ZyXEL ES-2108 User Guide

ES-2108 Series

Ethernet Switch

User’s Guide

Version 3.60

1/2006

Edition 3

ES-2108 Series User’s Guide

Copyright

Copyright © 2006 by ZyXEL Communications Corporation.

The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.

Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.

Copyright

3

ES-2108 Series User’s Guide

Interference Statements and

Warnings

FCC Statement

This switch complies with Part 15 of the FCC rules. Operation is subject to the following two conditions:

1This switch may not cause harmful interference.

2This switch must accept any interference received, including interference that may cause undesired operations.

FCC Warning

This equipment has been tested and found to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

CE Mark Warning:

This is a class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures.

Taiwanese BSMI (Bureau of Standards, Metrology and Inspection) A Warning:

Notice 1

Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.

This Class A digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.

4	Interference Statements and Warnings

ES-2108 Series User’s Guide

Certifications

1Go to www.zyxel.com

2Select your product from the drop-down list box on the ZyXEL home page to go to that product's page.

3Select the certification you wish to view from this page.

Safety Warnings

For your safety, be sure to read and follow all warning notices and instructions.

•To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.

•Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel can service the device. Please contact your vendor for further information.

•Use ONLY the dedicated power supply for your device. Connect the power cord or power adaptor to the right supply voltage (110V AC in North America or 230V AC in Europe).

•Do NOT use the device if the power supply is damaged as it might cause electrocution.

•If the power supply is damaged, remove it from the power outlet.

•Do NOT attempt to repair the power supply. Contact your local vendor to order a new power supply.

•Place connecting cables carefully so that no one will step on them or stumble over them. Do NOT allow anything to rest on the power cord and do NOT locate the product where anyone can walk on the power cord.

•If you wall mount your device, make sure that no electrical, gas or water pipes will be damaged.

•Do NOT install nor use your device during a thunderstorm. There may be a remote risk of electric shock from lightning.

•Do NOT expose your device to dampness, dust or corrosive liquids.

•Do NOT use this product near water, for example, in a wet basement or near a swimming pool.

•Make sure to connect the cables to the correct ports.

•Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device.

•Do NOT store things on the device.

•Connect ONLY suitable accessories to the device.

Interference Statements and Warnings

5

ES-2108 Series User’s Guide

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country.

Registration

Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.

6	ZyXEL Limited Warranty

ES-2108 Series User’s Guide

Customer Support

Please have the following information ready when you contact customer support.

•Product model and serial number.

•Warranty Information.

•Date that you received your device.

•Brief description of the problem and the steps you took to solve it.

	METHOD	SUPPORT E-MAIL	TELEPHONE*	WEB SITE	REGULAR MAIL
	LOCATION	SALES E-MAIL	FAX	FTP SITE
	CORPORATE	[e-mail]	[phone]	www.zyxel.com	ZyXEL Communications Corp.
				www.europe.zyxel.com	6 Innovation Road II
	HEADQUARTERS				Science Park
		[e-mail]	[phone]	ftp.zyxel.com
	(WORLDWIDE)				Hsinchu 300
				ftp.europe.zyxel.com	Taiwan
		[e-mail]	[phone]	www.zyxel.cz	ZyXEL Communications
					Czech s.r.o.
	CZECH REPUBLIC	[e-mail]	[phone]
					Modranská 621
					143 01 Praha 4 - Modrany
					Ceská Republika
		[e-mail]	[phone]	www.zyxel.dk	ZyXEL Communications A/S
	DENMARK				Columbusvej
		[e-mail]	[phone]
					2860 Soeborg
					Denmark
		[e-mail]	[phone]	www.zyxel.fi	ZyXEL Communications Oy
	FINLAND				Malminkaari 10
		[e-mail]	[phone]
					00700 Helsinki
					Finland
		[e-mail]	[phone]	www.zyxel.fr	ZyXEL France
					1 rue des Vergers
	FRANCE		[phone]
					Bat. 1 / C
					69760 Limonest
					France
		[e-mail]	[phone]	www.zyxel.de	ZyXEL Deutschland GmbH.
	GERMANY				Adenauerstr. 20/A2 D-52146
		[e-mail]	[phone]
					Wuerselen
					Germany
		[e-mail]	[phone]	www.zyxel.hu	ZyXEL Hungary
	HUNGARY				48, Zoldlomb Str.
		[e-mail]	[phone]
					H-1025, Budapest
					Hungary
		http://zyxel.kz/support	[phone]	www.zyxel.kz	ZyXEL Kazakhstan
					43, Dostyk ave.,Office 414
	KAZAKHSTAN	[e-mail]	[phone]
					Dostyk Business Centre
					050010, Almaty
					Republic of Kazakhstan
		[e-mail]	1-800-255-4101	www.us.zyxel.com	ZyXEL Communications Inc.
			[phone]		1130 N. Miller St.
	NORTH AMERICA				Anaheim
		[e-mail]	[phone]	ftp.us.zyxel.com	CA 92806-2001
					U.S.A.
		[e-mail]	[phone]	www.zyxel.no	ZyXEL Communications A/S
	NORWAY				Nils Hansens vei 13
		[e-mail]	[phone]
					0667 Oslo
					Norway

Customer Support

7

ES-2108 Series User’s Guide

	METHOD	SUPPORT E-MAIL	TELEPHONE*	WEB SITE	REGULAR MAIL
	LOCATION	SALES E-MAIL	FAX	FTP SITE
		[e-mail]	[phone]	www.pl.zyxel.com	ZyXEL Communications
	POLAND				ul. Okrzei 1A
			[phone]
					03-715 Warszawa
					Poland
		http://zyxel.ru/support	[phone]	www.zyxel.ru	ZyXEL Russia
	RUSSIA				Ostrovityanova 37a Str.
		[e-mail]	[phone]
					Moscow, 117279
					Russia
		[e-mail]	[phone]	www.zyxel.es	ZyXEL Communications
	SPAIN				Arte, 21 5ª planta
		[e-mail]	[phone]
					28033 Madrid
					Spain
		[e-mail]	[phone]	www.zyxel.se	ZyXEL Communications A/S
	SWEDEN				Sjöporten 4, 41764 Göteborg
		[e-mail]	[phone]
					Sweden
		[e-mail]	[phone]	www.ua.zyxel.com	ZyXEL Ukraine
	UKRAINE				13, Pimonenko Str.
		[e-mail]	[phone]
					Kiev, 04050
					Ukraine
		[e-mail]	[phone]	www.zyxel.co.uk	ZyXEL Communications UK
			08707 555779 (UK only)		Ltd.,11 The Courtyard,
	UNITED KINGDOM				Eastern Road, Bracknell,
		[e-mail]	[phone]	ftp.zyxel.co.uk	Berkshire, RG12 2XB,
					United Kingdom (UK)

* “+” is the (prefix) number you enter to make an international telephone call.

8	Customer Support

ES-2108 Series User’s Guide

Table of Contents

Copyright	..................................................................................................................	3
Interference Statements and Warnings..................................................................		4
ZyXEL Limited Warranty .........................................................................................		6
Customer Support ...................................................................................................		7
Table of Contents.....................................................................................................		9
List of Figures ........................................................................................................		19
List of Tables ..........................................................................................................		23
Preface....................................................................................................................		25
Chapter 1
Getting to Know Your Switch................................................................................		27
1.1	Introduction ........................................................................................................	27
1.2	Software Features .............................................................................................	27
1.3	Hardware Features ............................................................................................	29
1.4	Applications .......................................................................................................	29
	1.4.1 Backbone Application ...............................................................................	29
	1.4.2 Bridging Example .....................................................................................	30
	1.4.3 High Performance Switched Example ......................................................	31
	1.4.4 IEEE 802.1Q VLAN Application Examples ..............................................	31
	1.4.4.1 Tag-based VLAN Example .............................................................	31
	1.4.4.2 VLAN Shared Server Example .......................................................	32
Chapter 2
Hardware Installation and Connection ................................................................		33
2.1	Freestanding Installation ...................................................................................	33
2.2	Mounting the Switch on a Rack ........................................................................	34
	2.2.1 Rack-mounted Installation Requirements ................................................	34
	2.2.1.1 Precautions ....................................................................................	34
	2.2.2 Attaching the Mounting Brackets to the Switch ........................................	34
	2.2.3 Mounting the Switch on a Rack ................................................................	34
2.3	Wall-mounting Installation ..................................................................................	35

Table of Contents

9

ES-2108 Series User’s Guide

Chapter 3
Hardware Overview................................................................................................		37
3.1	Front Panel Connection ....................................................................................	37
	3.1.1 Console Port ...........................................................................................	38
	3.1.2 Ethernet Ports ..........................................................................................	38
	3.1.2.1 Default Ethernet Settings ................................................................	39
	3.1.3 Mini-GBIC Slot ........................................................................................	39
	3.1.3.1 Transceiver Installation ................................................................	39
	3.1.3.2 Transceiver Removal ...................................................................	40
	3.1.4 100 Base-FX Fiber-Optic Port ..................................................................	40
3.2	Rear Panel ........................................................................................................	41
	3.2.1 Power Connector .....................................................................................	41
3.3	Front Panel LEDs ..........................................................................................	41
Chapter 4
The Web Configurator ...........................................................................................		43
4.1	Introduction ........................................................................................................	43
4.2	System Login ..................................................................................................	43
4.3	The Status Screen ........................................................................................	44
	4.3.1 Change Your Password ........................................................................	48
4.4	Switch Lockout ................................................................................................	48
4.5	Resetting the Switch .......................................................................................	49
	4.5.1 Reload the Factory-default Configuration File ........................................	49
4.6	Logging Out of the Web Configurator ...............................................................	50
4.7	Help .................................................................................................................	50
Chapter 5
Initial Setup Example.............................................................................................		51
5.1	Overview ............................................................................................................	51
	5.1.1 Creating a VLAN ......................................................................................	51
	5.1.2 Setting Port VID .......................................................................................	52
	5.1.3 Configuring Switch Management IP Address ...........................................	53
Chapter 6
System Status and Port Statistics........................................................................		55
6.1	Overview ............................................................................................................	55
6.2	Port Status Summary .....................................................................................	55
	6.2.1 Status: Port Details ..............................................................................	56
Chapter 7
Basic Setting .........................................................................................................		61
7.1	Overview ............................................................................................................	61
7.2	System Information ........................................................................................	61

10	Table of Contents

		ES-2108 Series User’s Guide
7.3	General Setup ..............................................................................................	63
7.4	Introduction to VLANs ......................................................................................	65
7.5	IGMP Snooping ................................................................................................	66
7.6	Switch Setup Screen ......................................................................................	66
7.7	IP Setup ..........................................................................................................	68
	7.7.1 Management IP Addresses ......................................................................	68
7.8	Port Setup .......................................................................................................	70
Chapter 8
VLAN .......................................................................................................................		73
8.1	Introduction to IEEE 802.1Q Tagged VLAN ....................................................	73
	8.1.1 Forwarding Tagged and Untagged Frames .............................................	73
8.2	Automatic VLAN Registration ..........................................................................	74
	8.2.1 GARP ......................................................................................................	74
	8.2.1.1 GARP Timers .................................................................................	74
	8.2.2 GVRP .......................................................................................................	74
8.3	Port VLAN Trunking .........................................................................................	75
8.4	Select the VLAN Type ......................................................................................	75
8.5	Static VLAN .......................................................................................................	76
	8.5.1 Static VLAN Status ..................................................................................	76
	8.5.2 Configure a Static VLAN ......................................................................	77
	8.5.3 Configure VLAN Port Settings ..............................................................	78
8.6	Port-based VLAN Setup ...............................................................................	79
	8.6.1 Configure a Port-based VLAN ..................................................................	80
Chapter 9
Static MAC Forwarding..........................................................................................		83
9.1	Overview ............................................................................................................	83
9.2	Configuring Static MAC Forwarding .............................................................	83
Chapter 10
Filtering...................................................................................................................		85
10.1 Overview ..........................................................................................................		85
10.2 Configure a Filtering Rule .............................................................................		85
Chapter 11
Spanning Tree Protocol.........................................................................................		87
11.1 Overview ..........................................................................................................		87
	11.1.1 STP Terminology ...................................................................................	87
	11.1.2 How STP Works ....................................................................................	88
	11.1.3 STP Port States .....................................................................................	88
11.2 STP Status .................................................................................................		88
11.3 Configure STP ..............................................................................................		90

Table of Contents

11

ES-2108 Series User’s Guide

Chapter 12
Bandwidth Control.................................................................................................		93
12.1	Bandwidth Control Setup ................................................................................	93
Chapter 13
Broadcast Storm Control ......................................................................................		95
13.1	Overview ..........................................................................................................	95
13.2	Broadcast Storm Control Setup ......................................................................	95
Chapter 14
Mirroring .................................................................................................................		97
14.1	Overview ..........................................................................................................	97
14.2	Port Mirroring Setup .......................................................................................	97
Chapter 15
Link Aggregation ...................................................................................................		99
15.1	Overview ..........................................................................................................	99
15.2	Dynamic Link Aggregation .............................................................................	99
15.2.1 Link Aggregation ID .............................................................................		100
15.3	Link Aggregation Status ................................................................................	100
15.4	Link Aggregation Setup ...............................................................................	101
Chapter 16
Port Authentication..............................................................................................		103
16.1	Overview ........................................................................................................	103
16.1.1 RADIUS ...............................................................................................		103
16.2	Port Authentication Configuration .................................................................	103
16.2.1 Activate IEEE 802.1x Security ..........................................................		104
16.2.2 Configuring RADIUS Server Settings ...............................................		105
Chapter 17
Port Security.........................................................................................................		107
17.1	Overview ........................................................................................................	107
17.2	Port Security Setup .......................................................................................	107
Chapter 18
Queuing Method...................................................................................................		109
18.1	Overview ........................................................................................................	109
18.1.1 Strict Priority Queuing (SPQ) ..............................................................		109
18.1.2 Weighted Round Robin Scheduling (WRR) .........................................		109
18.2	Configuring Queuing Method ........................................................................	110

12	Table of Contents

		ES-2108 Series User’s Guide
Chapter 19
Static Route ...........................................................................................................		111
19.1	Configuring Static Route ...............................................................................	111
Chapter 20
Differentiated Services .........................................................................................		113
20.1	Overview ........................................................................................................	113
20.1.1 DSCP and Per-Hop Behavior ..............................................................		113
20.1.2 DiffServ Network Example ..................................................................		113
20.2	Activating DiffServ .......................................................................................	114
20.3	DSCP-to-IEEE802.1p Priority Mapping ....................................................	115
20.3.1 Configuring DSCP Settings ..................................................................		115
Chapter 21
Maintenance ..........................................................................................................		117
21.1	The Maintenance Screen .............................................................................	117
21.2	Firmware Upgrade ......................................................................................	118
21.3	Restore a Configuration File ........................................................................	118
21.4	Backing Up a Configuration File ..................................................................	119
21.5	Load Factory Defaults .................................................................................	119
21.6	Reboot System ............................................................................................	120
21.7 FTP Command Line ......................................................................................		120
21.7.1 Filename Conventions ........................................................................		120
	21.7.1.1 Example FTP Commands ..........................................................	121
21.7.2 FTP Command Line Procedure ..........................................................		121
21.7.3 GUI-based FTP Clients ........................................................................		122
21.7.4 FTP Restrictions ..................................................................................		122
Chapter 22
Access Control.....................................................................................................		123
22.1	Overview ......................................................................................................	123
22.2	The Access Control Main Screen ..................................................................	123
22.3 About SNMP ................................................................................................		124
22.3.1 Supported MIBs .................................................................................		125
22.3.2 SNMP Traps .......................................................................................		125
22.3.3 Configuring SNMP ..............................................................................		125
22.4	Setting Up Login Accounts .........................................................................	126
22.5	SSH Overview ...............................................................................................	127
22.6 How SSH works .............................................................................................		128
22.7	SSH Implementation on the Switch ...............................................................	129
22.7.1 Requirements for Using SSH ...............................................................		129
22.7.2 SSH Login Example .............................................................................		129
22.8	Introduction to HTTPS ...................................................................................	130

Table of Contents

13

ES-2108 Series User’s Guide

22.9 HTTPS Example ............................................................................................		131
22.9.1 Internet Explorer Warning Messages ...................................................		131
22.9.2 Netscape Navigator Warning Messages ..............................................		132
22.9.3 The Main Screen ..................................................................................		133
22.10 Service Port Access Control .....................................................................		134
22.11 Remote Management ...............................................................................		135
Chapter 23
Diagnostic.............................................................................................................		137
23.1	Diagnostic ....................................................................................................	137
Chapter 24
Cluster Management............................................................................................		139
24.1	Overview ........................................................................................................	139
24.2	Cluster Management Status ........................................................................	140
24.2.1 Cluster Member Switch Management .................................................		141
	24.2.1.1 Uploading Firmware to a Cluster Member Switch ....................	141
24.3	Configuring Cluster Management ................................................................	142
Chapter 25
MAC Table.............................................................................................................		145
25.1	Overview ........................................................................................................	145
25.2	Viewing the MAC Table ................................................................................	146
Chapter 26
ARP Table .............................................................................................................		147
26.1	Overview ........................................................................................................	147
26.1.1 How ARP Works ..................................................................................		147
26.2	Viewing the ARP Table ................................................................................	147
Chapter 27
Introducing the Commands ..............................................................................		149
27.1	Overview ........................................................................................................	149
27.1.1 Switch Configuration File .....................................................................		149
27.2	Accessing the CLI ........................................................................................	149
27.2.1 Access Priority ....................................................................................		150
27.2.2 The Console Port .................................................................................		150
	27.2.2.1 Initial Screen ...............................................................................	150
27.2.3 Telnet ...................................................................................................		150
27.2.4 SSH ......................................................................................................		151
27.3	The Login Screen .........................................................................................	151
27.4	Command Syntax Conventions .....................................................................	152
27.5	Getting Help ...................................................................................................	152

14	Table of Contents

	ES-2108 Series User’s Guide
27.5.1 List of Available Commands .................................................................	152
27.5.2 Detailed Command Information ...........................................................	153
27.6 Command Modes ..........................................................................................	154
27.7 Using Command History ................................................................................	155
27.8 Saving Your Configuration .............................................................................	155
27.8.1 Logging Out ..........................................................................................	155
27.9 Command Summary ......................................................................................	155
27.9.1 User Mode ............................................................................................	156
27.9.2 Enable Mode ........................................................................................	156
27.9.3 General Configuration Mode ................................................................	159
27.9.4 interface port-channel Commands .......................................................	166
27.9.5 config-vlan Commands ........................................................................	168
Chapter 28
Command Examples...........................................................................................	171
28.1 Overview ........................................................................................................	171
28.2 show Commands ...........................................................................................	171
28.2.1 show system-information ....................................................................	171
28.2.2 show ip .................................................................................................	172
28.2.3 show logging .......................................................................................	172
28.2.4 show interface .....................................................................................	173
28.2.5 show mac address-table .....................................................................	174
28.3 ping ...............................................................................................................	175
28.4 traceroute ......................................................................................................	175
28.5 Enabling RSTP ..............................................................................................	176
28.6 Configuration File Maintenance ....................................................................	176
28.6.1 Restarting the Switch ...........................................................................	176
28.6.2 Resetting to the Factory Default ...........................................................	177
28.7 no Command Examples ................................................................................	177
28.7.1 no mirror-port ......................................................................................	177
28.7.2 no https timeout ....................................................................................	178
28.7.3 no trunk ................................................................................................	178
28.7.4 no port-access-authenticator ................................................................	179
28.7.5 no ssh ...................................................................................................	179
28.8 spq ................................................................................................................	180
28.9 wrr .................................................................................................................	180
28.10 interface Commands ...................................................................................	181
28.10.1 interface port-channel .......................................................................	181
28.10.2 bmstorm-limit .....................................................................................	181
28.10.3 bandwidth-limit ..................................................................................	182
28.10.4 mirror .................................................................................................	182
28.10.5 gvrp ...................................................................................................	183
28.10.6 frame-type .........................................................................................	184

Table of Contents

15

ES-2108 Series User’s Guide

28.10.7 egress set ..........................................................................................		184
28.10.8 qos priority ..........................................................................................		185
28.10.9 name ..................................................................................................		185
28.10.10 speed-duplex ....................................................................................		186
Chapter 29
IEEE 802.1Q Tagged VLAN Commands .............................................................		187
29.1	IEEE 802.1Q Tagged VLAN Overview ..........................................................	187
29.2	VLAN Databases ...........................................................................................	187
29.2.1 Static Entries (SVLAN Table) ...............................................................		187
29.2.2 Dynamic Entries (DVLAN Table) ..........................................................		188
29.3	Configuring Tagged VLAN .............................................................................	188
29.4	Global VLAN1Q Tagged VLAN Configuration Commands ............................	189
29.4.1 GARP Status ........................................................................................		189
29.4.2 GARP Timer ........................................................................................		189
29.4.3 GVRP Timer .........................................................................................		190
29.4.4 Enable GVRP .......................................................................................		190
29.4.5 Disable GVRP ......................................................................................		191
29.4.6 Enable Ingress Checking ....................................................................		191
29.5 Port VLAN Commands ..................................................................................		191
29.5.1 Set Port VID ........................................................................................		191
29.5.2 Set Acceptable Frame Type .................................................................		192
29.5.3 Enable or Disable Port GVRP ..............................................................		192
29.5.4 Modify Static VLAN .............................................................................		192
	29.5.4.1 Modify a Static VLAN Table Example .........................................	193
	29.5.4.2 Forwarding Process Example .....................................................	193
29.5.5 Delete VLAN ID ....................................................................................		194
29.6	Enable VLAN ................................................................................................	194
29.7	Disable VLAN ................................................................................................	195
29.8	Show VLAN Setting ......................................................................................	195
Chapter 30
Troubleshooting...................................................................................................		197
30.1	Problems Starting Up the Switch ...................................................................	197
30.2	Problems Accessing the Switch ....................................................................	197
30.2.1 Pop-up Windows, JavaScripts and Java Permissions .........................		198
	30.2.1.1 Internet Explorer Pop-up Blockers ..............................................	198
	30.2.1.2 JavaScripts .................................................................................	201
	30.2.1.3 Java Permissions .......................................................................	203
30.3	Problems with the Password .........................................................................	205

Appendix A

16	Table of Contents

	ES - 2108 Series User’s Guide
Product Specifications	........................................................................................ 207
Appendix B
IP Subnetting.........................................................................................................	211
Index......................................................................................................................	219

Table of Contents

17

ES-2108 Series User’s Guide

18	Table of Contents

ES-2108 Series User’s Guide

List of Figures

Figure 1 Backbone Application ..............................................................................	30
Figure 2 Bridging Application ................................................................................	30
Figure 3 High Performance Switched Application .................................................	31
Figure 4 Tag-based VLAN Application ...................................................................	32
Figure 5 Shared Server Using VLAN Example ......................................................	32
Figure 6 Attaching Rubber Feet ............................................................................	33
Figure 7 Attaching the Mounting Brackets .............................................................	34
Figure 8 Mounting the Switch on a Rack ..............................................................	35
Figure 9 Front Panel: ES-2108 ..............................................................................	37
Figure 10 Front Panel: ES-2108-G/ES-2108PWR ...............................................	37
Figure 11 Front Panel: ES-2108-LC .....................................................................	37
Figure 12 Transceiver Installation Example ...........................................................	39
Figure 13 Installed Transceiver ............................................................................	40
Figure 14 Opening the Transceiver’s Latch Example ............................................	40
Figure 15 Transceiver Removal Example ..............................................................	40
Figure 16 Rear Panel ............................................................................................	41
Figure 17 Web Configurator: Login ........................................................................	44
Figure 18 Web Configurator Home Screen (Status) ..............................................	44
Figure 19 Change Administrator Login Password .................................................	48
Figure 20 Resetting the Switch: Via the Console Port ...........................................	49
Figure 21 Web Configurator: Logout Screen .........................................................	50
Figure 22 Initial Setup Network Example: VLAN ...................................................	51
Figure 23 Initial Setup Network Example: Port VID ...............................................	53
Figure 24 Initial Setup Example: Management IP Address ...................................	53
Figure 25 Status (ES-2108PWR) ...........................................................................	55
Figure 26 Status: Port Details (ES-2108PWR) ......................................................	57
Figure 27 System Info (ES-2108PWR) ..................................................................	62
Figure 28 General Setup .......................................................................................	64
Figure 29 Switch Setup .........................................................................................	66
Figure 30 IP Setup .................................................................................................	68
Figure 31 Port Setup (ES-2108PWR) ....................................................................	70
Figure 32 Port VLAN Trunking ...............................................................................	75
Figure 33 Switch Setup: Select VLAN Type ..........................................................	75
Figure 34 VLAN: VLAN Status ..............................................................................	76
Figure 35 VLAN: Static VLAN ...............................................................................	77
Figure 36 VLAN: VLAN Port Setting ......................................................................	78
Figure 37 Port Based VLAN Setup (All Connected) ..............................................	80
Figure 38 Port Based VLAN Setup (Port Isolation) ...............................................	81

List of Figures

19

ES-2108 Series User’s Guide

Figure 39 Static MAC Forwarding ..........................................................................	83
Figure 40 Filtering ..................................................................................................	85
Figure 41 Spanning Tree Protocol: Status .............................................................	89
Figure 42 Spanning Tree Protocol: Configuration ..................................................	90
Figure 43 Bandwidth Control .................................................................................	93
Figure 44 Broadcast Storm Control .......................................................................	95
Figure 45 Mirroring ................................................................................................	97
Figure 46 Link Aggregation Control Protocol Status .............................................	100
Figure 47 Link Aggregation: Configuration ............................................................	101
Figure 48 RADIUS Server ....................................................................................	103
Figure 49 Port Authentication ................................................................................	104
Figure 50 Port Authentication: 802.1x ...................................................................	104
Figure 51 Port Authentication: RADIUS ................................................................	105
Figure 52 Port Security ..........................................................................................	107
Figure 53 Queuing Method ....................................................................................	110
Figure 54 Static Routing ........................................................................................	111
Figure 55 DiffServ: Differentiated Service Field .....................................................	113
Figure 56 DiffServ Network Example .....................................................................	114
Figure 57 DiffServ ..................................................................................................	114
Figure 58 DiffServ: DSCP Setting ..........................................................................	115
Figure 59 Maintenance .........................................................................................	117
Figure 60 Firmware Upgrade ................................................................................	118
Figure 61 Restore Configuration ..........................................................................	118
Figure 62 Backup Configuration ............................................................................	119
Figure 63 Load Factory Default: Conformation .....................................................	119
Figure 64 Load Factory Default: Start ....................................................................	120
Figure 65 Reboot System: Confirmation ...............................................................	120
Figure 66 Reboot System: Start ............................................................................	120
Figure 67 Console Port Priority .............................................................................	123
Figure 68 Access Control ......................................................................................	123
Figure 69 SNMP Management Model ..................................................................	124
Figure 70 Access Control: SNMP ..........................................................................	126
Figure 71 Access Control: Logins ..........................................................................	127
Figure 72 SSH Communication Example ...............................................................	128
Figure 73 How SSH Works .....................................................................................	128
Figure 74 SSH Login Example ..............................................................................	130
Figure 75 HTTPS Implementation ..........................................................................	131
Figure 76 Security Alert Dialog Box (Internet Explorer) ..........................................	132
Figure 77 Security Certificate 1 (Netscape) ............................................................	132
Figure 78 Security Certificate 2 (Netscape) ............................................................	133
Figure 79 Login Screen (Internet Explorer) ............................................................	134
Figure 80 Login Screen (Netscape) ........................................................................	134
Figure 81 Access Control: Service Access Control ...............................................	135

20	List of Figures

ES-2108 Series User’s Guide
Figure 82 Access Control: Remote Management ..................................................	136
Figure 83 Diagnostic ..............................................................................................	137
Figure 84 Clustering Application Example .............................................................	139
Figure 85 Cluster Management: Status .................................................................	140
Figure 86 Cluster Management: Cluster Member Web Configurator Screen ........	141
Figure 87 Example: Uploading Firmware to a Cluster Member Switch .................	142
Figure 88 Clustering Management Configuration .................................................	143
Figure 89 MAC Table Flowchart ............................................................................	145
Figure 90 MAC Table .............................................................................................	146
Figure 91 ARP Table .............................................................................................	148
Figure 92 Initial Console Port Screen .....................................................................	150
Figure 93 SSH Login Example ..............................................................................	151
Figure 94 CLI Login ..............................................................................................	151
Figure 95 CLI Help: List of Commands: Example 1 ..............................................	153
Figure 96 CLI Help: List of Commands: Example 2 ..............................................	153
Figure 97 CLI Help: Detailed Command Information: Example 1 ..........................	154
Figure 98 CLI: Help: Detailed Command Information: Example 2 .........................	154
Figure 99 CLI: History Command Example ...........................................................	155
Figure 100 CLI: write memory ...............................................................................	155
Figure 101 show system-information Command Example ....................................	171
Figure 102 show ip Command Example ................................................................	172
Figure 103 show logging Command Example .......................................................	173
Figure 104 show interface Command Example .....................................................	174
Figure 105 show mac address-table Command Example .....................................	175
Figure 106 ping Command Example .....................................................................	175
Figure 107 traceroute Command Example ............................................................	176
Figure 108 Enable RSTP Command Example ......................................................	176
Figure 109 CLI: boot config Command Example ...................................................	177
Figure 110 CLI: reload config Command Example ................................................	177
Figure 111 CLI: Reset to the Factory Default Example ..........................................	177
Figure 112 no mirror-port Command Example ......................................................	178
Figure 113 no https timeout Command Example ...................................................	178
Figure 114 no trunk Command Example ...............................................................	179
Figure 115 no port-access-authenticator Command Example ...............................	179
Figure 116 no ssh Command Example ..................................................................	180
Figure 117 spq Command Example ......................................................................	180
Figure 118 wrr Command Example .......................................................................	181
Figure 119 interface Command Example ..............................................................	181
Figure 120 broadcast-limit Command Example ....................................................	182
Figure 121 bandwidth-limit Command Example ....................................................	182
Figure 122 mirror Command Example ..................................................................	183
Figure 123 gvrp Command Example .....................................................................	184
Figure 124 frame-type Command Example ...........................................................	184

List of Figures

21

ES-2108 Series User’s Guide

Figure 125 egress set Command Example ...........................................................	185
Figure 126 qos priority Command Example ..........................................................	185
Figure 127 name Command Example ...................................................................	186
Figure 128 speed-duplex Command Example ......................................................	186
Figure 129 Tagged VLAN Configuration and Activation Example .........................	188
Figure 130 CPU VLAN Configuration and Activation Example .............................	189
Figure 131 GARP STATUS Command Example ...................................................	189
Figure 132 GARP Timer Command Example .........................................................	190
Figure 133 GVRP Status Command Example .......................................................	190
Figure 134 ingress-check Command Example ......................................................	191
Figure 135 vlan1q port default vid Command Example .........................................	192
Figure 136 frame type Command Example ...........................................................	192
Figure 137 no gvrp Command Example ................................................................	192
Figure 138 Modifying Static VLAN Example ..........................................................	193
Figure 139 no vlan Command Example ................................................................	194
Figure 140 show vlan Command Example ............................................................	195
Figure 141 Pop-up Blocker .....................................................................................	198
Figure 142 Internet Options ...................................................................................	199
Figure 143 Internet Options ....................................................................................	200
Figure 144 Pop-up Blocker Settings .......................................................................	201
Figure 145 Internet Options ....................................................................................	202
Figure 146 Security Settings - Java Scripting .........................................................	203
Figure 147 Security Settings - Java ........................................................................	204
Figure 148 Java (Sun) ............................................................................................	204

22	List of Figures

ES-2108 Series User’s Guide

List of Tables

Table 1 Front Panel ...............................................................................................	38
Table 2 Front Panel LEDs ......................................................................................	41
Table 3 Navigation Panel Sub-links Overview .......................................................	45
Table 4 Web Configurator Screen Sub-links Details ..............................................	46
Table 5 Navigation Panel Links .............................................................................	46
Table 6 Status ........................................................................................................	56
Table 7 Status: Port Details ....................................................................................	57
Table 8 System Info ...............................................................................................	62
Table 9 General Setup ...........................................................................................	64
Table 10 Switch Setup ...........................................................................................	67
Table 11 IP Setup ...................................................................................................	69
Table 12 Port Setup ...............................................................................................	70
Table 13 IEEE 802.1q Terminology .......................................................................	74
Table 14 VLAN: VLAN Status ................................................................................	76
Table 15 VLAN: Static VLAN .................................................................................	77
Table 16 VLAN: VLAN Port Setting .......................................................................	79
Table 17 Port Based VLAN Setup .........................................................................	81
Table 18 Static MAC Forwarding ...........................................................................	84
Table 19 FIltering ...................................................................................................	85
Table 20 STP Path Costs ......................................................................................	87
Table 21 STP Port States ......................................................................................	88
Table 22 Spanning Tree Protocol: Status ...............................................................	89
Table 23 Spanning Tree Protocol: Configuration ...................................................	90
Table 24 Bandwidth Control ...................................................................................	93
Table 25 Broadcast Storm Control .........................................................................	95
Table 26 Mirroring ..................................................................................................	98
Table 27 Link Aggregation ID: Local Switch ..........................................................	100
Table 28 Link Aggregation ID: Peer Switch ...........................................................	100
Table 29 Link Aggregation Control Protocol Status ...............................................	101
Table 30 Link Aggregation Control Protocol: Configuration ...................................	102
Table 31 Port Authentication: 802.1x .....................................................................	104
Table 32 Port Authentication: RADIUS ..................................................................	105
Table 33 Port Security ...........................................................................................	108
Table 34 Physical Queue Priority ...........................................................................	109
Table 35 Queuing Method .....................................................................................	110
Table 36 Static Routing ..........................................................................................	111
Table 37 DiffServ ...................................................................................................	114
Table 38 Default DSCP-IEEE802.1p Mapping ......................................................	115

List of Tables

23

ES-2108 Series User’s Guide

Table 39 DiffServ: DSCP Setting ...........................................................................	115
Table 40 Maintenance ...........................................................................................	117
Table 41 Filename Conventions ............................................................................	121
Table 42 Access Control Overview ........................................................................	123
Table 43 SNMP Commands ..................................................................................	124
Table 44 SNMP Traps ............................................................................................	125
Table 45 Access Control: SNMP ...........................................................................	126
Table 46 Access Control: Logins ...........................................................................	127
Table 47 Access Control: Service Access Control .................................................	135
Table 48 Access Control: Remote Management ...................................................	136
Table 49 Diagnostic ...............................................................................................	137
Table 50 ZyXEL Clustering Management Specifications .......................................	139
Table 51 Cluster Management: Status ...................................................................	140
Table 52 FTP Upload to Cluster Member Example ...............................................	142
Table 53 Clustering Management Configuration ...................................................	143
Table 54 MAC Table ..............................................................................................	146
Table 55 ARP Table ...............................................................................................	148
Table 56 Command Summary: User Mode ..........................................................	156
Table 57 Command Summary: Enable Mode ........................................................	156
Table 58 Command Summary: Configuration Mode ..............................................	159
Table 59 interface port-channel Commands ..........................................................	166
Table 60 Command Summary: config-vlan Commands ........................................	168
Table 61 Troubleshooting the Start-Up of Your Switch ..........................................	197
Table 62 Troubleshooting Accessing the Switch ...................................................	197
Table 63 Troubleshooting the Password ................................................................	205
Table 64 General Product Specifications ...............................................................	207
Table 65 Management Specifications ....................................................................	208
Table 66 Physical and Environmental Specifications .............................................	209
Table 67 Classes of IP Addresses .........................................................................	211
Table 68 Allowed IP Address Range By Class ......................................................	212
Table 69 “Natural” Masks ......................................................................................	212
Table 70 Alternative Subnet Mask Notation ...........................................................	213
Table 71 Two Subnets Example ............................................................................	213
Table 72 Subnet 1 ..................................................................................................	214
Table 73 Subnet 2 ..................................................................................................	214
Table 74 Subnet 1 ..................................................................................................	215
Table 75 Subnet 2 ..................................................................................................	215
Table 76 Subnet 3 ..................................................................................................	215
Table 77 Subnet 4 ..................................................................................................	216
Table 78 Eight Subnets ..........................................................................................	216
Table 79 Class C Subnet Planning ........................................................................	216
Table 80 Class B Subnet Planning ........................................................................	217

24	List of Tables

ES-2108 Series User’s Guide

Preface

Congratulations on your purchase of the ES-2108 Series Ethernet Switch.

This preface introduces you to the ES-2108 Series Ethernet Switch and discusses the conventions of this User’s Guide. It also provides information on other related documentation.

About This User's Guide

This manual is designed to guide you through the installation and configuration of your ES-2108 Series for its various applications.

Related Documentation

•Web Configurator Online Help

Embedded web help for descriptions of individual screens and supplementary information.

•ZyXEL Web Site

Please go to http://www.zyxel.com for product news, firmware, updated documents, and other support materials.

Syntax Conventions

•“Enter” means for you to type one or more characters. “Select” or “Choose” means for you to use one of the predefined choices.

•Command and arrow keys are enclosed in square brackets. [ENTER] means the Enter, or carriage return key; [ESC] means the Escape key and [SPACE BAR] means the Space Bar.

•Mouse action sequences are denoted using a comma. For example, “In Windows, click Start, Settings and then Control Panel” means first click the Start button, then point your mouse pointer to Settings and then click Control Panel.

•“e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

•The ES-2108 Series Ethernet Switch may be referred to as “the switch” unless otherwise specified in this User’s Guide.

Preface

25

ES-2108 Series User’s Guide

Graphics Icons Key

ES-2108 Series	Computer	Server
Computer	DSLAM	Gateway
Central Office/ ISP	Internet	Hub/Switch

User Guide Feedback

Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to [e-mail] or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.

26

Preface

ES-2108 Series User’s Guide

CHAPTER 1

Getting to Know Your Switch

This chapter introduces the main features and applications of the switch.

1.1 Introduction

The switch is a stand-alone layer-2 Ethernet switch with eight 10/100Mbps ports. The ES- 2108-G and ES-2108PWR also includes one Gigabit/mini-GBIC port. The ES-2108-LC provides one mini-GBIC slot and one 100 Base-FX fiber optic port for optical uplinking.

With its built-in web configurator, managing and configuring the switch is easy. In addition, the switch can also be managed via Telnet, SSH (Secure SHell), any terminal emulator program on the console port, or third-party SNMP management.

1.2 Software Features

This section describes the general software features of the switch.

DHCP Client

DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain TCP/IP configuration at start-up from a server. You can configure the switch as a DHCP client to obtain TCP/IP information (such as the IP address and subnet mask) from a DHCP server. If you disable the DHCP service, you must manually enter the TCP/IP information.

VLAN

A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group. With VLAN, a device cannot directly talk to or hear from devices that are not in the same group(s); the traffic must first go through a router.

Differentiated Services (DiffServ)

With DiffServ, the switch marks packets so that they receive specific per-hop treatment at DiffServ-compliant network devices along the route based on the application types and traffic flow.

Chapter 1 Getting to Know Your Switch

27

ES-2108 Series User’s Guide

Queuing

Queuing is used to help solve performance degradation when there is network congestion. Two scheduling services are supported: Strict Priority Queuing (SPQ) and Weighted Round Robin (WRR). This allows the switch to maintain separate queues for packets from each individual source or flow and prevent a source from monopolizing the bandwidth.

Port Mirroring

Port mirroring allows you to copy traffic going from one or all ports to another or all ports in order that you can examine the traffic from the mirror port (the port you copy the traffic to) without interference.

Static Route

Static routes tell the switch how to forward IP traffic when you configure the TCP/IP parameters manually.

IGMP Snooping

The switch supports IGMP snooping enabling group multicast traffic to be only forwarded to ports that are members of that group; thus allowing you to significantly reduce multicast traffic passing through your switch.

STP (Spanning Tree Protocol) / RSTP (Rapid STP)

(R)STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other (R)STP -compliant switches in your network to ensure that only one path exists between any two stations on the network.

Link Aggregation

Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.

Port Authentication and Security

For security, the switch allows authentication using IEEE 802.1x with an external RADIUS server and port security that allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch.

Maintenance and Management Features

•Access Control

You can specify the service(s) and computer IP address(es) to control access to the switch for management.

•Cluster Management

28	Chapter 1 Getting to Know Your Switch

ES-2108 Series User’s Guide

Cluster management (also known as iStacking) allows you to manage switches through one switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another.

•Configuration and Firmware Maintenance

You can backup or restore the switch configuration or upgrade the firmware on the switch.

1.3Hardware Features

This section describes the ports on the switch.

Ethernet Ports

The ports allow the switch to connect to another Ethernet devices.

Gigabit Ethernet Port

Avaliable on the ES-2108-G and ES-2108PWR, the port allows the switch to connect to another WAN switch.

Mini-GBIC Slot

Install SPF transceivers in this slot to connect to other Ethernet switches at longer distances than the Ethernet port.

Console Port

Use the console port for local management of the switch.

PoE (Power over Ethernet)

The ES-2108PWR can provide power to a device (that supports PoE) such as an access point or a switch through a 10/100Mbps Ethernet port.

1.4 Applications

This section shows a few examples of using the switch in various network environments.

1.4.1 Backbone Application

In this application, the switch is an ideal solution for small networks where rapid growth can be expected in the near future.

Chapter 1 Getting to Know Your Switch

29

ES-2108 Series User’s Guide

The switch can be used standalone for a group of heavy traffic users. You can connect computers directly to the switch’s port or connect other switches to the switch.

In this example, all computers can share high-speed applications on the server. To expand the network, simply add more networking devices such as switches, routers, computers, print servers etc.

Figure 1 Backbone Application

1.4.2 Bridging Example

In this example application the switch connects different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the switch.

For ES-2108G, you can provide a super-fast uplink connection by using a Gigabit Ethernet/ mini-GBIC port on the switch.

Moreover, the switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location.

Figure 2 Bridging Application

30	Chapter 1 Getting to Know Your Switch