: ...Chapter 16 Port Authentication ES 2108 Series User s Guide 130...

Page 131: ...ning and configure static MAC address es for a port Functionally the Switch allows for three possible outcomes with port security You can configure the ports to Forward all packets and learn all MAC a...

Page 132: ...ess es is in the MAC address table on this port Packets with no matching MAC address es are dropped Clear this check box to disable the port security feature The Switch forwards all packets on this po...

Page 133: ...esses Port 4 Drop all packets from unknown MAC addresses and do not learn MAC addresses Port 5 Drop all packets from unknown MAC addresses but forward packets from up to 100 learned MAC addresses Figu...

Page 134: ...EARNING LIMIT NO OF LEARNED MAC ADDRESSES 1 X 0 disables limits Forward all packets learn all MAC addresses 2 X X 0 disables limits Forward all packets learn all MAC addresses 3 X 0 disables limits Dr...

Page 135: ...priority queue Q3 is transmitted first When that queue empties traffic on the next highest priority queue Q2 is transmitted until Q2 empties and then traffic is transmitted on Q1 and so on If higher p...

Page 136: ...Scheduling Strict Priority Queuing SPQ services queues based on priority only When the highest priority queue empties traffic on the next highest priority queue begins Q3 has the highest priority and...

Page 137: ...s IP addresses in the Class D range 224 0 0 0 to 239 255 255 255 are used for IP multicasting Certain IP multicast numbers are reserved by IANA for special purposes see the IANA web site for more info...

Page 138: ...at IGMP snooping should be performed on This is referred to as fixed mode In fixed mode the Switch does not learn multicast group membership of any VLANs other than those explicitly added as an IGMP s...

Page 139: ...711 450 in seconds that elapses before the Switch removes an IGMP group membership entry if it does not receive report messages from the port Leave Timeout Enter an IGMP leave timeout value from 1 to...

Page 140: ...port is allowed to join Once a port is registered in the specified number of multicast groups any new IGMP join report frame s is dropped on this port IGMP Filtering Profile Select the name of the IG...

Page 141: ...e 16 VLANs Note You must also enable IGMP snooping in the Multicast Setting screen first Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these changes if it is...

Page 142: ...creen Cancel Click Cancel to reset the fields to your previous configuration Clear Click this to clear the fields Index This is the number of the IGMP snooping VLAN entry in the table Name This field...

Page 143: ...igure 77 MVR Network Example End Address Type the ending multicast IP address for a range of IP addresses that you want to belong to the IGMP filter profile If you want to add a single multicast IP ad...

Page 144: ...icast television example where a subscriber device such as a computer in VLAN 1 receives multicast traffic from the streaming media server S via the Switch Multiple subscriber devices can connect thro...

Page 145: ...on the Switch Your Switch automatically creates a static VLAN with the same VID when you create a multicast VLAN in this screen Figure 79 Advanced Application Multicast Multicast Setting MVR The foll...

Page 146: ...e multicast VLAN Receiver Port Select this option to set this port as a receiver port that only receives multicast traffic None Select this option to set the port not to participate in MVR No MVR mult...

Page 147: ...roup in dotted decimal notation Refer to Section 19 1 1 on page 137 for more information on IP multicast addresses End Address Enter the ending IP multicast address of the multicast group in dotted de...

Page 148: ...ers A B and C in VLAN 1 are able to receive the traffic Figure 81 MVR Configuration Example To configure the MVR settings on the Switch create a multicast group in the MVR screen and set the receiver...

Page 149: ...Switch to forward the multicast group traffic to the subscribers configure multicast group settings in the Group Configuration screen The following figure shows an example where two multicast groups...

Page 150: ...Chapter 19 Multicast ES 2108 Series User s Guide 150 Figure 84 MVR Group Configuration Example...

Page 151: ...Switch itself or it can use an external server to authorize a large number of users Accounting is the process of recording what a user is doing The Switch can use an external server to track when use...

Page 152: ...TACACS or both and then set up the authentication priority and accounting settings Click Advanced Application Auth and Acct in the navigation panel to display the screen as shown Figure 86 Advanced A...

Page 153: ...that the Switch waits for an authentication request response from the RADIUS server If you are using index priority for your authentication and you are using two RADIUS servers then the timeout value...

Page 154: ...accounting server Index This is a read only number representing a RADIUS accounting server entry IP Address Enter the IP address of an external RADIUS accounting server in dotted decimal notation UDP...

