ZyXEL Communications MES-2110 User Manual Download

Page: 74 / 184

Chapter 9 802.1x

MES-2110 User’s Guide

9.6.4.3 Attributes Used for Accounting IEEE 802.1x Events

The attributes are listed in the following table along with the time of the session
they are sent:

Acct-Session-Id

Acct-Authentic

Acct-Session-Time

Acct-Terminate-Cause

Table 20

RADIUS Attributes - Exec Events via Telnet/SSH

ATTRIBUTE

START

INTERIM-UPDATE

STOP

Table 21

RADIUS Attributes-Exec Events via 802.1x

ATTRIBUTE

START

INTERIM-UPDATE

STOP

User-Name

NAS-IP-Address

NAS-Port

Class

Called-Station-Id

Calling-Station-Id

NAS-Identifier

NAS-Port-Type

Acct-Status-Type

Acct-Delay-Time

Acct-Session-Id

Acct-Authentic

Acct-Input-Octets

Acct-Output-Octets

Acct-Session-Time

Acct-Input-Packets

Acct-Output-Packets

Acct-Terminate-Cause

Acct-Input-Gigawords

Acct-Output-
Gigawords

Summary of Contents for MES-2110

Page 1: ...www zyxel com MES 2110 Intelligent Layer 2 Switch Copyright 2009 ZyXEL Communications Corporation Firmware Version 1 00 Edition 2 9 2009 Default Login Details IP Address http 192 168 1 1 User Name admin Password 1234 ...

Page 2: ......

Page 3: ...ure advanced features Note It is recommended you use the web configurator to configure the Switch Support Disc Refer to the included CD for support documents ZyXEL Web Site Please refer to www zyxel com for additional support documentation and product certifications Documentation Feedback Send your comments questions or suggestions to techwriters zyxel com tw Thank you The Technical Writing Team Z...

Page 4: ...stions about ZyXEL products Forum This contains discussions on ZyXEL products Learn from others who use ZyXEL products and share your experiences as well Customer Support Should problems arise that cannot be solved by the methods listed above you should contact your vendor If you cannot contact your vendor then contact a ZyXEL office for the region in which you bought the device See http www zyxel...

Page 5: ...ey stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket within a screen name denotes a mouse click For example Maintenance Log Log Setting means you first click M...

Page 6: ... s Guide 6 Icons Used in Figures Figures in this User s Guide may use the following generic icons The Switch icon is not an exact representation of your device The Switch Computer Notebook computer Server DSLAM Firewall Telephone Router ...

Page 7: ...icing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect it to the right supply voltage for example 110V AC in North America or 230V AC in Europe Use ONLY power wires of the appropriate wire gauge see Chapter 22 on page 165 for details for your device Connect it to a power supply of the correct voltage see Chapter 22 on page 165 for details Do NOT allow anything...

Page 8: ...Safety Warnings MES 2110 User s Guide 8 ...

Page 9: ...ator 37 System Details 47 Configuration 51 Configuration 53 Loop Detection 59 Jumbo Frame 63 802 1x 65 Bridge 75 VLAN 83 Bandwidth Control 95 Broadcast Storm Control 97 Port Mirroring 99 Link Aggregation 101 IGMP 107 IP Source Guard 119 MAC 127 QoS 135 Management 143 Mgmt Config and System Restart Menu 145 Troubleshooting Product Specifications 159 Troubleshooting 161 Product Specifications 165 Ap...

Page 10: ...Contents Overview MES 2110 User s Guide 10 ...

Page 11: ...1 4 IEEE 802 1Q VLAN Application Examples 21 1 1 5 Metro Ethernet 22 1 2 Ways to Manage the Switch 23 1 3 Good Habits for Managing the Switch 23 Chapter 2 Hardware Installation and Connection 25 2 1 Installation Scenarios 25 2 2 Desktop Installation Procedure 25 2 3 Mounting the Switch on a Rack 26 2 3 1 Rack mounted Installation Requirements 26 2 3 2 Attaching the Mounting Brackets to the Switch ...

Page 12: ...5 4 6 Resetting the Switch 45 4 6 1 Reload the Configuration File 45 Chapter 5 System Details 47 5 1 Overview 47 5 2 The System Information Screen 47 5 3 The Board Information Screen 48 5 4 The DHCP Configuration Screen 49 Part III Configuration 51 Chapter 6 Configuration 53 6 1 Overview 53 6 2 The Port Configuration Screen 53 6 3 The Port Status Screen 55 6 4 The RMON Status Screen 57 Chapter 7 L...

Page 13: ...idge 75 10 1 Overview 75 10 1 1 STP Terminology 75 10 1 2 How STP Works 76 10 1 3 STP Port States 77 10 2 The Bridge Configuration Screen 77 10 3 The RSTP System Configuration Screen 78 10 4 The Spanning Tree Port Configuration 80 Chapter 11 VLAN 83 11 1 Overview 83 11 2 Introduction to IEEE 802 1Q Tagged VLANs 83 11 2 1 Forwarding Tagged and Untagged Frames 84 11 3 The VLAN Type Screen 85 11 4 Th...

Page 14: ... 2 Dynamic Link Aggregation 101 15 2 1 Link Aggregation ID 102 15 3 Static Trunking Example 102 15 4 Link Aggregation Setting 103 15 5 Link Aggregation Control Protocol 104 15 6 LACP Link Status 105 Chapter 16 IGMP 107 16 1 Overview 107 16 1 1 IP Multicast Addresses 107 16 1 2 IGMP Snooping 107 16 1 3 IGMP Snooping and VLANs 108 16 2 IGMP Configuration 108 16 3 IGMP Status 110 16 4 MVR Overview 11...

Page 15: ...Configuration Screen 133 Chapter 19 QoS 135 19 1 Overview 135 19 2 The QoS Base Configuration Screen 135 19 2 1 Configuring the Base Configuration Screen 136 19 3 The 802 1p Priority Table 138 19 4 The Tag Priority Table 139 19 5 The IP DSCP Priority Table 139 19 6 The Priority Override Configuration Screen 140 Part IV Management 143 Chapter 20 Mgmt Config and System Restart Menu 145 20 1 Overview...

Page 16: ...iguration File 156 20 12 Restarting the System 156 Part V Troubleshooting Product Specifications 159 Chapter 21 Troubleshooting 161 21 1 Power Hardware Connections and LEDs 161 21 2 Switch Access and Login 162 Chapter 22 Product Specifications 165 Part VI Appendices and Index 169 Appendix A Changing a Fuse 171 Appendix B Common Services 173 Appendix C Legal Information 177 Index 181 ...

Page 17: ...17 PART I Introduction and Hardware Getting to Know Your Switch 19 Hardware Installation and Connection 25 Hardware Overview 29 ...

Page 18: ...18 ...

Page 19: ...ot active at a time With its built in web configurator managing and configuring the Switch is easy In addition the Switch can also be managed via Telnet any terminal emulator program on the console port or third party SNMP management See Chapter 22 on page 165 for a full list of software features available on the Switch This section shows a few examples of using the Switch in various network envir...

Page 20: ...tch connects different company departments RD and Sales to the corporate backbone It can alleviate bandwidth contention and eliminate server and network bottlenecks All users that need high bandwidth can connect to high speed department servers via the Switch You can provide a super fast uplink connection by using a Gigabit Ethernet mini GBIC port on the Switch Moreover the Switch eases supervisio...

