ZyXEL Communications IES1248 User Manual

IES1248

Support Notes

March 2006

IES 1248 Support Notes

Index

Application Notes............................................................................................................................ 4

Provide Different DSL Port Speeds to different subscribers.......................................4

How to apply the profile to ports...................................................................................... 4

How to configure 802.1Q VLAN............................................................................... 10

How to set up a VLAN environment.............................................................................. 11

Triple play Application.............................................................................................. 14

How to set up a Multiple PVCs environment................................................................. 15

802.1x Application....................................................................................................23

How to set up an 802.1x environment............................................................................ 23

Setting up the Syslog Server ...................................................................................28

How to set up a Syslog server......................................................................................... 28

Setting up the Ring Environment ............................................................................. 30

How to set up a Ring Environment................................................................................. 31

Setting up the IGMP Snooping/IGMP Filtering......................................................... 37

How to set up IGMP snooping/IGMP filtering............................................................... 38

Static Multicast......................................................................................................... 40

How to configure Static Multicast filter ......................................................................... 42

Limit the users behind the certain DSL port............................................................. 46

How to set up MAC Filter/Port Security ........................................................................ 47

DHCP Relay Option 82 Application..........................................................................49

How to set up DHCP Relay Option 82 Environment..................................................... 50

Filter Some Certain Packet...................................................................................... 60

How to Filter Some Specific Packet............................................................................... 60

Cascade two IES1248 (Daisy chain mode).............................................................. 62

How to setup Daisy-chain mode..................................................................................... 62

VLAN Application.....................................................................................................63

How to configure VLAN:............................................................................................... 64

FAQ ................................................................................................................................................ 80

What is the maximum line rate of IES1248 ?........................................................... 80

How many management instances can access IES-1248 at the same time?..........80

What is the difference between IES1248-71 and IES1248-73 ?.............................. 80

What is the power requirement of IES- 1248?.........................................................80

What kind of the DSL standard does IES1248 compliant ?......................................80

What is the ADSL chipset of IES1248?.................................................................... 80

What is the Network Processor of IES1248 ?.......................................................... 80

How many Flash memory and SDRAM that IES 1248 supports?............................80

What kind of the features that IES 1248 supports ?................................................. 81

IES 1248 Support Notes

What is the default console rate of IES1248 ?......................................................... 81

How many static VLAN entries can IES1248 support ?...........................................81

How many VLANs can each ADSL port of IES1248 join ?....................................... 81

What kinds of profiles can IES1248 supprot?.......................................................... 81

Trouble Shooting........................................................................................................................83

If my computer can’t access the DSLAM by WEB/Telnet/Ping from Ethernet port, only

console screen can access successfully, what can I do?.........................................83

If DHCP Relay Option 82 can’t work, for example, PC can not get desired IP address

from DHCP server, what can I do?...........................................................................85

How to reset this device as factory default?............................................................. 85

xDSL link fail?..........................................................................................................90

Which new version I should upgrade?.....................................................................90

I forgot the Password, how do I recover it?..............................................................91

I can not access the DSLAM via console port. What should I do?...........................91

There is no traffic could be transmitted through the DSLAM, what should I do?...... 92

Alarm Led is always on, what should I do?.............................................................. 92

IES 1248 Support Notes

Application Notes

Provide Different DSL Port Speeds to different subscribers

An ISP may provide different Line speeds for each DSL port. In our IES-1248 have an easy way to configure the line speed for each port. It can create some profiles which can set different parameters to meet the different users’ requirement. In this application, we will set up two profiles. One is for low speed requirement with upstream/downstream is 2M/512Kbps and the other is for high speed requirement with upstream/downstream is 25M/1.2Kbps. We suppose there are general subscribers from port 1 to port 24 with a low speed profile and some enterprise users from port 25 to port 48 with high speed profile.

Internet

IES-1248

ADSL

Port 1

Port 24 Port 25

Uplink

Port 48

modem

2M/512K 25M/1.2M

How to apply the profile to ports

In this application, we need to configure IES1-1248 and ADSL CPE. We use ZyXEL Prestige 660R-61 CPE here.

1. IES-1248 Settings

1.1 Profiles settings

Click Basic Setting, xDSL Profiles Setup in the navigation panel to display configuration screen as shown.

IES 1248 Support Notes

Set up Low Speed Profile. Give this profile a name like Profile_LowSpeed and input the MaxRate for Up Stream and Down Stream. In this case, we set 512Kbps and 2048Kbps for Up Stream and Down Stream.

Set up High Speed Profile. Give this profile a name like Profile_HighSpeed and input the MaxRate for Up Stream and Down Stream . In this case, we set 1280Kbps and 24992Kbps for Up Stream and Down Stream.

IES 1248 Support Notes

1.2 Profile Assignment

Click Basic Setting, xDSL Port Setup in th e navigation p anel to display configuratio n screen as shown.

Assign Profile_LowSpeed to port 1. Click a number 1 in the Port index field to enter Port setup screen. Select the Profile_LowSpeed profile and press Apply button.

Copy the settings of port 1 to the ports from 2 to 24. After finishing port 1 setting, the screen will be back to the xDSL port Setting screen. Select port 1 in Copy Port

IES 1248 Support Notes

combobox. Check the Active and Profile&Mode. After press the Paste button. It will pop up a screen to select the ports. Select the ports you want to copy the configuration to and press Apply button. The settings of port 1 will be copied to other ports.

For the high speed profile, you can set the Profile_HighSpeed to port 25. You also can select ADSL2+ mode in Mode combobox. That will fix the mode on ADSL2+ mode.

Copy the settings of port 25 to the ports from 26 to 48. You can follow the same procedures as port 1.

IES 1248 Support Notes

2. Prestige 660R-61 Settings

We configure Prestige 660R-61 as bridge mode. The default VPI/VCI of IES-1248 is 0/33. So we need to set up such values. Prestige 660R-61 has a Telnet server inside. We need to configure it via Telnet.

2.1 Menu1: General Setup

Go to Menu 1. In this menu, we must set “Rout IP = NO” and “Bridge = YES”.

2.2 Menu4: Internet Access Setup

The encapsulation must be RFC 1483 for bridge mode. The Multiplexing should be the same as IES-1248. The LLC-based is default mode of IES1248. Additionally, we must check if the VPI/VCI is the same as IES-1248. The default VPI/VCI of IES1248 is 0/33.

IES 1248 Support Notes

2.3 Menu11.1: Remote Node Profile

In menu11.1, we should activate this profile with “Active= Yes”. The Encapsulation and the Multiplexing are the same as the menu 4. Setting “Edit ATM Options=Yes” will enter Menu 11.6.

2.4 Menu11.6: Remote Node ATM Layer Options

Check the values above are the same as the IES-1248.

IES 1248 Support Notes

You can click Basic Setting and xDSL Line Data in navigation Panel to display configuration screen as shown. Select the port connected to the IES-1248. You will see the link speed and link mode.

How to configure 802.1Q VLAN

A VLAN (Virtual Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network belong to one group called VLAN group. A station can belong to more than one group. The stations on the same VLAN group can communicate with each other. With VLAN, a station cannot directly talk to or hear from stations that are not in the same VLAN groups. We want to deploy VALN environment in this application. The following figure shows the VLAN example. Two PCs connect to the port 1 and port 2 of the line card

IES 1248 Support Notes

and belong to different VLAN. One is VLAN 10 and the other is VLAN 20. So they can’t communication with each other. But both PC 1 and PC 2 can connect to Internet.

Internet

IES-1248

Uplink

Port 2

ADSL

PC 2 VLAN20

PC 1 VLAN10

Port 1

ADSL

How to set up a VLAN environment.

In this application, we need to configure IES1-1248 and ADSL CPE. We use ZyXEL Prestige 660R-61 CPE here. Because the two ports belong to different VLAN want to go to the Internet via Uplink port of IES1248, we need to set up an extra VLAN and let the two ports be members of this VLAN.

1. IES-1248 Settings

1.1 VLAN settings

Click Advanced Application, VLAN in the navigation panel to display configuration screen as shown. Click Static VLAN to set the VLAN parameters.

Add VLAN10. Assign Port 1, ENET1 and ENET2 to be members of VLAN10 as shown.

IES 1248 Support Notes

Add VLAN20. Assign Port 2, ENET1 and ENET2 to be members of VLAN20 as shown.

Add VLAN200. Assign Port 1, Port2, ENET1 and ENET2 to be members of VLAN200 as shown.

IES 1248 Support Notes

1.2 PVID settings

After set up the three VLAN, we can see Vlan10, Vlan20 and Vlan200 as shown. Now,

click VLAN Port Setting to set the PVID.

We assign VLAN 200(PVID) to ENET1, ENET2. Also, we assign VLAN 10 and VLAN 20 to Port1 and port2, respectively as shown.

IES 1248 Support Notes

1.3 Port Isolation

If we just want to isolate ports of IES-1248 and don’t want to set any VLAN, there is another easy way to do this. Click Basic setting, Switch Setup in navigation panel

to display configuration screen as shown. Check Port isolation Active check box.

2. Prestige 660R-61 Settings

Please refer to the procedures in previous application.

Triple play Application

The IES-1248 allows you to use different channels(also called Permanent Virtual Circuits or PVCs) for different services. Define channels on each DSL port for different services and assign each channel a priority, a VLAN and ATM Quality of Service (QoS). The ATM QoS allows you to regulate the average rate and fluctuations of data transmission. This helps eliminate congestion to allow transmission of real time data (such as audio and video).

IES 1248 Support Notes

In this application, we demonstrate how to set up the multiple PVCs environment. From the figure below, the PC wants to access the two kinds of network services. One is the Internet service (data service) and the other is Video service. Because we hope we can see the video smoothly, we need to set the video service higher priority. In IES-1248, we can set the two services with different VLANs and assign the PVCs with different VLAN, priority and ATM QoS. That will make the video traffic get the higher priority than data traffic. We also can expand this application to triple play environment.

Internet

IES-1248

DSL Port 1

Ethernet Port

802.1Q VLAN Switch

Port 10

Port 2 PVID=20

Port 1 PVID=10

Internet Access

VLAN 20

PVID =10

Priority =7

ATM QoS=CBR

PVID =20 Priority =0 ATM QoS=UBR

Video Server

0/33 1/34

VLAN 10

CPE

How to set up a Multiple PVCs environment.

Following procedures will introduce the settings of IES-1248, VLAN-aware switch and ADSL CPE. We use ZyXEL ES-2024 and Prestige 660R-61 as VLAN-aware switch and ADSL CPE, respectively.

1. IES-1248 Settings

1.1 VLAN setup

We can set up VLAN like procedure described in VLAN application. Add VLAN10. Assign Port 1, ENET1 to be members of VLAN10 as show. We need to check the Tx Tagging on ENET1.

IES 1248 Support Notes

Add VLAN20. Assign Port 1, ENET1 to be members of VLAN20 as show. We need to check the Tx Tagging on ENET1.

1.2 VC profile setup

Click Basic Setting and xDSL Profile Setup in navigation panel to display the configuration screen as shown. Click VC profiles in this screen.

IES 1248 Support Notes

Add Defval_CBR VC profile. Set up Encap, Class, PCR and CDVT as shown. Encap should be LLC the same as IES-1248. Class should be CBR which has higher priority in ATM QoS.

1.3 Multiple PVCs setup

Click Basic Setting and xDSL Port Setup in navigation panel to display the configuration screen as shown. Click VC Setup in this screen.

IES 1248 Support Notes

We hope VPI/VCI with 0/33 get the higher priority. We should modify this VPI/VCI with Defval_CBR profile which we created before. Press Apply button to make it take effect.

Then we add the VPI/VCI with 0/34. We apply the DEFVAL profile to this channel.

2. Prestige 660R-61 Settings

We need to set two channels. One is 0/33 and the other is 0/34. From former

IES 1248 Support Notes

application, we already knew how to set up CPE with one channel (0/33). We just demonstrate how to set up second channel.

2.1 Menu11.1: Remote Node Profile

In menu11.1, we should activate this profile with “Active= Yes”. The Encapsulation and the Multiplexing are the same as the menu 4. Setting “Edit ATM Options=Yes” will enter Menu 11.6.

2.2 Menu11.6: Remote Node ATM Layer Options

We should set up another VPI/VCI with 0/34 the same as the IES-1248.

3. ES-2024 settings

3.1 VALN

Click Advanced Application and VLAN in navigation panel to display configuration screen as shown. Click Static VLAN to show VLAN setup screen.

IES 1248 Support Notes

Add VLAN10. Assign Port 1, Port 10 to be members of VLAN10 as show. We need to check the Tx Tagging on Port 10.

IES 1248 Support Notes

Add VLAN20. Assign Port 2, Port 10 to be members of VLAN20 as show. We need to check the Tx Tagging on Port 10.

3.2 PVID setup

Click Advanced Application and VLAN in navigation panel to display configuration screen as shown. Click VLAN Port Setting to show PVID setup screen.

IES 1248 Support Notes

Let 10 be the PVID of Port 1 and 20 be the PVID of Port 2.

In this application, you will see the video traffic will go via 0/33 and data traf fic

IES 1248 Support Notes

will go via 0/34. And the 0/33 get the higher priority. The video traffic will go first when the two traffics arrive at the same time.

802.1x Application

IEEE 802.1x port-based authentication is desired to prevent unauthorized ports (clients) from gaining access to the network. It is an extended authentication protocol that allows support of RADIUS (Remote Authentication Dial in User Service, RFC2138, 2139) for centralized user profile management on a network RADIUS server. We want to deploy 802.1x environment in this application. The following figure shows the 802.1x example. PC1(supplicant) and PC2(supplicant) want to access to the application server. If PC1 is not unauthorized, the traffic from PC1 to application server will be blocked. If PC2 is an authorized client, then it can access to the application server. From the figure, IES1248 acts as an authenticator.

Authentication

Server (RADIUS)

Unauthorized

IES-1248

(Authenticator)

ADSL

Port x

Authorized

Station/

Application server

Port y

ADSL

PC 1

PC 2

(Supplicant)

How to set up an 802.1x environment.

We should configure Authenticator, RADIUS and Supplicant three parts in 802.1x

IES 1248 Support Notes

environment. The Microsoft 802.1x client and ZyXEL Vantage 50 will be used as supplication and RADIUS, respectively. Following sections will describe the detailed procedure to set up the environment.

1. IES-1248 (Authenticator) settings:

1.1 RADIUS settings:

Click Advanced Application, Port Authentication in the navigation panel to display configuration screen as shown. Click Enable Authentication Server and set the RADIUS server IP address, UDP port and shared Secret, which is the same as Radius server. Then click Apply to make the settings take effect.

Click the 802.1x link to enter the 802.1x settings. Check the Enable Authentication and click Apply button to enable 802.1x authentication. Check Enable to turn on 802.1x authentication on that port. You can leave other settings

as default values. Click Apply to save your changes.

IES 1248 Support Notes

2. Vantage 50(RADIUS) settings:

We use Vantage 50 as the RADIUS server. It’s a one of ZyXEL’s product. Of course, you can use other RADIUS server like Funk Steel-Belted RADIUS, Cisco Access Control Server, MeetingHouse Aegis server and so on. You can configure it by WEB GUI and its default IP is 192.168.1.3.

2.1 RADIUS server setup

Click RADIUS, RADIUS SERVER in the navigation panel to display configuration screen as shown. You can use the default values or change the Authentication port,

Shared Secret. Remember these values MUST be the as the settings of client.

2.2 Create User Account

Click RADIUS, USER ACCOUNT in the navigation panel to display configuration screen as shown. You can use the existed user account or create the new one by clicking Add New User button. Remember the client site MUST use the account in RADIUS server.

IES 1248 Support Notes

3. Windows XP(Supplicant) settings:

There are many supplicants we can choose like MeetingHouse Aegis client, Funk Odyssey client and Microsoft 802.1x client. We take Microsoft 802.1x client as an example here.

3.1 802.1x/MD5-challenge setup

Open the Local Area connection Properties, and then click Authentication page. Check the Enable IEEE 802.1x authentication for this network and select the MD5-challenge in EAP type combobox. Please see the following figure.

When the 802.1x starts, it will prompt you to enter the user name and password. Please see the following figure.

IES 1248 Support Notes

After click the icon, there will be a dialog for entering the user name and password. Click ok after input the correct user name and password that are in the database of authentication server. The settings of client site are finished.

IES 1248 Support Notes

After above procedure, we can allow the authenticated port the access the server. If the DSL port doesn’t be authenticated, the PCs behind the port can’t access the network.

4. Prestige 660R-61 Settings

Please refer to the procedures in previous application.

Setting up the Syslog Server

ZyXEL products are able to send system log to a Syslog deamon such as Unix Syslogd and Kiwi's Syslog Daemon ( http://www.kiwisyslog.com/ ). When DSL or Ethernet ports are linked up/down, IES-1248 sends a record to Syslog server. The Syslog server can be placed on the network, which IES-1248 can access.

Syslog server

Network

Port

link

ADSL

IES-1248

modem

How to set up a Syslog server.

We should configure IES-1248 and Syslog server in this application. Here, we use the Kiwi's Syslog Daemon as an example. Following sections will describe the detailed procedures to set up the environment.

1. Install and Run Kiwi’s Syslog Server

+ 64 hidden pages

ZyXEL Communications IES1248 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual