background image

Quick Start Guide

www.zyxel.com

VES1724-56

24-port Temperature-Hardened VDSL2 Box DSLAM

Version 3.80

Edition 1, 9/2013

Copyright © 2013 ZyXEL Communications Corporation

User’s Guide

Default Login Details

LAN IP Address

http://192.168.1.1

User Name

admin

Password

1234

Summary of Contents for VES1724-56

Page 1: ...VES1724 56 24 port Temperature Hardened VDSL2 Box DSLAM Version 3 80 Edition 1 9 2013 Copyright 2013 ZyXEL Communications Corporation User s Guide Default Login Details LAN IP Address http 192 168 1...

Page 2: ...and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system Every effort has been made to ensure that the information...

Page 3: ...etup 97 VLAN 129 Static MAC Forward Setup 152 Static Multicast Forward Setup 154 Filtering 158 Spanning Tree Protocol 160 Broadcast Storm Control 176 Mirroring 178 Link Aggregation 180 Port Authentica...

Page 4: ...6 User s Guide 4 Maintenance 327 Access Control 334 Diagnostic 356 Syslog 358 Loop Diagnostic 361 MAC Table 365 ARP Table 367 Hardware Information 369 CFM Action 370 IPv6 Cache 372 Troubleshooting 377...

Page 5: ...nstallation and Connection 23 2 1 Installation Scenarios 23 2 2 Desktop Installation Procedure 23 2 3 Mounting the Switch on a Rack 24 2 3 1 Rack mounted Installation Requirements 24 2 3 2 Attaching t...

Page 6: ...IP Address 42 5 2 1 Creating a VLAN 43 5 2 2 Setting Port VID 44 Chapter 6 Tutorials 46 6 1 How to Use DHCP Relay Per VLAN on the Switch 46 6 1 1 DHCP Relay Tutorial Introduction 46 6 1 2 Creating a...

Page 7: ...te Limit Profile Setup 84 8 10 1 Per Queue Ratelimit Profile 85 8 11 Hardware Alarm Profile 87 8 12 CPE Port Status 87 8 13 IPv6 Setup 88 8 13 1 IPv6 Setup Configuration 90 8 13 2 IPv6 ND Setup 91 8 1...

Page 8: ...tatic VLAN 132 10 5 1 Static VLAN Status 132 10 5 2 VLAN Details 133 10 5 3 Configure a Static VLAN 134 10 5 4 Configure a VLAN Profile 135 10 5 5 Configure VLAN Port Settings 137 10 6 Subnet Based VL...

Page 9: ...id Spanning Tree Protocol 168 14 7 Multiple Rapid Spanning Tree Protocol Status 170 14 8 Configure Multiple Spanning Tree Protocol 171 14 9 Multiple Spanning Tree Protocol Status 173 Chapter 15 Broadc...

Page 10: ...197 20 4 Classifier Example 199 Chapter 21 Policy Rule 200 21 1 Policy Rules Overview 200 21 1 1 DiffServ 200 21 1 2 DSCP and Per Hop Behavior 200 21 2 Configuring Policy Rules 200 21 3 Policy Example...

Page 11: ...24 6 2 MVR Modes 229 24 6 3 How MVR Works 229 24 7 General MVR Configuration 230 24 8 MVR Group Configuration 232 24 8 1 MVR Configuration Example 234 Chapter 25 Authentication and Accounting 236 25 1...

Page 12: ...266 26 7 2 ARP Inspection VLAN Configure 268 Chapter 27 Loop Guard 270 27 1 Loop Guard Overview 270 27 2 Loop Guard Setup 272 Chapter 28 CFM 274 28 1 CFM Overview 274 28 1 1 How CFM Works 274 28 2 CF...

Page 13: ...Routing Overview 301 33 2 Configuring Static Routing 302 Chapter 34 Differentiated Services 304 34 1 DiffServ Overview 304 34 1 1 DSCP and Per Hop Behavior 304 34 1 2 DiffServ Network Example 304 34 2...

Page 14: ...330 36 6 Save Configuration 331 36 7 Reboot System 331 36 8 FTP Command Line 331 36 8 1 Filename Conventions 331 36 8 2 FTP Command Line Procedure 332 36 8 3 GUI based FTP Clients 333 36 8 4 FTP Restr...

Page 15: ...39 3 Syslog Server Setup 360 Chapter 40 Loop Diagnostic 361 40 1 Dual End Loop Test 361 40 2 Single End Loop Test SELT 363 Chapter 41 MAC Table 365 41 1 MAC Table Overview 365 41 2 Viewing the MAC Tab...

Page 16: ...Path MTU 375 Chapter 46 Troubleshooting 377 46 1 Power Hardware Connections and LEDs 377 46 2 Switch Access and Login 378 46 3 Switch Configuration 380 Chapter 47 Product Specifications 381 Appendix...

Page 17: ...17 PART I User s Guide...

Page 18: ...18...

Page 19: ...via Telnet any terminal emulator program on the console port or third party SNMP management See Chapter 47 on page 381 for a full list of software features available on the Switch This section shows...

Page 20: ...hat VDSL service can coexist with voice service on the same line Figure 1 MTU Application 1 2 2 Curbside Application The switch can also be used by an Internet Service Provider ISP in a street cabinet...

Page 21: ...e Section 36 8 on page 331 SNMP The Switch can be monitored by an SNMP manager See Section 37 3 on page 334 1 4 Good Habits for Managing the Switch Do the following things regularly to make the Switch...

Page 22: ...Chapter 1 Getting to Know Your Switch VES1724 56 User s Guide 22...

Page 23: ...elow the Switch This is especially important for enclosed rack installations 2 2 Desktop Installation Procedure 1 Make sure the Switch is clean and dry 2 Set the Switch on a smooth level surface stron...

Page 24: ...he unit 2 3 1 1 Precautions Make sure the rack will safely support the combined weight of all the equipment it contains Make sure the position of the Switch does not make the rack unstable or top heav...

Page 25: ...2 Philips screwdriver install the M5 flat head screws through the mounting bracket holes into the rack 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack 2 4 C...

Page 26: ...Connection Connect an appropriate power supply to one and only one of the ports Two Dual Personality Interfaces 25 26 Each interface has one 1000 Base T copper RJ 45 port and one mini GBIC slot with o...

Page 27: ...negotiating port can detect and adjust to the optimum Ethernet speed 10 100 1000 Mbps and duplex mode full duplex or half duplex of the connected device An auto crossover auto MDI MDI X port automatic...

Page 28: ...ll Form factor Pluggable SFP Transceiver MultiSource Agreement MSA See the SFF committee s INF 8074i specification Rev 1 0 for details You can change transceivers while the Switch is operating You can...

Page 29: ...SFP module 1 Remove the fiber optic cables from the transceiver 2 Open the transceiver s latch latch styles vary 3 Pull the transceiver out of the slot Figure 10 Removing the Fiber Optic Cables Figur...

Page 30: ...puter 3 1 6 ALARM Slot The ALARM port is a male 9 pin connector The following figure shows the pin assignments Figure 13 Alarm Port Pin Assignment The following table describes the alarm pins Table 2...

Page 31: ...00 Mbps Ethernet network is up Off The link to an Ethernet network is down Mini GBIC Slots LNK Green On The link to this port is up Off The link to this port is not connected ACT Green Blinking This p...

Page 32: ...2 100 Amber Blinking The system is transmitting receiving to from an Ethernet device On The port is connected at 100 Mbps Off The port is not connected at 100 Mbps or to an Ethernet device Table 3 LED...

Page 33: ...up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScript enabled by default Java permissions enabled by default 4 2 System Login 1 Configure you...

Page 34: ...igurator through an in band non MGMT port The default in band management IP address is 192 168 1 1 Figure 14 Web Configurator Login 5 Click OK to view the first Web Configurator screen 4 3 The Port St...

Page 35: ...inks which allow you to perform certain tasks no matter which screen you are currently working in B Click this link to save your configuration into the Switch s nonvolatile memory Nonvolatile memory i...

Page 36: ...nagement IPv4 IPv6 address subnet mask necessary for Switch management and DNS domain name server and set up to 64 IPv4 routing domains External Alarm Switch This link takes you to a screen where you...

Page 37: ...you to a screen to set up broadcast filters Mirroring This link takes you to screens where you can copy traffic from one port or ports to another port in order that you can examine the traffic from t...

Page 38: ...u can enable DiffServ configure marking rules and set DSCP to IEEE802 1p mappings DHCP This link takes you to screens where you can configure the DHCP settings DHCPv6 LDRA This link takes you to scree...

Page 39: ...when the Switch s power is turned off Click the Save link in the upper right hand corner of the Web Configurator to save your configuration to nonvolatile memory Nonvolatile memory refers to the Switc...

Page 40: ...default configuration file replaces the current configuration file with the factory default configuration file This means that you will lose all previous configurations and the speed of the console p...

Page 41: ...mmended after you finish a management session for security reasons Figure 18 Web Configurator Logout Screen 4 8 Help The Web Configurator s online help has descriptions of individual screens and some...

Page 42: ...address of the Switch is 192 168 1 1 You can configure another IP address in a different subnet for management purposes The following figure shows an example Figure 19 Initial Setup Example Management...

Page 43: ...g This is the same as the VLAN ID you configure in the Static VLAN screen 7 Click Add to save your changes back to the run time memory Settings in the run time memory are lost when the Switch s power...

Page 44: ...e the VLAN2 network is connected to port 1 on the Switch select Fixed to configure port 1 to be a permanent member of the VLAN only 4 To ensure that VLAN unaware devices such as computers and hubs can...