Page 21: ...e can be retained as all ports can freely communicate with each other Figure 3 High Performance Switched Workgroup Application 1 1 4 IEEE 802 1Q VLAN Application Examples A VLAN Virtual Local Area Network allows a physical network to be partitioned into multiple logical networks Stations on a logical network belong to one group A station can belong to more than one group With VLAN a station cannot...

Page 22: ...AN 1 Ports can belong to other VLAN groups too Figure 4 Shared Server Using VLAN Example 1 1 5 Metro Ethernet The Switch is ideal for connecting users to an Ethernet network that spans a metropolitan area In the following example the Switch is one of many switches that connect users in the metropolitan area to the Internet The metro ethernet is based on a star or hub and spoke topology though othe...

Page 23: ...nfigurator This is recommended for everyday management of the Switch using a supported web browser See Chapter 4 on page 37 Command Line Interface Line commands offer an alternative to the web configurator and in some cases are necessary to configure advanced features See the CLI Reference Guide SNMP The Switch can be monitored by an SNMP manager See Section 20 3 on page 146 1 3 Good Habits for Ma...

Page 24: ... it in a safe place Back up the configuration and make sure you know how to restore it Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes If you forget your password you will have to reset the Switch to its factory default settings If you backed up an earlier configuration file you would not have to totally re configure the Switch You could simp...

Page 25: ... least 4 inches 10 cm of clearance at the front and 3 4 inches 8 cm at the back of the Switch This is especially important for enclosed rack installations 2 2 Desktop Installation Procedure 1 Make sure the Switch is clean and dry 2 Set the Switch on a smooth level surface strong enough to support the weight of the Switch and the connected cables Make sure there is a power outlet nearby 3 Make sure...

Page 26: ...ation holes Leave space between devices when stacking 2 3 Mounting the Switch on a Rack The Switch can be mounted on an EIA standard size 19 inch rack or in a wiring closet with other equipment Follow the steps below to mount your Switch on a standard EIA rack using a rack mounting kit 2 3 1 Rack mounted Installation Requirements Two mounting brackets Eight M3 flat head screws and a 2 Philips scre...

Page 27: ...talling the unit 2 3 2 Attaching the Mounting Brackets to the Switch 1 Position a mounting bracket on one side of the Switch lining up the four screw holes on the bracket with the screw holes on the side of the Switch Figure 7 Attaching the Mounting Brackets 2 Using a 2 Philips screwdriver install the M3 flat head screws through the mounting bracket holes into the Switch 3 Repeat steps 1 and 2 to ...

Page 28: ...the Switch on one side of the rack lining up the two screw holes on the bracket with the screw holes on the side of the rack Figure 8 Mounting the Switch on a Rack 2 Using a 2 Philips screwdriver install the M5 flat head screws through the mounting bracket holes into the rack 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack ...

Page 29: ...ng table describes the port labels on the front panel Ethernet Dual Personality Console Port LEDs Power Connection Mini GBIC slots Table 1 Front Panel Connections LABEL DESCRIPTION Power Connection Connect an appropriate power supply to this port 8 10 100 Mbps RJ 45 Ethernet Ports Connect these ports to a computer a hub an Ethernet switch or router Two Mini GBIC Slots Use mini GBIC transceivers in...

Page 30: ...nnected device An auto crossover auto MDI MDI X port automatically works with a straight through or crossover Ethernet cable Two of the 1000Base T Ethernet ports are paired with a mini GBIC slot to create a dual personality interface The Switch uses up to one connection for each mini GBIC and 1000Base T Ethernet pair The mini GBIC slots have priority over the Gigabit ports This means that if a min...

Page 31: ... auto MDIX ports Media Dependent Interface Crossover so you may use either a straight through Ethernet cable or crossover Ethernet cable for all Gigabit port connections Auto crossover ports automatically sense whether they need to function as crossover or straight ports so crossover cables can connect both computers and switches hubs 3 1 3 Mini GBIC Slots These are slots for mini GBIC Gigabit Int...

Page 32: ...3 The Switch automatically detects the installed transceiver Check the LEDs to verify that it is functioning properly 4 Close the transceiver s latch latch styles vary 5 Connect the fiber optic cables to the transceiver Figure 10 Transceiver Installation Example Figure 11 Connecting the Fiber Optic Cables 3 1 3 2 Transceiver Removal Use the following steps to remove a mini GBIC transceiver SFP mod...

Page 33: ...g the correct power source as shown on the panel To connect power to the Switch insert the female end of the power cord the power receptacle on the front panel Connect the other end of the supplied power cord to a power outlet Make sure that no objects obstruct the airflow of the fans located on the side of the unit The Switch requires a power supply of 100 240 VAC 50 60 Hz 0 55 A Max See Chapter ...

Page 34: ...k is up Amber Blinking The system is transmitting receiving to from a 100 Mbps Ethernet network On The link to a 100 Mbps Ethernet network is up Off The link to an Ethernet network is down Mini GBIC Slots LNK Green On The link to this port is up Off The link to this port is not connected ACT Green On The link to an Ethernet network is on Blinking This port is receiving or transmitting data Off The...

Page 35: ...35 PART II Basic Configuration The Web Configurator 37 System Details 47 ...

Page 36: ...36 ...

Page 37: ...er or Netscape Navigator 7 0 and later versions The recommended screen resolution is 1024 by 768 pixels In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScript enabled by default Java permissions enabled by default 4 2 System Login 1 Start your web browser 2 Type http and...

Page 38: ...b Configurator MES 2110 User s Guide 38 3 The login screen appears Enter the user name admin by default and password 1234 by default Figure 15 Web Configurator Login 4 Click OK to view the first web configurator screen ...

Page 39: ...irst screen that displays when you access the web configurator The following figure shows the navigating components of a web configurator screen Figure 16 Web Configurator Main Screen A Click the menu items to open submenu links and then click on a submenu link to open the screen in the main window A ...

Page 40: ... Configurator MES 2110 User s Guide 40 In the navigation panel click a main link to reveal a list of submenu links Table 3 Navigation Panel Sub links Overview SYSTEM DETAILS CONFIGURATION MGMT CONFIG SYSTEM RESTART MENU ...

Page 41: ...figuration Port Configuration 802 1x Status Bridge Menu Bridge Config RSTP System Config RSTP Per Port Config VLAN Menu VLAN Type Port Based Tag Based 802 1q VLAN Stacking Port Info Tag Based Info Management VLAN Bandwidth Control Storm Control Port Mirroring Trunk Config Aggregator Setting LACP Configuration LACP Link Status IGMP Menu IGMP Config IGMP Groups Status MVR Serial Port Config SNMP Con...

Page 42: ...ati on This link takes you to a screen where you can configure settings for individual Switch ports Port Status This link takes you to a screen that shows port settings for individual Switch ports Rmon Status This link takes you to a screen where you can view statistics on the traffic going through each port Loop Detection This link takes you to a screen where you can configure protection against ...

Page 43: ...the Switch activate MAC address learning and set the maximum number of MAC addresses to learn on a port view the MAC addresses and types of devices attached to what ports QoS Menu This link takes you to screens where you can configure priority levels for traffic transmitted through each port Mgmt Config Serial Port Config This link takes you to a screen where you can configure the parameters for c...

