ZyXEL Communications VES-1124 - User Manual Download Page 113 | Manualshive

Page: 113 / 203

background image

VES-1124 User’s Guide

Port Security

15-1

Chapter 15

Port Security

This chapter shows you how to set up port security.

15.1 About Port Security

Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC
addresses to pass through a port on the switch. The switch can learn up to 6K MAC addresses in total with no limit
on individual ports other than the sum cannot exceed 6K.

For maximum port security, enable this feature, disable MAC address learning and configure static MAC
address(es) for a port. It is not recommended you disable

Port Security

together with MAC address learning as this

will result in many broadcasts

15.2 Port Security Setup

Click

Port Security

in the navigation panel to display the screen as shown.

«
...
111
112
113
114
115
...
»

Summary of Contents for VES-1124 -

Page 1: ...VES 1124 24 port QAM 2 band VDSL Switch User s Guide July 2004 Version 3 50 LP 0 ...

Page 2: ...ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patents rights of others ZyXEL further reserves the right to make changes in any products described here...

Page 3: ...o provide reasonable protection against harmful interference in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user wi...

Page 4: ...damaged remove it from the power outlet Do NOT attempt to repair the power supply Contact your local vendor to order a new power supply Place connecting cables carefully so that that no one will step on them or stumble over them Do NOT allow anything to rest on the power cord and do NOT locate the product where anyone can walk on the power cord If you wall mount your device make sure that no elect...

Page 5: ...y an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of...

Page 6: ...xel com ZyXEL Communications Inc 1130 N Miller St Anaheim CA 92806 2001 U S A support zyxel de 49 2405 6909 0 www zyxel de GERMANY sales zyxel de 49 2405 6909 99 ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany 33 0 4 72 52 97 97 FRANCE info zyxel fr 33 0 4 72 52 19 20 www zyxel fr ZyXEL France 1 rue des Vergers Bat 1 C 69760 Limonest France support zyxel es 34 902 195 420 SPAIN ...

Page 7: ...ware Connections 3 1 3 1 Front Panel 3 1 3 2 Front Panel LEDs 3 2 3 3 Rear Panel 3 3 Chapter 4 Introducing the Web Configurator 4 1 4 1 Introduction 4 1 4 2 System Login 4 1 4 3 Status Screen 4 1 4 4 Switch Lockout 4 6 4 5 Resetting the Switch 4 6 Chapter 5 Status Port Details and VDSL Summary 5 1 5 1 Overview 5 1 5 2 Port Status 5 1 Chapter 6 Basic Setting 6 1 6 1 Introducing The Basic Setting Sc...

Page 8: ...m Control 11 1 Chapter 12 Mirroring 12 1 12 1 Introduction to Port Mirroring 12 1 12 2 Port Mirroring Configuration 12 1 Chapter 13 Link Aggregation 13 1 13 1 Introduction to Link Aggregation 13 1 13 2 Link Aggregation Protocol Status 13 2 13 3 Link Aggregation Setup 13 3 Chapter 14 Port Authentication 14 1 14 1 Introduction to Authentication 14 1 14 2 Configuring Port Authentication 14 1 Chapter ...

Page 9: ...23 1 Introduction to ARP Table 23 1 23 2 Viewing ARP Table 23 1 Chapter 24 Introduction to CLI 24 1 24 1 Command Line Interface Overview 24 1 24 2 Command Summary 24 2 Chapter 25 Command Examples 25 1 25 1 Commonly Used Commands Overview 25 1 25 2 sys Commands 25 1 25 3 sys cluster Commands 25 3 25 4 ip Commands 25 5 25 5 vdsl Commands 25 6 25 6 Enabling rstp on a VDSL Port 25 8 Chapter 26 IEEE 80...

Page 10: ...ystem Info 6 2 Figure 6 2 General Setup 6 4 Figure 6 3 Switch Setup 6 7 Figure 6 4 Port Setup 6 11 Figure 6 5 VDSL Common Setup 6 14 Figure 6 6 VDSL Profile Setup 6 15 Figure 6 7 VDSL Profile Setup Summary Table 6 16 Figure 7 1 Selecting a VLAN Type 7 3 Figure 7 2 802 1Q VLAN Status 7 3 Figure 7 3 802 1Q VLAN Port Settings 7 5 Figure 7 4 802 1Q Static VLAN 7 7 Figure 7 5 Static VLAN Summary Table ...

Page 11: ... 19 6 Restart Switch After Load Factory Defaults 19 3 Figure 19 7 Confirm Restart the Switch 19 4 Figure 20 1 Diagnostic 20 1 Figure 21 1 Clustering Application Example 21 1 Figure 21 2 Cluster Management Status 21 2 Figure 21 3 Cluster Member Web Configuration Screen Example 21 3 Figure 21 4 Example Uploading Firmware to a Cluster Member Switch 21 4 Figure 21 5 Configuring Cluster Management 21 5...

Page 12: ...Example 26 3 Figure 26 4 GARP STATUS Command Example 26 3 Figure 26 5 garp timer Command Example 26 4 Figure 26 6 garp status Command Example 26 4 Figure 26 7 vlan1q port status Command Example 26 5 Figure 26 8 vlan1q port default vid Command Example 26 5 Figure 26 9 vlan1q port accept Command Example 26 6 Figure 26 10 vlan1q port gvrp Command Example 26 6 Figure 26 11 vlan1q svlan cpu Command Exa...

Page 13: ...02 1Q Static VLAN 7 8 Table 7 5 Static VLAN Summary Table 7 8 Table 7 6 Port Based VLAN Setup 7 12 Table 8 1 Static MAC Forwarding 8 1 Table 8 2 Static MAC Forwarding Summary Table 8 2 Table 9 1 STP Path Costs 9 1 Table 9 2 STP Port States 9 2 Table 9 3 Spanning Tree Protocol Status 9 3 Table 9 4 Spanning Tree Protocol Configuration 9 6 Table 10 1 Bandwidth Control 10 2 Table 11 1 Broadcast Storm ...

Page 14: ...g Cluster Management 21 5 Table 22 1 MAC Table 22 2 Table 23 1 ARP Table 23 2 Table 24 1 Command Summary sys 24 2 Table 24 2 Command Summary sys sw 24 6 Table 24 3 Command Summary exit 24 11 Table 24 4 Command Summary ip 24 12 Table 24 5 Command Summary vdsl 24 13 Table 24 6 Command Summary config 24 15 Table 23 1 Troubleshooting Data Transmission A Table 23 2 Troubleshooting a Non Constant VDSL L...

Page 15: ...choices Predefined choices are in Bold Arial font Button and field labels links and screen names in are in Bold Times New Roman font A single keystroke is in Arial font and enclosed in square brackets ENTER means the Enter or carriage return key ESC means the Escape key and SPACE BAR means the Space Bar For brevity s sake we will use e g as shorthand for for instance and i e for that is or in othe...

Page 16: ...sion model code and release number as shown in the following example Firmware Version V3 50 LP 0 V3 50 is the network operating system platform version LP is the model code 0 is this firmware s release number This varies as new firmware is released Your firmware s release number may not match what is displayed in this User s Guide ...

Page 17: ...Getting Ready I Part I Getting Ready This part acquaints you with the features and applications of the VES 1124 instructs you how to make the hardware connections understand the front panel LEDs ...

Page 18: ......

Page 19: ...yping cryptic command strings In addition the switch can also be managed via Telnet the console port or third party SNMP management 1 2 Features1 The next two sections describe the hardware and firmware features of the VES 1 2 1 Hardware Features QAM Modulation The VES combined with the Prestige 841 VDSL modem provides service providers a QAM quadrature amplitude modulation based VDSL solution Ban...

Page 20: ...ation of the switch in even poorly ventilated rooms or basements 1 2 2 Firmware Features IP Protocols IP Host No routing Telnet for configuration and monitoring SNMP for management SNMP MIB II RFC 1213 SNMP v1 RFC 1157 SNMPv2 SNMPv2c or later version compliant with RFC 2011 SNMPv2 MIB for IP RFC 2012 SNMPv2 MIB for TCP RFC 2013 SNMPv2 MIB for UDP Ethernet MIBs RFC 1643 Bridge MIBs RFC 1493 2674 SM...

Page 21: ...ast traffic to be only forwarded to ports that are members of that group thus allowing you to significantly reduce multicast traffic passing through your switch Broadcast storm control Quality of Service Two priority queues so you can ensure mission critical data gets delivered on time Follows the IEEE 802 1p priority setting standard STP Spanning Tree Protocol RSTP Rapid STP R STP detects and bre...

Page 22: ...quality teleconferencing 1 3 1 MTU Application The following diagram depicts a typical application of the VES with Prestige 841 VDSL modems in a large residential building or multiple tenant unit MTU that leverages existing phone line wiring to provide Internet access to all tenants Note that VDSL service can coexist with voice service on the same line Figure 1 1 MTU Application 1 3 2 Curbside App...

Page 23: ...VES 1124 User s Guide Getting to know the VES 1124 1 5 Figure 1 2 Curbside Application ...

Page 24: ......

Page 25: ...tions 2 2 Desktop Installation Procedure 1 Make sure the switch is clean and dry 2 Set the switch on a smooth level surface strong enough to support the weight of the switch and the connected cables Make sure there is a power outlet nearby 3 Make sure there is enough clearance around the switch to allow air circulation and the attachment of cables and the power cord 4 Remove the adhesive backing f...

Page 26: ...racket with the holes on one side of the switch and secure it with the bracket screws smaller than the rack mounting screws 2 Attach the other bracket in a similar fashion Figure 2 2 Attaching Mounting Brackets and Screws 3 After attaching both mounting brackets position the switch in the rack by lining up the holes in the brackets with the appropriate holes on the rack Secure the switch to the ra...

Page 27: ...connects to the central office or a PBX USER The USER Telco 50 port connects to the user subscriber VDSL equipment 10 100 25 26 These uplink ports allow you to connect to any switch 3 1 1 Console Port Connection For local management you can use a computer with terminal emulation software configured to the following parameters VT100 terminal emulation 9600 bps No parity 8 data bits 1 stop bit No fl...

Page 28: ...the VES determines the connection speed by detecting the signal on the cable and using half duplex mode When the VES s auto negotiation is turned off an Ethernet port uses the pre configured speed and duplex mode when making a connection thus requiring you to make sure that the settings of the peer Ethernet port are the same in order to connect You may also bundle the two Ethernet ports into one l...

Page 29: ...tting receiving to from a 100 Mbps Ethernet network On The link to a 100 Mbps Ethernet network is up 10 100 25 26 Yellow Off The link to a 100 Mbps Ethernet network is down 3 3 Rear Panel The following figure shows the rear panel of the VES The rear panel contains the power receptacle and the power switch Figure 3 2 VES 1124 Back Panel 3 3 1 Power Connector Make sure you are using the correct powe...

Page 30: ......

Page 31: ...or Getting Started II Part II Web Configurator Getting Started This part introduces you to the VES web configurator including accessing and navigating a screens overview and how to configure the Basic Setting screens ...

Page 32: ......

Page 33: ...t Explorer or Netscape Navigator web browser 2 Type http and the IP address of the switch for example the default is 192 168 1 1 in the Location or Address field Press Enter 3 The login screen appears The default username is admin and associated default password is 1234 The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General S...

Page 34: ...ator Status Screen In the navigation panel click a main link to reveal a list of submenu links Click here for help on configuring a screen Click Logout to exit the web configurator Click Status to view current device statistics Navigation Panel Click on a tab to display related links ...

Page 35: ...System Info General Setup Switch Setup IP Setup Port Setup VDSL Common Setup VDSL Profile Setup VLAN VLAN Port Setting Static VLAN Static MAC Forwarding Spanning Tree Protocol Status Configuration Bandwidth Control Broadcast Storm Control Mirroring Link Aggregation Status Configuration Port Authentication RADIUS 802 1x Port Security Access Control Static Routing Maintenance Firmware Upgrade Restor...

Page 36: ...tup This link takes you to a screen where you can configure VDSL profiles Advanced Application VLAN This link takes you to screens where you can configure port based or 802 1Q VLAN depending on what you configured in the Switch Setup menu Static MAC Forwarding This link takes you to screens where you can configure static MAC addresses for a port These static MAC addresses do not age out Spanning T...

Page 37: ...rs manually Management Maintenance This link takes you to screens where you can perform firmware and configuration file maintenance as well as reboot the system Diagnostic This link takes you to screens where you can view system logs and test port s Cluster Management This link takes you to a screen where you can configure clustering management and view its status MAC Table This link takes you to ...

Page 38: ...U port is the management port of the device 3 Filtering all traffic to the CPU port 4 Disabling all ports 5 Assigning minimum bandwidth to the CPU port If you limit bandwidth to the CPU port you may find that the device performs sluggishly or not at all Be careful not to lock yourself and others out of the switch 4 5 Resetting the Switch If you lock yourself and others from the VES you will need t...

Page 39: ... Configuration File Via Console Port If you forget the VES s password you will need to reload the factory default configuration file via console port Use the following procedure 1 Connect to the console port using a computer with terminal emulation software See the chapter on hardware connections for details 2 Disconnect and reconnect the VES s power to begin a session When you reconnect the switc...

Page 40: ...ession both for security reasons and so as you don t lock out other VES administrators Figure 4 6 Web Configurator Logout Screen 4 5 4 Help The web configurator s online help has descriptions of individual screens and some supplementary information Click the Help link from the home screen to view the online help s home screen summary menu Click the Help link from a web configurator screen other th...

Page 41: ...r home page and port details screens 5 1 Overview The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details You can also access the summary screen for the VDSL status 5 2 Port Status To view the port statistics click Status in any web configurator screen to display the Status screen as shown next ...

Page 42: ...VES 1124 User s Guide 5 2 Status Port Details and VDSL Summary Figure 5 1 Status The following table describes the labels in this screen ...

Page 43: ...his field displays the speed either 10M for 10Mbps or 100M for 100Mbps and the duplex F for full duplex or H for half and displays Down when the line is down or not connected State This field displays the STP Spanning Tree Protocol state disabled listening blocking learning or forwarding of the port LACP This fields displays whether the Link Aggregation Control Protocol LACP has been enabled on th...

Page 44: ...stics click VDSL Summary in the Status screen Figure 5 2 Status VDSL Summary 5 2 2 The Port Details Screens Click a number in the Port column in the Status screen to display individual port statistics Use this screen to check status and detailed performance data about an individual port on the switch ...

Page 45: ...VES 1124 User s Guide Status Port Details and VDSL Summary 5 5 Figure 5 3 Status VDSL Port Details ...

Page 46: ...tream downstream interleave delay Transmit Power This field displays the upstream downstream transmission power of the line Attenuation This field displays the upstream downstream attenuation CRC Error This field displays the number of CRC Cyclical Redundancy Check error packet RS Correct This field displays the number of Reed Solomon RS correct packets RS Uncorrect This field displays the number ...

Page 47: ...d 511 octets in length 512 1023 bytes This field shows the number of packets including bad packets transmitted that were between 512 and 1023 octets in length 1024 1518 bytes This field shows the number of packets including bad packets transmitted that were between 1024 and 1518 octets in length 1518 bytes This field shows the number of packets including bad packets transmitted that were longer th...

Page 48: ...et This field shows the number of frames dropped because they were bigger than the maximum frame size Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to stop port statistic polling ...

Page 49: ...VES 1124 User s Guide Status Port Details and VDSL Summary 5 9 Figure 5 4 Status Port Details Ethernet The following table describes the labels in this screen ...

Page 50: ...s the total amount of time the connection has been up Tx Packet The following fields display detailed information about frames transmitted Octet This field shows the number of octets transmitted Unicast This field shows the number of good unicast packets received Rx Packet The following fields display detailed information about frames received Octet This field shows the number of octets received 6...

Page 51: ... This field shows the number of frames received of the proper size but with CRC error s and a non integral number of octets OverSize This field shows the number of packets received that were bigger than the maximum frame size Align This field shows the number of frames received of proper size but with CRC error s and a non integral number of octets Jabber This field shows the number of frames rece...

Page 52: ... field shows the number of packets that were dropped because the queue time was longer than the lifetime setting OutQueLen This field shows the number of packets in the SWITCH s output queue waiting for transmission Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interv...

Page 53: ...up screen also allows you to set the system time manually or get the current time and date from an external server when you turn on your switch The real time is then displayed in the switch logs The Switch Setup screen allows you to set up and configure global switch features The IP Setup screen allows you to configure a switch IP address subnet mask and DNS domain name server for management purpo...

Page 54: ...n Table 6 1 System Info LABEL DESCRIPTION System Name This field displays the switch s model name ZyNOS F W Version This field displays the version number of the switch s current firmware including the date created Modem Code F W Version This field displays the version number of the switch s current modem code version ...

Page 55: ...nent along with a sufficiently ventilated cool operating environment in order for the device to stay within the temperature threshold Each fan has a sensor that is capable of detecting and reporting if the fan speed falls below the threshold shown Current This field displays this fan s current speed in Revolutions Per Minute RPM 41 is displayed for speeds equal to 0 RPM if the fan is removed or ca...

Page 56: ...efresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt statistic polling 6 3 General Setup Click Basic Setting and General Setup in the navigation panel to display the screen as shown Figure 6 2 General Setup The following table describes the labels in this screen Table 6 2 General Setup LABEL DESCRIPTION System Name Choose a descriptive name ...

Page 57: ...urrent Time This field displays the time you open this menu or refresh the menu New Time hh mm ss Enter the new time in hour minute and second format The new time then appears in the Current Time field after you click Apply Current Date This field displays the date you open this menu New Date yyyy mm dd Enter the new date in year month and day format The new date then appears in the Current Date f...

Page 58: ...passively snoop on IGMP Query Report and Leave IGMP version 2 packets transferred between IP multicast routers switches and IP multicast hosts to learn the IP multicast group membership It checks IGMP packets passing through it picks out the group registration information and configures multicasting accordingly Without IGMP snooping multicast traffic is treated in the same manner as broadcast traf...

Page 59: ...ormation on VLANs IGMP Snooping Select Active to enable IGMP snooping have group multicast traffic only forwarded to ports that are members of the VLAN significantly reducing multicast traffic passing through your SWITCH See Section 6 5 for more information on IGMP snooping MAC Address Learning MAC address learning reduces outgoing traffic broadcasts For MAC address learning to occur on a port the...

Page 60: ... class of service Frames without an explicit priority tag are given the default priority of the ingress port The switch has two physical queues that you can map to the eight priority levels On the switch traffic assigned to the high priority queue gets through faster while traffic in the low priority queue is dropped if the network is congested See also Queuing Method and 802 1p Priority in Port S...

Page 61: ...teway IP address and a domain name server IP address automatically Static IP Address Select this option if you don t have a DHCP server or if you wish to assign static IP address information to the switch You need to fill in the following fields when you select this option IP Address Enter the IP address of your switch in dotted decimal notation for example 192 168 1 1 IP Subnet Mask Enter the IP ...

Page 62: ... order to manage the device from any port If a port is not a member of this VLAN then users on that port cannot access the device To access the switch make sure the port that you are connected to is a member of Management VLAN Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring the fields again 6 8 Port Setup Click Basic Setting and then Port Setup in...

Page 63: ...VES 1124 User s Guide Basic Setting 6 11 Figure 6 4 Port Setup The following table describes the labels in this screen ...

Page 64: ...ings of the peer Ethernet port are the same in order to connect Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port The switch uses IEEE802 3x flow control in full duplex mode and backpressure flow control ...

Page 65: ...the maximum rate of an individual VDSL port by modifying its profile see the VDSL Profile Setup screen or assigning the port to a different profile see the Port Setup screen However the actual rate varies depending on factor such as transmission range and interference 6 9 2 PSD and PBO PSD Power Spectral Density defines the distribution of a VDSL line s power in the frequency domain A PSD mask is ...

Page 66: ...be lower that the configured line rate 6 10VDSL Common Setup To configure general VDSL port settings click Basic Setting and VDSL Common Setup to display the screen as shown next Figure 6 5 VDSL Common Setup The following table describes the labels in this screen Table 6 6 VDSL Common Setup LABEL DESCRIPTION Band Plan Use the radio button to select a band plan PBO PBO Power Back Off allows the swi...

Page 67: ...port by assigning it a different profile For example you could set up different profiles for different kinds of accounts for example economy standard and premium Assign the appropriate profile to a VDSL port and it takes care of a large part of the port s configuration To configure VDSL profiles click Basic Setting and VDSL Profile Setup to display the screen as shown next Figure 6 6 VDSL Profile ...

Page 68: ...more information Add Click Add to save the new rule to the switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Delete Click Clear to clear the fields to the factory defaults 6 12Viewing and Editing VDSL Profiles To view a summary of the profile configuration scroll down to the summary table at the bottom of...

Page 69: ...tive name for this profile Line Rate This field displays the configured maximum upstream and downstream line rates in megabits per second Applied Ports This field displays the port ranges to which this profile is applied Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cancel Click Cancel to clear the selected checkboxes in the Delete column ...

Page 70: ......

Page 71: ...Advanced Application 1 III Part III Advanced Application 1 This part shows you how to configure the VLAN Static MAC Forwarding STP and Bandwidth Control Advanced Application screens ...

Page 72: ......

Page 73: ...The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 212 VLANs Note that user priority and VLAN ID are independent of each other A frame with VID VLAN Identifier of null 0 is called a priority frame meaning that only the priority level is significant and the default VID of the ingress port is given as the VID of the frame Of the 4096 possible VIDs a VID of 0 is us...

Page 74: ... to the following table for common GARP terminology Table 7 1 GARP Terminology VLAN PARAMETER TERM DESCRIPTION Permanent VLAN This is a static VLAN created manually VLAN Type Dynamic VLAN This is a VLAN configured by a GVRP registration deregistration process Registration Fixed Fixed registration ports are permanent VLAN members VLAN Administrative Control Registration Forbidden Ports with registr...

Page 75: ...creen under Basic Setting and click Apply Figure 7 1 Selecting a VLAN Type 2 Click VLAN under Advanced Application to display the VLAN Status screen as shown next Figure 7 2 802 1Q VLAN Status The following table describes the labels in this screen Table 7 2 802 1Q VLAN Status LABEL DESCRIPTION The Number of VLAN This is the number of VLANs configured on the switch ...

Page 76: ... has been since a normal VLAN was registered or a static VLAN was set up Status This field shows how this VLAN was added to the switch dynamically using GVRP or statically that is added as a permanent entry Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop C...

Page 77: ...VES 1124 User s Guide VLAN 7 5 Figure 7 3 802 1Q VLAN Port Settings The following table describes the labels in this screen ...

Page 78: ...ID The default PVID is VLAN 1 for all ports but this can be changed to any number between 1 and 4094 GVRP Select this check box to permit VLANs groups beyond the local switch on this port GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network Acceptable Frame Type Specify the type of frames allo...

Page 79: ...VES 1124 User s Guide VLAN 7 7 Figure 7 4 802 1Q Static VLAN The following table describes the labels in this screen ...

Page 80: ... switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults 7 2 3 Viewing and Editing VLAN Settings To view a summary of the VLAN configuration scroll down to the summary table at the bottom of the Static VLAN screen To change the settings of a rule cli...

Page 81: ...VES 1124 User s Guide VLAN 7 9 VID1 Example Screen Figure 7 6 VID1 Example Screen ...

Page 82: ...or example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports Port based VLANs are specific only to the switch on which they were created The port based VLAN setup screen is shown next The CPU management port forms a VLAN with all Ethernet ports 7 3 1 Configuring a Port based VLAN Select...

Page 83: ...VES 1124 User s Guide VLAN 7 11 Figure 7 7 Port Based VLAN Setup All Connected ...

Page 84: ...ng ports are selected Figure 7 7 This option is the most flexible but also the least secure Port isolation means that each port can only communicate with the Ethernet port port 25 and cannot communicate with each other or the CPU management port see Figure 7 8 This option is the most limiting but also the most secure After you make your selection click Apply top right of screen to display the scre...

Page 85: ... default it forms a VLAN with all ports If it does not form a VLAN with a particular port then the switch cannot be managed from that port Outgoing These are the egress ports an egress port is an outgoing port that is a port through which a data packet leaves If you wish to allow two subscriber ports to talk to each other you must define the egress port for both ports CPU refers to the switch mana...

Page 86: ......

Page 87: ...tch static MAC address rules on a port can only receive traffic on that port and cannot receive traffic on other ports This may reduce unicast flooding 8 2 Configuring Static MAC Forwarding Click Static MAC Forwarding to display the configuration screen as shown Figure 8 1 Static MAC Forwarding The following table describes the labels in this screen Table 8 1 Static MAC Forwarding LABEL DESCRIPTIO...

Page 88: ...C Forwarding screen To change the settings of a rule click a number in the Index field Figure 8 2 Static MAC Forwarding Summary Table The following table describes the labels in this screen Table 8 2 Static MAC Forwarding Summary Table LABEL DESCRIPTION Index Click an index number to modify a static MAC address rule for a port Active This field displays whether this static MAC address forwarding r...

Page 89: ...o 65535 Path Cost 10Mbps 100 50 to 600 1 to 65535 Path Cost 16Mbps 62 40 to 400 1 to 65535 Path Cost 100Mbps 19 10 to 60 1 to 65535 Path Cost 1Gbps 4 3 to 10 1 to 65535 Path Cost 10Gbps 2 1 to 5 1 to 65535 On each bridge the root port is the port through which this bridge communicates with the root It is the port on this switch with the lowest path cost to the root the root path cost If there is n...

Page 90: ... to eliminate packet looping A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate transient loops Table 9 2 STP Port States PORT STATE DESCRIPTION Disabled STP is disabled default Blocking Only configuration and management BPDUs are received and processed Listening All BPDUs are received and processed Learning All BPDUs are received and processed I...

Page 91: ...idge consisting of bridge priority plus MAC address This ID is the same for Root and Our Bridge if the switch is the root switch Hello Time second This is the time interval in seconds at which the root switch transmits a configuration message The root bridge determines Hello Time Max Age and Forwarding Delay Max Age second This is the maximum time in seconds a switch can wait without receiving a c...

Page 92: ...ber of times the spanning tree has been reconfigured Time Since Last Change This is the time since the spanning tree was last reconfigured Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt STP statistic polling 9 4 1 Configuring STP To con...

Page 93: ...VES 1124 User s Guide Spanning Tree Protocol 9 5 Figure 9 2 Spanning Tree Protocol Configuration The following table describes the labels in this screen ...

Page 94: ...d port for the attached LAN If it is a root port a new root port is selected from among the switch ports attached to the network The allowed range is 6 to 40 seconds Forwarding Delay This is the maximum time in seconds a switch will wait before changing states This delay is required because every switch must receive information about topology changes before it starts to forward frames In addition ...

Page 95: ...fied destination s using the Bandwidth Control setup screens 10 1Introduction to Bandwidth Control Bandwidth control means defining a maximum allowable bandwidth for traffic flows going into or going out from individual VDSL ports Click Advanced Application and then Bandwidth Control in the navigation panel to bring up the screen as shown next Figure 10 1 Bandwidth Control ...

Page 96: ...ct this check box to enable bandwidth control on a VDSL port Clear this check box to disable bandwidth control on a VDSL port Egress Rate Type the maximum bandwidth allowed in kilobits per second kbps for traffic going out of this port Enter a number between 100 and 100000 Apply Click Apply to save your changes back to the switch Cancel Click Cancel to reset the fields to your previous configurati...

Page 97: ... IV Part IV Advanced Application 2 This part shows you how to configure the Broadcast Storm Control Mirroring Link Aggregation Port Authentication Port Security Access Control and Queuing Method Advanced Application screens ...

Page 98: ......

Page 99: ...om Control in the navigation panel to display the screen as shown next Figure 11 1 Broadcast Storm Control The following table describes the labels in this screen Table 11 1 Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable broadcast storm control on the switch BSF ON Threshold Use the drop down list box to select the Broadcast Storm Filtering BSF threshold The switc...

Page 100: ......

Page 101: ... to a monitor port so you can examine the traffic on the monitor port without interfering with the traffic on the mirrored ports 12 2Port Mirroring Configuration Click Advanced Application and then Mirroring in the navigation panel to display the Mirroring screen 12 2 1 Setting Up Port Mirroring You must first select a monitor port A monitor port is a port that copies the traffic of mirrored ports...

Page 102: ...VES 1124 User s Guide 12 2 Mirroring Figure 12 1 Mirroring The following table describes the related labels in this screen ...

Page 103: ...monitor port Select Ingress to copy the traffic coming into the switch through the mirrored port s Select Egress to copy the traffic going out of the switch through the mirrored port s Select Both to copy the traffic coming into or going out of the switch through the mirrored port s Port A mirrored port is a port from which you copy the traffic to the monitor port Do this to examine the mirrored p...

Page 104: ......

Page 105: ...orts the link aggregation IEEE802 3ad standard This standard describes the Link Aggregate Control Protocol LACP which is a protocol that dynamically creates and manages trunk groups When you enable LACP link aggregation on a port the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups LACP also allows port redundancy that is if an operational port ...

Page 106: ...000 00 0000 System priority MAC address Key Port Priority1 Port Number1 Figure 13 1 Aggregation ID 13 2Link Aggregation Protocol Status Click Advanced Application Link Aggregation in the navigation panel to display the Link Aggregation Protocol Status screen Figure 13 2 Link Aggregation Link Aggregation Protocol Status The following table describes the labels in this screen 1 This is 0 as it is th...

Page 107: ...se are the ports that are currently transmitting data as one logical link in this trunk group Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt statistic polling 13 3Link Aggregation Setup Click Configuration in the Link Aggregation Protoc...

Page 108: ... trunk group You may temporarily deactivate a trunk group without deleting it by clearing this check box Dynamic LACP Select this check box to enable LACP for a trunk group Port This is the ports in the trunk group s port range and is not configurable Group Select T1 to add the ports to the link aggregation group Otherwise select None to remove the ports from the group LACP Timeout Timeout is the ...

Page 109: ...vice user database that is limited to the memory capacity of the device In essence RADIUS authentication allows you to validate an unlimited number of users from a central location Figure 14 1 RADIUS Server 14 2Configuring Port Authentication To enable port authentication first activate IEEE802 1x security both on the switch and the port s then configure the RADIUS server settings Click Port Authe...

Page 110: ...mal notation UDP Port The default port of the RADIUS server for authentication is 1812 You need not change this value unless your network administrator instructs you to do so Shared Secret Specify a password up to 31 alphanumeric characters as the key to be shared between the external RADIUS server and the switch This key is not sent over the network This key must be the same on the external RADIU...

Page 111: ...VES 1124 User s Guide Port Authentication 14 3 Figure 14 4 Port Authentication 802 1x The following table describes the labels in this screen ...

Page 112: ...s checkbox to permit 802 1x authentication on this port You must first allow 802 1x authentication on the switch before configuring it on each port Reauthentication Specify if a subscriber has to periodically re enter his or her username and password to stay connected to the port Reauthentication Timer Specify how often a client has to re enter his or her username and password to stay connected to...

Page 113: ...n the switch The switch can learn up to 6K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 6K For maximum port security enable this feature disable MAC address learning and configure static MAC address es for a port It is not recommended you disable Port Security together with MAC address learning as this will result in many broadcasts 15 2Port Security Se...

Page 114: ...ecurity LABEL DESCRIPTION Port This field displays a port number Active Select this check box to have this port only accept frames from static MAC addresses that are configured for the port The switch will drop frames from MAC addresses that are not statically configured for the port Apply Click Apply to save your changes back to the switch ...

Page 115: ...VES 1124 User s Guide Port Security 15 3 Table 15 1 Port Security LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh ...

Page 116: ......

Page 117: ...sion and Telnet access control session cannot coexist The console port has higher priority If you telnet to the switch and someone is already logged in from the console port then you will see the following message Figure 16 2 Console Port Priority A console port or Telnet session can coexist with one FTP session up to five Web sessions five different usernames and passwords and or limitless SNMP a...

Page 118: ...work management functions It executes applications that control and monitor managed devices The managed devices contain object variables managed objects that define each piece of information to be collected about a switch Examples of variables include such as number of packets received node port status etc A Management Information Base MIB is a collection of managed objects SNMP allows a manager a...

Page 119: ...SL private MIB 16 3 2 SNMP Traps The VES sends traps to an SNMP manager when an event occurs SNMP traps supported are outlined in the following table Table 16 3 SNMP Traps GENERIC TRAP SPECIFIC TRAP DESCRIPTION 0 Cold Start 0 This trap is sent when the VES is turned on 1 WarmStart 0 This trap is sent when the VES restarts 2 linkDown 0 This trap is sent when the Ethernet link is down 3 linkUp 0 Thi...

Page 120: ... Trap Destination Enter the IP addresses of up to four stations to send your SNMP traps to Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh 16 3 4 Setting Up Login Accounts Up to five people one administrator and four non administrators may access the VES via web configurator at any one time 1 An administrator is someone who can ...

Page 121: ... administrator user name Only the administrator has read write access Old Password Type the existing system password 1234 is the default password when shipped New Password Enter your new system password Retype to confirm Retype your new system password for confirmation Edit Logins You may configure passwords for up to four users These people have read only access User Name Set a user name up to 30...

Page 122: ... in this screen Table 16 6 Access Control Service Access Control LABEL DESCRIPTION Services Services you may use to access the switch are listed here Active Select the Active check boxes for the corresponding services that you want to allow to access the switch Service Port For Telnet FTP or web services you may change the default service port by typing the new port number in the Service Port fiel...

Page 123: ...use a service to manage the switch Active Select this check box to activate this secured client set Clear the check box if you wish to temporarily disable the set without deleting it Start Address End Address Configure the IP address range of trusted computers fro which you can manage this switch The switch checks if the client IP address of a computer requesting a service or protocol matches the ...

Page 124: ......

Page 125: ...trict priority queuing services queues based on priority only As traffic comes into the switch traffic in the high priority queue is transmitted first When the high priority queue empties traffic in the low priority queue is transmitted until the low priority queue empties If the high priority queue never empties then traffic in the low priority queue never gets sent Strict priority queuing does n...

Page 126: ...ue with a larger weight gets more service than a queue with a smaller weight High Weight Configure this field when you select Weighted Round Robin Scheduling in the Method field Select a weight 1 7 for the high priority queue traffic This sets the ratio of how much high priority queue traffic the switch transmits in relation to the amount of low priority queue traffic see the Low Weight field Low ...

Page 127: ...ity queue for every three frames it sends from the low priority queue on average In other words as long as both queues are full on average five eighths of the frames the switch sends are from the high priority queue and three eighths are from the low priority queue Figure 17 3 Weighted Round Robin Scheduling Ratio Example Low priority queue traffic High priority queue traffic ...

Page 128: ......

Page 129: ...Routing Protocol and Management V Part V Routing Protocol and Management This part describes the Routing Protocol and Management screens ...

Page 130: ......

Page 131: ...he switch from a device with an IP address on a different subnet from that of the switch s IP address remote management Click Routing Protocol in the navigation panel and then Static Routing to display the screen as shown Figure 18 1 Static Routing The following table describes the related labels you use to create a static route Table 18 1 Static Routing LABEL DESCRIPTION Active This field allows ...

Page 132: ...5 In practice 2 or 3 is usually a good number Add Click Add to save the new rule to the switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults View the current static routes on the switch in the summary table at the bottom of the screen Figure 18 2 ...

Page 133: ...ary Table LABEL DESCRIPTION Metric This field displays the cost of transmission for routing purposes Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cancel Click Cancel to clear the selected checkboxes in the Delete column ...

Page 134: ......

Page 135: ...pen the following screen Figure 19 1 Maintenance 19 2Firmware Upgrade 1 Click Firmware Upgrade in the Maintenance screen if you want to upgrade your switch firmware See the System Info screen to verify your current firmware version number Make sure you have downloaded and unzipped the correct model firmware and version to your computer before uploading to the device Be sure to upload the correct m...

Page 136: ...Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to display a Choose File screen from which you can locate it After you have specified the file click Restore rom 0 is the name of the configuration file on the switch so your backup configuration file is automatically renamed when you restore using this screen 19 4Backing Up a Config...

Page 137: ...efaults 1 Press the Click Here button next to Load Factory Defaults to clear all switch configuration information you configured and return to the factory defaults The following message appears Figure 19 5 Confirm Load factory Defaults 2 Click OK to go to the next screen Figure 19 6 Restart Switch After Load Factory Defaults 3 Click OK to begin resetting all switch configurations to the factory de...

Page 138: ...r rom 0 contains the factory default settings in the screens such as password switch setup IP Setup etc It arrives from ZyXEL with a rom filename extension Once you have customized the switch s settings they can be saved back to your computer under a filename of your choosing ZyNOS ZyXEL Network Operating System sometimes referred to as the ras file is the system firmware and has a bin filename ex...

Page 139: ...m the computer to the switch for example put firmware bin ras transfers the firmware on your computer firmware bin to the switch and renames it ras Similarly put config rom rom 0 transfers the configuration file on your computer config rom to the switch and renames it rom 0 Likewise get rom 0 config rom transfers the configuration file on the switch to your computer and renames it config rom See e...

Page 140: ...e transferred in binary mode Initial Remote Directory Specify the default remote directory path Initial Local Directory Specify the default local directory path 19 7 4 FTP over WAN Restrictions FTP over WAN will not work when Telnet service is disabled in Secured Client Sets The IP address es in the Secured Client Sets menu does not match the client IP address If it does not match the switch will ...

Page 141: ...panel to display this screen Use this screen to check system logs ping IP addresses or perform loopback test on a port Figure 20 1 Diagnostic The following table describes the labels in this screen Table 20 1 Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty the text box and reset the syslog entry ...

Page 142: ...g Type the IP address of a device that you want to ping in order to test a connection Click Ping to have the switch ping the IP address in the field to the left three times Port Test From the Port drop down list box select a port number and click Port Test to perform VDSL loopback test ...

Page 143: ...lustering Management Specifications Maximum number of cluster members 24 Cluster Member Models Must be compatible with ZyXEL cluster management implementation Cluster Manager The switch through which you manage the cluster member switches Cluster Members The switches being managed by the cluster manager switch In the following example switch A in the basement is the cluster manager and the other s...

Page 144: ...he cluster member switch directly and not via the cluster manager o None neither a manager nor a member of a cluster Manager This field displays the cluster manager switch s hardware MAC Address The Number of Member This field displays the number of switches that make up this cluster The following fields describe the cluster member switches Index You can manage cluster member switches via the clus...

Page 145: ...2 1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch s web configurator home page This cluster member web configurator home page and the home page that you d see if you accessed it directly are different see Figure 21 3 Figure 21 3 Cluster Memb...

Page 146: ...seen in the cluster manager switch config 00 a0 c5 05 02 34 The cluster member switch s configuration file name as seen in the cluster manager switch 21 3Configuring Cluster Management Click Configuration from the Cluster Management screen to display the next screen C ftp Cluster Manager IP address User Enter Password 1234 is the default password 230 Logged in 230 Logged in ftp ls 200 Port command...

Page 147: ...an only have one manager Other directly connected switches that are set to be cluster managers will not be visible in the Clustering Candidates list If a switch that was previously a cluster member is later set to become a cluster manager then its Status is displayed as Error in the Cluster Management Status screen and a warning icon appears in the member summary list below Name Type a name to ide...

Page 148: ...er member s password is its web configurator password Select a member in the Clustering Candidate list and then enter its web configurator password If that switch administrator changes the web configurator password afterwards then it cannot be managed from the Cluster Manager Its Status is displayed as Error in the Cluster Management Status screen and a warning icon appears in the member summary l...

Page 149: ...llowing figure 1 The switch examines a received frame and learns the port on which this source MAC address came 2 The switch checks to see if the frame s destination MAC address matches a source MAC address already learned in the MAC table If the switch has already learned the port for this MAC address then it forwards the frame to that port If the switch has not already learned the port for this ...

Page 150: ...ed in the summary table below MAC Click this button to display and arrange the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to display and arrange the data according to port number Index This is the incoming frame index number MAC Address This is the MAC address of the device from which this incoming frame came V...

Page 151: ...ound for the IP address ARP broadcasts the request to all the devices on the LAN The switch fills in its own MAC and IP address in the sender address fields and puts the known IP address of the target in the target IP address field In addition the switch puts all ones in the target MAC field FF FF FF FF FF FF is the Ethernet broadcast address The replying device which is either the IP address of t...

Page 152: ...dress This is the learned IP address of a device connected to a switch port with corresponding MAC address below MAC Address This is the MAC address of the device with corresponding IP address above Type This shows whether the MAC address is dynamic learned by the switch or static manually entered in Static MAC Forwarding ...

Page 153: ...Commands VI Part VI Commands This part gives information on Command Line Interface CLI commands for the VES 1124 ...

Page 154: ......

Page 155: ...fter you restart the switch However you cannot use config save for all other line command configurations These are saved in volatile memory DRAM so are not effective after you restart the switch 24 1 1 Accessing the Command Line Interface There are two ways to access the command line interface on the VES Telnet to the switch Connect a computer to the console port and use terminal emulation softwar...

Page 156: ...que string that differentiates the command For example the system date command could be abbreviated to s d 24 1 4 Getting Help Type help or to display a list of valid commands or type a command followed by help or to display a list of associated subcommands The following figure shows a sample help information Figure 24 1 CLI Help Sample Output 24 2Command Summary The following tables are summaries...

Page 157: ...ter members status Shows whether this switch is a cluster member cluster manager or neither and information about members in the cluster trace Sets the cluster management debug level active name Assign a cluster name and enable clustering it countrycode country code Sets or displays the firmware country code cpu display Displays the CPU s utilization date year month day Sets or displays the system...

Page 158: ...l block address PCB IP address and port number of peer device connected to the socket Remote Socket and task control block Owner stdio minute Sets or displays the management terminal idle timeout value syslog server Set syslog server IP address facility Set syslog facility type Set display syslog type flag mode Set syslog mode time hour min sec Sets or displays the system time trcdisp parse brief ...

Page 159: ... disables packet trace or displays the current setting disp Displays the trace packets udp Sends the trace packets to another system using UDP udp switch on off Enables disables the sending of the trace packets to another system using UDP or displays the current setting udp addr addr Sets the target IP address for sending trace packets using UDP udp port port Sets the UDP port should match that of...

Page 160: ... Shows the GVRP status enable Enables GVRP disable Disables GVRP pktcnt port 1 26 Display port statistic counter pktcntclear port 1 26 Reset port statistic counter pktsend port portID enable disable Speed FlowCtrl Port setup portstatus Displays current port status and settings phyread portID phyAddr Reads PHY register phywrite portID phyAddr data Writes PHY register qos defpri port 0 none 1 low 2 ...

Page 161: ...f the specified static VLAN list Displays a table of static VLANs vlan list all vid start_vid end_vid Shows the specified IEEE 802 1Q Tagged VLAN table status Shows the IEEE 802 1Q tagged status rstp All sys sw rstp commands relate to rapid STP configuration Refer to IEEE Std 802 1w Use config save to save your configuration changes bridge enable Enables RSTP disable Disables RSTP priority priorit...

Page 162: ...n on link aggregation control protocol LACP It is recommended that you use the web configurator to configure LACP parameters agg Displays aggregated ports port enable port_no Enables LACP on the specified port disable port_no Disables LACP on the specified port status port_no Displays whether LACP is enabled on the specified port actoradm activity port_no 0 passive 1 active Allows disallows the sp...

Page 163: ...t_no Disables 802 1X security on the specified port reauth port_no on off Turns re authentication on or off on the specified port period port_no value Configures how often the specified port should be re authenticated status port_no Displays 802 1X security status on the specified port set radius server ip Sets the external RADIUS server IP address radius secret secret Sets the external RADIUS ser...

Page 164: ...no Displays the forwarding table entries flush port Flushes learned MAC addresses in the forwarding table count port Displays the number of MAC addresses in the forwarding table search MAC VID Searches the MAC VID learned on which port mirror The following commands relate to port mirrors Port mirroring is copying traffic from one or all ports to another or all ports for external analysis enable Tu...

Page 165: ...s trunk The following commands relate to trunking Trunking is the grouping of physical ports into one logical higher capacity link del id Delete a trunk group display Displays current run time trunk settings listView Displays member list of trunk set id port_no Sets members of a trunk group mc set addr port Sets ports to a specific multicast address del addr Deletes a specific multicast address ge...

Page 166: ...amic Configures a network interface ping hostid Pings a remote host route status Displays the routing table add dest addr bits gateway metric Adds a route addiface dest addr bits iface metric Adds an entry to the routing table for the specified interface addprivate dest addr bits gateway metric Adds a private route drop host addr bits Drops a route status Displays IP statistic counters udp status ...

Page 167: ... stats disp Displays DNS statistics 24 2 5 vdsl Command Table 24 5 Command Summary vdsl COMMAND DESCRIPTION vdsl active chan_s chan_e on off This command actives deactivates the VDSL channel s clear chan_s chan_e Clears VDSL related counters condition chan_s chan_e Displays VDSL channels details debug chan_s chan_e on off This command sets the VDSL debug flag enet status chan_s chan_e This command...

Page 168: ...ly profile_name vdsl01 vdsl24 Activates a profile delete profile_name Removes a profile get profile_name Displays a profile s settings list Displays the settings of all the profiles set profile_name mode UpLnRate DownLnRate UpData DownData auto Sets profile parameters reference Displays a table showing the VDSL channels and their corresponding profiles quality chan_s chan_e Shows VDSL upstream and...

Page 169: ... can use the config save command to save 802 1Q STP Cluster and IP configuration changes to non volatile memory Flash These changes are effective after you restart the switch However you cannot use config save for all other line command configurations These are saved in volatile memory DRAM so are not effective after you restart the switch ...

Page 170: ......

Page 171: ... An example is shown next Figure 25 1 sys log disp Command Example 25 2 2 sys log clear Syntax sys log clear This command clears the system error log If you clear a log using the sys log clear command you cannot view it again 25 2 3 sys version Syntax VES 1124 sys log disp 38 Sat Jan 1 00 00 03 2000 PP02 WARN SNMP TRAP 3 link up 39 Sat Jan 1 00 00 10 2000 PINI WARN SNMP TRAP 0 cold start 40 Sat Ja...

Page 172: ...pecific VID end_vid This command displays the IEEE 802 1Q tagged VLAN table An example is shown next Figure 25 3 sys sw vlan1q vlan list Command Example 25 2 5 sys sw pktcnt Syntax sys sw pktcnt port This command displays statistics of a port An example is shown next VES 1124 sys sw vlan1q vlan list all No VID ElapsedTime Status EgressPort UntaggedPort 1 1 0 05 43 Static EEEEE EEEEE EEEEE EEEEE EE...

Page 173: ...ig save to save these configurations 25 3 1 sys cluster status Syntax VES 1124 sys sw mac list all ADDR MACADDR FID STA IsTrkGrp Port HiPriDmac HiPriSmac 9154 0005baad4f80 0002 01 00 26 00 00 Number of Static MACs 1 Number of Dynamic MACs 0 VES 1124 VES 1124 sys sw pktcnt 25 RxPkt64 4620 RxPkt65to127 2209 RxPkt128to255 1699 RxPkt256to511 595 RxPkt512to1023 414 RxPkt1024toMax 13 RxOverSizePkt 0 RxU...

Page 174: ...idate test_mem sys cluster showMember No1 ipAddr 127 0 0 1 mask 255 255 0 0 hwAddr 00 a0 c5 05 02 34 hostName test_mem modelName time 100 status 4 0 Invalid 1 waiting 2 Active 3 Inactive 4 static No2 ipAddr 127 0 0 2 mask 255 255 0 0 hwAddr 00 a0 c5 05 22 11 hostName cm member1 modelName VES 1124 channel swp05 time 90 status 2 0 Invalid 1 waiting 2 Active 3 Inactive 4 static No3 ipAddr 127 0 0 3 m...

Page 175: ...g hostid This command pings a remote host An example is shown next Figure 25 9 IP PING Command Example 25 4 2 ip route status Syntax ip route status This command displays the routing table An example is shown next VES 1124 ip ping 192 168 1 16 Resolving 192 168 1 16 192 168 1 16 sent rcvd rate rtt avg mdev max min 1 1 100 7 7 0 7 7 2 2 100 4 7 1 7 4 3 3 100 4 7 2 7 4 VES 1124 test_mem sys cluster ...

Page 176: ...nds These are the commonly used commands that belong to the vdsl group of commands Use config save to save these configurations VES 1124 ip route status Dest FF Len Device Gateway Metric stat Timer Use 192 168 1 0 00 24 swp00 192 168 1 1 1 041b 0 17439 172 16 0 0 00 16 swp00 192 168 1 2 2 801b 0 0 127 0 0 0 00 8 swp00 127 0 0 1 1 041b 0 0 VES 1124 VES 1124 ip arp status received 2 badtype 0 bogus ...

Page 177: ...dsl portdetails display Command Syntax vdsl portdetail chan_s chan_e This command displays the VDSL port details on all or specific VDSL port s The following example displays port details from VDSL port 11 to 13 VES 1124 vdsl profile apply Default VES 1124 vdsl profile list Profile Name UpSpeed DownSpeed UpData DownData Auto 10 18750 16670 187 166 On 11 18750 16670 187 166 Off 12 12500 12500 125 1...

Page 178: ...7773 Hz SNR 0 00dB MSE 0 00dB PSD 0 00dBm Hz RSERR 0 DISC 0 Downstream Status Constellation QAM 16 Int 24 Rate 4166666 bps Fc 1831054 Hz SNR 0 00dB MSE 0 00dB PSD 63 34dBm Hz RSERR 0 vdsl12 Upstream Status Constellation QAM 4 Int 32 Rate 1562500 bps Fc 4467773 Hz SNR 0 00dB MSE 0 00dB PSD 0 00dBm Hz RSERR 0 DISC 0 Downstream Status Constellation QAM 16 Int 24 Rate 4166666 bps Fc 1831054 Hz SNR 0 0...

Page 179: ...e so that it can decide whether to forward a tagged frame to a VLAN aware device or first strip the tag from a frame and then forward it to a VLAN unaware device 26 2Filtering Databases A filtering database stores and organizes VLAN registration information useful for switching frames to and from a switch A filtering database consists of a static entries Static VLAN or SVLAN table and dynamic entr...

Page 180: ...ment or CPU VLAN Use the sys sw vlan1q svlan active command to activate the new management VLAN ID Example Figure 26 2 CPU VLAN Configuration and Activation Example 3 Perform the procedure below to complete the VLAN setup a Telnet to the operational IP address of the switch b Use the sys sw vlan1q svlan cpu command to set VID 3 as the management VLAN c Use the sys sw svlan delentry command to remo...

Page 181: ...oin Period timer The allowed Join Time range is between 100 and 32767 milliseconds the default is 200 milliseconds leave timer ms This sets the duration of the Leave Period timer for GVRP in milliseconds Each port has a single Leave Period timer Leave Time must be two times larger than Join Timer the default is 600 milliseconds leave all timer ms This sets the duration of the Leave All Period time...

Page 182: ...seconds Figure 26 5 garp timer Command Example 26 4 3 gvrp status Syntax sys sw gvrp status This command shows the switch s GVRP settings An example is shown next Figure 26 6 garp status Command Example 26 4 4 gvrp enable Syntax sys sw gvrp enable This command turns on GVRP in order to propagate VLAN information beyond the switch 26 4 5 gvrp disable Syntax sys sw gvrp disable This command turns of...

Page 183: ...cified port The following example sets the default VID of port 1 to 2000 Figure 26 8 vlan1q port default vid Command Example 26 4 8 vlan1q port accept Syntax sys sw vlan1q port accept port all tagged where port A port number all tagged Specifies all Ethernet frames tagged and untagged or only tagged Ethernet frames This command sets the specified port to accept all Ethernet frames or only those wi...

Page 184: ... 26 4 10 vlan1q svlan cpu Syntax sys sw vlan1q svlan cpu VLAN ID where VID The VLAN ID Valid parameter range 1 4094 This command sets the management VLAN CPU You can only use ports that are members of this management VLAN in order to manage the switch The following example sets VLAN ID 2 to be the CPU management VLAN Figure 26 11 vlan1q svlan cpu Command Example 26 4 11 vlan1q svlan setentry Synta...

Page 185: ...e The following is an example of how to modify a static VLAN table Figure 26 12 Modifying the Static VLAN Example Forwarding Process Example Tagged Frames 1 First the switch checks the VLAN ID VID of tagged frames or assigns temporary VIDs to untagged frames see Section 26 4 7 2 The switch then checks the VID in a frame s tag against the SVLAN table 3 The switch notes what the SVLAN table says tha...

Page 186: ...ng example deletes entry 2 in the static VLAN table Figure 26 13 vlan1q svlan delentry Command Example 26 5vlan1q svlan active Syntax sys sw vlan1q svlan active VID This command enables the specified VLAN ID in the SVLAN Static VLAN table 26 6vlan1q svlan inactive Syntax sys sw vlan1q svlan inactive VID This command disables the specified VLAN ID in the SVLAN Static VLAN table 26 7vlan1q svlan lis...

Page 187: ...example shows the default VLAN settings The default VLAN allows all ports to connect to each other and sets them to send untagged packets Figure 26 15 vlan1q status Command Example VES 1124 sys sw vlan1q status 802 1Q VLAN Setup GVRP Disable Managament VLAN ID 1 VES 1124 VES 1124 sys sw vlan1q svlan list 802 1Q VLAN Static Entry idx Name VID Active AdCtl TagCtl 0 1 1 active FFFFFFFFFFFFFFFFFFFFFFF...

Page 188: ......

Page 189: ...Appendices and Index VII Part VII Appendices and Index This part includes the appendices and an index ...

Page 190: ......

Page 191: ...l 4 If the LED remains off contact the distributor Data Transmission The VDSL LED is on but data cannot be transmitted Table 23 1 Troubleshooting Data Transmission STEPS CORRECTIVE ACTION 1 Disconnect the phone wire coming from the USER port of the VES and connect the VDSL modem or router directly to the USER port of the VES using a different telephone wire If data can be transmitted check for a p...

Page 192: ...fferent telephone wire If the rates match the regular phone wire quality may be limiting the speed 2 Do a local and remote feedback test from menu 24 4 to determine if there are problems with the telephone line Configured Settings The VES s configured settings do not take effect at restart Table 23 4 Troubleshooting the VES s Configured Settings CORRECTIVE ACTION All VDSL parameters and flags set ...

Page 193: ...ay have a problem Connecting to the Switch The VES cannot connect to the switch Table 23 7 Troubleshooting Connecting to the Switch STEPS CORRECTIVE ACTION 1 Check your cable connections Use a straight through Ethernet cable when connecting the VES to a switch Use a crossover Ethernet cable if you are daisy chaining to other switches and make sure trunking is disabled 2 If Ethernet port trunking i...

Page 194: ......

Page 195: ...2 50Mbps QAM64 Baud 25M 12 fc 1 953125 MHz 16 67Mbps QAM256 Baud 25M 12 fc 1 953125 MHz VDSL Upstream Rates Parameters ANSI Mode 1 56Mbps QAM4 Baud 25M 32 fc 4 467773MHz 3 13M QAM16 Baud 25M 24 fc 4 46773MHz 6 25Mbps QAM256 Baud 25M 32 fc 4 467773MHz VDSL Downstream Rates Parameters ANSI Mode 4 17Mbps QAM16 Baud 25M 24 fc 1 831054MHz 6 25Mbps QAM8 Baud 25M 12 fc 1 953125 MHz 8 33Mbps QAM16 Baud 25...

Page 196: ...rm control Automatic address learning and aging Aging time from 10 to 765 seconds in 1 second increment default 300 seconds Switching 8 8Gbps non blocking Maximum frame size 1522 bytes including tag CRC Store and forward QoS 802 1p Two priority queues Queuing Algorithm FCFS SP WRR Port based bandwidth control from 100Kbps to 100Mbps by 1518bytes packets IGMP snooping Port Mirroring Port based mirr...

Page 197: ... fuse Caution For continued protection against risk of fire replace only with the same type and fuse rating Temperature Threshold There are three temperature sensors on the VES 1124 T1 VDSL Chipset 65 C ON 60 C OFF T2 Power 70 C ON 65 C OFF T3 Switch 65 C ON 60 C OFF Voltage Threshold There are 6 voltages on the VES 1124 1 8V Digital 5 1 8V Analog 5 2 5V 5 3 3V 5 5V 5 15V 5 Operating Temperature 0...

Page 198: ......

Page 199: ...t 3 1 Cold Start 16 3 Command exit command 24 11 ip commands 24 12 Summary 24 2 vdsl commands 24 13 Command Command conventions 24 1 Forwarding Process Example 26 7 IEEE 802 1Q Tagged VLAN commands example 26 1 Syntax conventions 24 2 sys sw Commands 24 6 Command Line Interface 4 7 VII Accessing 24 1 Introduction 24 1 Commands config save 24 14 config save 24 1 24 6 24 7 24 15 Configured Settings ...

Page 200: ...ZyXEL Web Site xv GVRP 7 6 26 1 GVRP GARP VLAN Registration Protocol 7 2 7 6 gvrp disable 26 4 gvrp enable 26 4 gvrp status 26 4 H Hardware Monitor Fans 6 3 Temperature unit 6 3 Hello Time 9 3 9 6 Help 4 8 I IEEE 802 1p 6 8 IEEE 802 1Q See Tagged VLAN IEEE 802 1Q Tagged VLAN 26 1 IEEE 802 1x 14 1 IGMP Snooping 6 6 Ingress Check 7 6 Ingress filtering 7 2 Interference Statements iii Intermittent VDS...

Page 201: ...iority Level 6 8 Priority Queue Assignment 6 8 Product specifications E Profile 6 15 PSD Power Spectral Density 6 13 PVID 7 6 R RADIUS Remote Authentication Dial In User Service 14 1 RADIUS Setup 14 2 ras 19 4 Ras 19 4 Rate Adaption 6 13 Fixed Rate 6 14 Rate Adaptive Decrease Mode 6 14 Rear Panel Connections Rear Panel 3 3 Reauthentication 14 4 Related Documentation xv Remote Management 16 6 Remot...

Page 202: ... 4 System up Time 5 3 T Tag Control Information 7 1 Tag Protocol Identifier 7 1 Tagged VLAN 7 1 GARP 7 2 GVRP 7 2 Memebership Registration 7 1 Taiwanese BSMI A Warning iii TCI See Tag Control Information Terminal emulation 3 1 Terminal Emulation 3 1 24 1 Time RFC 868 6 5 Time server protocol supported 6 5 TPID See Tag Protocol Identifier Trademarks ii Trap 16 4 trusted computers 16 7 TX Collision ...

Page 203: ...1q svlan active 26 8 vlan1q svlan cpu 26 6 vlan1q svlan delentry 26 8 vlan1q svlan inactive 26 8 vlan1q svlan list 26 8 vlan1q svlan setentry 26 6 VT100 3 1 24 1 W WarmStart 16 3 Web Configurator Logging out 4 8 Online help 4 8 Recommended browsers 4 1 X XMODEM upload 4 8 Z ZyNOS ZyXEL Network Operating System 19 4 ZyNOS Firmware version 6 2 ZyXEL Limited Warranty Note v ...

Reviews:

No comments

Related manuals for VES-1124 -

DGS-3224TGR - Switch

Brand: D-Link Pages: 160

Brand: D-Link Pages: 145

DGS-1510 Series

Brand: D-Link Pages: 64

DES-3528 - xStack Switch - Stackable

Brand: D-Link Pages: 367

SANbox 5600 Series

Brand: Qlogic Pages: 408

LMP-1204G-SFP Series

Brand: ANTAIRA Pages: 20

Brand: H3C Pages: 10

Brand: Uniclass Pages: 2

Brand: Icy Box Pages: 10

Brand: hager Pages: 3

TNS5000D Series

Brand: 3onedata Pages: 3

Brand: LINK-MI Pages: 9

Brand: BZB Gear Pages: 27

D-PFS4226-24ET-240

Brand: Dahua Pages: 16

Brand: Stahl Pages: 44

Brand: FS Pages: 43

Brand: Cabletron Systems Pages: 158

Brand: SMART-AVI Pages: 2

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands