ZyXEL VES1724-56B2 User Guide
ZyXEL VES1724-56B2 Manual
 |
View all ZyXEL VES1724-56B2 manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL VES1724-56B2 manual content summary:
- ZyXEL VES1724-56B2 | User Guide - Page 1
VES1724-56 24-port Temperature-Hardened VDSL2 Box DSLAM Version 3.80 Edition 1, 9/2013 Quick Start Guide User's Guide Default Login Details LAN IP Address http://192.168.1.1 User Name admin Passwordwww.zyxel.com 1234 Copyright © 2013 ZyXEL Communications Corporation - ZyXEL VES1724-56B2 | User Guide - Page 2
from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Support Disc Refer to the included CD for support documents. 2 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 3
Contents Overview Contents Overview User's Guide ...17 Getting to Know Your Switch ...19 Hardware Installation and Connection 23 Hardware 2 Protocol Tunneling ...282 DoS Prevention ...286 PPPoE IA ...288 Static Route ...301 Differentiated Services ...304 DHCP ...311 VES1724-56 User's Guide 3 - ZyXEL VES1724-56B2 | User Guide - Page 4
Contents Overview Maintenance ...327 Access Control ...334 Diagnostic ...356 Syslog ...358 Loop Diagnostic ...361 MAC Table ...365 ARP Table ...367 Hardware Information ...369 CFM Action ...370 IPv6 Cache ...372 Troubleshooting ...377 Product Specifications ...381 4 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 5
of Contents Table of Contents Contents Overview ...3 Table of Contents ...5 Part I: User's Guide 17 Chapter 1 Getting to Know Your Switch 19 1.1 Introduction ...19 1.2 Applications ... Port ...30 3.1.6 ALARM Slot ...30 3.2 LEDs ...31 Chapter 4 The Web Configurator ...33 VES1724-56 User's Guide 5 - ZyXEL VES1724-56B2 | User Guide - Page 6
Chapter 7 System Status and Port Statistics 53 7.1 Overview ...53 7.2 Port Status Summary ...53 7.2.1 VDSL Port Status Change 54 7.2.2 VDSL Port Details ...55 7.2.3 Bonding Group Details 65 7.2.4 VDSL Summary ...66 7.2.5 Port Details ...67 Chapter 8 Basic Setting ...70 6 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 7
9.3.4 VDSL Line Profile Setup > DPBO 112 9.3.5 VDSL Line Profile Setup > RFI Band 113 9.3.6 VDSL Line Profile Setup > Virtual Noise 115 9.3.7 VDSL Channel Profile Setup 116 VES1724-56 User's Guide 7 - ZyXEL VES1724-56B2 | User Guide - Page 8
121 9.4.1 VDSL Line Alarm Profile Setup 122 9.4.2 VDSL Channel Alarm Profile Setup 124 9.5 VDSL Bonding Setup ...125 Chapter 10 VLAN ...129 10.1 Introduction to IEEE 802.1Q Tagged VLANs 129 10 Forwarding Overview 154 12.2 Configuring Static Multicast Forwarding 155 8 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 9
Aggregation Control Protocol 183 17.6 Static Trunking Example 184 Chapter 18 Port Authentication ...186 18.1 Port Authentication Overview 186 18.1.1 IEEE 802.1x Authentication 186 VES1724-56 User's Guide 9 - ZyXEL VES1724-56B2 | User Guide - Page 10
.2 VLAN Stacking Port Roles 209 23.3 VLAN Tag Format ...210 23.3.1 Frame Format ...210 23.4 Configuring VLAN Stacking 211 23.4.1 Port-based Q-in-Q 212 10 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 11
25.2.4 Vendor Specific Attribute 244 25.3 Supported RADIUS Attributes 245 25.3.1 Attributes Used for Authentication 245 25.3.2 Attributes Used for Accounting 246 Chapter 26 IP Source Guard...249 26.1 IP Source Guard Overview 249 26.1.1 DHCP Snooping Overview 249 VES1724-56 User's Guide 11 - ZyXEL VES1724-56B2 | User Guide - Page 12
Tunneling Mode 283 30.2 Configuring Layer 2 Protocol Tunneling 284 Chapter 31 DoS Prevention ...286 31.1 DoS Prevention Overview 286 31.2 Configuring DoS Prevention 286 12 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 13
301 33.1 Static Routing Overview 301 33.2 Configuring Static Routing 302 Chapter 34 Differentiated Services...304 34.1 DiffServ Overview ...304 34.1.1 DSCP and Per-Hop Behavior 304 34.1.2 DHCP Relay Agent Information 313 35.4.2 DHCP Relay Agent Information Format 313 VES1724-56 User's Guide 13 - ZyXEL VES1724-56B2 | User Guide - Page 14
327 36.1 The Maintenance Screen 327 36.2 Firmware Upgrade ...328 36.2.1 Dual Firmware Image 328 36.3 Restore a Configuration File .3 About SNMP ...334 37.3.1 SNMP v3 and Security 335 37.3.2 Supported MIBs ...336 37.3.3 SNMP Traps ...336 37.3.4 Configuring SNMP 342 37 14 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 15
Contents 37.8.2 Mozilla Firefox Warning Messages 351 37.8.3 The Main Screen ...352 37.9 Service Port Access Control 353 37.10 Remote Management 354 Chapter 38 Diagnostic ...356 38.1 370 Chapter 45 IPv6 Cache...372 45.1 Overview ...372 45.2 Neighbor Cache ...373 VES1724-56 User's Guide 15 - ZyXEL VES1724-56B2 | User Guide - Page 16
375 Chapter 46 Troubleshooting...377 46.1 Power, Hardware Connections, and LEDs 377 46.2 Switch Access and Login 378 46.3 Switch Configuration ...380 Chapter 47 Product Specifications ...381 Appendix A Common Services 397 Appendix B Legal Information 401 Index ...403 16 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 17
PART I User's Guide 17 - ZyXEL VES1724-56B2 | User Guide - Page 18
18 - ZyXEL VES1724-56B2 | User Guide - Page 19
These are the main applications for the switch: • Internet access and multimedia services for Multiple Tenant Units (MTU). • Other applications include telemedicine, surveillance systems, , or multiple tenant unit (MTU), that leverages existing phone line wiring to VES1724-56 User's Guide 19 - ZyXEL VES1724-56B2 | User Guide - Page 20
on the same line. Figure 1 MTU Application 1.2.2 Curbside Application The switch can also be used by an Internet Service Provider (ISP) in a street cabinet to form a "mini POP (Point-of-Presence)" to provide broadband services to residential areas that are too far away 20 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 21
ISP to avail of DSL services. Residents need a VDSL recommended for everyday management of the Switch using a (supported) web browser. See Chapter 4 on page 33. features. See the CLI Reference Guide. • FTP. Use FTP for firmware upgrades and configuration backup/restore. VES1724-56 User's Guide 21 - ZyXEL VES1724-56B2 | User Guide - Page 22
Chapter 1 Getting to Know Your Switch 22 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 23
the Switch is clean and dry. 2 Set the Switch on a smooth, level surface strong enough to support the weight of the Switch and the connected cables. Make sure there is a power outlet nearby. 3 and ensure space between devices when stacking. Figure 3 Attaching Rubber Feet VES1724-56 User's Guide 23 - ZyXEL VES1724-56B2 | User Guide - Page 24
to use the proper screws may damage the unit. 2.3.1.1 Precautions • Make sure the rack will safely support the combined weight of all the equipment it contains. • Make sure the position of the Switch does not mount the Switch on a rack. Proceed to the next section. 24 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 25
or larger green-and-yellow frame ground wire. Connect the frame ground before you connect any other cables or wiring. Figure 6 Frame Ground Frame Ground VES1724-56 User's Guide 25 - ZyXEL VES1724-56B2 | User Guide - Page 26
Ethernet cable for local configuration of the Switch. 3.1.1 Power Connector Note: Make sure you are using the correct power source as shown on the panel. VES1724-56 User's Guide 26 - ZyXEL VES1724-56B2 | User Guide - Page 27
to determine the connection speed and duplex mode. If the peer Ethernet port does not support autonegotiation or turns off this feature, the Switch determines the connection speed by detecting the : Auto • Duplex: Auto • Flow control: Off • Link Aggregation: Disabled VES1724-56 User's Guide 27 - ZyXEL VES1724-56B2 | User Guide - Page 28
. 3 The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning properly. 4 Close the transceiver's latch (latch styles vary). 28 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 29
is used for local management. Connect directly to this port using an Ethernet cable. You can configure the Switch via Telnet or the Web Configurator. VES1724-56 User's Guide 29 - ZyXEL VES1724-56B2 | User Guide - Page 30
alarm status. A closed circuit indicates an alarm status. An open circuit for pins 5 and 9 indicates no alarm status. A closed circuit indicates an alarm status. 30 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 31
to the Switch, view the LEDs to ensure proper functioning of the Switch and as an aid in troubleshooting. Table 3 LED Descriptions LED COLOR STATUS PWR Green On Off SYS Green On DESCRIPTION The system is is not connected at 10 Mbps or to an Ethernet device. VES1724-56 User's Guide 31 - ZyXEL VES1724-56B2 | User Guide - Page 32
Ethernet device. On The port is connected at 100 Mbps. Off The port is not connected at 100 Mbps or to an Ethernet device. 32 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 33
pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2. • JavaScript (enabled by default). • Java permissions (enabled by default). 4.2 System Login 1 default username is admin and associated default password is 1234. VES1724-56 User's Guide 33 - ZyXEL VES1724-56B2 | User Guide - Page 34
first Web Configurator screen. 4.3 The Port Status Screen The Port Status screen is the first screen that displays when you access the Web Configurator. 34 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 35
to logout of the Web Configurator. E - Click this link to display web help pages. The help pages provide descriptions for all of the configuration screens. VES1724-56 User's Guide 35 - ZyXEL VES1724-56B2 | User Guide - Page 36
. SFP Threshold Setup This link takes you to a screen where you can configure warning or alarm thresholds for the SFP slots of the Switch. 36 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 37
alarm profile. VDSL Bonding Setup This link takes you to a screen where you can configure VDSL port bonding that increases the total accounting service via external servers. The external servers can be either RADIUS (Remote Authentication Dial-In User Service) or . VES1724-56 User's Guide 37 - ZyXEL VES1724-56B2 | User Guide - Page 38
how the Switch should forward traffic by configuring the TCP/IP parameters manually. DiffServ This link takes you to screens where you can enable This link takes you to screens where you can perform firmware and configuration file maintenance as well as reboot the system. VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 39
-based VLANs with the CPU port as a member. The "CPU port" is the management port of the Switch. 3 Filter all traffic to the CPU port. VES1724-56 User's Guide 39 - ZyXEL VES1724-56B2 | User Guide - Page 40
configuration file. 6 Forget the password and/or IP address. 7 Prevent all services from accessing the Switch. 8 Change a service port number but forget it. Note: Be careful not to lock yourself and XMODEM upload" message before activating XMODEM upload on your terminal. 40 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 41
descriptions of individual screens and some supplementary information. Click the Help link from a Web Configurator screen to view an online help description of that screen. VES1724-56 User's Guide 41 - ZyXEL VES1724-56B2 | User Guide - Page 42
and enter 192.168.1.1 (the default IP address) in the address bar to access the Web Configurator. See Section 4.2 on page 33 for more information. VES1724-56 User's Guide 42 - ZyXEL VES1724-56B2 | User Guide - Page 43
want to configure port 1 and port 2 as members of VLAN 2. Figure 20 Initial Setup Network Example: VLAN Internet port1 VLAN1 192.168.1.x 192.168.1.x VLAN2 VES1724-56 User's Guide 43 - ZyXEL VES1724-56B2 | User Guide - Page 44
add a tag to incoming untagged frames received on that port so that the frames are forwarded to the VLAN group that the tag defines. 44 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 45
to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch's power is turned off. VES1724-56 User's Guide 45 - ZyXEL VES1724-56B2 | User Guide - Page 46
.2.3 6.1.2 Creating a VLAN Follow the steps below to configure ports 2 and 18 as a member of VLAN 102. 1 Access the Web Configurator through the Switch's management port. VES1724-56 User's Guide 46 - ZyXEL VES1724-56B2 | User Guide - Page 47
, clear the Tx Tagging check box for port 2 to have the Switch remove VLAN tags before sending. Click Add. Figure 24 Tutorial: Create a Static VLAN VES1724-56 User's Guide 47 - ZyXEL VES1724-56B2 | User Guide - Page 48
Basic Setting > IP Setup. 2 For the VLAN 102 network, enter 192.168.2.1 as the IP address and 255.255.255.0 as the subnet mask. 48 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 49
requests. Note: Make sure you have disabled global DHCP relay in the IP Application > DHCP > Global screen before you configure DHCP relay per VLAN settings. VES1724-56 User's Guide 49 - ZyXEL VES1724-56B2 | User Guide - Page 50
Check the client A's IP address. If it did not receive the IP address 192.168.2.3, make sure the devices are connected and configured properly. 50 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 51
PART II Technical Reference 51 - ZyXEL VES1724-56B2 | User Guide - Page 52
52 - ZyXEL VES1724-56B2 | User Guide - Page 53
67). This is the name you assigned to this port in the Basic Setting > Port Setup screen. This is the name of the VDSL port bonding group if the port is a member of one. Click the link to view more information about the group. VES1724-56 User's Guide 53 - ZyXEL VES1724-56B2 | User Guide - Page 54
complete the whole test before re-negotiating the connection. Figure 30 VDSL Port Status change Idle Handshake Training Showtime Perform DELT Test LD_DONE LD_TEST 54 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 55
Port Status screen to display individual port statistics. Use this screen to check status and detailed performance data for an individual port on the Switch. VES1724-56 User's Guide 55 - ZyXEL VES1724-56B2 | User Guide - Page 56
Chapter 7 System Status and Port Statistics Note: This screen refreshes automatically every several minutes if the port is in any status other than in "Showtime". Figure 31 Status: VDSL Port Details 56 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 57
Chapter 7 System Status and Port Statistics VES1724-56 User's Guide 57 - ZyXEL VES1724-56B2 | User Guide - Page 58
because of a configuration error. configNotFeasible: The initialization failed because a setting is not supported on both the Switch and the CPE. commFail: The initialization failed because of a the upstream/downstream loss of power (in dB) traveling along the line. 58 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 59
-Solomon redundancy bytes the higher the error correction capability. LSYMB refers to Latency SYMbol Bit. This field displays the actual number of bits per symbol. VES1724-56 User's Guide 59 - ZyXEL VES1724-56B2 | User Guide - Page 60
: G.INP retransmission is disabled on the Switch. G.INP Framing Type CPE not support: The connected CPE device does not support G.INP retransmission. This field displays the DTU (Data Transfer Unit) framing type An 8-bit CRC is inserted as the first byte of the DTU. 60 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 61
code words containing one or more anomalies. This field displays the number of code words containing one or more error blocks that have been corrected. VES1724-56 User's Guide 61 - ZyXEL VES1724-56B2 | User Guide - Page 62
tone gets a different gain value allocated to avoid interference. Select Downstream or Upstream for the direction. Select Both for both downstream and upstream directions. 62 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 63
type that can be displayed when you click Show in the VDSL sub-carrier status section. Downstream information is in blue and upstream in red. VES1724-56 User's Guide 63 - ZyXEL VES1724-56B2 | User Guide - Page 64
Chapter 7 System Status and Port Statistics Figure 32 Graph Examples Hlog QLN SNR BitAlloc GainAlloc 64 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 65
. This shows the name of the VDSL port bonding group. The size of all data fragments should be the same and it is negotiated by the Switch and individual VDSL CPEs. This shows the number of data fragments this group dropped due to being smaller than the negotiated size.. VES1724-56 User's Guide 65 - ZyXEL VES1724-56B2 | User Guide - Page 66
Chapter 7 System Status and Port Statistics Table 8 Port Status: Bonding Group Details (continued) LABEL rxLargeFragments rxBadFragments rxLostFragments rxLostStarts rxLostEnds DESCRIPTION This for that connection will be reset to 0. Figure 34 Status: VDSL Summary 66 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 67
the selected port. Port Info Port NO. This field displays the port number you are viewing. Name This field displays the name of the port. VES1724-56 User's Guide 67 - ZyXEL VES1724-56B2 | User Guide - Page 68
the link is functioning normally. Otherwise, it displays STOP. LACP TxPkts RxPkts Errors Tx KB/s Rx KB/s Bonding Up Time Up Time Tx Packet When STP (Spanning Tree Protocol) is enabled, this field displays the STP or traffic amount is under the desired limit so far. 68 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 69
were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. See Chapter 47 on page 381. VES1724-56 User's Guide 69 - ZyXEL VES1724-56B2 | User Guide - Page 70
allows you to set the system time manually or get the current time and date firmware version number and monitor the Switch temperature, fan speeds and voltage in this screen. Note that the fan speed information in the Hardware Monitor table is not available for this model. VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 71
chip firmware used in the Switch. W Version Ethernet Address This field refers to the Ethernet MAC (Media Access Control) address of the Switch. Power Module This field displays Dual when the Switch supports temperatures below the threshold and Error for those above. VES1724-56 User's Guide 71 - ZyXEL VES1724-56B2 | User Guide - Page 72
name and time. Click Basic Setting > General Setup in the navigation panel to display the screen as shown. Figure 37 Basic Setting > General Setup 72 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 73
spaces are allowed. Enter the time service protocol that your timeserver uses. Not all time servers support all protocols, so you may have Zone Daylight Saving Time None is the default value. Enter the time manually. Each time you turn on the Switch, the time and date VES1724-56 User's Guide 73 - ZyXEL VES1724-56B2 | User Guide - Page 74
: VLAN is unidirectional; it only governs outgoing traffic. See Chapter 10 on page 129 for information on port-based and 802.1Q tagged VLANs. 74 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 75
allowed Join Time range is between 100 and 65535 milliseconds; the default is 200 milliseconds. See the chapter on VLAN setup for more background information. VES1724-56 User's Guide 75 - ZyXEL VES1724-56B2 | User Guide - Page 76
separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Frames without an explicit priority tag are given the default priority of the ingress port. Use the :1a2f:0000 can be written as 2001:db8:1a2b:15:0:0:1a2f:0. 76 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 77
a device on the Internet. It is similar to a "public IP address" in IPv4. A global unicast address starts with a 2 or 3. The global address format as follows. VES1724-56 User's Guide 77 - ZyXEL VES1724-56B2 | User Guide - Page 78
network identifier or prefix of the address and is used for routing. This may be assigned by service providers. The subnet ID is a number that identifies the subnet of a site. 8.6.7 Unspecified An In IPv6, all network interfaces can be associated with several addresses. 78 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 79
and manage the Switch from the ports belonging to the pre-defined VLAN(s). Note: You must configure a VLAN first. Figure 39 Basic Setting > IP Setup VES1724-56 User's Guide 79 - ZyXEL VES1724-56B2 | User Guide - Page 80
navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring the fields again. 80 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 81
Alarm Switch Use this screen to view the status of the external alarm inputs and configure their settings. Figure 40 Basic Setting > External Alarm Switch VES1724-56 User's Guide 81 - ZyXEL VES1724-56B2 | User Guide - Page 82
. Select this check box to enable a port. The factory default for all ports is enabled. A port must be enabled for data transmission to occur. 82 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 83
peer automatically to determine the connection speed and duplex mode. If the peer port does not support autonegotiation or turns off this feature, the Switch determines the connection speed by detecting the signal Assignment in Table 12 on page 75 for more information. VES1724-56 User's Guide 83 - ZyXEL VES1724-56B2 | User Guide - Page 84
(s). Click Basic Setting and Rate Limit Profile Setup in the navigation panel to display the screen as shown. Figure 42 Rate Limit Profile Setup 84 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 85
Ratelimit Profile You can also use per queue rate limit profiles to define ingress and egress data rate limits for each queue on the Switch. VES1724-56 User's Guide 85 - ZyXEL VES1724-56B2 | User Guide - Page 86
want to remove in the Delete column and then click the Delete button. Click Cancel to clear the selected checkboxes in the Delete column. 86 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 87
data rate in Mbps. This field displays the model name of the CPE device connected to this port. NA displays if it is not available. VES1724-56 User's Guide 87 - ZyXEL VES1724-56B2 | User Guide - Page 88
connected to this port. NA displays if it is not available. FW Version This field displays the firmware version number of the DSL CPE device connected to this port. NA displays if it is not page 76 for more information about IPv6. Figure 46 Basic Setting > IPv6 Setup 88 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 89
in the Delete column and then click the Delete button to remove them. Click Cancel to clear the selected checkbox(es) in the Delete column. VES1724-56 User's Guide 89 - ZyXEL VES1724-56B2 | User Guide - Page 90
in the Delete column and then click the Delete button to remove them. Click Cancel to clear the selected checkboxes in the Delete column. 90 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 91
and neighboring devices. This cache table is similar to a MAC address table in IPv4. You can only configure static entries on an IPv6-enabled interface. VES1724-56 User's Guide 91 - ZyXEL VES1724-56B2 | User Guide - Page 92
reach the neighboring interface. This field displays the IPv6 address of the neighboring interface. This field displays the MAC address of the neighboring interface. 92 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 93
the Switch. Static: The IPv6 address belongs to a neighboring interface and it has been configured manually on the Switch. Dynamic: The IPv6 address belongs to a neighboring interface and the Switch has the Switch does not detect a mini-GBIC transceiver in an SFP slot. VES1724-56 User's Guide 93 - ZyXEL VES1724-56B2 | User Guide - Page 94
configure the thresholds. This is the type of device operating parameters. This shows the current value of each parameter measured for the installed transceiver. 94 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 95
slot. Part Number This field displays the part number defined by the transceiver vendor. Series Number This field displays the serial number of the transceiver. Revision This field displays the of light (in dBm) currently being received from the fiber optic cable. VES1724-56 User's Guide 95 - ZyXEL VES1724-56B2 | User Guide - Page 96
Chapter 8 Basic Setting 96 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 97
VDSL lets an apartment or office complex obtain highbandwidth services using existing copper wires without having to replace the can share the line with the telephone. Your Switch supports VDSL2 (Very High Speed Digital Subscriber Line 2) which = 25 ~ 172.5 kHz = ... VES1724-56 User's Guide 97 - ZyXEL VES1724-56B2 | User Guide - Page 98
better service in a network environment with telephone wiring of varying lengths. An example is shown below. Line 1 and Line 2 are in the same cable binder. Crosstalk occurs when the signal flows and is near to CPE (A)'s location. Besides, higher Line 1 PSD causes higher 98 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 99
Line2 (600m) Line1 (150m) Central Site (CO) UPBO DPBO VDSL signal may interfere with other services (such as ISDN, ADSL or ADSL2 provided by other devices) on the same bundle of lines due higher Line 1 PSD causes higher interference to the Line 2. CPE (B) receives VES1724-56 User's Guide 99 - ZyXEL VES1724-56B2 | User Guide - Page 100
With DPBO enabled on the CO (A), it decreases the PSD level and reduces the crosstalk impact on other service lines. Figure 52 DPBO Resolves Downstream Far-End Crosstalk ADSL CO (B) VDSL CO (A) No-DPBO DPBO and force CPE devices to retrain. SOS efficiently removes or 100 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 101
Chapter 9 VDSL Setup reduces crosstalk interference that leads to service interruption. When there is a burst of CRC errors, the receiver initiates a (LinProfile-1, LinProfile-2 and LinProfile-3) and 3 channel profiles (ChanProfile-1, ChanProfile-2 and ChanProfile-3). VES1724-56 User's Guide 101 - ZyXEL VES1724-56B2 | User Guide - Page 102
. • Uses a wider band for US0 mask. • Using F can get higher bandwidth for upstream traffic when the line has poor quality or in a long distance. 102 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 103
-defined thresholds on the line. Click this to save the settings to the Switch. Click Cancel to clear the selected checkboxes in the Delete column. VES1724-56 User's Guide 103 - ZyXEL VES1724-56B2 | User Guide - Page 104
Chapter 9 VDSL Setup 9.3 VDSL Template Setup The Switch supports one line profile and one channel profile configured in a VDSL template. Use this screen to add, modify in each VDSL template. This field displays the channel profile name configured in each VDSL template. 104 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 105
you want to remove in the Delete column and then click the Delete button. Click Cancel to clear the selected checkboxes in the Delete column. VES1724-56 User's Guide 105 - ZyXEL VES1724-56B2 | User Guide - Page 106
screen as shown next. Use the screen to add, edit or delete a VDSL line profile. Figure 55 VDSL Line Profile Setup The following table describes the labels in this screen. Table 34 VDSL Line Profile this template. See VDSL2 Profiles on page 98 for more information. 106 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 107
(for example, margin) reallocation among the allowed sub-carriers without service interruption or errors. This helps to keep transmission data rate on for this profile. At the time of writing, the Switch supports G.993.2 Annex A mode for countries which follow the North VES1724-56 User's Guide 107 - ZyXEL VES1724-56B2 | User Guide - Page 108
long distances. This field displays downstream (DS) and upstream (US) rate adaptive settings. Manual displays if the Switch fixes the transmission rate as the minimum net data rate and disables configured upstream and downstream signal to noise ration in decibels. 108 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 109
the screen as shown next. Use the screen to configure detailed VDSL rate adaptive settings. Figure 56 VDSL Rate Adaptive Setup The following table describes the labels in this screen. Table 35 VDSL Configure the following settings for the CPEs-to-the-Switch direction. VES1724-56 User's Guide 109 - ZyXEL VES1724-56B2 | User Guide - Page 110
DESCRIPTION Rate Adaptive Select the rate adaptive modes for downstream and upstream transmissions. Select Manual to fix the transmit rate as the minimum net data rate and disable transmission for a robust overhead channel. Select a number between 0 and 16. 110 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 111
tones. Enter an increased number (than previous row) from 0 to 4096 in this field that is also the horizontal of the MIB PSD Mask graph. VES1724-56 User's Guide 111 - ZyXEL VES1724-56B2 | User Guide - Page 112
as shown next. Use this screen to configure Downstream Power Back-Off (DPBO) settings. See DPBO on page 99. Figure 58 VDSL DPBO Setup 112 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 113
-side cables. This defines the assumed minimum usable receives PSD mask (in dBm/Hz) for exchange based services, used to modify parameter DPBOFMAX defined below. Enter from 0 to -127.5 dBm/Hz in steps of screen to specify the RFI bands through which the Switch and VES1724-56 User's Guide 113 - ZyXEL VES1724-56B2 | User Guide - Page 114
to the previous screen. Click Cancel to reset the fields to your previous configuration. Click Clear to clear the fields to the factory defaults. 114 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 115
where noise may occur. Break Point Note: The higher the virtual noise, the lower the line speed. This index number identifies each incremental break point. VES1724-56 User's Guide 115 - ZyXEL VES1724-56B2 | User Guide - Page 116
Enter a descriptive name for identification purposes. The parameters in this column relate to downstream transmissions. The parameters in this column relate to upstream transmissions. 116 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 117
you want to remove in the Delete column and then click the Delete button. Click Cancel to clear the selected checkboxes in the Delete column. VES1724-56 User's Guide 117 - ZyXEL VES1724-56B2 | User Guide - Page 118
. Preferred: G.INP is enabled if the far-end (CPE device) supports it. Forced: The VDSL connection can be established only if the far-end supports G.INP mode. Test: G.INP is enabled only in test mode. . Specify the minimum level of impulse noise (burst) protection. 118 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 119
(Eq INP or INP_Eq) and Inter-Arrival Time (IAT) histograms. The IAT represents the number of data symbols from the start of one cluster to VES1724-56 User's Guide 119 - ZyXEL VES1724-56B2 | User Guide - Page 120
. This provides the best estimate of the required INP level. Specify the cluster continuation value (0 to 64 DMT symbols) used for INM cluster indication. 120 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 121
profiles define VDSL port alarm thresholds. The device sends an alarm trap and generates a syslog entry when the thresholds of the alarm profile are exceeded. VES1724-56 User's Guide 121 - ZyXEL VES1724-56B2 | User Guide - Page 122
VDSL Alarm Template Setup screen to display the screen as shown. Use this screen to view, add, edit, or delete a VDSL line alarm profile. 122 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 123
of PoweR Seconds (LPRS) is permitted to occur within 15 minutes. Enter the number of times a full initialization is allowed to fail within 15 minutes. VES1724-56 User's Guide 123 - ZyXEL VES1724-56B2 | User Guide - Page 124
sends an alarm trap and generates a syslog entry when the thresholds of the alarm profile are exceeded. Figure 67 VDSL Channel Alarm Profile Setup 124 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 125
each of the subscriber's line connections. The next figure shows a subscriber using port bonding on two DSL lines between a CPE that supports VDSL bonding (A) (using a Y-connector) and the Switch to connect to the Internet. Figure 68 VDSL Port Bonding Example INTERNET A VES1724-56 User's Guide 125 - ZyXEL VES1724-56B2 | User Guide - Page 126
use for this group. Click Add to save the new group of DSL lines on which to use port bonding. It then displays in the summary table at the bottom of the screen. Click Cancel to reset the fields field displays the transmission mode protocol (PTM or ATM) this group uses. 126 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 127
uses. This field displays 1 if a single template profile is set to have each port in the bonding group share a set total data rate equally. This field displays 2 if a separate template profile is set Click Cancel to clear the selected checkboxes in the Delete column. VES1724-56 User's Guide 127 - ZyXEL VES1724-56B2 | User Guide - Page 128
Chapter 9 VDSL Setup 128 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 129
the system) is duplicated only on ports that are members of the VID (except the ingress port itself), thus confining the broadcast to a specific domain. VES1724-56 User's Guide 129 - ZyXEL VES1724-56B2 | User Guide - Page 130
PARAMETER TERM VLAN Type Permanent VLAN DESCRIPTION This is a static VLAN created manually. VLAN Administrative Control VLAN Tag Control Dynamic VLAN Registration Fixed Registration Forbidden Normal to the specified VLAN don't tag all outgoing frames transmitted. 130 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 131
V2 D V1 V2 10.4 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 71 Switch Setup > Select VLAN Type VES1724-56 User's Guide 131 - ZyXEL VES1724-56B2 | User Guide - Page 132
Static VLAN screen. Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up. 132 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 133
was added to the Switch. dynamic: using GVRP static: added as a permanent entry other: added in another way such as via Multicast VLAN Registration (MVR) VES1724-56 User's Guide 133 - ZyXEL VES1724-56B2 | User Guide - Page 134
on incoming unknown multicast frames and whether to enable MAC address learning for this VLAN. The port number identifies the port you are configuring. 134 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 135
screen to open the screen shown below. Use this screen to view, add, modify and delete VLAN profiles. Figure 75 VLAN > Static VLAN > VLAN Profile VES1724-56 User's Guide 135 - ZyXEL VES1724-56B2 | User Guide - Page 136
to remove in the Delete column and then click the Delete button. Click Cancel to clear the selected checkbox(es) in the Delete column. 136 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 137
a port so that the frames are forwarded to the VLAN group that the tag defines. Enter a number between 1 and 4094 as the port VLAN ID. VES1724-56 User's Guide 137 - ZyXEL VES1724-56B2 | User Guide - Page 138
). You also have a subnet based VLAN with priority 5 and VID of 200 for traffic received from IP subnet 192.168.1.0/24 (video services). Lastly, you configure VLAN with priority 3 and VID of 300 for traffic received from IP subnet 10.1.1.0/24 (data services). All 138 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 139
be classified based on their source IP subnet and prioritized accordingly. That is video services receive the highest priority and data the lowest. Figure 77 Subnet Based VLAN Application in the VLAN Port Setting screen to display the configuration screen as shown. VES1724-56 User's Guide 139 - ZyXEL VES1724-56B2 | User Guide - Page 140
VLAN which you defined in the Advanced Application > VLAN screens. Select the priority level that the Switch assigns to frames belonging to this VLAN. 140 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 141
B with priority 2 for Apple Talk traffic received on port 6 and 7. All upstream ARP traffic from port 1, 2 and 3 will be grouped together, and all upstream Apple VES1724-56 User's Guide 141 - ZyXEL VES1724-56B2 | User Guide - Page 142
packets and is applicable only when you use IEEE 802.1Q tagged VLAN. Figure 80 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN 142 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 143
include in this protocol based VLAN. Type 1. 3 Give this protocol-based VLAN a descriptive name. Type IP-VLAN. 4 Select the protocol. Leave the default value IP. VES1724-56 User's Guide 143 - ZyXEL VES1724-56B2 | User Guide - Page 144
traffic from the same MAC address(es). Click MAC Based VLAN in the VLAN Port Setting screen to display the configuration screen as shown. 144 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 145
> VLAN Port Setting > MAC Based VLAN The following table describes the labels in this screen. Table 55 VLAN > VLAN Port Setting > MAC Based VLAN LABEL Active Name MAC Address VID Priority Add Cancel Index specific page if all entries cannot be seen in one screen. VES1724-56 User's Guide 145 - ZyXEL VES1724-56B2 | User Guide - Page 146
must enter 1 as the VID. The port based VLAN setup screen is shown next. The CPU management port forms a VLAN with all Ethernet ports. 146 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 147
Setup screen and then click Advanced Application > VLAN from the navigation panel to display the next screen. Figure 83 Port Based VLAN Setup (All Connected) VES1724-56 User's Guide 147 - ZyXEL VES1724-56B2 | User Guide - Page 148
Chapter 10 VLAN Figure 84 Port Based VLAN Setup (Port Isolation) 148 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 149
Chapter 10 VLAN The following table describes the labels in this screen. Table 56 Port Based VLAN Setup label Description Setting Wizard Choose All connected or Port isolation. when you are done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 149 - ZyXEL VES1724-56B2 | User Guide - Page 150
are viewing. This field shows the total amount of time the Switch has been up. This field displays the port number you are viewing. 150 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 151
were between 1519 octets and the maximum frame size. The maximum frame size varies depending on your switch model. See Chapter 47 on page 381. VES1724-56 User's Guide 151 - ZyXEL VES1724-56B2 | User Guide - Page 152
your network. 11.2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the MAC address table. Static MAC addresses do not age out. When you set up screen as shown. Figure 86 Advanced Application > Static MAC Forwarding VES1724-56 User's Guide 152 - ZyXEL VES1724-56B2 | User Guide - Page 153
/next screen or select a page number from the drop-down list box to display a specific page if all entries cannot be seen in one screen. VES1724-56 User's Guide 153 - ZyXEL VES1724-56B2 | User Guide - Page 154
of a multicast group. A static multicast address is a multicast MAC address that has been manually entered in the multicast table. Static multicast addresses do not age out. Static multicast forwarding multicast forwarding, you can forward these multicast frames to VES1724-56 User's Guide 154 - ZyXEL VES1724-56B2 | User Guide - Page 155
12.2 Configuring Static Multicast Forwarding Use this screen to configure rules to forward specific multicast frames, such as streaming or control frames, to specific port(s). VES1724-56 User's Guide 155 - ZyXEL VES1724-56B2 | User Guide - Page 156
will be forwarded. This field displays the port(s) within a identified VLAN group to which frames containing the specified multicast MAC address will be forwarded. 156 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 157
cannot be seen in one screen. Click Delete to remove the selected entry from the summary table. Click Cancel to clear the Delete check boxes. VES1724-56 User's Guide 157 - ZyXEL VES1724-56B2 | User Guide - Page 158
frames originating from the MAC address. Select Discard source and Discard destination to block traffic to/from the MAC address specified in the MAC field. VES1724-56 User's Guide 158 - ZyXEL VES1724-56B2 | User Guide - Page 159
to remove in the Delete column and then click the Delete button. Cancel Click Cancel to clear the selected checkbox(es) in the Delete column. VES1724-56 User's Guide 159 - ZyXEL VES1724-56B2 | User Guide - Page 160
CHAPTER 14 Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) as defined in the to 600 40 to 400 10 to 60 ALLOWED RANGE 1 to 65535 1 to 65535 1 to 65535 1 to 65535 VES1724-56 User's Guide 160 - ZyXEL VES1724-56B2 | User Guide - Page 161
processed. Information frames are submitted to the learning process but not forwarded. All BPDUs are received and processed. All information frames are received and forwarded. VES1724-56 User's Guide 161 - ZyXEL VES1724-56B2 | User Guide - Page 162
Chapter 14 Spanning Tree Protocol 14.1.4 Multiple RSTP MRSTP (Multiple RSTP) is ZyXEL's proprietary feature that is compatible with RSTP and STP. With MRSTP, you can have more Load-balancing is possible as traffic from different VLANs can use distinct paths in a region. 162 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 163
paths outside this region) is increased by one. Internal path cost (of paths within this region) is increased by one when BPDUs traverse the region. VES1724-56 User's Guide 163 - ZyXEL VES1724-56B2 | User Guide - Page 164
single spanning tree devices. A network may contain multiple MST regions and other network segments running RSTP. Figure 96 MSTP and Legacy RSTP Network Example 164 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 165
top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 165 - ZyXEL VES1724-56B2 | User Guide - Page 166
is a root port, a new root port is selected from among the Switch ports attached to the network. The allowed range is 6 to 40 seconds. 166 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 167
information on RSTP. Note: This screen is only available after you activate RSTP on the Switch. Figure 100 Advanced Application > Spanning Tree Protocol > Status: RSTP VES1724-56 User's Guide 167 - ZyXEL VES1724-56B2 | User Guide - Page 168
Application > Spanning Tree Protocol screen. See Section 14.1 on page 160 for more information on MRSTP. Figure 101 Advanced Application > Spanning Tree Protocol > MRSTP 168 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 169
the media, the higher the cost-see Table 61 on page 160 for more information. Select which STP tree configuration this port should participate in. VES1724-56 User's Guide 169 - ZyXEL VES1724-56B2 | User Guide - Page 170
: The listening state does not exist in RSTP. This is the path cost from the root port on this Switch to the root switch. 170 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 171
Advanced Application > Spanning Tree Protocol screen. See Section 14.1.5 on page 162 for more information on MSTP. Figure 103 Advanced Application > Spanning Tree Protocol > MSTP VES1724-56 User's Guide 171 - ZyXEL VES1724-56B2 | User Guide - Page 172
Enter the number you want to use to identify this MST instance on the Switch. The Switch supports instance numbers 0-16. Set the priority of the Switch for the specific spanning tree instance. The . This field displays which VLAN(s) are mapped to this MST instance. 172 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 173
Tree Protocol in the navigation panel to display the status screen as shown next. See Section 14.1.5 on page 162 for more information on MSTP. VES1724-56 User's Guide 173 - ZyXEL VES1724-56B2 | User Guide - Page 174
is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. 174 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 175
. This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the MST instance. VES1724-56 User's Guide 175 - ZyXEL VES1724-56B2 | User Guide - Page 176
then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. VES1724-56 User's Guide 176 - ZyXEL VES1724-56B2 | User Guide - Page 177
on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to reset the fields. VES1724-56 User's Guide 177 - ZyXEL VES1724-56B2 | User Guide - Page 178
screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 106 Advanced Application > Mirroring VES1724-56 User's Guide 178 - ZyXEL VES1724-56B2 | User Guide - Page 179
on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to reset the fields. VES1724-56 User's Guide 179 - ZyXEL VES1724-56B2 | User Guide - Page 180
port of each trunk group must be physically connected to form a trunk group. The Switch supports both static and dynamic link aggregation. Note: In a properly planned network, it is recommended have the same media type, speed, duplex mode and flow control settings. VES1724-56 User's Guide 180 - ZyXEL VES1724-56B2 | User Guide - Page 181
join a trunk group via LACP. 2. Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. VES1724-56 User's Guide 181 - ZyXEL VES1724-56B2 | User Guide - Page 182
containing multiple ports. Select this option to activate a trunk group. This field displays the port number. Select the trunk group to which a port belongs. 182 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 183
link aggregation group, that is, one logical link containing multiple ports. Select this option to enable LACP for a trunk. This field displays the port number. VES1724-56 User's Guide 183 - ZyXEL VES1724-56B2 | User Guide - Page 184
are connected to the same destination. The following figure shows ports 25-26 on switch A connected to switch B. Figure 110 Trunking Example - Physical Connections B A 184 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 185
done. Figure 111 Trunking Example - Configuration Screen Your trunk group 1 (T1) configuration is now complete; you do not need to go to any additional screens. VES1724-56 User's Guide 185 - ZyXEL VES1724-56B2 | User Guide - Page 186
the RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) protocol to validate supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 187
along with a password configured specifically for MAC authentication on the Switch. Figure 113 MAC Authentication Process 1 New Connection 2 Authentication Request 3 Authentication Reply Session Granted/Denied VES1724-56 User's Guide 187 - ZyXEL VES1724-56B2 | User Guide - Page 188
make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. 188 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 189
the Switch sends along with the MAC address of a client for authentication with the RADIUS server. You can enter up to 32 printable ASCII characters. VES1724-56 User's Guide 189 - ZyXEL VES1724-56B2 | User Guide - Page 190
navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 190 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 191
is not recommended to disable both Port Security and MAC address learning as this will result in many broadcasts. Figure 117 Advanced Application > MAC Limit VES1724-56 User's Guide 191 - ZyXEL VES1724-56B2 | User Guide - Page 192
MAC Limit: VLAN Security LABEL Active DESCRIPTION Select this to limit the number of MAC addresses the Switch can dynamically learn on individual VLANs. 192 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 193
is from 0 to 16K (16384 bytes). "0" means this feature is disabled, so the switch will learn MAC addresses up to the global limit of 16K. VES1724-56 User's Guide 193 - ZyXEL VES1724-56B2 | User Guide - Page 194
you how to configure the packet classifier on the Switch. 20.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking . To configure policy rules, refer to Chapter 21 on page 200. VES1724-56 User's Guide 194 - ZyXEL VES1724-56B2 | User Guide - Page 195
are formatted according to the IEEE 802.3 standards. A value of Ethernet II indicates that the packets are formatted according to RFC 894, Ethernet II encapsulation. VES1724-56 User's Guide 195 - ZyXEL VES1724-56B2 | User Guide - Page 196
numbers or select the second option and enter a TCP/UDP protocol port number. Refer to Table 85 on page 198 for more information. Destination 196 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 197
a summary of the classifier rule's settings. Click Delete to remove the selected entry from the summary table. Click Cancel to clear the Delete check boxes. VES1724-56 User's Guide 197 - ZyXEL VES1724-56B2 | User Guide - Page 198
HTTP POP3 TCP/UDP PORT NUMBER 21 23 25 53 80 110 See Appendix A on page 397 for information on commonly used port numbers. 198 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 199
2. After you have configured a classifier, you can configure a policy (in the Policy screen) to define action(s) on the classified traffic flow. Figure 121 Classifier: Example VES1724-56 User's Guide 199 - ZyXEL VES1724-56B2 | User Guide - Page 200
is going. 21.1.2 DSCP and Per-Hop Behavior DiffServ defines a new DS (Differentiated Services) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field . Refer to Section 20.2 on page 194 for more information. VES1724-56 User's Guide 200 - ZyXEL VES1724-56B2 | User Guide - Page 201
Chapter 21 Policy Rule Click Advanced Application > Policy Rule in the navigation panel to display the screen as shown. Figure 122 Advanced Application > Policy Rule VES1724-56 User's Guide 201 - ZyXEL VES1724-56B2 | User Guide - Page 202
Specify a DSCP (DiffServ Code Point) number between 0 and 63. TOS Specify the type of service (TOS) priority level. Metering You can configure the desired bandwidth available to a traffic flow. Traffic the DSCP field with the value you configure in the DSCP field. 202 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 203
classifier to which this policy applies. Click Delete to remove the selected entry from the summary table. Click Cancel to clear the Delete check boxes. VES1724-56 User's Guide 203 - ZyXEL VES1724-56B2 | User Guide - Page 204
discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 20.4 on page 199). Figure 123 Policy Example 204 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 205
CHAPTER 22 Queuing Method This chapter introduces the queuing methods supported. 22.1 Queuing Method Overview Queuing is used to help solve performance degradation a port has more traffic than it can handle. Queues with larger weights get more service than queues with VES1724-56 User's Guide 205 - ZyXEL VES1724-56B2 | User Guide - Page 206
queues that have not yet emptied. 22.2 Configuring Queuing Click Advanced Application > Queuing Method in the navigation panel. Figure 124 Advanced Application > Queuing Method 206 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 207
their queue weight (the number you configure in the queue Weight field). Queues with larger weights get more service than queues with smaller weights. This field is applicable only when you select WFQ or WRR. Select Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 207 - ZyXEL VES1724-56B2 | User Guide - Page 208
figure, both A and B are Service Provider's Network (SPN) customers with VPN tunnels between their head offices and branch offices respectively. Both have an identical VLAN tag for their VLAN group. The service provider can separate these two VLANs within its network by VES1724-56 User's Guide 208 - ZyXEL VES1724-56B2 | User Guide - Page 209
do not support all roles. • service provider's network. All VLANs belonging to a customer can be aggregated into a single service provider's VLAN (using the outer VLAN tag defined by SP VID). Note: Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel Port. VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 210
priority level and "7" is the highest. VID is the VLAN ID. SP VID is the VID for the second (service provider's) VLAN tag. 23.3.1 Frame Format The frame format for an untagged Ethernet frame, a single-tagged 802.1Q frame Frame data VLAN ID FCS Frame Check Sequence 210 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 211
then make adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make them. VES1724-56 User's Guide 211 - ZyXEL VES1724-56B2 | User Guide - Page 212
egress ports at the edge of the service provider's network. Select Tunnel Port to have the Switch add the Tunnel TPID tag to all outgoing frames sent on this port. In order to support VLAN stacking on a port, the tag to them, even they have different customer VLAN IDs. 212 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 213
tag for the frames received on this port. Select a priority level (from 0 to 7). This is the service provider's priority level that adds to the frames received on this port. This field is not applicable if . Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 213 - ZyXEL VES1724-56B2 | User Guide - Page 214
information on VLAN ID. Select the Active checkbox and a priority level (from 0 to 7). This is the service provider's priority level that adds to the frames received on this port. If you clear the Active checkbox, the is the number of the selective VLAN stacking rule. 214 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 215
the service provider's VLAN tag (the outer tag) and forwarding them out. This feature is not applicable on a tunnel port. Click Port-based InnerQ in the Advanced Application > VLAN Stacking screen to display the screen as shown. Figure 129 VLAN Stacking > Port-based InnerQ VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 216
navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 216 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 217
services (such as content information distribution) based on service plans manually configured) to ports that are members of that group. IGMP snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your Switch. VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 218
to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. 218 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 219
shown. This screen shows the multicast group information. See Section 24.1 on page 217 for more information on multicasting. Figure 130 Advanced Application > Multicast Status VES1724-56 User's Guide 219 - ZyXEL VES1724-56B2 | User Guide - Page 220
ports belonging to a multicast group and the port's bonding group ID if it is a member of one. A star (*) displays if of a media server which provides media content. IGMPv3 and MLDv2 supports multicast source filtering. In INCLUDE mode, the client listens to the port. 220 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 221
group. Member This field displays the port number(s) that belong to the multicast group. The port's bonding group ID also displays in brackets if the port has joined one. Clear IGMP Counter Any Select this multicast groups in Leave messages this port has received. VES1724-56 User's Guide 221 - ZyXEL VES1724-56B2 | User Guide - Page 222
outgoing multicast traffic statistics per port. Port This field displays a port number and the port's bonding group ID if it has joined one. A star (*) displays if the port is the main port in the has learned since the last start up or clearing of the IGMP counters. 222 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 223
. VID The VLAN ID to which the received multicast queries belong. Querier Source IP The IP address of the device which sent the multicast queries. VES1724-56 User's Guide 223 - ZyXEL VES1724-56B2 | User Guide - Page 224
Select a priority level (0-7) to which the Switch changes the priority in outgoing IGMP control packets. Otherwise, select No-Change to not replace the priority. 224 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 225
keep any record of an IGMP router being connected to this port. The Switch does not forward IGMP join or leave packets to this port. VES1724-56 User's Guide 225 - ZyXEL VES1724-56B2 | User Guide - Page 226
, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. 226 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 227
then able to join the multicast groups specified in the profile. Each port can be assigned a single profile. A profile can be assigned to multiple ports. VES1724-56 User's Guide 227 - ZyXEL VES1724-56B2 | User Guide - Page 228
want to remove in the Delete Rule column, then click the Delete button. Click Cancel to clear the Delete Profile/Delete Rule check boxes. 228 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 229
)) that use multicast traffic across an Ethernet ring-based service provider network. MVR allows one single multicast VLAN to be not send any IGMP reports. In this case, you must manually configure the forwarding settings on the multicast devices in the the Switch. VES1724-56 User's Guide 229 - ZyXEL VES1724-56B2 | User Guide - Page 230
display the screen as shown next. Note: You can create up to three multicast VLANs and up to 256 multicast rules on the Switch. 230 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 231
4094) of the multicast VLAN. Select a priority level (0-7) with which the Switch replaces the priority in outgoing IGMP control packets (belonging to this multicast VLAN). VES1724-56 User's Guide 231 - ZyXEL VES1724-56B2 | User Guide - Page 232
sent to this multicast group. Configure MVR IP multicast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. 232 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 233
and click Delete to remove all multicast groups for that multicast VLAN from the table. Select Cancel to clear the checkbox(es) in the table. VES1724-56 User's Guide 233 - ZyXEL VES1724-56B2 | User Guide - Page 234
MVR settings on the Switch, create a multicast group in the MVR screen and set the receiver and source ports. Figure 139 MVR Configuration Example 234 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 235
two multicast groups (News and Movie) are configured for the multicast VLAN 200. Figure 140 MVR Group Configuration Example Figure 141 MVR Group Configuration Example VES1724-56 User's Guide 235 - ZyXEL VES1724-56B2 | User Guide - Page 236
authorization and accounting functions are known as AAA servers. The Switch supports RADIUS (Remote Authentication Dial-In User Service, see Section 25.1.2 on page 237) and TACACS+ (Terminal Access of users you may authenticate in this way (See Chapter 36 on page 327). VES1724-56 User's Guide 236 - ZyXEL VES1724-56B2 | User Guide - Page 237
settings. See Section 25.1.2 on page 237 for more information on RADIUS servers and Section 25.3 on page 245 for RADIUS attributes utilized by the VES1724-56 User's Guide 237 - ZyXEL VES1724-56B2 | User Guide - Page 238
server in dotted decimal notation. The default port of a RADIUS server for authentication is 1812. You need not change this value unless your network administrator instructs you to do so. 238 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 239
a RADIUS server for accounting is 1813. You need not change this value unless your network administrator instructs you to do so. Specify a password (up to 32 alphanumeric characters) as the key to done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 239 - ZyXEL VES1724-56B2 | User Guide - Page 240
+ server in dotted decimal notation. The default port of a TACACS+ server for authentication is 49. You need not change this value unless your network administrator instructs you to do so. 240 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 241
a TACACS+ server for accounting is 49. You need not change this value unless your network administrator instructs you to do so. Specify a password (up to 32 alphanumeric characters) as the key to be done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 241 - ZyXEL VES1724-56B2 | User Guide - Page 242
for Switch management). Configure the access privilege of accounts via commands (See the CLI Reference Guide) for local authentication. The TACACS+ and RADIUS are external servers. Before you specify the the Switch check the access privilege via the external servers. 242 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 243
is only valid if you select the start-stop option for the Exec or Dot1x entries. The Switch supports the following types of events to be sent to the accounting server(s): System: Configure the Switch to TACACS+ is the only method for recording Commands type of event. VES1724-56 User's Guide 243 - ZyXEL VES1724-56B2 | User Guide - Page 244
ZyXEL Supported VSAs FUNCTION ATTRIBUTE Ingress Bandwidth Vendor-Id = 890 Assignment Vendor-Type = 1 Vendor-data = ingress rate (Kbps in decimal format) Egress Bandwidth Assignment Vendor-Id = 890 Vendor-Type = 2 Vendor-data = egress rate (Kbps in decimal format) 244 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 245
create a VLAN with the specified VID on the Switch. 25.3 Supported RADIUS Attributes Remote Authentication Dial-In User Service (RADIUS) attributes are data used to define specific authentication and accounting to the RADIUS server when performing authentication. VES1724-56 User's Guide 245 - ZyXEL VES1724-56B2 | User Guide - Page 246
-Id is date+time+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time 246 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 247
Table 108 RADIUS Attributes - Exec Events via Telnet/SSH ATTRIBUTE User-Name NAS-Identifier NAS-IP-Address Service-Type Calling-Station-Id Acct-Status-Type Acct-Delay-Time Acct-Session-Id Acct-Authentic Acct-Session-Time Y Y Y INTERIM-UPDATE Y Y Y Y Y STOP Y Y Y Y Y VES1724-56 User's Guide 247 - ZyXEL VES1724-56B2 | User Guide - Page 248
-Output-Octets Acct-Session-Time Acct-Input-Packets Acct-Output-Packets Acct-Terminate-Cause Acct-Input-Gigawords Acct-Output-Gigawords START Y Y Y Y Y Y Y INTERIM-UPDATE Y Y Y Y Y Y Y Y Y Y Y Y Y Y STOP Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y 248 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 249
builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings). IP source guard consists of the following features: • Static that each port (trusted or untrusted) can receive each second. VES1724-56 User's Guide 249 - ZyXEL VES1724-56B2 | User Guide - Page 250
is read. If the calculated checksum is not equal to the checksum in the file, that binding and all others after it are ignored. 250 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 251
a connection with computer A. Computer X is in the same broadcast domain as computer A and intercepts the ARP request for computer A. Then, computer X does the following things: VES1724-56 User's Guide 251 - ZyXEL VES1724-56B2 | User Guide - Page 252
inspection on each VLAN. 3 Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. 252 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 253
displays how the Switch learned the binding. static: This binding was learned from information provided manually by an administrator. dhcp-snooping: This binding was learned by snooping DHCP packets. This field create a static binding with the same MAC address and VLAN VES1724-56 User's Guide 253 - ZyXEL VES1724-56B2 | User Guide - Page 254
field displays how the Switch learned the binding. static: This binding was learned from information provided manually by an administrator. This field displays the source VLAN ID in the binding. This field displays . Click this to clear the Delete check boxes above. 254 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 255
Chapter 26 IP Source Guard 26.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 151 DHCP Snooping VES1724-56 User's Guide 255 - ZyXEL VES1724-56B2 | User Guide - Page 256
bindings from the DHCP snooping database. This field displays the number of times the Switch updated the bindings in the DHCP snooping database successfully. 256 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 257
You can clear these counters by restarting the Switch or using CLI commands. See the CLI Reference Guide. This field displays the number of bindings the Switch has ignored because the Switch already had a bindings on a secure, external TFTP server so that they are VES1724-56 User's Guide 257 - ZyXEL VES1724-56B2 | User Guide - Page 258
.1/database.txt. Enter how long (10-65535 seconds) the Switch tries to complete a specific update in the DHCP snooping database before it gives up. 258 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 259
untrusted) can receive each second. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. Figure 153 DHCP Snooping Port Configure VES1724-56 User's Guide 259 - ZyXEL VES1724-56B2 | User Guide - Page 260
server for each VLAN. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > VLAN. Figure 154 DHCP Snooping VLAN Configure 260 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 261
unauthorized ARP packet. When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address VES1724-56 User's Guide 261 - ZyXEL VES1724-56B2 | User Guide - Page 262
how long (in seconds) the MAC address filter remains in the Switch. You can also delete the record manually (Delete). This field displays the reason the ARP packet was discarded. MAC+VLAN: The MAC address and VLAN if all status information cannot be seen in one screen. 262 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 263
since the Switch last restarted. This field displays the total number of ARP packets the Switch discarded for the VLAN since the Switch last restarted. VES1724-56 User's Guide 263 - ZyXEL VES1724-56B2 | User Guide - Page 264
based on the VLAN ID of the ARP packet. See Section 26.7.2 on page 268. This field displays when the log message was generated. 264 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 265
Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 26.6.2 on page 264. VES1724-56 User's Guide 265 - ZyXEL VES1724-56B2 | User Guide - Page 266
untrusted ports for ARP inspection. You can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port. To 266 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 267
packets per second) at which the Switch receives ARP packets from each port. The Switch discards any additional ARP packets. Enter 0 to disable this limit. VES1724-56 User's Guide 267 - ZyXEL VES1724-56B2 | User Guide - Page 268
settings are applied to all VLANs. Select Yes to enable ARP inspection on the VLAN. Select No to disable ARP inspection on the VLAN. 268 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 269
changes to the non-volatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. VES1724-56 User's Guide 269 - ZyXEL VES1724-56B2 | User Guide - Page 270
your network. Figure 161 Loop Guard vs. STP STP Loop Guard Loop guard is designed to handle loop problems on the edge of your network. This can occur when a port is connected to a Switch that is , x and y, connected to each other. It forms a loop. When switch B receives VES1724-56 User's Guide 270 - ZyXEL VES1724-56B2 | User Guide - Page 271
. In this example, the probe packet is sent from an xDSL port 1 and returns also on port 1. As long as loop guard is enabled on P P VES1724-56 User's Guide 271 - ZyXEL VES1724-56B2 | User Guide - Page 272
the Switch. Figure 164 Loop Guard - Network Loop A P 1 P B C Note: After resolving the loop problem on your network you can re-activate the disabled port via the Web Configurator (see Section 8.9 on page 82) ) enabled. Figure 165 Advanced Application > Loop Guard 272 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 273
sent out on the port loop back to the Switch. To activate the port again, you need to manually enable the port in the Port Setup screen. If you select Dynamic, the Switch shuts down the port you are done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 273 - ZyXEL VES1724-56B2 | User Guide - Page 274
between switches on the LAN. CFM can be used to identify and management this kind of connection problem. Figure 166 Management for any Fault in Bridges CO CPE 28.1.1 How CFM Works To enable Trace Messages (LTMs). CFM provides two tests to discover connectivity faults. VES1724-56 User's Guide 274 - ZyXEL VES1724-56B2 | User Guide - Page 275
fault. Administrators can take further action to check and resume services from the fault according to the line connectivity status report. A user reports his VDSL line link down. To check the problem, the administrator starts the link trace test from the A which is VES1724-56 User's Guide 275 - ZyXEL VES1724-56B2 | User Guide - Page 276
reset the fields. Click Clear to start configuring the screen again. This field displays the index number for the record in this summary table. 276 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 277
the rule(s) that you want to remove in the Delete column and then click the Delete button. Click Cancel to clear the Delete check boxes. VES1724-56 User's Guide 277 - ZyXEL VES1724-56B2 | User Guide - Page 278
and priority level of packets received from a private network to those used in the service provider's network. The Switch checks incoming traffic from the non-management ports against the Figure 170 VLAN mapping example 123 Service Provider Network 12 Port 3 10 10 VES1724-56 User's Guide 278 - ZyXEL VES1724-56B2 | User Guide - Page 279
top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 279 - ZyXEL VES1724-56B2 | User Guide - Page 280
replaces the customer VLAN ID in the tagged packets. This is the priority level that replaces the customer priority level in the tagged packets. 280 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 281
/next screen or select a page number from the drop-down list box to display a specific page if all entries cannot be seen in one screen. VES1724-56 User's Guide 281 - ZyXEL VES1724-56B2 | User Guide - Page 282
Layer 2 Protocol Tunneling Overview Layer 2 protocol tunneling (L2PT) is used on the service provider's edge devices. L2PT allows edge switches (1 and 2 in the following and D. Topology change information can be propagated throughout the service provider's network. VES1724-56 User's Guide 282 - ZyXEL VES1724-56B2 | User Guide - Page 283
the tunnel ports. • The Tunnel port is an egress port at the edge of the service provider's network and connected to another service provider's switch. Incoming encapsulated layer 2 protocol packets received on a tunnel port are decapsulated and sent to an access port. VES1724-56 User's Guide 283 - ZyXEL VES1724-56B2 | User Guide - Page 284
does not exist in the address table of a switch on the service provider's network. Note: All the edge switches in the service provider's network should be set to use the same MAC address for other Cisco devices can be discovered through the service provider's network. 284 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 285
that all customer switches can use consistent VLAN configuration through the service provider's network. The Switch supports PAgP (Port Aggregation Protocol), LACP (Link Aggregation Control Protocol) done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 285 - ZyXEL VES1724-56B2 | User Guide - Page 286
explains the DoS Prevention screens. 31.1 DoS Prevention Overview To protect against DoS (Denial of Service) attacks such as SYN flooding and Ping of Death, the Switch can use filtering actions navigation panel to display the screen as shown. Figure 176 DoS Prevention VES1724-56 User's Guide 286 - ZyXEL VES1724-56B2 | User Guide - Page 287
top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 287 - ZyXEL VES1724-56B2 | User Guide - Page 288
, which stands for the "ADSL Forum" IANA entry. i1 and i2 are PPPoE intermediate agent sub-options, which contain additional information about the PPPoE client. VES1724-56 User's Guide 288 - ZyXEL VES1724-56B2 | User Guide - Page 289
is configured on a per-VLAN basis. The Switch can be configured to add different subscriber line specific information to PPPoE discovery packets in different VLANs. VES1724-56 User's Guide 289 - ZyXEL VES1724-56B2 | User Guide - Page 290
291) or Advanced Application > PPPoE IA Configuration > VLAN screen (see Section 32.5 on page 293). Figure 178 Advanced Application > PPPoE IA Configuration > Port Tel 290 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 291
Telephone number Apply Cancel DESCRIPTION This field shows the number of a DSL port and the VDSL port bonding group ID if the port has joined one. Enter a string or digits to represent the port page 82). Figure 179 Advanced Application > PPPoE IA Configuration > Global VES1724-56 User's Guide 291 - ZyXEL VES1724-56B2 | User Guide - Page 292
panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 292 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 293
for PPPoE discovery packets with the specified VLAN tag. Spaces are allowed. Otherwise, select the second option to have the Switch use its host name. VES1724-56 User's Guide 293 - ZyXEL VES1724-56B2 | User Guide - Page 294
). Delete Select the configuration entries you want to remove and click Delete to remove them. Cancel Click Cancel to clear the Delete check boxes. 294 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 295
Switch can connect to both VDSL and ADSL CPEs and/or CPEs that have both VDSL and ADSL support. When a port is connected to an ADSL CPE and a VDSL connection cannot be established, the Switch the VCI (Virtual Channel Indicator) from 32 to 65535 for a channel on a port. VES1724-56 User's Guide 295 - ZyXEL VES1724-56B2 | User Guide - Page 296
screen or select a page number from the drop-down list box to display a specific page if all entries cannot be seen in one screen. 296 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 297
to incoming frames without a (IEEE 802.1p) priority tag. Enter the subscriber's IP address to which the Switch forwards the downstream traffic on this channel. VES1724-56 User's Guide 297 - ZyXEL VES1724-56B2 | User Guide - Page 298
screen or select a page number from the drop-down list box to display a specific page if all entries cannot be seen in one screen. 298 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 299
reset the above fields to your previous configuration. This is the index number of the channel on this port. Click a number to edit that channel. VES1724-56 User's Guide 299 - ZyXEL VES1724-56B2 | User Guide - Page 300
screen or select a page number from the drop-down list box to display a specific page if all entries cannot be seen in one screen. 300 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 301
use router R2 to send traffic to an SNMP trap server on network N2. Figure 184 Static Routing Overview N1 N2 Telnet SNMP R1 R2 VES1724-56 User's Guide 301 - ZyXEL VES1724-56B2 | User Guide - Page 302
. Destination Address This field displays the IP network address of the final destination. Subnet Mask This field displays the subnet mask for this destination. 302 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 303
transmission for routing purposes. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Delete check boxes. VES1724-56 User's Guide 303 - ZyXEL VES1724-56B2 | User Guide - Page 304
flow. Packets are marked with DiffServ Code Points (DSCPs) indicating the level of service desired. This allows the intermediary DiffServ-compliant network devices to handle the packets based on the configured marking rules. A network administrator can then apply VES1724-56 User's Guide 304 - ZyXEL VES1724-56B2 | User Guide - Page 305
CIR and PIR values are based on the guaranteed and maximum bandwidth respectively as negotiated between a service provider and client. Two Rate Three Color Marker evaluates incoming packets and marks them with one match any of colors, then the packets proceed unchanged. VES1724-56 User's Guide 305 - ZyXEL VES1724-56B2 | User Guide - Page 306
Chapter 34 Differentiated Services 34.2.1 TRTCM-Color-blind Mode All packets are evaluated against the PIR. If a packet exceeds the PIR it is marked .3 Activating DiffServ Activate DiffServ to apply marking rules or IEEE 802.1p priority mapping on the selected port(s). 306 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 307
Chapter 34 Differentiated Services Click IP Application > DiffServ in the navigation panel to display the screen as shown. Figure 190 IP Application > TRTCM settings. Click the 2-rate 3 Color Marker link in the DiffServ screen to display the screen as shown next. VES1724-56 User's Guide 307 - ZyXEL VES1724-56B2 | User Guide - Page 308
Chapter 34 Differentiated Services Note: You cannot enable both TRTCM and Bandwidth Control at the same time. Figure 191 IP Application > DiffServ > 2-rate 3 Color specify the DSCP values that you want to assign to packets based on the color they are marked via TRTCM. 308 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 309
Chapter 34 Differentiated Services Table 142 IP Application > DiffServ - 23 24 - 31 IEEE 802.1p 0 1 2 3 32 - 39 4 40 - 47 5 48 - 55 6 56 - 63 7 34.4.1 Configuring DSCP Settings To change the DSCP-IEEE 802.1p mapping click the DSCP Setting link in list box. VES1724-56 User's Guide 309 - ZyXEL VES1724-56B2 | User Guide - Page 310
Chapter 34 Differentiated Services Table 144 IP Application > DiffServ > DSCP Setting (continued) LABEL DESCRIPTION Apply Click Apply to save your changes to -volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 310 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 311
domain of the client computers or else the client computers must be configured manually. 35.1.1 DHCP Modes If there is already a DHCP server on your screen you should use for configuration depends on the DHCP services you want to offer the DHCP clients on your network VES1724-56 User's Guide 311 - ZyXEL VES1724-56B2 | User Guide - Page 312
DESCRIPTION Port This field shows the number of a DSL port. This field also shows the VDSL port bonding group ID if the port has joined any. Telephone number Enter a string or digits to represent the Cancel Click Cancel to begin configuring this screen afresh. 312 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 313
N (1 byte) String or System Name Value Figure 197 DHCP Relay Agent Remote ID Sub-option Format SubOpt 2 (1 byte) Length N (1 byte) String or Port Name Value VES1724-56 User's Guide 313 - ZyXEL VES1724-56B2 | User Guide - Page 314
to add/replace DHCP relay option 82 tags on a per-port basis in the Basic Setting > Port Setup screen (see Section 8.9 on page 82). 314 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 315
. An example of the port number is 1 if you select private while it is 31 in ASCII code if you select SP, SV or SPV. VES1724-56 User's Guide 315 - ZyXEL VES1724-56B2 | User Guide - Page 316
navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 316 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 317
to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients in both domains. Figure 199 Global DHCP Relay Network Example DHCP Server 192.168.1. to the VLAN ID. Figure 200 DHCP Relay Configuration Example VES1724-56 User's Guide 317 - ZyXEL VES1724-56B2 | User Guide - Page 318
82 tags on a per-port basis in the Basic Setting > Port Setup screen (see Section 8.9 on page 82). Figure 201 IP Application > DHCP > VLAN 318 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 319
server IP address. Select the configuration entries you want to remove and click Delete to remove them. Click Cancel to clear the Delete check boxes. VES1724-56 User's Guide 319 - ZyXEL VES1724-56B2 | User Guide - Page 320
Server Y 172.16.1.100 For the example network, configure the VLAN Setting screen as shown. Figure 203 DHCP Relay for Two VLANs Configuration Example 320 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 321
can also specify additional information for the system to add to the DHCPv6 requests that it relays to the DHCPv6 server. Figure 204 DHCPv6 LDRA VES1724-56 User's Guide 321 - ZyXEL VES1724-56B2 | User Guide - Page 322
number of a port on the Switch. This field also displays the port bonding group ID if the port has joined a group, for example, 22-B01 where B01 is port 22's group ID. A star (*) displays next to the group ID if the port is the main port in that group. 322 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 323
remove the entry or click Modify to edit the entry. Click Delete to remove the selected entries. Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 323 - ZyXEL VES1724-56B2 | User Guide - Page 324
counters for the port. Port No. Message Type Counter Note: For ports in a bonding group, the counter information on this screen is only available for the main port. A star (*) displays next A port dropped additional DHCP packets after the receiving rate reaches the 324 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 325
Port This field displays the index number of a port on the Switch. This field also displays the port bonding group ID if the port has joined any, for example, 22-B01 where B01 is port 22's group . Cancel Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 325 - ZyXEL VES1724-56B2 | User Guide - Page 326
Chapter 35 DHCP 326 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 327
Configuration 1 or Configuration 2) is currently operating on the Switch. Firmware Upgrade Click Click Here to go to the Firmware Upgrade screen. Restore Click Click Here to go to the in any screen to save your settings to the current configuration on the Switch. VES1724-56 User's Guide 327 - ZyXEL VES1724-56B2 | User Guide - Page 328
the Switch and apply the new firmware immediately. (Firmware upgrades are only applied after a reboot.) Click Upgrade to load the new firmware. After the firmware upgrade process is complete, see the System Info screen to verify your current firmware version number. 328 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 329
an example in which the Switch is set to use the second firmware image (ras-1). VES1724-56# show system-information Product Model System Name System Contact System Location System Restore Configuration screen. Figure 209 Management > Maintenance > Restore Configuration VES1724-56 User's Guide 329 - ZyXEL VES1724-56B2 | User Guide - Page 330
to change the IP address of your computer to be in the same subnet as that of the default Switch IP address (192.168.1.1). 330 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 331
, IP Setup, and so on. Once you have customized the Switch's settings, they can be saved back to your computer under a filename of your choosing. VES1724-56 User's Guide 331 - ZyXEL VES1724-56B2 | User Guide - Page 332
when the Switch starts up. • You can also use FTP commands to upload firmware to any image. The Switch supports dual firmware images, ras-0 and ras-1. You can switch from one to the other by using username. 4 Enter your password as requested (the default is "1234"). 332 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 333
Restrictions FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately. VES1724-56 User's Guide 333 - ZyXEL VES1724-56B2 | User Guide - Page 334
and Telnet access control session cannot coexist when multilogin is disabled. See the CLI Reference Guide for more information on disabling multi-login. 37.2 The Access Control Main Screen Click through the network via SNMP version one (SNMPv1), SNMP version 2c or VES1724-56 User's Guide 334 - ZyXEL VES1724-56B2 | User Guide - Page 335
to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations. Set Allows the manager to set values for object variables within an agent. Trap Used encrypted, only the intended recipients can read them. VES1724-56 User's Guide 335 - ZyXEL VES1724-56B2 | User Guide - Page 336
statistics and monitor status and performance. The Switch supports the following MIBs: • SNMP MIB II (RFC SNMPv2 MIB for UDP • xDSL2 MIB draft version 6. • CFM 802.1ag draft version 8.0 • ZyXEL private MIBs • IPv6 standard MIB: • IP-FORWARD-MIB (RFC 4292) • IP-MIB (RFC 4293 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 337
external alarm is received. This trap is sent when the external alarm stops sending an alert. This trap is sent when the system loses power. VES1724-56 User's Guide 337 - ZyXEL VES1724-56B2 | User Guide - Page 338
the "high alarm" threshold. DdmiTxPowerAlarmEventOn 1.3.6.1.4.1.890.1.5.12.46.45.2 7.2.1 This trap is sent when a transceiver's transmitted optical power goes over the "high alarm" threshold. 338 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 339
normal range. This trap is sent when a transceiver's transmitted optical power falls down below the high warning threshold and is back to the normal range. VES1724-56 User's Guide 339 - ZyXEL VES1724-56B2 | User Guide - Page 340
.2. This trap is sent when the MRSTP topology 2 changes. 1.3.6.1.4.1.890.1.5.12.46.45.107.7 This trap is sent when the MSTP root 0.2 switch changes. 340 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 341
in CPE side exceeds the threshold. This trap is sent when the Switch detects that the number of corrected blocks (FEC events) exceeds the threshold. VES1724-56 User's Guide 341 - ZyXEL VES1724-56B2 | User Guide - Page 342
the SNMP manager. Choose SNMP version 2c (v2c), SNMP version 3 (v3) or both (v3v2c). Note: SNMP version 2c is backwards compatible with SNMP version 1. 342 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 343
DES - Data Encryption Standard is a widely used (but breakable) method of data encryption. It applies a 56-bit key to each 64-bit block of data. • AES - Advanced Encryption Standard is another method for . Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 343 - ZyXEL VES1724-56B2 | User Guide - Page 344
is someone who can both view and configure Switch changes. The username for the Administrator is always admin. The default administrator password is 1234. 344 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 345
give users higher privileges via the CLI. For more information on assigning privileges see the CLI Reference Guide. User Name Set a user name (up to 32 ASCII characters long). Password Enter your new . Cancel Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 345 - ZyXEL VES1724-56B2 | User Guide - Page 346
automatically saves any new server public keys. In subsequent connections, the server public key is checked against the saved version on the client computer. 346 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 347
to the server to log in to the server. 37.6 SSH Implementation on the Switch Your Switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH server go to port 443 (by default) on the Switch's WS (web server). VES1724-56 User's Guide 347 - ZyXEL VES1724-56B2 | User Guide - Page 348
the Switch's WS (web server). Figure 220 HTTPS Implementation Note: If you disable HTTP in the Service Access Control screen, then the Switch blocks all HTTP connection attempts. 37.8 HTTPS Example If you haven Figure 221 Security Alert Dialog Box (Internet Explorer 6) 348 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 349
When you attempt to access the Switch HTTPS server, a screen with the message "There is a problem with this website's security certificate." may display. If that is the case, click Continue to this . Figure 223 Certificate Error (Internet Explorer 7 or 8) EXAMPLE VES1724-56 User's Guide 349 - ZyXEL VES1724-56B2 | User Guide - Page 350
Chapter 37 Access Control Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser. Figure 224 Certificate (Internet Explorer 7 or 8) 350 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 351
Unstructed screen may display. If that is the case, click I Understand the Risks and then the Add Exception... button. Figure 225 Security Alert (Mozilla Firefox) VES1724-56 User's Guide 351 - ZyXEL VES1724-56B2 | User Guide - Page 352
username and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar (in Internet Explorer 6 or 352 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 353
: Lock Denoting a Secure Connection EXAMPLE 37.9 Service Port Access Control Service Access Control allows you to decide what services you may use to access the Switch. You may also change the default service port and configure "trusted computer(s)" for each service in VES1724-56 User's Guide 353 - ZyXEL VES1724-56B2 | User Guide - Page 354
default port number then you will have to let people (who wish to use the service) know the new port number for that service. Timeout Type how many minutes a management session (via the Web Configurator) can be > Remote Management to view the screen as shown next. 354 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 355
can manage this Switch. The Switch checks if the client IP address of a computer requesting a service or protocol matches the range set here. The Switch immediately disconnects the session if it does not Cancel Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 355 - ZyXEL VES1724-56B2 | User Guide - Page 356
-default, out-of-band). When you select inband-vlan in the Outgoing interface field, you have to also specify a VLAN ID for the ping conditions. VES1724-56 User's Guide 356 - ZyXEL VES1724-56B2 | User Guide - Page 357
loopback test or click External Test (on a VDSL port) to perform a loopback test to the a remote CPE device. A successful or fail test result displays then. VES1724-56 User's Guide 357 - ZyXEL VES1724-56B2 | User Guide - Page 358
: There is a normal but significant condition on the system. 6 Informational: The syslog contains an informational message. 7 Debug: The message is intended for debug-level purposes. VES1724-56 User's Guide 358 - ZyXEL VES1724-56B2 | User Guide - Page 359
navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. VES1724-56 User's Guide 359 - ZyXEL VES1724-56B2 | User Guide - Page 360
server. Delete Select an entry's Delete check box and click Delete to remove the entry. Cancel Click Cancel to begin configuring this screen afresh. 360 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 361
test between the Switch and the remote devices. Note: It takes several minutes to complete whole test. Before it's completed, the status stays at "LD_Testing". VES1724-56 User's Guide 361 - ZyXEL VES1724-56B2 | User Guide - Page 362
received noise power for that sub-carrier. Select Hlin-ps to see the line's capability against attenuation. Select Downstream or Upstream for the direction. 362 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 363
has been processed. Select a port number from the drop-down list box and click Show Status to display the test result in the table below. VES1724-56 User's Guide 363 - ZyXEL VES1724-56B2 | User Guide - Page 364
the attenuation fields. This field displays the phase jump at the line termination. A value of 0 indicates a shortcut termination. A value of 1 indicates an open termination. 364 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 365
forwarded to which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). The Switch uses the MAC table to determine how to forward it filters the frame. Figure 236 MAC Table Flowchart VES1724-56 User's Guide 365 - ZyXEL VES1724-56B2 | User Guide - Page 366
the port from which the above MAC address was learned. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). 366 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 367
in the navigation panel to open the following screen. Use the ARP table to view IP-to-MAC address mapping(s). Figure 238 Management > ARP Table VES1724-56 User's Guide 367 - ZyXEL VES1724-56B2 | User Guide - Page 368
(learned by the Switch) or static. Age(s) This shows how long (in second) the entry remains valid. Zero means the entry is always valid. 368 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 369
click Display to see detailed packet buffer usage. Select this and then click Display to see detailed memory usage. Click this to clear this screen. VES1724-56 User's Guide 369 - ZyXEL VES1724-56B2 | User Guide - Page 370
(0-7). Type an MA VLAN ID (0-4096) under the MD level. Type an MEP ID to specify which MEP port on the device initiates the action. VES1724-56 User's Guide 370 - ZyXEL VES1724-56B2 | User Guide - Page 371
result for a test. Examples of connectivity test reports are shown next. Figure 241 Connectivity Test Report Examples LoopBack Report Link Trace Report Show Detail Report VES1724-56 User's Guide 371 - ZyXEL VES1724-56B2 | User Guide - Page 372
the state for the neighbor is not reachable, it starts the address resolution process. This helps reduce the number of IPv6 solicitation and advertisement messages. VES1724-56 User's Guide 372 - ZyXEL VES1724-56B2 | User Guide - Page 373
link-layer address of the neighbor has not yet been determined (see RFC 4861). The interface of the neighboring device did not give a complete response. VES1724-56 User's Guide 373 - ZyXEL VES1724-56B2 | User Guide - Page 374
Switch. Static: The IPv6 address belongs to a neighboring interface and it has been configured manually on the Switch. Dynamic: The IPv6 address belongs to a neighboring interface and the Switch has . Status This field displays the item's status details. 374 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 375
, packets can be fragmented only by the source device from which the packets are sent. The source device must adjust the MTU size if it VES1724-56 User's Guide 375 - ZyXEL VES1724-56B2 | User Guide - Page 376
This is the maximum transmission unit used for data transmission to the destination host. Expire This is the remaining time before the entry expires. 376 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 377
CHAPTER 46 Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware is connected in AC/DC models). 3 If the problem continues, contact the vendor. VES1724-56 User's Guide 377 - ZyXEL VES1724-56B2 | User Guide - Page 378
Chapter 46 Troubleshooting One of the LEDs does not behave as AC models or if the AC power supply is connected in AC/DC models). 6 If the problem continues, contact the vendor. 46.2 Switch Access and Login I forgot the IP address for are using the correct IP address. 378 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 379
changed the IP address and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the Switch problem continues, contact the vendor, or try one of the advanced suggestions. Advanced Suggestions • Try to access the Switch using another service VES1724-56 User's Guide 379 - ZyXEL VES1724-56B2 | User Guide - Page 380
Chapter 46 Troubleshooting • Java permissions (enabled by default). I cannot see some of Advanced Application submenus at the bottom of the navigation panel permanently. See also Section 36.6 on page 331 for more information about how to save your configuration. 380 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 381
tables summarize the Switch's hardware and firmware features. Table 181 Hardware Specifications SPECIFICATION Default /POTS lines) Compatible CPE Device Model At the time of writing, ZyXEL P-870H-51, P-870HA, P-870HW-51, P873 and P874 are the Resynchronization VES1724-56 User's Guide 381 - ZyXEL VES1724-56B2 | User Guide - Page 382
per port Rule-based bandwidth control (ingress traffic metering/dropping 64Kb stepping) Port-based egress traffic shaping Rule-based traffic mirroring IGMP snooping TRTCM 382 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 383
DHCP client DHCP relay Filtering Multicast VLAN-based DHCP relay Support L2 MAC filtering, L3 IP filtering, Layer 4 TCP/UDP socket IGMP snooping (IGMP v1/v2/v3, 16 VLAN maximum-user configurable) MLD v1/v2 IGMP filtering MVR IGMP timer Multicast reserve group VES1724-56 User's Guide 383 - ZyXEL VES1724-56B2 | User Guide - Page 384
voltage. Support COC version Firmware Specifications FEATURE DESCRIPTION Number of Login Accounts Configurable on the Switch 4 management accounts configured on the Switch. Authentication via RADIUS and TACACS+ also available. Maximum Frame Size 9 K (9216 bytes) 384 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 385
Firmware Specifications FEATURE VLAN VLAN Stacking MAC Address Filter DHCP (Dynamic Host Configuration Protocol) Relay IGMP Snooping Differentiated Services is network congestion. The following scheduling services are supported: Strict Priority Queuing (SPQ) Weighted VES1724-56 User's Guide 385 - ZyXEL VES1724-56B2 | User Guide - Page 386
Authentication and Accounting The Switch supports authentication and accounting services via RADIUS and TACACS+ Authentication and send it to a syslog server. Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the Web Configurator, VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 387
Product Specifications Table 183 Standards Supported (continued) STANDARD RFC Management Protocol version 2c RADIUS (Remote Authentication Dial In User Service) Internet Group Management Protocol, Version 2. Two Rate Three Color COUNTRY POTS Taiwan 900 VES1724-56 User's Guide 387 - ZyXEL VES1724-56B2 | User Guide - Page 388
Chapter 47 Product Specifications Hardware Telco-50 Connector Pin Assignments Use Telco-50 cables to connect the VDSL LINE port to the user equipment (VDSL modem) and the POTS LINE port to the central office switch or PBX (Private Branch Exchange). In this switch, both 388 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 389
Telco-50 connectors on the Switch. Table 185 Hardware Telco-50 Pin Assignments (VES1724-56) VDSL PIN1 NULL PIN26 NULL POTS PIN1 NULL PIN2 V-PORT1 PIN27 V+PORT1 PIN2 PORT14 V+PORT15 V+PORT16 V+PORT17 V+PORT18 V+PORT19 V+PORT20 V+PORT21 V+PORT22 V+PORT23 V+PORT24 VES1724-56 User's Guide 389 - ZyXEL VES1724-56B2 | User Guide - Page 390
15 16, 41 16 17, 42 17 18, 43 18 19, 44 19 20, 45 20 21, 46 21 22, 47 22 23, 48 390 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 391
-9F Pin 1 = NON Pin 2 = DCE-TXD Pin 3 = DCE -RXD Pin 4 = DCE -DSR Pin 5 = GND Pin 6 = DCE -DTR Pin 7 = DCE -CTS Pin 8 = DCE -RTS PIN 9 = NON VES1724-56 User's Guide 391 - ZyXEL VES1724-56B2 | User Guide - Page 392
alarm status. A closed circuit indicates an alarm status. An open circuit for pins 5 and 9 indicates no alarm status. A closed circuit indicates an alarm status. 392 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 393
248 Twisted-Pair 1000BASE-T Ethernet Cable Schematic Switch 1 TP0+ 2 TP03 TP1+ 6 TP1- Switch 1 TP0+ 2 TP03 TP1+ 6 TP1- 4 TP2+ 5 TP2- 7 TP3+ 8 TP3- 4 TP2+ 5 TP2- 7 TP3+ 8 TP3- VES1724-56 User's Guide 393 - ZyXEL VES1724-56B2 | User Guide - Page 394
White White White White Red Red Red Red Red Black Black Black Black Black Yellow Yellow Yellow Yellow Yellow Purple Purple Purple Purple Purple 394 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 395
ALUMINUM STRIP DIAMETER LAMINATE (MM) THICKNESS(MM) 9.7 - OUTER SHEATH THICKNESS (MM) 1.0 FINAL DIAMETER OF THE ROUND CABLE (MM) 11.8°"1.0 Figure 249 Telco-50 Cable Structure VES1724-56 User's Guide 395 - ZyXEL VES1724-56B2 | User Guide - Page 396
DIAMETER LAMINATE (MM) THICKNESS(MM) 11.0 - OUTER SHEATH THICKNESS (MM) 1.0 FINAL DIAMETER OF THE ROUND CABLE (MM) 13.0°"1.0 Figure 250 Telco-50 Cable Structure 396 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 397
videoconferencing solution from White Pines Software. Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. The IPSEC ESP (Encapsulation Security Protocol Transfer Protocol - a client/server protocol for the world wide web. VES1724-56 User's Guide 397 - ZyXEL VES1724-56B2 | User Guide - Page 398
secure transfer of data over public networks. This is the data channel. Remote Command Service. A streaming audio service that enables real time sound over the web. Remote Execution Daemon. Remote Login. systems and network servers. Secure Shell Remote Login Program. 398 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 399
Table 194 Commonly Used Services (continued) NAME STRM WORKS SYSLOG TACACS TELNET TFTP VDOLIVE PROTOCOL UDP UDP UDP TCP UDP TCP PORT FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). Another videoconferencing solution. VES1724-56 User's Guide 399 - ZyXEL VES1724-56B2 | User Guide - Page 400
Appendix A Common Services 400 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 401
installed and used in accordance with the instruction manual, may cause harmful interference to radio ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 402
services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware 402 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 403
236 access control limitations 334 login account 344 remote management 354 service port 353 SNMP 334 activating upstream band 0 108 actual aggregate Tx 251 and MAC filter 252 configuring 252 syslog messages 252 VES1724-56 User's Guide Index Index trusted ports 252 ARP table viewing 367 attainable - ZyXEL VES1724-56B2 | User Guide - Page 404
ports 250 DHCP snooping database 250 DHCPv6 relay 321, 324 diagnostics 356 ping 356 port test 357 system log 356 Differentiated Service (DiffServ) 304 DiffServ 304 activate 306 and TRTCM 308 DS field 304 DSCP 304 DSCP-to-IEEE802.1p mapping 309 network example 304 PHB 304 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 405
Length 100 DS (Differentiated Services) 304 DSCP DSCP-to-IEEE802.1p mapping 309 service level 304 what it does 304 dual firmware 328 Dual-End Loop Test 102 VDSL profile settings 101 external authentication server 237 VES1724-56 User's Guide Index F fallback VDSL template 102 fan speed 72 - ZyXEL VES1724-56B2 | User Guide - Page 406
76 EUI-64 78 global address 77 global ID 78 interface ID 77 link-local address 77 MLD 218 neighbor cache 373 prefix 77 406 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 407
Limit PSD Mask 107 fine tune 108 limiting broadcast, multicast, DLF packets 176 line attenuation 362 Link Aggregate Control Protocol (LACP) 180 VES1724-56 User's Guide link aggregation 180 dynamic 180 ID information 181 setup 182, 183 status 181 link trace 275 lockout 39 login 33 password 39 login - ZyXEL VES1724-56B2 | User Guide - Page 408
maintenance 327 configuration backup 330 current configuration 327 firmware 328 main screen 327 restoring configuration 329 Maintenance Interface Crossover) 28 memory 369 MGMT port 29 MIB and SNMP 335 supported MIBs 336 MIB (Management Information Base) 335 MIB PSD MASK 108 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 409
PVC 299 PAGP 285 password 39 password change for administrator 39 PHB (Per-Hop Behavior) 304 PhyR 117 pin assignment console cable 391 VES1724-56 User's Guide Ethernet cable 393 ping, test connection 356 policy 202 and classifier 202 and DiffServ 200 configuration 202 example 204 overview 200 rules - ZyXEL VES1724-56B2 | User Guide - Page 410
product 402 related documentation 2 relationships of VDSL template, line profiles, channel profiles, and ports 101 remote management 354 service 355 trusted computers 355 resetting 40, 330 to factory default settings 330 restoring configuration 40, 329 RFC 3164 358 410 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 411
364 reflections 364 termination 364 service access control 353 service port 354 Severely Errored Seconds VES1724-56 User's Guide management model 335 manager 335 MIB 336 network components 335 object variables 335 protocol operations 335 security 343 setup 342, 344 version 3 335 versions supported - ZyXEL VES1724-56B2 | User Guide - Page 412
MSTP 173 port 53 power 72 STP 167, 170 VLAN 132 VLAN port detail 55 storing user profiles 236 STP 160, 285 bridge ID 168, 170 bridge priority 73 time zone 73 Time (RFC-868) 73 time server 73 time service protocol 73 format 73 tone 113 frequency width 113 TPID 210 trademarks 401 VES1724-56 User's Guide - ZyXEL VES1724-56B2 | User Guide - Page 413
Rate Three Color Marker (TRTCM) 305 Type of Service (ToS) 304 U UDLD 285 UnAvailable Seconds ( line alarm profile 122 VDSL line profile 104 VES1724-56 User's Guide Index bits and power reallocation 107 class mask VDSL alarm template 103 VDSL port detail 55 VDSL port status Handshake 54 LD_Done 54 - ZyXEL VES1724-56B2 | User Guide - Page 414
33 getting help 41 home 34 login 33 logout 41 navigation panel 36 weight, queuing 205 Weighted Round Robin Scheduling, see WRR WRR 205 Z ZyNOS (ZyXEL Network Operating System) 332 414 VES1724-56 User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
 |
 |
Quick Start Guide
www.zyxel.com
VES1724-56
24-port Temperature-Hardened VDSL2 Box DSLAM
Version 3.80
Edition 1, 9/2013
Copyright © 2013 ZyXEL Communications Corporation
User’s Guide
Default Login Details
LAN IP Address
User Name
admin
Password
1234