Page 45: ...n that port get sent to VLAN 2 Figure 21 Initial Setup Network Example Port VID 1 Click Advanced Application VLAN in the navigation panel Then click the VLAN Port Setting link 2 Enter 2 in the PVID fi...

Page 46: ...6 1 1 DHCP Relay Tutorial Introduction In this example you have configured your DHCP server say 172 16 1 18 and want to have it assign a specific IP address say 192 168 2 3 to DHCP client A based on t...

Page 47: ...LAN 4 In the Static VLAN screen select ACTIVE enter a descriptive name VLAN 102 for example in the Name field and enter 102 in the VLAN Group ID field 5 Select Fixed to configure ports 2 and 18 to be...

Page 48: ...defines Click Apply Figure 26 Tutorial Set PVID for untagged frames received on Ports 2 and 18 8 Click the Save link in the upper right corner of the Web Configurator to save your configuration perma...

Page 49: ...t Management IP Address for VLAN 102 6 Click the Save link in the upper right corner of the Web Configurator to save your configuration permanently 6 1 4 Configuring DHCP VLAN Settings Follow the step...

Page 50: ...the Relay Remote ID and Remote ID Information fields empty unless something needs to be specified 6 Click Add Figure 28 Tutorial Set DHCP Server and Relay Information 7 Click the Save link in the upp...

Page 51: ...51 PART II Technical Reference...

Page 52: ...52...

Page 53: ...ick Status in all Web Configurator screens to display the Status screen as shown next Figure 29 Port Status The following table describes the labels in this screen Table 6 Port Status LABEL DESCRIPTIO...

Page 54: ...ing or LD_DONE See Section 7 2 1 on page 54 for more information For Ethernet ports if STP Spanning Tree Protocol is enabled this field displays the STP state of the port see Section 14 1 on page 160...

Page 55: ...User s Guide 55 7 2 2 VDSL Port Details Click a VDSL port s index number in the Port column of the Port Status screen to display individual port statistics Use this screen to check status and detailed...

Page 56: ...System Status and Port Statistics VES1724 56 User s Guide 56 Note This screen refreshes automatically every several minutes if the port is in any status other than in Showtime Figure 31 Status VDSL Po...

Page 57: ...Chapter 7 System Status and Port Statistics VES1724 56 User s Guide 57...

Page 58: ...failed because of a communication error between the Switch and the CPE noPeerAtu The initialization failed because the Switch cannot detect the connected CPE device otherCause The initialization fail...

Page 59: ...field displays any existing upstream downstream failure for the line NoDefect No failure was detected LossOfFraming A loss of frame synchronization was detected LossOfSignal A loss of signal was dete...

Page 60: ...llowed range Fixed rate mode the Switch fixes the transmission rate as the minimum net data rate and disables transmission rate adjustment If the attainable speeds cannot match configured speeds then...

Page 61: ...Curr 1 Day This field displays the VDSL performance information recorded in the past one day Full Inits This field displays how many full initialization attempts on the line successful and failed the...

Page 62: ...ng the next time segment VDSL Performance History Click the 15 Min Interval link to display a screen listing VDSL performance information for the previous 15 minute periods Click the One Day Interval...

Page 63: ...lick Measure to display the latest VDSL port details in this screen MEDLEY PSD This section displays the final PSD the Switch proposes to the connected CPE during line initialization Break Point This...

Page 64: ...Chapter 7 System Status and Port Statistics VES1724 56 User s Guide 64 Figure 32 Graph Examples Hlog QLN SNR BitAlloc GainAlloc...

Page 65: ...ed port in the VDSL port bonding group This is the main port The Switch records data sent and received counters based on this port Transfer Mode This field displays the traffic type PTM or ATM of this...

Page 66: ...g bigger than the negotiated size rxBadFragments This shows the number of data fragments this group received out of sequence rxLostFragments This shows the number of missing data fragments that the Sw...

Page 67: ...ics Use this screen to check detailed transmission statistics for a selected VDSL port on the Switch Figure 35 Port Details The following table describes the labels in this screen Table 9 Port Details...

Page 68: ...t packets transmitted Pause This field shows the number of 802 3x Pause packets transmitted OutDiscards This field shows the number of outgoing packets discarded Tagged This field shows the number of...

Page 69: ...eld shows the number of packets received that were too short shorter than 64 octets including the ones with CRC errors Distribution 64 This field shows the number of packets including bad packets rece...

Page 70: ...on your Switch The real time is then displayed in the Switch logs The Switch Setup screen allows you to set up and configure global Switch features The IP Setup screen allows you to configure a Switch...

Page 71: ...nnected and detected 1st F W Version This field displays the version number of the currently installed firmware on the first flash memory 2nd F W Version This field displays the version number of the...

Page 72: ...ld displays this fan s minimum speed measured in Revolutions Per Minute RPM 41 is displayed for speeds too small to measure Threshold This field displays the minimum speed at which a normal fan should...

Page 73: ...appear locked for 60 seconds Please wait Current Time This field displays the time you open this menu or refresh the menu New Time hh mm ss Enter the new time in hour minute and second format The new...

Page 74: ...Chapter 10 on page 129 for information on port based and 802 1Q tagged VLANs End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight Saving Time The time field uses...

Page 75: ...lso need to define how to treat a BPDU in the Port Setup screen MAC Address Learning MAC address learning reduces outgoing traffic broadcasts For MAC address learning to occur on a port the port must...

Page 76: ...hysical queue mapping The Switch has eight physical queues that you can map to the 8 priority levels On the Switch traffic assigned to higher index queues gets through faster while traffic in lower in...

Page 77: ...characters For example FFFF FFFF FFFF FFFF FC00 0000 0000 0000 The first 48 bits of the IPv6 subnet mask are for Internet routing or fixed for local address the 49th to the 54th bits are for subnetti...

Page 78: ...configuration in IPv6 addresses can be uniquely and automatically generated Unlike DHCPv6 Dynamic Host Configuration Protocol version six which is used in IPv6 stateful autoconfiguration the owner and...

Page 79: ...tgoing traffic 8 7 1 Management IP Addresses The Switch needs an IP address for it to be managed over the network The factory default IP address is 192 168 1 1 The subnet mask specifies the network nu...

Page 80: ...static IP address information to the Switch You need to fill in the following fields when you select this option IP Address Enter the IP address of your Switch in dotted decimal notation for example 1...

Page 81: ...anaged by connections to this specified IP address in the specified VLAN Add Click Add to insert the entry to the summary table below and save your changes to the Switch s run time memory The Switch l...

Page 82: ...dentifies this alarm input You can enter up to 31 printable characters Spaces are also allowed Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these changes if...

Page 83: ...mit profile names you configure in the Rate Limit Profile Setup screens Refer to Section 8 10 on page 84 for more information per Port Select a rate limit profile from the drop down list box You can d...

Page 84: ...only on an edge port of a STP network Select Network to forward VLAN tagged BPDUs to the next Switch directly and handle VLAN untagged BPDUs as the Peer option See Section 14 1 2 on page 161 for more...

Page 85: ...ively clear the checkbox to not use the rate limit Note The peak rate should be greater than the commit rate Egress Rate Kbps Select the checkbox and enter the maximum bandwidth allowed in kilobits pe...

Page 86: ...ckbox and enter the maximum bandwidth allowed in kilobits per second Kbps for the incoming traffic flow assigned to this queue through a port when burst traffic occurs The incoming traffic over this p...

Page 87: ...se this screen to view all DSL port status and details about the connected CPE devices Figure 45 CPE Port Status The following table describes the labels in this screen Table 20 Basic Setting CPE Port...

Page 88: ...firmware version number of the DSL CPE device connected to this port NA displays if it is not available Wireless This field displays whether or not the CPE device has the wireless function enabled NA...

Page 89: ...is VLAN then users on that port cannot manage the Switch To access the Switch make sure the port that you are connected to is a member of the management VLAN IPv6 Enable or disable IPv6 for this inter...

Page 90: ...Prefix Length Enter the IPv6 prefix length 1 128 for this interface For a link local IPv6 address enter 64 here EUI 64 format If you are configuring an IPv6 global address select this to use the EUI...

Page 91: ...uration Click Here IPv6 ND Setup LABEL DESCRIPTION Interface This field displays the name of the IPv6 interface DAD Attempts Enter the number of DAD Duplicate Address Detection messages the Switch can...

Page 92: ...v6 Group field above Enter the VLAN ID 1 4094 associated with the specified IPv6 address below IPv6 Address Enter an IPv6 address for a static neighbor entry MAC Address Enter the MAC address for the...

Page 93: ...Stale state The Switch delays sending request packets for a short time to give upper layer protocols a chance to determine reachability If no reachability confirmation is received within the delay tim...

Page 94: ...ured at the bottom of the screen Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the to...

Page 95: ...cel Click Cancel to begin configuring this screen afresh SFP Transceiver Per Port Status Port This field displays the port number of the SFP slots Vendor This field displays the vendor of the transcei...

Page 96: ...Chapter 8 Basic Setting VES1724 56 User s Guide 96...

Page 97: ...SL Template Setup see Section 9 3 on page 104 VDSL Alarm Template Setup see Section 9 4 on page 121 PSD PSD Power Spectral Density defines the distribution of a VDSL line s power in the frequency doma...

Page 98: ...ction INP which provides the ability to correct errors regardless of the number of errors in an error DMT Discrete Multi Tone symbol UPBO In a network with varying telephone wiring lengths the PSD on...

Page 99: ...stream Power Back Off can reduce performance degradation by changing the PSD level on the VDSL switch es at street cabinet level ISDN in Europe uses a frequency range of up to 80 kHz while ISDN in Jap...

Page 100: ...ption Rate adaption is the ability of a device to adjust from the configured transmission rate to the attainable transmission rate automatically depending on the line quality The VDSL transmission rat...

