This manual is intended for people who want to configure the ES-2024 using the web
configurator. You should have at least a basic knowledge of TCP/IP networking concepts and
topology.
Related Documentation
•Quick Start Guide
The Quick Start Guide contains information on setting up your hardware.
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
• CLI Reference Guide
The CLI Reference Guide is intended for people who want to configure the ES2024 via commands.
Note: It is recommended you use the web configurator to configure the Switch.
•Support Disc
Refer to the included CD for support documents.
•ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and
product certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: techwriters@zyxel.com.tw
ES-2024 Series User’s Guide
3
Page 4
Customer SupportAbout This User's Guide
In the event of problems that cannot be solved by using this manual, you should contact
your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in
which you bought the device. Regional offices are listed below (see also http://
www.zyxel.com/web/contact_us.php). Please have the following information ready when
you contact an office.
Required Information
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
“+” is the (prefix) number you dial to make an international telephone call.
Corporate Headquarters (Worldwide)
• Support E-mail: support@zyxel.com.tw
• Sales E-mail: sales@zyxel.com.tw
• Telephone: +886-3-578-3942
• Fax: +886-3-578-2439
• Web: www.zyxel.com, www.europe.zyxel.com
• Regular Mail: ZyXEL Communications Corp., 6 Innovation Road II, Science Park, Hsinchu
300, Taiwan
• Address: 1005F, ShengGao International Tower, No.137 XianXia Rd., Shanghai
• Web: http://www.zyxel.cn
4
ES-2024 Series User’s Guide
Page 5
Customer SupportDocument Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ES-2024A and ES-2024PWR may be referred to as the “ES-2024”, “Switch”, the
“device”, the “system” or the “product” in this User’s Guide. Differentiation is made
where needed.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• Command keywords are in courier new font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the
navigation panel, then the Log sub menu and finally the Log Setting tab to get to that
screen.
• An arrow (-->) indicates that this line is a continuation of the previous line.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
ES-2024 Series User’s Guide
5
Page 6
Customer SupportDocument Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The Switch icon is not an
exact representation of your device.
SwitchComputerNotebook computer
ServerDSLAMFirewall
Tele p ho n eSwitchRouter
6
ES-2024 Series User’s Guide
Page 7
Customer SupportSafety Warnings
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• ONLY qualified service personnel should service or disassemble this device.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED BY AN
INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE INSTRUCTIONS.
Dispose them at the applicable collection point for the recycling of electrical and
electronic equipment. For detailed information about recycling of this product, please
contact your local city office, your household waste disposal service or the store where
you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• This product is recyclable. Dispose of it properly.
This chapter introduces the main features and applications of the Switch.
1.1 Introduction
The Switch is a stand-alone layer-2 Ethernet switch with 24 10/100Mbps ports and
two Gigabit Ethernet/mini-GBIC ports. The ES-2024PWR comes with the Powerover-Ethernet (PoE) feature.
With its built-in web configurator, managing and configuring the Switch is easy. In
addition, the Switch can also be managed via Telnet, SSH (Secure SHell), any
terminal emulator program on the console port, or third-party SNMP
management.
See Appendix A on page 279 for a full list of software features available on the
Switch.
1.1.1 Backbone Application
The Switch is an ideal solution for small networks where rapid growth can be
expected in the near future. The Switch can be used standalone for a group of
heavy traffic users. You can connect computers and servers directly to the
Switch’s port or connect other switches to the Switch.
ES-2024 Series User’s Guide
23
Page 24
Chapter 1 Getting to Know Your Switch
In this example, all computers can share high-speed applications on the server. To
expand the network, simply add more networking devices such as switches,
routers, computers, print servers etc.
Figure 1 Backbone Application
1.1.2 Bridging Example
In this example application the Switch connects different company departments
(RD and Sales) to the corporate backbone. It can alleviate bandwidth contention
and eliminate server and network bottlenecks. All users that need high bandwidth
can connect to high-speed department servers via the Switch. You can provide a
super-fast uplink connection by using a Gigabit Ethernet/mini-GBIC port on the
Switch.
Moreover, the Switch eases supervision and maintenance by allowing network
managers to centralize multiple servers at a single location.
Figure 2 Bridging Application
24
ES-2024 Series User’s Guide
Page 25
Chapter 1 Getting to Know Your Switch
1.1.3 High Performance Switching Example
The Switch is ideal for connecting two networks that need high bandwidth. In the
following example, use trunking to connect these two networks.
Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode)
is not feasible for most people due to the expense of replacing all existing
Ethernet cables and adapter cards, restructuring your network and complex
maintenance. The Switch can provide the same bandwidth as ATM at much lower
cost while still being able to use existing adapters and switches. Moreover, the
current LAN structure can be retained as all ports can freely communicate with
each other.
Figure 3 High Performance Switched Workgroup Application
1.1.4 IEEE 802.1Q VLAN Application Examples
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Stations on a logical network belong to one group.
A station can belong to more than one group. With VLAN, a station cannot directly
talk to or hear from stations that are not in the same group(s) unless such traffic
first goes through a router.
For more information on VLANs, refer to Chapter 9 on page 91.
Ports in the same VLAN group share the same frame broadcast domain thus
increase network performance through reduced broadcast traffic. VLAN groups
can be modified at any time by adding, moving or changing ports without any recabling.
ES-2024 Series User’s Guide
25
Page 26
Chapter 1 Getting to Know Your Switch
Shared resources such as a server can be used by all ports in the same VLAN as
the server. In the following figure only ports that need access to the server need
to be part of VLAN 1. Ports can belong to other VLAN groups too.
Figure 4 Shared Server Using VLAN Example
1.2 Ways to Manage the Switch
Use any of the following methods to manage the Switch.
• Web Configurator. This is recommended for everyday management of the Switch
using a (supported) web browser. See Chapter 4 on page 41.
• Command Line Interface. Line commands offer an alternative to the Web
Configurator and may be necessary to configure advanced features. See the CLI
Reference Guide.
• FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/
restore. See Section 28.8 on page 229.
• SNMP. The device can be monitored and/or managed by an SNMP manager. See
Section 29.3 on page 234.
1.3 Good Habits for Managing the Switch
Do the following things regularly to make the Switch more secure and to manage
the Switch more effectively.
26
• Change the password. Use a password that’s not easy to guess and that consists
of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
ES-2024 Series User’s Guide
Page 27
Chapter 1 Getting to Know Your Switch
• Back up the configuration (and make sure you know how to restore it).
Restoring an earlier working configuration may be useful if the device becomes
unstable or even crashes. If you forget your password, you will have to reset the
Switch to its factory default settings. If you backed up an earlier configuration
file, you would not have to totally re-configure the Switch. You could simply
restore your last configuration.
ES-2024 Series User’s Guide
27
Page 28
Chapter 1 Getting to Know Your Switch
28
ES-2024 Series User’s Guide
Page 29
CHAPTER 2
Hardware Installation and
Connection
This chapter shows you how to install and connect the Switch.
2.1 Freestanding Installation
1Make sure the Switch is clean and dry.
2Set the Switch on a smooth, level surface strong enough to support the weight of
the Switch and the connected cables. Make sure there is a power outlet nearby.
3Make sure there is enough clearance around the Switch to allow air circulation and
the attachment of cables and the power cord.
4Remove the adhesive backing from the rubber feet.
5Attach the rubber feet to each corner on the bottom of the Switch. These rubber
feet help protect the Switch from shock or vibration and ensure space between
devices when stacking.
Figure 5 Attaching Rubber Feet
ES-2024 Series User’s Guide
29
Page 30
Chapter 2 Hardware Installation and Connection
Note: Do NOT block the ventilation holes. Leave space between devices when
stacking.
For proper ventilation, allow at least 4 inches (10 cm) of clearance at the front
and 3.4 inches (8 cm) at the back of the Switch. This is especially important for
enclosed rack installations.
2.2 Mounting the Switch on a Rack
This section lists the rack mounting requirements and precautions and describes
the installation steps.
2.2.1 Rack-mounted Installation Requirements
• Two mounting brackets.
• Eight M3 flat head screws and a #2 Philips screwdriver.
• Four M5 flat head screws and a #2 Philips screwdriver.
Note: Failure to use the proper screws may damage the unit.
2.2.1.1 Precautions
• Make sure the rack will safely support the combined weight of all the equipment
it contains.
• Make sure the position of the Switch does not make the rack unstable or topheavy. Take all necessary precautions to anchor the rack securely before
installing the unit.
2.2.2 Attaching the Mounting Brackets to the Switch
1Position a mounting bracket on one side of the Switch, lining up the four screw
holes on the bracket with the screw holes on the side of the Switch.
Figure 6 Attaching the Mounting Brackets
30
ES-2024 Series User’s Guide
Page 31
Chapter 2 Hardware Installation and Connection
2Using a #2 Philips screwdriver, install the M3 flat head screws through the
mounting bracket holes into the Switch.
3Repeat steps 1 and 2 to install the second mounting bracket on the other side of
the Switch.
4You may now mount the Switch on a rack. Proceed to the next section.
2.2.3 Mounting the Switch on a Rack
1Position a mounting bracket (that is already attached to the Switch) on one side of
the rack, lining up the two screw holes on the bracket with the screw holes on the
side of the rack.
Figure 7 Mounting the Switch on a Rack
2Using a #2 Philips screwdriver, install the M5 flat head screws through the
mounting bracket holes into the rack.
3Repeat steps 1 and 2 to attach the second mounting bracket on the other side of
the rack.
