ZyXEL Communications ES-2108 Скачать руководство пользователя страница 131 | Manualshive

Страница: 131 / 284

ZyXEL Communications ES-2108 Скачать руководство пользователя страница 131

ES-2108 Series User’s Guide

131

C

H A P T E R

1 7

Port Security

This chapter shows you how to set up port security.

17.1 Port Security Overview

Port security allows only packets with dynamically learned MAC addresses and/or configured
static MAC addresses to pass through a port on the Switch. See

Chapter 9 on page 97

for

information on configuring static MAC address forwarding.

For maximum port security, enable this feature, disable MAC address learning and configure
static MAC address(es) for a port.

Functionally the Switch allows for three possible outcomes with port security. You can
configure the ports to:

• Forward all packets and learn all MAC addresses.

• Drop all packets from unknown MAC addresses and do not learn MAC addresses.

• Drop all packets from unknown MAC addresses and learn a limited number of MAC

addresses.

"

The ES-2108 Series supports five possible configurations for port security.
See

Section 17.3 on page 133

for supported configurations and an example.

17.2 Port Security Setup

Click

Advanced Application

>

Port Security

in the navigation panel to display the screen as

shown.

«
...
129
130
131
132
133
...
»

Содержание ES-2108

Страница 1: ...www zyxel com ES 2108 Series Ethernet Switch User s Guide Version 3 8 10 2007 Edition 2 DEFAULT LOGIN IP Address http 192 168 1 1 User Name admin Password 1234...

Страница 2: ......

Страница 3: ...supplementary information Ethernet Switch CLI Reference Guide The CLI Reference Guide explains how to use the Command Line Interface CLI to configure the Switch It is recommended you use the web conf...

Страница 4: ...A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENT...

Страница 5: ...Guide 5 Icons Used in Figures Figures in this User s Guide may use the following generic icons The Switch icon is not an exact representation of your device The Switch Computer Notebook computer Serv...

Страница 6: ...will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect it to the r...

Страница 7: ...Safety Warnings ES 2108 Series User s Guide 7 This product is recyclable Dispose of it properly...

Страница 8: ...Safety Warnings ES 2108 Series User s Guide 8...

Страница 9: ...cs 65 Basic Setting 71 Advanced Setup 85 VLAN 87 Static MAC Forwarding 97 Filtering 99 Spanning Tree Protocol 101 Bandwidth Control 115 Broadcast Storm Control 117 Mirroring 119 Link Aggregation 121 P...

Страница 10: ...Contents Overview ES 2108 Series User s Guide 10 Syslog 223 Cluster Management 227 MAC Table 233 ARP Table 235 Configure Clone 237 Troubleshooting and Appendices 239 Troubleshooting 241...

Страница 11: ...32 1 1 3 High Performance Switched Example 33 1 1 4 IEEE 802 1Q VLAN Application Examples 33 1 2 Ways to Manage the Switch 34 1 3 Good Habits for Managing the Switch 35 Chapter 2 Hardware Installatio...

Страница 12: ...ssword 56 4 4 Saving Your Configuration 57 4 5 Switch Lockout 57 4 6 Resetting the Switch 58 4 6 1 Reload the Factory default Configuration File 58 4 7 Logging Out of the Web Configurator 59 4 8 Help...

Страница 13: ...AN Type 89 8 5 Static VLAN 89 8 5 1 Static VLAN Status 90 8 5 2 Static VLAN Details 90 8 5 3 Configure a Static VLAN 91 8 5 4 Configure VLAN Port Settings 92 8 6 Port Based VLAN Setup 94 8 6 1 Configu...

Страница 14: ...Mirroring Setup 119 Chapter 15 Link Aggregation 121 15 1 Link Aggregation Overview 121 15 2 Dynamic Link Aggregation 121 15 2 1 Link Aggregation ID 122 15 3 Link Aggregation Control Protocol Status 1...

Страница 15: ...6 2 MVR Modes 144 19 6 3 How MVR Works 144 19 7 General MVR Configuration 145 19 8 MVR Group Configuration 146 19 8 1 MVR Configuration Example 148 Chapter 20 Authentication Accounting 151 20 1 Authen...

Страница 16: ...onfiguring Static Routing 181 Chapter 24 Differentiated Services 185 24 1 DiffServ Overview 185 24 1 1 DSCP and Per Hop Behavior 185 24 1 2 DiffServ Network Example 185 24 2 Activating DiffServ 186 24...

Страница 17: ...27 1 Access Control Overview 203 27 2 The Access Control Main Screen 203 27 3 About SNMP 204 27 3 1 SNMP v3 and Security 205 27 3 2 Supported MIBs 205 27 3 3 SNMP Traps 205 27 3 4 Configuring SNMP 20...

Страница 18: ...r 31 MAC Table 233 31 1 MAC Table Overview 233 31 2 Viewing the MAC Table 234 Chapter 32 ARP Table 235 32 1 ARP Table Overview 235 32 1 1 How ARP Works 235 32 2 Viewing the ARP Table 235 Chapter 33 Co...

Страница 19: ...Table of Contents ES 2108 Series User s Guide 19 Appendix C Legal Information 267 Appendix D Customer Support 271 Index 277...

Страница 20: ...Table of Contents ES 2108 Series User s Guide 20...

Страница 21: ...ample 45 Figure 18 Rear Panel AC Model 46 Figure 19 Rear Panel DC Model 46 Figure 20 Web Configurator Login 52 Figure 21 Web Configurator Home Screen Status 52 Figure 22 Management Access Control Logi...

Страница 22: ...113 Figure 59 Advanced Application Bandwidth Control 115 Figure 60 Advanced Application Broadcast Storm Control 117 Figure 61 Advanced Application Mirroring 119 Figure 62 Advanced Application Link Agg...

Страница 23: ...73 Figure 98 Loop Guard vs STP 175 Figure 99 Switch in Loop State 176 Figure 100 Loop Guard Probe Packet 176 Figure 101 Loop Guard Network Loop 176 Figure 102 Advanced Application Loop Guard 177 Figur...

Страница 24: ...agement Cluster Member Web Configurator Screen 229 Figure 142 Example Uploading Firmware to a Cluster Member Switch 230 Figure 143 Management Cluster Management Configuration 231 Figure 144 MAC Table...

Страница 25: ...ation Static MAC Forwarding 98 Table 21 Advanced Application FIltering 99 Table 22 STP Path Costs 102 Table 23 STP Port States 103 Table 24 Advanced Application Spanning Tree Protocol Configuration 10...