Page 101: ...uch as AM and HAM radio stations Since VDSL uses a much larger frequency range that overlaps with other radio frequency systems signals from VDSL lines and other radio systems interfere with each othe...

Page 102: ...ate instead You should select a looser fallback template for a line See an example as shown next The template F differs from templates P as follows A lower transmission rate is allowed Has higher tole...

Page 103: ...is screen Table 32 VDSL Line Setup LABEL DESCRIPTION Port This is the port number of a subscriber port Primary Template Select a VDSL template for a port The template is used when the line is first in...

Page 104: ...his VDSL template You can configure channel profiles by clicking the ChanProfile link in the right top corner of the screen Inm Profile Select an INM profile for this VDSL template You can configure c...

Page 105: ...te is applied You can apply templates to VDSL ports in the VDSL Setup VDSL Line Setup screen Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cance...

Page 106: ...the screen to add edit or delete a VDSL line profile Figure 55 VDSL Line Profile Setup The following table describes the labels in this screen Table 34 VDSL Line Profile Setup LABEL DESCRIPTION Name E...

Page 107: ...ur territory you want to apply for this profile At the time of writing the Switch supports G 993 2 Annex A mode for countries which follow the North American VDSL2 standard ADSL VDSL Protocol Select t...

Page 108: ...further adjust PSD level for tones according to the limit PSD mask you have configured This field displays how many break points are configured for the downstream DS and upstream US MIB PSD mask For...

Page 109: ...e VDSL port number s to which this profile is applied You can apply a VDSL line profile to a VDSL template in the VDSL Setup VDSL Profile VDSL Template Setup screen Delete Check the rule s that you wa...

Page 110: ...er of decibels dB for the line s down shift SNR margin threshold When the line s signal to noise margin goes below this number the Switch attempts to use a lower transmission rate Down Shift Time Ente...

Page 111: ...CRIPTION MIB PSD Mask This displays the PSD mask result in a graph The MIB PSD mask is defined only within the operating bands and lies at or below the limit PSD mask You may choose not to specify a M...

Page 112: ...tiple 4 3125 dBm Hz This field automatically calculates after a Tone Index value is entered PSD level dBm Hz Enter the PSD levels 127 5 0 dBm Hz for your specified tones to restrict the transmit PSD t...

Page 113: ...d Exchange PSD Mask defines the PSD mask that is assumed to be exchanged at CO Use this graph to view PSD level to frequency relationship The horizontal is frequency in MHz and vertical is power level...

Page 114: ...e ending frequencies for each RFI band Band This index number identifies each RFI Band Tone Index A tone is a sub channel of a VDSL band DMT divides VDSL bands into many 4 3125 kHz tones Enter an incr...

Page 115: ...d Virtual noise is the noise allowed on the line before the first line speed adjustment occurs Switch then uses a lower data rate on tones which you added a noise level for the line initialization A l...

Page 116: ...the tone index multiple 4 3125 dBm Hz This field automatically calculates after a Tone Index value is entered Noise level dBm Hz Enter the noise level for the specified tone s where you expect noise...

Page 117: ...e off Select Auto to have the Switch enable this feature when there is no impact to the data rate SOS Min Data Rate Specify the minimum upstream downstream data rates guaranteed data rates if you set...

Page 118: ...only if the far end supports G INP mode Test G INP is enabled only in test mode Effective Throughput Specify the maximum and minimum value allowed for the ETR Effective Throughput Rate Net Data Rate...

Page 119: ...C Figure 63 INM Cluster Example Use this screen to view add modify and delete VDSL INM profiles An INM profile defines the control parameters used to generate the Equivalent INP Eq INP or INP_Eq and I...

Page 120: ...ength the number of data symbols from the first to the last severely degraded data symbols in a cluster is used to generate the histogram Each set of consecutive severely degraded data symbols is cons...

Page 121: ...tion from 12 8dB to 12 7 dB in steps of 0 1 dB The smaller the value the more sensitive the signal against impulse noise For example 12 8 dB is more sensitive to the symbol affected by impulse noise t...

Page 122: ...ng the LineAlarmProfile link in the top right corner of the screen Channel Alarm Profile Select a channel alarm profile for this VDSL alarm profile template You can configure channel alarm profiles by...

Page 123: ...inutes 15 Minute ES Threshold Enter the number of Errored Seconds ES that are permitted to occur within 15 minutes 15 Minute SES Threshold Enter the number of Severely Errored Seconds SES that are per...

Page 124: ...tive name for the alarm profile FECS This field displays the number of Forward Error Correction Seconds FECS that are permitted to occur within 15 minutes ES This field displays the number of Errored...

Page 125: ...hreshold Enter the number of Code Violation incorrect cyclic redundancy check that are permitted to occur within 15 minutes 15Min Corrected Blocks Threshold Enter the number of error blocks that can b...

Page 126: ...group The total data rate is divided equally for each port Select Mode 2 and select a separate template profile for each individual port in the bonding group to set each port s data rate independentl...

Page 127: ...Each port uses a data rate independently Group Rate This field displays the upstream and downstream data rates for the entire bonding group Port Rate This column displays the upstream and downstream d...

Page 128: ...Chapter 9 VDSL Setup VES1724 56 User s Guide 128...

Page 129: ...t The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 VLANs Note that user priority and VLAN ID are independent of each other A frame with VID VLAN Identifier of nul...

Page 130: ...ations are withdrawn by issuing a Leave message A Leave All message terminates all registrations GARP timers set declaration timeout values 10 2 2 GVRP GVRP GARP VLAN Registration Protocol is a regist...

Page 131: ...y switch you only need to create VLAN groups in the end devices A and B C D and E automatically allow frames with VLAN group tags 1 and 2 VLAN groups that are unknown to those switches to pass through...

Page 132: ...formation on Static VLAN Click Advanced Application VLAN from the navigation panel to display the VLAN Status screen as shown next Figure 72 Advanced Application VLAN VLAN Status The following table d...

Page 133: ...creen if all status information cannot be seen in one screen Table 48 Advanced Application VLAN VLAN Status continued LABEL DESCRIPTION Table 49 Advanced Application VLAN VLAN Detail LABEL DESCRIPTION...

Page 134: ...d labels in this screen Table 50 Advanced Application VLAN Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings Name Enter a descriptive name for the VLAN group for...

Page 135: ...p Tagging Select Tx Tagging if you want the port to tag all outgoing frames transmitted with this VLAN Group ID Add Click Add to save your changes to the Switch s run time memory The Switch loses thes...

Page 136: ...ettings to the Switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to...

Page 137: ...ach port to communicate only with the CPU management port and the dual personality GbE interfaces but not communicate with each other This option is the most limiting but also the most secure Port Thi...

Page 138: ...ased VLAN with priority 5 and VID of 200 for traffic received from IP subnet 192 168 1 0 24 video services Lastly you configure VLAN with priority 3 and VID of 300 for traffic received from IP subnet...

Page 139: ...deo services receive the highest priority and data the lowest Figure 77 Subnet Based VLAN Application Example 10 7 Configuring Subnet Based VLAN Click Subnet Based VLAN in the VLAN Port Setting screen...

Page 140: ...or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you are done configuring Active Check this box to activate the IP subnet VLAN you a...

Page 141: ...tch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you are done configuring Cancel Click C...

Page 142: ...ne switch C Figure 79 Protocol Based VLAN Application Example 10 9 Configuring Protocol Based VLAN Click Protocol Based VLAN in the VLAN Port Setting screen to display the configuration screen as show...

Page 143: ...ocols in the hexadecimal number range of 0x0000 to 0x05ff are not allowed to be used for protocol based VLANs VID Enter the ID of a VLAN to which the port belongs This must be an existing VLAN which y...

Page 144: ...eld to the next port you want to add 3 Click Add 10 11 Configuring MAC Based VLAN MAC based VLANs allow you to group traffic into logical VLANs based on the MAC address you specify When a frame is rec...

Page 145: ...h s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you are done...

Page 146: ...or example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports Port based VLANs are speci...

Page 147: ...2 1 Configure a Port Based VLAN Select Port Based as the VLAN Type in the Basic Setting Switch Setup screen and then click Advanced Application VLAN from the navigation panel to display the next scree...

Page 148: ...Chapter 10 VLAN VES1724 56 User s Guide 148 Figure 84 Port Based VLAN Setup Port Isolation...

Page 149: ...rt that is a port through which a data packet enters If you wish to allow two subscriber ports to talk to each other you must define the ingress port for both ports The numbers in the top row denote t...

Page 150: ...d direction Stop This button appears after you start a frame statistics calculation Click this to stop the frame statistics calculation and reset the VID and Port fields to their default settings Upda...

Page 151: ...e 64 octets in length 65 to 127 This field shows the number of packets including bad packets transmitted and received that were between 65 and 127 octets in length 128 to 255 This field shows the numb...

Page 152: ...e MAC address table Static MAC addresses do not age out When you set up static MAC address rules you are setting static MAC addresses for a port This may reduce the need for broadcasting Static MAC ad...

Page 153: ...volatile memory when you are done configuring Cancel Click Cancel to reset the fields to their last saved values Clear Click Clear to begin configuring this screen afresh Index Click an index number...

Page 154: ...Static multicast addresses do not age out Static multicast forwarding allows you the administrator to forward multicast frames to a member without the member having to join the group first If a multic...

Page 155: ...frames being forwarded to ports 2 and 3 within VLAN group 4 Figure 87 No Static Multicast Forwarding Figure 88 Static Multicast Forwarding to A Single Port Figure 89 Static Multicast Forwarding to Mul...

