Zyxel ES-2024ADE installation guide

ES-2024A
Ethernet Switch
User’s Guide
Version 3.60
6/2005
ES-2024A User’s Guide

Copyright

The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.
Copyright 1
ES-2024A User’s Guide
Interference Statements and
Warnings
FCC Statement
This switch complies with Part 15 of the FCC rules. Operation is subject to the following two conditions:
1 This switch may not cause harmful interference.
2 This switch must accept any interference received, including interference that may cause undesired
operations.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.
CE Mark Warning:
This is a class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures.
Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.
This Class A digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.

2 Interference Statements and Warnings

ES-2024A User’s Guide
Certifications
1 Go to www.zyxel.com
2 Select your product from the drop-down list box on the ZyXEL home page to go
to that product's page.
3 Select the certification you wish to view from this page.
Registration
Register your product online for free future product updates and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.
Safety Warnings
For your safety, be sure to read and follow all warning notices and instructions.
• To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel can service the device. Please contact your vendor for further information.
• Use ONLY the dedicated power supply for your device. Connect the power cord or power adaptor to the right supply voltage (110V AC in North America or 230V AC in Europe).
• Do NOT use the device if the power supply is damaged as it might cause electrocution.
• If the power supply is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power supply. Contact your local vendor to order a new power supply.
• Place connecting cables carefully so that no one will step on them or stumble over them. Do NOT allow anything to rest on the power cord and do NOT locate the product where anyone can walk on the power cord.
• If you wall mount your device, make sure that no electrical, gas or water pipes will be damaged.
• Do NOT install nor use your device during a thunderstorm. There may be a remote risk of electric shock from lightning.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT use this product near water, for example, in a wet basement or near a swimming pool.
• Make sure to connect the cables to the correct ports.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device.
• Do NOT store things on the device.
• Connect ONLY suitable accessories to the device.
Interference Statements and Warnings 3
ES-2024A User’s Guide

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country.
4 ZyXEL Limited Warranty

Customer Support

Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
ES-2024A User’s Guide
METHOD
LOCATION
CORPORATE HEADQUARTERS (WORLDWIDE)
CZECH REPUBLIC
DENMARK
FINLAND
FRANCE
GERMANY
NORTH AMERICA
NORWAY
SPAIN
SWEDEN
SUPPORT E-MAIL TELEPHONE* WEB SITE
SALES E-MAIL FAX FTP SITE
support@zyxel.com.tw +886-3-578-3942 www.zyxel.com
www.europe.zyxel.com
sales@zyxel.com.tw +886-3-578-2439 ftp.zyxel.com
ftp.europe.zyxel.com
info@cz.zyxel.com +420 241 091 350 www.zyxel.cz ZyXEL Communications
info@cz.zyxel.com +420 241 091 359
support@zyxel.dk +45 39 55 07 00 www.zyxel.dk ZyXEL Communications A/S
sales@zyxel.dk +45 39 55 07 07
support@zyxel.fi +358-9-4780-8411 www.zyxel.fi ZyXEL Communications Oy
sales@zyxel.fi +358-9-4780 8448
info@zyxel.fr +33 (0)4 72 52 97 97 www.zyxel.fr
+33 (0)4 72 52 19 20
support@zyxel.de +49-2405-6909-0 www.zyxel.de ZyXEL Deutschland GmbH.
sales@zyxel.de +49-2405-6909-99
support@zyxel.com +1-800-255-4101
+1-714-632-0882
sales@zyxel.com +1-714-632-0858 ftp.us.zyxel.com
support@zyxel.no +47 22 80 61 80 www.zyxel.no ZyXEL Communications A/S
sales@zyxel.no +47 22 80 61 81
support@zyxel.es +34 902 195 420 www.zyxel.es ZyXEL Communications
sales@zyxel.es +34 913 005 345
support@zyxel.se +46 31 744 7700 www.zyxel.se ZyXEL Communications A/S
sales@zyxel.se +46 31 744 7701
www.us.zyxel.com ZyXEL Communications Inc.
Z y XE L Fr a nc e
REGULAR MAIL
ZyXEL Communications Corp. 6 Innovation Road II
Sc ien ce P ar k Hsinchu 300 Ta iw a n
Czech s.r.o. Modranská 621 143 01 Praha 4 - Modrany Ceská Republika
Col um bu sv ej 5 2860 Soeborg Denmark
Mal mi nk aa ri 10 00700 Helsinki Finland
1 ru e d e s V er ge r s Ba t. 1 / C 69760 Limonest France
Adenauerstr. 20/A2 D-52146 Wuerselen Germany
1130 N. Miller St. Anaheim
CA 92806-2001 U.S.A.
Ni ls H ans en s ve i 13 0667 Oslo Norway
Alejandro Villegas 33 1º, 28043 Madrid Spain
Sjöporten 4, 41764 Göteborg Sweden
Customer Support 5
ES-2024A User’s Guide
METHOD
LOCATION
UNITED KINGDOM
SUPPORT E-MAIL TELEPHONE* WEB SITE
SALES E-MAIL FAX FTP SITE
support@zyxel.co.uk +44 (0) 8702 909090 www.zyxel.co.uk ZyXEL Communications UK
sales@zyxel.co.uk +44 (0) 8702 909091 ftp.zyxel.co.uk
* “+” is the (prefix) number you enter to make an international telephone call.
REGULAR MAIL
Ltd.,11, The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK)
6 Customer Support
ES-2024A User’s Guide