Page 155: ...alternate between the TACACS servers that it sends authentication requests to Timeout Specify the amount of time in seconds that the Switch waits for an authentication request response from the TACAC...

Page 156: ...gs Timeout Specify the amount of time in seconds that the Switch waits for an accounting request response from the TACACS server Index This is a read only number representing a TACACS accounting serve...

Page 157: ...or local authentication The tacacs and radius are external servers Before you specify the priority make sure you have set up the corresponding database correctly first You can specify up to three meth...

Page 158: ...up system shuts down system accounting is enabled system accounting is disabled Exec Configure the Switch to send information when an administrator logs in and logs out via the console port telnet or...

Page 159: ...by the IANA Internet Assigned Numbers Authority ZyXEL s vendor ID is 890 Vendor Type A vendor specified attribute identifying the setting you want to modify Vendor data A value you want to assign to t...

Page 160: ...authentication Refer to RFC 2866 and RFC 2869 for RADIUS attributes used for accounting This section lists the attributes used by authentication and accounting functions on the Switch In cases where t...

Page 161: ...r NAS IP Address 20 3 1 3 Attributes Used by the IEEE 802 1x Authentication User Name NAS Identifier NAS IP Address NAS Port NAS Port Type This value is set to Ethernet 15 on the Switch Calling Statio...

Page 162: ...UPDATE STOP User Name a a a NAS Identifier a a a NAS IP Address a a a Service Type a a a Acct Status Type a a a Acct Delay Time a a a Acct Session Id a a a Acct Authentic a a a Acct Session Time a a...

Page 163: ...e a a a Acct Session Id a a a Acct Authentic a a a Acct Input Octets a a Acct Output Octets a a Acct Session Time a a Acct Input Packets a a Acct Output Packets a a Acct Terminate Cause a Acct Input G...

Page 164: ...Chapter 20 Authentication Accounting ES 2108 Series User s Guide 164...

Page 165: ...umber in the binding table If there is a binding the Switch forwards the packet If there is not a binding the Switch discards the packet The Switch builds from information provided manually by adminis...

Page 166: ...n volatile memory They do not use the same space in memory that regular MAC address filters use They appear only in the ARP Inspection screens and commands not in the MAC Address Filter screens and co...

Page 167: ...s an existing static binding the new static binding replaces the original one To open this screen click Advanced Application IP Source Guard Static Binding Table 57 Advanced Application IP Source Guar...

Page 168: ...sting one Cancel Click this to reset the values above based on the last selected static binding or if not applicable to clear the fields above Clear Click this to clear the fields above Index This fie...

Page 169: ...spection Status LABEL DESCRIPTION Total number of filters This field displays the current number of MAC address filters that were created because the Switch identified unauthorized ARP packets Index T...

Page 170: ...splays a sequential number for each log message Port This field displays the source port of the ARP packet VID This field displays the source VLAN ID of the ARP packet Sender MAC This field displays t...

Page 171: ...in the Switch after the Switch identifies an unauthorized ARP packet The Switch automatically deletes the MAC address filter afterwards Enter 0 if you want the MAC address filter to be permanent Log...

Page 172: ...rval is illustrated in the following examples 4 invalid ARP packets per second Syslog rate is 5 Log interval is 1 the Switch sends 4 syslog messages every second 6 invalid ARP packets per second Syslo...

Page 173: ...rds ARP packets on untrusted ports if the sender s information in the ARP packet does not match any of the current bindings Apply Click Apply to save your changes to the Switch s run time memory The S...

Page 174: ...when it forwards an ARP packet from the VLAN All The Switch generates log messages every time it receives an ARP packet from the VLAN Apply Click Apply to save your changes to the Switch s run time me...

Page 175: ...problems on the edge of your network This can occur when a port is connected to a Switch that is in a loop state Loop state occurs as a result of human error It happens when two ports on a switch are...

Page 176: ...d enabled port N on switch A sending a probe packet P to switch B Since switch B is in loop state the probe packet P returns to port N on A The Switch then shuts down port N to ensure that the rest of...

Page 177: ...o display the screen as shown The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol RSTP or MSTP enabled Figure 102 Advanced Application Loop Guard The following tabl...