Page 44: ...anel to save your configuration to nonvolatile memory Nonvolatile memory refers to the Switch s storage that remains even if the Switch s power is turned off If you don t use Save Settings all configuration changes will only apply until you restart the Switch Note Use the Save Settings link when you are done with a configuration session Firmware Download This link takes you to a screen where you c...

Page 45: ...self out try using out of band management via the console port to configure the Switch 4 6 Resetting the Switch If you lock yourself and others from the Switch or forget the administrator password you will need to reload the factory default configuration file or reset the Switch back to the factory defaults 4 6 1 Reload the Configuration File Uploading the factory default configuration file replac...

Page 46: ... the administrative password and press Enter Simply press Enter if you did not set up a password 5 Type enable and press Enter to turn on administrative commands 6 Type reset default and press Enter to restore the system to the factory defaults The Switch will restart Figure 18 Resetting the Switch Via the Console Port The Switch is now reinitialized with a default configuration file Username admi...

Page 47: ...m Details screens show general system information about the Switch You can also use the screens to configure system and DHCP client settings 5 2 The System Information Screen Click System Details System Info to open the following screen Figure 19 System Details System Info ...

Page 48: ...ct Name Enter the name of the person in charge of this Switch You can use up to 32 printable ASCII characters spaces are allowed Location Enter the geographic location of your Switch You can use up to 32 printable ASCII characters spaces are allowed DHCP Client This shows whether the DHCP client is Enabled or Disabled If DHCP is disabled you must enter an IP address subnet mask and gateway in the ...

Page 49: ...e that the firmware is created Port Number This shows the number of available ports on the Switch Table 8 System Details DHCP Config LABEL DESCRIPTION DHCP Client Use this to turn the DHCP client on or off Turn on the DHCP client if you have a DHCP server that can assign the Switch an IP address subnet mask and a default gateway IP address automatically DHCP Client State This shows whether the DHC...

Page 50: ...ails MES 2110 User s Guide 50 Once you click the Apply button the following message displays reminding you to save your settings in the Save Settings screen and reboot the Switch Figure 22 System Details DHCP Config Apply ...

Page 51: ...ART III Configuration Configuration 53 Loop Detection 59 Bridge 75 VLAN 83 Bandwidth Control 95 Broadcast Storm Control 97 Port Mirroring 99 Link Aggregation 101 IGMP 107 IP Source Guard 119 MAC 127 QoS 135 ...

Page 52: ...52 ...

Page 53: ...itch settings 6 2 The Port Configuration Screen Use this screen to configure Switch port settings You can assign a unique name to the ports select its speed setting and enable or disable auto negotiation Click Configuration Port Configuration to open the following screen Figure 23 Configuration Port Configuration ...

Page 54: ... is fixed Duplex The Status column shows the the port s duplex status The Setting field is configurable when you disable the auto negotiation function in the AUTO field Use this field to change the status to Half or Full duplex mode The duplex status for the fiber ports is fixed Link This shows the port s connection status AUTO Use this to enable or disable auto negotiation AUTO auto negotiation a...

Page 55: ...The Switch uses IEEE802 3x flow control in full duplex mode and backpressure flow control in half duplex mode IEEE802 3x flow control is used in full duplex mode to send a pause signal to the sending port causing it to temporarily stop sending signals when the receiving port memory buffers fill Back Pressure flow control is typically used in half duplex mode to send a collision signal to the sendi...

Page 56: ...igabit SFP ports for fiber connections Admin This shows whether administrative access is Enabled or Disabled on the port When administrative access is disabled on the port users cannot manage the Switch via that port Speed This is the port s current speed 10M for 10 Mbps and 100M for 100 Mbps Duplex This is the the port s duplex status Half or Full Link This shows the port s connection status AUTO...

Page 57: ...show detailed information about frames received InUnicasts This field shows the number of good unicast frames received InBroadcasts This field shows the number of good broadcast frames received InPause This field shows the number of 802 3x Pause frames received InMulticasts This field shows the number of good multicast frames received InGoodOctetsHi This field shows the number of good upper octet ...

Page 58: ...ons before the retransmission count is reset Multiple This is a count of successfully transmitted frames for which transmission was inhibited by more than one collision Single This is a count of successfully transmitted frames for which transmission is inhibited by exactly one collision Deferred This is a count of frames for which transmission delayed due to busy traffic The deferred frames are wa...

Page 59: ...o a switch in loop state then it will be affected by the switch in loop state in the following way It will receive broadcast messages sent out from the switch in loop state It will receive its own broadcast messages that it sends out as they loop back It will then re broadcast those messages again The following figure shows port N on switch A connected to switch B Switch B is in loop state When br...

Page 60: ...en shuts down port N to ensure that the rest of the network is not affected by the switch in loop state Figure 27 Loop detection Probe Frame Note After resolving the loop problem on your network you can re activate the disabled port via the web configurator or via commands See the CLI Reference Guide 7 2 The Loop Detection Screen Click Configuration Loop Detection to open the following screen Figu...

Page 61: ...unrecognized multicast MAC address Test frames sent out for loop detection will be discarded by this type of switch Users can configure a unicast MAC address to solve this problem Port This is the port number Enable Disable Select Enable or Disable to have the Switch apply loop detection feature on this port When the loop detection feature is enabled the Switch sends probe frames from this port to...

Page 62: ...Chapter 7 Loop Detection MES 2110 User s Guide 62 ...

Page 63: ...e this screen to configure the jumbo frame size Click Configuration Jumbo Frame to open the following screen Figure 29 Configuration Jumbo Frame The following table describes the labels in this screen Table 13 Configuration Jumbo Frame LABEL DESCRIPTION Frame Size Configure the jumbo frame size 1522 to 1632 The bigger the frame size the better the performance Undo Click this to restore your last s...

Page 64: ...Chapter 8 Jumbo Frame MES 2110 User s Guide 64 ...

Page 65: ...User Service RFC 2138 2139 protocol to validate users See Section 9 6 on page 71 for more information on configuring your RADIUS server settings 9 1 1 IEEE 802 1x Authentication The following figure illustrates how a client connecting to a IEEE 802 1x authentication enabled port goes through a validation process The Switch prompts the client for login information in the form of a user name and pas...

Page 66: ...cted areas of the network such as the Internet The rights granted to the Guest VLAN depends on how the network administrator configures switches or routers with the Guest network feature Note Use the Switch to assign the Guest VLAN to a port This assignment should corresponds to the network s Guest VLAN The Guest network is not configurable in this Switch To enable port authentication first activa...

Page 67: ...number of times the Switch tries to authenticate client s before sending unresponsive ports to the Guest VLAN This is set to 2 by default That is the Switch attempts to authenticate a client twice If the client does not respond to the first authentication request the Switch tries again If the client still does not respond to the second request the Switch sends the client to the Guest VLAN The clie...

Page 68: ...ey Enter a password up to 128 alphanumeric characters as the key to be shared between the external authentication server and the Switch The key must be the same on the external authentication server and your Switch The key is not sent over the network Server UDP Port Number Enter the port number of the RADIUS server The default port number is 1812 Server Accounting Port Number Enter the port numbe...

Page 69: ...guest VLAN feature in the Configuration Global Configuration screen see Section 9 2 on page 67 Select Enable then enter the number that identifies the Guest VLAN Make sure this is the Guest VLAN recognized in your network Clients belonging to the guest VLAN can access unprotected areas in your network such as the Internet Select Disable if you do not want to use this feature Reauthenticat ion Spec...

Page 70: ...ed on the Switch Reauth Max This shows the number of times the Switch attempts to authenticate clients for port access Server IP Address This is the IP address of the RADIUS server Server Shared Key This is the password shared between the external authentication server and the Switch Server UDP Port Number This is the port number of the RADIUS server Server Accounting Port Number This is the port ...

Page 71: ...ne specific authentication and accounting elements in a user profile which is stored on the RADIUS server This appendix lists the RADIUS attributes supported by the Switch Guest VLAN This shows if a Guest VLAN is enabled on the port Reauthenticat ion This shows if a subscriber has to periodically re enter his or her username and password to stay connected to the port Reauth Period This shows how o...

Page 72: ...e following sections list the attributes sent from the Switch to the RADIUS server when performing authentication 9 6 3 1 Attributes Used for Authenticating Privilege Access User Name The format of the User Name attribute is enab where is the privilege level 1 14 User Password NAS Identifier NAS IP Address 9 6 3 2 Attributes Used to Login Users User Name User Password NAS Identifier NAS IP Address...

Page 73: ...ributes are listed in the following table along with the time that they are sent the difference between Console and Telnet SSH Exec events is that the Telnet SSH events utilize the Calling Station Id attribute Table 19 RADIUS Attributes Exec Events via Console ATTRIBUTE START INTERIM UPDATE STOP User Name Y Y Y NAS Identifier Y Y Y NAS IP Address Y Y Y Service Type Y Y Y Acct Status Type Y Y Y Acc...

Page 74: ...BUTE START INTERIM UPDATE STOP Table 21 RADIUS Attributes Exec Events via 802 1x ATTRIBUTE START INTERIM UPDATE STOP User Name Y Y Y NAS IP Address Y Y Y NAS Port Y Y Y Class Y Y Y Called Station Id Y Y Y Calling Station Id Y Y Y NAS Identifier Y Y Y NAS Port Type Y Y Y Acct Status Type Y Y Y Acct Delay Time Y Y Y Acct Session Id Y Y Y Acct Authentic Y Y Y Acct Input Octets Y Y Acct Output Octets ...

Page 75: ...propagated throughout the network from the device that generates the topology change In STP a longer delay is required as the device that causes a topology change first notifies the root bridge that then notifies the network Both RSTP and STP flush unwanted learned addresses from the filtering database In RSTP the port states are Discarding Learning and Forwarding Note In this user s guide STP ref...

Page 76: ...twork frames are therefore only forwarded between enabled ports eliminating any possible network loops STP aware switches exchange Bridge Protocol Data Units BPDUs periodically When the bridged LAN topology changes a new spanning tree is constructed Once a stable network topology has been established all bridges listen for Hello BPDUs Bridge Protocol Data Units transmitted from the root bridge If ...

Page 77: ...following screen Figure 35 Configuration Bridge Menu Bridge Config Table 23 STP Port States PORT STATE DESCRIPTION Disabled STP is disabled default Blocking Only configuration and management BPDUs are received and processed Listening All BPDUs are received and processed Note The listening state does not exist in RSTP Learning All BPDUs are received and processed Information frames are submitted to...

Page 78: ...LABEL DESCRIPTION Ring Protocol Select RSTP 802 1W to enable RSTP Select Disable if you do not want to use this feature Port Select Enable to have the port participate in RSTP when you select RSTP 802 1W in the Ring Protocol field Select Disable so that the port will not participate in RSTP when you select RSTP 802 1W in the Ring Protocol field Select Tunnel so that the port will not participate i...

Page 79: ...lo Time sec This is the time interval in seconds at which the root switch transmits a configuration message The root bridge determines Hello Time Max Age and Forwarding Delay Forward Delay sec This is the time in seconds the root switch will wait before changing states that is listening to learning to forwarding Note The listening state does not exist in RSTP Max age sec This is the maximum time i...

Page 80: ...ps might result The allowed range is 4 to 30 seconds As a general rule Note 2 Forward Delay 1 Max Age 2 Hello Time 1 Max age sec This is the maximum time in seconds the Switch can wait without receiving a BPDU before attempting to reconfigure All Switch ports except for designated ports should receive BPDUs at regular intervals Any port that ages out STP information provided in the last BPDU becom...

Page 81: ...rt It is recommended to assign this value according to the speed of the bridge The slower the media the higher the cost see Table 22 on page 75 for more information Edge Select On when the port is connected to an end node a computer network card for example Select Off when the port is connected to a bridge node P2P Select On when the port is connected to one bridge as a Point to Point link type Se...

Page 82: ...Chapter 10 Bridge MES 2110 User s Guide 82 ...

Page 83: ...ag Protocol Identifier residing within the type length field of the Ethernet frame and two bytes of TCI Tag Control Information starts after the source address field of the Ethernet frame The CFI Canonical Format Indicator is a single bit flag always set to zero for Ethernet switches If a frame received at an Ethernet port has a CFI set to 1 then that frame should not be forwarded as it is to an u...

Page 84: ...for common IEEE 802 1Q VLAN terminology Table 27 IEEE 802 1Q VLAN Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually Dynamic VLAN This is a VLAN configured by a GVRP registration deregistration process VLAN Administrative Control Registration Fixed Fixed registration ports are permanent VLAN members Registration Forbidden Ports with registra...

Page 85: ...rt Port based VLANs require allowed outgoing ports to be defined for each port Therefore if you wish to allow two subscriber ports to talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data frame leaves for both ports Port based VLANs are specific only to the Switch on which they were creat...

Page 86: ...the port you are configuring Port1 10 Select the subscriber ports that can talk to each other Switch Management Use this to enable or disable switch management via the web configurator Telnet or SNMP manager Select the port through which you can manage the Switch If you disable this feature then you cannot access the web configurator from a computer connected to this port Apply Click this to save ...

Page 87: ...ice provider to provide different service based on specific VLANs for many different customers A service provider s customers may require a range of VLANs to handle multiple applications A service provider s customers can assign their own inner VLAN tags on ports for these applications The service provider can assign an outer VLAN tag for each customer Therefore there is no VLAN tag overlap among ...

Page 88: ...g IEEE 802 1Q frame switching Select Access Port for ingress ports on the service provider s edge devices 1 and 2 in the VLAN stacking example figure The incoming frame is treated as untagged so a second VLAN tag outer VLAN tag can be added Note Static VLAN Tx Tagging MUST be disabled on a port where you choose Normal or Access Port Select Tunnel Port available for Gigabit ports only for egress po...

Page 89: ...only adds the SP TPID tag to all incoming frames on the service provider s edge devices 1 and 2 in the VLAN stacking example figure that have an SP TPID different to the one configured on the Switch If an incoming frame s SP TPID is the same as the one configured on the Switch then the Switch will not add the tag Priority refers to the IEEE 802 1p standard that allows the service provider to prior...