Page 156: ...ter the port s where frames with destination MAC address that matched the entry above are forwarded You can enter multiple ports separated by no space comma or hyphen For example enter 3 5 for ports 3...

Page 157: ...es cannot be seen in one screen Next Page Click this to show the next screen if all entries cannot be seen in one screen Delete Click Delete to remove the selected entry from the summary table Cancel...

Page 158: ...PTION Active Make sure to select this check box to activate your rule You may temporarily deactivate a rule without deleting it by deselecting this check box Name Type a descriptive name up to 32 prin...

Page 159: ...Index This field displays the index number of the rule Click an index number to change the settings Active This field displays Yes when the rule is activated and No when is it deactivated Name This f...

Page 160: ...also being backwards compatible with STP only aware bridges In RSTP topology change information is directly propagated throughout the network from the device that generates the topology change In STP...

Page 161: ...been established all bridges listen for Hello BPDUs Bridge Protocol Data Units transmitted from the root bridge If a bridge does not get a Hello BPDU after a predefined interval Max Age the bridge ass...

Page 162: ...te Each port can belong to one STP tree only Figure 92 MRSTP Network Example 14 1 5 Multiple STP Multiple Spanning Tree Protocol IEEE 802 1s is backward compatible with STP RSTP and addresses the limi...

Page 163: ...ferent spanning trees in the network Thus traffic from the two VLANs travel on different paths The following figure shows the network example using MSTP Figure 94 MSTP Network Example 14 1 5 2 MST Reg...

Page 164: ...to a region Thus an MSTI does not span across MST regions The following figure shows an example where there are two MST regions Regions 1 and 2 have 2 spanning tree instances Figure 95 MSTIs in Differ...

Page 165: ...iguration screen to activate one of the STP modes on the Switch Click Configuration in the Advanced Application Spanning Tree Protocol Figure 98 Advanced Application Spanning Tree Protocol Configurati...

Page 166: ...d port The switch with the highest priority lowest numeric value becomes the STP root switch If all switches have the same priority the switch with the lowest MAC address will then become the root swi...

Page 167: ...to make some settings the same for all ports Use this row first to set the common settings and then make adjustments on a port by port basis Note Changes in this row are copied to all the ports as so...

Page 168: ...C address This ID is the same for Root and Our Bridge if the Switch is the root switch Hello Time second This is the time interval in seconds at which the root switch transmits a configuration message...

Page 169: ...at ages out STP information provided in the last BPDU becomes the designated port for the attached LAN If it is a root port a new root port is selected from among the Switch ports attached to the netw...

Page 170: ...col Status MRSTP LABEL DESCRIPTION Configuration Click Configuration to specify which STP mode you want to activate Click MRSTP to edit MRSTP settings on the Switch Tree Select which STP tree configur...

Page 171: ...3 Advanced Application Spanning Tree Protocol MSTP Port ID This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree Topol...

Page 172: ...Hello Time 1 Maximum hops Enter the number of hops between 1 and 255 in an MSTP region before the BPDU is discarded and the port information is aged Configuration Name Enter a descriptive name up to...

Page 173: ...range is between 0 and 255 and the default value is 128 Path Cost Path cost is the cost of transmitting a frame on to a LAN through that port It is recommended to assign this value according to the sp...

Page 174: ...lso be the root bridge Bridge ID This is the unique identifier for this bridge consisting of bridge priority plus MAC address This ID is the same for Root and Our Bridge if the Switch is the root swit...

Page 175: ...N mapping In other words which VLANs run on each spanning tree instance Instance This field displays the MSTI ID VLAN This field displays which VLANs are mapped to an MSTI MSTI Select the MST instance...

Page 176: ...ts for each packet type on each port Click Advanced Application Broadcast Storm Control in the navigation panel to display the screen as shown next Figure 105 Advanced Application Broadcast Storm Cont...

Page 177: ...this option and specify how many destination lookup failure DLF packets the port receives per second Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these chang...

Page 178: ...to a monitor port the port you copy the traffic to in order that you can examine the traffic from the monitor port without interference Click Advanced Application Mirroring in the navigation panel to...

Page 179: ...be added even the mirrored traffic is double tagged Port This field displays the port number Settings in this row apply to all ports Use this row only if you want to make some settings the same for a...

Page 180: ...nsures increased network stability and control over the trunk groups on your Switch See Section 17 6 on page 184 for a static port trunking example 17 2 Dynamic Link Aggregation The Switch adheres to...

Page 181: ...ITY PORT NUMBER 0000 00 00 00 00 00 00 0000 00 0000 2 Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group not the individual port Table 74 Advanced Application Link Aggr...

Page 182: ...wing criteria for the port selection Source MAC Address Uses packets source MAC address as the criteria Destination MAC Address Uses packets destination MAC address as the criteria Source Destination...

Page 183: ...ne configuring Cancel Click Cancel to begin configuring this screen afresh Table 75 Advanced Application Link Aggregation Link Aggregation Setting continued LABEL DESCRIPTION Table 76 Advanced Applica...

Page 184: ...on as you make them LACP Timeout Timeout is the time interval between the individual port exchanges of LACP packets in order to check that the peer port in the trunk group is still up If a port does n...

Page 185: ...Link Aggregation Setting In this screen activate trunking group T1 and select the ports that should belong to this group as shown in the figure below Click Apply when you are done Figure 111 Trunking...

Page 186: ...l to validate users See Section 25 1 2 on page 237 for more information on configuring your RADIUS server settings Note If you enable IEEE 802 1x authentication and MAC authentication on the same port...

Page 187: ...e main difference is that the Switch does not prompt the client for login credentials The login credentials are based on the source MAC address of the client connecting to a port on the Switch along w...

Page 188: ...e Port Authentication screen click 802 1x to display the configuration screen as shown Figure 115 Advanced Application Port Authentication 802 1x The following table describes the labels in this scree...

Page 189: ...un time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you are done conf...

Page 190: ...this setting See Section 8 5 on page 75 Port This field displays the port number Use this row to make the setting the same for all ports Use this row first and then make adjustments on a port by port...

Page 191: ...s in total with no limit on individual ports For maximum port security enable either port security or VLAN security disable MAC address learning and configure static MAC address es for a port or a VLA...

Page 192: ...n the MAC address table and drops the other packets Clear this check box to have the Switch also forward the packets whose source MAC addresses do not exist in the MAC address table MAC Spoofing Selec...

Page 193: ...n VLAN 2 then only the devices with the first five learned MAC addresses can access VLAN 2 at any one time A sixth device would have to wait until one of the five learned MAC addresses aged out MAC ad...

Page 194: ...as the source address destination address source port number destination port number or incoming port number For example you can configure a classifier to select traffic from the same protocol port su...

Page 195: ...Classifier LABEL DESCRIPTION Active Select this option to enable this rule Name Enter a descriptive name for this rule for identifying purposes Packet Format Specify the format of the packet Choices a...

Page 196: ...ds below to configure a layer 3 classifier DSCP Select Any to classify traffic from any DSCP or select the second option and specify a DSCP DiffServ Code Point number between 0 and 63 in the field pro...

Page 197: ...number Refer to Table 85 on page 198 for more information Add Click Add to insert the entry in the summary table below and save your changes to the Switch s run time memory The Switch loses these chan...

Page 198: ...t common TCP and UDP port numbers are See Appendix A on page 397 for information on commonly used port numbers Table 83 Common Ethernet Types and Protocol Numbers ETHERNET TYPE PROTOCOL NUMBER IP ETHI...

Page 199: ...en shows an example where you configure a classifier that identifies all traffic from MAC address 00 50 ba ad 4f 81 on port 2 After you have configured a classifier you can configure a policy in the P...

Page 200: ...flow In addition applications do not have to request a particular service or give advanced notice of where the traffic is going 21 1 2 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiat...

Page 201: ...Chapter 21 Policy Rule VES1724 56 User s Guide 201 Click Advanced Application Policy Rule in the navigation panel to display the screen as shown Figure 122 Advanced Application Policy Rule...

Page 202: ...Kbps Enter a number between 1 and 1000000 Out of Profile DSCP Specify a new DSCP number between 0 and 63 if you want to replace or remark the DSCP number for out of profile traffic Action Specify the...

Page 203: ...drop the matching frame previously marked for dropping to queue the frames that are marked to be dropped Add Click Add to inset the entry to the summary table below and save your changes to the Switc...

Page 204: ...cy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out of profile traffic on a traffic flow classified using the Example classifier...

Page 205: ...s bandwidth weight portion the number you configure in the Weight field when there is traffic congestion WFQ is activated only when a port has more traffic than it can handle Queues with larger weight...

Page 206: ...ism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied 22 2 Configuring Queuing Click Advanced Applicati...

Page 207: ...eue for the VDSL ports For example if you select Q5 the Switch services traffic on Q5 Q6 and Q7 using SPQ Select None to always use WFQ or WRR for the VDSL ports Port This label shows the port you are...

Page 208: ...to 4 094 customer VLANs This allows a service provider to provide different service based on specific VLANs for many different customers A service provider s customers may require a range of VLANs to...

Page 209: ...VLAN stacking IEEE 802 1Q frame switching Select Access Port for ingress ports on the service provider s edge devices 1 and 2 in the VLAN stacking example figure The incoming frame is treated as unta...

Page 210: ...ch configure priority level of inner IEEE 802 1Q tag in the Port Setup screen 0 is the lowest priority level and 7 is the highest VID is the VLAN ID SP VID is the VID for the second service provider s...

Page 211: ...ibes the labels in this screen Table 91 Advanced Application VLAN Stacking LABEL DESCRIPTION Active Select this to enable VLAN stacking on the Switch Port The port number identifies the port you are c...