Page 178: ...the Switch it is connected to is in loop state If the Switch that this port is connected is in loop state the Switch will shut down this port Clear this check box to disable the loop guard feature App...

Page 179: ...179 PART IV IP Application Static Route 181 Differentiated Services 185 DHCP 189...

Page 180: ...180...

Page 181: ...send data to a server or device that is not reachable through the default gateway for example when sending SNMP traps or using ping to test IP connectivity This figure shows a Telnet session coming i...

Page 182: ...he same segment as your Switch Metric The metric represents the cost of transmission for routing purposes IP routing uses hop count as the measurement of cost with a minimum of 1 for directly connecte...

Page 183: ...Address This field displays the IP address of the gateway The gateway is an immediate neighbor of your Switch that will forward the packet to the destination Metric This field displays the cost of tra...

Page 184: ...Chapter 23 Static Route ES 2108 Series User s Guide 184...

Page 185: ...tions do not have to request a particular service or give advanced notice of where the traffic is going 24 1 1 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to repl...

Page 186: ...values and the associated policies 24 2 Activating DiffServ Activate DiffServ to allow the Switch to enable DiffServ on the selected port s Click IP Application DiffServ in the navigation panel to dis...

Page 187: ...ports Use this row only if you want to make some settings the same for all ports Use this row first to set the common settings and then make adjustments on a port by port basis Note Changes in this r...

Page 188: ...ber To set the IEEE802 1p priority mapping select the priority level from the drop down list box Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these changes i...

Page 189: ...etwork then you can configure the Switch as a DHCP relay agent When the Switch receives a request from a computer on your network it contacts the DHCP server for the necessary IP information and then...

Page 190: ...hat it relays to a DHCP server by adding Relay Agent Information This helps provide authentication about the source of the requests The DHCP server can then provide an IP address based on this informa...

Page 191: ...this check box to enable DHCP relay Remote DHCP Server 1 3 Enter the IP address of a DHCP server in dotted decimal notation Relay Agent Information Select the Option 82 check box to have the Switch ad...

Page 192: ...Make sure you select the Option 82 check box to set the Switch to send additional information such as the VLAN ID together with the DHCP requests to the DHCP server This allows the DHCP server to assi...

Page 193: ...tch add information slot number port number and VLAN ID to client DHCP requests that it relays to a DHCP server Information This read only field displays the system name you configure in the General S...

Page 194: ...are sent to the other DHCP server with an IP address of 172 23 10 100 Figure 114 DHCP Relay for Two VLANs For the example network configure the VLAN Setting screen as shown Figure 115 DHCP Relay for...

Page 195: ...195 PART V Management Maintenance 197 Access Control 203 Diagnostic 221 Syslog 223 Cluster Management 227 233 ARP Table 235 Configure Clone 237...

Page 196: ...196...

Page 197: ...tion file Configuration 1 the Switch is currently using Firmware Upgrade Access this screen to upload new firmware Restore Configuration Access this screen to upload a previously saved configuration f...

Page 198: ...Save Configuration Save Configuration allows you to save your settings to the Switch s non volatile memory Whenever you make configuration changes to the Switch and hit Apply or Add the Switch saves...

Page 199: ...rect model firmware as uploading the wrong model firmware may damage your device From the Maintenance screen display the Firmware Upgrade screen as shown next Figure 118 Management Maintenance Firmwar...

Page 200: ...ots of your device from which you may restore at a later date Back up your current Switch configuration to a computer using the Backup Configuration screen Figure 120 Management Maintenance Backup Con...

Page 201: ...re as uploading the wrong model firmware may damage your device 26 8 2 FTP Command Line Procedure 1 Launch the FTP client on your computer 2 Enter open followed by a space and the IP address of your S...

Page 202: ...ess If it does not match the Switch will disallow the session Table 75 General Commands for GUI based FTP Clients COMMAND DESCRIPTION Host Address Enter the address of the host server Login Type Anony...

Page 203: ...access control session and Telnet access control session cannot coexist when multi login is disabled See the CLI Reference Guide for information on disabling multi login 27 2 The Access Control Main...

Page 204: ...nt functions It executes applications that control and monitor managed devices The managed devices contain object variables managed objects that define each piece of information to be collected about...

Page 205: ...P RFC 2013 SNMPv2 MIB for UDP 27 3 3 SNMP Traps The Switch sends traps to an SNMP manager when an event occurs This table lists the beginnings of the private MIB trap OIDs for the various ES 2108 mode...