Page 90: ...Menu Tag Based VLAN Stacking Table 31 Single and Double Tagged 802 11Q Frame Format DA SA Len Etype Data FCS Untagged Ethernet frame DA SA TPID Priority VID Len Etype Data FCS IEEE 802 1Q customer tagged frame DA SA SPTPID Priority VID TPID Priority VID Len Etype Data FCS Double tagged frame Table 32 802 1Q Frame DA Destination Address Priority 802 1p Priority SA Source Address Len Etype Length an...

Page 91: ...Port for ingress ports at the edge of the service provider s network Select Tunnel available for Gigabit ports only for egress ports at the edge of the service provider s network In order to support VLAN stacking on a port the port must be able to allow frames of 1526 Bytes 1522 Bytes 4 Bytes for the second tag to pass through it SPVID SPVID is the service provider s VLAN ID the outer VLAN tag Ent...

Page 92: ... through the port NonMember Forward Untagged Forward Forward frames that do not belong to any VLAN group and forward untagged VLAN frames NonMember Drop Untagged Forward Drop frames that do not belong to any VLAN group and forward untagged VLAN frames NonMember Drop Untagged Drop Drop frames that do not belong to any VLAN group and drop untagged VLAN frames Isolation Use this to enable or disable ...

Page 93: ...d info LABEL DESCRIPTION VLAN ID Select whether you want to Add or Modify a VLAN ID Enter the VLAN ID from 1 4094 that you want to configure Priority This is the priority you want to assign to the tag based VLAN Pri Override Select Enable to ignore the priority level assigned to the transmitted frames Otherwise select Disable Port This shows ports 1 to 10 Member This shows the VLAN group setting f...

Page 94: ...ing port strips off the 802 1Q tag from incoming and outgoing frames Use this to send untag frames to devices that do no support the 802 1Q feature A Tagging port tags incoming and outgoing frames with this VLAN group information A Non member port does not participate in the VLAN group Page Up Click this to view the next page Page Down Click this to view the previous page Refresh Click this to ref...

Page 95: ...h control means defining a maximum allowable bandwidth for incoming and or out going traffic flows on a port 12 2 Bandwidth Control Setup Click Configuration Bandwidth Control in the navigation panel to bring up the screen as shown next Figure 45 Configuration Bandwidth Control ...

Page 96: ...affic flow on a port The unit changes depending on how you configure in the Rate Level field The value you enter in this field must be within the rate level range Active Use this to enable or disable bandwidth control Undo Click this to restore your last saved settings Apply Click this to save your changes Bandwidth Control Status Port This is the port number Ingress Limit This is the ingress rate...

Page 97: ...ion lookup failure DLF frames the Switch receives per second on the ports When the maximum number of allowable broadcast multicast and or DLF frames is reached per second the subsequent frames are discarded Enable this feature to reduce broadcast multicast and or DLF frames in your network You can specify limits for each frame type on each port Click Configuration Storm Control in the navigation p...

Page 98: ...re in the Rate Level field The value you enter in this field must be within the rate level range Active Use this to enable or disable storm control Undo Click this to restore your last saved settings Apply Click this to save your changes Storm Control Status Port This is the port number Broadcast Limit This is the broadcast frame limit on the port Active This shows whether broadcast control is ena...

Page 99: ...traffic flow to a monitor port the port you copy the traffic to in order that you can examine the traffic from the monitor port without interference Click Configuration Port Mirroring in the navigation panel to display the following screen Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port Figure 47 Configuration Port Mirroring ...

Page 100: ...ive port mirroring feature monitors both incoming and outgoing traffic Monitoring Port The monitoring port is the port you copy the traffic to in order to examine it in more detail without interfering with the traffic flow on the original port s Select the monitor port number from the list Monitored Port Select the port s to mirror the traffic on a port Undo Click this to restore your last saved s...

Page 101: ... it is recommended to implement static link aggregation only This ensures increased network stability and control over the trunk groups on your Switch See Section 15 3 on page 102 for a static port trunking example 15 2 Dynamic Link Aggregation The Switch adheres to the IEEE 802 3ad standard for static and dynamic LACP port trunking The Switch supports the link aggregation IEEE802 3ad standard Thi...

Page 102: ...g Example This example shows you how to create a static port trunk group for ports 2 5 1 Make your physical connections make sure that the ports that you want to belong to the trunk group are connected to the same destination The following figure shows ports 2 5 on switch A connected to switch B Figure 48 Trunking Example Physical Connections Table 40 Link Aggregation ID Local Switch SYSTEM PRIORI...

Page 103: ... select the LACP option Click Apply when you are done Figure 49 Trunking Example Configuration Screen Your trunk group 1 configuration is now complete you do not need to go to any additional screens 15 4 Link Aggregation Setting Click Configuration Trunk Config Aggregator Setting to display the screen shown next See Section 15 1 on page 101 for more information on link aggregation Figure 50 Config...

Page 104: ...r Gigabit ports 100Mbps ports and Gigabit ports cannot be in the same group Members Select the port s that belong to a trunk group For Groups 1 to 4 you can select up to four port members for each group For Group 5 you can select the two Gigabit ports as the members LACP Use this to enable or disable LACP port trunking Undo Click this to restore your last saved settings Apply Click this to save yo...

Page 105: ...e smaller the number the higher the priority level Undo Click this to restore your last saved settings Apply Click this to save your changes Table 43 Configuration Trunk Config LACP Configuration continued LABEL DESCRIPTION Table 44 Configuration Trunk Config LACP Link Status LABEL DESCRIPTION Actor This is the local Switch MAC This is the local Switch s MAC address Priority This is the local Swit...

Page 106: ...Chapter 15 Link Aggregation MES 2110 User s Guide 106 ...

Page 107: ... receiving devices IP addresses in the Class D range 224 0 0 0 to 239 255 255 255 are used for IP multicasting Certain IP multicast numbers are reserved by IANA for special purposes see the IANA web site for more information 16 1 2 IGMP Snooping A Switch can passively snoop on IGMP frames transferred between IP multicast routers switches and IP multicast hosts to learn the IP multicast group membe...

Page 108: ...MP frames This is referred to as auto mode Alternatively you can specify the VLANs that IGMP snooping should be performed on This is referred to as fixed mode In fixed mode the Switch does not learn multicast group membership of any VLANs other than those explicitly added as an IGMP snooping VLAN 16 2 IGMP Configuration Use this screen to configure the Switch s IGMP settings Click Configuration IG...

Page 109: ...t frames to IGMP static ports with or without the learning process of multicast group membership Immediate Leave Use this to enable or disable this feature When Immediate Leave is enabled on this port and the switch receives an IGMP version 2 leave message for this port this port is immediately removed from the multicast group When Immediate Leave is disabled on this port and the switch receives a...

Page 110: ...ifferent subscriber VLANs on the network While isolated in different subscriber VLANs connected devices can subscribe to and unsubscribe from the multicast stream in the multicast VLAN This improves bandwidth utilization with reduced multicast traffic in the subscriber VLANs and simplifies multicast group management MVR only responds to IGMP join and leave control messages from multicast groups th...

Page 111: ...multicast VLAN This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to the receiver ports In compatible mode the Switch does not send any IGMP reports In this case you must manually configure the forwarding settings on the multicast devices in the multicast VLAN 16 4 3 How MVR Works The following figure shows a multicast television ...

Page 112: ...me subscriber VLAN the receiving port will still be on the list of forwarding destination for the multicast traffic Otherwise the Switch removes the receiver port from the forwarding table Figure 56 MVR Multicast Television Example 16 5 General MVR Configuration Use the MVR screen to create multicast VLANs and select the receiver port s and a source port for each multicast VLAN Click Configuration...

Page 113: ...box to enable MVR to allow one single multicast VLAN to be shared among different subscriber VLANs on the network Name Enter a descriptive name up to 32 printable ASCII characters for identification purposes Multicast VLAN ID Enter the VLAN ID 1 to 4094 of the multicast VLAN Mode Specify the MVR mode on the Switch Choices are Dynamic and Compatible Select Dynamic to send IGMP reports to all MVR so...

Page 114: ...VLAN ID in all outgoing frames transmitted All Port Use this to select between Source Port Receiver Port or None Tagging Select this checkbox if you want the ports to tag the VLAN ID in all outgoing frames transmitted Undo Click this to load your last saved settings Apply Click this to save your changes MVR Status VLAN This field displays the multicast VLAN ID Active This field displays whether th...

Page 115: ...ormation on IP multicast addresses Quantity Specify the number of IP addresses to include in the multicast group Undo Click this to load your last saved settings Add Click Add to save your changes to the Switch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you...

Page 116: ...ample where ports 1 2 and 3 on the Switch belong to VLAN 1 In addition port 7 belongs to the multicast group with VID 200 to receive multicast traffic the News and Movie channels from the remote streaming media server S Computers A B and C in VLAN are able to receive the traffic Figure 59 MVR Configuration Example ...

Page 117: ...the Switch create a multicast group in the MVR screen and set the receiver and source ports Figure 60 MVR Configuration Example To set the Switch to forward the multicast group traffic to the subscribers configure multicast group settings in the Group Configuration screen The ...

Page 118: ...e 118 following figure shows an example where two multicast groups Group ID 1 for News and Group ID 2 for Movie are configured for the multicast VLAN 200 Figure 61 MVR Group Configuration Example Figure 62 MVR Group Configuration Example ...

Page 119: ... dynamic bindings and from information provided manually by administrators static bindings IP source guard consists of the following features Static bindings Use this to create static bindings in the binding table DHCP snooping Use this to filter unauthorized DHCP frames on the network and to build the binding table dynamically ARP inspection Use this to filter unauthorized ARP frames on the netwo...

Page 120: ...owing situations The frame is a DHCP server frame for example OFFER ACK or NACK The source MAC address and source IP address in the frame do not match any of the current bindings The frame is a RELEASE or DECLINE frame and the source MAC address and source port do not match any of the current bindings The rate at which DHCP frames arrive is too high 17 1 1 2 DHCP Snooping Static Binding Table The ...

Page 121: ...his screen Table 49 Configuration DHCP Snooping DHCP Snooping Configuration LABEL DESCRIPTION DHCP Snooping Configuration Action Select Enable to have the Switch use DHCP snooping You still have to enable DHCP snooping on specific VLAN and specify trusted ports Select Disable if you do not want to use this feature Note If DHCP is enabled and there are no trusted ports DHCP requests will not succee...

Page 122: ...he frame is a RELEASE or DECLINE frame and the source MAC address and source port do not match any of the current bindings The rate at which DHCP frames arrive is too high All Port Use this to configure all ports as trusted or un trusted ports Undo Click this to reset the values in this screen to their last saved values Apply Click Apply to save your changes to the Switch s run time memory The Swi...

Page 123: ...static binding the new static binding replaces the original one Click Configuration DHCP Snooping DHCP Binding Table to open the following screen Figure 64 Configuration DHCP Snooping DHCP Binding Table The following table describes the labels in this screen Table 50 Configuration DHCP Snooping DHCP Binding Table LABEL DESCRIPTION DHCP Binding Configuration MAC Address Enter the source MAC address...

Page 124: ...to computer A As a result all the communication between computer A and computer B passes through computer X Computer X can read and alter the information passed between them No This field displays a sequential number for each binding Port This field displays the port number in the binding VLAN ID This field displays the source VLAN ID in the binding MAC Address This field displays the source MAC a...

Page 125: ...n the Switch See Section 17 4 on page 124 for more details about turning on this feature Click Configuration ARP Inspection to open the following screen Figure 66 Configuration ARP Inspection The following table describes the labels in this screen Table 51 Configuration ARP Inspection LABEL DESCRIPTION ARP Inspection Action Use this to enable or disable the ARP inspection feature ARP Inspection VL...

Page 126: ...to configure all ports as trusted or un trusted ports ARP Inspection Status Action This shows whether the ARP inspection feature is enabled or disabled on the Switch ARP Inspection VLAN Mode This shows whether the Switch look at all VLANs or specific VLANs on which ARP inspection in enabled ARP Inspection VLAN Fixed This shows the specific VLAN ID Trust Untrust This shows whether the port is trust...

Page 127: ...AC Forwarding screen The Switch uses the MAC table to determine how to forward frames See the following figure 1 The Switch examines a received frame and learns the port on which this source MAC address came 2 The Switch checks to see if the frame s destination MAC address matches a source MAC address already learned in the MAC table If the Switch has already learned the port for this MAC address ...

Page 128: ...the MAC table Click Configuration MAC Menu MAC Table Status to open the following screen Figure 68 Configuration MAC Menu MAC Table Status The following table describes the labels in this screen Table 52 Configuration MAC Menu MAC Table Status LABEL DESCRIPTION MAC Table Configuration MAC aging time Enter a time from 16 to 4080 seconds This is how long all dynamically learned MAC addresses remain ...

Page 129: ...Click this to save your changes MAC Table Status No This is the incoming frame index number MAC Address This is the MAC address of the device from which this incoming frame came Static This shows whether the MAC address is dynamic learned by the Switch or static manually configured Priority This shows the priority level of the MAC address 1 10 This shows the port from which the MAC address was lea...

Page 130: ...on MAC Menu Lock Learning MAC LABEL DESCRIPTION Port This is the port number Lock MAC address learning reduces outgoing broadcast traffic Use this to activate MAC address learning on the port Undo Click this to load your last saved settings Apply Click this to save your changes Table 54 Configuration MAC Menu MAC Filter Config LABEL DESCRIPTION MAC Filter Configuration Status Use this to determine...

Page 131: ... source MAC address Priority This shows the priority level Pri Override This shows whether priority level override is enabled or disabled Delete Click this to remove the rule Page Up Down Click this to view the previous or next page Denied Table Active Deny Entry Use this to enable or disable MAC filtering by denying access from specific MAC addresses Apply Click this to save your changes MAC Addr...

Page 132: ...le 55 Configuration MAC Menu MAC Filter Config MAC Filter Mode LABEL DESCRIPTION MAC Filter Mode Port This identifies the port you are configuring Mode Use this to enable the MAC filter by allow feature on the port The default setting disables this feature See Section 18 4 on page 130 for more details about configuring a MAC allow list on each port All Port Use this to apply the setting to all por...

Page 133: ...y Use this field to limit the number of dynamic MAC addresses that may be learned on a port For example if you set this field to 5 on port 2 then only the devices with these five learned MAC addresses may access port 2 at any one time A sixth device would have to wait until one of the five learned MAC addresses aged out MAC address aging out time can be set in the MAC Table Status screen Action En...

Page 134: ...Chapter 18 MAC MES 2110 User s Guide 134 ...

Page 135: ...6 is transmitted until Q6 empties and then traffic is transmitted on Q5 and so on If higher priority queues never empty then traffic on lower priority queues never gets sent SP does not automatically adapt to changing network requirements Weighted Round Robin Scheduling WRR Round Robin Scheduling services queues on a rotating basis and is activated only when a port has more traffic than it can han...

Page 136: ...een Figure 73 Configuration QoS Menu Base Configuration The following table describes the labels in this screen Table 57 Configuration QoS Menu Base Configuration LABEL DESCRIPTION QoS Base Configuration Schedule Mode Select all high before low or weighted round robin All high before low queues based on priority only When the highest priority queue empties traffic on the next highest priority queu...

Page 137: ...y and tag priority as queuing basis IP Over Tag Use this to enable or disable IP Over Tag on the port When you enable this feature and the Switch receives a frame containing both IP DSCP and tag priority information the Switch will only use the IP DSCP priority information All Port Use this to set the priority mode for all ports Undo Click this to load your last saved settings Apply Click this to ...

Page 138: ...open the following screen Figure 74 Configuration QoS Menu 802 1p Priority The following table describes the labels in this screen Table 58 Configuration QoS Menu 802 1p Priority LABEL DESCRIPTION Port This label shows the port you are configuring Priority Assign a priority level to the port Undo Click this to load your last saved settings Apply Click this to save your changes ...

Page 139: ...DiffServ Code Points DSCPs indicating the level of service desired This allows the intermediary DiffServ compliant network devices to handle the frames differently depending on the code points without the need to negotiate paths or remember state information for every flow In addition applications do not have to request a particular service or give advanced notice of where the traffic is going Tab...

Page 140: ...e this screen to apply the QoS settings of the Switch to its DHCP clients The Switch ignores the priority levels assigned to the transmitted frames on the ports source MAC addresses and destination MAC addresses Table 60 Configuration QoS Menu IP DSCP Priority LABEL DESCRIPTION Number This is the DSCP classification identification number Priority Assign a Switch s priority level Low Normal Preferr...

Page 141: ... to the transmitted frames on this port Select Disable if you do not want to use this feature This is selected by default Destination MAC Pri Override Select Enable to have the Switch ignore the priority level assigned to the transmitted frames on the destination MAC address Select Disable if you do not want to use this feature This is selected by default Source MAC Pri Override Select Enable to h...

Page 142: ...Chapter 19 QoS MES 2110 User s Guide 142 ...

Page 143: ...143 PART IV Management Mgmt Config and System Restart Menu 145 ...

Page 144: ...144 ...

Page 145: ...ulation software with the displayed parameters to manage the Switch Connect the male 9 pin end of the console cable to the console port of the Switch Connect the female end to a serial port COM1 COM2 or other COM port of your computer Click Mgmt Config Serial Port Config to open the following screen Figure 78 Mgmt Config Serial Port Config Specify the amount of time in seconds before the console s...

Page 146: ...l An SNMP managed network consists of two main components agents and a manager An agent is a management software module that resides in a managed switch the Switch An agent translates the local management information from the managed switch into a form compatible with SNMP The manager is the console through which network administrators perform network management functions It executes applications ...

Page 147: ...e trap Table 62 SNMP Commands COMMAND DESCRIPTION Get Allows the manager to retrieve an object variable from the agent GetNext Allows the manager to retrieve the next object variable from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series of GetNext operations Set Allows the manager to s...

Page 148: ... to get the time and date information from a time server using Simple Network Time Protocol SNTP You can also configure two servers If the first one is down the Switch will try to connect to the second one Click Mgmt Config SNTP to open the following screen Figure 82 Mgmt Config SNTP Table 64 Mgmt Config SNMP Config IP Trap Manager LABEL DESCRIPTION IP Address Enter the IP addresses of up to five ...

Page 149: ...aytime light in the evening Enable this option if you use Daylight Saving Time Day Light Saving Start Configure the day and time when Daylight Saving Time starts if you selected Daylight Saving Time The time is displayed in the 24 hour format Here are a couple of examples Daylight Saving Time starts in most parts of the United States on the second Sunday of March Each time zone in the United State...

Page 150: ... the server name or the IP address of the mail server for the e mail addresses specified below If this field is left blank logs and alerts messages will not be sent via e mail From Assign a valid e mail address to the Switch To The Switch sends logs to the e mail addresses specified in this field If this field is left blank the Switch does not send logs via e mail SYSLOG SYSLOG Status Use this to ...

Page 151: ...nfig User Config The following table describes the labels in this screen Table 67 Mgmt Config User Config LABEL DESCRIPTION User Name Enter a name to identify the user account You can type up to 15 characters using characters found on a standard keyboard User Password Enter a password associated with the user name You can type up to 15 characters using characters found on a standard keyboard User ...

Page 152: ...gmt Config Host Denial of Service Protection LABEL DESCRIPTION Port This is the port number PHY RX TX This shows if data is flowing through the ports on the Switch If no data is passing through a port this shows Link Down Otherwise the number indicates the maximum size of packets during data transmission in the port Test If the cable is well connected to the port this shows Pass Otherise this show...

Page 153: ... table describes the labels in this screen Table 69 Mgmt Config Host Denial of Service Protection LABEL DESCRIPTION Protection Use this to enable or disable host denial of service protection IP Address Configure the IP address of the trusted computer from which you can manage this Switch The Switch checks if the client IP address of a computer requesting a service or protocol matches the range set...

Page 154: ...Abnormal Traffic Detection to open the following screen Figure 87 Mgmt Config Port Abnormal Traffic Detection The following table describes the labels in this screen Table 70 Mgmt Config Port Abnormal Traffic Detection LABEL DESCRIPTION Protection Use this to enable or disable abnormal traffic detection on the Switch Abnormal Traffic Set the rules for abnormal traffic in the fields described below...

Page 155: ...e port for good if traffic exceeds the threshold for a certain time You can manually unblock a port in the Block Unblock field However the port is only unblocked when it is not receiving excessive traffic anymore If No block for N seconds Specify for how long the Switch will block the port if traffic exceeds the threshold Port This shows the port number s that you can configure Enable Disable If y...

Page 156: ...creen Figure 89 Mgmt Config Configuration File Follow the steps below to back up the current Switch configuration to your computer in this screen 1 Click Backup Setting 2 Choose a location to save the file on your computer from the Save in drop down list box and type a descriptive name for it in the File name list box Click Save to save the configuration file to your computer To restore a configur...

Page 157: ...nd System Restart Menu MES 2110 User s Guide 157 restart the system without physically turning the power off It also allows you to load the factory default settings when you reboot Figure 90 System Restart Menu Restart Option ...

Page 158: ...Chapter 20 Mgmt Config and System Restart Menu MES 2110 User s Guide 158 ...

Page 159: ...159 PART V Troubleshooting Product Specifications Troubleshooting 161 Product Specifications 165 ...

Page 160: ...160 ...

Page 161: ...he LEDs turn on 1 Make sure you are using the power adaptor or cord included with the Switch 2 Make sure the power adaptor or cord is connected to the Switch and plugged in to an appropriate power source Make sure the power source is turned on 3 Disconnect and re connect the power adaptor or cord to the Switch 4 If the problem continues contact the vendor The ALM LED is on 1 Disconnect and re conn...

Page 162: ...t the IP address for the Switch 1 The default IP address is 192 168 1 1 2 Use the console port to log in to the Switch 3 If this does not work you have to reset the device to its factory defaults See Section 4 6 on page 45 I forgot the username and or password 1 The default username is admin and the default password is 1234 2 If this does not work you have to reset the device to its factory defaul...

Page 163: ...ions Try to access the Switch using another service such as Telnet If you can access the Switch check the remote management settings to find out why the Switch does not respond to HTTP I can see the Login screen but I cannot log in to the Switch 1 Make sure you have entered the user name and password correctly The default user name is admin and the default password is 1234 These fields are case se...

Page 164: ...21 Troubleshooting MES 2110 User s Guide 164 In order to use the web configurator you need to allow Web browser pop up windows from your device JavaScripts enabled by default Java permissions enabled by default ...

Page 165: ... has one 1000Base T RJ 45 port and one Small Form Factor Pluggable SFP slot with one port active at a time 2 mini GBIC SFP slots Auto negotiation Auto MDIX One console port Compliant with IEEE 802 3 3u Back pressure flow control for half duplex Flow control for full duplex IEEE 802 3x LEDs Per switch PWR SYS Per Fast Ethernet RJ 45 10 100 port LNK ACT Per mini GBIC slot LNK ACT Per mini GBIC slot ...

Page 166: ...t service based on specific VLANs for many different customers MAC Address Filter Filter traffic based on the source and or destination MAC address IGMP Snooping The Switch supports IGMP snooping enabling group multicast traffic to be only forwarded to ports that are members of that group thus allowing you to significantly reduce multicast traffic passing through your Switch QoS Queuing is used to...

Page 167: ...ce guard to filter unauthorized DHCP and ARP packets in your network Link Aggregation Link aggregation trunking is the grouping of physical ports into one logical higher capacity link You may want to trunk ports if for example it is cheaper to use multiple lower speed links than to under utilize a high speed but more costly single port link Port Authentication and Security For security the Switch ...

Page 168: ...57 RMON RFC 1901 SNMPv2c Simple Network Management Protocol version 2c RFC 2138 RADIUS Remote Authentication Dial In User Service RFC 2139 RADIUS Accounting RFC 2236 Internet Group Management Protocol Version 2 RFC 3046 DHCP Relay RFC 4330 Simple Network Time Protocol SNTP IEEE 802 1x Port Based Network Access Control IEEE 802 1D MAC Bridges IEEE 802 1p Traffic Types Packet Priority IEEE 802 1Q Ta...

Page 169: ...169 PART VI Appendices and Index Changing a Fuse 171 Common Services 173 Legal Information 177 Index 181 ...

Page 170: ...170 ...

Page 171: ...fuse housing 3 A burnt out fuse is blackened darkened or cloudy inside its glass casing A working fuse has a completely clear glass casing Pull gently but firmly to remove the burnt out fuse from the fuse housing Dispose of the burnt out fuse properly Installing a Fuse 1 The Switch is shipped from the factory with one spare fuse included in a box like section of the fuse housing Push the middle pa...

Page 172: ...Appendix A Changing a Fuse MES 2110 User s Guide 172 ...

Page 173: ... if you like Protocol This is the type of IP protocol used by the service If this is TCP UDP then the service uses the same port number with TCP and UDP If this is User Defined the Port s is the IP protocol number not the port number Port s This value depends on the Protocol Please refer to RFC 1700 for further information about port numbers If the Protocol is TCP UDP or TCP UDP this is the IP por...

Page 174: ...this service FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on FTP TCP TCP 20 21 File Transfer Program a program to enable fast transfer of files including large files that may not be possible by e mail H 323 TCP 1720 NetMeeting uses this protocol HTTP TCP 80 Hyper Text Transfer Protocol a client server protocol for the world wide web HT...

Page 175: ...fer of data over public networks This is the control channel PPTP_TUNNEL GRE User Defined 47 PPTP Point to Point Tunneling Protocol enables secure transfer of data over public networks This is the data channel RCMD TCP 512 Remote Command Service REAL_AUDIO TCP 7070 A streaming audio service that enables real time sound over the web REXEC TCP 514 Remote Execution Daemon RLOGIN TCP 513 Remote Login ...

Page 176: ...UDP 49 Login Host Protocol used for Terminal Access Controller Access Control System TELNET TCP 23 Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments It operates over TCP IP networks Its primary function is to allow users to log into remote host systems TFTP UDP 69 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP b...

Page 177: ...ing out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Trademarks ZyNOS ZyXEL Network Operating System is a registered trademark of ZyX...

Page 178: ...e in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense CE Mark Warning This is a class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures Taiwanese BSMI Bureau of Standards Metrology and Inspection A Warning Noti...

Page 179: ...sist of a new or re manufactured functionally equivalent product of equal or higher value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product has been modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warra...

Page 180: ...Appendix C Legal Information MES 2110 User s Guide 180 ...

Page 181: ... 20 broadcast 107 broadcast storm control 97 C configuration bandwidth control 95 bridge 75 78 broadcast storm control 97 date time 148 DHCP snooping 121 IGMP 109 jumbo frames 63 link aggregation 103 loop detection 59 MAC filtering 130 multicast 109 MVR 112 port mirroring 99 ports 53 QoS 136 trunking 103 VLAN 85 configuration file 156 connection test 152 console port 30 145 D date time 148 DHCP bi...

Page 182: ...n 101 configuration 103 dynamic 101 hash mode 104 ID 102 static 102 status 105 system priority 105 lockout 45 login 37 logs 150 loop detection 59 M MAC filtering 127 configuration 130 MAC learning 129 management 145 abnormal traffic detection 154 alarms 150 configuration file 156 connection test 152 console port 30 145 date time 148 DoS 153 firmware upgrade 155 logs 150 reset 156 SNMP 146 user acc...

Page 183: ... 78 path cost 75 79 port states 77 S SNMP 146 SNTP 148 stacking VLAN 91 stacking VLANs 87 static bindings 119 status IGMP 110 link aggregation 105 MAC filtering 128 multicast 110 ports 55 RMON 57 trunking 105 switch lockout 45 system abnormal traffic detection 154 configuration file 156 connection test 152 DHCP client 48 49 firmware upgrade 155 information 47 IP address 48 lockout 45 login 37 logs...

Page 184: ...ccounts 151 V VLAN 83 application 21 configuration 85 forwarding frames 84 frame formats 90 management VLAN 94 port based 85 stacking 87 91 tag format 89 tag based 91 tagged 83 W web configurator 37 navigation panel 40 weighted round robin scheduling 135 ...

Search results

Summary of Contents for MES-2110

Reviews:

Related manuals for MES-2110

Brands by name

Popular brands

ZyXEL Communications MES-2110, User Manual

Search results

Summary of Contents for MES-2110

Reviews:

Related manuals for MES-2110

Brands by name

Popular brands