ZyXEL Communications IES-1248 Скачать руководство пользователя страница 47

Страница: 47 / 92

IES 1248 Support Notes

How to set up MAC Filter/Port Security

Here, we will set up an environment to allow PCs with certain MAC address and the

number of PCs behind port 3 to access the Internet.

1. IES-1248 settings

1.1 Set up MAC filter

Click

Advanced Application

MAC Filter

in the navigation panel to display

configuration screen as shown. You will see the

MAC Filter

setup page.

Select the

Port 3 and input the MAC address you allow to access the Internet. And don’t forget

the press

Apply

button to let it takes effect.

CPE

Internet

Ethernet Port

PC 1

Port 3

PC 2

PC 3

Содержание IES-1248

Страница 1: ...IES1248 Support Notes March 2006...

Страница 2: ...nfigure Static Multicast filter 42 Limit the users behind the certain DSL port 46 How to set up MAC Filter Port Security 47 DHCP Relay Option 82 Application 49 How to set up DHCP Relay Option 82 Envir...

Страница 3: ...r can t access the DSLAM by WEB Telnet Ping from Ethernet port only console screen can access successfully what can I do 83 If DHCP Relay Option 82 can t work for example PC can not get desired IP add...

Страница 4: ...ed requirement with upstream downstream is 2M 512Kbps and the other is for high speed requirement with upstream downstream is 25M 1 2Kbps We suppose there are general subscribers from port 1 to port 2...

Страница 5: ...e Profile_LowSpeed and input the MaxRate for Up Stream and Down Stream In this case we set 512Kbps and 2048Kbps for Up Stream and Down Stream Set up High Speed Profile Give this profile a name like Pr...

Страница 6: ...to display configuration screen as shown Assign Profile_LowSpeed to port 1 Click a number 1 in the Port index field to enter Port setup screen Select the Profile_LowSpeed profile and press Apply butt...

Страница 7: ...e ports Select the ports you want to copy the configuration to and press Apply button The settings of port 1 will be copied to other ports For the high speed profile you can set the Profile_HighSpeed...

Страница 8: ...ige 660R 61 has a Telnet server inside We need to configure it via Telnet 2 1 Menu1 General Setup Go to Menu 1 In this menu we must set Rout IP NO and Bridge YES 2 2 Menu4 Internet Access Setup The en...

Страница 9: ...11 1 Remote Node Profile In menu11 1 we should activate this profile with Active Yes The Encapsulation and the Multiplexing are the same as the menu 4 Setting Edit ATM Options Yes will enter Menu 11 6...

Страница 10: ...rea Network allows a physical network to be partitioned into multiple logical networks Stations on a logical network belong to one group called VLAN group A station can belong to more than one group T...

Страница 11: ...e use ZyXEL Prestige 660R 61 CPE here Because the two ports belong to different VLAN want to go to the Internet via Uplink port of IES1248 we need to set up an extra VLAN and let the two ports be memb...

Страница 12: ...All contents copyright c 2006 ZyXEL Communications Corporation 12 Add VLAN20 Assign Port 2 ENET1 and ENET2 to be members of VLAN20 as shown Add VLAN200 Assign Port 1 Port2 ENET1 and ENET2 to be membe...

Страница 13: ...ons Corporation 13 1 2 PVID settings After set up the three VLAN we can see Vlan10 Vlan20 and Vlan200 as shown Now click VLAN Port Setting to set the PVID We assign VLAN 200 PVID to ENET1 ENET2 Also w...

Страница 14: ...k box 2 Prestige 660R 61 Settings Please refer to the procedures in previous application Triple play Application The IES 1248 allows you to use different channels also called Permanent Virtual Circuit...

Страница 15: ...traffic get the higher priority than data traffic We also can expand this application to triple play environment How to set up a Multiple PVCs environment Following procedures will introduce the sett...

Страница 16: ...poration 16 Add VLAN20 Assign Port 1 ENET1 to be members of VLAN20 as show We need to check the Tx Tagging on ENET1 1 2 VC profile setup Click Basic Setting and xDSL Profile Setup in navigation panel...