Page 206: ...trap is sent when the Switch resets by an administrator through a management interface RebootEvent 1 3 6 1 4 1 890 1 5 1 1 2 This trap is sent when the Switch reboots by an administrator through a ma...

Page 207: ...when authentication fails due to incorrect user name and or password RADIUSNotReachableEventOn 1 3 6 1 4 1 890 1 5 8 xx 31 2 1 This trap is sent when there is no response message from the RADIUS serve...

Page 208: ...1 890 1 5 8 xx 43 2 1 This trap is sent when the MRSTP root switch changes MSTPNewRoot 1 3 6 1 4 1 890 1 5 8 xx 107 7 0 1 This trap is sent when the MSTP root switch changes STPTopologyChange 1 3 6 1...

Page 209: ...g which is the password for the incoming Get and GetNext requests from the management station The Get Community string is only used by SNMP managers using SNMP version 2c or lower Set Community Enter...

Page 210: ...This is the lowest security level auth to implement an authentication algorithm for SNMP messages sent by this user priv to implement authentication and encryption for SNMP messages sent by this user...

Page 211: ...he screen to select which traps the Switch sends to that SNMP manager Type Select the categories of SNMP traps that the Switch is to send to the SNMP manager Options Select the individual SNMP traps t...

Page 212: ...Control Logins LABEL DESCRIPTION Administrator This is the default administrator account with the admin user name You cannot change the default administrator user name Only the administrator has read...

Page 213: ...H Communication Example 27 6 How SSH works The following table summarizes how a secure connection is established between two remote hosts Apply Click Apply to save your changes to the Switch s run tim...

Page 214: ...ree on the type of encryption method to use 3 Authentication and Data Transmission After the identification is verified and data encryption activated a secure tunnel is established between the client...

Page 215: ...t the certificate the certificate is used in building the HTTPS connection Please refer to the following figure C ssh2 admin 192 168 1 1 WARNING HOST IDENTIFICATION HAS CHANGED IT IS POSSIBLE THAT SOM...

Page 216: ...you haven t changed the default HTTPS port on the Switch then in your browser enter https Switch IP Address as the web site address where Switch IP Address is the IP address or domain name of the Swi...

Page 217: ...fied by an Unknown Authority screen pops up asking if you trust the server certificate Click Examine Certificate if you want to verify that the certificate is from the Switch If Accept this certificat...

Page 218: ...bottom right of the browser status bar denotes a secure connection Figure 133 Example Lock Denoting a Secure Connection 27 10 Service Port Access Control Service Access Control allows you to decide w...

Page 219: ...to allow to access the Switch Service Port For Telnet SSH FTP HTTP or HTTPS services you may change the default service port by typing the new port number in the Server Port field If you change the de...

Page 220: ...Start Address End Address Configure the IP address range of trusted computers from which you can manage this Switch The Switch checks if the client IP address of a computer requesting a service or pro...

Page 221: ...following table describes the labels in this screen Table 89 Management Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty...

Page 222: ...Chapter 28 Diagnostic ES 2108 Series User s Guide 222...

Page 223: ...r to the documentation of your syslog program for details The following table describes the syslog severity levels 29 2 Syslog Setup Click Management Syslog in the navigation panel to display this scr...

Page 224: ...ype This column displays the names of the categories of logs that the device can generate Active Select this option to set the device to generate logs for the corresponding category Facility The log f...

Page 225: ...s to the Switch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory whe...

Page 226: ...Chapter 29 Syslog ES 2108 Series User s Guide 226...

Page 227: ...be able to communicate with one another In the following example switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members Table 9...

Page 228: ...228 Figure 139 Clustering Application Example 30 2 Clustering Management Status Click Management Cluster Management in the navigation panel to display the following screen A cluster can only have one...

Page 229: ...ster manager None neither a manager nor a member of a cluster Manager This field displays the cluster manager switch s hardware MAC address The Number of Member This field displays the number of switc...

Page 230: ...w 1 owner group 393216 Jul 01 12 00 config w w w 1 owner group 0 Jul 01 12 00 fw 00 a0 c5 d4 88 bf rw rw rw 1 owner group 0 Jul 01 12 00 config 00 a0 c5 d4 88 bf 226 File sent OK ftp 463 bytes receive...