ES-2024 Series User’s Guide
31
Page 32
Chapter 2 Hardware Installation and Connection
32
ES-2024 Series User’s Guide
Page 33
CHAPTER 3
Hardware Overview
This chapter describes the front panel and rear panel of the Switch and shows you
how to make the hardware connections.
3.1 Front Panel Connection
The figure below shows the front panel of the Switch.
Figure 8 Front Panel: ES-2024A
Console Port
10/100 Mbps Ethernet
Figure 9 Front Panel: ES-2024PWR
10/100 Mbps Ethernet
Gigabit
Ethernet/ Mini-
Console Port
Gigabit
Ethernet/ Mini-
ES-2024 Series User’s Guide
33
Page 34
Chapter 3 Hardware Overview
The following table describes the port labels on the front panel.
Table 1 Front Panel
LABELDESCRIPTION
CONSOLE Only connect this port if you want to configure the Switch using the
command line interface (CLI) via the console port.
24 10/100
Mbps RJ-45
Ethernet
Ports
Gigabit
Ethernet/
mini GBIC
ports
Connect these ports to a computer, a hub, an Ethernet switch or router.
Connect these Gigabit Ethernet ports to high-bandwidth backbone network
Ethernet switches or use them to daisy-chain other switches.
Alternatively, use mini-GBIC transceivers in these slots for fiber-optical
connections to backbone Ethernet switches
3.1.1 Console Port
For local management, you can use a computer with terminal emulation software
configured to the following parameters:
• VT100 terminal emulation
• 9600 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
Connect the male 9-pin end of the console cable to the console port of the Switch.
Connect the female end to a serial port (COM1, COM2 or other COM port) of your
computer.
3.1.2 Ethernet Ports
The Switch has 24 10/100-Mbps auto-negotiating, auto-crossover Ethernet ports.
In 10/100 Mbps Fast Ethernet, the speed can be 10 Mbps or 100 Mbps and the
duplex mode can be half duplex or full duplex.
There are two pairs of Gigabit Ethernet/mini-GBIC ports. The mini-GBIC ports
have priority over the Gigabit ports. This means that if a mini-GBIC port and the
corresponding Gigabit port are connected at the same time, the Gigabit port will
be disabled. The speed of the Gigabit Ethernet/mini-GBIC ports can be 100 Mbps
or 1000 Mbps and the duplex mode can be half duplex (at 100 Mbps) or full
duplex.
34
An auto-negotiating port can detect and adjust to the optimum Ethernet speed
(10/100 Mbps) and duplex mode (full duplex or half duplex) of the connected
device.
ES-2024 Series User’s Guide
Page 35
An auto-crossover (auto-MDI/MDI-X) port automatically works with a straightthrough or crossover Ethernet cable.
3.1.2.1 Default Ethernet Settings
The factory default negotiation settings for the Ethernet ports on the Switch are:
• Speed: Auto
•Duplex: Auto
• Flow control: off
3.1.3 Mini-GBIC Slots
These are slots for mini-GBIC (Gigabit Interface Converter) transceivers. A
transceiver is a single unit that houses a transmitter and a receiver. The Switch
does not come with transceivers. You must use transceivers that comply with the
SFP Transceiver MultiSource Agreement (MSA). See the SFF committee’s INF8074i specification Rev 1.0 for details.
Chapter 3 Hardware Overview
There are two pairs of Gigabit Ethernet/mini-GBIC ports. The mini-GBIC ports
have priority over the Gigabit ports. This means that if a mini-GBIC port and the
corresponding Gigabit port are connected at the same time, the Gigabit port will
be disabled.
You can change transceivers while the Switch is operating. You can use different
transceivers to connect to Ethernet switches with different types of fiber-optic
connectors.
• Type: SFP connection interface
• Connection speed: 1 Gigabit per second (Gbps)
Note: To avoid possible eye injury, do not look into an operating fiber-optic module’s
connectors.
3.1.3.1 Transceiver Installation
Use the following steps to install a mini GBIC transceiver (SFP module).
ES-2024 Series User’s Guide
35
Page 36
Chapter 3 Hardware Overview
1Insert the transceiver into the slot with the exposed section of PCB board facing
down.
Figure 10 Transceiver Installation Example
2Press the transceiver firmly until it clicks into place.
3The Switch automatically detects the installed transceiver. Check the LEDs to
verify that it is functioning properly.
Figure 11 Installed Transceiver
3.1.3.2 Transceiver Removal
Use the following steps to remove a mini GBIC transceiver (SFP module).
1Open the transceiver’s latch (latch styles vary).
Figure 12 Opening the Transceiver’s Latch Example
2Pull the transceiver out of the slot.
Figure 13 Transceiver Removal Example
36
ES-2024 Series User’s Guide
Page 37
3.2 Rear Panel
The following figures show the rear panel of the Switch. The power receptacle is
on the rear panel.
Figure 14 AC Rear Panel
Figure 15 DC Rear Panel
3.2.1 Power Connector
Chapter 3 Hardware Overview
Make sure you are using the correct power source as shown on the panel.
To connect the power to the Switch, insert the female end of power cord to the
power receptacle on the rear panel. Connect the other end of the supplied power
cord to the power source.
3.3 LEDs
The LEDs are located on the front panel. The following table describes the LEDs on
the front panel.
Table 2 LEDs
LED
PWRGreenOnThe system is turned on.
SYSGreenBlinkingThe system is rebooting and performing self-diagnostic
ALMRedOnThere is a hardware failure.
Ethernet Ports
COLO
R
STATUSDESCRIPTION
OffThe system is off.
tests.
OnThe system is on and functioning properly.
OffThe power is off or the system is not ready/
malfunctioning.
OffThe system is functioning normally.
ES-2024 Series User’s Guide
37
Page 38
Chapter 3 Hardware Overview
Table 2 LEDs (continued)
LED
LNK/ACT AmberBlinkingThe system is transmitting/receiving to/from a 10/100
FDX/COL
(ES2024A)
POE
(ES2024PWR
)
Gigabit Ports
100/1000 GreenOnThe link to a 1000 Mbps Ethernet network is up.
ACTGreenBlinkingThe port is receiving or transmitting data.
Mini-GBIC Ports
LNK GreenOnThe port has a successful connection.
ACT GreenBlinkingThe port is sending or receiving data.
COLO
R
AmberBlinkingThe Ethernet port is negotiating in half-duplex mode and
AmberOnPower is supplied to the port.
AmberOnThe link to a 100 Mbps Ethernet network is up.
STATUSDESCRIPTION
Mbps Ethernet network.
OnThe link to a 10/100 Mbps Ethernet network is up.
OffThe link to an Ethernet network is down.
collisions are occurring; the more collisions that occur the
faster the LED blinks.
OnThe Ethernet port is negotiating in full-duplex mode.
OffThe Ethernet port is negotiating in half-duplex mode and
no collisions are occurring.
OffPower is not supplied to the port.
OffThe link to an Ethernet network is down.
OnThe port has a connection to an Ethernet network but not
receiving or transmitting data.
OffThe link to an Ethernet network is down.
OffNo Ethernet device is connected to this port.
OffThe port is not sending or receiving data.
38
ES-2024 Series User’s Guide
Page 39
PART II
Basic Configuration
The Web Configurator (41)
Initial Setup Example (53)
Tuto r ial s (5 9 )
System Status and Port Statistics (65)
Basic Setting (71)
39
Page 40
40
Page 41
CHAPTER 4
The Web Configurator
This section introduces the configuration and functions of the web configurator.
4.1 Introduction
The web configurator is an HTML-based management interface that allows easy
Switch setup and management via Internet browser. Use Internet Explorer 6.0
and later or Netscape Navigator 7.0 and later versions. The recommended screen
resolution is 1024 by 768 pixels.
In order to use the web configurator you need to allow:
• Web browser pop-up windows from your device. Web pop-up blocking is enabled
by default in Windows XP SP (Service Pack) 2.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
4.2 System Login
1Start your web browser.
2Type 192.168.1.1 in the Location or Address field. Press [ENTER].
ES-2024 Series User’s Guide
41
Page 42
Chapter 4 The Web Configurator
3The login screen appears. The default username is admin and associated default
password is 1234. The date and time display as shown if you have not configured
a time server nor manually entered a time and date in the General Setup screen.
Figure 16 Web Configurator: Login
4Click OK to view the first web configurator screen.
4.3 The Status Screen
The Status screen is the first screen that displays when you access the web
configurator.
42
ES-2024 Series User’s Guide
Page 43
Chapter 4 The Web Configurator
The following figure shows the navigating components of a web configurator
screen.
Figure 17 Web Configurator Home Screen (Status)
B
C
DE
A
A - Click the menu items to open submenu links, and then click on a submenu link
to open the screen in the main window.
B, C, D, E - These are quick links which allow you to perform certain tasks no
matter which screen you are currently working in.
B - Click this link to save your configuration into the Switch’s nonvolatile memory.
Nonvolatile memory is saved in the configuration file from which the Switch
booted from and it stays the same even if the Switch’s power is turned off. See
Section 28.3 on page 226 for information on saving your settings to a specific
configuration file.
C - Click this link to go to the status page of the Switch.
D - Click this link to logout of the web configurator.
E - Click this link to display web help pages. The help pages provide descriptions
for all of the configuration screens.
ES-2024 Series User’s Guide
43
Page 44
Chapter 4 The Web Configurator
In the navigation panel, click a main link to reveal a list of submenu links.
Table 3 Navigation Panel Sub-links Overview
BASIC SETTING
ADVANCED
APPLICATION
IP APPLICATIONMANAGEMENT
44
ES-2024 Series User’s Guide
Page 45
Chapter 4 The Web Configurator
The following table lists the various web configurator screens within the sub-links.
Table 4 Web Configurator Screen Sub-links Details
BASIC
SETTING
System Info
ADVANCED APPLICATION
VLAN
IP
APPLICATION
Static Routing
MANAGEMENT
Maintenance
General
Setup
Switch
Setup
IP Setup
Port Setup
PoE Setup
VLAN Port Setting
Static VLAN
Static MAC Forwarding
Static Multicast Forwarding
Filtering
Spanning Tree Protocol
Configuration
RSTP
MSTP
Bandwidth Control
Broadcast Storm Control
Mirroring
Link Aggregation
Link Aggregation Setting
Link Aggregation
Control Protocol
Port Authentication
802.1x
Port Security
Queuing Method
DiffServ
DSCP Setting
DHCP
Global Relay
VLAN Setting
Firmware Upgrade
Restore
Configuration
Backup
Configuration
Load Factory Default
Save Configuration
Reboot System
RADIUS Server Setup
TACACS+ Server Setup
AAA Setup
IP Source Guard
Static Binding
ARP Inspection
Status
LogStatus
Configure
Port
VLAN
Loop Guard
ARP Table
Configure Clone
45
Page 46
Chapter 4 The Web Configurator
The following table describes the links in the navigation panel.
Table 5 Navigation Panel Links
LINKDESCRIPTION
Basic Settings
System InfoThis link takes you to a screen that displays general system and
hardware monitoring information.
General SetupThis link takes you to a screen where you can configure general
identification information about the Switch.
Switch SetupThis link takes you to a screen where you can set up global Switch
parameters such as VLAN type, MAC address learning, GARP and priority
queues.
IP SetupThis link takes you to a screen where you can configure the IP address,
subnet mask (necessary for Switch management) and DNS (domain
name server) and set up IP routing domains.
Port SetupThis link takes you to screens where you can configure settings for
individual Switch ports.
PoE SetupThis link take you to a screen where you can set priorities so that the
Switch is able to reserve and allocate power to certain PDs.
Advanced Application
VLANThis link takes you to screens where you can configure port-based or
802.1Q VLAN (depending on what you configured in the Switch Setup
menu).
Static MAC
Forwarding
Static
Multicast
Forwarding
FilteringThis link takes you to a screen to set up filtering rules.
Spanning Tree
Protocol
Bandwidth
Control
Broadcast
Storm Control
MirroringThis link takes you to screens where you can copy traffic from one port
Link
Aggregation
Port
Authentication
Port SecurityThis link takes you to a screen where you can activate MAC address
Queuing
Method
This link takes you to screens where you can configure static MAC
addresses for a port. These static MAC addresses do not age out.
This link takes you to a screen where you can configure static multicast
MAC addresses for port(s). These static multicast MAC addresses do not
age out.
This link takes you to screens where you can configure the RSTP/MSTP
to prevent network loops.
This link takes you to screens where you can cap the maximum
bandwidth allowed from specified source(s) to specified destination(s).
This link takes you to a screen to set up broadcast filters.
or ports to another port in order that you can examine the traffic from
the first port without interference
This link takes you to a screen where you can logically aggregate
physical links to form one logical, higher-bandwidth link.
This link takes you to a screen where you can configure IEEE 802.1x port
authentication.
learning and set the maximum number of MAC addresses to learn on a
port.
This link takes you to a screen where you can configure queuing with
associated queue weights.
46
ES-2024 Series User’s Guide
Page 47
Chapter 4 The Web Configurator
Table 5 Navigation Panel Links (continued)
LINKDESCRIPTION
MulticastThis link takes you to a screen where you can configure various multicast
features and create multicast VLANs.
AAAThis link takes you to a screen where you can configure authentication
and accounting services via external servers. The external servers can
be either RADIUS (Remote Authentication Dial-In User Service) or
TACACS+ (Terminal Access Controller Access-Control System Plus).
IP Source
Guard
Loop GuardThis link takes you to a screen where you can configure protection
IP Application
Static RouteThis link takes you to screens where you can configure static routes. A
DiffServThis link takes you to screens where you can enable DiffServ and set
DHCPThis link takes you to a screen where you can configure the DHCP
Management
MaintenanceThis link takes you to screens where you can perform firmware and
Access ControlThis link takes you to screens where you can change the system login
DiagnosticThis link takes you to screens where you can view system logs and test
SyslogThis link takes you to screens where you can setup system logs and a
Cluster
Management
MAC TableThis link takes you to a screen where you can view the MAC addresses
ARP TableThis link takes you to a screen where you can view the MAC addresses –
Configure
Clone
This link takes you to a screen where you can configure filtering of
unauthorized ARP packets in your network.
against network loops that occur on the edge of your network.
static route defines how the Switch should forward traffic by configuring
the TCP/IP parameters manually.
DSCP-to-IEEE802.1p mappings.
settings.
configuration file maintenance as well as reboot the system.
password and configure SNMP and remote management.
port(s).
system log server.
This link takes you to a screen where you can configure clustering
management and view its status.
(and types) of devices attached to what ports and VLAN IDs.
IP address resolution table.
This link takes you to a screen where you can copy attributes of one port
to other ports.
ES-2024 Series User’s Guide
47
Page 48
Chapter 4 The Web Configurator
4.3.1 Change Your Password
After you log in for the first time, it is recommended you change the default
administrator password. Click Management > Access Control > Logins to
display the next screen.
Figure 18 Change Administrator Login Password
4.4 Saving Your Configuration
When you are done modifying the settings in a screen, click Apply to save your
changes back to the run-time memory. Settings in the run-time memory are lost
when the Switch’s power is turned off.
Click the Save link in the upper right hand corner of the web configurator to save
your configuration to nonvolatile memory. Nonvolatile memory refers to the
Switch’s storage that remains even if the Switch’s power is turned off.
Note: Use the Save link when you are done with a configuration session.
4.5 Switch Lockout
You could block yourself (and all others) from using in-band-management
(managing through the data ports) if you do one of the following:
1Delete the management VLAN (default is VLAN 1).
48
ES-2024 Series User’s Guide
Page 49
2Delete all port-based VLANs with the CPU port as a member. The “CPU port” is the
management port of the Switch.
3Filter all traffic to the CPU port.
4Disable all ports.
5Misconfigure the text configuration file.
6Forget the password and/or IP address.
7Prevent all services from accessing the Switch.
8Change a service port number but forget it.
Note: Be careful not to lock yourself and others out of the Switch.
4.6 Resetting the Switch
Chapter 4 The Web Configurator
If you lock yourself (and others) from the Switch or forget the administrator
password, you will need to reload the factory-default configuration file or reset the
Switch back to the factory defaults.
4.6.1 Reload the Configuration File
Uploading the factory-default configuration file replaces the current configuration
file with the factory-default configuration file. This means that you will lose all
previous configurations and the speed of the console port will be reset to the
default of 9600 bps with 8 data bits, no parity, one stop bit and flow control set to
none. The password will also be reset to “1234” and the IP address to
192.168.1.1.
To upload the configuration file, do the following:
1Connect to the console port using a computer with terminal emulation software.
See Section 3.1.1 on page 34 for details.
2Disconnect and reconnect the Switch’s power to begin a session. When you
reconnect the Switch’s power, you will see the initial screen.
3When you see the message “Press any key to enter Debug Mode within 3
seconds ...” press any key to enter debug mode.
4Type atlc after the “Enter Debug Mode” message.
ES-2024 Series User’s Guide
49
Page 50
Chapter 4 The Web Configurator
5Wait for the “Starting XMODEM upload” message before activating XMODEM
upload on your terminal.
6After a configuration file upload, type atgo to restart the Switch.
An example is shown below.
Figure 19 Resetting the Switch: Via the Console Port
The Switch is now reinitialized with a default configuration file including the default
password of “1234”.
4.7 Logging Out of the Web Configurator
Click Logout in a screen to exit the web configurator. You have to log in with your
password again after you log out. This is recommended after you finish a
management session for security reasons.
Figure 20 Web Configurator: Logout Screen
50
ES-2024 Series User’s Guide
Page 51
4.8 Help
The web configurator’s online help has descriptions of individual screens and some
supplementary information.
Click the Help link from a web configurator screen to view an online help
description of that screen.
Chapter 4 The Web Configurator
ES-2024 Series User’s Guide
51
Page 52
Chapter 4 The Web Configurator
52
ES-2024 Series User’s Guide
Page 53
CHAPTER 5
Initial Setup Example
This chapter shows how to set up the Switch for an example network.
5.1 Overview
The following lists the configuration steps for the initial setup:
• Create a VLAN
• Set port VLAN ID
• Configure the Switch IP management address
Before you begin, you should log in to the web configurator.
1Connect your computer to any Ethernet port on the Switch. Make sure your
computer is in the same subnet as the Switch.
2Open your web browser and enter 192.168.1.1 (the default IP address) in the
address bar to access the web configurator.
See Section 4.2 on page 41 for more information.
5.1.1 Creating a VLAN
VLANs confine broadcast frames to the VLAN group in which the port(s) belongs.
You can do this with port-based VLAN or tagged static VLAN with fixed port
members.
ES-2024 Series User’s Guide
53
Page 54
Chapter 5 Initial Setup Example
In this example, you want to configure port 10 as a member of VLAN 2.
Figure 21 Initial Setup Network Example: VLAN
1Click Advanced Application
and VLAN in the navigation
panel and click the Static VLAN link.
2In the Static VLAN screen,
select ACTIVE, enter a
descriptive name in the Name
field and enter 2 in the VLAN Group ID field for the VLAN2
network.
Note: The VLAN Group ID field in this screen and the VID field in the IP Setup
screen refer to the same VLAN ID.
3Since the VLAN2 network is connected to port 10 on the Switch, select Fixed to
configure port 10 to be a permanent member of the VLAN only.
54
4To ensure that VLAN-unaware devices (such as computers and hubs) can receive
frames properly, clear the TX Tagging check box to set the Switch to remove
VLAN tags before sending.
ES-2024 Series User’s Guide
Page 55
5Click Add to create the static VLAN and click the Save button to save the settings.
5.1.2 Setting Port VID
Use PVID to add a tag to incoming untagged frames received on that port so that
the frames are forwarded to the VLAN group that the tag defines.
In the example network, configure 2 as the port VID on port 10 so that any
untagged frames received on that port get sent to VLAN 2.
Figure 22 Initial Setup Network Example: Port VID
Chapter 5 Initial Setup Example
1Click Advanced
Applications and VLAN in
the navigation panel. Then
click the VLAN Port Setting link.
2Enter 2 in the PVID field for
port 10 and click Apply to
set the VLAN port setting
and click the Save button
to save the settings.
ES-2024 Series User’s Guide
55
Page 56
Chapter 5 Initial Setup Example
5.1.3 Configuring Switch Management IP Address
The default management IP address of the Switch is 192.168.1.1. You can
configure another IP address in a different subnet for management purposes. The
following figure shows an example.
Figure 23 Initial Setup Example: Management IP Address
1Click Basic Setting and IP Setup
in the navigation panel.
2Configure the related fields in the
IP Setup screen.
For the VLAN2 network, enter 192.168.2.1 as the IP address and 255.255.255.0
as the subnet mask.
3In the VID field, enter the ID of the VLAN group to which you want this
management IP address to belong. This is the same as the VLAN ID you configure
in the Static VLAN screen.
56
4Click Add.
ES-2024 Series User’s Guide
Page 57
Chapter 5 Initial Setup Example
ES-2024 Series User’s Guide
57
Page 58
Chapter 5 Initial Setup Example
58
ES-2024 Series User’s Guide
Page 59
CHAPTER 6
Tutorials
This chapter provides an example of using the web configurator to set up and use
the Switch.
6.1 How to Use DHCP Relay on the Switch
This tutorial describes how to configure your Switch to forward DHCP client
requests to a specific DHCP server. The DHCP server can then assign a specific IP
address based on the information in the DHCP requests.
6.1.1 DHCP Relay Tutorial Introduction
In this example, you have configured your DHCP server (192.168.2.3) and want to
have it assign a specific IP address (say 172.16.1.18) to DHCP client A based on
the system name, VLAN ID and port number in the DHCP request. Client A
connects to the Switch’s port 2 in VLAN 102.
Figure 24 Tutorial: DHCP Relay Scenario
ES-2024 Series User’s Guide
59
Page 60
Chapter 6 Tutorials
6.1.2 Creating a VLAN
Follow the steps below to configure port 2 as a member of VLAN 102.
1Access the web configurator through the Switch’s management port.
2Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q. Click
Apply to save the settings to the run-time memory.
Figure 25 Tutorial: Set VLAN Type to 802.1Q
60
3Click Advanced Application > VLAN > Static VLAN.
4In the Static VLAN screen, select ACTIVE, enter a descriptive name (VALN 102
for example) in the Name field and enter 102 in the VLAN Group ID field.
5Select Fixed to configure port 2 to be a permanent member of this VLAN.
6Clear the TX Tagging check box to set the Switch to remove VLAN tags before
sending.
ES-2024 Series User’s Guide
Page 61
Chapter 6 Tutorials
7Click Add to save the settings to the run-time memory. Settings in the run-time
memory are lost when the Switch’s power is turned off.
Figure 26 Tutorial: Create a Static VLAN
8Click the VLAN Status link in the Static VLAN screen and then the VLAN Port
Setting link in the VLAN Status screen.
Figure 27 Tutorial: Click the VLAN Port Setting Link
9Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames
received on that port so that the frames are forwarded to the VLAN group that the
tag defines.
ES-2024 Series User’s Guide
61
Page 62
Chapter 6 Tutorials
10 Click Apply to save your changes back to the run-time memory.
Figure 28 Tutorial: Add Tag for Frames Received on Port 2
11 Click the Save link in the upper right corner of the web configurator to save your
configuration permanently.
6.1.3 Configuring DHCP Relay
Follow the steps below to enable DHCP relay on the Switch and allow the Switch to
add relay agent information (such as the VLAN ID) to DHCP requests.
1Click IP Application > DHCP and then the Global link to open the DHCP Relay
screen.
2Select the Active check box.
3Enter the DHCP server’s IP address (192.168.2.3 in this example) in the Remote
DHCP Server 1 field.
4Select the Option 82 and the Information check boxes.
62
ES-2024 Series User’s Guide
Page 63
Chapter 6 Tutorials
5Click Apply to save your changes back to the run-time memory.
Figure 29 Tutorial: Set DHCP Server and Relay Information
6Click the Save link in the upper right corner of the web configurator to save your
configuration permanently.
7The DHCP server can then assign a specific IP address based on the DHCP
request.
6.1.4 Troubleshooting
Check the client A’s IP address. If it did not receive the IP address 172.16.1.18,
make sure:
1Client A is connected to the Switch’s port 2 in VLAN 102.
2You configured the correct VLAN ID, port number and system name for DHCP relay
on both the DHCP server and the Switch.
3You clic ked the Save link on the Switch to have your settings take effect.
ES-2024 Series User’s Guide
63
Page 64
Chapter 6 Tutorials
64
ES-2024 Series User’s Guide
Page 65
CHAPTER 7
System Status and Port
Statistics
This chapter describes the system status (web configurator home page) and port
details screens.
7.1 Overview
The home screen of the web configurator displays a port statistical summary with
links to each port showing statistical details.
7.2 Port Status Summary
To view the port statistics, click Status in any web configurator screen to display
the Status screen as shown next.
Figure 30 Status
ES-2024 Series User’s Guide
65
Page 66
Chapter 7 System Status and Port Statistics
The following table describes the labels in this screen.
Table 6 Status
LABELDESCRIPTION
PortThis identifies the Ethernet port. Click a port number to display the Port
Details screen (refer to Figure 31 on page 67).
NameThis is the name you assigned to this port in the Basic Setting, Port
Setup screen.
LinkThis field displays the speed (either 10M for 10Mbps, 100M for 100Mbps
or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half).
It also shows the cable type (Copper or Fiber) for the combo ports.
StateIf STP (Spanning Tree Protocol) is enabled, this field displays the STP
state of the port (see Section 13.1.3 on page 117 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
PD (PWR
model only)
LACPThis fields displays whether LACP (Link Aggregation Control Protocol) has
TxPktsThis field shows the number of transmitted frames on this port.
RxPktsThis field shows the number of received frames on this port.
ErrorsThis field shows the number of received errors on this port.
Tx KB/sThis field shows the number of kilobytes per second transmitted on this
Rx KB/sThis field shows the number of kilobytes per second received on this port.
Up TimeThis field shows the total amount of time in hours, minutes and seconds
Clear CounterEnter a port number and then click Clear Counter to erase the recorded
This field displays the current amount of power consumed by devices
(powered devices, or PD) that use Power over Ethernet (PoE) to get
power from the Switch on this port.
been enabled on the port.
port.
the port has been up.
statistical information for that port, or select Any to clear statistics for all
ports.
66
ES-2024 Series User’s Guide
Page 67
7.2.1 Status: Port Details
Click a number in the Port column in the Status screen to display individual port
statistics. Use this screen to check status and detailed performance data about an
individual port on the Switch.
Figure 31 Status: Port Details
Chapter 7 System Status and Port Statistics
The following table describes the labels in this screen.
LABELDESCRIPTION
Port Info
Port NO.This field displays the port number you are viewing.
NameThis field displays the name of the port.
LinkThis field displays the speed (either 10M for 10Mbps, 100M for 100Mbps
ES-2024 Series User’s Guide
or 1000M for 1000Mbps) and the duplex (F for full duplex or H for half
duplex). It also shows the cable type (Copper or Fiber).
67
Page 68
Chapter 7 System Status and Port Statistics
LABELDESCRIPTION
StatusIf STP (Spanning Tree Protocol) is enabled, this field displays the STP state
of the port (see Section 13.1.3 on page 117 for more information).
If STP is disabled, this field displays FORWARDING if the link is up,
otherwise, it displays STOP.
LACPThis field shows if LACP is enabled on this port or not.
TxPktsThis field shows the number of transmitted frames on this port
RxPktsThis field shows the number of received frames on this port
ErrorsThis field shows the number of received errors on this port.
Tx KB/sThis field shows the number kilobytes per second transmitted on this port.
Rx KB/sThis field shows the number of kilobytes per second received on this port.
Up Time This field shows the total amount of time the connection has been up.
Tx Packet
The following fields display detailed information about packets transmitted.
TX PacketsThis field shows the number of good packets (unicast, multicast and
broadcast) transmitted.
MulticastThis field shows the number of good multicast packets transmitted.
BroadcastThis field shows the number of good broadcast packets transmitted.
PauseThis field shows the number of 802.3x Pause packets transmitted.
Rx Packet
The following fields display detailed information about packets received.
RX PacketsThis field shows the number of good packets (unicast, multicast and
broadcast) received.
MulticastThis field shows the number of good multicast packets received.
BroadcastThis field shows the number of good broadcast packets received.
PauseThis field shows the number of 802.3x Pause packets received.
TX Collision
The following fields display information on collisions while transmitting.
SingleThis is a count of successfully transmitted packets for which transmission is
inhibited by exactly one collision.
MultipleThis is a count of successfully transmitted packets for which transmission
was inhibited by more than one collision.
ExcessiveThis is a count of packets for which transmission failed due to excessive
collisions. Excessive collision is defined as the number of maximum
collisions before the retransmission count is reset.
LateThis is the number of times a late collision is detected, that is, after 512
bits of the packets have already been transmitted.
Error Packet The following fields display detailed information about packets received
that were in error.
RX CRC This field shows the number of packets received with CRC (Cyclic
Redundant Check) error(s).
68
ES-2024 Series User’s Guide
Page 69
Chapter 7 System Status and Port Statistics
LABELDESCRIPTION
RuntThis field shows the number of packets received that were too short
(shorter than 64 octets), including the ones with CRC errors.
Distribution
64This field shows the number of packets (including bad packets) received
that were 64 octets in length.
65-127This field shows the number of packets (including bad packets) received
that were between 65 and 127 octets in length.
128-255This field shows the number of packets (including bad packets) received
that were between 128 and 255 octets in length.
256-511This field shows the number of packets (including bad packets) received
that were between 256 and 511 octets in length.
5121023
10241518
GiantThis field shows the number of packets dropped because they were bigger
This field shows the number of packets (including bad packets) received
that were between 512 and 1023 octets in length.
This field shows the number of packets (including bad packets) received
that were between 1024 and 1518 octets in length.
than the maximum frame size.
ES-2024 Series User’s Guide
69
Page 70
Chapter 7 System Status and Port Statistics
70
ES-2024 Series User’s Guide
Page 71
CHAPTER 8
Basic Setting
This chapter describes how to configure the System Info, General Setup,
Switch Setup, IP Setup and Port Setup screens.
8.1 Overview
The System Info screen displays general Switch information (such as firmware
version number) and hardware polling information (such as fan speeds). The
General Setup screen allows you to configure general Switch identification
information. The General Setup screen also allows you to set the system time
manually or get the current time and date from an external server when you turn
on your Switch. The real time is then displayed in the Switch logs. The Switch
Setup screen allows you to set up and configure global Switch features. The IP
Setup screen allows you to configure a Switch IP address in each routing domain,
subnet mask(s) and DNS (domain name server) for management purposes.
ES-2024 Series User’s Guide
71
Page 72
Chapter 8 Basic Setting
8.2 System Information
In the navigation panel, click Basic Setting > System Info to display the screen
as shown. You can check the firmware version number and monitor the Switch
temperature, fan speeds and voltage in this screen.
Figure 32 Basic Setting > System Info
The following table describes the labels in this screen.
Table 7 Basic Setting > System Info
LABELDESCRIPTION
System
Name
ZyNOS F/W
Version
Ethernet
Address
Hardware Monitor (This section is available for the ES-2024 PWR model only)
Temp e r at u r e
Unit
Temp e r at u r eMAC, CPU and LOCAL refer to the location of the temperature sensors on
CurrentThis shows the current temperature at this sensor.
MAXThis field displays the maximum temperature measured at this sensor.
MINThis field displays the minimum temperature measured at this sensor.
ThresholdThis field displays the upper temperature limit at this sensor.
This field displays the descriptive name of the Switch for identification
purposes.
This field displays the version number of the Switch's current firmware
including the date created.
This field refers to the Ethernet MAC (Media Access Control) address of the
Switch.
The Switch has temperature sensors that are capable of detecting and
reporting if the temperature rises above the threshold. You may choose
the temperature unit (Centigrade or Fahrenheit) in this field.
the Switch printed circuit board.
72
ES-2024 Series User’s Guide
Page 73
Chapter 8 Basic Setting
Table 7 Basic Setting > System Info (continued)
LABELDESCRIPTION
StatusThis field displays Normal for temperatures below the threshold and Error
for those above.
Fan Speed
(RPM)
CurrentThis field displays this fan's current speed in Revolutions Per Minute (RPM).
MAXThis field displays this fan's maximum speed measured in Revolutions Per
MINThis field displays this fan's minimum speed measured in Revolutions Per
ThresholdThis field displays the minimum speed at which a normal fan should work.
StatusNormal indicates that this fan is functioning above the minimum speed.
Voltage(V)The power supply for each voltage has a sensor that is capable of
CurrentThis is the current voltage reading.
MAXThis field displays the maximum voltage measured at this point.
MINThis field displays the minimum voltage measured at this point.
ThresholdThis field displays the percentage tolerance of the voltage with which the
StatusNormal indicates that the voltage is within an acceptable operating range
A properly functioning fan is an essential component (along with a
sufficiently ventilated, cool operating environment) in order for the device
to stay within the temperature threshold. Each fan has a sensor that is
capable of detecting and reporting if the fan speed falls below the
threshold shown.
Minute (RPM).
Minute (RPM). "<41" is displayed for speeds too small to measure (under
2000 RPM).
Error indicates that this fan is functioning below the minimum speed.
detecting and reporting if the voltage falls out of the tolerance range.
Switch still works.
at this point; otherwise Error is displayed.
ES-2024 Series User’s Guide
73
Page 74
Chapter 8 Basic Setting
8.3 General Setup
Use this screen to configure general settings such as the system name and time.
Click Basic Setting and General Setup in the navigation panel to display the
screen as shown.
Figure 33 Basic Setting > General Setup
The following table describes the labels in this screen.
Table 8 Basic Setting > General Setup
LABELDESCRIPTION
System NameChoose a descriptive name for identification purposes. This name
consists of up to 64 printable characters; spaces are allowed.
LocationEnter the geographic location of your Switch. You can use up to 32
English keyboard characters; spaces are allowed.
Contact
Person's Name
Enter the name of the person in charge of this Switch. You can use up to
32 English keyboard characters; spaces are allowed.
74
ES-2024 Series User’s Guide
Page 75
Chapter 8 Basic Setting
Table 8 Basic Setting > General Setup (continued)
LABELDESCRIPTION
Use Time
Server when
Bootup
Time Server IP
Address
Current Time This field displays the time you open this menu (or refresh the menu).
New Time
(hh:min:ss)
Current DateThis field displays the date you open this menu.
New Date
(yyyy-mm-dd)
Time Zone Select the time difference between UTC (Universal Time Coordinated,
Daylight
Saving Time
Enter the time service protocol that your timeserver uses. Not all time
servers support all protocols, so you may have to use trial and error to
find a protocol that works. The main differences between them are the
time format.
When you select the Daytime (RFC 867) format, the Switch displays
the day, month, year and time with no time zone adjustment. When you
use this format it is recommended that you use a Daytime timeserver
within your geographical time zone.
Time (RFC-868) format displays a 4-byte integer giving the total
number of seconds since 1970/1/1 at 0:0:0.
NTP (RFC-1305) is similar to Time (RFC-868).
None is the default value. Enter the time manually. Each time you turn
on the Switch, the time and date will be reset to 1970-1-1 0:0:0.
Enter the IP address of your timeserver. The Switch searches for the
timeserver for up to 60 seconds. If you select a timeserver that is
unreachable, then this screen will appear locked for 60 seconds. Please
wait.
Enter the new time in hour, minute and second format. The new time
then appears in the Current Time field after you click Apply.
Enter the new date in year, month and day format. The new date then
appears in the Current Date field after you click Apply.
formerly known as GMT, Greenwich Mean Time) and your time zone from
the drop-down list box.
Daylight saving is a period from late spring to early fall when many
countries set their clocks ahead of normal local time by one hour to give
more daytime light in the evening.
Start DateConfigure the day and time when Daylight Saving Time starts if you
ES-2024 Series User’s Guide
Select this option if you use Daylight Saving Time.
selected Daylight Saving Time. The time is displayed in the 24 hour
format. Here are a couple of examples:
Daylight Saving Time starts in most parts of the United States on the
second Sunday of March. Each time zone in the United States starts
using Daylight Saving Time at 2 A.M. local time. So in the United States
you would select Second, Sunday, March and 2:00.
Daylight Saving Time starts in the European Union on the last Sunday of
March. All of the time zones in the European Union start using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, March and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
75
Page 76
Chapter 8 Basic Setting
Table 8 Basic Setting > General Setup (continued)
LABELDESCRIPTION
End DateConfigure the day and time when Daylight Saving Time ends if you
ApplyClick Apply to save your changes to the Switch’s run-time memory. The
CancelClick Cancel to begin configuring this screen afresh.
selected Daylight Saving Time. The time field uses the 24 hour
format. Here are a couple of examples:
Daylight Saving Time ends in the United States on the first Sunday of
November. Each time zone in the United States stops using Daylight
Saving Time at 2 A.M. local time. So in the United States you would
select First, Sunday, November and 2:00.
Daylight Saving Time ends in the European Union on the last Sunday of
October. All of the time zones in the European Union stop using Daylight
Saving Time at the same moment (1 A.M. GMT or UTC). So in the
European Union you would select Last, Sunday, October and the last
field depends on your time zone. In Germany for instance, you would
select 2:00 because Germany's time zone is one hour ahead of GMT or
UTC (GMT+1).
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
8.4 Introduction to VLANs
A VLAN (Virtual Local Area Network) allows a physical network to be partitioned
into multiple logical networks. Devices on a logical network belong to one group. A
device can belong to more than one group. With VLAN, a device cannot directly
talk to or hear from devices that are not in the same group(s); the traffic must
first go through a router.
In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents one
subscriber from accessing the network resources of another on the same LAN,
thus a user will not see the printers and hard disks of another user in the same
building.
VLAN also increases network performance by limiting broadcasts to a smaller and
more manageable logical broadcast domain. In traditional switched environments,
all broadcast packets go to each and every individual port. With VLAN, all
broadcasts are confined to a specific broadcast domain.
Note: VLAN is unidirectional; it only governs outgoing traffic.
See Chapter 9 on page 91 for information on port-based and 802.1Q tagged
VLANs.
76
ES-2024 Series User’s Guide
Page 77
8.5 Switch Setup Screen
Click Basic Setting and then Switch Setup in the navigation panel to display the
screen as shown. The VLAN setup screens change depending on whether you
choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to the
chapter on VLAN.
Figure 34 Basic Setting > Switch Setup
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 9 Basic Setting > Switch Setup
LABELDESCRIPTION
VLAN Type Choose 802.1Q or Port Based. The VLAN Setup screen changes
depending on whether you choose 802.1Q VLAN type or Port Based
VLAN type in this screen. See Chapter 9 on page 91 for more
information.
MAC Address
Learning
Aging Time Enter a time from 10 to 3000 seconds. This is how long all dynamically
GARP Timer: Switches join VLANs by making a declaration. A declaration is made by
issuing a Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set declaration
timeout values. See the chapter on VLAN setup for more background information.
Join Timer Join Timer sets the duration of the Join Period timer for GVRP in
MAC address learning reduces outgoing traffic broadcasts. For MAC
address learning to occur on a port, the port must be active.
learned MAC addresses remain in the MAC address table before they age
out (and must be relearned).
milliseconds. Each port has a Join Period timer. The allowed Join Time
range is between 100 and 65535 milliseconds; the default is 200
milliseconds. See the chapter on VLAN setup for more background
information.
ES-2024 Series User’s Guide
77
Page 78
Chapter 8 Basic Setting
Table 9 Basic Setting > Switch Setup (continued)
LABELDESCRIPTION
Leave TimerLeave Time sets the duration of the Leave Period timer for GVRP in
Leave All
Timer
Priority Queue Assignment
IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAC-layer
frame that contains bits to define class of service. Frames without an explicit priority tag
are given the default priority of the ingress port. Use the following fields to configure the
priority level-to-physical queue mapping.
The Switch has four physical queues that you can map to the 8 priority levels. On the
Switch, traffic assigned to higher index queues gets through faster while traffic in lower
index queues is dropped if the network is congested.
Priority Level (The following descriptions are based on the traffic types defined in the IEEE
802.1d standard (which incorporates the 802.1p).
Level 7Typically used for network control traffic such as router configuration
Level 6Typically used for voice traffic that is especially sensitive to jitter (jitter is
Level 5Typically used for video that consumes high bandwidth and is sensitive to
Level 4Typically used for controlled load, latency-sensitive traffic such as SNA
Level 3Typically used for “excellent effort” or better than best effort and would
Level 2This is for “spare bandwidth”.
Level 1This is typically used for non-critical “background” traffic such as bulk
Level 0Typically used for best-effort traffic.
ApplyClick Apply to save your changes to the Switch’s run-time memory. The
CancelClick Cancel to begin configuring this screen afresh.
milliseconds. Each port has a single Leave Period timer. Leave Time
must be two times larger than Join Timer; the default is 600
milliseconds.
Leave All Timer sets the duration of the Leave All Period timer for GVRP in
milliseconds. Each port has a single Leave All Period timer. Leave All
Timer must be larger than Leave Timer.
messages.
the variations in delay).
jitter.
(Systems Network Architecture) transactions.
include important business traffic that can tolerate some delay.
transfers that are allowed but that should not affect other applications
and users.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
8.6 IP Setup
Use the IP Setup screen to configure the default gateway device, the default
domain name server and add IP domains.
78
ES-2024 Series User’s Guide
Page 79
8.6.1 IP Interfaces
The Switch needs an IP address for it to be managed over the network. The
factory default IP address is 192.168.1.1. The subnet mask specifies the network
number portion of an IP address. The factory default subnet mask is
255.255.255.0.
Configure IP addresses for accessing and managing the Switch from the ports
belonging to the pre-defined VLAN(s). See Table 102 on page 283 for how many
IP addresses you can configure.
Figure 35 Basic Setting > IP Setup
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 10 Basic Setting > IP Setup
LABELDESCRIPTION
Domain
Name Server
Default Management IP Address
Configure the fields to set the default management IP address.
ES-2024 Series User’s Guide
DNS (Domain Name System) is for mapping a domain name to its
corresponding IP address and vice versa. Enter a domain name server IP
address in order to be able to use a domain name instead of an IP address.
79
Page 80
Chapter 8 Basic Setting
Table 10 Basic Setting > IP Setup (continued)
LABELDESCRIPTION
DHCP Client Select this option if you have a DHCP server that can assign the Switch an
Static IP
Address
IP
Address
IP Subnet
Mask
Default
Gateway
VIDEnter the VLAN identification number associated with the Switch IP
ApplyClick Apply to save your changes to the Switch’s run-time memory. The
CancelClick Cancel to reset the fields to your previous configuration.
Management IP Addresses
IP address and subnet mask, a default gateway IP address and a domain
name server IP address.
Select this option if you don't have a DHCP server or if you wish to assign
static IP address information to the Switch. You need to fill in the following
fields when you select this option.
Enter the IP address of your Switch in dotted decimal notation for example
192.168.1.1.
Enter the IP subnet mask of your Switch in dotted decimal notation for
example 255.255.255.0.
Enter the IP address of the default outgoing gateway in dotted decimal
notation, for example 192.168.1.254
address. This is the VLAN ID of the CPU and is used for management only.
The default is "1". All ports, by default, are fixed members of this
"management VLAN" in order to manage the device from any port. If a
port is not a member of this VLAN, then users on that port cannot access
the device. To access the Switch, make sure the port that you are
connected to is a member of Management VLAN.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Configure the fields to set additional management IP address.
IP AddressEnter the IP address for managing the Switch by the members of the VLAN
specified in the VID field below.
IP Subnet
Mask
VIDEnter the VLAN identification number.
Default
Gateway
AddClick Add to save the new rule to the Switch. It then displays in the
CancelClick Cancel to reset the fields to your previous configuration.
IndexThis field displays the index number of an entry.
IP AddressThis field displays the management IP address of the Switch.
IP Subnet
Mask
VIDThis field displays the VLAN identification number of the network.
Enter the IP subnet mask in dotted decimal notation. For example,
255.255.255.0.
Enter the IP address of the default outgoing gateway in dotted decimal
notation, for example 192.168.1.254
summary table at the bottom of the screen.
The Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
This field displays the subnet mask for the corresponding IP address.
80
ES-2024 Series User’s Guide
Page 81
Table 10 Basic Setting > IP Setup (continued)
LABELDESCRIPTION
Default
Gateway
DeleteClick Delete to remove the selected entry from the summary table.
Cancel Click Cancel to clear the Delete check boxes.
This field displays the IP address of default gateway.
8.7 Port Setup
Use this screen to configure Switch port settings. Click Basic Setting > Port
Setup in the navigation panel to display the configuration screen.
Figure 36 Basic Setting > Port Setup
Chapter 8 Basic Setting
The following table describes the labels in this screen.
Table 11 Basic Setting > Port Setup
LABELDESCRIPTION
PortThis is the port index number.
*Settings in this row apply to all ports.
ActiveSelect this check box to enable a port. The factory default for all ports is
ES-2024 Series User’s Guide
Use this row only if you want to make some settings the same for all ports.
Use this row first to set the common settings and then make adjustments
on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
enabled. A port must be enabled for data transmission to occur.
81
Page 82
Chapter 8 Basic Setting
Table 11 Basic Setting > Port Setup (continued)
LABELDESCRIPTION
NameEnter a descriptive name that identifies this port. You can enter up to 64
TypeThis field displays 10/100M for an Ethernet/Fast Ethernet connection and
Speed/
Duplex
Flow ControlA concentration of traffic on a port decreases port bandwidth and overflows
alpha-numerical characters.
Note: Due to space limitation, the port name may be truncated in
some web configurator screens.
10/100/1000M for Gigabit connections.
Select the speed and the duplex mode of the Ethernet connection on this
port. Choices are Auto, 10M/Half Duplex, 10M/Full Duplex, 100M/Half Duplex, 100M/Full Duplex and 1000M/Full Duplex (for Gigabit
ports only).
Selecting Auto (auto-negotiation) allows one port to negotiate with a peer
port automatically to obtain the connection speed and duplex mode that
both ends support. When auto-negotiation is turned on, a port on the
Switch negotiates with the peer automatically to determine the connection
speed and duplex mode. If the peer port does not support auto-negotiation
or turns off this feature, the Switch determines the connection speed by
detecting the signal on the cable and using half duplex mode. When the
Switch’s auto-negotiation is turned off, a port uses the pre-configured
speed and duplex mode when making a connection, thus requiring you to
make sure that the settings of the peer port are the same in order to
connect.
buffer memory causing packet discards and frame losses. Flow Control is
used to regulate transmission of signals to match the bandwidth of the
receiving port.
The Switch uses IEEE 802.3x flow control in full duplex mode and
backpressure flow control in half duplex mode.
IEEE 802.3x flow control is used in full duplex mode to send a pause signal
to the sending port, causing it to temporarily stop sending signals when
the receiving port memory buffers fill.
Back Pressure flow control is typically used in half duplex mode to send a
"collision" signal to the sending port (mimicking a state of packet collision)
causing the sending port to temporarily stop sending signals and resend
later. Select Flow Control to enable it.
802.1p
Priority
ApplyClick Apply to save your changes to the Switch’s run-time memory. The
CancelClick Cancel to begin configuring this screen afresh.
This priority value is added to incoming frames without a (802.1p) priority
queue tag. See Priority Queue Assignment in Table 9 on page 77 for
more information.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
82
ES-2024 Series User’s Guide
Page 83
8.8 PoE Status
Note: The following screens are available for the ES-2024 PWR model only. Some
features are only available for the Fast Ethernet ports (1 to 24).
Your Switch supports IEEE 802.3af Power over Ethernet (PoE).
A powered device (PD) is a device such as an access point or a switch, that
supports PoE (Power over Ethernet) so that it can receive power from another
device through a 10/100Mbps Ethernet port.
In the figure below, the IP camera and IP phone get their power directly from the
Switch. Aside from minimizing the need for cables and wires, PoE removes the
hassle of trying to find a nearby electric outlet to power up devices.
Figure 37 Powered Device Examples
Chapter 8 Basic Setting
You can also set priorities so that the Switch is able to reserve and allocate power
to certain PDs.
ES-2024 Series User’s Guide
83
Page 84
Chapter 8 Basic Setting
To view the current amount of power that PDs are receiving from the Switch, click
Basic Setting > PoE Setup.
Figure 38 Basic Setting > PoE Status
The following table describes the labels in this screen.
Table 12 Basic Setting > PoE Status
LABELDESCRIPTION
PoE Status
PoE ModeThis field displays the power management mode used by the Switch,
whether it is in Classification or Consumption mode.
Total PowerThis field displays the total power the Switch can provide to the connected
PoE-enabled devices on the PoE ports.
Consuming
Power (W)
Allocated
Power (W)
Remaining
Power (W)
This field displays the amount of power the Switch is currently supplying to
the connected PoE-enabled devices.
This field displays the total amount of power the Switch has reserved for
PoE after negotiating with the connected PoE device(s).
Consuming Power (W) can be less than or equal but not more than the
Allocated Power (W).
This field displays the amount of power the Switch can still provide for PoE.
Note: The Switch must have at least 16 W of remaining power in order
to supply power to a PoE device, even if the PoE device needs
less than 16W.
PortThis is the port index number.
StateThis field shows which ports can receive power from the Switch. You can
set this in Section 8.8.1 on page 85.
84
• Disable - The PD connected to this port cannot get power supply.
• Enable - The PD connected to this port can receive power.
ES-2024 Series User’s Guide
Page 85
Chapter 8 Basic Setting
Table 12 Basic Setting > PoE Status (continued)
LABELDESCRIPTION
ClassThis shows the IEEE 802.3af power classification of the PD.
This is a number from 0 to 4, where each value represents a range of
power (W) and power current (mA) that the PD requires to function. The
ranges are as follows.
• Class 0 - Default, 0.44 to 12.94
• Class 1 - Optional, 0.44 to 3.84
• Class 2 - Optional , 3.84 to 6.49
• Class 3 - Optional, 6.49 to 12.95
• Class 4 - Reserved (PSEs classify as Class 0)
PD PriorityWhen the total power requested by the PDs exceeds the total PoE power
budget on the Switch, you can set the PD priority to allow the Switch to
provide power to ports with higher priority first.
• Critical has the highest priority.
• High has the Switch assign power to the port after all critical priority
ports are served.
• Low has the Switch assign power to the port after all critical and high
priority ports are served.
Consuming
Power (mW)
Max Power
(mW)
Max Current
(mA)
This field displays the current amount of power consumed by the PD from
the Switch on this port.
This field displays the maximum amount of power the PD could use from
the Switch on this port.
This field displays the maximum amount of current drawn by the PD from
the Switch on this port.
8.8.1 PoE Setup
Use this screen to set the priority levels for the Switch in distributing power to
PDs.
ES-2024 Series User’s Guide
85
Page 86
Chapter 8 Basic Setting
Click the PoE Setup link in the Basic Setting > PoE Status screen. The
following screen opens.
Figure 39 Basic Setting > PoE Setup
The following table describes the labels in this screen.
Table 13 Basic Setting > PoE Setup
LABELDESCRIPTION
PoE ModeSelect the power management mode you want the Switch to use.
• Classification - Select this if you want the Switch to reserve the Max
Power (mW) to each PD according to the priority level. If the total
power supply runs out, PDs with lower priority do not get power to
function.
• Consumption - Select this if you want the Switch to manage the total
power supply so that each connected PD gets a resource. However, the
power allocated by the Switch may be less than the Max Power (mW) of
the PD. PDs with higher priority also get more power than those with
lower priority levels.
PortThis is the port index number.
PDSelect this to provide power to a PD connected to the port.
If left unchecked, the PD connected to the port cannot receive power from
the Switch.
86
ES-2024 Series User’s Guide
Page 87
Chapter 8 Basic Setting
Table 13 Basic Setting > PoE Setup (continued)
LABELDESCRIPTION
PD PriorityThis field is only available on the PWR model but not available for the
Gigabit or mini-GBIC ports.
When the total power requested by the PDs exceeds the total PoE power
budget on the Switch, you can set the PD priority to allow the Switch to
provide power to ports with higher priority.
Select Critical to give the highest PD priority on the port.
Select High to set the Switch to assign the remaining power to the port
after all critical priority ports are served.
Select Low to set the Switch to assign the remaining power to the port
after all critical and high priority ports are served.
ApplyClick Apply to save your changes to the Switch’s run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
ES-2024 Series User’s Guide
87
Page 88
Chapter 8 Basic Setting
88
ES-2024 Series User’s Guide
Page 89
PART III
Advanced Setup
VLAN (91)
Static MAC Forwarding (105)
Static Multicast Forwarding (109)
Filtering (113)
Spanning Tree Protocol (115)
Bandwidth Control (131)
Broadcast Storm Control (133)
Mirroring (135)
Link Aggregation (137)
Port Authentication (145)
Port Security (149)
Queuing Method (153)
Multicast (157)
AAA (173)
IP Source Guard (187)
Loop Guard (201)
89
Page 90
90
Page 91
CHAPTER 9
VLAN
The type of screen you see here depends on the VLAN Type you selected in the
Switch Setup screen. This chapter shows you how to configure 802.1Q tagged
and port-based VLANs.
9.1 Introduction to IEEE 802.1Q Tagged VLANs
A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the
VLAN membership of a frame across bridges - they are not confined to the switch
on which they were created. The VLANs can be created statically by hand or
dynamically through GVRP. The VLAN ID associates a frame with a specific VLAN
and provides the information that switches need to process the frame across the
network. A tagged frame is four bytes longer than an untagged frame and
contains two bytes of TPID (Tag Protocol Identifier, residing within the type/length
field of the Ethernet frame) and two bytes of TCI (Tag Control Information, starts
after the source address field of the Ethernet frame).
The CFI (Canonical Format Indicator) is a single-bit flag, always set to zero for
Ethernet switches. If a frame received at an Ethernet port has a CFI set to 1, then
that frame should not be forwarded as it is to an untagged port. The remaining
twelve bits define the VLAN ID, giving a possible maximum number of 4,096
VLANs. Note that user priority and VLAN ID are independent of each other. A
frame with VID (VLAN Identifier) of null (0) is called a priority frame, meaning that
only the priority level is significant and the default VID of the ingress port is given
as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify
priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN
configurations are 4,094.
TPID
2 Bytes
User Priority
3 Bits
CFI
1 Bit
VLAN ID
12 bits
9.1.1 Forwarding Tagged and Untagged Frames
Each port on the Switch is capable of passing tagged or untagged frames. To
forward a frame from an 802.1Q VLAN-aware switch to an 802.1Q VLAN-unaware
ES-2024 Series User’s Guide
91
Page 92
Chapter 9 VLAN
switch, the Switch first decides where to forward the frame and then strips off the
VLAN tag. To forward a frame from an 802.1Q VLAN-unaware switch to an 802.1Q
VLAN-aware switch, the Switch first decides where to forward the frame, and then
inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is
VLAN 1 for all ports, but this can be changed.
A broadcast frame (or a multicast frame for a multicast group that is known by the
system) is duplicated only on ports that are members of the VID (except the
ingress port itself), thus confining the broadcast to a specific domain.
9.2 Automatic VLAN Registration
GARP and GVRP are the protocols used to automatically register VLAN
membership across switches.
9.2.1 GARP
GARP (Generic Attribute Registration Protocol) allows network switches to register
and de-register attribute values with other GARP participants within a bridged
LAN. GARP is a protocol that provides a generic mechanism for protocols that
serve a more specific application, for example, GVRP.
9.2.1.1 GARP Timers
Switches join VLANs by making a declaration. A declaration is made by issuing a
Join message using GARP. Declarations are withdrawn by issuing a Leave
message. A Leave All message terminates all registrations. GARP timers set
declaration timeout values.
9.2.2 GVRP
GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a
way for switches to register necessary VLAN members on ports across the
network. Enable this function to permit VLAN groups beyond the local Switch.
Please refer to the following table for common IEEE 802.1Q VLAN terminology.
Table 14 IEEE 802.1Q VLAN Terminology
VLAN
PARAMETER
VLAN TypePermanent VLANThis is a static VLAN created manually.
TERMDESCRIPTION
92
Dynamic VLANThis is a VLAN configured by a GVRP registration/
deregistration process.
ES-2024 Series User’s Guide
Page 93
Chapter 9 VLAN
Table 14 IEEE 802.1Q VLAN Terminology (continued)
VLAN
PARAMETER
VLAN
Administrative
Control
VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all
VLAN PortPort VID This is the VLAN ID assigned to untagged frames
TERMDESCRIPTION
Registration Fixed Fixed registration ports are permanent VLAN
members.
Registration
Forbidden
Normal
Registration
Untagged Ports belonging to the specified VLAN don't tag all
Acceptable Frame
Type
Ingress filtering If set, the Switch discards incoming frames for
Ports with registration forbidden are forbidden to
join the specified VLAN.
Ports dynamically join a VLAN using GVRP.
outgoing frames transmitted.
outgoing frames transmitted.
that this port received.
You may choose to accept both tagged and
untagged incoming frames, just tagged incoming
frames or just untagged incoming frames on a
port.
VLANs that do not have this port as a member
9.3 Port VLAN Trunking
Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN
groups to pass through that port. This is useful if you want to set up VLAN groups
on end devices without having to configure the same VLAN groups on
intermediary devices.
Refer to the following figure. Suppose you want to create VLAN groups 1 and 2
(V1 and V2) on devices A and B. Without VLAN Trunking, you must configure
VLAN groups 1 and 2 on all intermediary switches C, D and E; otherwise they will
drop frames with unknown VLAN group tags. However, with VLAN Trunking
enabled on a port(s) in each intermediary switch you only need to create VLAN
groups in the end devices (A and B). C, D and E automatically allow frames with
ES-2024 Series User’s Guide
93
Page 94
Chapter 9 VLAN
VLAN group tags 1 and 2 (VLAN groups that are unknown to those switches) to
pass through their VLAN trunking port(s).
Figure 40 Port VLAN Trunking
9.4 Select the VLAN Type
Select a VLAN type in the Basic Setting > Switch Setup screen.
Figure 41 Switch Setup: Select VLAN Type
9.5 Static VLAN
Use a static VLAN to decide whether an incoming frame on a port should be
• sent to a VLAN group as normal depending on its VLAN tag.
• sent to a group whether it has a VLAN tag or not.
• blocked from a VLAN group regardless of its VLAN tag.
You can also tag all outgoing frames (that were previously untagged) from a port
with the specified VID.
94
ES-2024 Series User’s Guide
Page 95
9.5.1 Static VLAN Status
See Section 9.1 on page 91 for more information on Static VLAN. Click Advanced
Application > VLAN from the navigation panel to display the VLAN Status
screen as shown next.
Figure 42 Advanced Application > VLAN: VLAN Status
The following table describes the labels in this screen.
Chapter 9 VLAN
Table 15 Advanced Application > VLAN: VLAN Status
LABELDESCRIPTION
VLAN Search
by VID
The Number
of VLAN
The Number
of Search
Results
IndexThis is the VLAN index number. Click on an index number to view more
VIDThis is the VLAN identification number that was configured in the Static
Elapsed Time This field shows how long it has been since a normal VLAN was registered
StatusThis field shows how this VLAN was added to the Switch; Dynamic -
Change Pages Click Previous or Next to show the previous/next screen if all status
Enter an existing VLAN ID number(s) (separated by a comma) and click
Search to display only the specified VLAN(s) in the list below.
Leave this field blank and click Search to display all VLANs configured on
the Switch.
This is the number of VLANs configured on the Switch.
This is the number of VLANs that match the searching criteria and display
in the list below.
This field displays only when you use the Search button to look for
certain VLANs.
VLAN details.
VLAN screen.
or a static VLAN was set up.
using GVRP, Static - added as a permanent entry or Other - added in
another way such as via Multicast VLAN Registration (MVR).
information cannot be seen in one screen.
ES-2024 Series User’s Guide
95
Page 96
Chapter 9 VLAN
9.5.2 Static VLAN Details
Use this screen to view detailed port settings and status of the VLAN group. See
Section 9.1 on page 91 for more information on static VLAN. Click on an index
number in the VLAN Status screen to display VLAN details.
VLAN StatusClick this to go to the VLAN Status screen.
VIDThis is the VLAN identification number that was configured in the Static
VLAN screen.
Port NumberThis column displays the ports that are participating in a VLAN. A tagged
port is marked as T, an untagged port is marked as U and ports not
participating in a VLAN are marked as “–“.
Elapsed Time This field shows how long it has been since a normal VLAN was registered
or a static VLAN was set up.
StatusThis field shows how this VLAN was added to the Switch; dynamic -
using GVRP, static - added as a permanent entry or other - added in
another way such as via Multicast VLAN Registration (MVR).
9.5.3 Configure a Static VLAN
Use this screen to configure and view 802.1Q VLAN parameters for the Switch.
See Section 9.1 on page 91 for more information on static VLAN. To configure a
96
ES-2024 Series User’s Guide
Page 97
Chapter 9 VLAN
static VLAN, click Static VLAN in the VLAN Status screen to display the screen
as shown next.
ACTIVESelect this check box to activate the VLAN settings.
NameEnter a descriptive name for the VLAN group for identification purposes.
This name consists of up to 64 printable characters; spaces are allowed.
VLAN Group IDEnter the VLAN ID for this static entry; the valid range is between 1 and
4094.
Port The port number identifies the port you are configuring.
*Settings in this row apply to all ports.
Use this row only if you want to make some settings the same for all
ports. Use this row first to set the common settings and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
ControlSelect Normal for the port to dynamically join this VLAN group using
TaggingSelect TX Tagging if you want the port to tag all outgoing frames
AddClick Add to save your changes to the Switch’s run-time memory. The
CancelClick Cancel to begin configuring this screen afresh.
ClearClick Clear to start configuring the screen again.
VIDThis field displays the ID number of the VLAN group. Click the number to
ActiveThis field indicates whether the VLAN settings are enabled (Yes) or
NameThis field displays the descriptive name for this VLAN group.
DeleteClick Delete to remove the selected entry from the summary table.
CancelClick Cancel to clear the Delete check boxes.
GVRP. This is the default selection.
Select Fixed for the port to be a permanent member of this VLAN group.
Select Forbidden if you want to prohibit the port from joining this VLAN
group.
transmitted with this VLAN Group ID.
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
edit the VLAN settings.
disabled (No).
9.5.4 Configure VLAN Port Settings
Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q)
settings on a port. See Section 9.1 on page 91 for more information on static
VLAN. Click the VLAN Port Setting link in the VLAN Status screen.
Figure 45 Advanced Application > VLAN > VLAN Port Settings
98
ES-2024 Series User’s Guide
Page 99
Chapter 9 VLAN
The following table describes the labels in this screen.
Table 18 Advanced Application > VLAN > VLAN Port Setting
LABELDESCRIPTION
GVRPGVRP (GARP VLAN Registration Protocol) is a registration protocol that
defines a way for switches to register necessary VLAN members on
ports across the network.
Select this check box to permit VLAN groups beyond the local Switch.
Ingress Check Select this check box to activate ingress filtering on the Switch.
Clear this check box to disable ingress filtering the Switch.
PortThis field displays the port number.
*Settings in this row apply to all ports.
Use this row only if you want to make some settings the same for all
ports. Use this row first to set the common settings and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you
make them.
PVIDEnter a number between 1and 4094 as the port VLAN ID.
GVRPSelect this check box to allow GVRP on this port.
Acceptable
Frame Type
Specify the type of frames allowed on a port. Choices are All and Tag Only.
Select All from the drop-down list box to accept all untagged or tagged
frames on this port. This is the default setting.
Select Tag Only to accept only tagged frames on this port. All untagged
frames will be dropped.
VLAN TrunkingEnable VLAN Trunking on ports connected to other switches or routers
(but not ports directly connected to end users) to allow frames
belonging to unknown VLAN groups to pass through the Switch.
IsolationSelect this to allows this port to communicate only with the CPU
management port
and the ports on which the isolation feature is not enabled.
ApplyClick Apply to save your changes to the Switch’s run-time memory. The
Switch loses these changes if it is turned off or loses power, so use the
Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring.
CancelClick Cancel to begin configuring this screen afresh.
9.6 Port-based VLAN Setup
Port-based VLANs are VLANs where the packet forwarding decision is based on the
destination MAC address and its associated port.
ES-2024 Series User’s Guide
99
Page 100
Chapter 9 VLAN
Port-based VLANs require allowed outgoing ports to be defined for each port.
Therefore, if you wish to allow two subscriber ports to talk to each other, for
example, between conference rooms in a hotel, you must define the egress (an
egress port is an outgoing port, that is, a port through which a data packet leaves)
for both ports.
Port-based VLANs are specific only to the Switch on which they were created.
Note: When you activate port-based VLAN, the Switch uses a default VLAN ID of 1.
Note: In screens (such as IP Setup and Filtering) that require a VID, you must enter
The port-based VLAN setup screen is shown next. The CPU management port
forms a VLAN with all Ethernet ports.
You cannot change it.
1 as the VID.
100
ES-2024 Series User’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.