Table of Contents

Copyright .................................................................................................................. 1
Interference Statements and Warnings.................................................................. 2
ZyXEL Limited Warranty ......................................................................................... 4
Customer Support ................................................................................................... 5
Table of Contents ..................................................................................................... 7
List of Figures ........................................................................................................ 15
List of Tables .......................................................................................................... 19
Preface.................................................................................................................... 21
Chapter 1
Getting to Know Your Switch................................................................................ 23
1.1 Introduction ........................................................................................................ 23
1.2 Software Features ............................................................................................. 23
1.3 Hardware Features ............................................................................................ 25
1.4 Applications ....................................................................................................... 25
1.4.1 Backbone Application ............................................................................... 25
1.4.2 Bridging Example ..................................................................................... 26
1.4.3 High Performance Switched Example ...................................................... 26
1.4.4 IEEE 802.1Q VLAN Application Examples .............................................. 27
1.4.4.1 Tag-based VLAN Example ............................................................. 27
1.4.4.2 VLAN Shared Server Example ....................................................... 28
Chapter 2
Hardware Installation and Connection ................................................................ 29
2.1 Freestanding Installation ................................................................................... 29
2.2 Mounting the Switch on a Rack ........................................................................ 30
2.2.1 Rack-mounted Installation Requirements ................................................ 30
2.2.1.1 Precautions .................................................................................... 30
2.2.2 Attaching the Mounting Brackets to the Switch ........................................ 30
2.2.3 Mounting the Switch on a Rack ................................................................ 30
Chapter 3
Hardware Overview................................................................................................ 33
3.1 Front Panel Connection .................................................................................... 33
Table of Contents 7
ES-2024A User’s Guide
3.1.1 Console Port ........................................................................................... 33
3.1.2 Ethernet Ports .......................................................................................... 34
3.1.2.1 Default Ethernet Settings ................................................................ 34
3.1.3 Mini-GBIC Slots ....................................................................................... 34
3.1.3.1 Transceiver Installation ................................................................ 35
3.1.3.2 Transceiver Removal ................................................................... 35
3.2 Rear Panel ........................................................................................................ 36
3.2.1 Power Connector ..................................................................................... 36
3.3 Front Panel LEDs .......................................................................................... 37
Chapter 4
The Web Configurator ........................................................................................... 39
4.1 Introduction ........................................................................................................ 39
4.2 System Login .................................................................................................. 39
4.3 The Status Screen ........................................................................................ 40
4.3.1 Change Your Password ........................................................................ 43
4.4 Switch Lockout ................................................................................................ 44
4.5 Resetting the Switch ....................................................................................... 44
4.5.1 Reload the Factory-default Configuration File ........................................ 44
4.6 Logging Out of the Web Configurator ............................................................... 45
4.7 Help ................................................................................................................. 46
Chapter 5
Initial Setup Example............................................................................................. 47
5.1 Overview ............................................................................................................ 47
5.1.1 Creating a VLAN ...................................................................................... 47
5.1.2 Setting Port VID ....................................................................................... 48
5.1.3 Configuring Switch Management IP Address ........................................... 49
Chapter 6
System Status and Port Statistics........................................................................ 51
6.1 Overview ............................................................................................................ 51
6.2 Port Status Summary ..................................................................................... 51
6.2.1 Status: Port Details .............................................................................. 52
Chapter 7
Basic Setting ......................................................................................................... 55
7.1 Overview ............................................................................................................ 55
7.2 System Information ........................................................................................ 55
7.3 General Setup .............................................................................................. 56
7.4 Introduction to VLANs ...................................................................................... 57
7.5 IGMP Snooping ................................................................................................ 58
7.6 Switch Setup Screen ...................................................................................... 58
8 Table of Contents
ES-2024A User’s Guide
7.7 IP Setup .......................................................................................................... 60
7.7.1 Management IP Addresses ...................................................................... 60
7.8 Port Setup ....................................................................................................... 62
Chapter 8
VLAN ....................................................................................................................... 65
8.1 Introduction to IEEE 802.1Q Tagged VLAN .................................................... 65
8.1.1 Forwarding Tagged and Untagged Frames ............................................. 65
8.2 Automatic VLAN Registration .......................................................................... 66
8.2.1 GARP ...................................................................................................... 66
8.2.1.1 GARP Timers ................................................................................. 66
8.2.2 GVRP ....................................................................................................... 66
8.3 Port VLAN Trunking ......................................................................................... 67
8.4 Select the VLAN Type ...................................................................................... 67
8.5 Static VLAN ....................................................................................................... 68
8.5.1 Static VLAN Status .................................................................................. 68
8.5.2 Configure a Static VLAN ...................................................................... 69
8.5.3 Configure VLAN Port Settings .............................................................. 71
8.6 Port-based VLAN Setup ............................................................................... 72
8.6.1 Configure a Port-based VLAN .................................................................. 72
Chapter 9
Static MAC Forwarding.......................................................................................... 77
9.1 Overview ............................................................................................................ 77
9.2 Configuring Static MAC Forwarding ............................................................. 77
Chapter 10
Filtering................................................................................................................... 79
10.1 Overview .......................................................................................................... 79
10.2 Configure a Filtering Rule ............................................................................. 79
Chapter 11
Spanning Tree Protocol......................................................................................... 81
11.1 Overview .......................................................................................................... 81
11.1.1 STP Terminology ................................................................................... 81