Page 212: ...f 1526 Bytes 1522 Bytes 4 Bytes for the second tag to pass through it Tunnel TPID TPID is a standard Ethernet type code identifying the frame and indicates whether the frame carries IEEE 802 1Q tag in...

Page 213: ...the service provider ID from 1 to 4094 for frames received on this port See Chapter 10 on page 129 for more background information on VLAN ID Copy Ctag Priority Select the checkbox to set the priorit...

Page 214: ...r identification purposes Port The port number identifies the port you are configuring CVID Enter a customer VLAN ID the inner VLAN tag from 1 to 4094 This is the VLAN tag carried in the packets from...

Page 215: ...is the descriptive name for this rule Port This is the port number to which this rule is applied CVID This is the customer VLAN ID in the incoming packets SPVID This is the service provider s VLAN ID...

Page 216: ...g Enter the customer VLAN ID from 1 to 4094 for frames received on this port See Chapter 10 on page 129 for more background information on VLAN ID Priority Select a priority level from 0 to 7 This is...

Page 217: ...es see the IANA web site for more information 24 1 2 IGMP Filtering With the IGMP filtering feature you can control which IGMP groups a subscriber on a port can join This allows you to control the dis...

Page 218: ...t join request and the last leave request in an IGMP network to its upper layer router It can reduce multicast traffic significantly Note Note You must set one of Gigabit Ethernet ports to Fixed mode...

Page 219: ...2 Multicast Status Click Advanced Application Multicast to display the screen as shown This screen shows the multicast group information See Section 24 1 on page 217 for more information on multicasti...

Page 220: ...ID Multicast Group Filter Mode Source Address This field displays the multicast group source address and source filtering mode In IPTV the multicast group source address means the address of a media...

Page 221: ...ys if the port is the main port in the bonding group Report In This column displays how many V1 V2 and V3 multicast join messages and multicast Leave messages the port has received since the last star...

Page 222: ...and V3 multicast join messages and multicast Leave messages the port has transmitted V1 V2 and V3 means IGMP versions 1 2 and 3 Query Out This column displays how many valid V1 V2 and V3 multicast que...

Page 223: ...configure the MVR settings in the Advanced Application Multicast Multicast Setting MVR screen Others reasons other than the ones described above such as the Switch has insufficient memory IGMP Per VLA...

Page 224: ...ers of that group Select Proxy to enable IGMP MLD proxy to decrease subscriber s join leave messages forwarding in a group Enable MLD Enables Multicast Listener Discovery version one MLD v1 and versio...

Page 225: ...by port basis Note Changes in this row are copied to all the ports as soon as you make them Immed Leave Select this option to set the Switch to remove this port from the multicast tree when an IGMP ve...

Page 226: ...g continued LABEL DESCRIPTION Table 97 Advanced Application Multicast Multicast Setting IGMP Snooping VLAN LABEL DESCRIPTION Mode Select auto to have the Switch learn multicast group membership inform...

Page 227: ...ID of a static VLAN the valid range is between 1 and 4094 Note You cannot configure the same VLAN ID as in the MVR screen Add Click Add to insert the entry in the summary table below and save your ch...

Page 228: ...ses that you want to belong to the IGMP filter profile If you want to add a single multicast IP address enter it in both the Start Address and End Address fields Add Click Add to save the profile to t...

Page 229: ...etwork Example 24 6 1 Types of MVR Ports In MVR a source port is a port on the Switch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast t...

Page 230: ...t group The Switch sends a query to VLAN 1 on the receiver port in this case a DSL port on the Switch If there is another subscriber device connected to this port in the same subscriber VLAN the recei...

Page 231: ...multicast traffic by sending IGMP MLD host messages to a multicast router or server on behalf of all multicast hosts connected to the Switch Apply Click Apply to save your changes to the Switch s run...

Page 232: ...ption to set this port as a receiver port that only receives multicast traffic None Select this option to set the port not to participate in MVR No MVR multicast traffic is sent or received on this po...

Page 233: ...mal notation Enter the same IP address as the Start Address field if you want to configure only one IP address for a multicast group Refer to Section 24 1 1 on page 217 for more information on IP mult...

Page 234: ...ceive multicast traffic the News and Movie channels from the remote streaming media server S Computers A B and C in VLAN are able to receive the traffic Figure 138 MVR Configuration Example To configu...

Page 235: ...ffic to the subscribers configure multicast group settings in the Group Configuration screen The following figure shows an example where two multicast groups News and Movie are configured for the mult...

Page 236: ...itself or it can use an external server to authorize a large number of users Accounting is the process of recording what a user is doing The Switch can use an external server to track when users log...

Page 237: ...n the Switch First configure your authentication server settings RADIUS TACACS or both and then set up the authentication priority and accounting settings Click Advanced Application Auth and Acct in t...

Page 238: ...to authenticate with the second RADIUS server Select round robin to alternate between the RADIUS servers that it sends authentication requests to Timeout Specify the amount of time in seconds that th...

Page 239: ...ting server Index This is a read only number representing a RADIUS accounting server entry IP Address Enter the IPv4 or IPv6 address of an external RADIUS accounting server in dotted decimal notation...

Page 240: ...TACACS server does not respond then the Switch tries to authenticate with the second TACACS server Select round robin to alternate between the TACACS servers that it sends authentication requests to T...

Page 241: ...ver Index This is a read only number representing a TACACS accounting server entry IP Address Enter the IPv4 or IPv6 address of an external TACACS accounting server in dotted decimal notation TCP Port...

Page 242: ...ess privilege level for administrator accounts users for Switch management Configure the access privilege of accounts via commands See the CLI Reference Guide for local authentication The TACACS and R...

Page 243: ...unting server s System Configure the Switch to send information when the following system events occur system boots up system shuts down system accounting is enabled system accounting is disabled Exec...

Page 244: ...e setting Note Refer to the documentation that comes with your RADIUS server on how to configure VSAs for users authenticating via the RADIUS server The following table describes the VSAs supported on...

Page 245: ...and RFC 2869 for more information about RADIUS attributes used for accounting This section lists the attributes used by authentication functions on the Switch In cases where the attribute has a specif...

Page 246: ...r Name NAS Identifier NAS IP Address NAS Port NAS Port Type This value is set to Ethernet 15 on the Switch Calling Station Id Frame MTU EAP Message State Message Authenticator 25 3 2 Attributes Used f...

Page 247: ...ATTRIBUTE START INTERIM UPDATE STOP User Name Y Y Y NAS Identifier Y Y Y NAS IP Address Y Y Y Service Type Y Y Y Acct Status Type Y Y Y Acct Delay Time Y Y Y Acct Session Id Y Y Y Acct Authentic Y Y Y...

Page 248: ...pe Y Y Y Acct Delay Time Y Y Y Acct Session Id Y Y Y Acct Authentic Y Y Y Acct Input Octets Y Y Acct Output Octets Y Y Acct Session Time Y Y Acct Input Packets Y Y Acct Output Packets Y Y Acct Termina...

Page 249: ...consists of the following features Static bindings Use this to create static bindings in the binding table DHCP snooping Use this to filter unauthorized DHCP packets on the network and to build the b...

Page 250: ...arts it loads static bindings from permanent memory but loses the dynamic bindings in which case the devices in the network have to send DHCP requests again As a result it is recommended you configure...

Page 251: ...nfigure this setting for each source VLAN This setting is independent of the DHCP relay settings Chapter 35 on page 311 26 1 1 4 Configuring DHCP Snooping Follow these steps to configure DHCP snooping...

Page 252: ...ort or an untrusted port for ARP inspection This setting is independent of the trusted untrusted setting for DHCP snooping You can also specify the maximum rate at which the Switch receives ARP packet...

Page 253: ...one static binding If you try to create a static binding with the same MAC address and VLAN Table 110 IP Source Guard LABEL DESCRIPTION Index This field displays a sequential number for each binding M...

Page 254: ...to create the specified static binding or to update an existing one Cancel Click this to reset the values above based on the last selected static binding or if not applicable to clear the fields above...

Page 255: ...VES1724 56 User s Guide 255 26 4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database To open this screen click Advanced Application IP Source Guard DHCP Snoopi...

Page 256: ...e current bindings have not changed since the last update This section displays information about the last time the Switch updated the DHCP snooping database Last succeeded time This field displays th...

Page 257: ...cause the Switch was unable to understand the binding in the DHCP binding database Expired leases This field displays the number of bindings the Switch ignored because the lease time had already expir...

Page 258: ...LAN too You can enable Option82 in the DHCP Snooping VLAN Configure screen Section 26 5 2 on page 260 to help the DHCP servers distinguish between DHCP requests from different VLAN Select Disable if y...

Page 259: ...omatically included in the next update Renew DHCP Snooping URL Enter the location of a DHCP snooping database and click Renew if you want the Switch to load it You can use this to load dynamic binding...

Page 260: ...nly if the rate at which DHCP packets arrive is too high Untrusted ports are connected to subscribers and the Switch discards DHCP packets from untrusted ports in the following situations The packet i...

Page 261: ...5 on page 257 SPV Select the variables that you want the Switch to generate and add in the DHCP requests The variable options include SP SV PV and SPV which indicate combinations of slot port slot VLA...

Page 262: ...displays the source VLAN ID in the MAC address filter Port This field displays the source port of the discarded ARP packet Expiry sec This field displays how long in seconds the MAC address filter re...

Page 263: ...the section below Then enter the lowest VLAN ID Start VID and the highest VLAN ID End VID you want to look at Apply Click this to display the specified range of VLANs in the section below VID This fi...

Page 264: ...et Sender MAC This field displays the source MAC address of the ARP packet Sender IP This field displays the source IP address of the ARP packet Num Pkts This field displays the number of ARP packets...

