ZyXEL Communications Dimension ES-3024 Скачать руководство пользователя страница 128

Страница: 128 / 212

Dimension ES-3024 Ethernet Switch

Access Control

17-1

Chapter 17

Access Control

This chapter describes how to control access to the switch.

17.1 About Access Control

Click

Access Control

from the navigation panel to display the screen as shown. From this screen you can configure

SNMP, up to four web configurator administrators, enable/disable remote service access and configure trusted
computers for remote access.

Figure 17-1 Access Control

17.2 Access Control Overview

1. A console port access control session and Telnet access control session cannot coexist. The console port has

higher priority. If you telnet to the switch and someone is already logged in from the console port, then you will
see the following message.

Figure 17-2 Console Port Priority

2. A console port or Telnet session can coexist with one FTP session, up to five Web sessions (five different

usernames and passwords) and/or limitless SNMP access control sessions.

“Local administrator is configuring this device now!!!

Connection to host lost.”

Содержание Dimension ES-3024

Страница 1: ...Dimension ES 3024 Ethernet Switch December 2003 Version 3 50 User s Guide...

Страница 2: ...n of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any prod...

Страница 3: ...aged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all ot...

Страница 4: ...energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cau...

Страница 5: ...S TELEPHONE FAX WEB SITE FTP SITE REGULAR MAIL support zyxel com tw 886 3 578 3942 www zyxel com www europe zyxel com ftp zyxel com WORLDWIDE sales zyxel com tw 886 3 578 2439 ftp europe zyxel com ZyX...

Страница 6: ...ation Scenarios 2 1 Chapter 3 Hardware Connections 3 1 3 1 Safety Warnings 3 1 3 2 Front Panel 3 1 3 3 Uplink Modules 3 2 3 4 Rear Panel 3 4 3 5 Front Panel LEDs 3 4 3 6 Stacking Scenario Examples 3 5...

Страница 7: ...Chapter 8 Static MAC Forward Setup 8 1 8 1 Introduction to Static MAC Forward Setup 8 1 8 2 Configuring Static MAC Forwarding 8 1 8 3 Viewing and Editing Static MAC Forwarding Rules 8 2 Chapter 9 Fil...

Страница 8: ...ring Port Authentication 15 1 Chapter 16 Port Security 16 1 16 1 About Port Security 16 1 16 2 Port Security Setup 16 1 Chapter 17 Access Control 17 1 17 1 About Access Control 17 1 17 2 Access Contro...

Страница 9: ...ion to ARP Table 24 1 24 2 Viewing ARP Table 24 1 Part VII VII Chapter 25 Introduction to CLI 25 1 25 1 Command Line Interface Overview 25 1 25 2 Command Summary 25 2 Chapter 26 Command Examples 26 1...

Страница 10: ...Dimension ES 3024 Ethernet Switch x Table of Contents 27 8 vlan1q vlan list 27 9 Part VIII VIII A Product Specifications A 1 B Index B 1...

Страница 11: ...3 3 Figure 3 3 Inserting An Example Module 3 3 Figure 3 4 ES 3024 AC Unit Rear Panel 3 4 Figure 3 5 ES 3024 DC Unit Rear Panel 3 4 Figure 3 6 Front Panel LEDs 3 5 Figure 3 7 Stacking Example 1 3 6 Fig...

Страница 12: ...e 10 2 Spanning Tree Protocol Configuring 10 5 Figure 11 1 Bandwidth Control 11 2 Figure 11 2 Bandwidth Control Summary Table 11 3 Figure 12 1 Broadcast Storm Control 12 2 Figure 13 1 Mirroring Mirror...

Страница 13: ...plication Example 22 1 Figure 22 2 Cluster Management Status 22 2 Figure 22 3 Cluster Member Web Configuration Screen 22 3 Figure 22 4 Example Uploading Firmware to a Cluster Member Switch 22 4 Figure...

Страница 14: ...Example 27 4 Figure 27 6 garp status Command Example 27 4 Figure 27 7 vlan1q port status Command Example 27 5 Figure 27 8 vlan1q port default vid Command Example 27 5 Figure 27 9 vlan1q port accept C...

Страница 15: ...6 12 Table 7 1 GARP Terminology 7 2 Table 7 2 802 1Q VLAN Status 7 4 Table 7 3 802 1Q VLAN Port Settings 7 6 Table 7 4 802 1Q Static VLAN 7 8 Table 7 5 Static VLAN Summary Table 7 8 Table 7 6 Port Bas...

Страница 16: ...5 Table 17 6 Access Control Service Access Control 17 6 Table 17 7 Access Control Remote Management 17 7 Table 18 1 Physical Queue Priority 18 1 Table 18 2 Queuing Method 18 3 Table 19 1 Static Routin...