Страница 26: ...DIUS Attributes Exec Events via Console 162 Table 57 Advanced Application IP Source Guard 167 Table 58 Advanced Application IP Source Guard Static Binding 168 Table 59 Advanced Application IP Source G...

Страница 27: ...e 230 Table 96 Management Cluster Management Configuration 231 Table 97 Management MAC Table 234 Table 98 Management ARP Table 236 Table 99 Management Configure Clone 238 Table 100 Troubleshooting the...

Страница 28: ...List of Tables ES 2108 Series User s Guide 28...

Страница 29: ...29 PART I Introduction Getting to Know Your Switch 31 Hardware Installation and Connection 37 Hardware Overview 41...

Страница 30: ...30...

Страница 31: ...and configuring the Switch is easy In addition the Switch can also be managed via Telnet SSH Secure SHell any terminal emulator program on the console port or third party SNMP management 1 1 1 Backbo...

Страница 32: ...re 1 Backbone Application 1 1 2 Bridging Example In this example application the Switch connects different company departments RD and Sales to the corporate backbone It can alleviate bandwidth content...

Страница 33: ...reely communicate with each other Figure 3 High Performance Switched Application 1 1 4 IEEE 802 1Q VLAN Application Examples This section shows a workgroup and a shared server example using 802 1Q tag...

Страница 34: ...r Using VLAN Example 1 2 Ways to Manage the Switch Use any of the following methods to manage the Switch Web Configurator This is recommended for everyday management of the Switch using a supported we...

Страница 35: ...es of characters such as numbers and letters Write down the password and put it in a safe place Back up the configuration and make sure you know how to restore it Restoring an earlier working configur...

Страница 36: ...Chapter 1 Getting to Know Your Switch ES 2108 Series User s Guide 36...

Страница 37: ...the Switch to allow air circulation and the attachment of cables and the power cord 4 Remove the adhesive backing from the rubber feet 5 Attach the rubber feet to each corner on the bottom of the Swi...

Страница 38: ...the rack will safely support the combined weight of all the equipment it contains Make sure the position of the Switch does not make the rack unstable or top heavy Take all necessary precautions to a...

Страница 39: ...Phillips screwdriver install the M5 flat head screws through the mounting bracket holes into the rack 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack 2 3 Wal...

Страница 40: ...ging pipes or cables located inside the wall when drilling holes for the screws 3 Do not screw the screws all the way into the wall Leave a small gap of about 0 5 cm between the heads of the screws an...

Страница 41: ...itch and shows you how to make the hardware connections 3 1 Front Panel Connection The figure below shows the front panel of the Switch Figure 10 Front Panel ES 2108 Figure 11 Front Panel ES 2108 F Co...

Страница 42: ...J 45 Ethernet Ports Connect these ports to a computer a hub an Ethernet switch or router ES 2108 F Fast Ethernet SFP Slot Use a 100 Base FX 100 Base LX or 100 Base BX Small Form Factor Pluggable SFP t...

Страница 43: ...it port are connected at the same time the Gigabit port will be disabled The speed of the Gigabit Ethernet mini GBIC slot can be 100Mbps or 1000Mbps and the duplex mode can be half duplex at 100 Mbps...

Страница 44: ...GBIC Slot This is a slot for mini GBIC Gigabit Interface Converter transceivers A transceiver is a single unit that houses a transmitter and a receiver The Switch does not come with transceivers You m...

Страница 45: ...sceiver Removal Use the following steps to remove a mini GBIC transceiver SFP module 1 Open the transceiver s latch latch styles vary Figure 16 Opening the Transceiver s Latch Example 2 Pull the trans...

Страница 46: ...18 Rear Panel AC Model Figure 19 Rear Panel DC Model 3 2 1 Power Connections Make sure you are using the correct power source as shown on the Switch s panel To connect the power to the AC powered vers...

Страница 47: ...Switch is supplying power to the connected device that supports PoE Off No device is connected to this port or the Switch is not supplying power via the Ethernet cable Amber Blinking The system is tra...

Страница 48: ...Hardware Overview ES 2108 Series User s Guide 48 ACT 100 FX Green Blinking The port is sending or receiving data Off The port is not sending or receiving data Table 3 LEDs continued LED COLOR STATUS D...

Страница 49: ...49 PART II Basic Configuration The Web Configurator 51 Initial Setup Example 61 System Status and Port Statistics 65 Basic Setting 71...

Страница 50: ...50...

Страница 51: ...ater versions The recommended screen resolution is 1024 by 768 pixels In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled...

Страница 52: ...re 21 Web Configurator Home Screen Status A Click the menu items to open submenu links and then click on a submenu link to open the screen in the main window B C D E These are quick links which allow...

Страница 53: ...gurator E Click this link to display web help pages The help pages provide descriptions for all of the configuration screens In the navigation panel click a main link to reveal a list of submenu links...

Страница 54: ...tting Status LACP Port Authentication 802 1x Port Security Queuing Method Multicast Multicast Status Multicast Setting IGMP Snooping VLAN IGMP Filtering Profile MVR Group Configuration Auth and Acct R...

Страница 55: ...s you to screens where you can cap the maximum bandwidth allowed from specified source s to specified destination s Broadcast Storm Control This link takes you to a screen to set up broadcast filters...

Страница 56: ...nfiguration file maintenance as well as reboot the system Access Control This link takes you to screens where you can change the system login password and configure SNMP and remote management Diagnost...

Страница 57: ...igurator to save your configuration to nonvolatile memory Nonvolatile memory refers to the Switch s storage that remains even if the Switch s power is turned off Use the Save link when you are done wi...

Страница 58: ...l previous configurations and the speed of the console port will be reset to the default of 9600bps with 8 data bit no parity one stop bit and flow control set to none The password will also be reset...

Страница 59: ...for security reasons and so as you don t lock out other administrators Figure 24 Web Configurator Logout Screen 4 8 Help The web configurator s online help has descriptions of individual screens and...

Страница 60: ...Chapter 4 The Web Configurator ES 2108 Series User s Guide 60...

Страница 61: ...s for the initial setup Create a VLAN Set port VLAN ID Configure the IP management address 5 1 1 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the port s belongs You can do...

Страница 62: ...is screen and the VID field in the IP Setup screen refer to the same VLAN ID 3 Since the VLAN2 network is connected to port 5 on the Switch select Fixed to configure port 5 to be a permanent member of...