11.1.2 How STP Works .................................................................................... 82
11.1.3 STP Port States ..................................................................................... 82
11.2 STP Status ................................................................................................. 82
11.3 Configure STP .............................................................................................. 84
Chapter 12
Bandwidth Control................................................................................................. 87
12.1 Bandwidth Control Setup ................................................................................ 87
Table of Contents 9
ES-2024A User’s Guide
Chapter 13
Broadcast Storm Control ...................................................................................... 89
13.1 Overview .......................................................................................................... 89
13.2 Broadcast Storm Control Setup ...................................................................... 89
Chapter 14
Mirroring ................................................................................................................. 91
14.1 Overview .......................................................................................................... 91
14.2 Port Mirroring Setup ....................................................................................... 91
Chapter 15
Link Aggregation ................................................................................................... 93
15.1 Overview .......................................................................................................... 93
15.2 Dynamic Link Aggregation ............................................................................. 93
15.2.1 Link Aggregation ID ............................................................................... 94
15.3 Link Aggregation Status .................................................................................. 94
15.4 Link Aggregation Setup ................................................................................. 95
Chapter 16
Port Authentication................................................................................................ 99
16.1 Overview .......................................................................................................... 99
16.1.1 RADIUS ................................................................................................. 99
16.2 Port Authentication Configuration ................................................................... 99
16.2.1 Activate IEEE 802.1x Security .......................................................... 100
16.2.2 Configuring RADIUS Server Settings ............................................... 101
Chapter 17
Port Security......................................................................................................... 103
17.1 Overview ........................................................................................................ 103
17.2 Port Security Setup ....................................................................................... 103
Chapter 18
Queuing Method................................................................................................... 105
18.1 Overview ........................................................................................................ 105
18.1.1 Strict Priority Queuing (SPQ) .............................................................. 105
18.1.2 Weighted Round Robin Scheduling (WRR) ......................................... 105
18.2 Configuring Queuing Method ........................................................................ 106
Chapter 19
Static Route .......................................................................................................... 107
19.1 Configuring Static Route .............................................................................. 107
10 Table of Contents
ES-2024A User’s Guide
Chapter 20
Differentiated Services........................................................................................ 109
20.1 Overview ........................................................................................................ 109
20.1.1 DSCP and Per-Hop Behavior .............................................................. 109
20.1.2 DiffServ Network Example .................................................................. 109
20.2 Activating DiffServ ....................................................................................... 110
20.3 DSCP-to-IEEE802.1p Priority Mapping .....................................................111
20.3.1 Configuring DSCP Settings ...................................................................111
Chapter 21
Maintenance ..........................................................................................................113
21.1 The Maintenance Screen ............................................................................. 113
21.2 Firmware Upgrade ...................................................................................... 114
21.3 Restore a Configuration File ........................................................................ 114
21.4 Backing Up a Configuration File .................................................................. 115
21.5 Load Factory Defaults ................................................................................. 115
21.6 Reboot System ............................................................................................ 116
21.7 FTP Command Line ...................................................................................... 116
21.7.1 Filename Conventions ........................................................................ 116
21.7.1.1 Example FTP Commands .......................................................... 117
21.7.2 FTP Command Line Procedure .......................................................... 117
21.7.3 GUI-based FTP Clients ........................................................................ 118
21.7.4 FTP over WAN Restrictions ................................................................ 118
Chapter 22
Access Control......................................................................................................119
22.1 Overview ...................................................................................................... 119
22.2 The Access Control Main Screen .................................................................. 119
22.3 About SNMP ................................................................................................ 120
22.3.1 Supported MIBs ................................................................................. 121
22.3.2 SNMP Traps ....................................................................................... 121
22.3.3 Configuring SNMP .............................................................................. 121
22.4 Setting Up Login Accounts ......................................................................... 122
22.5 SSH Overview ............................................................................................... 123
22.6 How SSH works ............................................................................................. 124
22.7 SSH Implementation on the Switch ............................................................... 125
22.7.1 Requirements for Using SSH ............................................................... 125
22.7.2 SSH Login Example ............................................................................. 125
22.8 Introduction to HTTPS ................................................................................... 126
22.9 HTTPS Example ............................................................................................ 127
22.9.1 Internet Explorer Warning Messages ................................................... 127
22.9.2 Netscape Navigator Warning Messages .............................................. 128
22.9.3 The Main Screen .................................................................................. 129
Table of Contents 11
ES-2024A User’s Guide
22.10 Service Port Access Control ..................................................................... 131
22.11 Remote Management ............................................................................... 131
Chapter 23
Diagnostic............................................................................................................. 133
23.1 Diagnostic .................................................................................................... 133
Chapter 24
Cluster Management............................................................................................ 135
24.1 Overview ........................................................................................................ 135
24.2 Cluster Management Status ........................................................................ 136
24.2.1 Cluster Member Switch Management ................................................. 137
24.2.1.1 Uploading Firmware to a Cluster Member Switch .................... 137
24.3 Configuring Cluster Management ................................................................ 138
Chapter 25
MAC Table............................................................................................................. 141
25.1 Overview ........................................................................................................ 141
25.2 Viewing the MAC Table ................................................................................ 142
Chapter 26
ARP Table ............................................................................................................. 143
26.1 Overview ........................................................................................................ 143
26.1.1 How ARP Works .................................................................................. 143
26.2 Viewing the ARP Table ................................................................................ 143
Chapter 27
Introducing the Commands .............................................................................. 145
27.1 Overview ........................................................................................................ 145
27.1.1 Switch Configuration File ..................................................................... 145
27.2 Accessing the CLI ........................................................................................ 145
27.2.1 Access Priority .................................................................................... 146
27.2.2 The Console Port ................................................................................. 146
27.2.2.1 Initial Screen ............................................................................... 146
27.2.3 Telnet ................................................................................................... 146
27.2.4 SSH ...................................................................................................... 147
27.3 The Login Screen ......................................................................................... 147
27.4 Command Syntax Conventions ..................................................................... 148
27.5 Getting Help ................................................................................................... 148
27.5.1 List of Available Commands ................................................................. 148
27.5.2 Detailed Command Information ........................................................... 149
27.6 Command Modes .......................................................................................... 150
27.7 Using Command History ................................................................................ 151
12 Table of Contents
ES-2024A User’s Guide
27.8 Saving Your Configuration ............................................................................. 151
27.8.1 Logging Out .......................................................................................... 151
27.9 Command Summary ...................................................................................... 151
27.9.1 User Mode ............................................................................................ 152
27.9.2 Enable Mode ........................................................................................ 152
27.9.3 General Configuration Mode ................................................................ 155
27.9.4 interface port-channel Commands ....................................................... 162
27.9.5 config-vlan Commands ........................................................................ 164
Chapter 28
Command Examples........................................................................................... 167
28.1 Overview ........................................................................................................ 167
28.2 show Commands ........................................................................................... 167
28.2.1 show system-information .................................................................... 167
28.2.2 show ip ................................................................................................. 168
28.2.3 show logging ....................................................................................... 168
28.2.4 show interface ..................................................................................... 169
28.2.5 show mac address-table ..................................................................... 169
28.3 ping ............................................................................................................... 170
28.4 traceroute ...................................................................................................... 170
28.5 Enabling RSTP .............................................................................................. 171
28.6 Configuration File Maintenance .................................................................... 171
28.6.1 Restarting the Switch ........................................................................... 171
28.6.2 Resetting to the Factory Default ........................................................... 172
28.7 no Command Examples ................................................................................ 172
28.7.1 no mirror-port ...................................................................................... 172
28.7.2 no https timeout .................................................................................... 173
28.7.3 no trunk ................................................................................................ 173
28.7.4 no port-access-authenticator ................................................................ 174
28.7.5 no ssh ................................................................................................... 174
28.8 spq ................................................................................................................ 175
28.9 wrr ................................................................................................................. 175
28.10 interface Commands ................................................................................... 176
28.10.1 interface port-channel ....................................................................... 176
28.10.2 bmstorm-limit ..................................................................................... 176
28.10.3 bandwidth-limit .................................................................................. 177
28.10.4 mirror ................................................................................................. 177
28.10.5 gvrp ................................................................................................... 178
28.10.6 frame-type ......................................................................................... 179
28.10.7 egress set .......................................................................................... 179
28.10.8 qos priority .......................................................................................... 180
28.10.9 name .................................................................................................. 180
28.10.10 speed-duplex .................................................................................... 181
Table of Contents 13
ES-2024A User’s Guide
Chapter 29
IEEE 802.1Q Tagged VLAN Commands ............................................................. 183
29.1 IEEE 802.1Q Tagged VLAN Overview .......................................................... 183
29.2 VLAN Databases ........................................................................................... 183
29.2.1 Static Entries (SVLAN Table) ............................................................... 183
29.2.2 Dynamic Entries (DVLAN Table) .......................................................... 184
29.3 Configuring Tagged VLAN ............................................................................. 184
29.4 Global VLAN1Q Tagged VLAN Configuration Commands ............................ 185
29.4.1 GARP Status ........................................................................................ 185
29.4.2 GARP Timer ........................................................................................ 185
29.4.3 GVRP Timer ......................................................................................... 186
29.4.4 Enable GVRP ....................................................................................... 186
29.4.5 Disable GVRP ...................................................................................... 187
29.4.6 Enable Ingress Checking .................................................................... 187
29.5 Port VLAN Commands .................................................................................. 187
29.5.1 Set Port VID ........................................................................................ 187
29.5.2 Set Acceptable Frame Type ................................................................. 188
29.5.3 Enable or Disable Port GVRP .............................................................. 188
29.5.4 Modify Static VLAN ............................................................................. 188
29.5.4.1 Modify a Static VLAN Table Example ......................................... 189
29.5.4.2 Forwarding Process Example ..................................................... 189
29.5.5 Delete VLAN ID .................................................................................... 190
29.6 Enable VLAN ................................................................................................ 190
29.7 Disable VLAN ................................................................................................ 191
29.8 Show VLAN Setting ...................................................................................... 191
Chapter 30
Troubleshooting ................................................................................................... 193
30.1 Problems Starting Up the Switch ................................................................... 193
30.2 Problems Accessing the Switch .................................................................... 193
30.2.1 Pop-up Windows, JavaScripts and Java Permissions ......................... 194
30.2.1.1 Internet Explorer Pop-up Blockers .............................................. 194
30.2.1.2 JavaScripts ................................................................................. 197
30.2.1.3 Java Permissions ....................................................................... 199
30.3 Problems with the Password ......................................................................... 201
Appendix A
Product Specifications........................................................................................ 203
Appendix B
IP Subnetting........................................................................................................ 207
Index...................................................................................................................... 215
14 Table of Contents
ES-2024A User’s Guide

List of Figures

Figure 1 Backbone Application .............................................................................. 26
Figure 2 Bridging Application ................................................................................26
Figure 3 High Performance Switched Application ................................................. 27
Figure 4 Tag-based VLAN Application ...................................................................28
Figure 5 Shared Server Using VLAN Example ...................................................... 28
Figure 6 Attaching Rubber Feet ........................................................................... 29
Figure 7 Attaching the Mounting Brackets .............................................................30
Figure 8 Mounting the Switch on a Rack .............................................................. 31
Figure 9 Front Panel ............................................................................................. 33
Figure 10 Transceiver Installation Example ........................................................... 35
Figure 11 Installed Transceiver ............................................................................ 35
Figure 12 Opening the Transceiver’s Latch Example ............................................ 36
Figure 13 Transceiver Removal Example .............................................................. 36
Figure 14 Rear Panel ............................................................................................ 36
Figure 15 Web Configurator: Login ........................................................................ 39
Figure 16 Web Configurator Home Screen (Status) .............................................. 40
Figure 17 Change Administrator Login Password .................................................44
Figure 18 Resetting the Switch: Via the Console Port ........................................... 45
Figure 19 Web Configurator: Logout Screen .........................................................46
Figure 20 Initial Setup Network Example: VLAN ...................................................47
Figure 21 Initial Setup Network Example: Port VID ............................................... 49
Figure 22 Initial Setup Example: Management IP Address ................................... 50
Figure 23 Status .................................................................................................... 51
Figure 24 Status: Port Details ................................................................................ 53
Figure 25 System Info ........................................................................................... 55
Figure 26 General Setup ....................................................................................... 56
Figure 27 Switch Setup ......................................................................................... 59
Figure 28 IP Setup .................................................................................................61
Figure 29 Port Setup ............................................................................................. 63
Figure 30 Port VLAN Trunking ............................................................................... 67
Figure 31 Switch Setup: Select VLAN Type .......................................................... 68
Figure 32 VLAN: VLAN Status .............................................................................. 68
Figure 33 VLAN: Static VLAN ...............................................................................70
Figure 34 VLAN: VLAN Port Setting ...................................................................... 71
Figure 35 Port Based VLAN Setup (All Connected) .............................................. 73
Figure 36 Port Based VLAN Setup (Port Isolation) ...............................................74
Figure 37 Static MAC Forwarding .......................................................................... 77
Figure 38 Filtering .................................................................................................. 79
List of Figures 15
ES-2024A User’s Guide
Figure 39 Spanning Tree Protocol: Status ............................................................. 83
Figure 40 Spanning Tree Protocol: Configuration ..................................................84
Figure 41 Bandwidth Control .................................................................................87
Figure 42 Broadcast Storm Control ....................................................................... 89
Figure 43 Mirroring ................................................................................................ 91
Figure 44 Link Aggregation Control Protocol Status ............................................. 94
Figure 45 Link Aggregation: Configuration ............................................................ 96
Figure 46 RADIUS Server .................................................................................... 99
Figure 47 Port Authentication ................................................................................100
Figure 48 Port Authentication: 802.1x ...................................................................100
Figure 49 Port Authentication: RADIUS ................................................................101
Figure 50 Port Security .......................................................................................... 103
Figure 51 Queuing Method .................................................................................... 106
Figure 52 Static Routing ........................................................................................ 107
Figure 53 DiffServ: Differentiated Service Field .....................................................109
Figure 54 DiffServ Network Example ..................................................................... 110
Figure 55 DiffServ .................................................................................................. 110
Figure 56 DiffServ: DSCP Setting .......................................................................... 111
Figure 57 Maintenance ......................................................................................... 113
Figure 58 Firmware Upgrade ................................................................................ 114
Figure 59 Restore Configuration .......................................................................... 114
Figure 60 Backup Configuration ............................................................................115
Figure 61 Load Factory Default: Conformation .....................................................115
Figure 62 Load Factory Default: Start .................................................................... 116
Figure 63 Reboot System: Confirmation ............................................................... 116
Figure 64 Reboot System: Start ............................................................................116
Figure 65 Console Port Priority ............................................................................. 119
Figure 66 Access Control ...................................................................................... 119
Figure 67 SNMP Management Model .................................................................. 120
Figure 68 Access Control: SNMP .......................................................................... 122
Figure 69 Access Control: Logins ..........................................................................123
Figure 70 SSH Communication Example ............................................................... 124
Figure 71 How SSH Works ..................................................................................... 124
Figure 72 SSH Login Example .............................................................................. 126
Figure 73 HTTPS Implementation ..........................................................................127
Figure 74 Security Alert Dialog Box (Internet Explorer) .......................................... 128
Figure 75 Security Certificate 1 (Netscape) ............................................................ 128
Figure 76 Security Certificate 2 (Netscape) ............................................................ 129
Figure 77 Login Screen (Internet Explorer) ............................................................ 130
Figure 78 Login Screen (Netscape) ........................................................................130
Figure 79 Access Control: Service Access Control ...............................................131
Figure 80 Access Control: Remote Management .................................................. 132
Figure 81 Diagnostic ..............................................................................................133
16 List of Figures
ES-2024A User’s Guide
Figure 82 Clustering Application Example ............................................................. 135
Figure 83 Cluster Management: Status .................................................................136
Figure 84 Cluster Management: Cluster Member Web Configurator Screen ........ 137
Figure 85 Example: Uploading Firmware to a Cluster Member Switch ................. 138
Figure 86 Clustering Management Configuration .................................................139
Figure 87 MAC Table Flowchart ............................................................................ 141
Figure 88 MAC Table .............................................................................................142
Figure 89 ARP Table ............................................................................................. 144
Figure 90 Initial Console Port Screen ..................................................................... 146
Figure 91 SSH Login Example .............................................................................. 147
Figure 92 CLI Login .............................................................................................. 147
Figure 93 CLI Help: List of Commands: Example 1 ..............................................149
Figure 94 CLI Help: List of Commands: Example 2 ..............................................149
Figure 95 CLI Help: Detailed Command Information: Example 1 .......................... 150
Figure 96 CLI: Help: Detailed Command Information: Example 2 ......................... 150
Figure 97 CLI: History Command Example ........................................................... 151
Figure 98 CLI: write memory ................................................................................. 151
Figure 99 show system-information Command Example ...................................... 167
Figure 100 show ip Command Example ................................................................ 168
Figure 101 show logging Command Example ....................................................... 168
Figure 102 show interface Command Example ..................................................... 169
Figure 103 show mac address-table Command Example .....................................170
Figure 104 ping Command Example .....................................................................170
Figure 105 traceroute Command Example ............................................................ 171
Figure 106 Enable RSTP Command Example ...................................................... 171
Figure 107 CLI: boot config Command Example ................................................... 172
Figure 108 CLI: reload config Command Example ................................................ 172
Figure 109 CLI: Reset to the Factory Default Example ......................................... 172
Figure 110 no mirror-port Command Example ......................................................173
Figure 111 no https timeout Command Example ................................................... 173
Figure 112 no trunk Command Example ............................................................... 174
Figure 113 no port-access-authenticator Command Example ............................... 174
Figure 114 no ssh Command Example ..................................................................175
Figure 115 spq Command Example ...................................................................... 175
Figure 116 wrr Command Example ....................................................................... 176
Figure 117 interface Command Example .............................................................. 176
Figure 118 broadcast-limit Command Example ..................................................... 177
Figure 119 bandwidth-limit Command Example .................................................... 177
Figure 120 mirror Command Example .................................................................. 178
Figure 121 gvrp Command Example ..................................................................... 179
Figure 122 frame-type Command Example ........................................................... 179
Figure 123 egress set Command Example ........................................................... 180
Figure 124 qos priority Command Example .......................................................... 180
List of Figures 17
ES-2024A User’s Guide
Figure 125 name Command Example ................................................................... 181
Figure 126 speed-duplex Command Example ...................................................... 181
Figure 127 Tagged VLAN Configuration and Activation Example ......................... 184
Figure 128 CPU VLAN Configuration and Activation Example .............................185
Figure 129 GARP STATUS Command Example ................................................... 185
Figure 130 GARP Timer Command Example ......................................................... 186
Figure 131 GVRP Status Command Example ....................................................... 186
Figure 132 ingress-check Command Example ...................................................... 187
Figure 133 vlan1q port default vid Command Example ......................................... 188
Figure 134 frame type Command Example ........................................................... 188
Figure 135 no gvrp Command Example ................................................................ 188
Figure 136 Modifying Static VLAN Example .......................................................... 189
Figure 137 no vlan Command Example ................................................................ 190
Figure 138 show vlan Command Example ............................................................ 191
Figure 139 Pop-up Blocker ..................................................................................... 194
Figure 140 Internet Options ................................................................................... 195
Figure 141 Internet Options .................................................................................... 196
Figure 142 Pop-up Blocker Settings ....................................................................... 197
Figure 143 Internet Options .................................................................................... 198
Figure 144 Security Settings - Java Scripting .........................................................199
Figure 145 Security Settings - Java ........................................................................ 200
Figure 146 Java (Sun) ............................................................................................ 201
18 List of Figures
ES-2024A User’s Guide

List of Tables

Table 1 Front Panel ............................................................................................... 33
Table 2 Front Panel LEDs ...................................................................................... 37
Table 3 Navigation Panel Sub-links Overview ....................................................... 41
Table 4 Web Configurator Screen Sub-links Details .............................................. 41
Table 5 Navigation Panel Links ............................................................................. 42
Table 6 Status ........................................................................................................52
Table 7 Status: Port Details ....................................................................................53
Table 8 System Info ............................................................................................... 55
Table 9 General Setup ........................................................................................... 56
Table 10 Switch Setup ........................................................................................... 59
Table 11 IP Setup ................................................................................................... 61
Table 12 Port Setup ............................................................................................... 63
Table 13 IEEE 802.1q Terminology ....................................................................... 66
Table 14 VLAN: VLAN Status ................................................................................ 69
Table 15 VLAN: Static VLAN ................................................................................. 70
Table 16 VLAN: VLAN Port Setting ....................................................................... 71
Table 17 Port Based VLAN Setup ......................................................................... 75
Table 18 Static MAC Forwarding ........................................................................... 78
Table 19 FIltering ................................................................................................... 79
Table 20 STP Path Costs ...................................................................................... 81
Table 21 STP Port States ...................................................................................... 82
Table 22 Spanning Tree Protocol: Status ............................................................... 83
Table 23 Spanning Tree Protocol: Configuration ................................................... 84
Table 24 Bandwidth Control ................................................................................... 87
Table 25 Broadcast Storm Control .........................................................................90
Table 26 Mirroring ..................................................................................................92
Table 27 Link Aggregation ID: Local Switch ..........................................................94
Table 28 Link Aggregation ID: Peer Switch ...........................................................94
Table 29 Link Aggregation Control Protocol Status ...............................................95
Table 30 Link Aggregation Control Protocol: Configuration ...................................96
Table 31 Port Authentication: 802.1x ..................................................................... 100
Table 32 Port Authentication: RADIUS .................................................................. 101
Table 33 Port Security ...........................................................................................104
Table 34 Physical Queue Priority ........................................................................... 105
Table 35 Queuing Method ..................................................................................... 106
Table 36 Static Routing .......................................................................................... 107
Table 37 DiffServ ................................................................................................... 110
Table 38 Default DSCP-IEEE802.1p Mapping ...................................................... 111
List of Tables 19
ES-2024A User’s Guide
Table 39 DiffServ: DSCP Setting ........................................................................... 112
Table 40 Maintenance ........................................................................................... 113
Table 41 Filename Conventions ............................................................................117
Table 42 Access Control Overview ........................................................................ 119
Table 43 SNMP Commands ..................................................................................120
Table 44 SNMP Traps ............................................................................................ 121
Table 45 Access Control: SNMP ........................................................................... 122
Table 46 Access Control: Logins ...........................................................................123
Table 47 Access Control: Service Access Control ................................................. 131
Table 48 Access Control: Remote Management ................................................... 132
Table 49 Diagnostic ............................................................................................... 133
Table 50 ZyXEL Clustering Management Specifications .......................................135
Table 51 Cluster Management: Status ................................................................... 136
Table 52 FTP Upload to Cluster Member Example ............................................... 138
Table 53 Clustering Management Configuration ...................................................139
Table 54 MAC Table ..............................................................................................142
Table 55 ARP Table ............................................................................................... 144
Table 56 Command Summary: User Mode .......................................................... 152
Table 57 Command Summary: Enable Mode ........................................................ 152
Table 58 Command Summary: Configuration Mode .............................................. 155
Table 59 interface port-channel Commands .......................................................... 162
Table 60 Command Summary: config-vlan Commands ........................................ 164
Table 61 Troubleshooting the Start-Up of Your Switch .......................................... 193
Table 62 Troubleshooting Accessing the Switch ................................................... 193
Table 63 Troubleshooting the Password ................................................................ 201
Table 64 General Product Specifications ...............................................................203
Table 65 Management Specifications .................................................................... 204
Table 66 Physical and Environmental Specifications ............................................. 204
Table 67 Classes of IP Addresses ......................................................................... 207
Table 68 Allowed IP Address Range By Class ...................................................... 208
Table 69 “Natural” Masks ...................................................................................... 208
Table 70 Alternative Subnet Mask Notation ........................................................... 209
Table 71 Two Subnets Example ............................................................................ 209
Table 72 Subnet 1 .................................................................................................. 210
Table 73 Subnet 2 .................................................................................................. 210
Table 74 Subnet 1 .................................................................................................. 211
Table 75 Subnet 2 .................................................................................................. 211
Table 76 Subnet 3 .................................................................................................. 211
Table 77 Subnet 4 .................................................................................................. 212
Table 78 Eight Subnets .......................................................................................... 212
Table 79 Class C Subnet Planning ........................................................................ 212
Table 80 Class B Subnet Planning ........................................................................213
20 List of Tables
ES-2024A User’s Guide

Preface

Congratulations on your purchase of the ES-2024A Ethernet Switch.
This preface introduces you to the ES-2024A Ethernet Switch and discusses the conventions of this User’s Guide. It also provides information on other related documentation.
Note: Register your product online to receive e-mail notices of firmware
upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.
About This User's Guide
This manual is designed to guide you through the installation and configuration of your ES-2024A for its various applications.
Related Documentation
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary information.
• ZyXEL Glossary and Web Site
Please refer to www.zyxel.com for an online glossary of networking terms and additional support documentation.
Syntax Conventions
• “Enter” means for you to type one or more characters. “Select” or “Choose” means for you to use one of the predefined choices.
• Command and arrow keys are enclosed in square brackets. carriage return key;
• Mouse action sequences are denoted using a comma. For example, “click the Apple icon, Control Panels and then Modem” means first click the Apple icon, then point your mouse pointer to Control Panels and then click Modem.
• For brevity’s sake, we will use “e.g.,” as a shorthand for “for instance”, and “i.e.,” for “that is” or “in other words” throughout this manual.
• The ES-2024A Ethernet Switch may be referred to as “the ES-2024A” or “the switch” in this User’s Guide.
[ESC] means the Escape key and [SPACE BAR] means the Space Bar.
[ENTER] means the Enter, or
Preface 21
ES-2024A User’s Guide
Graphics Icons Key
ES-2024A Computer Server
Computer DSLAM Gateway
Central Office/ ISP Internet Hub/Switch
User Guide Feedback
Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.
22 Preface

Getting to Know Your Switch

This chapter introduces the main features and applications of the switch.

1.1 Introduction

The ES-2024A is a stand-alone layer-2 Ethernet switch with 24 10/100Mbps ports and two Gigabit Ethernet/mini-GBIC ports.
With its built-in web configurator, managing and configuring the switch is easy. In addition, the switch can also be managed via Telnet, SSH (Secure SHell), any terminal emulator program on the console port, or third-party SNMP management.
ES-2024A User’s Guide
CHAPTER 1

1.2 Software Features

This section describes the general software features of the switch.
DHCP Client
DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server. You can configure the switch as a DHCP client to obtain TCP/IP information (such as the IP address and subnet mask) from a DHCP server. If you disable the DHCP service, you must manually enter the TCP/IP information.
VLAN
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same group(s); the traffic must first go through a router.
Differentiated Services (DiffServ)
With DiffServ, the switch marks packets so that they receive specific per-hop treatment at DiffServ-compliant network devices along the route based on the application types and traffic flow.
Chapter 1 Getting to Know Your Switch 23
ES-2024A User’s Guide
Queuing
Queuing is used to help solve performance degradation when there is network congestion. Two scheduling services are supported: Strict Priority Queuing (SPQ) and Weighted Round Robin (WRR). This allows the switch to maintain separate queues for packets from each individual source or flow and prevent a source from monopolizing the bandwidth.
Port Mirroring
Port mirroring allows you to copy traffic going from one or all ports to another or all ports in order that you can examine the traffic from the mirror port (the port you copy the traffic to) without interference.
Static Route
Static routes tell the switch how to forward IP traffic when you configure the TCP/IP parameters manually.
IGMP Snooping
The switch supports IGMP snooping enabling group multicast traffic to be only forwarded to ports that are members of that group; thus allowing you to significantly reduce multicast traffic passing through your switch.
STP (Spanning Tree Protocol) / RSTP (Rapid STP)
(R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network.
Link Aggregation
Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.
Port Authentication and Security
For security, the switch allows authentication using IEEE 802.1x with an external RADIUS server and port security that allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch.
Maintenance and Management Features
• Access Control
You can specify the service(s) and computer IP address(es) to control access to the switch for management.
• Cluster Management
24 Chapter 1 Getting to Know Your Switch
Cluster management (also known as iStacking) allows you to manage switches through one switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another.
• Configuration and Firmware Maintenance
You can backup or restore the switch configuration or upgrade the firmware on the switch.

1.3 Hardware Features

This section describes the ports on the switch.
Ethernet Ports
The ports allow the switch to connect to another Ethernet devices.
Gigabit Ethernet Ports
ES-2024A User’s Guide
The ports allow the switch to connect to another WAN switch or daisy-chain to other switches.
Mini-GBIC Slots
Install SPF transceivers in these slots to connect to other Ethernet switches at longer distances than the Ethernet port.
Console Port
Use the console port for local management of the switch.

1.4 Applications

This section shows a few examples of using the switch in various network environments.

1.4.1 Backbone Application

In this application, the switch is an ideal solution for small networks where rapid growth can be expected in the near future.
The switch can be used standalone for a group of heavy traffic users. You can connect computers directly to the switch’s port or connect other switches to the switch.
In this example, all computers can share high-speed applications on the server. To expand the network, simply add more networking devices such as switches, routers, computers, print servers etc.
Chapter 1 Getting to Know Your Switch 25
ES-2024A User’s Guide
Figure 1 Backbone Application

1.4.2 Bridging Example

In this example application the switch connects different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server
and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the switch. You can provide a super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the switch.
Moreover, the switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location.
Figure 2 Bridging Application

1.4.3 High Performance Switched Example

The switch is ideal for connecting two networks that need high bandwidth. In the following example, use trunking to connect these two networks.
26 Chapter 1 Getting to Know Your Switch
ES-2024A User’s Guide
Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance. The switch can provide the same bandwidth as ATM at much lower cost while still being able to use existing adapters and switches. Moreover, the current LAN structure can be retained as all ports can freely communicate with each other.
Figure 3 High Performance Switched Application

1.4.4 IEEE 802.1Q VLAN Application Examples

This section shows a workgroup and a shared server example using 802.1Q tagged VLANs.
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network belong to one group. A station can belong to more than one group. With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s) unless such traffic first goes through a router.
For more information on VLANs, refer to Chapter 8, “VLAN,” on page 65.
1.4.4.1 Tag-based VLAN Example
Ports in the same VLAN group share the same frame broadcast domain thus increase network performance through reduced broadcast traffic. VLAN groups can be modified at any time by adding, moving or changing ports without any re-cabling.
Chapter 1 Getting to Know Your Switch 27
ES-2024A User’s Guide
Figure 4 Tag-based VLAN Application
1.4.4.2 VLAN Shared Server Example
Shared resources such as a server can be used by all ports in the same VLAN as the server, as shown in the following example. In this example, only ports that need access to the server need belong to VLAN 1. Ports can belong to other VLAN groups too.
Figure 5 Shared Server Using VLAN Example
28 Chapter 1 Getting to Know Your Switch
Hardware Installation and
This chapter shows you how to install and connect the switch.

2.1 Freestanding Installation

1 Make sure the switch is clean and dry.
2 Set the switch on a smooth, level surface strong enough to support the weight of the
switch and the connected cables. Make sure there is a power outlet nearby.
3 Make sure there is enough clearance around the switch to allow air circulation and the
attachment of cables and the power cord.
ES-2024A User’s Guide
CHAPTER 2
Connection
4 Remove the adhesive backing from the rubber feet.
5 Attach the rubber feet to each corner on the bottom of the switch. These rubber feet help
protect the switch from shock or vibration and ensure space between devices when stacking.
Figure 6 Attaching Rubber Feet
Note: Do NOT block the ventilation holes. Leave space between devices when
stacking.
For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front and 3.4 inches (8 cm) at the back of the switch. This is especially important for enclosed rack installations.
Chapter 2 Hardware Installation and Connection 29
Loading...
+ 191 hidden pages