Страница 17: ...Dimension ES 3024 Ethernet Switch List of Tables xvii Table 25 5 Command Summary config 25 16...

Страница 18: ...point of presence in a building basement delivering 10 100Mbps data service over Category 5 wiring to each customer General Syntax Conventions This guide shows you how to configure the switch using t...

Страница 19: ...an online glossary of networking terms User Guide Feedback Help us help you E mail all User Guide related comments questions or suggestions for improvement to techwriters zyxel com tw or send regular...

Страница 20: ...Features and Applications I Part I Features And Applications This part acquaints you with the features and applications of the ES 3024...

Страница 21: ......

Страница 22: ...s describe the hardware and firmware features of the ES 3024 1 1 1 Hardware Features Power The ES 3024 DC model requires DC power supply input of 48 VDC to 60 VDC 1 84A Max The ES 3024 AC model requir...

Страница 23: ...FC 1757 o SNMPv2 SNMPv2c RFC 2674 Management Web configurator Command line interface locally via console port or remotely via Telnet SNMP System Monitoring System status link status rates statistics c...

Страница 24: ...ompliant switches in your network to ensure that only one path exists between any two stations on the network Cluster Management Cluster Management allows you to manage switches through one switch cal...

Страница 25: ...backbone It can alleviate bandwidth contention and eliminate server and network bottlenecks All users that need high bandwidth can connect to high speed department servers via the switch You can prov...

Страница 26: ...deal for connecting two power workgroups that need high bandwidth In the following example use trunking to connect these two power workgroups Switching to higher speed LANs such as FDDI or ATM is not...

Страница 27: ...ork allows a physical network to be partitioned into multiple logical networks Stations on a logical network belong to one group A station can belong to more than one group With VLAN a station cannot...

Страница 28: ...Application VLAN Shared Server Example Shared resources such as a server can be used by all ports in the same VLAN as the server as shown in the following example In this example only ports that need...

Страница 29: ...Dimension ES 3024 Ethernet Switch 1 8 Getting to Know the ES 3024 Figure 1 5 Shared Server Using VLAN Example...

Страница 30: ...Installation Connections This part acquaints you with installation scenarios of the ES 3024 instructs you on how to make the hardware connections including installing removing modules shows some stack...

Страница 31: ...1 1 Desktop Installation Procedure Step 1 Make sure the switch is clean and dry Step 2 Set the switch on a smooth level surface strong enough to support the weight of the switch and the connected cabl...

Страница 32: ...k mounting kit Step 1 Align one bracket with the holes on one side of the switch and secure it with the bracket screws smaller than the rack mounting screws Step 2 Attach the other bracket in a simila...

Страница 33: ...Dimension ES 3024 Ethernet Switch Hardware Installation 2 3 Figure 2 3 Mounting the ES to an EIA standard 19 inch rack...

Страница 34: ......

Страница 35: ...semble this device 3 2 Front Panel The following figure shows the front panel of the ES 3024 The front panel contains a console port for local switch management switch LEDs 24 RJ 45 Ethernet ports and...

Страница 36: ...nfigured speed and duplex mode when making a connection thus requiring you to make sure that the settings of the peer Ethernet port are the same in order to connect Default Ethernet Negotiation Settin...

Страница 37: ...e any bodily static electricity before you continue Step 4 Remove the optional module from its protective anti static packaging Avoid touching the onboard circuit components by holding it by the edge...

Страница 38: ...1 Power Connector Make sure you are using the correct power source as shown on the panel To connect the power to the ES 3024 AC unit insert the female end of power cord to the power receptacle on the...

Страница 39: ...mally LNK ACT Ethernet ports Green Blinking ON OFF The system is transmitting receiving to from a 10 Mbps Ethernet network The link to a 10 Mbps Ethernet network is up The link to a 10 Mbps Ethernet n...

Страница 40: ...Dimension ES 3024 Ethernet Switch 3 6 Hardware Connections Figure 3 7 Stacking Example 1 Figure 3 8 Stacking Example 2...

Страница 41: ...stacking modules as well as other ports using line commands 3 7 Uplink Scenario Example Use Ethernet cables when daisy chaining uplinking the switches See the following figure for an example uplink c...

Страница 42: ...emulation program on a computer connected to the switch console port see section 3 2 1 or access the switch via an Ethernet port using Telnet You can use the config save command to save 802 1Q STP Cl...

Страница 43: ...Getting Started III Part III Getting Started This part introduces you to the ES 3024 web configurator describes the Home and System Info screens and shows you how to configure the Basic Settings menus...

Страница 44: ......

Страница 45: ...t connection locks out all other connections Log out from the console port connection before logging in with the web configurator Step 1 Start your Internet Explorer or Netscape Navigator web browser...