Страница 63: ...2 Figure 26 Initial Setup Network Example Port VID 1 Click Advanced Applications VLAN in the navigation panel Then click the VLAN Port Setting link 2 Enter 2 in the PVID field for port 5 and click App...

Страница 64: ...tion 4 2 on page 51 for more information 3 Click Basic Setting IP Setup in the navigation panel 4 Configure the related fields in the IP Setup screen For the VLAN2 network enter 192 168 2 1 as the IP...

Страница 65: ...screen of the web configurator displays a port statistical summary table with links to each port showing statistical details To view the port statistics click Status in all web configurator screens t...

Страница 66: ...he STP state of the port see Section 11 1 3 on page 103 for more information If STP is disabled this field displays FORWARDING if the link is up otherwise it displays STOP PD PWR model Only This field...

Страница 67: ...and Port Statistics ES 2108 Series User s Guide 67 The ES 2108PWR screen is different from the other models covered in this UG The screen from ES 2108 G model is shown for comparison Figure 30 Status...

Страница 68: ...et connection is down and the speed duplex mode Status If STP Spanning Tree Protocol is enabled this field displays the STP state of the port see Section 11 1 3 on page 103 for more information If STP...

Страница 69: ...transmitted TX Packets This field shows the number of good packets unicast multicast and broadcast transmitted Multicast This field shows the number of good multicast packets transmitted Broadcast Th...

Страница 70: ...between 65 and 127 octets in length 128 255 This field shows the number of packets including bad packets received that were between 128 and 255 octets in length 256 511 This field shows the number of...

Страница 71: ...time and date from an external server when you turn on your Switch The real time is then displayed in the Switch logs The Switch Setup screen allows you to set up and configure global Switch features...

Страница 72: ...e date created Ethernet Address This field refers to the Ethernet MAC Media Access Control address of the Switch PoE Status This section is only available on the PWR model Total Power W This is the to...

Страница 73: ...cool operating environment in order for the device to stay within the temperature threshold Each fan has a sensor that is capable of detecting and reporting if the fan speed falls below the threshold...

Страница 74: ...n you select the Daytime RFC 867 format the Switch displays the day month year and time with no time zone adjustment When you use this format it is recommended that you use a Daytime timeserver within...

Страница 75: ...Sunday March and 2 00 Daylight Saving Time starts in the European Union on the last Sunday of March All of the time zones in the European Union start using Daylight Saving Time at the same moment 1 A...

Страница 76: ...er and more manageable logical broadcast domain In traditional switched environments all broadcast packets go to each and every individual port With VLAN all broadcasts are confined to a specific broa...

Страница 77: ...ve All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds Each port has a single Leave All Period timer Leave All Timer must be larger than Leave Timer the default is 10000...

Страница 78: ...ion of an IP address The factory default subnet mask is 255 255 255 0 You can configure up to 64 IP addresses which are used to access and manage the Switch from the ports belonging to the pre defined...

Страница 79: ...igure the fields to set the default management IP address DHCP Client Select this option if you have a DHCP server that can assign the Switch an IP address and subnet mask a default gateway IP address...

Страница 80: ...y when you are done configuring Cancel Click Cancel to reset the fields to your previous configuration Management IP Addresses Configure the fields to set additional management IP address IP Address E...

Страница 81: ...eer Ethernet port does not support auto negotiation or turns off this feature the Switch determines the connection speed by detecting the signal on the cable and using half duplex mode When the Switch...

Страница 82: ...ll the ports as soon as you make them Port This is the port index number Active Select this check box to enable a port The factory default for all ports is enabled A port must be enabled for data tran...

Страница 83: ...acket discards and frame losses Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port The Switch uses IEEE802 3x flow control in full duplex mode and ba...

Страница 84: ...Chapter 7 Basic Setting ES 2108 Series User s Guide 84...

Страница 85: ...ltering 99 Spanning Tree Protocol 101 Bandwidth Control 115 Broadcast Storm Control 117 Mirroring 119 Link Aggregation 121 Port Authentication 127 Port Security 131 Queuing Method 135 Multicast 137 Au...

Страница 86: ...86...

Страница 87: ...ived at an Ethernet port has a CFI set to 1 then that frame should not be forwarded as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096...

Страница 88: ...ble this function to permit VLANs groups beyond the local Switch Please refer to the following table for common GARP terminology Table 14 IEEE 802 1q Terminology VLAN PARAMETER TERM DESCRIPTION VLAN T...

Страница 89: ...ever with VLAN Trunking enabled on a port s in each intermediary switch you only need to create VLAN groups in the end devices A and B C D and E automatically allow frames with VLAN group tags 1 and 2...

Страница 90: ...Figure 42 Advanced Application VLAN VLAN Detail Table 15 Advanced Application VLAN VLAN Status LABEL DESCRIPTION The Number of VLAN This is the number of VLANs configured on the Switch Index This is...

Страница 91: ...AN VLAN Details LABEL DESCRIPTION VLAN Status Click this to go to the VLAN Status screen VID This is the VLAN identification number that was configured in the Static VLAN screen Port Number This colum...

Страница 92: ...e copied to all the ports as soon as you make them Control Select Normal for the port to dynamically join this VLAN group using GVRP This is the default selection Select Fixed for the port to be a per...

Страница 93: ...gress filtering the Switch Port This field displays the port number Settings in this row apply to all ports Use this row only if you want to make some settings the same for all ports Use this row firs...

Страница 94: ...efault VLAN ID of 1 You cannot change it In screens such as IP Setup and Filtering that require a VID you must enter 1 as the VID The port based VLAN setup screen is shown next The CPU management port...

Страница 95: ...Chapter 8 VLAN ES 2108 Series User s Guide 95 Figure 45 Advanced Application VLAN Port Based VLAN Setup All Connected Figure 46 Advanced Application VLAN Port Based VLAN Setup Port Isolation...

Страница 96: ...hat is a port through which a data packet enters If you wish to allow two subscriber ports to talk to each other you must define the ingress port for both ports The numbers in the top row denote the i...

Страница 97: ...ort to access the Switch See Chapter 17 on page 131 for more information on port security 9 2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the...

Страница 98: ...witch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory when you are...

Страница 99: ...g LABEL DESCRIPTION Active Make sure to select this check box to activate your rule You may temporarily deactivate a rule without deleting it by deselecting this check box Name Type a descriptive name...