Page 231: ...ary list below Name Type a name to identify the Clustering Manager You may use up to 32 printable characters spaces are allowed VID This is the VLAN ID and is only applicable if the Switch is set to 8...

Page 232: ...and click those switches to select them Then enter their common web configurator password Add Click Add to save your settings to the Switch s run time memory The Switch loses these changes if it is t...

Page 233: ...mine how to forward frames See the following figure 1 The Switch examines a received frame and learns the port on which this source MAC address came 2 The Switch checks to see if the frame s destinati...

Page 234: ...ge the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to display and arrange the data according to port number This...

Page 235: ...the device If no entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The Switch fills in its own MAC and IP address in the sender address fields and puts the kn...

Page 236: ...ION Index This is the ARP table entry number IP Address This is the learned IP address of a device connected to a Switch port with corresponding MAC address below MAC Address This is the MAC address o...

Page 237: ...can copy the settings of one port onto other ports 33 1 Configure Clone Settings Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports Click Mana...

Page 238: ...h Example 2 4 6 indicates that ports 2 4 and 6 are the destination ports 2 6 indicates that ports 2 through 6 are the destination ports Basic Setting Select which port settings you configured in the B...

Page 239: ...239 PART VI Troubleshooting and Appendices Troubleshooting 241 Product Specifications 281 IP Addresses and Subnetting 257 Legal Information 267 Customer Support 271 Index 277...

Page 240: ...240...

Page 241: ...ent IP address your computer s IP address must match it Refer to the chapter on access control for details I cannot access the web configurator The administrator username is admin The default administ...

Page 242: ...up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address 34 2...

Page 243: ...save this setting 34 2 1 1 2 Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools...

Page 244: ...ns 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the IP address to the list of Allowed si...

Page 245: ...lorer check that JavaScripts are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 152 Internet Options 2 Click the Custom Level button 3 Scroll down to Scri...

Page 246: ...g 34 2 1 3 Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 Under Java permissions make...

Page 247: ...d PROBLEM CORRECTIVE ACTION Cannot access the Switch The password field is case sensitive Make sure that you enter the correct password using the proper casing The administrator username is admin The...

Page 248: ...Chapter 34 Troubleshooting ES 2108 Series User s Guide 248...

Page 249: ...etween the centers of the holes on the device s back 129 5mm Recommended type of screws for wall mounting M4 Tap Screw see Figure 157 on page 251 AC Model Power Specification Overload protection 100 2...

Page 250: ...ystem 100 Mbps SFP Interface ES 2108 F Only Fast Ethernet SFP open slot for transceiver of 100BASE FX 100BASE LX or 100BASE BX Gigabit Interface One Gigabit Ethernet mini GBIC slot ES 2108 G and ES 21...

Page 251: ...hear from devices that are not in the same group s the traffic must first go through a router MAC Address Filter Filter traffic based on the source and or destination MAC address and VLAN group ID DH...

Page 252: ...rs It allows a Switch to interact with other R STP compliant switches in your network to ensure that only one path exists between any two stations on the network MSTP Multiple Spanning Tree Protocol M...

Page 253: ...FEATURE DESCRIPTION Table 105 Switching Specifications Layer 2 Features Bridging 8 K MAC addresses Static MAC address filtering by source destination Broadcast storm control Static MAC address forwar...

Page 254: ...tocol version 2c RFC 2131 RFC 2132 Dynamic Host Configuration Protocol DHCP RFC 2138 RADIUS Remote Authentication Dial In User Service RFC 2139 RADIUS Accounting RFC 2236 Internet Group Management Pro...

Page 255: ...A Product Specifications ES 2108 Series User s Guide 255 Safety UL 60950 1 CSA 60950 1 EN 60950 1 IEC 60950 1 EMC FCC Part 15 Class A CE EMC Class A Table 106 Standards Supported continued STANDARD DE...

Page 256: ...Appendix A Product Specifications ES 2108 Series User s Guide 256...

Page 257: ...share a common street name the hosts on a network share a common network number Similarly as each house has its own house number each host on the network has its own unique identifying number the hos...

Page 258: ...is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of an IP address 192 168 1 2 in decimal By convention subnet masks always consi...

Page 259: ...ed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet This is usually specified by writing a foll...

Page 260: ...shows the company network before subnetting Figure 159 Subnetting Example Before Subnetting You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The...

Page 261: ...68 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets Similarly to divide a 24 bit address into four subnets you need to...

Page 262: ...ubnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet...

Page 263: ...ST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 255 128 25 2 126 2 255 255 255 192 26 4 62 3 255 255 255 224 27 8 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252...

Page 264: ...red You don t need to change the subnet mask computed by the Switch unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your netw...

Page 265: ...o computer B which is a DHCP client Neither can access the Internet This problem can be solved by assigning a different static IP address to computer A or setting computer A to obtain an IP address au...

Page 266: ...can not use the same IP address In the following example the computer and the router s LAN port both use 192 168 1 1 as the IP address The computer cannot access the Internet This problem can be solv...

Page 267: ...software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein...

Page 268: ...ot expressly approved by the party responsible for compliance could void the user s authority to operate the equipment This Class A digital apparatus complies with Canadian ICES 003 Cet appareil num r...

Page 269: ...indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contact ZyXEL s Service Center for your Return Material Authorization number RMA Products must be...

Page 270: ...Appendix C Legal Information ES 2108 Series User s Guide 270...

Page 271: ...E mail support zyxel com tw Sales E mail sales zyxel com tw Telephone 886 3 578 3942 Fax 886 3 578 2439 Web www zyxel com www europe zyxel com FTP ftp zyxel com ftp europe zyxel com Regular Mail ZyXEL...

Page 272: ...8448 Web www zyxel fi Regular Mail ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland France E mail info zyxel fr Telephone 33 4 72 52 97 97 Fax 33 4 72 52 19 20 Web www zyxel fr Regular Ma...

Page 273: ...inagawa ku Tokyo 141 0022 Japan Kazakhstan Support http zyxel kz support Sales E mail sales zyxel kz Telephone 7 3272 590 698 Fax 7 3272 590 689 Web www zyxel kz Regular Mail ZyXEL Kazakhstan 43 Dosty...

Page 274: ...Okrzei 1A 03 715 Warszawa Poland Russia Support http zyxel ru support Sales E mail sales zyxel ru Telephone 7 095 542 89 29 Fax 7 095 542 89 25 Web www zyxel ru Regular Mail ZyXEL Russia Ostrovityano...

Page 275: ...ail ZyXEL Thailand Co Ltd 1 1 Moo 2 Ratchaphruk Road Bangrak Noi Muang Nonthaburi 11000 Thailand Ukraine Support E mail support ua zyxel com Sales E mail sales ua zyxel com Telephone 380 44 247 69 78...

Page 276: ...Appendix D Customer Support ES 2108 Series User s Guide 276...

Page 277: ...uring 166 syslog messages 166 trusted ports 166 authentication and RADIUS 152 setup 156 authorization privilege levels 158 automatic VLAN registration 88 AWG 249 B bandwidth control 253 basic settings...

Page 278: ...85 DiffServ 185 activate 186 DS field 185 DSCP 185 DSCP to IEEE802 1p mapping 187 network example 185 PHB 185 dimensions 249 disclaimer 267 DS field Differentiated Services field 185 DSCP 185 DSCP to...

Page 279: ...ernet Group Management Protocol 137 IGMP filtering 137 profile 142 profiles 139 IGMP snooping 137 MVR 143 ingress port 96 installation See hardware installation Internet setting up your browser 244 In...

Page 280: ...105 MST ID 105 MSTI Multiple Spanning Tree Instance 103 MSTP 101 103 bridge ID 113 114 configuration 109 configuration digest 114 forwarding delay 111 Hello Time 113 hello time 111 Max Age 113 max ag...

Page 281: ...ntages 152 and authentication 152 Network example 151 server 152 settings 152 setup 152 Rapid Spanning Tree Protocol See RSTP 101 rear panel 46 registration product 269 related documentation 3 reload...

Page 282: ...syntax conventions 4 syslog 166 223 protocol 223 server setup 224 settings 223 setup 223 severity levels 223 system information 71 system log 221 system reboot 199 T TACACS 152 setup 154 TACACS Termi...

Page 283: ...of VLANs 90 port isolation 93 port number 91 port settings 92 port based 77 port based VLAN 94 static VLAN 91 status 90 91 tagged 87 trunking 89 type 77 89 VLAN Virtual Local Area Network 75 VLAN numb...

Page 284: ...Index ES 2108 Series User s Guide 284...

Reviews:

No comments