Страница 46: ...creen Figure 4 2 Web Configurator Home Screen Status In the navigation panel click a main link to reveal a list of submenu links Table 4 1 Navigation Panel Sub links Overview BASIC SETTING ADVANCED AP...

Страница 47: ...ation Configuration Port Authentication RADIUS 802 1x Port Security Access Control SNMP Logins Service Access Control Remote Management Queuing Method Static Routing Maintenance Firmware Upgrade Resto...

Страница 48: ...to screens where you can copy traffic from one port or ports to another port in order that you can examine the traffic from the first port without interference Link Aggregation This link takes you to...

Страница 49: ...first time it is recommended you change the default Administrator password in the Logins screen Click Advanced Application Access Control and then Logins to display the next screen Figure 4 3 Web Con...

Страница 50: ...ad the configuration file do the following Step 1 Connect to the console port using a computer with terminal emulation software See the chapter on hardware connections for details Step 2 Disconnect an...

Страница 51: ...you log out This is recommended after you finish a management session both for security reasons and so as you don t lock out other switch administrators Figure 4 5 Web Configurator Logout Screen 4 5...

Страница 52: ......

Страница 53: ...s 5 1 About System Statistics and Information The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details 5 2 Port Status Summary To...

Страница 54: ...t RxPkts This field shows the number of received frames on this port Errors This field shows the number of received errors on this port Tx KB s This field shows the number of kilobytes per second tran...

Страница 55: ...Dimension ES 3024 Ethernet Switch System Status and Port Details 5 3 Figure 5 2 Status Port Details The following table describes the labels in this screen...

Страница 56: ...the connection has been up Tx Packet The following fields display detailed information about frames transmitted TX Packets This field shows the number of good frames unicast multicast and broadcast t...

Страница 57: ...mitted frames for which transmission is inhibited by exactly one collision Multiple This is a count of successfully transmitted frames for which transmission was inhibited by more than one collision E...

Страница 58: ...5 2 Status Port Details LABEL DESCRIPTION Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box an...

Страница 59: ...screen also allows you to set the system time manually or get the current time and date from an external server when you turn on your switch The real time is then displayed in the switch logs The Swi...

Страница 60: ...ate created Ethernet Address This field refers to the Ethernet MAC Media Access Control address of the switch Hardware Monitor Temperature Unit The switch has temperature sensors that are capable of d...

Страница 61: ...e RPM 41 is displayed for speeds too small to measure under 2000 RPM Threshold This field displays the minimum speed at which a normal fan should work Status Normal indicates that this fan is function...

Страница 62: ...General Setup LABEL DESCRIPTION System Name Choose a descriptive name for identification purposes This name consists of up to 32 printable characters spaces are not allowed Location Enter the geograph...

Страница 63: ...s the date you open this menu New Date yyyy mm dd Enter the new date in year month and day format The new date then appears in the Current Date field after you click Apply Time Zone Select the time di...

Страница 64: ...p membership It checks IGMP packets passing through it picks out the group registration information and configures multicasting accordingly Without IGMP snooping multicast traffic is treated in the sa...

Страница 65: ...VLANs 802 1Q IGMP Snooping Select Active to enable IGMP snooping have group multicast traffic only forwarded to ports that are members of the VLAN specified in the VLAN field significantly reducing m...

Страница 66: ...s to define class of service Frames without an explicit priority tag are given the default priority of the ingress port Use the next two fields to configure the priority level to physical queue mappin...

Страница 67: ...a domain name server IP address automatically Static IP Address Select this option if you don t have a DHCP server or if you wish to assign static IP address information to the switch You need to fil...

Страница 68: ...order to manage the device from any port If a port is not a member of this VLAN then users on that port cannot access the device To access the switch make sure the port that you are connected to is a...

Страница 69: ...Dimension ES 3024 Ethernet Switch Basic Setting 6 11 Figure 6 4 Port Setup The following table describes the fields in this screen...

Страница 70: ...otiation is turned off an Ethernet port uses the pre configured speed and duplex mode when making a connection thus requiring you to make sure that the settings of the peer Ethernet port are the same...

Страница 71: ...Advanced Application 1 IV Part IV Advanced Application 1 This part shows you how to configure the VLAN Static MAC Forwarding Filtering STP and Bandwidth Control Advanced Application screens...

Страница 72: ...1 then that frame should not be forwarded as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 212 VLANs Note that user priority and VLAN...

Страница 73: ...refer to the following table for common GARP terminology Table 7 1 GARP Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually Dynamic VLAN This is...

Страница 74: ...s C D and E otherwise they will drop frames with unknown VLAN group tags However with VLAN Trunking enabled on a port s in each intermediary switch you only need to create VLAN groups in the end devic...

Страница 75: ...er This column displays the ports that are participating in a VLAN A tagged port is marked as T an untagged port is marked as U and ports not participating in a VLAN in marked as Elapsed Time This fie...

Страница 76: ...ext Page Click one of these buttons to show the previous next screen if all status information cannot be seen in one screen 7 2 1 802 1Q VLAN Port Settings To configure the 802 1Q VLAN settings on a p...

Страница 77: ...PVID is VLAN 1 for all ports but this can be changed to any number between 0 and 4094 GVRP Select this check box to permit VLANs groups beyond the local switch on this port GVRP GARP VLAN Registratio...

Страница 78: ...Dimension ES 3024 Ethernet Switch VLAN 7 7 Figure 7 5 802 1Q Static VLAN...

Страница 79: ...mes transmitted with this VLAN Group ID Add Click Add to save the new rule to the switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to yo...

Страница 80: ...Dimension ES 3024 Ethernet Switch VLAN 7 9 VID1 Example Screen Figure 7 7 VID1 Example Screen...

Страница 81: ...her for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports Port based VLANs are...

Страница 82: ...Dimension ES 3024 Ethernet Switch VLAN 7 11 Figure 7 8 Port Based VLAN Setup All Connected...

Страница 83: ...Dimension ES 3024 Ethernet Switch 7 12 VLAN Figure 7 9 Port Based VLAN Setup Port isolation The following table describes the labels in this screen...

Страница 84: ...ming These are the ingress ports an ingress port is an incoming port that is a port through which a data packet enters If you wish to allow two subscriber ports to talk to each other you must define t...

Страница 85: ......

Страница 86: ...at match static MAC address rules on a port can only receive traffic on that port and cannot receive traffic on other ports This may reduce unicast flooding 8 2 Configuring Static MAC Forwarding Click...

Страница 87: ...warding screen To change the settings of a rule click a number in the Index field Figure 8 2 Static MAC Forwarding Summary Table The following table describes the labels in this screen Table 8 2 Stati...

Страница 88: ...applies to traffic flowing in both directions if both a source and destination are specified The rule applies to traffic flowing in one direction if either a source or destination is specified No any...

Страница 89: ...lecting this check box Name Type a descriptive name for this filter rule This is for identification purpose only Protocol Select the protocol type to which this rule applies Source The next fields per...

Страница 90: ...to apply the filter rule to all MAC addresses and VLAN groups VID Type the VLAN group identification number Port Select the port to which the filter rule should be applied You may choose one port only...

Страница 91: ...s the source port number the source MAC address with the VLAN identification number to which the MAC address belongs or a combination of the two All Entries means all MAC addresses from all ports Dest...

Страница 92: ...0 50 to 600 1 to 65535 Path Cost 16Mbps 62 40 to 400 1 to 65535 Path Cost 100Mbps 19 10 to 60 1 to 65535 Path Cost 1Gbps 4 3 to 10 1 to 65535 Path Cost 10Gbps 2 1 to 5 1 to 65535 On each bridge the ro...

Страница 93: ...table to eliminate packet looping A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate transient loops Table 10 2 STP Port States PORT STATE DESCRIPT...

Страница 94: ...bridge Our Bridge is this switch This switch may also be the root bridge Bridge ID This is the unique identifier for this bridge consisting of bridge priority plus MAC address This ID is the same for...

Страница 95: ...switch through which this switch must communicate with the root of the Spanning Tree Topology Changed Times This is the number of times the spanning tree has been reconfigured Time Since Last Change T...

Страница 96: ...Dimension ES 3024 Ethernet Switch Spanning Tree Protocol 10 5 Figure 10 2 Spanning Tree Protocol Configuring...

Страница 97: ...e last BPDU becomes the designated port for the attached LAN If it is a root port a new root port is selected from among the switch ports attached to the network The allowed range is 6 to 40 seconds F...

Страница 98: ...avigation panel to bring up the screen as shown next 11 1 1 Note About Configuration The following rules apply when configuring bandwidth control The rule applies to traffic flowing in both directions...

Страница 99: ...arily deactivate a rule without deleting it by deselecting this check box Name Type a descriptive name for this rule This is for identification purpose only Maximum Bandwidth Type the maximum bandwidt...

Страница 100: ...apply the rule to all MAC address and VLAN group identification numbers To specify a destination select the second choice and type a MAC address in valid MAC address format six hexadecimal character p...

Страница 101: ...dth allowed in kilobits per second kbps for the rule Source This field displays the source port number the source MAC address with the VLAN identification number to which the MAC address belongs or a...

Страница 102: ...V Part V Advanced Application 2 This part shows you how to configure the Broadcast Storm Control Mirroring Link Aggregation Port Authentication Port Security Access Control and Queuing Method Advance...

Страница 103: ......

Страница 104: ...the number of broadcast frames that can be stored in the switch buffer or sent out from the switch Broadcast frames that arrive when the buffer is full are discarded Enable this feature to reduce broa...

Страница 105: ...Dimension ES 3024 Ethernet Switch 12 2 Broadcast Storm Control Figure 12 1 Broadcast Storm Control The following table describes the labels in this screen...

Страница 106: ...e period from 64 1024 8000 256000 microseconds from the drop down list box Direction Choose to monitor broadcast packets coming into the switch Incoming or going out of the switch Outgoing Port This f...

Страница 107: ......

Страница 108: ...About Configuration The following rules apply when configuring mirroring The rule applies to traffic flowing in both directions if both a source and destination are specified The rule applies to traf...

Страница 109: ...re detail without interfering with the traffic flow on the original port s Select this port from this drop down list box Apply Click Apply to save the changes Cancel Click Cancel to start configuring...

Страница 110: ...elect the port to which the rule should be applied You may choose one port only or all ports All Ports Destination The next three fields pertain to the destination MAC address and destination port Ign...

Страница 111: ...rce This field displays the source port number the source MAC address with the VLAN identification number to which the MAC address belongs or a combination of the two All Entries means all IP MAC addr...

Страница 112: ...RANGE 1 1 to 8 2 9 to 16 3 17 to 24 4 25 and 26 the uplink ports 5 S1 and S2 the stacking ports 14 1 1 Dynamic Link Aggregation The ES 3024 adheres to the 802 3ad standard for static and dynamic LACP...

Страница 113: ...00 00 0000 00 0000 Local switch 0000 00 00 00 00 00 0000 00 0000 System priority Local switch MAC address Key Port Priority1 Port Number1 Peer switch 0000 00 00 00 00 00 0000 00 0000 System priority...

Страница 114: ...taining multiple ports Aggregator ID Refer to Figure 14 1 for more information on this field Enabled Port These are the ports you have configured in the Link Aggregation screen to be in the trunk grou...

Страница 115: ...er if system priority is the same becomes the LACP server The LACP server controls the operation of LACP setup Enter a number to set the priority of an active port using Link Aggregate Control Protoco...

Страница 116: ...peer port in the trunk group is still up If a port does not respond after three tries then it is deemed to be down and is removed from the trunk Set a short timeout one second for busy trunked links...

Страница 117: ......

Страница 118: ...limited to the memory capacity of the device In essence RADIUS authentication allows you to validate an unlimited number of users from a central location Figure 15 1 RADIUS Server 15 2Configuring Port...

Страница 119: ...decimal notation UDP Port The default port of the RADIUS server for authentication is 1812 You need not change this value unless your network administrator instructs you to do so Shared Secret Specif...

Страница 120: ...Dimension ES 3024 Ethernet Switch Port Authentication 15 3 Figure 15 4 Port Authentication 802 1x The following table describes the labels in this screen...

Страница 121: ...t this checkbox to permit 802 1x authentication on this port You must first allow 802 1x authentication on the switch before configuring it on each port Reauthentication Specify if a subscriber has to...

Страница 122: ...ch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K For maximum port security enable this feature disable MAC address learning and conf...

Страница 123: ...Dimension ES 3024 Ethernet Switch 16 2 Port Security Figure 16 1 Port Security The following table describes the labels in this screen...

Страница 124: ...s field to limit the number of dynamic MAC addresses that may be learned on a port For example if you set this field to 5 on port 2 then only the devices with these five learned MAC addresses may acce...

Страница 125: ......

Страница 126: ...Dimension ES 3024 Ethernet Switch Port Security 16 1...

Страница 127: ......

Страница 128: ...ote access Figure 17 1 Access Control 17 2Access Control Overview 1 A console port access control session and Telnet access control session cannot coexist The console port has higher priority If you t...

Страница 129: ...illustrates an SNMP management operation SNMP is only available if TCP IP is configured Figure 17 3 SNMP Management Model An SNMP managed network consists of two main components agents and a manager...

Страница 130: ...gent Trap Used by the agent to inform the manager of some events 17 3 1 Supported MIBs MIBs let administrators collect statistics and monitor status and performance The ES 3024 supports the following...

Страница 131: ...y which is the password sent with each trap to the SNMP manager Trap Destination Enter the IP addresses of up to four stations to send your SNMP traps to Apply Click Apply to save your changes back to...

Страница 132: ...name You cannot change the default administrator user name Only the administrator has read write access Old Password Type the existing system password 1234 is the default password when shipped New Pas...

Страница 133: ...he following table describes the fields in this screen Table 17 6 Access Control Service Access Control LABEL DESCRIPTION Services Services you may use to access the ES 3024 are listed here Active Sel...

Страница 134: ...r may use a service to manage the switch Active Select this check box to activate this secured client set Clear the check box if you wish to temporarily disable the set without deleting it Start Addre...

Страница 135: ......