Страница 100: ...number of the rule Click an index number to change the settings Active This field displays Yes when the rule is activated and No when is it deactivated Name This field displays the descriptive name fo...

Страница 101: ...liant switches in your network to ensure that only one path exists between any two stations on the network The Switch uses IEEE 802 1w RSTP Rapid Spanning Tree Protocol that allows faster convergence...

Страница 102: ...for connected LANs and disables all other ports that participate in STP Network packets are therefore only forwarded between enabled ports eliminating any possible network loops STP aware switches exc...

Страница 103: ...iple Spanning Tree Instance MSTI MSTI allows multiple VLANs to use the same spanning tree Load balancing is possible as traffic from different VLANs can use distinct paths in a region 11 1 4 1 MSTP Ne...

Страница 104: ...ork devices that appears as a single device to the rest of the network Each MSTP enabled device can only belong to one MST region When BPDUs enter an MST region external path cost of paths outside thi...

Страница 105: ...MST regions Regions 1 and 2 have 2 spanning tree instances Figure 51 MSTIs in Different Regions 11 1 4 4 Common and Internal Spanning Tree CIST A CIST represents the connectivity of the entire networ...

Страница 106: ...ing Tree Configuration screen to activate one of the STP modes on the Switch Click Configuration in the Advanced Application Spanning Tree Protocol Figure 54 Advanced Application Spanning Tree Protoco...

Страница 107: ...09 Active Select this check box to activate an STP tree Clear this check box to disable an STP tree Bridge Priority Bridge priority is used in determining the root switch root port and designated port...

Страница 108: ...esult The allowed range is 4 to 30 seconds As a general rule Note 2 Forward Delay 1 Max Age 2 Hello Time 1 Port This field displays the port number Settings in this row apply to all ports Use this row...

Страница 109: ...MAC address This ID is the same for Root and Our Bridge if the Switch is the root switch Hello Time second This is the time interval in seconds at which the root switch transmits a configuration messa...

Страница 110: ...Chapter 11 Spanning Tree Protocol ES 2108 Series User s Guide 110 Figure 57 Advanced Application Spanning Tree Protocol MSTP...

Страница 111: ...e it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to a blocking state otherwise temporary data loops might result The allow...

Страница 112: ...s check box to add this port to the MST instance Priority Configure the priority for each port here Priority decides which port should be disabled when more than one port forms a loop in the Switch Po...

Страница 113: ...gs on the Switch CST This section describes the Common Spanning Tree settings Bridge Root refers to the base of the spanning tree the root bridge Our Bridge is this Switch This Switch may also be the...

Страница 114: ...s This is the number of times the spanning tree has been reconfigured Time Since Last Change This is the time since the spanning tree was last reconfigured Instance These fields display the MSTI to VL...

Страница 115: ...or incoming and or out going traffic flows on a port Click Advanced Application Bandwidth Control in the navigation panel to bring up the screen as shown next Figure 59 Advanced Application Bandwidth...

Страница 116: ...the nearest multiple of 8000 for a number between 104000 and 1000000 Active Make sure to select this check box to activate egress limits on a port Egress Rate Specify the maximum bandwidth allowed in...

Страница 117: ...he buffer is full are discarded Enable this feature to reduce broadcast traffic coming into your network Click Advanced Application Broadcast Storm Control in the navigation panel to display the scree...

Страница 118: ...automatically rounds the number down to the nearest multiple of 64 If you enter a number between 1729 and 1999 the rate is fixed at 1792 If you enter a number between 2000 and 103999 the Switch round...

Страница 119: ...display the Mirroring screen Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port Figure 61 Advanced Application Mirroring The following table descri...

Страница 120: ...ect Source MAC to copy outgoing traffic from a specified MAC address on the mirrored port s Enter the source MAC address in the fields provided Port This field displays the port number Settings in thi...

Страница 121: ...ion The Switch adheres to the IEEE 802 3ad standard for static and dynamic LACP port trunking The IEEE 802 3ad standard describes the Link Aggregation Control Protocol LACP for dynamically creating an...

Страница 122: ...00 00 00 0000 00 0000 1 Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group not the individual port Table 34 Advanced Application Link Aggregation Status LABEL DESCRIPTI...

Страница 123: ...nk Aggregation Setting This is the only screen you need to configure to enable static link aggregation Group ID The field identifies the link aggregation group that is one logical link containing mult...

Страница 124: ...Do not configure this screen unless you want to enable dynamic link aggregation Active Select this checkbox to enable Link Aggregation Control Protocol LACP System Priority LACP system priority is a...

Страница 125: ...t the common settings and then make adjustments on a port by port basis Note Changes in this row are copied to all the ports as soon as you make them LACP Timeout Timeout is the time interval between...

Страница 126: ...ter 15 Link Aggregation ES 2108 Series User s Guide 126 Figure 66 Trunking Example Configuration Screen Your trunk group 1 T1 configuration is now complete you do not need to go to any additional scre...

Страница 127: ...idate users See Section 20 2 1 on page 152 for more information on configuring your RADIUS server settings 16 1 1 IEEE 802 1x Authentication The following figure illustrates how a client connecting to...

Страница 128: ...DIUS server settings Click Advanced Application Port Authentication in the navigation panel to display the screen as shown Figure 68 Advanced Application Port Authentication 16 2 1 Activate IEEE 802 1...

Страница 129: ...n a port by port basis Note Changes in this row are copied to all the ports as soon as you make them Active Select this check box to permit 802 1x authentication on this port You must first allow 802...

Страница 130: ...Chapter 16 Port Authentication ES 2108 Series User s Guide 130...

Страница 131: ...ning and configure static MAC address es for a port Functionally the Switch allows for three possible outcomes with port security You can configure the ports to Forward all packets and learn all MAC a...

Страница 132: ...ess es is in the MAC address table on this port Packets with no matching MAC address es are dropped Clear this check box to disable the port security feature The Switch forwards all packets on this po...

Страница 133: ...esses Port 4 Drop all packets from unknown MAC addresses and do not learn MAC addresses Port 5 Drop all packets from unknown MAC addresses but forward packets from up to 100 learned MAC addresses Figu...

Страница 134: ...EARNING LIMIT NO OF LEARNED MAC ADDRESSES 1 X 0 disables limits Forward all packets learn all MAC addresses 2 X X 0 disables limits Forward all packets learn all MAC addresses 3 X 0 disables limits Dr...

Страница 135: ...priority queue Q3 is transmitted first When that queue empties traffic on the next highest priority queue Q2 is transmitted until Q2 empties and then traffic is transmitted on Q1 and so on If higher p...

Страница 136: ...Scheduling Strict Priority Queuing SPQ services queues based on priority only When the highest priority queue empties traffic on the next highest priority queue begins Q3 has the highest priority and...

Страница 137: ...s IP addresses in the Class D range 224 0 0 0 to 239 255 255 255 are used for IP multicasting Certain IP multicast numbers are reserved by IANA for special purposes see the IANA web site for more info...

Страница 138: ...at IGMP snooping should be performed on This is referred to as fixed mode In fixed mode the Switch does not learn multicast group membership of any VLANs other than those explicitly added as an IGMP s...

Страница 139: ...711 450 in seconds that elapses before the Switch removes an IGMP group membership entry if it does not receive report messages from the port Leave Timeout Enter an IGMP leave timeout value from 1 to...

Страница 140: ...port is allowed to join Once a port is registered in the specified number of multicast groups any new IGMP join report frame s is dropped on this port IGMP Filtering Profile Select the name of the IG...

Страница 141: ...e 16 VLANs Note You must also enable IGMP snooping in the Multicast Setting screen first Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these changes if it is...

Страница 142: ...creen Cancel Click Cancel to reset the fields to your previous configuration Clear Click this to clear the fields Index This is the number of the IGMP snooping VLAN entry in the table Name This field...

Страница 143: ...igure 77 MVR Network Example End Address Type the ending multicast IP address for a range of IP addresses that you want to belong to the IGMP filter profile If you want to add a single multicast IP ad...

Страница 144: ...icast television example where a subscriber device such as a computer in VLAN 1 receives multicast traffic from the streaming media server S via the Switch Multiple subscriber devices can connect thro...

Страница 145: ...on the Switch Your Switch automatically creates a static VLAN with the same VID when you create a multicast VLAN in this screen Figure 79 Advanced Application Multicast Multicast Setting MVR The foll...

Страница 146: ...e multicast VLAN Receiver Port Select this option to set this port as a receiver port that only receives multicast traffic None Select this option to set the port not to participate in MVR No MVR mult...

Страница 147: ...roup in dotted decimal notation Refer to Section 19 1 1 on page 137 for more information on IP multicast addresses End Address Enter the ending IP multicast address of the multicast group in dotted de...

Страница 148: ...ers A B and C in VLAN 1 are able to receive the traffic Figure 81 MVR Configuration Example To configure the MVR settings on the Switch create a multicast group in the MVR screen and set the receiver...

Страница 149: ...Switch to forward the multicast group traffic to the subscribers configure multicast group settings in the Group Configuration screen The following figure shows an example where two multicast groups...

Страница 150: ...Chapter 19 Multicast ES 2108 Series User s Guide 150 Figure 84 MVR Group Configuration Example...

Страница 151: ...Switch itself or it can use an external server to authorize a large number of users Accounting is the process of recording what a user is doing The Switch can use an external server to track when use...

Страница 152: ...TACACS or both and then set up the authentication priority and accounting settings Click Advanced Application Auth and Acct in the navigation panel to display the screen as shown Figure 86 Advanced A...

Страница 153: ...that the Switch waits for an authentication request response from the RADIUS server If you are using index priority for your authentication and you are using two RADIUS servers then the timeout value...

Страница 154: ...accounting server Index This is a read only number representing a RADIUS accounting server entry IP Address Enter the IP address of an external RADIUS accounting server in dotted decimal notation UDP...

Страница 155: ...alternate between the TACACS servers that it sends authentication requests to Timeout Specify the amount of time in seconds that the Switch waits for an authentication request response from the TACAC...

Страница 156: ...gs Timeout Specify the amount of time in seconds that the Switch waits for an accounting request response from the TACACS server Index This is a read only number representing a TACACS accounting serve...

Страница 157: ...or local authentication The tacacs and radius are external servers Before you specify the priority make sure you have set up the corresponding database correctly first You can specify up to three meth...

Страница 158: ...up system shuts down system accounting is enabled system accounting is disabled Exec Configure the Switch to send information when an administrator logs in and logs out via the console port telnet or...

Страница 159: ...by the IANA Internet Assigned Numbers Authority ZyXEL s vendor ID is 890 Vendor Type A vendor specified attribute identifying the setting you want to modify Vendor data A value you want to assign to t...

Страница 160: ...authentication Refer to RFC 2866 and RFC 2869 for RADIUS attributes used for accounting This section lists the attributes used by authentication and accounting functions on the Switch In cases where t...

Страница 161: ...r NAS IP Address 20 3 1 3 Attributes Used by the IEEE 802 1x Authentication User Name NAS Identifier NAS IP Address NAS Port NAS Port Type This value is set to Ethernet 15 on the Switch Calling Statio...

Страница 162: ...UPDATE STOP User Name a a a NAS Identifier a a a NAS IP Address a a a Service Type a a a Acct Status Type a a a Acct Delay Time a a a Acct Session Id a a a Acct Authentic a a a Acct Session Time a a...

Страница 163: ...e a a a Acct Session Id a a a Acct Authentic a a a Acct Input Octets a a Acct Output Octets a a Acct Session Time a a Acct Input Packets a a Acct Output Packets a a Acct Terminate Cause a Acct Input G...

Страница 164: ...Chapter 20 Authentication Accounting ES 2108 Series User s Guide 164...

Страница 165: ...umber in the binding table If there is a binding the Switch forwards the packet If there is not a binding the Switch discards the packet The Switch builds from information provided manually by adminis...

Страница 166: ...n volatile memory They do not use the same space in memory that regular MAC address filters use They appear only in the ARP Inspection screens and commands not in the MAC Address Filter screens and co...

Страница 167: ...s an existing static binding the new static binding replaces the original one To open this screen click Advanced Application IP Source Guard Static Binding Table 57 Advanced Application IP Source Guar...

Страница 168: ...sting one Cancel Click this to reset the values above based on the last selected static binding or if not applicable to clear the fields above Clear Click this to clear the fields above Index This fie...

Страница 169: ...spection Status LABEL DESCRIPTION Total number of filters This field displays the current number of MAC address filters that were created because the Switch identified unauthorized ARP packets Index T...

Страница 170: ...splays a sequential number for each log message Port This field displays the source port of the ARP packet VID This field displays the source VLAN ID of the ARP packet Sender MAC This field displays t...

Страница 171: ...in the Switch after the Switch identifies an unauthorized ARP packet The Switch automatically deletes the MAC address filter afterwards Enter 0 if you want the MAC address filter to be permanent Log...

Страница 172: ...rval is illustrated in the following examples 4 invalid ARP packets per second Syslog rate is 5 Log interval is 1 the Switch sends 4 syslog messages every second 6 invalid ARP packets per second Syslo...

Страница 173: ...rds ARP packets on untrusted ports if the sender s information in the ARP packet does not match any of the current bindings Apply Click Apply to save your changes to the Switch s run time memory The S...

Страница 174: ...when it forwards an ARP packet from the VLAN All The Switch generates log messages every time it receives an ARP packet from the VLAN Apply Click Apply to save your changes to the Switch s run time me...

Страница 175: ...problems on the edge of your network This can occur when a port is connected to a Switch that is in a loop state Loop state occurs as a result of human error It happens when two ports on a switch are...

Страница 176: ...d enabled port N on switch A sending a probe packet P to switch B Since switch B is in loop state the probe packet P returns to port N on A The Switch then shuts down port N to ensure that the rest of...

Страница 177: ...o display the screen as shown The loop guard feature can not be enabled on the ports that have Spanning Tree Protocol RSTP or MSTP enabled Figure 102 Advanced Application Loop Guard The following tabl...

Страница 178: ...the Switch it is connected to is in loop state If the Switch that this port is connected is in loop state the Switch will shut down this port Clear this check box to disable the loop guard feature App...

Страница 179: ...179 PART IV IP Application Static Route 181 Differentiated Services 185 DHCP 189...

Страница 180: ...180...

Страница 181: ...send data to a server or device that is not reachable through the default gateway for example when sending SNMP traps or using ping to test IP connectivity This figure shows a Telnet session coming i...

Страница 182: ...he same segment as your Switch Metric The metric represents the cost of transmission for routing purposes IP routing uses hop count as the measurement of cost with a minimum of 1 for directly connecte...

Страница 183: ...Address This field displays the IP address of the gateway The gateway is an immediate neighbor of your Switch that will forward the packet to the destination Metric This field displays the cost of tra...

Страница 184: ...Chapter 23 Static Route ES 2108 Series User s Guide 184...

Страница 185: ...tions do not have to request a particular service or give advanced notice of where the traffic is going 24 1 1 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to repl...

Страница 186: ...values and the associated policies 24 2 Activating DiffServ Activate DiffServ to allow the Switch to enable DiffServ on the selected port s Click IP Application DiffServ in the navigation panel to dis...

Страница 187: ...ports Use this row only if you want to make some settings the same for all ports Use this row first to set the common settings and then make adjustments on a port by port basis Note Changes in this r...

Страница 188: ...ber To set the IEEE802 1p priority mapping select the priority level from the drop down list box Apply Click Apply to save your changes to the Switch s run time memory The Switch loses these changes i...

Страница 189: ...etwork then you can configure the Switch as a DHCP relay agent When the Switch receives a request from a computer on your network it contacts the DHCP server for the necessary IP information and then...

Страница 190: ...hat it relays to a DHCP server by adding Relay Agent Information This helps provide authentication about the source of the requests The DHCP server can then provide an IP address based on this informa...

Страница 191: ...this check box to enable DHCP relay Remote DHCP Server 1 3 Enter the IP address of a DHCP server in dotted decimal notation Relay Agent Information Select the Option 82 check box to have the Switch ad...

Страница 192: ...Make sure you select the Option 82 check box to set the Switch to send additional information such as the VLAN ID together with the DHCP requests to the DHCP server This allows the DHCP server to assi...

Страница 193: ...tch add information slot number port number and VLAN ID to client DHCP requests that it relays to a DHCP server Information This read only field displays the system name you configure in the General S...

Страница 194: ...are sent to the other DHCP server with an IP address of 172 23 10 100 Figure 114 DHCP Relay for Two VLANs For the example network configure the VLAN Setting screen as shown Figure 115 DHCP Relay for...

Страница 195: ...195 PART V Management Maintenance 197 Access Control 203 Diagnostic 221 Syslog 223 Cluster Management 227 233 ARP Table 235 Configure Clone 237...

Страница 196: ...196...

Страница 197: ...tion file Configuration 1 the Switch is currently using Firmware Upgrade Access this screen to upload new firmware Restore Configuration Access this screen to upload a previously saved configuration f...

Страница 198: ...Save Configuration Save Configuration allows you to save your settings to the Switch s non volatile memory Whenever you make configuration changes to the Switch and hit Apply or Add the Switch saves...

Страница 199: ...rect model firmware as uploading the wrong model firmware may damage your device From the Maintenance screen display the Firmware Upgrade screen as shown next Figure 118 Management Maintenance Firmwar...

Страница 200: ...ots of your device from which you may restore at a later date Back up your current Switch configuration to a computer using the Backup Configuration screen Figure 120 Management Maintenance Backup Con...

Страница 201: ...re as uploading the wrong model firmware may damage your device 26 8 2 FTP Command Line Procedure 1 Launch the FTP client on your computer 2 Enter open followed by a space and the IP address of your S...

Страница 202: ...ess If it does not match the Switch will disallow the session Table 75 General Commands for GUI based FTP Clients COMMAND DESCRIPTION Host Address Enter the address of the host server Login Type Anony...

Страница 203: ...access control session and Telnet access control session cannot coexist when multi login is disabled See the CLI Reference Guide for information on disabling multi login 27 2 The Access Control Main...

Страница 204: ...nt functions It executes applications that control and monitor managed devices The managed devices contain object variables managed objects that define each piece of information to be collected about...

Страница 205: ...P RFC 2013 SNMPv2 MIB for UDP 27 3 3 SNMP Traps The Switch sends traps to an SNMP manager when an event occurs This table lists the beginnings of the private MIB trap OIDs for the various ES 2108 mode...

Страница 206: ...trap is sent when the Switch resets by an administrator through a management interface RebootEvent 1 3 6 1 4 1 890 1 5 1 1 2 This trap is sent when the Switch reboots by an administrator through a ma...

Страница 207: ...when authentication fails due to incorrect user name and or password RADIUSNotReachableEventOn 1 3 6 1 4 1 890 1 5 8 xx 31 2 1 This trap is sent when there is no response message from the RADIUS serve...

Страница 208: ...1 890 1 5 8 xx 43 2 1 This trap is sent when the MRSTP root switch changes MSTPNewRoot 1 3 6 1 4 1 890 1 5 8 xx 107 7 0 1 This trap is sent when the MSTP root switch changes STPTopologyChange 1 3 6 1...

Страница 209: ...g which is the password for the incoming Get and GetNext requests from the management station The Get Community string is only used by SNMP managers using SNMP version 2c or lower Set Community Enter...

Страница 210: ...This is the lowest security level auth to implement an authentication algorithm for SNMP messages sent by this user priv to implement authentication and encryption for SNMP messages sent by this user...

Страница 211: ...he screen to select which traps the Switch sends to that SNMP manager Type Select the categories of SNMP traps that the Switch is to send to the SNMP manager Options Select the individual SNMP traps t...

Страница 212: ...Control Logins LABEL DESCRIPTION Administrator This is the default administrator account with the admin user name You cannot change the default administrator user name Only the administrator has read...

Страница 213: ...H Communication Example 27 6 How SSH works The following table summarizes how a secure connection is established between two remote hosts Apply Click Apply to save your changes to the Switch s run tim...

Страница 214: ...ree on the type of encryption method to use 3 Authentication and Data Transmission After the identification is verified and data encryption activated a secure tunnel is established between the client...

Страница 215: ...t the certificate the certificate is used in building the HTTPS connection Please refer to the following figure C ssh2 admin 192 168 1 1 WARNING HOST IDENTIFICATION HAS CHANGED IT IS POSSIBLE THAT SOM...

Страница 216: ...you haven t changed the default HTTPS port on the Switch then in your browser enter https Switch IP Address as the web site address where Switch IP Address is the IP address or domain name of the Swi...

Страница 217: ...fied by an Unknown Authority screen pops up asking if you trust the server certificate Click Examine Certificate if you want to verify that the certificate is from the Switch If Accept this certificat...

Страница 218: ...bottom right of the browser status bar denotes a secure connection Figure 133 Example Lock Denoting a Secure Connection 27 10 Service Port Access Control Service Access Control allows you to decide w...

Страница 219: ...to allow to access the Switch Service Port For Telnet SSH FTP HTTP or HTTPS services you may change the default service port by typing the new port number in the Server Port field If you change the de...

Страница 220: ...Start Address End Address Configure the IP address range of trusted computers from which you can manage this Switch The Switch checks if the client IP address of a computer requesting a service or pro...

Страница 221: ...following table describes the labels in this screen Table 89 Management Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty...

Страница 222: ...Chapter 28 Diagnostic ES 2108 Series User s Guide 222...

Страница 223: ...r to the documentation of your syslog program for details The following table describes the syslog severity levels 29 2 Syslog Setup Click Management Syslog in the navigation panel to display this scr...

Страница 224: ...ype This column displays the names of the categories of logs that the device can generate Active Select this option to set the device to generate logs for the corresponding category Facility The log f...

Страница 225: ...s to the Switch s run time memory The Switch loses these changes if it is turned off or loses power so use the Save link on the top navigation panel to save your changes to the non volatile memory whe...

Страница 226: ...Chapter 29 Syslog ES 2108 Series User s Guide 226...

Страница 227: ...be able to communicate with one another In the following example switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members Table 9...

Страница 228: ...228 Figure 139 Clustering Application Example 30 2 Clustering Management Status Click Management Cluster Management in the navigation panel to display the following screen A cluster can only have one...

Страница 229: ...ster manager None neither a manager nor a member of a cluster Manager This field displays the cluster manager switch s hardware MAC address The Number of Member This field displays the number of switc...

Страница 230: ...w 1 owner group 393216 Jul 01 12 00 config w w w 1 owner group 0 Jul 01 12 00 fw 00 a0 c5 d4 88 bf rw rw rw 1 owner group 0 Jul 01 12 00 config 00 a0 c5 d4 88 bf 226 File sent OK ftp 463 bytes receive...

Страница 231: ...ary list below Name Type a name to identify the Clustering Manager You may use up to 32 printable characters spaces are allowed VID This is the VLAN ID and is only applicable if the Switch is set to 8...

Страница 232: ...and click those switches to select them Then enter their common web configurator password Add Click Add to save your settings to the Switch s run time memory The Switch loses these changes if it is t...

Страница 233: ...mine how to forward frames See the following figure 1 The Switch examines a received frame and learns the port on which this source MAC address came 2 The Switch checks to see if the frame s destinati...

Страница 234: ...ge the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to display and arrange the data according to port number This...

Страница 235: ...the device If no entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The Switch fills in its own MAC and IP address in the sender address fields and puts the kn...

Страница 236: ...ION Index This is the ARP table entry number IP Address This is the learned IP address of a device connected to a Switch port with corresponding MAC address below MAC Address This is the MAC address o...

Страница 237: ...can copy the settings of one port onto other ports 33 1 Configure Clone Settings Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports Click Mana...

Страница 238: ...h Example 2 4 6 indicates that ports 2 4 and 6 are the destination ports 2 6 indicates that ports 2 through 6 are the destination ports Basic Setting Select which port settings you configured in the B...

Страница 239: ...239 PART VI Troubleshooting and Appendices Troubleshooting 241 Product Specifications 281 IP Addresses and Subnetting 257 Legal Information 267 Customer Support 271 Index 277...

Страница 240: ...240...

Страница 241: ...ent IP address your computer s IP address must match it Refer to the chapter on access control for details I cannot access the web configurator The administrator username is admin The default administ...

Страница 242: ...up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address 34 2...

Страница 243: ...save this setting 34 2 1 1 2 Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools...

Страница 244: ...ns 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the IP address to the list of Allowed si...

Страница 245: ...lorer check that JavaScripts are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 152 Internet Options 2 Click the Custom Level button 3 Scroll down to Scri...

Страница 246: ...g 34 2 1 3 Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 Under Java permissions make...

Страница 247: ...d PROBLEM CORRECTIVE ACTION Cannot access the Switch The password field is case sensitive Make sure that you enter the correct password using the proper casing The administrator username is admin The...

Страница 248: ...Chapter 34 Troubleshooting ES 2108 Series User s Guide 248...

Страница 249: ...etween the centers of the holes on the device s back 129 5mm Recommended type of screws for wall mounting M4 Tap Screw see Figure 157 on page 251 AC Model Power Specification Overload protection 100 2...

Страница 250: ...ystem 100 Mbps SFP Interface ES 2108 F Only Fast Ethernet SFP open slot for transceiver of 100BASE FX 100BASE LX or 100BASE BX Gigabit Interface One Gigabit Ethernet mini GBIC slot ES 2108 G and ES 21...

Страница 251: ...hear from devices that are not in the same group s the traffic must first go through a router MAC Address Filter Filter traffic based on the source and or destination MAC address and VLAN group ID DH...

Страница 252: ...rs It allows a Switch to interact with other R STP compliant switches in your network to ensure that only one path exists between any two stations on the network MSTP Multiple Spanning Tree Protocol M...

Страница 253: ...FEATURE DESCRIPTION Table 105 Switching Specifications Layer 2 Features Bridging 8 K MAC addresses Static MAC address filtering by source destination Broadcast storm control Static MAC address forwar...

Страница 254: ...tocol version 2c RFC 2131 RFC 2132 Dynamic Host Configuration Protocol DHCP RFC 2138 RADIUS Remote Authentication Dial In User Service RFC 2139 RADIUS Accounting RFC 2236 Internet Group Management Pro...

Страница 255: ...A Product Specifications ES 2108 Series User s Guide 255 Safety UL 60950 1 CSA 60950 1 EN 60950 1 IEC 60950 1 EMC FCC Part 15 Class A CE EMC Class A Table 106 Standards Supported continued STANDARD DE...

Страница 256: ...Appendix A Product Specifications ES 2108 Series User s Guide 256...

Страница 257: ...share a common street name the hosts on a network share a common network number Similarly as each house has its own house number each host on the network has its own unique identifying number the hos...

Страница 258: ...is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of an IP address 192 168 1 2 in decimal By convention subnet masks always consi...

Страница 259: ...ed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet This is usually specified by writing a foll...

Страница 260: ...shows the company network before subnetting Figure 159 Subnetting Example Before Subnetting You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The...

Страница 261: ...68 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets Similarly to divide a 24 bit address into four subnets you need to...

Страница 262: ...ubnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet...

Страница 263: ...ST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 255 128 25 2 126 2 255 255 255 192 26 4 62 3 255 255 255 224 27 8 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252...

Страница 264: ...red You don t need to change the subnet mask computed by the Switch unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your netw...

Страница 265: ...o computer B which is a DHCP client Neither can access the Internet This problem can be solved by assigning a different static IP address to computer A or setting computer A to obtain an IP address au...

Страница 266: ...can not use the same IP address In the following example the computer and the router s LAN port both use 192 168 1 1 as the IP address The computer cannot access the Internet This problem can be solv...

Страница 267: ...software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein...

Страница 268: ...ot expressly approved by the party responsible for compliance could void the user s authority to operate the equipment This Class A digital apparatus complies with Canadian ICES 003 Cet appareil num r...

Страница 269: ...indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contact ZyXEL s Service Center for your Return Material Authorization number RMA Products must be...

Страница 270: ...Appendix C Legal Information ES 2108 Series User s Guide 270...

Страница 271: ...E mail support zyxel com tw Sales E mail sales zyxel com tw Telephone 886 3 578 3942 Fax 886 3 578 2439 Web www zyxel com www europe zyxel com FTP ftp zyxel com ftp europe zyxel com Regular Mail ZyXEL...

Страница 272: ...8448 Web www zyxel fi Regular Mail ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland France E mail info zyxel fr Telephone 33 4 72 52 97 97 Fax 33 4 72 52 19 20 Web www zyxel fr Regular Ma...

Страница 273: ...inagawa ku Tokyo 141 0022 Japan Kazakhstan Support http zyxel kz support Sales E mail sales zyxel kz Telephone 7 3272 590 698 Fax 7 3272 590 689 Web www zyxel kz Regular Mail ZyXEL Kazakhstan 43 Dosty...

Страница 274: ...Okrzei 1A 03 715 Warszawa Poland Russia Support http zyxel ru support Sales E mail sales zyxel ru Telephone 7 095 542 89 29 Fax 7 095 542 89 25 Web www zyxel ru Regular Mail ZyXEL Russia Ostrovityano...

Страница 275: ...ail ZyXEL Thailand Co Ltd 1 1 Moo 2 Ratchaphruk Road Bangrak Noi Muang Nonthaburi 11000 Thailand Ukraine Support E mail support ua zyxel com Sales E mail sales ua zyxel com Telephone 380 44 247 69 78...

Страница 276: ...Appendix D Customer Support ES 2108 Series User s Guide 276...

Страница 277: ...uring 166 syslog messages 166 trusted ports 166 authentication and RADIUS 152 setup 156 authorization privilege levels 158 automatic VLAN registration 88 AWG 249 B bandwidth control 253 basic settings...

Страница 278: ...85 DiffServ 185 activate 186 DS field 185 DSCP 185 DSCP to IEEE802 1p mapping 187 network example 185 PHB 185 dimensions 249 disclaimer 267 DS field Differentiated Services field 185 DSCP 185 DSCP to...

Страница 279: ...ernet Group Management Protocol 137 IGMP filtering 137 profile 142 profiles 139 IGMP snooping 137 MVR 143 ingress port 96 installation See hardware installation Internet setting up your browser 244 In...

Страница 280: ...105 MST ID 105 MSTI Multiple Spanning Tree Instance 103 MSTP 101 103 bridge ID 113 114 configuration 109 configuration digest 114 forwarding delay 111 Hello Time 113 hello time 111 Max Age 113 max ag...

Страница 281: ...ntages 152 and authentication 152 Network example 151 server 152 settings 152 setup 152 Rapid Spanning Tree Protocol See RSTP 101 rear panel 46 registration product 269 related documentation 3 reload...

Страница 282: ...syntax conventions 4 syslog 166 223 protocol 223 server setup 224 settings 223 setup 223 severity levels 223 system information 71 system log 221 system reboot 199 T TACACS 152 setup 154 TACACS Termi...

Страница 283: ...of VLANs 90 port isolation 93 port number 91 port settings 92 port based 77 port based VLAN 94 static VLAN 91 status 90 91 tagged 87 trunking 89 type 77 89 VLAN Virtual Local Area Network 75 VLAN numb...

Страница 284: ...Index ES 2108 Series User s Guide 284...

Отзывы:

Нет отзывов