Page 265: ...tting has no effect on existing MAC address filters Enter how long 1 2147483647 seconds the MAC address filter remains in the Switch after the Switch identifies an unauthorized ARP packet The Switch a...

Page 266: ...ted in the following examples 4 invalid ARP packets per second Syslog rate is 5 Log interval is 1 the Switch sends 4 syslog messages every second 6 invalid ARP packets per second Syslog rate is 5 Log...

Page 267: ...d port Trusted or an untrusted port Untrusted The Switch does not discard ARP packets on trusted ports for any reason The Switch discards ARP packets on untrusted ports in the following situations The...

Page 268: ...ds of the burst interval Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top naviga...

Page 269: ...g messages when it forwards an ARP packet from the VLAN All The Switch generates log messages every time it receives an ARP packet from the VLAN Apply Click Apply to save your changes to the Switch s...

Page 270: ...is in a loop state Loop state occurs as a result of human error It happens when two ports on a switch are connected with the same cable When a switch in loop state sends out broadcast messages the mes...

Page 271: ...thernet port N has loop guard enabled on the Switch A sending a probe packet P to switch B Since switch B is in loop state the probe packet P returns to port N on A The Switch then shuts down port N t...

Page 272: ...network you can re activate the disabled port via the Web Configurator see Section 8 9 on page 82 or via commands See the CLI Reference Guide 27 2 Loop Guard Setup Click Advanced Application Loop Gua...

Page 273: ...tate the Switch will shut down this port Clear this check box to disable the loop guard feature Mode Select the port mode for loop guard If you select Fix the Switch shuts down the port when the Switc...

Page 274: ...ed LANs The figure shown below is an example of a connection fault between switches on the LAN CFM can be used to identify and management this kind of connection problem Figure 166 Management for any...

Page 275: ...report Refer to the Section 44 1 on page 370 to perform CFM actions An example is shown next A user reports his VDSL line link down To check the problem the administrator starts the link trace test f...

Page 276: ...MA VLAN ID CFM Enable Select this to activate the CFM Port This field displays the port number Active Select this to activate a port in this MA Name This field displays the MA name MP Type Select a po...

Page 277: ...click the Delete button to remove them Cancel Click Cancel to clear the Delete check boxes Table 123 CFM MA LABEL DESCRIPTION Table 124 CFM MD LABEL DESCRIPTION MD Name Type a name up to 40 printable...

Page 278: ...e Switch discards the tagged packets that do not match an entry in the VLAN mapping table If the incoming packets are untagged the Switch adds a PVID based on the VLAN setting Note You can not enable...

Page 279: ...rts as soon as you make them Active Select this check box to enable the VLAN mapping feature on this port Clear this check box to disable the VLAN mapping feature Drop Miss Select this check box to di...

Page 280: ...ustomer priority level in the tagged packets or adds to the untagged packets Select the Replace Original check box to have the Switch change the customer priority to what you select here If you clear...

Page 281: ...en click the Delete button Cancel Click Cancel to clear the Delete check boxes Paging Select Prev or Next to show the previous next screen or select a page number from the drop down list box to displa...

Page 282: ...ustomer switches A B and C in the following figure connected through the service provider s network The edge switch encapsulates layer 2 protocol packets with a specific MAC address before sending the...

Page 283: ...2 protocol tunneling modes Access and Tunnel The Access port is an ingress port on the service provider s edge device 1 or 2 in Figure 174 on page 283 and connected to a customer switch A or B Incomi...

Page 284: ...MAC address in the packets Note The MAC address can be either a unicast MAC address or multicast MAC address If you use a unicast MAC address make sure the MAC address does not exist in the address ta...

Page 285: ...ect this option to have the Switch send LACP packets to a peer to dynamically creates and manages trunk groups UDLD Select this option to have the Switch send UDLD packets to a peer s port it connecte...

Page 286: ...Denial of Service attacks such as SYN flooding and Ping of Death the Switch can use filtering actions to determine when to start dropping packets that may potentially be associated with a DoS attack...

Page 287: ...agments with a Data Offset of 1 Select the TCP packets with control flags equals 0 and sequence number equals 0 drop them check box to have the Switch discard any TCP packets whose control flag bit an...

Page 288: ...ediate Agent Tag Format If the PPPoE Intermediate Agent is enabled the Switch adds a vendor specific tag to PADI PPPoE Active Discovery Initialization and PADR PPPoE Active Discovery Request packets f...

Page 289: ...on Options The PPPoE IA configuration on the Switch is divided into Global and VLAN screens The screen you should use for configuration depends on the PPPoE discovery packets to which you want to add...

Page 290: ...for each port if you want to add them into PPPoE IA option 82 tags See more information in the Advanced Application PPPoE IA Configuration Global see Section 32 4 on page 291 or Advanced Application P...

Page 291: ...see Section 8 9 on page 82 Figure 179 Advanced Application PPPoE IA Configuration Global Table 134 Advanced Application PPPoE IA Configuration Port Tel LABEL DESCRIPTION Port This field shows the num...

Page 292: ...ID port number and or VLAN ID from each other You can use a pound key semi colon period comma forward slash or space Select none to not use any delimiter Append Remote ID Select Remote ID to have the...

Page 293: ...cation PPPoE IA Configuration VLAN The following table describes the labels in this screen Table 136 Advanced Application PPPoE IA Configuration VLAN LABEL DESCRIPTION VID Enter the ID number of the V...

Page 294: ...e ID sub option for PPPoE discovery packets with the specified VLAN tag received on this port Spaces are allowed Remote ID Delimiter Select a delimiter to separate the Remote ID information slot ID po...

Page 295: ...the Switch falls back to use ADSL 32 6 1 PVC Configuration Click Advanced Application ADSL Fallback in the navigation panel to display the screen as shown Use this screen to view and configure PVCs f...

Page 296: ...e link on the top navigation panel to save your changes to the non volatile memory when you are done configuring Cancel Click Cancel to reset the above fields to your previous configuration Index This...

Page 297: ...a port The VPI and VCI identify a channel VCI Enter the VCI Virtual Channel Indicator from 32 to 65535 for a channel on a port PVID Enter the PVID Port VLAN ID that the Switch assigns to untagged fra...

Page 298: ...lays the Virtual Path Identifier VPI for this channel VCI This field displays the Virtual Circuit Identifier VCI for this channel PVID This field displays the PVID Port VLAN ID to assign to untagged f...

Page 299: ...AN ID that the Switch assigns to untagged frames received on this channel This must be the VLAN ID of a VLAN that is already configured The port that you are configuring and the uplink port must also...

Page 300: ...this channel Encap This field displays the encapsulation type llc or vc for this channel Priority This field displays the priority value 0 to 7 that the Switch adds to frames that come in on this cha...

Page 301: ...the default gateway The Switch can also use static routes to send data to a server or device that is not reachable through the default gateway for example when sending SNMP traps or using ping to test...

Page 302: ...a router on the same segment as your Switch Metric The metric represents the cost of transmission for routing purposes IP routing uses hop count as the measurement of cost with a minimum of 1 for dire...

Page 303: ...iate neighbor of your Switch that will forward the packet to the destination Metric This field displays the cost of transmission for routing purposes Delete Click Delete to remove the selected entry f...

Page 304: ...Serv defines a new DS Differentiated Services field to replace the Type of Service ToS field in the IP header The DS field contains a 6 bit DSCP field which can define up to 64 service levels and the...

Page 305: ...s are admitted to the network The PIR is greater than or equal to the CIR CIR and PIR values are based on the guaranteed and maximum bandwidth respectively as negotiated between a service provider and...

Page 306: ...can only be marked with an equal or higher packet loss priority Packets marked red high packet loss priority continue to be red without evaluation against the PIR or CIR Packets marked yellow can only...

Page 307: ...itch Port This field displays the index number of a port on the Switch Settings in this row apply to all ports Use this row only if you want to make some settings the same for all ports Use this row f...

Page 308: ...packets are evaluated against the CIR and PIR Select color aware to treat the packets as marked by some preceding entity Incoming packets are evaluated based on their existing color Incoming packets t...

Page 309: ...pecify the DSCP value to use for packets with medium packet loss priority red Specify the DSCP value to use for packets with high packet loss priority Apply Click Apply to save your changes to the Swi...

Page 310: ...ry The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you are done configuring Canc...

Page 311: ...n configure the Switch as a DHCP relay agent When the Switch receives a request from a computer on your network it contacts the DHCP server for the necessary IP information and then relays the assigne...

Page 312: ...plays None if the Switch is not configured as a DHCP relay agent Global if the Switch is configured as a DHCP relay agent only VLAN followed by a VLAN ID or multiple VLAN IDs if it is configured as a...

Page 313: ...rmation This helps provide authentication about the source of the requests The DHCP server can then provide an IP address based on this information Please refer to RFC 3046 for more details The DHCP R...

Page 314: ...in the navigation panel and click the Global link to display the screen as shown Note The port to which the DHCP server connects and the port s from which the DHCP requests come should be in the same...

Page 315: ...requests that it relays to a DHCP server Select Swap position of Circuit ID and Remote ID to have the Switch add information slot number port number and VLAN ID and the Circuit ID and Remote ID sub op...

Page 316: ...ID by port name to have the Switch use the name of the port on which the client DHCP requests are received and add it to client DHCP requests received by the Switch Append Remote ID by user identifier...

Page 317: ...DHCP clients in both domains Figure 199 Global DHCP Relay Network Example Configure the DHCP Relay screen as shown Make sure you select the Option 82 check box to set the Switch to send additional inf...

Page 318: ...agement IP address for each VLAN that you want to configure DHCP settings for on the Switch See Section 8 7 on page 79 for information on how to set up management IP addresses for VLANs Note This scre...