Страница 136: ...rict Priority Queuing SPQ services queues based on priority only As traffic comes into the switch traffic on the highest priority queue Q3 is transmitted first When that queue empties traffic on the n...

Страница 137: ...Dimension ES 3024 Ethernet Switch 18 2 Queuing Method Figure 18 1 Queuing Method...

Страница 138: ...the lowest Weighted Fair Queuing WFQ services queues based on their priority and queue weight the number you configure in the queue field Queues with larger weights get more service than queues with s...

Страница 139: ...Routing Protocol and Management VI Part VI Routing Protocol and Management This part describes the Routing Protocol and Management screens...

Страница 140: ...y Click Routing Protocol in the navigation panel and then Static Routing to display the screen as shown Figure 19 1 Static Routing The following table describes the related labels you use to create a...

Страница 141: ...tes the cost for this link The number need not be precise but it must be between 1 and 15 In practice 2 or 3 is usually a good number Add Click Add to save the new rule to the switch It then displays...

Страница 142: ...of the gateway The gateway is an immediate neighbor of your switch that will forward the packet to the destination Metric This field displays the cost of transmission for routing purposes Delete Chec...

Страница 143: ......

Страница 144: ...llowing screen Figure 20 1 Maintenance 20 2Firmware Upgrade Click Firmware Upgrade in the Maintenance screen if you want to upgrade your switch firmware See the System Info screen to verify your curre...

Страница 145: ...se to display a Choose File screen from which you can locate it After you have specified the file click Restore rom 0 is the name of the configuration file on the switch so your backup configuration f...

Страница 146: ...20 5 Confirm Load factory Defaults Click OK to go to the next screen Figure 20 6 Restart Switch After Load Factory Defaults Click OK to begin resetting all switch configurations to the factory defaul...

Страница 147: ...L NAME EXTERNAL NAME DESCRIPTION Configuration File Rom 0 rom This is the configuration filename on the switch Uploading the rom 0 file replaces the entire ROM file system including your switch config...

Страница 148: ...he commands that you may see in GUI based FTP clients Table 20 2 General Commands for GUI based FTP Clients COMMAND DESCRIPTION Host Address Enter the address of the host server Login Type Anonymous T...

Страница 149: ......

Страница 150: ...navigation panel to display this screen Use this screen to check system logs reset the system or ping IP addresses Figure 21 1 Diagnostic The following table describes the labels in this screen Table...

Страница 151: ...g Type the IP address of a device that you want to ping in order to test a connection Click Ping to have the switch ping the IP address in the field to the left 5 times Ethernet Port Test From the Por...

Страница 152: ...communicate with one another Table 22 1 ZyXEL Clustering Management Specifications Maximum number of cluster members 8 Cluster Member Models Must be compatible with ZyXEL cluster management implement...

Страница 153: ...n the cluster member switch directly and not via the cluster manager o None neither a manager nor a member of a cluster Manager This field displays the cluster manager switch s hardware MAC Address Th...

Страница 154: ...down 22 2 1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that clus...

Страница 155: ...e as seen in the cluster manager switch config 00 a0 c5 05 02 34 The cluster member switch s configuration file name as seen in the cluster manager switch 22 3Configuring Cluster Management Click Conf...

Страница 156: ...r Other directly connected switches that are set to be cluster managers will not be visible in the Clustering Candidates list If a switch that was previously a cluster member is later set to become a...

Страница 157: ...uster member s password is its web configurator password Select a member in the Clustering Candidate list and then enter its web configurator password If that switch administrator changes the web conf...

Страница 158: ...forward frames See the following figure 1 The switch examines a received frame and learns the port on which this source MAC address came 2 The switch checks to see if the frame s destination MAC addr...

Страница 159: ...e LABEL DESCRIPTION Sort by Click one of the following buttons to display and arrange the data according to that button type The information is then displayed in the summary table below MAC Click this...

Страница 160: ...ng Database LABEL DESCRIPTION VID This is the VLAN group to which this frame belongs Port This is the port from which the above MAC address was learned Type This shows whether the MAC address is dynam...

Страница 161: ......

Страница 162: ...ress sends it to the device If no entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The switch fills in its own MAC and IP address in the sender address fields...

Страница 163: ...ON Index This is the ARP Table entry number IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below MAC Address This is the MAC address of...

Страница 164: ...CLI Commands VII Part VII Commands This part gives information on Command Line Interface CLI commands for the ES 3024...

Страница 165: ......

Страница 166: ...e after you restart the switch However you cannot use config save for all other line command configurations These are saved in volatile memory DRAM so are not effective after you restart the switch 25...

Страница 167: ...ands can be abbreviated to the smallest unique string that differentiates the command For example the system date command could be abbreviated to s d 25 1 4 Getting Help Type help or to display a list...

Страница 168: ...domain name Sets or displays the system domain name edit Edits the system preset text file such as autoexec net feature Displays a list of the device s major features hostname hostname Sets or display...

Страница 169: ...try size Creates a packet trace buffer destroy Removes the packet trace buffer channel name none incoming outgoing bothway Sets the packet trace direction for a given channel string on off Enables dis...

Страница 170: ...it idx limit Sets the maximum limit temperature at the specified point idx flimit bank idx limit Sets the maximum limit fan revs per minute RPM at the specified fan idx in the specified bank bank A ba...

Страница 171: ...level Logs displayed consist of critical error warning debug and informational messages in order of severity Log level 4 displays all messages log level 0 just displays critical messages log switch on...

Страница 172: ...amed add MAC addr password Add a member switch into the cluster using its web configurator password remove MAC addr Remove a member switch from the cluster showMember Shows details of member switches...

Страница 173: ...of frames that a port accepts gvrp port enable disable Enables disables GVRP on the specified port protocolVID port VID protocol Sets protocol based pvid for the specific port svlan cpu vlan id Sets...

Страница 174: ...guring STP via web configurator port enable port_no Enables RSTP on this port disable port_no Disables RSTP on this port pathCost Port_NO Cost 0 Auto Sets the specified port s path cost priority Port_...

Страница 175: ...ecified local port status Port_NO Displays LACP status on a port keymgnt on off Turns LACP key management on or off syspriority priority Sets the LACP system priority The switch with the lowest priori...

Страница 176: ...ername passwd Creates a username and password profile in the internal switch user database delete idx Deletes a username and password profile in the internal switch user database list Lists all profil...

Страница 177: ...e Clears current run time static MAC address settings display mac vid Displays current run time static MAC addresses on the ports set port MAC vid Configures a static MAC address on the specified port...

Страница 178: ...ion of mirrored traffic port port Sets the mirror port the port traffic is copied to for analysis bw The following commands relate to bandwidth control rules Bandwidth control means defining a maximum...

Страница 179: ...s learning on the port disable port Disables address learning on the port display port Displays address learning status isolate disable Disables port isolation All connected port port Port List in Hex...

Страница 180: ...y iface on off Sets the ICMP router discovery flag ifconfig iface ipaddr broadcast addr mtu value dynamic Configures a network interface ping hostid Pings a remote host route status Displays the routi...

Страница 181: ...on off the trace for debugging telnet host port Telnets to the specified host traceroute host ttl wait queries Sends ICMP packets to trace the route of a remote host igmpsnoop status Displays the IGMP...

Страница 182: ...e command to save 802 1Q STP Cluster and IP configuration changes to non volatile memory Flash These changes are effective after you restart the switch However you cannot use config save for all other...

Страница 183: ......

Страница 184: ...rd pass 9 Wed Feb 12 16 16 46 2003 PP13 INFO SMT Password pass 11 Wed Feb 12 16 26 06 2003 PP1d ERROR unknown variable 12 Wed Feb 12 16 31 18 2003 PP13 INFO SMT Password pass 14 Wed Feb 12 16 42 20 20...

Страница 185: ...ple 26 2 5 sys sw vlan1q vlan list Syntax sys sw vlan1q vlan list all VID start_VID end_VID where all VID start _VID end_VID Specify either all of the VLAN entries all a single VLAN ID VID or a range...

Страница 186: ...4 pktcnt 2 DropEvents 0 Octets 340532 Pkts 2053 BroadcastPkts 263 MulticastPkts 174 CRCAlignErrors 0 UndersizePkts 0 OversizePkts 0 Fragments 0 Jabbers 0 Collisions 0 Pkts64Octets 739 Pkts65to127Octet...

Страница 187: ...st Command Example 26 3sys cluster Commands These are the commonly used commands that belong to the sys cluster group of commands Use config save to save these configurations 26 3 1 sys cluster status...

Страница 188: ...tus 1 0 none 1 manager 2 member Name cm goose 43 number of members 3 member_p 80434994 number of discover devices 0 list_p 80435394 test_mem sys cluster showMember No1 ipAddr 127 0 0 1 mask 255 255 0...

Страница 189: ...command displays the routing table An example is shown next Figure 26 12 ip route status Command Example 26 4 3 ip arp status ES 3024 ip ping 192 168 1 10 Resolving 192 168 1 10 192 168 1 10 sent rcv...

Страница 190: ...mple is shown next Figure 26 14 ip dhcp Command Examples 26 5Enabling rstp on the Stacking Module Step 1 First enable RSTP sys sw rstp bridge enable Step 2 Then enable RSTP on the stacking port sys sw...

Страница 191: ......

Страница 192: ...it can decide whether to forward a tagged frame to a VLAN aware device or first strip the tag from a frame and then forward it to a VLAN unaware device 27 2Filtering Databases A filtering database st...

Страница 193: ...for managing the switch the management or CPU VLAN Use the sys sw vlan1q svlan active command to activate the new management VLAN ID Example Figure 27 2 CPU VLAN Configuration and Activation Example S...

Страница 194: ...Period timer for GVRP in milliseconds Each port has a Join Period timer The allowed Join Time range is between 100 and 32767 milliseconds the default is 200 milliseconds leave timer ms This sets the d...

Страница 195: ...to 800 milliseconds and the Leave All Timer to 11000 milliseconds Figure 27 5 garp timer Command Example 27 4 3 gvrp status Syntax sys sw gvrp status This command shows the switch s GVRP settings An e...

Страница 196: ...nge 1 4094 This command sets a default VLAN ID for all untagged packets that come in through the specified port The following example sets the default VID of port 1 to 2000 Figure 27 8 vlan1q port def...

Страница 197: ...on or off for the specified port The following example turns off GVRP for port 2 Figure 27 10 vlan1q port gvrp Command Example 27 4 10 vlan1q svlan cpu Syntax sys sw vlan1q svlan cpu VLAN ID where VI...

Страница 198: ...svlan list command An example of a configuration is shown next Modify a Static VLAN Table Example The following is an example of how to modify a static VLAN table Figure 27 12 Modifying the Static VL...

Страница 199: ...27 4 12 vlan1q svlan delentry Syntax sys sw vlan1q svlan delentry VID where VID The VLAN ID 1 4094 This command deletes the specified VLAN ID entry from the static VLAN table The following example de...

Страница 200: ...part of it An example is shown next For the EgressPort section of the last column E is an egress port for this VLAN is not an egress port for this VLAN The UntaggedPort section of the last column dis...

Страница 201: ...rent configuration of the IEEE 802 1Q VLAN See the following example shows the default VLAN settings The default VLAN allows all ports to connect to each other and sets them to send untagged packets F...

Страница 202: ...Appendices and Index VIII Part VIII Appendices and Index This part contains appendices of advanced background feature information and an Index...

Страница 203: ...modules One expansion slot for stacking module One console port Data Transfer Rate Ethernet 10Mbps half duplex 20Mbps full duplex Fast Ethernet 100Mbps half duplex 200Mbps full duplex Uplink rates de...

Страница 204: ...ity Queues 4 queues Port Link Aggregation IEEE802 3ad dynamic port trunking Port Security Static MAC address filtering MAC address learning limit Multicasting Support IGMP snooping Broadcast Storm Sup...

Страница 205: ...ply DC Unit DC input of 48 VDC 60 VDC 1 84A Max Power Consumption Main switch 60W maximum Fuse Rating T2A250VAC Caution For continued protection against risk of fire replace only with the same type an...

Страница 206: ......

Страница 207: ...ical Format Indicator class A iv CLI Command VII Configure tagged VLAN example 27 2 Getting help 25 2 Static VLAN Table example 27 7 sys Commands 25 2 Cold Start 17 3 Command exit command 25 14 ip com...

Страница 208: ...w control 3 8 Flow Control 6 12 Forwarding Delay 10 4 10 6 Frimware version 6 2 Front Panel 3 1 Front Panel LEDs 3 4 FTP 20 4 G GARP 27 1 See Generic Attribute Registration Protocol garp status 27 3 G...

Страница 209: ...Exchange A 1 MIBs A 2 Mirror port 13 1 Mirror Setup 13 2 Monitor Interval 12 3 Mounting Brackets 2 2 Multi tenant unit MTU xvi N Navigation Panel Links 4 3 Network Applications Bridging 1 4 Collapsed...

Страница 210: ...cess Control 17 6 Set Community 17 4 Shared Secret 15 2 Simple Network Management Protocol 17 2 SMI RFC 1155 1 2 SNMP 17 2 Configuring 17 3 Trap 17 4 Get 17 3 Manager 17 2 MIBs 17 3 supported versions...

Страница 211: ...tocol Identifier Trademarks ii Trap 17 4 Trunk Setup 14 4 trusted computers 17 7 TX Collision 5 5 Tx KB s 5 2 5 4 Tx Packet 5 4 TxPkts 5 2 5 4 U Up Time 5 2 Uplink Modules 1 1 Uplink Scenario 3 7 User...

Страница 212: ...nfigurator 4 1 Logging out 4 7 Login 4 1 Online help 4 7 Recommended browsers 4 1 X XMODEM upload 4 6 Z ZyNOS ZyXEL Network Operating System 20 4 ZyNOS Firmware version 6 2 ZyXEL Limited Warranty iii...

Результаты поиска

Содержание Dimension ES-3024

Отзывы:

ZyXEL Communications Dimension ES-3024, Руководство пользователя, Страница: 128 / 212

Результаты поиска

Содержание Dimension ES-3024

Отзывы: