ZyXEL ES-3124PWR User Guide
ZyXEL ES-3124PWR Manual
 |
View all ZyXEL ES-3124PWR manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL ES-3124PWR manual content summary:
- ZyXEL ES-3124PWR | User Guide - Page 1
ES-3124 Series Intelligent Layer 2+ Switch User's Guide Version 3.80 8/2007 Edition 1 DEFAULT LOGIN In-band IP Address http://192.168.1.1 Out-of-band IP Address http://192.168.0.1 User Name admin Password 1234 www.zyxel.com - ZyXEL ES-3124PWR | User Guide - Page 2
- ZyXEL ES-3124PWR | User Guide - Page 3
to configure the Switch. • Supporting Disk Refer to the included CD for support documents. • ZyXEL Web Site Please refer to www.zyxel.com for additional support documentation and product certifications. User Guide Feedback Help us help you. Send all User Guide-related comments, questions - ZyXEL ES-3124PWR | User Guide - Page 4
to configure or helpful tips) or recommendations. Syntax Conventions • The ES-3124, ES-3124PWR, ES-3124-4F, and ES-3124F may be referred to as the "Switch", the "device", the "system" or the "product" in this User's Guide. Distinction is made where necessary. • Product labels, screen names, field - ZyXEL ES-3124PWR | User Guide - Page 5
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ES-3124 Series User's Guide 5 - ZyXEL ES-3124PWR | User Guide - Page 6
disconnect all cables from this device before servicing or disassembling. • Use ONLY an according to the instructions. Dispose them at PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. 6 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 7
Safety Warnings • The length of exposed (bare) power wire should not exceed 7 mm. This product is recyclable. Dispose of it properly. ES-3124 Series User's Guide 7 - ZyXEL ES-3124PWR | User Guide - Page 8
Safety Warnings 8 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 9
Overview Contents Overview Introduction ...21 Introducing the Switch ...23 Hardware ...29 Hardware Installation and Connection Static Routing ...217 Differentiated Services ...219 DHCP ...227 Maintenance ...233 Access Control ...239 Diagnostic ...259 Syslog ...261 ES-3124 Series User's Guide 9 - ZyXEL ES-3124PWR | User Guide - Page 10
Contents Overview Cluster Management ...265 MAC Table ...271 ARP Table ...273 Configure Clone ...275 Troubleshooting and Specifications 277 Troubleshooting ...279 Product Specifications ...283 Appendices and Index ...291 10 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 11
Rack 32 2.2.1 Rack-mounted Installation Requirements 32 2.2.2 Attaching the Mounting Brackets to the Switch 32 2.2.3 Mounting the Switch on a Rack 33 Chapter 3 Hardware Overview...35 3.1 Panel Connections ...35 3.1.1 Console Port ...37 3.1.2 Ethernet Ports ...37 ES-3124 Series User's Guide 11 - ZyXEL ES-3124PWR | User Guide - Page 12
VID ...58 5.2 Configuring Switch Management IP Address 59 Chapter 6 System Status and Port Statistics 61 6.1 Overview ...61 6.2 Port Status Summary ...61 6.2.1 Status: Port Details 62 Chapter 7 Basic Setting ...67 7.1 Overview ...67 7.2 System Information ...67 12 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 13
Table of Contents 7.3 General Setup ...69 7.4 Introduction to VLANs ...71 7.5 Switch Setup Screen ...72 7.6 IP Setup ...74 7.6.1 IP Interfaces ...74 7.7 Port Setup ...76 Chapter 8 VLAN .1 STP/RSTP Overview ...101 11.1.1 STP Terminology 101 11.1.2 How STP Works ...102 ES-3124 Series User's Guide 13 - ZyXEL ES-3124PWR | User Guide - Page 14
Overview 133 16.1.1 IEEE 802.1x Authentication 133 16.1.2 MAC Authentication 134 16.2 Port Authentication Configuration 135 16.2.1 Activate IEEE 802.1x Security 135 14 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 15
Port Roles 160 21.3 VLAN Tag Format ...161 21.3.1 Frame Format ...161 21.4 Configuring VLAN Stacking 162 Chapter 22 Multicast ...165 22.1 Multicast Overview ...165 ES-3124 Series User's Guide 15 - ZyXEL ES-3124PWR | User Guide - Page 16
182 23.2.3 Authentication and Accounting Setup 184 23.2.4 Vendor Specific Attribute 187 23.3 Supported RADIUS Attributes 188 23.3.1 Attributes Used for Authentication 189 23.3.2 Attributes Used for Inspection Status ...206 24.6.1 ARP Inspection VLAN Status 206 16 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 17
Setup ...215 Chapter 26 Static Routing...217 26.1 Configuring Static Routing 217 Chapter 27 Differentiated Services ...219 27.1 DiffServ Overview ...219 27.1.1 DSCP and Per-Hop Behavior 219 27.1.2 Chapter 29 Maintenance ...233 29.1 The Maintenance Screen 233 ES-3124 Series User's Guide 17 - ZyXEL ES-3124PWR | User Guide - Page 18
Netscape Navigator Warning Messages 255 30.8.3 The Main Screen ...255 30.9 Service Port Access Control 256 30.10 Remote Management 257 Chapter 31 Diagnostic...259 31.1 Diagnostic ...259 Chapter 32 Syslog ...261 32.1 Syslog Overview ...261 32.2 Syslog Setup ...261 18 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 19
Chapter 38 Product Specifications ...283 38.1 General Switch Specifications 283 38.2 Cable Pin Assignments 288 Part V: Appendices and Index 291 Appendix A Setting up Your Computer's IP Address 293 Appendix B Pop-up Windows, JavaScripts and Java Permissions 315 ES-3124 Series User's Guide 19 - ZyXEL ES-3124PWR | User Guide - Page 20
Table of Contents Appendix C IP Addresses and Subnetting 323 Appendix D Common Services 333 Appendix E Importing Certificates 337 Appendix F Legal Information 343 Index...347 20 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 21
PART I Introduction Introducing the Switch (23) 21 - ZyXEL ES-3124PWR | User Guide - Page 22
22 - ZyXEL ES-3124PWR | User Guide - Page 23
CHAPTER 1 Introducing the Switch This User's Guide covers the following models: ES-3124, ES-3124-4F, ES-3124-PWR and ES-3124F. The following table lists features that are specific to individual models. Table 1 Model-specific Features MODEL FEATURE ES-3124 ES-3124-4F ES-3124PWR ES-3124F Dual - ZyXEL ES-3124PWR | User Guide - Page 24
can provide a super-fast uplink connection by using a Gigabit Ethernet/miniGBIC port on the Switch. Moreover, the Switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a single location. Figure 2 Bridging Application 24 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 25
existing Ethernet cables and adapter cards, restructuring your network, and complex maintenance. The Switch can provide the same bandwidth as ATM at much lower cost while still being able to use by adding, moving or changing ports without any re-cabling. ES-3124 Series User's Guide 25 - ZyXEL ES-3124PWR | User Guide - Page 26
. Line commands offer an alternative to the Web Configurator and may be necessary to configure advanced features. See the CLI Reference Guide. • FTP. Use File Transfer Protocol for firmware upgrades and configuration backup/restore. See Section 29.8 on page 237. 26 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 27
or even crashes. If you forget your password, you will have to reset the Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. ES-3124 Series User's Guide 27 - ZyXEL ES-3124PWR | User Guide - Page 28
Chapter 1 Introducing the Switch 28 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 29
PART II Hardware Hardware Installation and Connection (31) Hardware Overview (35) 29 - ZyXEL ES-3124PWR | User Guide - Page 30
30 - ZyXEL ES-3124PWR | User Guide - Page 31
. 4 Remove the adhesive backing from the rubber feet. 5 Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the Switch from shock or vibration and ensure space between devices when stacking. Figure 6 Attaching Rubber Feet ES-3124 Series User's Guide 31 - ZyXEL ES-3124PWR | User Guide - Page 32
installing the unit. 2.2.2 Attaching the Mounting Brackets to the Switch 1 Position a mounting bracket on one side of the Switch, lining up the four screw holes on the bracket with the screw holes on the side of the Switch. Figure 7 Attaching the Mounting Brackets 32 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 33
Switch. 4 You may now mount the Switch on a rack. Proceed to the next section. 2.2.3 Mounting the Switch on a Rack 1 Position a mounting bracket (that is already attached to the Switch holes on the side of the rack. Figure 8 Mounting the Switch on a Rack 2 Using a #2 Phillips screwdriver, install - ZyXEL ES-3124PWR | User Guide - Page 34
Chapter 2 Hardware Installation and Connection 34 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 35
Connections The figure below shows the front panel of the Switch. Figure 9 Front Panel: ES-3124 RJ-45 Gigabit Ports for Stacking Console Port LEDs 10/ Gigabit / Mini-GBIC Dual Personality Interfaces Figure 10 Front Panel: ES-3124-4F Mini-GBIC Ports for Stacking Console Port LEDs 10/100 Mbps - ZyXEL ES-3124PWR | User Guide - Page 36
mini-GBIC transceivers in these slots for fiber-optic connections to backbone GBIC Slots Ethernet switches. ES-3124, ES-3124-4F and ES-3124PWR 24 10/100 Connect these ports to a computer, a hub, an Ethernet switch or router. Mbps RJ-45 Ethernet Ports ES-3124F 36 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 37
device. An auto-crossover (auto-MDI/MDI-X) port automatically works with a straight-through or crossover Ethernet cable. 3.1.2.1 Default Ethernet Settings The factory default negotiation settings for the Ethernet ports on the Switch are: • Speed: Auto • Duplex: Auto ES-3124 Series User's Guide 37 - ZyXEL ES-3124PWR | User Guide - Page 38
exposed section of PCB board facing down. Figure 13 Transceiver Installation Example 2 Press the transceiver firmly until it clicks into place. 3 The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. 38 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 39
Removal Example 3.2 Rear Panel The following figure shows the rear panel of the Switch. The rear panel contains the connector for external backup power supply (BPS), the power receptacle, and the power switch (DC models only). Figure 17 Rear Panel (AC models) ES-3124 Series User's Guide 39 - ZyXEL ES-3124PWR | User Guide - Page 40
). 3.3.1 AC Power Connection " This is only for the AC model of the Switch. Connect the female end of the power cord to the power socket of your Switch. Connect the other end of the cord to a power outlet. Make sure that no objects obstruct the airflow of the fans. 40 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 41
of the Switch. Chapter 3 Hardware Overview The Switch uses a power supply to which the Switch connects must have a built-in circuit breaker or switch to toggle the power. Figure screws. 2 Connect one end of a power wire to the Switch's RTN (return) pin and tighten the captive screw. 3 Connect - ZyXEL ES-3124PWR | User Guide - Page 42
network is up. Amber Blinking The Switch is transmitting/receiving to/from a 100 Mbps Ethernet network. On The link to a 100 Mbps Ethernet network is up. Off The link to an Ethernet network is down. FDX Amber On The port is negotiating in full-duplex mode. 42 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 43
ES-3124PWR only) LNK/ACT Green Blinking The Switch PoE Amber On The Switch is supplying power to the connected device that supports PoE. Off No device is connected to this port or the Switch is not supplying power via the Ethernet cable. 100Mbps SFP ports (ES The Switch is Switch The Switch - ZyXEL ES-3124PWR | User Guide - Page 44
Chapter 3 Hardware Overview 44 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 45
PART III Web Configurator The Web Configurator (47) Initial Setup Example (57) System Status and Port Statistics (61) Basic Setting (67) VLAN (79) Static MAC Forward Setup (97) Filtering (99) Spanning Tree Protocol (101) Bandwidth Control (119) Broadcast Storm Control (121) Mirroring (123) Link - ZyXEL ES-3124PWR | User Guide - Page 46
Differentiated Services (219) DHCP (227) Maintenance (233) Access Control (239) Diagnostic (259) Syslog (261) Cluster Management (265) MAC Table (271) ARP Table (273) Configure Clone (275) 46 - ZyXEL ES-3124PWR | User Guide - Page 47
field. Press [ENTER]. 3 The login screen appears. The default username is admin and associated default password is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. ES-3124 Series User's Guide 47 - ZyXEL ES-3124PWR | User Guide - Page 48
in the main window. B, C, D, E - These are quick links which allow you to perform certain tasks no matter which screen you are currently working in. 48 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 49
settings to a specific configuration file. C - Click this link to go to the status page of the Switch. D - Click this link to logout of the web configurator. E - Click this link to display Overview BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT ES-3124 Series User's Guide 49 - ZyXEL ES-3124PWR | User Guide - Page 50
MANAGEMENT System Info General Setup Switch Setup IP Setup Port Setup VLAN Service Access Control Remote Management Diagnostic Syslog Setup Syslog Server Setup Cluster Management Status Clustering Management Configuration MAC Table ARP Table Configure Clone 50 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 51
screens where you can configure port-based or 802.1Q VLAN (depending on what you configured in the Switch Setup menu). You can also configure a protocol based VLAN or a subnet based VLAN in these screens This link takes you to a screen to set up filtering rules. ES-3124 Series User's Guide 51 - ZyXEL ES-3124PWR | User Guide - Page 52
via the Switch. Port Security Switch to group packets the Switch to services via external servers. The external servers can be either RADIUS (Remote Authentication Dial-In User Service Switch should forward traffic by configuring the TCP/IP parameters manually perform firmware and login password and - ZyXEL ES-3124PWR | User Guide - Page 53
the Switch's power is turned off. Click the Save link in the upper right hand corner of the web configurator to save your configuration to nonvolatile memory. Nonvolatile memory refers to the Switch's storage that remains even if the Switch's power is turned off. ES-3124 Series User's Guide 53 - ZyXEL ES-3124PWR | User Guide - Page 54
will be reset to the default of 9600bps with 8 data bit, no parity, one stop bit and flow control set to none. The password will also be reset to " reconnect the Switch's power to begin a session. When you reconnect the Switch's power, you will see the initial screen. 54 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 55
OK ES-3124> atgo The Switch is now reinitialized with a default configuration file including the default password of password again after you log out. This is recommended after you finish a management session for security reasons. Figure 24 Web Configurator: Logout Screen ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 56
Chapter 4 The Web Configurator 4.8 Help The web configurator's online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. 56 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 57
steps for the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which Setup Network Example: VLAN 1 Click Advanced Application > VLAN > Static VLAN. ES-3124 Series User's Guide 57 - ZyXEL ES-3124PWR | User Guide - Page 58
(such as computers and hubs) can receive frames properly, clear the TX Tagging check box to set the Switch to remove VLAN tags before sending. 5 Click Add to save the settings to the run-time memory. Settings VLAN 2. Figure 26 Initial Setup Network Example: Port VID 58 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 59
to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 47 for more information. ES-3124 Series User's Guide 59 - ZyXEL ES-3124PWR | User Guide - Page 60
ID you configure in the Static VLAN screen. 6 Select the Manageable check box to allow the Switch to be managed from the ports belonging to VLAN2 using this specified IP address. 7 Repeat this the run-time memory are lost when the Switch's power is turned off. 60 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 61
1000M for 1000Mbps) and the duplex (F for full duplex or H for half). It also shows the cable type (Copper or Fiber) for the combo ports. ES-3124 Series User's Guide 61 - ZyXEL ES-3124PWR | User Guide - Page 62
is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP. PD (PWR models only) If PoE (Power over Ethernet) is enabled on this port and a powered device (PD) is connected, performance data about an individual port on the Switch. 62 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 63
information). If STP is disabled, this field displays FORWARDING if the link is up, otherwise, it displays STOP. PD This field is available for PWR models only and is not available for the Gigabit and PowerCon mini-GBIC ports. sumption (mW) This field shows the power consumption of the powered - ZyXEL ES-3124PWR | User Guide - Page 64
count is reset. Late This is the number of times a late collision is detected, that is, after 512 bits of the packets have already been transmitted. Error Packet The following fields display detailed information about packets received that were in error. 64 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 65
between 1024 and 1518 octets in length. Giant This field shows the number of packets dropped because they were bigger than the maximum frame size. ES-3124 Series User's Guide 65 - ZyXEL ES-3124PWR | User Guide - Page 66
Chapter 6 System Status and Port Statistics 66 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 67
manually or get the current time and date from an external server when you turn on your Switch. The real time is then displayed in the Switch logs. The Switch check the firmware version number and monitor the Switch temperature, fan speeds and voltage in this screen. ES-3124 Series User's Guide 67 - ZyXEL ES-3124PWR | User Guide - Page 68
Watts the Switch can provide over the Ethernet. Consuming Power (W) This is the power consumed by PoE-compatible devices connected to the Switch. Remaining Power (W) This is the remaining power in Watts the Switch can provide over the Ethernet. Hardware Monitor 68 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 69
the location of the temperature sensors on the Switch's printed circuit board. ENV refers to the environmental or ambient temperature within the Switch (PWR models only). Current This shows the current in the navigation panel to display the screen as shown. ES-3124 Series User's Guide 69 - ZyXEL ES-3124PWR | User Guide - Page 70
1305) is similar to Time (RFC-868). None is the default value. Enter the time manually. Each time you turn on the Switch, the time and date will be reset to 1970-1-1 0:0. Time Server IP Address Enter the IP address -dd) the Current Date field after you click Apply. 70 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 71
or UTC (GMT+1). Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the same LAN, thus a user will not see the printers and hard disks of another user in the same building. ES-3124 Series User's Guide 71 - ZyXEL ES-3124PWR | User Guide - Page 72
See Chapter 8 on page 79 for more information. Bridge Control Protocol Transparency Select Active to allow the Switch to handle bridging control protocols (STP for example). You also need to define how to treat a BPDU to occur on a port, the port must be active. 72 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 73
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide 73 - ZyXEL ES-3124PWR | User Guide - Page 74
an IP address. The factory default subnet mask is 255.255.255.0. You can configure IP addresses which are used to access and manage the Switch from the ports belonging to the pre-defined VLAN(s). " You must configure the VLAN first. Figure 33 Basic Setting > IP Setup 74 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 75
you have a DHCP server that can assign the Switch an IP address, subnet mask, a default gateway IP address and a domain name server IP Switch by the members of the VLAN specified in the VID field below. IP Subnet Mask Enter the IP subnet mask in dotted decimal notation. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 76
Switch's run-time memory. It then displays in the summary table at the bottom of the screen. Cancel Click Cancel to reset Default Gateway This field displays the IP address of the default outgoing gateway. Manageable This field displays whether the Switch screen to configure Switch port settings. - ZyXEL ES-3124PWR | User Guide - Page 77
make them. Select this check box to enable a port. The factory default for all ports is enabled. A port must be enabled for data duplex mode that both ends support. When auto-negotiation is turned on, a port on the Switch negotiates with the peer automatically ES-3124 Series User's Guide 77 - ZyXEL ES-3124PWR | User Guide - Page 78
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 78 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 79
802.1Q VLAN-unaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is VLAN 1 ), thus confining the broadcast to a specific domain. ES-3124 Series User's Guide 79 - ZyXEL ES-3124PWR | User Guide - Page 80
TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration port. Ingress filtering If set, the Switch discards incoming frames for VLANs that do not have this port as a member 80 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 81
VLAN Trunking 8.4 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 36 Switch Setup: Select VLAN Type 8.5 Static VLAN Use a static VLAN to decide whether an were previously untagged) from a port with the specified VID. ES-3124 Series User's Guide 81 - ZyXEL ES-3124PWR | User Guide - Page 82
was registered or a static VLAN was set up. Status This field shows how this VLAN was added to the Switch; dynamic - using GVRP, static - added as a permanent entry or other - added in another way such as details. Figure 38 Advanced Application > VLAN > VLAN Detail 82 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 83
static VLAN was set up. This field shows how this VLAN was added to the Switch; dynamic - using GVRP, static - added as a permanent entry or other - added Use this screen to configure and view 802.1Q VLAN parameters for the Switch. See Section 8.1 on page 79 for more information on static VLAN. To - ZyXEL ES-3124PWR | User Guide - Page 84
port to dynamically join this VLAN group using GVRP. This is the default selection. Select Fixed for the port to be a permanent member of ID. Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses 84 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 85
that defines a way for switches to register necessary VLAN members VLAN groups beyond the local Switch. Port Isolation Port Isolation check box is selected for a port, the Switch discards incoming frames for VLANs that do not on this port. This is the default setting. Select Tag Only to accept only - ZyXEL ES-3124PWR | User Guide - Page 86
on a port, the Switch checks if a tag is services receive the highest priority and data the lowest. Figure 41 Subnet Based VLAN Application Example Tagged Frames Internet Untagged Frames 172.16.1.0/24 VID = 100 192.168.1.0/24 VID = 200 10.1.1.0/24 VID = 300 86 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 87
Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. ES-3124 Series User's Guide 87 - ZyXEL ES-3124PWR | User Guide - Page 88
you specify. When an upstream frame is received on a port (configured for a protocol based VLAN), the Switch checks if a tag is added already and its protocol. The untagged packets of the same protocol are then is applicable only when you use IEEE 802.1Q tagged VLAN. 88 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 89
and have higher priority than ARP traffic, when they go through the uplink port to a backbone switch C. Figure 43 Protocol Based VLAN Application Example 8.9 Configuring Protocol Based VLAN Click Protocol Based VLAN only when you use IEEE 802.1Q tagged VLAN. ES-3124 Series User's Guide 89 - ZyXEL ES-3124PWR | User Guide - Page 90
Select the priority level that the Switch will assign to frames belonging to this VLAN. Add Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned Ethernet protocol is part of this protocol based VLAN. 90 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 91
. Type 1. 3 Give this protocol-based VLAN a descriptive name. Type IP-VLAN. 4 Select the protocol. Leave the default value IP. 5 Type the VLAN ID of an existing VLAN. In our example we already created a static VLAN with to the next port you want to add. 3 Click Add. ES-3124 Series User's Guide 91 - ZyXEL ES-3124PWR | User Guide - Page 92
based VLANs are specific only to the Switch on which they were created. " When you activate port-based VLAN, the Switch uses a default VLAN ID of 1. You cannot in the Switch Setup screen and then click VLAN from the navigation panel to display the next screen. 92 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 93
Chapter 8 VLAN Figure 46 Advanced Application > VLAN: Port Based VLAN Setup (All Connected) ES-3124 Series User's Guide 93 - ZyXEL ES-3124PWR | User Guide - Page 94
Chapter 8 VLAN Figure 47 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) 94 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 95
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide 95 - ZyXEL ES-3124PWR | User Guide - Page 96
Chapter 8 VLAN 96 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 97
been manually entered Switch. See Chapter 17 on page 139 for more information on port security. Click Advanced Applications > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 48 Advanced Application > Static MAC Forwarding ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 98
the previous field will be automatically forwarded. Add Click Add to save your rule to the Switch's run-time memory. The Switch loses this rule if it is turned off or loses power, so use the Save link table. Cancel Click Cancel to clear the Delete check boxes. 98 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 99
port filtering. 10.1 Configure a Filtering Rule Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). Click 32 printable ASCII characters) for this rule. This is for identification only. ES-3124 Series User's Guide 99 - ZyXEL ES-3124PWR | User Guide - Page 100
Add Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or Clear Click Clear to clear the fields to the factory defaults. Index This field displays the index number of the es) in the Delete column. 100 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 101
The Switch supports Spanning between switches, bridges or routers. It allows a Switch to interact with other (R)STP -compliant switches in stations on the network. The Switch uses IEEE 802.1w RSTP ( , Learning, and Forwarding. " In this user's guide, "STP" refers to both STP and RSTP. 11.1.1 - ZyXEL ES-3124PWR | User Guide - Page 102
are therefore only forwarded between enabled ports, eliminating any possible network loops. STP-aware switches exchange Bridge Protocol Data Units (BPDUs) periodically. When the bridged LAN topology changes, the network to re-establish a valid network topology. 102 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 103
(default). Blocking MRSTP (Multiple RSTP) is ZyXEL's proprietary feature that is switch A. To set up MRSTP, activate MRSTP on the Switch and specify which port(s) belong to which spanning tree. " Each port can belong to one STP tree only. Figure 50 MRSTP Network Example ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 104
MSTP Network Example The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP following figure shows the network example using MSTP. 104 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 105
MSTI does not span across MST regions. The following figure shows an example where there are two MST regions. Regions 1 and 2 have 2 spanning tree instances. ES-3124 Series User's Guide 105 - ZyXEL ES-3124PWR | User Guide - Page 106
of the entire network and it is equivalent to a spanning tree in an STP/RSTP. The CIST is the default MST instance (MSTID 0). Any VLANs that are not members of an MST instance are members of the CIST. Application > Spanning Tree Protocol to see the screen as shown. 106 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 107
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide 107 - ZyXEL ES-3124PWR | User Guide - Page 108
then become the root switch. Select a value from the drop-down list box. The lower the numeric value you assign, the higher the priority for this bridge. Bridge Priority determines the root bridge, which in turn determines Hello Time, Max Age and Forwarding Delay. 108 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 109
when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. Path cost is the cost of Section 11.1 on page 101 for more information on RSTP. ES-3124 Series User's Guide 109 - ZyXEL ES-3124PWR | User Guide - Page 110
is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. This is the number of times the spanning tree has been reconfigured. This is the time since the spanning tree was last reconfigured. 110 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 111
then become the root switch. Select a value from the drop-down list box. The lower the numeric value you assign, the higher the priority for this bridge. Bridge Priority determines the root bridge, which in turn determines Hello Time, Max Age and Forwarding Delay. ES-3124 Series User's Guide 111 - ZyXEL ES-3124PWR | User Guide - Page 112
when more than one port forms a loop in the Switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. Path cost is the cost of Section 11.1 on page 101 for more information on MRSTP. 112 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 113
is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. This is the number of times the spanning tree has been reconfigured. This is the time since the spanning tree was last reconfigured. ES-3124 Series User's Guide 113 - ZyXEL ES-3124PWR | User Guide - Page 114
Application > Spanning Tree Protocol screen. See Section 11.1.5 on page 104 for more information on MSTP. Figure 61 Advanced Application > Spanning Tree Protocol > MSTP 114 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 115
Switch will be chosen as the root bridge within the spanning tree instance. Enter priority values between 0 and 61440 in increments of 4096 (thus valid values are 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344 and 61440). ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 116
when more than one port forms a loop in the Switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. Path cost is the cost of Section 11.1.5 on page 104 for more information on MSTP. 116 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 117
Time (second) This is the time interval (in seconds) at which the root switch transmits a configuration message. Max Age (second) This is the maximum time (in seconds) a switch can wait without receiving a configuration message before attempting to reconfigure. ES-3124 Series User's Guide 117 - ZyXEL ES-3124PWR | User Guide - Page 118
if the Switch is the root switch. This is the path cost from the root port in this MST instance to the regional root switch. This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the MST instance. 118 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 119
to the uplink bandwidth. 12.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. ES-3124 Series User's Guide 119 - ZyXEL ES-3124PWR | User Guide - Page 120
run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 120 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 121
control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports. When the maximum number of allowable broadcast, multicast shown next. Figure 64 Advanced Application > Broadcast Storm Control ES-3124 Series User's Guide 121 - ZyXEL ES-3124PWR | User Guide - Page 122
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 122 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 123
screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 65 Advanced Application > Mirroring ES-3124 Series User's Guide 123 - ZyXEL ES-3124PWR | User Guide - Page 124
run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 124 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 125
of each trunk group must be physically connected to form a trunk group. The Switch supports both static and dynamic link aggregation. " In a properly planned network, it is one of the "standby" ports become operational without user intervention. Please note that: ES-3124 Series User's Guide 125 - ZyXEL ES-3124PWR | User Guide - Page 126
00 0000 00 PORT NUMBER 0000 Table 37 Link Aggregation ID: Peer Switch SYSTEM PRIORITY MAC ADDRESS KEY 0000 00-00-00-00-00-00 navigation panel. The Link Aggregation Status screen displays by default. See Section 15.1 on page 125 for more information individual port. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 127
the screen shown next. See Section 15.1 on page 125 for more information on link aggregation. Figure 67 Advanced Application > Link Aggregation > Link Aggregation Setting ES-3124 Series User's Guide 127 - ZyXEL ES-3124PWR | User Guide - Page 128
trunk group to which a port belongs. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link 15.2 on page 125 for more information on dynamic link aggregation. 128 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 129
Protocol (LACP). System Priority LACP system priority is a number between 1 and 65,535. The switch with the lowest system priority (and lowest port number if system priority is the same) becomes the LACP for a trunk. Port This field displays the port number. ES-3124 Series User's Guide 129 - ZyXEL ES-3124PWR | User Guide - Page 130
. Select either 1 second or 30 seconds. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on shown in the figure below. Click Apply when you are done. 130 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 131
Figure 70 Trunking Example - Configuration Screen Chapter 15 Link Aggregation Your trunk group 1 (T1) configuration is now complete; you do not need to go to any additional screens. ES-3124 Series User's Guide 131 - ZyXEL ES-3124PWR | User Guide - Page 132
Chapter 15 Link Aggregation 132 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 133
client is allowed access to the port. 2. At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. ES-3124 Series User's Guide 133 - ZyXEL ES-3124PWR | User Guide - Page 134
of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. Figure 72 MAC Authentication Process 134 1 New Connection 2 Authentication Request 3 Authentication Reply Session Granted/Denied ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 135
authentication, first activate the port authentication method(s) you want to use (both on the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct > screen as shown. Figure 74 Advanced Application > Port Authentication > 802.1x ES-3124 Series User's Guide 135 - ZyXEL ES-3124PWR | User Guide - Page 136
to re-enter his or her username and password to stay Timer connected to the port. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned Authentication to display the configuration screen as shown. 136 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 137
the client is forwarded to the RADIUS server. Type the password the Switch sends along with the MAC address of a client for Switch Setup screen is set to a lower value, then it supersedes this setting. See Section 7.5 on page 81. Port This field displays a port number. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 138
run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 138 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 139
a port on the Switch. The Switch can learn up to 16K default, MAC address learning is still enabled even though the port security is not activated. 17.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 140
device would have to wait until one of the five learned MAC addresses aged out. MAC address aging out time can be set in the Switch Setup screen. The valid range is from "0" to "16384". "0" means this feature is disabled. 140 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 141
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide 141 - ZyXEL ES-3124PWR | User Guide - Page 142
Chapter 17 Port Security 142 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 143
introduces and shows you how to configure the packet classifier on the Switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with the navigation panel to display the configuration screen as shown. ES-3124 Series User's Guide 143 - ZyXEL ES-3124PWR | User Guide - Page 144
field provided. Priority Select Any to classify traffic from any priority level or select the second option and specify a priority level in the field provided. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 145
table below and save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non- volatile memory when you are done configuring. ES-3124 Series User's Guide 145 - ZyXEL ES-3124PWR | User Guide - Page 146
this screen afresh. Clear Click Clear to set the above fields back to the factory defaults. 18.3 Viewing and Editing Classifier Configuration To view a summary of the classifier configuration, 0802 ECMA Internet 0803 Chaosnet 0804 X.25 Level 3 0805 146 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 147
:4f:81 on port 2. After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. ES-3124 Series User's Guide 147 - ZyXEL ES-3124PWR | User Guide - Page 148
Chapter 18 Classifier Figure 79 Classifier: Example 148 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 149
is going. 19.1.2 DSCP and Per-Hop Behavior DiffServ defines a new DS (Differentiated Services) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field according to the DSCP values and the configured policies. ES-3124 Series User's Guide 149 - ZyXEL ES-3124PWR | User Guide - Page 150
for more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. Figure 80 Advanced Application > Policy Rule 150 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 151
number between 0 and 63. TOS Specify the type of service (TOS) priority level. Metering You can configure the for out-of-profile traffic. Action Specify the action(s) the Switch takes on the associated classified traffic flow. Forwarding Select No change ES-3124 Series User's Guide 151 - ZyXEL ES-3124PWR | User Guide - Page 152
the summary table below and save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses Click Clear to set the above fields back to the factory defaults. 19.3 Viewing and Editing Policy Configuration To view a summary ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 153
and discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 18.4 on page 147). Figure 82 Policy Example ES-3124 Series User's Guide 153 - ZyXEL ES-3124PWR | User Guide - Page 154
Chapter 19 Policy Rule 154 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 155
Strictly Priority Strictly Priority (SP) services queues based on priority only. As traffic comes into the Switch, traffic on the highest priority example, using the default setting, Q0 on Port 1 gets a guaranteed bandwidth of: 1 1+2+3+4+5+6+7+8 x 100 Mbps = 3 Mbps ES-3124 Series User's Guide 155 - ZyXEL ES-3124PWR | User Guide - Page 156
empty. Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services queues based on their priority and queue weight (the number you configure in the queue Weight panel. Figure 83 Advanced Application > Queuing Method 156 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 157
more service than queues Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 158
Chapter 20 Queuing Method 158 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 159
VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to distinguish customer A and tag 48 to distinguish customer B at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network. ES-3124 Series User's Guide 159 - ZyXEL ES-3124PWR | User Guide - Page 160
at the edge of the service provider's network. All VLANs belonging to a customer can be aggregated into a single service provider's VLAN (using the outer VLAN tag defined by SP VID). " Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel Port. 160 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 161
1Q tag. • If the VLAN stacking port role is Access Port, then the Switch adds the SP TPID tag to all incoming frames on the service provider's edge devices (1 and 2 in the VLAN stacking example figure). • If / Etype 802.1p Priority Length and type of Ethernet frame ES-3124 Series User's Guide 161 - ZyXEL ES-3124PWR | User Guide - Page 162
Table 54 802.1Q Frame (SP)TPID (Service Provider) Tag Protocol IDentifier VID VLAN ID Data VLAN Stacking LABEL DESCRIPTION Active Select this to enable VLAN stacking on the Switch. SP TPID SP TPID is a standard Ethernet type code identifying the you make them. 162 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 163
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide 163 - ZyXEL ES-3124PWR | User Guide - Page 164
Chapter 21 VLAN Stacking 164 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 165
the distribution of multicast services (such as content information distribution) based on service plans and types of subscription. You can set the Switch to filter the allows the Switch to learn multicast groups without you having to manually configure them. ES-3124 Series User's Guide 165 - ZyXEL ES-3124PWR | User Guide - Page 166
manually configured) to ports that are members of that group. IGMP snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your Switch. 22.1.4 IGMP Snooping and VLANs The Switch on multicasting. 166 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 167
assign IGMP filtering profiles for the ports that you want to allow to join multicast groups. Specify the action to perform when the Switch receives an unknown multicast frame. Select Drop to discard the frame(s). Select Flooding to send the frame(s) to all ports. ES-3124 Series User's Guide 167 - ZyXEL ES-3124PWR | User Guide - Page 168
as soon as you make them. Select this option to set the Switch to remove this port from the multicast tree when an IGMP version 2 the IGMP filtering profile to use for this port. Otherwise, select Default to prohibit the port from joining any multicast group. You can ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 169
screen afresh. Use this section of the screen to add VLANs upon which the Switch is to perform IGMP snooping. Enter the descriptive name of the VLAN for identification Cancel to reset the fields to your previous configuration. Click this to clear the fields. ES-3124 Series User's Guide 169 - ZyXEL ES-3124PWR | User Guide - Page 170
Filtering Profile An IGMP filtering profile specifies a range of multicast groups that clients connected to the Switch are able to join. A profile contains a range of multicast IP addresses which you want clients in both the Start Address and End Address fields. 170 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 171
service provider Switch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast traffic. Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associated multicast group. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 172
traffic to the receiver ports. In compatible mode, the Switch does not send any IGMP reports. In this case, you must manually configure the forwarding settings on the multicast devices in the to three multicast VLANs and up to 256 multicast rules on the Switch. 172 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 173
the MVR mode on the Switch. Choices are Dynamic and Compatible. Select Dynamic to send IGMP reports to all MVR source ports in the multicast VLAN. Select Compatible to set the Switch not to send IGMP reports. Port This field displays the port number on the Switch. ES-3124 Series User's Guide 173 - ZyXEL ES-3124PWR | User Guide - Page 174
frames transmitted. Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power data sent to this multicast group. Configure MVR IP multicast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR - ZyXEL ES-3124PWR | User Guide - Page 175
3 on the Switch belong to VLAN 1. In addition, port 7 belongs to the multicast group with VID 200 to receive multicast traffic (the News and Movie channels) from the remote streaming media server, S. Computers A, B and C in VLAN 1 are able to receive the traffic. ES-3124 Series User's Guide 175 - ZyXEL ES-3124PWR | User Guide - Page 176
the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an example where two multicast groups (News and Movie) are configured for the multicast VLAN 200. 176 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 177
Figure 96 MVR Group Configuration Example Chapter 22 Multicast Figure 97 MVR Group Configuration Example ES-3124 Series User's Guide 177 - ZyXEL ES-3124PWR | User Guide - Page 178
Chapter 22 Multicast 178 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 179
By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users without interacting with a network AAA server. However, there is a limit on the number of users you may authenticate in this way (See Chapter 30 on page 239). ES-3124 Series User's Guide 179 - ZyXEL ES-3124PWR | User Guide - Page 180
more information on RADIUS servers and Section 23.3 on page 188 for RADIUS attributes utilized by the authentication and accounting features on the Switch. Click on the RADIUS Server Setup link in the Authentication and Accounting screen to view the screen as shown. 180 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 181
instructs you to do so. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. ES-3124 Series User - ZyXEL ES-3124PWR | User Guide - Page 182
amount of time in seconds that the Switch waits for an accounting request response default port of a RADIUS accounting server for accounting is 1813. You need not change this value unless your network administrator instructs you to do so. Shared Secret Specify a password ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 183
if you set the timeout value to 30 seconds, then the Switch waits for a response from the first TACACS+ server for 15 seconds default port of a TACACS+ server for authentication is 49. You need not change this value unless your network administrator instructs you to do so. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 184
this screen afresh. 23.2.3 Authentication and Accounting Setup Use this screen to configure authentication and accounting settings on the Switch. Click on the Auth and Acct Setup link in the Authentication and Accounting screen to view the screen as shown. 184 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 185
for access privilege level specify them in Method 2 and Method 3 fields. Select local to have the Switch check the access privilege configured for local authentication. Select radius or tacacs+ to have the Switch check the access privilege via the external servers. ES-3124 Series User's Guide 185 - ZyXEL ES-3124PWR | User Guide - Page 186
configurable for Commands type of event. Select the threshold command privilege level for which the Switch should send accounting information. The Switch will send accounting information when commands at the level you specify and higher are executed on the Switch. 186 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 187
users authenticating via the RADIUS server. The following table describes the VSAs supported on the Switch. Table 66 Supported VSAs FUNCTION ATTRIBUTE Ingress Bandwidth Assignment Vendor-Id = 890 Vendor-Type = 1 Vendor-data = ingress rate (Kbps in decimal format) ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 188
VLAN with the specified VID on the Switch. 23.3 Supported RADIUS Attributes Remote Authentication Dial-In User Service (RADIUS) attributes are data used to the Switch. In cases where the attribute has a specific format associated with it, the format is specified. 188 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 189
Users User-Name User-Password NAS-Identifier NAS-IP-Address 23.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port NAS-Port-Type - This value is set to Ethernet(15) on the Switch number: 00000001) Acct-Delay-Time ES-3124 Series User's Guide 189 - ZyXEL ES-3124PWR | User Guide - Page 190
START INTERIM-UPDATE User-Name Y Y NAS-Identifier Y Y NAS-IP-Address Y Y Service-Type Y Y User-Name Y Y Y NAS-IP-Address Y Y Y NAS-Port Y Y Y Class Y Y Y Called-Station-Id Y Y Y Calling-Station-Id Y Y Y NAS-Identifier Y Y Y 190 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 191
Y Y Acct-Input-Octets Y Acct-Output-Octets Y Acct-Session-Time Y Acct-Input-Packets Y Acct-Output-Packets Y Acct-Terminate-Cause Acct-Input-Gigawords Y Acct-Output-Gigawords Y STOP Y Y Y Y Y Y Y Y Y Y Y Y Y ES-3124 Series User's Guide 191 - ZyXEL ES-3124PWR | User Guide - Page 192
Chapter 23 Authentication & Accounting 192 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 193
Switch forwards the packet. If there is not a binding, the Switch discards the packet. The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually each port (trusted or untrusted) can receive each second. ES-3124 Series User's Guide 193 - ZyXEL ES-3124PWR | User Guide - Page 194
you enable DHCP snooping and there are no trusted ports. Untrusted ports are connected to subscribers. The Switch discards DHCP packets from untrusted ports in the following situations: • The packet is a DHCP server binding and all others after it are ignored. 194 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 195
does not discard. This provides the DHCP server more information about the source of the requests. The Switch can add the following information: • Slot ID (1 byte), port ID (1 byte), and source X. Computer X can read and alter the information passed between them. ES-3124 Series User's Guide 195 - ZyXEL ES-3124PWR | User Guide - Page 196
Switch in the Switch. These MAC Switch does not discard ARP packets on trusted ports for any reason. The Switch discards ARP packets on untrusted ports if the sender's information in the ARP packet does not match any of the current bindings. 24.1.2.3 Syslog The Switch Switch Switch the Switch has - ZyXEL ES-3124PWR | User Guide - Page 197
a static binding). Type This field displays how the Switch learned the binding. static: This binding was learned from information provided manually by an administrator. dhcp-snooping: This binding was , click Advanced Application > IP Source Guard > Static Binding. ES-3124 Series User's Guide 197 - ZyXEL ES-3124PWR | User Guide - Page 198
binding or to update an existing one. Cancel Click this to reset the values above based on the last selected static binding or, field displays how the Switch learned the binding. static: This binding was learned from information provided manually by an administrator. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 199
the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 107 Advanced Application > IP Source Guard > DHCP Snooping ES-3124 Series User's Guide 199 - ZyXEL ES-3124PWR | User Guide - Page 200
database. Successful reads This field displays the number of times the Switch read bindings from the DHCP snooping database successfully. Failed reads This field displays the number of times the Switch was unable to read bindings from the DHCP snooping database. 200 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 201
database. Expired leases This field displays the number of bindings the Switch has ignored because the lease time had already expired. Unsupported vlans This field displays the number of bindings the Switch has ignored because the VLAN ID does not exist anymore. ES-3124 Series User's Guide 201 - ZyXEL ES-3124PWR | User Guide - Page 202
Configure Use this screen to enable DHCP snooping on the Switch (not on specific VLAN), specify the VLAN where the default DHCP server is located, and configure the DHCP snooping Disable if you do not want the Switch to forward DHCP packets to a specific VLAN. 202 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 203
reset the values in this screen to their last-saved values. 24.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are trusted or untrusted ports for DHCP snooping. " The Switch > IP Source Guard > DHCP Snooping > Configure > Port. ES-3124 Series User's Guide 203 - ZyXEL ES-3124PWR | User Guide - Page 204
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. 204 ES-3124 Series User - ZyXEL ES-3124PWR | User Guide - Page 205
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. ES-3124 Series User's Guide 205 - ZyXEL ES-3124PWR | User Guide - Page 206
This field displays how long (in seconds) the MAC address filter remains in the Switch. You can also delete the record manually (Delete). Reason This field displays the reason the ARP packet was discarded. MAC+ > IP Source Guard > ARP Inspection > VLAN Status. 206 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 207
displays the total number of ARP packets received from the VLAN since the Switch last restarted. Request This field displays the total number of ARP Request packets received from the VLAN screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status. ES-3124 Series User's Guide 207 - ZyXEL ES-3124PWR | User Guide - Page 208
ARP packets that were consolidated into this log message. The Switch consolidates identical log messages generated by ARP packets in the log binding. In the ARP Inspection VLAN Configure screen, you can configure the Switch to generate log messages when ARP packets are discarded or forwarded based - ZyXEL ES-3124PWR | User Guide - Page 209
the Switch stops recording log messages and simply starts counting the number of entries that were dropped due to unavailable buffer. Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 24.6.2 on page 207. ES-3124 Series User - ZyXEL ES-3124PWR | User Guide - Page 210
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click this to reset Source Guard > ARP Inspection > Configure > Port 210 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 211
the Switch generates log messages for receiving ARP packets from each VLAN. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN. Figure 116 Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN ES-3124 Series User's Guide 211 - ZyXEL ES-3124PWR | User Guide - Page 212
Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. 212 ES-3124 Series User - ZyXEL ES-3124PWR | User Guide - Page 213
affected by the switch in loop state in the following way: • It will receive broadcast messages sent out from the switch in loop state. • It will receive its own broadcast messages that it sends out as they loop back. It will then re-broadcast those messages again. ES-3124 Series User's Guide 213 - ZyXEL ES-3124PWR | User Guide - Page 214
, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch. Figure 120 Loop Guard - Network Loop A P P N P 214 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 215
problem on your network you can re-activate the disabled port via the web configurator (see Section 7.7 on page 76) or via commands (see the CLI Reference Guide this option to enable loop guard on the Switch. The Switch generates syslog, internal log messages as well ES-3124 Series User's Guide 215 - ZyXEL ES-3124PWR | User Guide - Page 216
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 216 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 217
SSH, or SNMP. Use IP static routes to have the Switch respond to remote management stations that are not reachable through the default gateway. The Switch can also use static routes to send data to a IP Subnet Mask Enter the subnet mask for this destination. ES-3124 Series User's Guide 217 - ZyXEL ES-3124PWR | User Guide - Page 218
of your Switch that will forward the packet same segment as your Switch. Metric The metric represents a new static route to the Switch's run-time memory. The Switch loses these changes if it is fields back to the factory defaults. Index This field displays neighbor of your Switch that will forward - ZyXEL ES-3124PWR | User Guide - Page 219
Services (DiffServ) on the Switch. 27.1 DiffServ Overview Quality of Service (QoS) is used to prioritize source-to-destination traffic flows. All packets in the flow are given the same priority. You can use CoS (class of service values and the configured policies. ES-3124 Series User's Guide 219 - ZyXEL ES-3124PWR | User Guide - Page 220
and PIR values are based on the guaranteed and maximum bandwidth respectively as negotiated between a service provider and client. Two Rate Three Color Marker evaluates incoming packets and marks them with packets are dropped if there is congestion on the network. 220 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 221
Chapter 27 Differentiated Services • Green (low loss priority level) packets are forwarded. TRTCM operates in one of two modes: color-blind or color- Exceed NO Low Packet CIR? Loss YES High Packet Loss High Packet Loss Medium Packet Medium Packet Loss Loss ES-3124 Series User's Guide 221 - ZyXEL ES-3124PWR | User Guide - Page 222
Chapter 27 Differentiated Services 27.3 Activating DiffServ Activate DiffServ DiffServ on the port. Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the screen as shown next. 222 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 223
Chapter 27 Differentiated Services " You cannot enable both TRTCM and Active Select this to activate TRTCM (Two Rate Three Color Marker) on the Switch. The Switch evaluates and marks the packets based on the TRTCM settings. Mode Port * Rate (PIR) for this port. ES-3124 Series User's Guide 223 - ZyXEL ES-3124PWR | User Guide - Page 224
Services DSCP to IEEE 802.1p mapping to allow the Switch to prioritize all traffic based on the incoming DSCP value IEEE 802.1p mapping table. The following table shows the default DSCP-to-IEEE802.1p mapping. Table 87 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 - 7 8 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 225
Services The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 226
Chapter 27 Differentiated Services 226 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 227
the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can relay DHCP requests from different VLAN to different DHCP servers. 28.2 DHCP Status Click IP Application > DHCP in the navigation panel. The DHCP Status screen displays. ES-3124 Series User's Guide 227 - ZyXEL ES-3124PWR | User Guide - Page 228
82 field is in the DHCP headers of client DHCP request frames that the Switch relays to a DHCP server. Relay Agent Information can include the System Name of the Switch if you select this option. You can change the System Name in Basic Settings > General Setup. 228 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 229
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide 229 - ZyXEL ES-3124PWR | User Guide - Page 230
follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. Figure click the VLAN link In the DHCP Status screen that displays. 230 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 231
field displays the system name you configure in the General Setup screen. Select the check box for the Switch to add the system name to the client DHCP requests that it relays to a DHCP server. Add , this field displays the first remote DHCP server IP address. ES-3124 Series User's Guide 231 - ZyXEL ES-3124PWR | User Guide - Page 232
:172.23.10.100 For the example network, configure the VLAN Setting screen as shown. Figure 136 DHCP Relay for Two VLANs Configuration Example 232 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 233
Configuration 2) is currently operating on the Switch. Firmware Upgrade Click Click Here to go to the Firmware Upgrade screen. Restore Click Click Here Load Factory Click Click Here to reset the configuration to the factory default settings. Default ES-3124 Series User's Guide 233 - ZyXEL ES-3124PWR | User Guide - Page 234
save your settings to the current configuration on the Switch. 29.2 Load Factory Default Follow the steps below to reset the Switch back to the factory defaults. 1 In the Maintenance screen, click the Click All unsaved changes are erased after you reboot the Switch. 234 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 235
the Switch and apply the new firmware immediately. (Firmware upgrades are only applied after a reboot). Click Upgrade to load the new firmware. After the firmware upgrade process is complete, see the System Info screen to verify your current firmware version number. ES-3124 Series User's Guide 235 - ZyXEL ES-3124PWR | User Guide - Page 236
of your device from which you may restore at a later date. Back up your current Switch configuration to a computer using the Backup Configuration screen. Figure 142 Management > Maintenance > Backup Click Save to save the configuration file to your computer. 236 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 237
your device. 29.8.2 FTP Command Line Procedure 1 Launch the FTP client on your computer. 2 Enter open, followed by a space and the IP address of your Switch. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). ES-3124 Series User's Guide 237 - ZyXEL ES-3124PWR | User Guide - Page 238
FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. 238 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 239
Switch. 30.1 Access Control Overview A console port and FTP are allowed one session each, Telnet and SSH share four sessions, up to five Web sessions (five different user names and passwords multi-login is disabled. See the CLI Reference Guide for more information on disabling multilogin. 30.2 The - ZyXEL ES-3124PWR | User Guide - Page 240
management system (NMS) and a network element (NE). A manager station can manage and monitor the Switch through the network via SNMP version one (SNMPv1), SNMP version 2c or SNMP version 3. The next Trap Used by the agent to inform the manager of some events. 240 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 241
OBJECT ID (BEGINNING) ES-3124 1.3.6.1.4.1.890.1.5.8.12 ES-3124PWR 1.3.6.1.4.1.890.1.5.8.14 ES-3124-4F 1.3.6.1.4.1.890.1.5.8.26 ES-3124F 1.3.6.1.4.1.890.1.5.8.31 Table trap is sent when the Switch is turned on. This trap is sent when the Switch restarts. ES-3124 Series User's Guide 241 - ZyXEL ES-3124PWR | User Guide - Page 242
VoltageEventClear ES-3124: 1.3.6.1.4.1.890.1.5.8.12.27.2.2 ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.2 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.32.2.2 ES-3124F: 1.3.6.1.4.1.890.1.5.8.31.32.2.2 This trap is sent when the voltage returns to the normal operating range. 242 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 243
890.1.5.8.31.32.2.1 This trap is sent when the Switch automatically resets. ControlledResetEventOn ES-3124: 1.3.6.1.4.1.890.1.5.8.12.27.2.1 ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.1 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.32.2.1 ES-3124F: 1.3.6.1.4.1.890.1.5.8.31.32.2.1 This trap is sent when - ZyXEL ES-3124PWR | User Guide - Page 244
Ethernet interface fails to autonegotiate with the peer Ethernet interface. This trap is sent when an Ethernet interface autonegotiates with the peer Ethernet interface. 244 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 245
.1.5.8.31.32.2.1 ES-3124: 1.3.6.1.4.1.890.1.5.8.12.27.2.2 ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.2 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.32.2.2 ES-3124F: 1.3.6.1.4.1.890.1.5.8.31.32.2.2 DESCRIPTION This trap is sent when authentication fails due to incorrect user name and/or password. This trap - ZyXEL ES-3124PWR | User Guide - Page 246
the MRSTP topology changes. ES-3124: 1.3.6.1.4.1.890.1.5.8.12.107.70.2 ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.107.70.2 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.107.70.2 ES-3124F: 1.3.6.1.4.1.890.1.5.8.31.107.70.2 This trap is sent when the MSTP root switch changes. 246 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 247
Switch Traps (continued) OPTION OBJECT LABEL OBJECT ID mactable MacTableFullEventOn ES-3124: 1.3.6.1.4.1.890.1.5.8.12.27.2.1 ES-3124 PWR: 1.3.6.1.4.1.890.1.5.8.14.27.2.1 ES-3124-4F: 1.3.6.1.4.1.890.1.5.8.26.32.2.1 ES Figure 145 Management > Access Control > SNMP ES-3124 Series User's Guide 247 - ZyXEL ES-3124PWR | User Guide - Page 248
Note: Use the username and password of the login accounts you specify in this section to create accounts on the SNMP v3 manager. This is a read-only number identifying a login account on the Switch. This field displays the username of a login account on the Switch. 248 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 249
for SNMP communication from this user. Choose: • noauth -to use the username as the password string to send to the SNMP data. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power ES-3124 Series User's Guide 249 - ZyXEL ES-3124PWR | User Guide - Page 250
recommended that you change the default administrator password (1234). • A non-administrator (username is something other than admin) is someone who can view but not configure Switch settings. Click Management > Access Control > Logins to view the screen as shown. 250 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 251
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3124 Series User's Guide 251 - ZyXEL ES-3124PWR | User Guide - Page 252
client automatically saves any new server public keys. In subsequent connections, the server public key is checked against the saved version on the client computer. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 253
Switch. Please refer to the following figure. 1 HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the Switch's WS (web server). 2 HTTP connection requests from a web browser go to port 80 (by default) on the Switch's WS (web server). ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 254
Service Access Control screen, then the Switch blocks all HTTP connection attempts. 30.8 HTTPS Example If you haven't changed the default HTTPS port on the Switch, then in your browser enter "https://Switch verify that the certificate is from the Switch. You see the following Security Alert screen - ZyXEL ES-3124PWR | User Guide - Page 255
153 Security Certificate 2 (Netscape) 30.8.3 The Main Screen After you accept the certificate and enter the login username and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar denotes a secure connection. ES-3124 Series User's Guide 255 - ZyXEL ES-3124PWR | User Guide - Page 256
change the default service port and configure "trusted computer(s)" for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 155 Management > Access Control > Service Access Control 256 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 257
IP address range of trusted computers from which you can manage this Switch. The Switch checks if the client IP address of a computer requesting a service or protocol matches the range set here. The Switch immediately disconnects the session if it does not match. ES-3124 Series User's Guide 257 - ZyXEL ES-3124PWR | User Guide - Page 258
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 258 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 259
in the multi-line text box. Click Clear to empty the text box and reset the syslog entry. IP Ping Type the IP address of a device that you want to ping in order to test a connection. Click Ping to have the Switch ping the IP address (in the field to the left). Ethernet Port Test Enter - ZyXEL ES-3124PWR | User Guide - Page 260
Chapter 31 Diagnostic 260 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 261
panel to display this screen. The syslog feature sends logs to an external syslog server. Use this screen to configure the device's system logging settings. ES-3124 Series User's Guide 261 - ZyXEL ES-3124PWR | User Guide - Page 262
your syslog program for more details. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save screen. Use this screen to configure a list of external syslog servers. 262 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 263
are. Add Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses afresh. Clear Click Clear to return the fields to the factory defaults. Index This is the index number of a syslog server entry. ES-3124 Series User's Guide 263 - ZyXEL ES-3124PWR | User Guide - Page 264
Chapter 32 Syslog 264 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 265
manage the cluster member switches. Cluster Members The switches being managed by the cluster manager switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. ES-3124 Series User's Guide 265 - ZyXEL ES-3124PWR | User Guide - Page 266
Click Management > Cluster Management in the navigation panel to display the following screen. " A cluster can only have one manager. Figure 161 Management > Cluster Management 266 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 267
members to go to that cluster member switch's web configurator home page. This cluster member web configurator home page and the home page that you'd see if you accessed it directly are different. Figure 162 Cluster Management: Cluster Member Web Configurator Screen ES-3124 Series User's Guide 267 - ZyXEL ES-3124PWR | User Guide - Page 268
. Table 115 FTP Upload to Cluster Member Example FTP PARAMETER DESCRIPTION User Enter "admin". Password The web configurator password default is 1234. ls Enter this command to list the name of cluster member switch's firmware and configuration file. 360lt0.bin This is the name of the - ZyXEL ES-3124PWR | User Guide - Page 269
All switches must be directly connected and in the same VLAN group to belong to the same cluster. Switches that are not in the same VLAN group are not visible in the Clustering Candidates list. This field is ignored if the Clustering Manager is using Port-based VLAN. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 270
member switch's System Name. Model This is the cluster member switch's model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. 270 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 271
forwarded or filtered across the Switch's ports. It shows what Switch) or static (manually entered in the Static MAC Forwarding screen). The Switch Switch has already learned the port for this MAC address, then it forwards the frame to that port. • If the Switch • If the Switch has already learned the - ZyXEL ES-3124PWR | User Guide - Page 272
frame belongs. This is the port from which the above MAC address was learned. This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). 272 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 273
ARP Works When an incoming packet destined for a host device on a local area network arrives at the Switch, the Switch's ARP program looks in the ARP Table and, if it finds the address, sends it to the device . Use the ARP table to view IP-to-MAC address mapping(s). ES-3124 Series User's Guide 273 - ZyXEL ES-3124PWR | User Guide - Page 274
. IP Address This is the learned IP address of a device connected to a Switch port with corresponding MAC address below. MAC Address This is the MAC address of is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). 274 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 275
and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. Figure 168 Management > Configure Clone ES-3124 Series User's Guide 275 - ZyXEL ES-3124PWR | User Guide - Page 276
memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 276 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 277
PART IV Troubleshooting and Specifications Troubleshooting (279) Product Specifications (283) 277 - ZyXEL ES-3124PWR | User Guide - Page 278
278 - ZyXEL ES-3124PWR | User Guide - Page 279
the Switch. (AC models) 3 If the problem continues, contact the vendor. V One of the LEDs does not behave as expected. 1 Make sure you understand the normal behavior of the LED. See Section 3.4 on page 42. 2 Check the hardware connections. See Chapter 2 on page 31. ES-3124 Series User's Guide 279 - ZyXEL ES-3124PWR | User Guide - Page 280
band management IP address. 4 If this does not work, you have to reset the Switch to its factory defaults. See Section 4.6 on page 54. V I forgot the user name or password. 1 The default user name is admin, and the default password is 1234. These fields are casesensitive, so make sure [Caps Lock] is - ZyXEL ES-3124PWR | User Guide - Page 281
new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. In addition, consider the following suggestions before you reset the Switch to its factory defaults. ES-3124 Series User's Guide 281 - ZyXEL ES-3124PWR | User Guide - Page 282
. Close other FTP sessions, or try connecting again later. 2 Try to access the Switch using another service, such as HTTP. If you can access the Switch, check the remote management and secure client settings to find out why the Switch does not respond to FTP. 282 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 283
Per Switch: BPS, PWR, SYS, ALM Per Ethernet port: LNK/ACT, PoE (ES-3124PWR only) Per Ethernet port: LNK/ACT, FDX (ES-3124 and ES-3124-4F only) Per Fast Ethernet SFP port: LNK, ACT (ES-3124F only) Per Gigabit port: LNK/ACT, FDX Per Mini-GBIC slot: LNK, ACT Per management port: 10, 100 Dimension 438 - ZyXEL ES-3124PWR | User Guide - Page 284
. Power wire 18 AWG or larger. ES-3124: -48V~ -60 V, 48 W max., 1.5 A max. ES-3124-4F: -48V~ -60 V, 48 W max., 1.5 A max. ES-3124F: -48~ -60 V , 48 W, 1.5 A max. Safety ANS/UL 60950-1 CSA 60950-1 EN 60950-1 IEC 60950-1 EMC FCC Part 15 (Class A) CE EMC (Class A) 284 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 285
Supports services DHCP relay; VLAN-based DHCP relay DiffServ Security IEEE 802.1x port-based authentication Static MAC Address Forward Multiple RADIUS Servers Multiple TACACS+ Servers IP Source Guard Static IP/MAC binding DHCP snooping ARP inspection MAC authentication ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 286
aggregation Spanning Tree Protocol Loopguard IGMP snooping Firmware upgrade and download through FTP/TFTP Login is not exhaustive, illustrates the standards supported in the Switch. Table 122 Standards Supported STANDARD DESCRIPTION RFC 826 Address Resolution 286 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 287
Product Specifications Table 122 Standards Supported (continued) STANDARD DESCRIPTION Host Configuration Protocol) RFC 2138 RADIUS (Remote Authentication Dial In User Service) RFC 2139 RADIUS Accounting RFC 2236 Internet Group Management Protocol -SX/LX. ES-3124 Series User's Guide 287 - ZyXEL ES-3124PWR | User Guide - Page 288
has these pin assignments. The CON/AUX switch changes the setting in the firmware only and does not change the CON/AUX port's pin assignments. Switchs with a CON/AUX port also have a Crossover (Switch) (Adapter) (Switch) (Switch) 288 3. Pins 2,3 and 5 are used. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 289
Table 124 Ethernet Cable Pin Assignments WAN / LAN ETHERNET CABLE PIN LAYOUT 1 IRD + 1 OTD 1 IRD + + 2 IRD - 2 OTD - 2 IRD - 3 OTD + 3 IRD + 3 OTD + 6 OTD - 6 IRD - 6 OTD - Chapter 38 Product Specifications 1 IRD + 2 IRD 3 OTD + 6 OTD - ES-3124 Series User's Guide 289 - ZyXEL ES-3124PWR | User Guide - Page 290
Chapter 38 Product Specifications 290 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 291
. Some details may not apply to your Switch. Setting up Your Computer's IP Address (293) Pop-up Windows, JavaScripts and Java Permissions (315) IP Addresses and Subnetting (323) Common Services (333) Importing Certificates (337) Legal Information (343) Customer Support (357) Index (347) 291 - ZyXEL ES-3124PWR | User Guide - Page 292
292 - ZyXEL ES-3124PWR | User Guide - Page 293
in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure Switch's LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 294
Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your computer so the changes you made take effect. 294 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 295
you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). ES-3124 Series User's Guide 295 - ZyXEL ES-3124PWR | User Guide - Page 296
CD if prompted. 7 Turn on your Switch and restart your computer when prompted. Verifying default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. 1 Click start (Start in Windows 2000/NT), Settings, Control Panel. 296 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 297
Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 174 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. ES-3124 Series User's Guide 297 - ZyXEL ES-3124PWR | User Guide - Page 298
an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 299
in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. • Click OK when finished. ES-3124 Series User's Guide 299 - ZyXEL ES-3124PWR | User Guide - Page 300
• If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. 300 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 301
Dial-up Connections in Windows 2000/NT). 11 Turn on your Switch and restart your computer (if prompted). Verifying Settings 1 Click Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. 1 Click the Start icon, Control Panel. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 302
3 Click Network and Sharing Center. Figure 182 Windows Vista: Network And Internet 4 Click Manage network connections. Figure 183 Windows Vista: Network and Sharing Center 302 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 303
. Figure 184 Windows Vista: Network and Sharing Center 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Figure 185 Windows Vista: Local Area Connection Properties ES-3124 Series User's Guide 303 - ZyXEL ES-3124PWR | User Guide - Page 304
in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. • Click OK when finished. 304 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 305
(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 306
window. 12 Close the Network Connections window. 13 Turn on your Switch and restart your computer (if prompted). Verifying Settings 1 Click Support tab. Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. 306 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 307
/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the following: • From the Configure box, select Manually. ES-3124 Series User's Guide 307 - ZyXEL ES-3124PWR | User Guide - Page 308
Control Panel. 6 Click Save if prompted, to save changes to your configuration. 7 Turn on your Switch and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP assigned settings, select Using DHCP from the Configure list. 308 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 309
assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type address of your Switch in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your Switch and restart your ES-3124 Series User's Guide 309 - ZyXEL ES-3124PWR | User Guide - Page 310
of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 194 Red Hat 9.0: KDE: Ethernet Device: General 310 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 311
static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields. 3 Click OK to save the changes and close the Ethernet Device General screen. BOOTPROTO= field. The following figure shows an example. ES-3124 Series User's Guide 311 - ZyXEL ES-3124PWR | User Guide - Page 312
=255.255.255.0 USERCTL=no PEERDNS=yes TYPE=Ethernet 2 If you know your DNS server IP address(es), enter the DNS server information in the resolv.conf file in the /etc directory. The following figure interface: Bringing up interface eth0: [OK] [OK] [OK] [OK] [OK] 312 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 313
packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# ES-3124 Series User's Guide 313 - ZyXEL ES-3124PWR | User Guide - Page 314
Appendix A Setting up Your Computer's IP Address 314 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 315
pop-up blocking to log into your device. Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP 1 In Internet Explorer, select Tools, Internet Options, Privacy. ES-3124 Series User's Guide 315 - ZyXEL ES-3124PWR | User Guide - Page 316
following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 2 Select Settings...to open the Pop-up Blocker Settings screen. 316 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 317
://". For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites. Figure 205 Pop-up Blocker Settings ES-3124 Series User's Guide 317 - ZyXEL ES-3124PWR | User Guide - Page 318
: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window. 318 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 319
down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window. Figure 208 Security Settings - Java ES-3124 Series User's Guide 319 - ZyXEL ES-3124PWR | User Guide - Page 320
versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. 320 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 321
Appendix B Pop-up Windows, JavaScripts and Java Permissions Figure 210 Mozilla Firefox: Tools > Options Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 211 Mozilla Firefox Content Security ES-3124 Series User's Guide 321 - ZyXEL ES-3124PWR | User Guide - Page 322
Appendix B Pop-up Windows, JavaScripts and Java Permissions 322 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 323
an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. ES-3124 Series User's Guide 323 - ZyXEL ES-3124PWR | User Guide - Page 324
with a "1" value). For example, an "8-bit mask" means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes. 324 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 325
Notation SUBNET MASK ALTERNATIVE NOTATION LAST OCTET (BINARY) LAST OCTET (DECIMAL) 255.255.255.0 /24 0000 0000 0 255.255.255.128 /25 1000 0000 128 ES-3124 Series User's Guide 325 - ZyXEL ES-3124PWR | User Guide - Page 326
subnets; 192.168.1.0 /25 and 192.168.1.128 /25. The following figure shows the company network after subnetting. There are now two subnetworks, A and B. 326 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 327
(Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.0 Lowest Host ID: 192.168.1.1 Broadcast Address: 192.168.1.63 Highest Host ID: 192.168.1.62 ES-3124 Series User's Guide 327 - ZyXEL ES-3124PWR | User Guide - Page 328
Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1 0 1 30 31 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 328 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 329
) 1024 62 11 255.255.255.224 (/27) 2048 30 12 255.255.255.240 (/28) 4096 14 13 255.255.255.248 (/29) 8192 6 ES-3124 Series User's Guide 329 - ZyXEL ES-3124PWR | User Guide - Page 330
address that you entered. You don't need to change the subnet mask computed by the Switch unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique RFC 1466, Guidelines for Management of IP Address Space. 330 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 331
DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP address to computer A or setting computer A to networks. Figure 216 Conflicting Computer IP Addresses Example ES-3124 Series User's Guide 331 - ZyXEL ES-3124PWR | User Guide - Page 332
following example, the computer and the router's LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router's LAN port. Figure 217 Conflicting Computer and Router IP Addresses - ZyXEL ES-3124PWR | User Guide - Page 333
.zyxel.com) to IP numbers. ESP User-Defined 50 (IPSEC_TUNNEL) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 334
(Point-to-Point Tunneling Protocol) enables secure transfer of data over public networks. This is the data channel. Remote Command Service. A streaming audio service that enables real time sound over the web. Remote Execution Daemon. Remote Login. Remote Telnet. 334 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 335
Appendix D Common Services Table 136 Commonly Used Services (continued) NAME PROTOCOL PORT(S) RTSP TCP/ UNIX environments. It operates over TCP/ IP networks. Its primary function is to allow users to log into remote host systems. Trivial File Transfer Protocol is an Internet file transfer protocol - ZyXEL ES-3124PWR | User Guide - Page 336
Appendix D Common Services 336 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 337
certification authority. The following example procedure shows how to import the Switch's (self-signed) server certificate into your operating system as a trusted certification authority. 1 In Internet Explorer, double click the lock shown in the following screen. ES-3124 Series User's Guide 337 - ZyXEL ES-3124PWR | User Guide - Page 338
Appendix E Importing Certificates Figure 219 Login Screen 2 Click Install Certificate to open the Install Certificate wizard. Figure 220 Certificate General Information before Import 3 Click Next to begin the Install Certificate wizard. 338 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 339
Figure 221 Certificate Import Wizard 1 Appendix E Importing Certificates 4 Select where you would like to store the certificate and then click Next. Figure 222 Certificate Import Wizard 2 5 Click Finish to complete the Import Certificate wizard. ES-3124 Series User's Guide 339 - ZyXEL ES-3124PWR | User Guide - Page 340
Appendix E Importing Certificates Figure 223 Certificate Import Wizard 3 6 Click Yes to add the Switch certificate to the root store. Figure 224 Root Certificate Store 340 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 341
Appendix E Importing Certificates Figure 225 Certificate General Information after Import ES-3124 Series User's Guide 341 - ZyXEL ES-3124PWR | User Guide - Page 342
Appendix E Importing Certificates 342 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 343
manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL any interference received, including interference that may cause undesired operations. ES-3124 Series User's Guide 343 - ZyXEL ES-3124PWR | User Guide - Page 344
digital switch, instruction manual ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating 344 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 345
kind to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 346
Appendix F Legal Information 346 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 347
setup 184 authorization privilege levels 186 automatic VLAN registration 80 B back up, configuration file 236 bandwidth control 285 basic settings 67 ES-3124 Series User's Guide binding 193 binding table 193 building 193 BPDUs (Bridge Protocol Data Units) 102 Bridge Protocol Data Units (BPDUs) 102 - ZyXEL ES-3124PWR | User Guide - Page 348
over WAN 238 G GARP 80 GARP (Generic Attribute Registration Protocol) 80 GARP terminology 80 GARP timer 73, 80 GBIC ports 24, 38 general features 285 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 349
32 rubber feet 31 ES-3124 Series User's Guide Internet Assigned Numbers Authority See IANA 330 IP capability 285 interface 74 services 285 setup 74 IP setup 127, 128 status 126 lockout 54 log 259 login 47 password 53 login accounts 250 Administrator 250 configuring via web configurator 250 multiple - ZyXEL ES-3124PWR | User Guide - Page 350
configuration 233 firmware 235 main 115 MIB and SNMP 240 supported MIBs 241 MIB (Management Information password 53 administrator 251 PHB (Per-Hop Behavior) 219 ping, test connection 259 policy 151, 152 and classifier 151 and DiffServ 149 configuration 151 example 153 350 ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 351
802.1Q tagging 88 example 91 hexadecimal notation for protocols 87, 90 ES-3124 Series User's Guide isolate traffic 88 priority 87, 90 PVID 79, 85 PVID ( documentation 3 remote management 257 service 258 trusted computers 257 resetting 54, 234 to factory default settings 234 restoring configuration - ZyXEL ES-3124PWR | User Guide - Page 352
See SSH 252 security 285 service access control 256 service port 257 SFP (Small Form 3 and security 241 versions supported 240 SNMP traps 241 supported 241, 242, 244, 324 subnetting 326 switch lockout 54 switch reset 54 switch setup 72 switching 285 syntax conventions ES-3124 Series User's Guide - ZyXEL ES-3124PWR | User Guide - Page 353
see TRTCM 220 Type of Service (ToS) 219 U untrusted ports ARP inspection 196 DHCP snooping 194 user profiles 179 V Vendor Specific acceptable frame type 85 automatic registration 80 ES-3124 Series User's Guide Index ID 79 ingress filtering 85 introduction 71 ZyXEL Network Operating System) 237 353 - ZyXEL ES-3124PWR | User Guide - Page 354
Index 354 ES-3124 Series User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
 |
 |
www.zyxel.com
ES-3124 Series
Intelligent Layer 2+ Switch
User’s Guide
Version 3.80
8/2007
Edition 1
DEFAULT LOGIN
In-band IP Address
Out-of-band IP Address
User Name
admin
Password
1234