Страница 17: ...profile Set up Encap Class PCR and CDVT as shown Encap should be LLC the same as IES 1248 Class should be CBR which has higher priority in ATM QoS 1 3 Multiple PVCs setup Click Basic Setting and xDSL...

Страница 18: ...the higher priority We should modify this VPI VCI with Defval_CBR profile which we created before Press Apply button to make it take effect Then we add the VPI VCI with 0 34 We apply the DEFVAL profil...

Страница 19: ...1 1 we should activate this profile with Active Yes The Encapsulation and the Multiplexing are the same as the menu 4 Setting Edit ATM Options Yes will enter Menu 11 6 2 2 Menu11 6 Remote Node ATM Lay...

Страница 20: ...IES 1248 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 20 Add VLAN10 Assign Port 1 Port 10 to be members of VLAN10 as show We need to check the Tx Tagging on Port 10...

Страница 21: ...ration 21 Add VLAN20 Assign Port 2 Port 10 to be members of VLAN20 as show We need to check the Tx Tagging on Port 10 3 2 PVID setup Click Advanced Application and VLAN in navigation panel to display...

Страница 22: ...Notes All contents copyright c 2006 ZyXEL Communications Corporation 22 Let 10 be the PVID of Port 1 and 20 be the PVID of Port 2 In this application you will see the video traffic will go via 0 33 a...

Страница 23: ...profile management on a network RADIUS server We want to deploy 802 1x environment in this application The following figure shows the 802 1x example PC1 supplicant and PC2 supplicant want to access t...

Страница 24: ...plication Port Authentication in the navigation panel to display configuration screen as shown Click Enable Authentication Server and set the RADIUS server IP address UDP port and shared Secret which...

Страница 25: ...nd its default IP is 192 168 1 3 2 1 RADIUS server setup Click RADIUS RADIUS SERVER in the navigation panel to display configuration screen as shown You can use the default values or change the Authen...

Страница 26: ...802 1x client We take Microsoft 802 1x client as an example here 3 1 802 1x MD5 challenge setup Open the Local Area connection Properties and then click Authentication page Check the Enable IEEE 802...

Страница 27: ...ommunications Corporation 27 After click the icon there will be a dialog for entering the user name and password Click ok after input the correct user name and password that are in the database of aut...

Страница 28: ...e to send system log to a Syslog deamon such as Unix Syslogd and Kiwi s Syslog Daemon http www kiwisyslog com When DSL or Ethernet ports are linked up down IES 1248 sends a record to Syslog server The...

Страница 29: ...hing the installation you can run it from the Start Menu And you will see following dialog And the Server s IP is 192 168 1 77 2 IES 1248 settings Click Advanced Application SysLog in the navigation p...

Страница 30: ...ord to Syslog server We can see these logs in Kiwi s Syslog server Setting up the Ring Environment The Ring topology is used to guarantee the network being normal even if one link between two device b...

Страница 31: ...ions will describe the detailed procedures to set up the environment 1 IES 1248 settings 1 1 Enable Spanning Tree protocol on Ethernet ports Click Advanced Application Spanning Tree Protocol in the na...

Страница 32: ...ation 32 Click Active to enable Spanning Tree Protocol Then enable it on ENET1 port and ENET2 port 2 Setup IES2000 2 1 Enable Spanning Tree protocol Click Switch Setup in the navigation panel to displ...

Страница 33: ...006 ZyXEL Communications Corporation 33 2 2 Enable Spanning Tree protocol on Ethernet ports Click Port Setup in the navigation panel to display configuration screen as shown Click msc to display MSC c...

Страница 34: ...IES 1248 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 34 Check Spanning Tree Protocol to enable it Take the same procedures with Uplink1 Please see the following figure...

Страница 35: ...col on Ethernet ports Click Advanced Application Spanning Tree Protocol in the navigation panel to display configuration screen as shown You will see the Spanning Tree Protocol Status page Click Confi...

Страница 36: ...between port 2 of ES4024 and Uplink1 of IES2000 will be blocked as shown after we connect After we remove the cable between port 1 of IES1248 and port 1 of ES4024 the connection still exists We can re...

Страница 37: ...ticast traffic of a group is only forwarded to ports that have members of that group IGMP snooping generates no additional network traffic allowing you to significantly reduce multicast traffic passin...

Страница 38: ...10 group And we assume the subscriber want to subscribe two channel movie 1 and movie 2 If we don t enable the IGMP snooping every one can see all movies If we don t set the IGMP filtering on the por...

Страница 39: ...he navigation panel to display configuration screen as shown And click the IGMP Filter Profile to show the setup page In this case we only allow the subscriber to join movie 1 and movie 2 That means o...

Страница 40: ...or to configure multicast group consisting of one or more ranges of MAC multicast addresses An administrator can control multicast traffic per switch port basis with static multicast filter By default...

Страница 41: ...TP Before using static multicast filter you must mapping Multicast IP address to Multicast MAC address because IES IPDSLAM using Multicast MAC address to forwarding multicast traffic This feature can...

Страница 42: ...3 is a VIP subscribe so he has the highest authority to access all movie resource for example both channel 1 and 2 Static Multicast Filters can specify which video channels based on multicast MAC add...

Страница 43: ...Communications Corporation 43 2 Please key in 01 00 5e 00 00 01 in the Adding new entry and click Add to bring up the following screen V displays for member and displays for non member 3 Please do the...

Страница 44: ...st MAC address 01 00 5e 01 01 01 and channel 2 multicast MAC address 01 00 5e 02 02 02 as above 5 Because port 1 is not member of both 2 channels so it should be set as non member of these 2 channels...

Страница 45: ...port 3 no need to change anything because its status as member of these channels by default Don t forget to click Config Save to save your configuration into flash CLI Command related switch Smcast Us...

Страница 46: ...2 3 01005e010101 join switch smcast set 1 2 01005e020202 leave switch smcast set 3 01005e020202 join switch smcast show PS Default statuses of other ADSL ports without configuration are DIFFERENT bet...

Страница 47: ...of PCs behind port 3 to access the Internet 1 IES 1248 settings 1 1 Set up MAC filter Click Advanced Application MAC Filter in the navigation panel to display configuration screen as shown You will se...

Страница 48: ...access the Internet behind certain ports 1 2 Set up Port Security Click Advanced Application Port Security in the navigation panel to display configuration screen as shown You will see the Port Securi...

Страница 49: ...d select port 3 You will see the MAC table will be shown as you configured in previous steps DHCP Relay Option 82 Application ISP may want to limit the number of IP address or deliver some specific IP...

Страница 50: ...e use the IP Commander as DHCP server Its IP is 192 168 1 99 and the IP pool is between 192 168 1 201 and 192 168 1 203 for VID 1 DSL port 25 and the option 82 string is 1248 1 IES 1248 settings Click...

Страница 51: ...c 2006 ZyXEL Communications Corporation 51 2 CPE settings Connect CPE to the 25th DSL port Please see former applications for Detailed settings 3 IP Commander settings Open IP Commander Right click I...

Страница 52: ...tents copyright c 2006 ZyXEL Communications Corporation 52 Input the DHCP IP address or domain name and click ok Our IP is 192 168 1 99 Input user name and password The default user name is administra...

Страница 53: ...es All contents copyright c 2006 ZyXEL Communications Corporation 53 It will bring up the following screen please make sure that your DHCP is in online status Then click wizard in the top tool bars an...

Страница 54: ...ts copyright c 2006 ZyXEL Communications Corporation 54 Give a name and description to the new rule Assign a range of IP addresses or just one IP address to this rule In our case we set the IP pool fr...

Страница 55: ...port Notes All contents copyright c 2006 ZyXEL Communications Corporation 55 After input IP pool we select DHCP Option in Keywords combobox After select the DHCP Option it will pop up Add DHCP Option...

Страница 56: ...nt Information sub option 1 binary data For port 25 VLAN 1 1248 please key in 0019000131323438 as the key value and click OK Please note that the first 2 bytes define port number the second 2 bytes is...

Страница 57: ...Notes All contents copyright c 2006 ZyXEL Communications Corporation 57 Then pop up the following screen and you can just press Next button Then you can add DHCP template option such as gateway DNS s...

Страница 58: ...ES 1248 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 58 Here we use 192 168 1 1 as gateway IP address of DHCP client PC You can apply DDNS service to DHCP server or not...

Страница 59: ...IES 1248 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 59 The rule creation has been finished...

Страница 60: ...IES 1248 provides Packet Filter function to filter some specific packets like IP ARP DHCP EAPoL PPPoE NETBIOS and IGMP How to Filter Some Specific Packet Here we will set up an environment to block N...

Страница 61: ...yXEL Communications Corporation 61 Please select port 1 and clear the NetBios check box Meanwhile you will see Filter Out in NetBios check box Press Add button make the change take effect So you will...

Страница 62: ...he figure above We only set the one connected to the ISP as Daisy Chain mode In Daisy Chain mode connect the Ethernet Port 1 to the Ethernet backbone and connect the Ethernet Port 2 to another IES1248...

Страница 63: ...rt Notes All contents copyright c 2006 ZyXEL Communications Corporation 63 VLAN Application Application Scenario A Scenario Description In this scenario each building has 2 departments and users belon...

Страница 64: ...le Finance department VLAN 20 using Port 4 5 6 connected to switches Because this is a symmetric switch setting so configuration of both switches are same How to configure VLAN 1 Please enter VLAN set...

Страница 65: ...l contents copyright c 2006 ZyXEL Communications Corporation 65 3 Please click VLAN port setting to bring up the following screen setup PVID 10 for port 1 port 2 port 3 PVID 20 for port 4 port 5 port...

Страница 66: ...N 10 statically PC connected to port 4 joins VLAN 20 statically and PCs connected to port 1 2 can join VLAN 10 20 30 which determined by its configuration on GVRP aware NIC dynamically For switch on b...

Страница 67: ...ns Corporation 67 Add VLAN 20 to this switch VLAN 20 port 4 fixed untag port 23 fixed Tx tagging Please click VLAN port setting to bring up the following screen setup PVID 10 for port 3 PVID 20 for po...

Страница 68: ...ations Corporation 68 2 For Switch B on Floor 1 Please follow the same steps to adding VLAN 10 port 3 fixed untag port 23 fixed Tx tagging port 24 fixed Tx tagging Add VLAN 20 to this switch VLAN 20 p...

Страница 69: ...s Corporation 69 Please click VLAN port setting to bring up the following screen setup PVID 10 for port 3 PVID 20 for port 4 and enable GVRP on the top of the screen and port 1 port 2 port 23 port 24...

Страница 70: ...Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 70 Please set static VLAN 20 port 23 fixed untag Please add VLAN 30 port 1 fixed untag port23 fixed untag port 24 fixed Tx...

Страница 71: ...IES 1248 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 71 Please setup PVID 30 for port 1 and enable GVRP on port 3 and port 24 Application Scenario C...

Страница 72: ...1 0 24 for VLAN 10 subnet 192 168 2 0 24 for VLAN 20 subnet 192 168 3 0 24 for VLAN 30 In order to control traffic routing between different subnets we put a layer 3 switch ES4024 ES4024A GS4024 on b...

Страница 73: ...ns Corporation 73 Add VLAN 20 to this switch VLAN 20 port 4 fixed untag port 23 fixed Tx tagging Please click VLAN port setting to bring up the following screen setup PVID 10 for port 3 PVID 20 for po...

Страница 74: ...ations Corporation 74 2 For Switch B on Floor 1 Please follow the same steps to adding VLAN 10 port 3 fixed untag port 23 fixed Tx tagging port 24 fixed Tx tagging Add VLAN 20 to this switch VLAN 20 p...

Страница 75: ...Please click VLAN port setting to bring up the following screen setup PVID 10 for port 3 PVID 20 for port 4 and enable GVRP on the top of the screen and port 1 port2 port 23 port 24 2 For Switch C la...

Страница 76: ...ease setup PVID 30 for port 1 and enable GVRP on port 3 and port 24 Please click IP setup then setup 4 domains on ES4024 GS4024 Index IP address IP Subnet mask VLAN ID 1 192 168 1 0 255 255 255 0 10 2...

Страница 77: ...poration 77 After finish domain setting please change the default gateway and domain name server setting and click Apply Please click Filtering under Advanced Application menu list to bring up the fol...

Страница 78: ...IES 1248 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 78 You will see the following screen after finish filtering setting...

Страница 79: ...ise 1 Please also configure routing protocol to make layer 3 Switch and gateway exchange their routing information in this scenario 2 You can also enable DHCP feature based on VID on layer 3 Switch ES...

Страница 80: ...S at the same time What is the difference between IES1248 71 and IES1248 73 IES1248 71 ADSL Annex A for POTS IES1248 73 ADSL Annex B for ISDN What is the power requirement of IES 1248 Power Input is 4...

Страница 81: ...k Access Control ADSL Port Isolation Multiple PVCs Support VC profile What is the default console rate of IES1248 9600 8bit data no parity stop bit 1 no flow control How many static VLAN entries can I...

Страница 82: ...Notes All contents copyright c 2006 ZyXEL Communications Corporation 82 IP ROUTE 128 Static multicast address 32 Igmp groups 512 groups MAC learning 14k 128 per ADSL port 4k per ENET port RPVC gatewa...

Страница 83: ...re the Ethernet LED is on when cable connection is already 3 Make sure that both inband and outband IP of IES and Your PC are properly configured 4 Please check Security host IP and service port setti...

Страница 84: ...2006 ZyXEL Communications Corporation 84 Please key in sys server show to check server port make sure that your application follow the server port in the list shown 5 Please check VLAN configuration m...

Страница 85: ...ke sure that description information is match to your DHCP server setting otherwise DHCP server won t assign any IP from its IP pool to an invalid DHCP request 3 Please make sure that your DHCP server...

Страница 86: ...munications Corporation 86 Press Browse button to select the default rom file Then press Upload button b IES2000 3000 Upload default rom file to IES2000 3000 by ftp web or console Console When the sys...

Страница 87: ...the default rom file to MSC via 1k Xmodem or Xmodem See following two figures Bootbase Version V1 02 MSC1000 09 26 2002 13 15 56 RAM Size 32768 Kbytes FLASH Intel 32M ZyNOS Version V3 50 DS 6 04 21 2...

Страница 88: ...es All contents copyright c 2006 ZyXEL Communications Corporation 88 WEB Please open Maintenance page Click Restore Configuration link Press Browse button to select the default rom file Then press the...

Страница 89: ...ou can set the factory default by CLI command or WEB WEB Please open Maintenance Page Click the Restore Default Configuration link It will pop up a dialog to ask for your confirmation Please click Ok...

Страница 90: ...ually we don t suggest the distance between CO and CPE is more than 4Km Of course it depends on your real line quality To verify this you can replace the original cable with a shorter one 7 Set the sm...

Страница 91: ...IES 2000 3000 1248 console port to PC s serial port 2 Start a Terminal program with 9600bps N 8 1 settings 3 Power on the router you should see the power up message on the Terminal screen 4 Enter Debu...

Страница 92: ...f the port on DSLAM have been enabled 3 Check the VPI VCI and Encapsulation are correct 4 Use OAM loopback test to check the ATM layer is ok 5 Check the Filter table s settings MAC filter Packet filte...

Результаты поиска

Содержание IES-1248

Отзывы:

Похожие инструкции для IES-1248

Бренды по названию

Популярные бренды

ZyXEL Communications IES-1248, Поддержка заметок

Результаты поиска

Содержание IES-1248

Отзывы:

Похожие инструкции для IES-1248

Бренды по названию

Популярные бренды