Page 319: ...information configured in the Remote ID Information field to client DHCP requests before the Switch relays them to a DHCP server Remote ID Information Append Remote ID by user identifier Select this t...

Page 320: ...re sent to DHCP server Y with an IP address of 172 16 1 100 Note The port to which the DHCP server connects and the port s from which the DHCP requests come should be in the same VLAN Note To let the...

Page 321: ...Use this screen to add information to client DHCPv6 requests from different VLANs before forwarding the requests to the DHCPv6 server This information helps in authenticating the source of the reques...

Page 322: ...d the client message For example use hname pid svlan to add this system s host name subscriber port ID and SVLAN ID from which the request was received Option37 Remote ID The required option 18 can on...

Page 323: ...ort on the subtended Switch or DSLAM If an Ethernet port ex port 26 on the Switch is the uplink port that connects to the DHCPv6 server and you connect port 25 to another LDRA enabled Switch or DSLAM...

Page 324: ...r receiving DHCPv6 packets on each port A port dropped additional DHCP packets after the receiving rate reaches the Table 151 DHCPv6 Counter LABEL DESCRIPTION Reload Select a port from the drop down l...

Page 325: ...ing group ID if the port has joined any for example 22 B01 where B01 is port 22 s group ID Rate pps Enter the maximum number of DHCPv6 packets the port can receive in a second Apply Click Apply to sav...

Page 326: ...Chapter 35 DHCP VES1724 56 User s Guide 326...

Page 327: ...een Restore Configuration Click Click Here to go to the Restore Configuration screen Backup Configuration Click Click Here to go to the Backup Configuration screen Load Factory Default Click Click Her...

Page 328: ...e boot image 1 2 command where 1 is ras 0 and 2 is ras 1 To specify whether to save a new firmware to ras 0 or ras 1 on the switch perform firmware upgrade using the FTP commands refer to Section 36 8...

Page 329: ...m your computer to the Switch using the Restore Configuration screen Figure 209 Management Maintenance Restore Configuration Bootbase Version V56Fanless 10 23 2012 11 00 25 RAM Size 131072 Kbytes DRAM...

Page 330: ...in this screen 1 Click Backup to display the current Switch configurations in a text file 2 Click File Save As and choose a location to save the configuration file to your computer 36 5 Load Factory D...

Page 331: ...o Config 2 when you reboot Follow the steps below to reboot the Switch 1 In the Maintenance screen click the Config 1 button next to Reboot System to reboot and load configuration one The following sc...

Page 332: ...Switch ftp get config config cfg This is a sample FTP session saving the current configuration to a file called config cfg on your computer If your T FTP client does not allow you to have a destinatio...

Page 333: ...P clients 36 8 4 FTP Restrictions FTP will not work when FTP service is disabled in the Service Access Control screen The IP address es in the Remote Management screen does not match the client IP add...

Page 334: ...on on disabling multi login 37 2 The Access Control Main Screen Click Management Access Control in the navigation panel to display the main screen as shown Figure 213 Management Access Control 37 3 Ab...

Page 335: ...ts to communicate for the purpose of accessing these objects SNMP itself is a simple request response protocol based on the manager agent model The manager issues a request and the agent returns respo...

Page 336: ...MIB draft version 6 CFM 802 1ag draft version 8 0 ZyXEL private MIBs IPv6 standard MIB IP FORWARD MIB RFC 4292 IP MIB RFC 4293 IPv6 TCP MIB RFC 2452 TCP MIB RFC 4022 UDP MIB RFC 4113 INET ADDRESS MIB...

Page 337: ...es more than 10000 rxCRC messages within 10 seconds rxCRCEventClear 1 3 6 1 4 1 890 1 5 12 46 27 2 2 This trap is sent when the amount of rxCRC messages the downlink port receives within 10 seconds re...

Page 338: ...System Traps continued OPTION OBJECT LABEL OBJECT ID DESCRIPTION Table 158 SNMP Interface Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION linkup linkUp 1 3 6 1 6 3 1 1 5 4 This trap is sent when the E...

Page 339: ...DdmiTemperatureAlarmEve ntCleared 1 3 6 1 4 1 890 1 5 12 46 45 2 7 2 2 This trap is sent when a transceiver s temperature falls down below the high alarm threshold and is back to the normal range Ddm...

Page 340: ...890 1 5 12 46 45 2 1 This trap is sent when authentication fails due to incorrect user name and or password RADIUSNotReachableEventO n 1 3 6 1 4 1 890 1 5 12 46 45 2 1 This trap is sent when there is...

Page 341: ...ds in CPE side exceeds the threshold xdsl2LinePerfSESThresh Xtuc 1 3 6 1 2 1 10 251 0 5 This trap is sent when the Switch detects that the number of severely errored seconds exceeds the threshold xdsl...

Page 342: ...6 1 2 1 10 251 0 16 This trap is sent when the number of short initialization failure times for an ADSL ADSL2 ADSL2 line exceeds the threshold others xdsl2LineStatusChangeX tuc 1 3 6 1 2 1 10 251 0 1...

Page 343: ...s the username of a login account on the Switch Security Level Select whether you want to implement authentication and or encryption for SNMP communication from this user Choose noauth to use the user...

Page 344: ...nagers You must first configure a trap destination IP address in the SNMP Setting screen Use the rest of the screen to select which traps the Switch sends to that SNMP manager Type Select the categori...

Page 345: ...the existing system password 1234 is the default password when shipped New Password Enter your new system password Retype to confirm Retype your new system password for confirmation Edit Logins You m...

Page 346: ...5 How SSH works The following table summarizes how a secure connection is established between two remote hosts Figure 219 How SSH Works 1 Host Identification The SSH client sends a connection request...

Page 347: ...fer Protocol over Secure Socket Layer or HTTP over SSL is a web protocol that encrypts and decrypts web pages Secure Socket Layer SSL is an application level protocol that enables secure transactions...

Page 348: ...your browser enter https Switch IP Address as the web site address where Switch IP Address is the IP address or domain name of the Switch you wish to access 37 8 1 Internet Explorer Warning Messages 3...

Page 349: ...ate may display If that is the case click Continue to this website not recommended to proceed to the web configurator login screen Figure 222 Security Certificate Warning Internet Explorer 7 or 8 Afte...

Page 350: ...ter 37 Access Control VES1724 56 User s Guide 350 Click Install Certificate and follow the on screen instructions to install the certificate in your browser Figure 224 Certificate Internet Explorer 7...

Page 351: ...Mozilla Firefox Warning Messages When you attempt to access the Switch HTTPS server a This Connection is Unstructed screen may display If that is the case click I Understand the Risks and then the Ad...

Page 352: ...on to proceed to the web configurator login screen Figure 226 Security Alert Mozilla Firefox 37 8 3 The Main Screen After you accept the certificate and enter the login username and password the Switc...

Page 353: ...7 or 8 denotes a secure connection Figure 227 Example Lock Denoting a Secure Connection 37 9 Service Port Access Control Service Access Control allows you to decide what services you may use to access...

Page 354: ...Service Port For Telnet SSH FTP HTTP or HTTPS services you may change the default service port by typing the new port number in the Server Port field If you change the default port number then you wi...

Page 355: ...t Clear the check box if you wish to temporarily disable the set without deleting it Start Address End Address Configure the IPv4 or IPv6 address range of trusted computers from which you can manage t...

Page 356: ...ing table describes the labels in this screen Table 167 Management Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty the...

Page 357: ...ing the IP address Port Test From the Port drop down list box select a port number and click Internal Test to perform an internal loopback test or click External Test on a VDSL port to perform a loopb...

Page 358: ...essage has a facility and severity level The syslog facility identifies a file in the syslog server Refer to the documentation of your syslog program for details The following table describes the sysl...

Page 359: ...tting Logging Type This column displays the names of the categories of logs that the device can generate Active Select this option to set the device to generate logs for the corresponding category Fac...

Page 360: ...e number the more critical the logs are Add Click Add to save your changes to the Switch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the...

Page 361: ...ostic LABEL DESCRIPTION Dual End Loop Test This field displays a port s current status The status changes to LD_Testing when you perform a DELT test and it also displays the time you started the test...

Page 362: ...in each band NA displays when the band is not used SATN This field displays the signal attenuation situation in each band NA displays when the band is not used SNRM This field displays signal to noise...

Page 363: ...lect Downstream or Upstream in the Direction field show Select the criteria above and click show to display statistics in a raw data list or in a graph at the bottom of this screen Table 172 Dual End...

Page 364: ...his field displays the distance from the Switch to the subscriber s location Reflection This field displays the index number of each reflection in a test Only the first 4 reflection results are displa...

Page 365: ...ne how to forward frames See the following figure 1 The Switch examines a received frame and learns the port on which this source MAC address came 2 The Switch checks to see if the frame s destination...

Page 366: ...ick this button to display and arrange the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to display and arrange the...

Page 367: ...entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The Switch fills in its own MAC and IP address in the sender address fields and puts the known IP address of...

Page 368: ...IP address of a device connected to a Switch port with corresponding MAC address below MAC Address This is the MAC address of the device with corresponding IP address above VID This is the ID number...

Page 369: ...9 Hardware Information The following table describes the labels in this screen Table 176 Hardware Information LABEL DESCRIPTION CPU Utilization Select this and then click Display to see detailed CPU u...

Page 370: ...tion The following table describes the labels in this screen Table 177 CFM Action LABEL DESCRIPTION Continuity Check Select a level type a VLAN ID and click Enable or Disable to start or disable sendi...

Page 371: ...ber to display how many times the test was done for an MEP port Enter a TransID and an EntryNum you get from a test report and click Show Result to see detailed information EntryNum This is available...

Page 372: ...en sends a neighbor solicitation message to check if the address is unique If there is an address to be resolved or verified the Switch also sends out a neighbor solicitation message When the Switch r...

Page 373: ...forwarded to a neighboring node host or router and the neighbor can successfully receive and handle the packet The options that can display in this field are Reachable The interface of the neighborin...

Page 374: ...o a neighboring interface and the Switch has learned it dynamically Other The IPv6 address belongs to none of the types above Interface If the link type is Local this field displays the name of the in...

Page 375: ...confirmation before the router determines the device is not reachable 0 displays if the router does not specify the setting Retransmit Time ms The is the time in milliseconds the router waits before...

Page 376: ...following table describes the labels in this screen Table 180 IPv6 Cache Path MTU LABEL DESCRIPTION Path MTU aging time This field shows how long entries remain in this path MTU table before they age...

Page 377: ...the Switch 3 Make sure the power adaptor or cord is connected to the Switch and plugged in to an appropriate power source Make sure the power source is turned on 4 Turn the Switch off and on in DC mo...

Page 378: ...els 6 If the problem continues contact the vendor 46 2 Switch Access and Login I forgot the IP address for the Switch 1 The default in band management IP address is 192 168 1 1 2 Use the console port...

Page 379: ...Suggestions Try to access the Switch using another service such as Telnet If you can access the Switch check the remote management settings to find out why the Switch does not respond to HTTP I can se...

Page 380: ...nostic screen to check for unauthorized access to your Switch To avoid unauthorized access configure the secured client setting in the Management Access Control Remote Management screen for telnet HTT...

Page 381: ...fault Password 1234 General Product Specifications VDSL Duplex Method DMT FDD Band Plan 998 Interfaces Two Gigabit mini GBIC uplink ports One Console port One Alarm port Two Telco 50 connectors for 24...

Page 382: ...source destination Broadcast storm control Static MAC address forwarding Switching Switching fabric 12 8 Gbps non blocking Max Frame size 9 K bytes Forwarding frame IEEE 802 3 IEEE 802 1q Ethernet II...

Page 383: ...ring Rule based port mirroring Port based mirroring Support port mirroring per IP TCP UDP Bandwidth control Supports rate limiting at 64 Kb increments TRTCM IP Capability IPv4 and IPv6 support 64 Mana...

Page 384: ...0 60 Hz 3 Hz 1 A Max DC input 36 VDC to 72 VDC 2 A Max Note There is no tolerance for the DC input voltage Power Consumption Support COC version 4 LEDs Per switch PWR SYS ALM Per Fast Ethernet RJ 45 p...

Page 385: ...ies packets by comparing them to two user defined rates the Committed Information Rate CIR and the Peak Information Rate PIR Classifier and Policy You can create a policy to define actions to be perfo...

Page 386: ...g IEEE 802 1x with an external RADIUS server and port security that allows only packets with dynamically learned MAC addresses and or configured static MAC addresses to pass through a port on the Swit...

Page 387: ...lay RFC 3164 Syslog RFC 3376 Internet Group Management Protocol Version 3 RFC 3414 User based Security Model USM for version 3 of the Simple Network Management Protocol SNMP v3 RFC 3580 RADIUS Tunnel...

Page 388: ...ser s Guide 388 Hardware Telco 50 Connector Pin Assignments Use Telco 50 cables to connect the VDSL LINE port to the user equipment VDSL modem and the POTS LINE port to the central office switch or PB...

Page 389: ...ORT9 PIN35 V PORT9 PIN10 V PORT9 PIN35 V PORT9 PIN11 V PORT10 PIN36 V PORT10 PIN11 V PORT10 PIN36 V PORT10 PIN12 V PORT11 PIN37 V PORT11 PIN12 V PORT11 PIN37 V PORT11 PIN13 V PORT12 PIN38 V PORT12 PIN...

Page 390: ...ports and matching pin numbers for the hardware Telco 50 connector Table 186 Hardware Telco 50 Connector Port and Pin Numbers VDSL PORT NUMBER PIN NUMBER 1 2 27 2 3 28 3 4 29 4 5 30 5 6 31 6 7 32 7 8...

Page 391: ...he following diagrams and chart show the pin assignments of the console cable The pin layout for the DB 9 connector end of the cables is as follows Figure 246 Console Cable DB 9 Female Pin Layout 23 2...

Page 392: ...INPUT PIN DESCRIPTION 1 Pin 2 and Pin 6 An open circuit for pins 2 and 6 indicates no alarm status A closed circuit indicates an alarm status 2 Pin 3 and Pin 7 An open circuit for pins 3 and 7 indicat...

Page 393: ...itch Switch 1 IRD 1 OTD 1 IRD 1 IRD 2 IRD 2 OTD 2 IRD 2 IRD 3 OTD 3 IRD 3 OTD 3 OTD 6 OTD 6 IRD 6 OTD 6 OTD Table 190 1000BASE T Straight through Cat5e Ethernet Cable PIN PAIR WIRE COLOR PINS ON PLUG...

Page 394: ...White 2 Orange White 3 Green White 4 Brown White 5 Gray White 6 Blue Red 7 Orange Red 8 Green Red 9 Brown Red 10 Gray Red 11 Blue Black 12 Orange Black 13 Green Black 14 Brown Black 15 Gray Black 16...

Page 395: ...ture Figure 249 Telco 50 Cable Structure Table 192 Telco 50 Cable Structure WIRE DIAMETER MM NUMBER OF PAIRS P INSULATION THICKNESS MM CABLE DIAMETER MM ALUMINUM STRIP LAMINATE THICKNESS MM OUTER SHEA...

Page 396: ...ture Figure 250 Telco 50 Cable Structure Table 193 Telco 50 Cable Structure WIRE DIAMETER MM NUMBER OF PAIRS P INSULATION THICKNESS MM CABLE DIAMETER MM ALUMINUM STRIP LAMINATE THICKNESS MM OUTER SHEA...

Page 397: ...ns in which this service is used Table 194 Commonly Used Services NAME PROTOCOL PORT S DESCRIPTION AH IPSEC_TUNNEL User Defined 51 The IPSEC AH Authentication Header tunneling protocol uses this servi...

Page 398: ...n 3 lets a client computer get e mail from a POP3 server through a temporary connection TCP IP or other PPTP TCP 1723 Point to Point Tunneling Protocol enables secure transfer of data over public netw...

Page 399: ...and terminal emulation protocol common on the Internet and in UNIX environments It operates over TCP IP networks Its primary function is to allow users to log into remote host systems TFTP UDP 69 Triv...

Page 400: ...Appendix A Common Services VES1724 56 User s Guide 400...

Page 401: ...mful interference in a commercial environment This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmfu...

Page 402: ...ect it to the right supply voltage for example 110V AC in North America or 230V AC in Europe Use ONLY power wires of the appropriate wire gauge see Chapter 47 on page 381 for details for your device C...

Page 403: ...nnex A 98 107 application 19 curbside 20 MTU 19 ARP how it works 367 ARP Address Resolution Protocol 367 ARP inspection 249 251 and MAC filter 252 configuring 252 syslog messages 252 trusted ports 252...

Page 404: ...larm template for ports 103 configuring VDSL templates 104 console cable pin assignments 391 console port 26 settings 30 copper wire 97 copyright 401 CPU 369 CPU management port 146 CRC Cyclic Redunda...

Page 405: ...ernet port details 67 example MIP and MEP 275 primary and fallback VDSL template settings 102 VDSL profile settings 101 external authentication server 237 F fallback VDSL template 102 fan speed 72 far...

Page 406: ...otocol 217 IGMP filtering 217 profile 227 profiles 224 IGMP per port counter 221 222 IGMP snooping 217 and VLANs 218 MVR 229 setup 226 Impulse Noise Monitoring see INM Impulse Noise Protection INP 98...

Page 407: ...ne 108 limiting broadcast multicast DLF packets 176 line attenuation 362 Link Aggregate Control Protocol LACP 180 link aggregation 180 dynamic 180 ID information 181 setup 182 183 status 181 link trac...

Page 408: ...e 335 MIB PSD MASK 108 MIB PSD Mask 111 graph 111 mini GBIC transceivers 28 installation 28 MultiSource Agreement 28 removal 29 MIP and MEP example 275 mirroring ports 178 MLD filtering 218 MLD messag...

Page 409: ...or 304 PhyR 117 pin assignment console cable 391 Ethernet cable 393 ping test connection 356 policy 202 and classifier 202 and DiffServ 200 configuration 202 example 204 overview 200 rules 200 Port Ag...

Page 410: ...utions 24 screwdriver type 24 screws type 24 rack mounting kit 24 Radio Frequency Interference see RFI RADIUS 237 advantages 237 and port authentication 237 and tunnel protocol attribute 245 Network e...

Page 411: ...l Form factor Pluggable see SFP SNMP 334 agent 335 and MIB 335 and security 335 authentication 343 communities 343 management model 335 manager 335 MIB 336 network components 335 object variables 335...

Page 412: ...ocol 358 server setup 360 settings 359 setup 359 severity levels 358 system information 70 system log 356 system reboot 331 system reset 40 T TACACS 237 setup 240 TACACS Terminal Access Controller Acc...

Page 413: ...reallocation 107 class mask 107 down shift SNR margin 110 down shift time 110 DPBO 112 limit mask 107 overhead rate 107 receiving power 107 RFI band 108 113 transmission mode 107 transmission power 1...

Page 414: ...le 278 priority level 278 tagged 278 traffic flow 278 untagged 278 VLAN ID 278 VLAN profile 101 VLAN stacking 208 configuration 211 example 208 frame format 210 port roles 209 212 port based inner Q 2...

Reviews: