ZyXEL ES-3148 User Guide
ZyXEL ES-3148 Manual
 |
View all ZyXEL ES-3148 manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL ES-3148 manual content summary:
- ZyXEL ES-3148 | User Guide - Page 1
ES-3148 Series Intelligent Layer 2+ Switch User's Guide Version 3.80 8/2007 Edition 1 DEFAULT LOGIN IP Address http://192.168.1.1 User Name admin Password 1234 www.zyxel.com - ZyXEL ES-3148 | User Guide - Page 2
- ZyXEL ES-3148 | User Guide - Page 3
comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: [email protected] ES-3148 User's Guide 3 - ZyXEL ES-3148 | User Guide - Page 4
, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The ES-3148 may be referred to as the "Switch", the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field choices are all in bold font - ZyXEL ES-3148 | User Guide - Page 5
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The Switch icon is not an exact representation of your device. Switch Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ES-3148 User's Guide 5 - ZyXEL ES-3148 | User Guide - Page 6
, please contact your local city office, your household waste disposal service or the store where you purchased the product. • Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. This product is recyclable. Dispose of it properly. 6 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 7
Safety Warnings ES-3148 User's Guide 7 - ZyXEL ES-3148 | User Guide - Page 8
Safety Warnings 8 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 9
Overview Introduction ...31 Introducing the Switch ...33 Hardware ...37 Hardware Installation IP Source Guard ...199 Loop Guard ...219 Static Routing ...223 Differentiated Services ...225 DHCP ...233 Maintenance ...239 Access Control ...245 Diagnostic ...263 Syslog ...265 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 10
Contents Overview Cluster Management ...269 MAC Table ...275 ARP Table ...277 Configure Clone ...279 Troubleshooting and Specifications 281 Troubleshooting ...283 Product Specifications ...287 Appendices and Index ...293 10 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 11
and Connection 39 2.1 Freestanding Installation ...39 2.2 Mounting the Switch on a Rack 40 2.2.1 Rack-mounted Installation Requirements 40 2.2.2 Attaching the Mounting Brackets to the Switch 40 2.2.3 Mounting the Switch on a Rack 41 Chapter 3 Hardware Overview...43 ES-3148 User's Guide 11 - ZyXEL ES-3148 | User Guide - Page 12
Port VID ...64 5.2 Configuring Switch Management IP Address 65 Chapter 6 System Status and Port Statistics 67 6.1 Overview ...67 6.2 Port Status Summary ...67 6.2.1 Status: Port Details 68 Chapter 7 Basic Setting ...73 7.1 Overview ...73 7.2 System Information ...73 12 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 13
of Contents 7.3 General Setup ...75 7.4 Introduction to VLANs ...77 7.5 Switch Setup Screen ...77 7.6 IP Setup ...79 7.6.1 IP Interfaces ...79 7.7 Port Setup ...82 Chapter 8 VLAN ...85 8.1 Introduction Overview ...107 11.1.1 STP Terminology 107 11.1.2 How STP Works ...108 ES-3148 User's Guide 13 - ZyXEL ES-3148 | User Guide - Page 14
Overview 139 16.1.1 IEEE 802.1x Authentication 139 16.1.2 MAC Authentication 140 16.2 Port Authentication Configuration 141 16.2.1 Activate IEEE 802.1x Security 141 14 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 15
Port Roles 166 21.3 VLAN Tag Format ...167 21.3.1 Frame Format ...167 21.4 Configuring VLAN Stacking 168 Chapter 22 Multicast ...171 22.1 Multicast Overview ...171 ES-3148 User's Guide 15 - ZyXEL ES-3148 | User Guide - Page 16
23.3 Supported RADIUS IP Source Guard Static Binding 203 24.4 DHCP Snooping ...205 24.5 DHCP Snooping Configure 208 24.5.1 DHCP Snooping Port Configure 209 24.5.2 DHCP Snooping VLAN Configure 211 24.6 ARP Inspection Status ...212 24.6.1 ARP Inspection VLAN Status 212 16 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 17
Setup ...221 Chapter 26 Static Routing...223 26.1 Configuring Static Routing 223 Chapter 27 Differentiated Services ...225 27.1 DiffServ Overview ...225 27.1.1 DSCP and Per-Hop Behavior 225 27.1.2 DiffServ 238 Chapter 29 Maintenance ...239 29.1 The Maintenance Screen 239 ES-3148 User's Guide 17 - ZyXEL ES-3148 | User Guide - Page 18
30.8.2 Netscape Navigator Warning Messages 258 30.8.3 The Main Screen ...258 30.9 Service Port Access Control 259 30.10 Remote Management 260 Chapter 31 Diagnostic...263 31.1 Diagnostic ...263 Chapter 32 Syslog ...265 32.1 Syslog Overview ...265 32.2 Syslog Setup ...265 18 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 19
284 Chapter 38 Product Specifications ...287 38.1 General Switch Specifications 287 38.2 Cable Pin Assignments 290 Part V: Appendices and Index 293 Appendix A Setting up Your Computer's IP Address 295 Appendix B Pop-up Windows, JavaScripts and Java Permissions 317 ES-3148 User's Guide 19 - ZyXEL ES-3148 | User Guide - Page 20
Table of Contents Appendix C IP Addresses and Subnetting 325 Appendix D Common Services 335 Appendix E Importing Certificates 339 Appendix F Legal Information 345 Appendix G Customer Support 349 Index...355 20 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 21
(Status 52 Figure 17 Change Administrator Login Password 58 Figure 18 Resetting the Switch: Via the Console Port 60 Figure 19 Setting > General Setup 75 Figure 27 Basic Setting > Switch Setup 78 Figure 28 Basic Setting > IP Setup ...80 Figure 29 Basic Setting > Port Setup ES-3148 User's Guide 21 - ZyXEL ES-3148 | User Guide - Page 22
Advanced Application > Queuing Method 162 Figure 79 VLAN Stacking Example ...166 Figure 80 Advanced Application > VLAN Stacking 168 Figure 81 Advanced Application > Multicast 172 22 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 23
DiffServ Network ...226 Figure 120 TRTCM - Color-blind Mode 227 Figure 121 TRTCM - Color-aware Mode 227 Figure 122 IP Application > DiffServ ...228 Figure 123 IP Application > DiffServ > 2-rate 3 Color Marker 229 Figure 124 IP Application > DiffServ > DSCP Setting 230 ES-3148 User's Guide 23 - ZyXEL ES-3148 | User Guide - Page 24
Default: Start 240 Figure 134 Reboot System: Confirmation 241 Figure 135 Management > Maintenance > Firmware Control > Service Access Firmware to a Cluster Member Switch IP Properties: IP Address 297 Figure 167 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 298 24 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 25
Internet 304 Figure 178 Windows Vista: Network and Sharing Center 304 Figure 179 Windows Vista: Network and Sharing Center 305 Figure 180 Windows Vista: Local Area Connection Example: After Subnetting 329 Figure 210 Conflicting Computer IP Addresses Example 333 ES-3148 User's Guide 25 - ZyXEL ES-3148 | User Guide - Page 26
List of Figures Figure 211 Conflicting Computer IP Addresses Example 333 Figure 212 Conflicting Computer and Router IP Addresses Example 334 Figure 213 Security Certificate ...339 Figure Certificate Store ...342 Figure 220 Certificate General Information after Import 343 26 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 27
Basic Setting > General Setup 76 Table 11 Basic Setting > Switch Setup 78 Table 12 Basic Setting > IP Setup ...80 Table 13 Basic Setting > Port Setup ...82 Switch 132 Table 37 Link Aggregation ID: Peer Switch 132 Table 38 Advanced Application > Link Aggregation Status 132 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 28
66 Supported VSAs ...193 Table 67 Supported Tunnel IP Source Guard > ARP Inspection > Log Status 214 Table 80 Advanced Application > IP Source Guard > ARP Inspection > Configure 215 Table 81 Advanced Application > IP Source Guard > ARP Inspection > Configure > Port 217 28 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 29
Environmental Specifications 287 Table 120 Feature Specifications ...288 Table 121 Standards Supported ...289 Table 122 Console/Dial Backup Port Pin Assignments 291 Table 123 Ethernet Cable Pin Assignments 291 Table 124 IP Address Network Number and Host ID Example 326 ES-3148 User's Guide 29 - ZyXEL ES-3148 | User Guide - Page 30
Eight Subnets ...330 Table 133 24-bit Network Number Subnet Planning 331 Table 134 16-bit Network Number Subnet Planning 331 Table 135 Commonly Used Services 335 30 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 31
PART I Introduction Introducing the Switch (33) 31 - ZyXEL ES-3148 | User Guide - Page 32
32 - ZyXEL ES-3148 | User Guide - Page 33
Switch's port or connect other switches to the Switch. In this example, all computers share high-speed applications on the server. To expand the network, simply add more networking devices such as switches, routers, computers, print servers, etc. Figure 1 Backbone Application ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 34
able to use existing adapters and switches. Moreover, the current LAN structure can be retained as all ports can freely communicate with each other. In the following example, two Switches use trunking to connect two networks. Figure 3 High-performance Switched Application 34 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 35
Chapter 1 Introducing the Switch 1.1.4 IEEE 802.1Q VLAN Application Examples This section shows a workgroup and a shared server example using 802.1Q tagged VLANs. A VLAN ports that need access to the server need belong to VLAN 1. Ports can belong to other VLAN groups too. ES-3148 User's Guide 35 - ZyXEL ES-3148 | User Guide - Page 36
unstable or even crashes. If you forget your password, you will have to reset the Switch to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the Switch. You could simply restore your last configuration. 36 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 37
PART II Hardware Hardware Installation and Connection (39) Hardware Overview (43) 37 - ZyXEL ES-3148 | User Guide - Page 38
38 - ZyXEL ES-3148 | User Guide - Page 39
cord. 4 Remove the adhesive backing from the rubber feet. 5 Attach the rubber feet to each corner on the bottom of the Switch. These rubber feet help protect the Switch from shock or vibration and ensure space between devices when stacking. Figure 6 Attaching Rubber Feet ES-3148 User's Guide 39 - ZyXEL ES-3148 | User Guide - Page 40
before installing the unit. 2.2.2 Attaching the Mounting Brackets to the Switch 1 Position a mounting bracket on one side of the Switch, lining up the four screw holes on the bracket with the screw holes on the side of the Switch. Figure 7 Attaching the Mounting Brackets 40 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 41
on the side of the rack. Figure 8 Mounting the Switch on a Rack 2 Using a #2 Phillips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack. ES-3148 User's Guide 41 - ZyXEL ES-3148 | User Guide - Page 42
Chapter 2 Hardware Installation and Connection 42 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 43
connections to backbone GBIC Slots Ethernet switches. 3.1.1 Ethernet Ports The Switch has 48 10/100Mbps auto-negotiating, auto-crossover Ethernet ports. In 10/ 100Mbps Fast Ethernet, the speed can be 10Mbps or 100Mbps and the duplex mode can be half duplex or full duplex. ES-3148 User's Guide 43 - ZyXEL ES-3148 | User Guide - Page 44
with a straight-through or crossover Ethernet cable. 3.1.1.1 Default Ethernet Settings The factory default negotiation settings for the Ethernet ports on the switch are: • Speed: Auto • Duplex: Auto • Flow into the slot with the exposed section of PCB board facing down. 44 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 45
Overview 2 Press the transceiver firmly until it clicks into place. 3 The Switch automatically detects the installed transceiver. Check the LEDs to verify that it is functioning Removal Example 3.2 Rear Panel The following figure shows the rear panel of the Switch. ES-3148 User's Guide 45 - ZyXEL ES-3148 | User Guide - Page 46
Connect the male 9-pin end of the console cable to the console port of the Switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. 3.2.2 External Backup Power Supply Connector The Switch supports external backup power supply (BPS). 46 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 47
sure you are using the correct power source as shown on the panel. To connect the power to the Switch, insert the female end of power cord to the power receptacle on the rear panel. Connect the other end is up. Off The link to an Ethernet network is down or not connected. ES-3148 User's Guide 47 - ZyXEL ES-3148 | User Guide - Page 48
/from an Ethernet device. The port is connected at 100 Mbps. The port is not connected at 100 Mbps or to an Ethernet device. 48 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 49
) Link Aggregation (131) Port Authentication (139) Port Security (145) Classifier (149) Policy Rule (155) Queuing Method (161) VLAN Stacking (165) Multicast (171) Authentication & Accounting (185) IP Source Guard (199) Loop Guard (219) Static Routing (223) 49 - ZyXEL ES-3148 | User Guide - Page 50
Differentiated Services (225) DHCP (233) Maintenance (239) Access Control (245) Diagnostic (263) Syslog (265) Cluster Management (269) MAC Table (275) ARP Table (277) Configure Clone (279) 50 - ZyXEL ES-3148 | User Guide - Page 51
or Address field. Press [ENTER]. 3 The login screen appears. The default username is admin and associated default password is 1234. The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen. ES-3148 User's Guide 51 - ZyXEL ES-3148 | User Guide - Page 52
in the main window. B, C, D, E - These are quick links which allow you to perform certain tasks no matter which screen you are currently working in. 52 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 53
to a specific configuration file. C - Click this link to go to the status page of the Switch. D - Click this link to logout of the web configurator. E - Click this link to display Panel Sub-links Overview BASIC SETTING ADVANCED APPLICATION IP APPLICATION MANAGEMENT ES-3148 User's Guide 53 - ZyXEL ES-3148 | User Guide - Page 54
Chapter 4 The Web Configurator The following table lists the various web configurator screens within the sub-links. 54 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 55
Firmware Upgrade Restore Configuration Backup Configuration Access Control SNMP Trap Group Logins Service Access Control Remote Management Diagnostic Syslog Setup Syslog Server Setup Cluster Management Status Clustering Management Configuration MAC Table ARP Table Configure Clone ES-3148 - ZyXEL ES-3148 | User Guide - Page 56
in the Switch Setup menu). You can also configure a protocol based VLAN or a subnet based VLAN in these screens. Static MAC Forwarding This link takes you to screens where you can configure static MAC addresses for a port. These static MAC addresses do not age out. 56 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 57
Switch should forward traffic by configuring the TCP/IP parameters manually where you can perform firmware and configuration file password and configure SNMP and remote management. Diagnostic This link takes you to screens where you can view system logs and test port(s). ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 58
lost when the Switch's power is turned off. Click the Save link in the upper right hand corner of the web configurator to save your configuration to nonvolatile memory. Nonvolatile memory refers to the Switch's storage that remains even if the Switch's power is turned off. 58 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 59
default is VLAN 1). 2 Delete all port-based VLANs with the CPU port as a member. The "CPU port" is the management port of the Switch. 3 Filter all traffic to the CPU port. 4 Disable all ports. 5 Misconfigure the text configuration file. 6 Forget the password and/or IP address. 7 Prevent all services - ZyXEL ES-3148 | User Guide - Page 60
OK Switch> atgo The Switch is now reinitialized with a default configuration file including the default password of password again after you log out. This is recommended after you finish a management session for security reasons. Figure 19 Web Configurator: Logout Screen 60 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 61
Chapter 4 The Web Configurator 4.8 Help The web configurator's online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen. ES-3148 User's Guide 61 - ZyXEL ES-3148 | User Guide - Page 62
Chapter 4 The Web Configurator 62 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 63
for the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the Example: VLAN example 1 Click Advanced Application > VLAN > Static VLAN. example ES-3148 User's Guide 63 - ZyXEL ES-3148 | User Guide - Page 64
ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID. 3 Since the VLAN2 network is connected to port 1 on the Switch, select Fixed to configure port 1 to be a permanent member to VLAN 2. Figure 21 Initial Setup Network Example: Port VID 64 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 65
to any Ethernet port on the Switch. Make sure your computer is in the same subnet as the Switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 51 for more information. ES-3148 User's Guide 65 - ZyXEL ES-3148 | User Guide - Page 66
be managed from the ports belonging to VLAN2 using this specified IP address. 7 Repeat this process for VLAN1, if necessary. example Click Add to save your changes back to the run-time memory. Settings in the run-time memory are lost when the Switch's power is turned off. 66 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 67
1000M for 1000Mbps) and the duplex (F for full duplex or H for half). It also shows the cable type (Copper or Fiber) for the combo ports. ES-3148 User's Guide 67 - ZyXEL ES-3148 | User Guide - Page 68
in the Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. 68 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 69
shows the number kilobytes per second transmitted on this port. Rx KB/s This field shows the number of kilobytes per second received on this port. ES-3148 User's Guide 69 - ZyXEL ES-3148 | User Guide - Page 70
length. 512 to 1023 This field shows the number of packets (including bad packets) received that were between 512 and 1023 octets in length. 70 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 71
between 1024 and 1518 octets in length. Giant This field shows the number of packets dropped because they were bigger than the maximum frame size. ES-3148 User's Guide 71 - ZyXEL ES-3148 | User Guide - Page 72
Chapter 6 System Status and Port Statistics 72 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 73
server) for management purposes. 7.2 System Information In the navigation panel, click Basic Setting > System Info to display the screen as shown. You can check the firmware version number and monitor the Switch temperature, fan speeds and voltage in this screen. ES-3148 User's Guide 73 - ZyXEL ES-3148 | User Guide - Page 74
displays the descriptive name of the Switch for identification purposes. ZyNOS F/W Version This field displays the version number of the Switch 's current firmware including the date created. Ethernet and reporting if the fan speed falls below the threshold shown. 74 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 75
this point. Threshold This field displays the percentage tolerance of the voltage with which the Switch still works. Status Normal indicates that the voltage is within an acceptable operating range at display the screen as shown. Figure 26 Basic Setting > General Setup ES-3148 User's Guide 75 - ZyXEL ES-3148 | User Guide - Page 76
None is the default value. Enter the time manually. Each time you turn on the Switch, the time and date will be reset to 1970-1-1 0:0. Time Server IP Address Enter the IP address of your timeserver. The Switch searches for the zone is one hour ahead of GMT or UTC (GMT+1). 76 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 77
7.5 Switch Setup Screen Click Basic Setting and then Switch Setup in the navigation panel to display the screen as shown. The VLAN setup screens change depending on whether you choose 802.1Q or Port Based in the VLAN Type field in this screen. Refer to the chapter on VLAN. ES-3148 User's Guide 77 - ZyXEL ES-3148 | User Guide - Page 78
to allow the Switch to handle bridging default is 600 milliseconds. Leave All Timer Leave All Timer sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer. 78 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 79
the network number portion of an IP address. The factory default subnet mask is 255.255.255.0. You can configure multiple IP addresses which are used to access and manage the switch from the ports belonging to the pre-defined VLAN(s). " You must configure the VLAN first. ES-3148 User's Guide 79 - ZyXEL ES-3148 | User Guide - Page 80
connected device(s) do not receive these packets. In-band Management IP Address DHCP Client Select this option if you have a DHCP server that can assign the Switch an IP address, subnet mask, a default gateway IP address and a domain name server IP address automatically. 80 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 81
the rule. IP Address This field displays the IP address. IP Subnet Mask This field displays the subnet mask. VID This field displays the VLAN identification number of the network. Default Gateway This field displays the IP address of the default outgoing gateway. ES-3148 User's Guide 81 - ZyXEL ES-3148 | User Guide - Page 82
Manageable This field displays whether the Switch can be managed using the specified IP address. Delete Click Delete to as you make them. Select this check box to enable a port. The factory default for all ports is enabled. A port must be enabled for data transmission to ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 83
run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 83 - ZyXEL ES-3148 | User Guide - Page 84
Chapter 7 Basic Setting 84 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 85
802.1Q VLAN-unaware switch to an 802.1Q VLAN-aware switch, the Switch first decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is VLAN 1 for itself), thus confining the broadcast to a specific domain. ES-3148 User's Guide 85 - ZyXEL ES-3148 | User Guide - Page 86
TERM DESCRIPTION VLAN Type Permanent VLAN This is a static VLAN created manually. Dynamic VLAN This is a VLAN configured by a GVRP registration/ on a port. Ingress filtering If set, the Switch discards incoming frames for VLANs that do not have this port as a member 86 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 87
VLAN Trunking 8.4 Select the VLAN Type Select a VLAN type in the Basic Setting > Switch Setup screen. Figure 31 Switch Setup: Select VLAN Type 8.5 Static VLAN Use a static VLAN to decide whether an incoming that were previously untagged) from a port with the specified VID. ES-3148 User's Guide 87 - ZyXEL ES-3148 | User Guide - Page 88
was registered or a static VLAN was set up. Status This field shows how this VLAN was added to the Switch; dynamic - using GVRP, static - added as a permanent entry or other - added in another way such as VLAN details. Figure 33 Advanced Application > VLAN > VLAN Detail 88 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 89
and view 802.1Q VLAN parameters for the Switch. See Section 8.1 on page 85 for more information on static VLAN. To configure a static VLAN, click Static VLAN in the VLAN Status screen to display the screen as shown next. Figure 34 Advanced Application > VLAN > Static VLAN ES-3148 User's Guide 89 - ZyXEL ES-3148 | User Guide - Page 90
the port to dynamically join this VLAN group using GVRP. This is the default selection. Select Fixed for the port to be a permanent member of ID. Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses . 90 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 91
all untagged or tagged frames on this port. This is the default setting. Select Tag Only to accept only tagged frames on this port switches or routers (but not ports directly connected to end users) to allow frames belonging to unknown VLAN groups to pass through the Switch. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 92
subnet and prioritized accordingly. That is video services receive the highest priority and data the lowest. Figure 36 Subnet Based VLAN Application Example Tagged Frames Internet Untagged Frames 172.16.1.0/24 VID = 100 192.168.1.0/24 VID = 200 10.1.1.0/24 VID = 300 92 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 93
. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. ES-3148 User's Guide 93 - ZyXEL ES-3148 | User Guide - Page 94
Enter the ID of a VLAN with which the untagged frames from the IP subnet specified in this subnet based VLAN are tagged. This must be is received on a port (configured for a protocol based VLAN), the Switch checks if a tag is added already and its protocol. The untagged packets ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 95
and have higher priority than ARP traffic, when they go through the uplink port to a backbone switch C. Figure 38 Protocol Based VLAN Application Example 8.9 Configuring Protocol Based VLAN Click Protocol Based VLAN in applicable only when you use IEEE 802.1Q tagged VLAN. ES-3148 User's Guide 95 - ZyXEL ES-3148 | User Guide - Page 96
type the protocol number in hexadecimal notation. For example the IP protocol in hexadecimal notation is 0800, and Novell IPX protocol the Switch will assign to frames belonging to this VLAN. Add Click Add to save your changes to the Switch's run-time memory. The Switch loses ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 97
protocol based VLAN. Type 1. 3 Give this protocol-based VLAN a descriptive name. Type IP-VLAN. 4 Select the protocol. Leave the default value IP. 5 Type the VLAN ID of an existing VLAN. In our example we already created field to the next port you want to add. 3 Click Add. ES-3148 User's Guide 97 - ZyXEL ES-3148 | User Guide - Page 98
the Switch on which they were created. " When you activate port-based VLAN, the Switch uses a default VLAN ID of 1. You cannot change it. " In screens (such as IP Type in the Switch Setup screen and then click VLAN from the navigation panel to display the next screen. 98 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 99
Chapter 8 VLAN Figure 41 Advanced Application > VLAN: Port Based VLAN Setup (All Connected) ES-3148 User's Guide 99 - ZyXEL ES-3148 | User Guide - Page 100
Chapter 8 VLAN Figure 42 Advanced Application > VLAN: Port Based VLAN Setup (Port Isolation) 100 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 101
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 101 - ZyXEL ES-3148 | User Guide - Page 102
Chapter 8 VLAN 102 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 103
has been manually entered in Switch. See Chapter 17 on page 145 for more information on port security. Click Advanced Applications > Static MAC Forwarding in the navigation panel to display the configuration screen as shown. Figure 43 Advanced Application > Static MAC Forwarding ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 104
the previous field will be automatically forwarded. Add Click Add to save your rule to the Switch's run-time memory. The Switch loses this rule if it is turned off or loses power, so use the Save link summary table. Cancel Click Cancel to clear the Delete check boxes. 104 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 105
address port filtering. 10.1 Configure a Filtering Rule Filtering means sifting traffic going through the Switch based on the source and/or destination MAC addresses and VLAN group (ID). Click 32 printable ASCII characters) for this rule. This is for identification only. ES-3148 User's Guide 105 - ZyXEL ES-3148 | User Guide - Page 106
Add Click Add to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses Clear Click Clear to clear the fields to the factory defaults. Index This field displays the index number of the es) in the Delete column. 106 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 107
CHAPTER 11 Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol ( Learning, and Forwarding. " In this user's guide, "STP" refers to both STP and RSTP. 11.1.1 STP Terminology The root bridge is the base of the spanning tree. ES-3148 User's Guide 107 - ZyXEL ES-3148 | User Guide - Page 108
are therefore only forwarded between enabled ports, eliminating any possible network loops. STP-aware switches exchange Bridge Protocol Data Units (BPDUs) periodically. When the bridged LAN topology changes, reconfigure the network to re-establish a valid network topology. 108 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 109
(default). Blocking MRSTP (Multiple RSTP) is ZyXEL's proprietary feature that is switch A. To set up MRSTP, activate MRSTP on the Switch and specify which port(s) belong to which spanning tree. " Each port can belong to one STP tree only. Figure 45 MRSTP Network Example ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 110
MSTP Network Example The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP, the link for VLAN 2 will be blocked as STP and RSTP allow The following figure shows the network example using MSTP. 110 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 111
MSTI does not span across MST regions. The following figure shows an example where there are two MST regions. Regions 1 and 2 have 2 spanning tree instances. ES-3148 User's Guide 111 - ZyXEL ES-3148 | User Guide - Page 112
of the entire network and it is equivalent to a spanning tree in an STP/RSTP. The CIST is the default MST instance (MSTID 0). Any VLANs that are not members of an MST instance are members of the CIST. In Application > Spanning Tree Protocol to see the screen as shown. 112 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 113
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 113 - ZyXEL ES-3148 | User Guide - Page 114
will then become the root switch. Select a value from the drop-down list box. The lower the numeric value you assign, the higher the priority for this bridge. Bridge Priority determines the root bridge, which in turn determines Hello Time, Max Age and Forwarding Delay. 114 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 115
when more than one port forms a loop in a switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. Path cost is the cost of Section 11.1 on page 107 for more information on RSTP. ES-3148 User's Guide 115 - ZyXEL ES-3148 | User Guide - Page 116
. This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. This is the number of times the spanning tree has been reconfigured. This is the time since the spanning tree was last reconfigured. 116 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 117
Time, Max Age and Forwarding Delay. This is the time interval in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. The allowed range is 1 to 10 seconds. ES-3148 User's Guide 117 - ZyXEL ES-3148 | User Guide - Page 118
when more than one port forms a loop in the Switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. Path cost is the cost of Section 11.1 on page 107 for more information on MRSTP. 118 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 119
switch. This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the Spanning Tree. This is the number of times the spanning tree has been reconfigured. This is the time since the spanning tree was last reconfigured. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 120
Application > Spanning Tree Protocol screen. See Section 11.1.5 on page 110 for more information on MSTP. Figure 56 Advanced Application > Spanning Tree Protocol > MSTP 120 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 121
the Switch will be chosen as the root bridge within the spanning tree instance. Enter priority values between 0 and 61440 in increments of 4096 (thus valid values are 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344 and 61440). ES-3148 User's Guide 121 - ZyXEL ES-3148 | User Guide - Page 122
when more than one port forms a loop in the Switch. Ports with a higher priority numeric value are disabled first. The allowed range is between 0 and 255 and the default value is 128. Path cost is the cost of Section 11.1.5 on page 110 for more information on MSTP. 122 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 123
switch. Hello Time (second) This is the time interval (in seconds) at which the root switch transmits a configuration message. Max Age (second) This is the maximum time (in seconds) a switch can wait without receiving a configuration message before attempting to reconfigure. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 124
Our Bridge if the Switch is the root switch. This is the path cost from the root port in this MST instance to the regional root switch. This is the priority and number of the port on the Switch through which this Switch must communicate with the root of the MST instance. 124 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 125
to the uplink bandwidth. 12.2 Bandwidth Control Setup Click Advanced Application > Bandwidth Control in the navigation panel to bring up the screen as shown next. ES-3148 User's Guide 125 - ZyXEL ES-3148 | User Guide - Page 126
's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 126 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 127
control limits the number of broadcast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the ports. When the maximum number of allowable broadcast, multicast and as shown next. Figure 59 Advanced Application > Broadcast Storm Control ES-3148 User's Guide 127 - ZyXEL ES-3148 | User Guide - Page 128
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 128 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 129
screen. Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port. Figure 60 Advanced Application > Mirroring ES-3148 User's Guide 129 - ZyXEL ES-3148 | User Guide - Page 130
's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 130 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 131
of each trunk group must be physically connected to form a trunk group. The Switch supports both static and dynamic link aggregation. " In a properly planned network, it is all ports point-to-point to the same Ethernet switch and configure the ports for LACP trunking. ES-3148 User's Guide 131 - ZyXEL ES-3148 | User Guide - Page 132
00 0000 00 PORT NUMBER 0000 Table 37 Link Aggregation ID: Peer Switch SYSTEM PRIORITY MAC ADDRESS KEY 0000 00-00-00-00-00-00 0000 navigation panel. The Link Aggregation Status screen displays by default. See Section 15.1 on page 131 for more information the individual port. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 133
the screen shown next. See Section 15.1 on page 131 for more information on link aggregation. Figure 62 Advanced Application > Link Aggregation > Link Aggregation Setting ES-3148 User's Guide 133 - ZyXEL ES-3148 | User Guide - Page 134
trunk group to which a port belongs. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link Section 15.2 on page 131 for more information on dynamic link aggregation. 134 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 135
Protocol (LACP). System Priority LACP system priority is a number between 1 and 65,535. The switch with the lowest system priority (and lowest port number if system priority is the same) becomes the enable LACP for a trunk. Port This field displays the port number. ES-3148 User's Guide 135 - ZyXEL ES-3148 | User Guide - Page 136
as possible. Select either 1 second or 30 seconds. Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the as shown in the figure below. Click Apply when you are done. 136 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 137
Figure 65 Trunking Example - Configuration Screen Chapter 15 Link Aggregation example Your trunk group 1 (T1) configuration is now complete; you do not need to go to any additional screens. ES-3148 User's Guide 137 - ZyXEL ES-3148 | User Guide - Page 138
Chapter 15 Link Aggregation 138 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 139
this client is allowed access to the port. 2. At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client software. ES-3148 User's Guide 139 - ZyXEL ES-3148 | User Guide - Page 140
MAC address of the client connecting to a port on the Switch along with a password configured specifically for MAC authentication on the Switch. Figure 67 MAC Authentication Process 140 1 New Connection 2 Authentication Request 3 Authentication Reply Session Granted/Denied ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 141
authentication, first activate the port authentication method(s) you want to use (both on the Switch and the port(s)) then configure the RADIUS server settings in the Auth and Acct > screen as shown. Figure 69 Advanced Application > Port Authentication > 802.1x ES-3148 User's Guide 141 - ZyXEL ES-3148 | User Guide - Page 142
to re-enter his or her username and password to stay Timer connected to the port. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off MAC Authentication to display the configuration screen as shown. 142 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 143
the client is forwarded to the RADIUS server. Type the password the Switch sends along with the MAC address of a client for Switch Setup screen is set to a lower value, then it supersedes this setting. See Section 7.5 on page 81. Port This field displays a port number. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 144
's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. 144 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 145
through a port on the Switch. The Switch can learn up to 16K default, MAC address learning is still enabled even though the port security is not activated. 17.2 Port Security Setup Click Advanced Application > Port Security in the navigation panel to display the screen as shown. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 146
device would have to wait until one of the five learned MAC addresses aged out. MAC address aging out time can be set in the Switch Setup screen. The valid range is from "0" to "16384". "0" means this feature is disabled. 146 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 147
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 147 - ZyXEL ES-3148 | User Guide - Page 148
Chapter 17 Port Security 148 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 149
chapter introduces and shows you how to configure the packet classifier on the Switch. 18.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliver data with in the navigation panel to display the configuration screen as shown. ES-3148 User's Guide 149 - ZyXEL ES-3148 | User Guide - Page 150
of Ethernet II indicates that the packets are formatted according to RFC 894, Ethernet II encapsulation. Layer 2 Specify the fields below to configure a layer 2 classifier. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 151
results in 24. Socket Number Note: You must select either UDP or TCP in the IP Protocol field before you configure the socket numbers. Select Any to apply the rule to all TCP/UDP protocol port numbers or select the second option and enter a TCP/UDP protocol port number. ES-3148 User's Guide 151 - ZyXEL ES-3148 | User Guide - Page 152
below and save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned above fields back to the factory defaults. 18.3 Viewing and Editing Classifier IP ETHII 0800 X.75 Internet 0801 NBS Internet 0802 ECMA Internet 0803 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 153
AARP 80F3 In the Internet Protocol, there is a field called "Protocol" to identify the IP protocol type. The following table shows some common protocol types and the corresponding protocol number. (in the Policy screen) to define action(s) on the classified traffic flow. ES-3148 User's Guide 153 - ZyXEL ES-3148 | User Guide - Page 154
Chapter 18 Classifier Figure 74 Classifier: Example example 154 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 155
going. 19.1.2 DSCP and Per-Hop Behavior DiffServ defines a new DS (Differentiated Services) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and a 6-bit according to the DSCP values and the configured policies. ES-3148 User's Guide 155 - ZyXEL ES-3148 | User Guide - Page 156
for more information. Click Advanced Applications > Policy Rule in the navigation panel to display the screen as shown. Figure 75 Advanced Application > Policy Rule 156 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 157
of service ( action(s) the Switch takes on IP TOS with the 802.1 priority value to replace the TOS field with the value you configure in the Priority field. Select Set the Diffserv Codepoint field in the frame to set the DSCP field with the value you configure in the DSCP field. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 158
to the summary table below and save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses Click Clear to set the above fields back to the factory defaults. 19.3 Viewing and Editing Policy Configuration To view a summary 158 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 159
discard out-of-profile traffic on a traffic flow classified using the Example classifier (refer to Section 18.4 on page 153). Figure 77 Policy Example example ES-3148 User's Guide 159 - ZyXEL ES-3148 | User Guide - Page 160
Chapter 19 Policy Rule 160 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 161
Strictly Priority Strictly Priority (SP) services queues based on priority only. As traffic comes into the Switch, traffic on the highest priority queue example, using the default setting, Q0 on Port 1 gets a guaranteed bandwidth of: 1 1+2+3+4+5+6+7+8 x 100 Mbps = 3 Mbps ES-3148 User's Guide 161 - ZyXEL ES-3148 | User Guide - Page 162
empty. Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services queues based on their priority and queue weight (the number you configure in the queue Weight field navigation panel. Figure 78 Advanced Application > Queuing Method 162 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 163
the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 164
Chapter 20 Queuing Method 164 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 165
for their VLAN group. The service provider can separate these two VLANs within its network by adding tag 37 to distinguish customer A and tag 48 to distinguish customer B at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network. ES-3148 User's Guide 165 - ZyXEL ES-3148 | User Guide - Page 166
ports at the edge of the service provider's network. All VLANs belonging to a customer can be aggregated into a single service provider's VLAN (using the outer VLAN tag defined by SP VID). " Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel Port. 166 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 167
.1Q tag. • If the VLAN stacking port role is Access Port, then the Switch adds the SP TPID tag to all incoming frames on the service provider's edge devices (1 and 2 in the VLAN stacking example figure). • If the Len/ Etype 802.1p Priority Length and type of Ethernet frame ES-3148 User's Guide 167 - ZyXEL ES-3148 | User Guide - Page 168
Table 54 802.1Q Frame (SP)TPID (Service Provider) Tag Protocol IDentifier VID VLAN ID Data VLAN Stacking LABEL DESCRIPTION Active Select this to enable VLAN stacking on the Switch. SP TPID SP TPID is a standard Ethernet type code identifying the as you make them. 168 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 169
run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 169 - ZyXEL ES-3148 | User Guide - Page 170
Chapter 21 VLAN Stacking 170 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 171
the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly. IGMP snooping allows the Switch to learn multicast groups without you having to manually configure them. ES-3148 User's Guide 171 - ZyXEL ES-3148 | User Guide - Page 172
multicast group. Multicast Group This field displays IP multicast group addresses. 22.3 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to display the screen as shown. See Section 22.1 on page 171 for more information on multicasting. 172 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 173
and assign IGMP filtering profiles for the ports that you want to allow to join multicast groups. Specify the action to perform when the Switch receives an unknown multicast frame. Select Drop to discard the frame(s). Select Flooding to send the frame(s) to all ports. ES-3148 User's Guide 173 - ZyXEL ES-3148 | User Guide - Page 174
the destination IP address within this range. See the IANA web site for more information. Specify the action to perform when the Switch receives a IGMP filtering profile to use for this port. Otherwise, select Default to prohibit the port from joining any multicast group. You can ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 175
to begin configuring this screen afresh. Use this section of the screen to add VLANs upon which the Switch is to perform IGMP snooping. Enter the descriptive name of the VLAN for identification purposes. Enter the your previous configuration. Click this to clear the fields. ES-3148 User's Guide 175 - ZyXEL ES-3148 | User Guide - Page 176
the Switch are able to join. A profile contains a range of multicast IP IP address for a range of IP addresses that you want to belong to the IGMP filter profile. If you want to add a single multicast IP address, enter it in both the Start Address and End Address fields. 176 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 177
-based service provider Switch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast traffic. Once configured, the Switch maintains a forwarding table that matches the multicast stream to the associated multicast group. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 178
multicast traffic to the receiver ports. In compatible mode, the Switch does not send any IGMP reports. In this case, you must manually configure the forwarding settings on the multicast devices in the to three multicast VLANs and up to 256 multicast rules on the Switch. 178 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 179
which the Switch replaces the Switch. Choices are Dynamic and Compatible. Select Dynamic to send IGMP reports to all MVR source ports in the multicast VLAN. Select Compatible to set the Switch not to send IGMP reports. Port This field displays the port number on the Switch. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 180
group. Configure MVR IP multicast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. " A port can belong to more than one multicast VLAN. However, IP multicast group addresses in different multicast VLANs cannot overlap. 180 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 181
starting IP multicast Switch belong to VLAN 1. In addition, port 7 belongs to the multicast group with VID 200 to receive multicast traffic (the News and Movie channels) from the remote streaming media server, S. Computers A, B and C in VLAN 1 are able to receive the traffic. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 182
To set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an example where two multicast groups (News and Movie) are configured for the multicast VLAN 200. 182 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 183
Figure 91 MVR Group Configuration Example example Figure 92 MVR Group Configuration Example example Chapter 22 Multicast ES-3148 User's Guide 183 - ZyXEL ES-3148 | User Guide - Page 184
Chapter 22 Multicast 184 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 185
Accounts By storing user profiles locally on the Switch, your Switch is able to authenticate and authorize users without interacting with a network AAA server. However, there is a limit on the number of users you may authenticate in this way (See Chapter 30 on page 245). ES-3148 User's Guide 185 - ZyXEL ES-3148 | User Guide - Page 186
Protocol) Encryption Encrypts the password sent for authentication. All communication between the client (the Switch) and the TACACS server on the Switch. Click on the RADIUS Server Setup link in the Authentication and Accounting screen to view the screen as shown. 186 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 187
instructs you to do so. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the Switch. This key is not sent over the network. This key must be the same on the external RADIUS server and the Switch. ES-3148 - ZyXEL ES-3148 | User Guide - Page 188
Enter the IP address of an external RADIUS accounting server in dotted decimal notation. UDP Port The default port of a RADIUS accounting server for accounting is 1813. You need not change this value unless your network administrator instructs you to do so. Shared Secret Specify a password (up - ZyXEL ES-3148 | User Guide - Page 189
the Switch waits for IP Address Enter the IP address of an external TACACS+ server in dotted decimal notation. TCP Port The default port of a TACACS+ server for authentication is 49. You need not change this value unless your network administrator instructs you to do so. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 190
configuring this screen afresh. 23.2.3 Authentication and Accounting Setup Use this screen to configure authentication and accounting settings on the Switch. Click on the Auth and Acct Setup link in the Authentication and Accounting screen to view the screen as shown. 190 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 191
sources for access privilege level specify them in Method 2 and Method 3 fields. Select local to have the Switch check the access privilege configured for local authentication. Select radius or tacacs+ to have the Switch check the access privilege via the external servers. ES-3148 User's Guide 191 - ZyXEL ES-3148 | User Guide - Page 192
is only configurable for Commands type of event. Select the threshold command privilege level for which the Switch should send accounting information. The Switch will send accounting information when commands at the level you specify and higher are executed on the Switch. 192 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 193
for users authenticating via the RADIUS server. The following table describes the VSAs supported on the Switch. Table 66 Supported VSAs FUNCTION Ingress Bandwidth Assignment ATTRIBUTE Vendor-Id = 890 Vendor-Type = 1 Vendor-data = ingress rate (Kbps in decimal format) ES-3148 User's Guide 193 - ZyXEL ES-3148 | User Guide - Page 194
VLAN with the specified VID on the Switch. 23.3 Supported RADIUS Attributes Remote Authentication Dial-In User Service (RADIUS) attributes are data used to define the Switch. In cases where the attribute has a specific format associated with it, the format is specified. 194 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 195
Accounting System Events NAS-IP-Address NAS-Identifier Acct-Status-Type Acct-Session-ID - The format of Acct-Session-Id is date+time+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time ES-3148 User's Guide 195 - ZyXEL ES-3148 | User Guide - Page 196
INTERIM-UPDATE User-Name Y Y NAS-Identifier Y Y NAS-IP-Address Y Y Service-Type Y Y Calling-Station-Id Y Y Acct-Status- IP-Address Y Y Y NAS-Port Y Y Y Class Y Y Y Called-Station-Id Y Y Y Calling-Station-Id Y Y Y NAS-Identifier Y Y Y 196 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 197
Y Y Acct-Input-Octets Y Acct-Output-Octets Y Acct-Session-Time Y Acct-Input-Packets Y Acct-Output-Packets Y Acct-Terminate-Cause Acct-Input-Gigawords Y Acct-Output-Gigawords Y STOP Y Y Y Y Y Y Y Y Y Y Y Y Y ES-3148 User's Guide 197 - ZyXEL ES-3148 | User Guide - Page 198
Chapter 23 Authentication & Accounting 198 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 199
binding, the Switch discards the packet. The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings). IP source guard each port (trusted or untrusted) can receive each second. ES-3148 User's Guide 199 - ZyXEL ES-3148 | User Guide - Page 200
IP Source Guard Trusted ports are connected to DHCP servers or other switches. The Switch discards DHCP packets from trusted ports only if the rate at which DHCP packets arrive is too high. The Switch learns dynamic bindings from trusted ports. " The Switch are ignored. 200 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 201
IP Source Guard 24.1.1.3 DHCP Relay Option 82 Information The Switch can add information to DHCP requests that it does not discard. This provides the DHCP server more information about the source of the requests. The Switch and alter the information passed between them. ES-3148 User's Guide 201 - ZyXEL ES-3148 | User Guide - Page 202
one day before you enable ARP inspection so that the Switch has enough time to build the binding table. 2 Enable ARP inspection on each VLAN. 3 Configure trusted and untrusted ports, and specify the maximum number of ARP packets that each port can receive per second. 202 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 203
binding). Type This field displays how the Switch learned the binding. static: This binding was learned from information provided manually by an administrator. dhcp-snooping: This binding open this screen, click Advanced Application > IP Source Guard > Static Binding. ES-3148 User's Guide 203 - ZyXEL ES-3148 | User Guide - Page 204
IP address assigned to the MAC address in the binding. Lease This field displays how long the binding is valid. Type This field displays how the Switch learned the binding. static: This binding was learned from information provided manually the Delete check boxes above. 204 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 205
24 IP Source Guard 24.4 DHCP Snooping Use this screen to look at various statistics about the DHCP snooping database. To open this screen, click Advanced Application > IP Source Guard > DHCP Snooping. Figure 102 Advanced Application > IP Source Guard > DHCP Snooping ES-3148 User's Guide 205 - ZyXEL ES-3148 | User Guide - Page 206
screen. Table 73 Advanced Application > IP Source Guard > DHCP Snooping LABEL Switch read bindings from the DHCP snooping database successfully. Failed reads This field displays the number of times the Switch was unable to read bindings from the DHCP snooping database. 206 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 207
database. Expired leases This field displays the number of bindings the Switch has ignored because the lease time had already expired. Unsupported vlans This field displays the number of bindings the Switch has ignored because the VLAN ID does not exist anymore. ES-3148 User's Guide 207 - ZyXEL ES-3148 | User Guide - Page 208
(Section 24.5.2 on page 211) to help the DHCP servers distinguish between DHCP requests from different VLAN. Select Disable if you do not want the Switch to forward DHCP packets to a specific VLAN. 208 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 209
URL Enter the location of a DHCP snooping database, and click Renew if you want the Switch to load it. You can use this to load dynamic bindings from a different DHCP snooping this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure > Port. ES-3148 User's Guide 209 - ZyXEL ES-3148 | User Guide - Page 210
source IP Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. 210 ES-3148 - ZyXEL ES-3148 | User Guide - Page 211
> IP Source Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Click this to reset the values in this screen to their last-saved values. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 212
how long (in seconds) the MAC address filter remains in the Switch. You can also delete the record manually (Delete). Reason This field displays the reason the ARP packet was discarded screen, click Advanced Application > IP Source Guard > ARP Inspection > VLAN Status. 212 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 213
the switch last restarted. 24.6.2 ARP Inspection Log Status Use this screen to look at log messages that were generated by ARP packets and that have not been sent to the syslog server yet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status. ES-3148 User - ZyXEL ES-3148 | User Guide - Page 214
. Sender IP This field displays the source IP address of Switch to generate log messages when ARP packets are discarded or forwarded based on the VLAN ID of the ARP packet. See Section 24.7.2 on page 217. Time This field displays when the log message was generated. 214 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 215
the Switch stops recording log messages and simply starts counting the number of entries that were dropped due to unavailable buffer. Click Clearing log status table in the ARP Inspection Log Status screen to clear the log and reset this counter. See Section 24.6.2 on page 213. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 216
page 265) to use this. Enter 0 if you do not want the Switch to send log messages generated by ARP packets to the syslog server. The IP Source Guard > ARP Inspection > Configure > Port. Figure 110 Advanced Application > IP Source Guard > ARP Inspection > Configure > Port 216 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 217
when the Switch generates log messages for receiving ARP packets from each VLAN. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN. Figure 111 Advanced Application > IP Source Guard > ARP Inspection > Configure > VLAN ES-3148 User's Guide 217 - ZyXEL ES-3148 | User Guide - Page 218
> IP Source Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the nonvolatile memory when you are done configuring. Cancel Click this to reset the values in this screen to their last-saved values. 218 ES-3148 - ZyXEL ES-3148 | User Guide - Page 219
will be affected by the switch in loop state in the following way: • It will receive broadcast messages sent out from the switch in loop state. • It will receive its own broadcast messages that it sends out as they loop back. It will then re-broadcast those messages again. ES-3148 User's Guide 219 - ZyXEL ES-3148 | User Guide - Page 220
this example, the probe packet is sent from port N and returns on another port. As long as loop guard is enabled on port N. The Switch will shut down port N if it detects that the probe packet has returned to the Switch. Figure 115 Loop Guard - Network Loop A P P N P 220 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 221
problem on your network you can re-activate the disabled port via the web configurator (see Section 7.7 on page 82) or via commands (see the CLI Reference Guide this option to enable loop guard on the Switch. The Switch generates syslog, internal log messages as well as ES-3148 User's Guide 221 - ZyXEL ES-3148 | User Guide - Page 222
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 222 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 223
SSH, or SNMP. Use IP static routes to have the Switch respond to remote management stations that are not reachable through the default gateway. The Switch can also use static routes be identical to the host ID. IP Subnet Mask Enter the subnet mask for this destination. ES-3148 User's Guide 223 - ZyXEL ES-3148 | User Guide - Page 224
to the factory defaults. Index This IP Switch that will forward the packet to the destination. This field displays the cost of transmission for routing purposes. Click Delete to remove the selected entry from the summary table. Click Cancel to clear the Delete check boxes. 224 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 225
a new DS (Differentiated Services) field to replace the Type of Service (ToS) field in the IP header. The DS field contains a 6-bit DSCP field which can define up to 64 service levels and the remaining 2 allocated according to the DSCP values and the configured policies. ES-3148 User's Guide 225 - ZyXEL ES-3148 | User Guide - Page 226
and PIR values are based on the guaranteed and maximum bandwidth respectively as negotiated between a service provider and client. Two Rate Three Color Marker evaluates incoming packets and marks them with one ) packets are dropped if there is congestion on the network. 226 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 227
Chapter 27 Differentiated Services • Green (low loss priority level) packets are forwarded. TRTCM operates in one of two modes: color-blind or color- YES Exceed NO Low Packet CIR? Loss YES High Packet Loss High Packet Loss Medium Packet Medium Packet Loss Loss ES-3148 User's Guide 227 - ZyXEL ES-3148 | User Guide - Page 228
screen. Table 85 IP Application > DiffServ LABEL DESCRIPTION Active Select this option to enable DiffServ on the Switch. Port This field displays the index number of a port on the Switch. * Settings in in the DiffServ screen to display the screen as shown next. 228 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 229
screen. Table 86 IP Application > DiffServ > 2-rate 3 Color Marker LABEL DESCRIPTION Active Select this to activate TRTCM (Two Rate Three Color Marker) on the Switch. The Switch evaluates and marks the this port. Specify the Peak Information Rate (PIR) for this port. ES-3148 User's Guide 229 - ZyXEL ES-3148 | User Guide - Page 230
Services Table 86 IP 802.1p mapping to allow the Switch to prioritize all traffic based on mapping table. The following table shows the default DSCP-to-IEEE802.1p mapping. Table 87 Default DSCP-IEEE 802.1p Mapping DSCP VALUE 0 IP Application > DiffServ > DSCP Setting 230 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 231
run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 231 - ZyXEL ES-3148 | User Guide - Page 232
Chapter 27 Differentiated Services 232 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 233
to the same DHCP server. • VLAN - The Switch is configured on a VLAN by VLAN basis. The Switch can relay DHCP requests from different VLAN to different DHCP servers. 28.2 DHCP Status Click IP Application > DHCP in the navigation panel. The DHCP Status screen displays. ES-3148 User's Guide 233 - ZyXEL ES-3148 | User Guide - Page 234
The DHCP server can then provide an IP address based on this information. Please Switch relays to a DHCP server. Relay Agent Information can include the System Name of the Switch if you select this option. You can change the System Name in Basic Settings > General Setup. 234 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 235
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 235 - ZyXEL ES-3148 | User Guide - Page 236
example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that services the DHCP clients . Click IP Application > DHCP in the navigation panel, then click the VLAN link In the DHCP Status screen that displays. 236 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 237
displays the system name you configure in the General Setup screen. Select the check box for the Switch to add the system name to the client DHCP requests that it relays to a DHCP server. Add configuration, this field displays the first remote DHCP server IP address. ES-3148 User's Guide 237 - ZyXEL ES-3148 | User Guide - Page 238
server with an IP address of 172.23.10.100. Figure 130 DHCP Relay for Two VLANs DHCP:192.168.1.100 VLAN 1 VLAN 2 DHCP:172.23.10.100 For the example network, configure the VLAN Setting screen as shown. Figure 131 DHCP Relay for Two VLANs Configuration Example example 238 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 239
Firmware Upgrade screen. Restore Click Click Here to go to the Restore Configuration screen. Configuration Backup Click Click Here to go to the Backup Configuration screen. Configuration Load Factory Click Click Here to reset the configuration to the factory default settings. Default ES-3148 - ZyXEL ES-3148 | User Guide - Page 240
If you want to access the Switch web configurator again, you may need to change the IP address of your computer to be in the same subnet as that of the default Switch IP address (192.168.1.1). 29.3 permanently. All unsaved changes are erased after you reboot the Switch. 240 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 241
reboot the Switch and apply the new firmware immediately. (Firmware upgrades are only applied after a reboot). Click Upgrade to load the new firmware. After the firmware upgrade process is complete, see the System Info screen to verify your current firmware version number. ES-3148 User's Guide 241 - ZyXEL ES-3148 | User Guide - Page 242
of your device from which you may restore at a later date. Back up your current Switch configuration to a computer using the Backup Configuration screen. Figure 137 Management > Maintenance > Backup Configuration Click Save to save the configuration file to your computer. 242 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 243
model firmware may damage your device. 29.8.2 FTP Command Line Procedure 1 Launch the FTP client on your computer. 2 Enter open, followed by a space and the IP address of your Switch. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). ES-3148 - ZyXEL ES-3148 | User Guide - Page 244
). 29.8.4 FTP Restrictions FTP will not work when: • FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disallow the FTP session. 244 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 245
multi-login is disabled. See the CLI Reference Guide for more information on disabling multilogin. 30.2 The Access Control Main Screen Click Management > Access Control in the navigation panel to display the main screen as shown. Figure 138 Management > Access Control ES-3148 User's Guide 245 - ZyXEL ES-3148 | User Guide - Page 246
is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between the network element (NE). A manager station can manage and monitor the Switch through the network via SNMP version one (SNMPv1), SNMP version ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 247
Switch supports the following MIBs: • SNMP MIB II (RFC 1213) • RFC 1157 SNMP v1 • RFC 1493 Bridge MIBs • RFC 1643 Ethernet MIBs • RFC 1155 SMI • RFC 2674 SNMPv2, SNMPv2c • RFC 1757 RMON • SNMPv2, SNMPv2c or later version, compliant with RFC 2011 SNMPv2 MIB for IP range. ES-3148 User's Guide 247 - ZyXEL ES-3148 | User Guide - Page 248
a time server. RTCNotUpdatedEventClear 1.3.6.1.4.1.890.1.5.8.17.32.2.2 This trap is sent when the Switch gets the time and date from a time server. intrusionloc IntrusionLockEventOn k 1.3.6.1.4.1.890.1.5.8.17 interface autonegotiates with the peer Ethernet interface. 248 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 249
due to incorrect user name and/or password. This trap is sent when authentication fails due to incorrect user name and/or password. This trap is sent when there be reached. Table 101 SNMP IP Traps OPTION OBJECT LABEL ping when a traceroute test is completed. ES-3148 User's Guide 249 - ZyXEL ES-3148 | User Guide - Page 250
when the MRSTP topology changes. 1.3.6.1.4.1.890.1.5.8.17.107.7 This trap is sent when the MSTP 0.2 root switch changes. 1.3.6.1.4.1.890.1.5.8.17.32.2.1 This trap is sent when more than 99% of the MAC table click Access Control to go back to the Access Control screen. 250 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 251
the Trap Community string, which is the password sent with each trap to the SNMP Switch. Specify the version of the SNMP trap messages. Enter the IP addresses of up to four managers to send your SNMP traps to. Enter the port number upon which the manager listens for SNMP traps. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 252
account on the Switch. Security Level Select whether you want to implement authentication and/or encryption for SNMP communication from this user. Choose: • noauth -to use the username as the password string to send of SNMP traps that should be sent to each SNMP manager. 252 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 253
one time. • An administrator is someone who can both view and configure Switch changes. The username for the Administrator is always admin. The default administrator password is 1234. " It is highly recommended that you change the default administrator password (1234). ES-3148 User's Guide 253 - ZyXEL ES-3148 | User Guide - Page 254
's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 255
client automatically saves any new server public keys. In subsequent connections, the server public key is checked against the saved version on the client computer. ES-3148 User's Guide 255 - ZyXEL ES-3148 | User Guide - Page 256
Switch. Please refer to the following figure. 1 HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the Switch's WS (web server). 2 HTTP connection requests from a web browser go to port 80 (by default) on the Switch's WS (web server). 256 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 257
is from the Switch. You see the following Security Alert screen in Internet Explorer. Select Yes to proceed to the web configurator login screen; if you select No, then web configurator access is blocked. Figure 146 Security Alert Dialog Box (Internet Explorer) example ES-3148 User's Guide 257 - ZyXEL ES-3148 | User Guide - Page 258
148 Security Certificate 2 (Netscape) example 30.8.3 The Main Screen After you accept the certificate and enter the login username and password, the Switch main screen appears. The lock displayed in the bottom right of the browser status bar denotes a secure connection. 258 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 259
the Switch. You may also change the default service port and configure "trusted computer(s)" for each service in the Remote Management screen (discussed later). Click Access Control to go back to the main Access Control screen. Figure 150 Management > Access Control > Service Access Control ES-3148 - ZyXEL ES-3148 | User Guide - Page 260
Configure the IP address range of trusted computers from which you can manage this Switch. The Switch checks if the client IP address of a computer requesting a service or protocol matches the range set here. The Switch immediately disconnects the session if it does not match. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 261
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. ES-3148 User's Guide 261 - ZyXEL ES-3148 | User Guide - Page 262
Chapter 30 Access Control 262 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 263
. IP Ping Type the IP address of a device that you want to ping in order to test a connection. Click Ping to have the Switch ping the IP address (in the field to the left). Ethernet Port Test Enter a port number and click Port Test to perform an internal loopback test. ES-3148 User's Guide 263 - ZyXEL ES-3148 | User Guide - Page 264
Chapter 31 Diagnostic 264 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 265
. 32.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate . Use this screen to configure the device's system logging settings. ES-3148 User's Guide 265 - ZyXEL ES-3148 | User Guide - Page 266
your syslog program for more details. Apply Click Apply to save your changes to the Switch's run-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link screen. Use this screen to configure a list of external syslog servers. 266 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 267
edit the entry later). Server Address Enter the IP address of the syslog server. Log Level to save your changes to the Switch's run-time memory. The Switch loses these changes if it is Clear to return the fields to the factory defaults. Index This is the index number of ES-3148 User's Guide 267 - ZyXEL ES-3148 | User Guide - Page 268
Chapter 32 Syslog 268 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 269
you manage the cluster member switches. Cluster Members The switches being managed by the cluster manager switch. In the following example, switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members. ES-3148 User's Guide 269 - ZyXEL ES-3148 | User Guide - Page 270
Click Management > Cluster Management in the navigation panel to display the following screen. " A cluster can only have one manager. Figure 156 Management > Cluster Management 270 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 271
to go to that cluster member switch's web configurator home page. This cluster member web configurator home page and the home page that you'd see if you accessed it directly are different. Figure 157 Cluster Management: Cluster Member Web Configurator Screen example ES-3148 User's Guide 271 - ZyXEL ES-3148 | User Guide - Page 272
. Table 114 FTP Upload to Cluster Member Example FTP PARAMETER DESCRIPTION User Enter "admin". Password The web configurator password default is 1234. ls Enter this command to list the name of cluster member switch's firmware and configuration file. 360lt0.bin This is the name of the - ZyXEL ES-3148 | User Guide - Page 273
. All switches must be directly connected and in the same VLAN group to belong to the same cluster. Switches that are not in the same VLAN group are not visible in the Clustering Candidates list. This field is ignored if the Clustering Manager is using Port-based VLAN. ES-3148 User's Guide 273 - ZyXEL ES-3148 | User Guide - Page 274
cluster member switch's System Name. Model This is the cluster member switch's model name. Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster. Cancel Click Cancel to begin configuring this screen afresh. 274 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 275
the Switch) or static (manually entered in the Static MAC Forwarding screen). The Switch uses the Switch has already learned the port for this MAC address, but the destination port is the same as the port it came in on, then it filters the frame. Figure 160 MAC Table Flowchart ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 276
frame belongs. This is the port from which the above MAC address was learned. This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). 276 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 277
LAN. The Switch fills in its own MAC and IP address in the sender address fields, and puts the known IP address of the target in the target IP address field. In addition, the Switch puts all ones the following screen. Use the ARP table to view IP-to-MAC address mapping(s). ES-3148 User's Guide 277 - ZyXEL ES-3148 | User Guide - Page 278
port with corresponding MAC address below. MAC Address This is the MAC address of the device with corresponding IP address above. Type This shows whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the Static MAC Forwarding screen). 278 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 279
and advanced settings from a source port to a destination port or ports. Click Management > Configure Clone to open the following screen. Figure 163 Management > Configure Clone ES-3148 User's Guide 279 - ZyXEL ES-3148 | User Guide - Page 280
-time memory. The Switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Cancel Click Cancel to begin configuring this screen afresh. 280 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 281
PART IV Troubleshooting and Specifications Troubleshooting (283) Product Specifications (287) 281 - ZyXEL ES-3148 | User Guide - Page 282
282 - ZyXEL ES-3148 | User Guide - Page 283
2 on page 39. 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 Disconnect and re-connect the power adaptor to the Switch. 5 If the problem continues, contact the vendor. ES-3148 User's Guide 283 - ZyXEL ES-3148 | User Guide - Page 284
. If you can access the Switch, check the remote management and secure client settings to find out why the Switch does not respond to HTTP. 6 Reset the Switch to its factory defaults, and try to access the Switch with the default IP address. See Section 4.6 on page 59. 284 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 285
FTP sessions. Close other FTP sessions, or try connecting again later. 2 Try to access the Switch using another service, such as HTTP. If you can access the Switch, check the remote management and secure client settings to find out why the Switch does not respond to FTP. ES-3148 User's Guide 285 - ZyXEL ES-3148 | User Guide - Page 286
Chapter 37 Troubleshooting 286 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 287
Switch's hardware and firmware features. 38.1 General Switch Specifications The following tables summarize the Switch's hardware and firmware 100, 1000 Mini-GBIC slot: LNK, ACT Per management port: 10, 100 Dimension 438 mm (W) x 270 mm (D) x 44.45 mm (H) Standard 19 A) ES-3148 User's Guide 287 - ZyXEL ES-3148 | User Guide - Page 288
IP services DHCP relay; VLAN-based DHCP relay DiffServ Security IEEE 802.1x port-based authentication Static MAC Address Forward Multiple RADIUS Servers Multiple TACACS+ Servers IP Source Guard Static IP/MAC binding DHCP snooping ARP inspection MAC authentication 288 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 289
aggregation Spanning Tree Protocol Loopguard IGMP snooping Firmware upgrade and download through FTP/TFTP Login support 802.3ah OAM Network Management CLI through console port and telnet Web-based management Clustering: up to 24 switches can be managed by one IP MIBs ES-3148 User's Guide 289 - ZyXEL ES-3148 | User Guide - Page 290
Table 121 Standards Supported (continued) STANDARD DESCRIPTION RFC 1757 Four groups of RMON RFC 1901 SNMPv2c Simple Network Management Protocol version 2c RFC 2011 SNMPv2 MIB for IP RFC 2012 SNMPv2 MIB 802.3z 1000BASE-X For optical fiber link 1000BASE-SX/LX. 290 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 291
has these pin assignments. The CON/AUX switch changes the setting in the firmware only and does not change the CON/AUX port's pin assignments. Switchs with a CON/AUX port also have a -through Crossover (Switch) (Adapter) (Switch) (Switch) 3. Pins 2,3 and 5 are used. ES-3148 User's Guide 291 - ZyXEL ES-3148 | User Guide - Page 292
Chapter 38 Product Specifications Table 123 Ethernet Cable Pin Assignments WAN / LAN ETHERNET CABLE PIN LAYOUT 1 IRD + 1 OTD 1 IRD + + 2 IRD - 2 OTD - 2 IRD - 3 OTD + 3 IRD + 3 OTD + 6 OTD - 6 IRD - 6 OTD - 1 IRD + 2 IRD 3 OTD + 6 OTD - 292 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 293
. Some details may not apply to your Switch. Setting up Your Computer's IP Address (295) Pop-up Windows, JavaScripts and Java Permissions (317) IP Addresses and Subnetting (325) Common Services (335) Importing Certificates (339) Legal Information (345) Customer Support (349) Index (355) 293 - ZyXEL ES-3148 | User Guide - Page 294
294 - ZyXEL ES-3148 | User Guide - Page 295
IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the Switch's LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 296
Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click 5 Restart your computer so the changes you made take effect. 296 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 297
/Me: TCP/IP Properties: IP Address 3 Click the DNS Configuration tab. • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). ES-3148 User's Guide 297 - ZyXEL ES-3148 | User Guide - Page 298
window. 3 Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. 1 Click start (Start in Windows 2000/NT), Settings, Control Panel. 298 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 299
Your Computer's IP Address Figure 168 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 169 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. ES-3148 User's Guide 299 - ZyXEL ES-3148 | User Guide - Page 300
window opens (the General tab in Windows XP). • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 301
in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. • Click OK when finished. ES-3148 User's Guide 301 - ZyXEL ES-3148 | User Guide - Page 302
(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. 302 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 303
" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. 1 Click the Start icon, Control Panel. ES-3148 User's Guide 303 - ZyXEL ES-3148 | User Guide - Page 304
2 In the Control Panel, double-click Network and Internet. Figure 176 Windows Vista: Control Panel 3 Click Network and Sharing Center. Figure 177 Windows Vista: Network And Internet 4 Click Manage network connections. Figure 178 Windows Vista: Network and Sharing Center 304 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 305
whenever Windows displays a screen saying that it needs your permission to continue. Figure 179 Windows Vista: Network and Sharing Center 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Figure 180 Windows Vista: Local Area Connection Properties ES-3148 User's Guide 305 - ZyXEL ES-3148 | User Guide - Page 306
in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. • Click OK when finished. 306 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 307
address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 308
window. 12 Close the Network Connections window. 13 Turn on your Switch and restart your computer (if prompted). Verifying Settings 1 Click Start Support tab. Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. 308 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 309
Select Ethernet built-in from the Connect via list. Figure 185 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the following: • From the Configure box, select Manually. ES-3148 User's Guide 309 - ZyXEL ES-3148 | User Guide - Page 310
. 7 Turn on your Switch and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. Macintosh Show list. • Click the TCP/IP tab. 3 For dynamically assigned settings, select Using DHCP from the Configure list. 310 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 311
Settings Check your TCP/IP properties in the Network window. Linux This section shows you how to configure your computer's TCP/IP settings in Red Hat Linux 9.0. Procedure, screens and file location may vary depending on your Linux distribution and release version. ES-3148 User's Guide 311 - ZyXEL ES-3148 | User Guide - Page 312
the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System . Figure 189 Red Hat 9.0: KDE: Ethernet Device: General 312 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 313
list. • If you have a static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields. 3 Click OK to If you have a dynamic IP address, enter dhcp in the BOOTPROTO= field. The following figure shows an example. ES-3148 User's Guide 313 - ZyXEL ES-3148 | User Guide - Page 314
10 NETMASK=255.255.255.0 USERCTL=no PEERDNS=yes TYPE=Ethernet 2 If you know your DNS server IP address(es), enter the DNS server information in the resolv.conf file in the /etc directory. The following interface: Bringing up interface eth0: [OK] [OK] [OK] [OK] [OK] 314 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 315
Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 196 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# ES-3148 User's Guide 315 - ZyXEL ES-3148 | User Guide - Page 316
Appendix A Setting up Your Computer's IP Address 316 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 317
. Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP address. Disable Pop-up Blockers 1 In Internet 1 In Internet Explorer, select Tools, Internet Options, Privacy. ES-3148 User's Guide 317 - ZyXEL ES-3148 | User Guide - Page 318
following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 2 Select Settings...to open the Pop-up Blocker Settings screen. 318 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 319
Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites. Figure 200 Pop-up Blocker Settings ES-3148 User's Guide 319 - ZyXEL ES-3148 | User Guide - Page 320
Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window. 320 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 321
down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window. Figure 203 Security Settings - Java ES-3148 User's Guide 321 - ZyXEL ES-3148 | User Guide - Page 322
versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. 322 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 323
Appendix B Pop-up Windows, JavaScripts and Java Permissions Figure 205 Mozilla Firefox: Tools > Options Click Content to show the screen below. Select the check boxes as shown in the following screen. Figure 206 Mozilla Firefox Content Security ES-3148 User's Guide 323 - ZyXEL ES-3148 | User Guide - Page 324
Appendix B Pop-up Windows, JavaScripts and Java Permissions 324 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 325
notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. ES-3148 User's Guide 325 - ZyXEL ES-3148 | User Guide - Page 326
has 32 bits. If a bit in the subnet mask is a "1" then the corresponding bit in the IP address is part of the network number. If a bit in the subnet mask is "0" then the corresponding bit in the the first 8 bits of the mask are ones and the remaining 24 bits are zeroes. 326 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 327
address for that network (192.168.1.255 with a 24-bit subnet mask, for example). As these two IP addresses cannot be used for individual hosts, calculate the maximum number of possible hosts in a network as follows .0 /24 0000 0000 0 255.255.255.128 /25 1000 0000 128 ES-3148 User's Guide 327 - ZyXEL ES-3148 | User Guide - Page 328
Appendix C IP Addresses and Subnetting Table 127 Alternative Subnet Mask Notation (continued) SUBNET MASK ALTERNATIVE NOTATION LAST OCTET (BINARY) LAST .1.128 /25. The following figure shows the company network after subnetting. There are now two subnetworks, A and B. 328 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 329
IP Address (Decimal) 192.168.1. 0 IP Address (Binary) 11000000.10101000.00000001. 00000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.0 Lowest Host ID: 192.168.1.1 Broadcast Address: 192.168.1.63 Highest Host ID: 192.168.1.62 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 330
011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 132 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1 0 1 30 31 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 330 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 331
Appendix C IP Addresses and Subnetting Table 132 Eight Subnets (continued) SUBNET SUBNET ADDRESS FIRST ADDRESS 5 128 129 6 160 161 7 192 193 8 224 225 255.255.255.224 (/27) 2048 30 12 255.255.255.240 (/28) 4096 14 13 255.255.255.248 (/29) 8192 6 ES-3148 User's Guide 331 - ZyXEL ES-3148 | User Guide - Page 332
your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. 332 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 333
problem can be solved by assigning a different static IP address to computer A or setting computer A to obtain an IP address automatically. Figure 210 Conflicting Computer IP Addresses Example Conflicting Router IP . Figure 211 Conflicting Computer IP Addresses Example ES-3148 User's Guide 333 - ZyXEL ES-3148 | User Guide - Page 334
the router's LAN port both use 192.168.1.1 as the IP address. The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router's LAN port. Figure 212 Conflicting Computer and Router IP Addresses Example 334 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 335
www.zyxel.com) to IP numbers. ESP User-Defined 50 (IPSEC_TUNNEL) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. ES-3148 User's Guide 335 - ZyXEL ES-3148 | User Guide - Page 336
version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). Point-to-Point Tunneling Service. A streaming audio service that enables real time sound over the web. Remote Execution Daemon. Remote Login. Remote Telnet. 336 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 337
Services Table 135 Commonly Used Services the Internet. Simple File Transfer Protocol. Simple Mail Transfer Protocol is the message-exchange standard for the Internet Internet and in UNIX environments. It operates over TCP/ IP networks. Its primary function is to allow users to ES-3148 User's Guide 337 - ZyXEL ES-3148 | User Guide - Page 338
Appendix D Common Services 338 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 339
trusted certification authority. The following example procedure shows how to import the Switch's (self-signed) server certificate into your operating system as a trusted certification authority. 1 In Internet Explorer, double click the lock shown in the following screen. ES-3148 User's Guide 339 - ZyXEL ES-3148 | User Guide - Page 340
Appendix E Importing Certificates Figure 214 Login Screen 2 Click Install Certificate to open the Install Certificate wizard. Figure 215 Certificate General Information before Import 3 Click Next to begin the Install Certificate wizard. 340 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 341
Figure 216 Certificate Import Wizard 1 Appendix E Importing Certificates 4 Select where you would like to store the certificate and then click Next. Figure 217 Certificate Import Wizard 2 5 Click Finish to complete the Import Certificate wizard. ES-3148 User's Guide 341 - ZyXEL ES-3148 | User Guide - Page 342
Appendix E Importing Certificates Figure 218 Certificate Import Wizard 3 6 Click Yes to add the Switch certificate to the root store. Figure 219 Root Certificate Store 342 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 343
Appendix E Importing Certificates Figure 220 Certificate General Information after Import ES-3148 User's Guide 343 - ZyXEL ES-3148 | User Guide - Page 344
Appendix E Importing Certificates 344 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 345
manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL any interference received, including interference that may cause undesired operations. ES-3148 User's Guide 345 - ZyXEL ES-3148 | User Guide - Page 346
digital switch, pursuant instruction manual ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating 346 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 347
to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number ( mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 348
Appendix F Legal Information 348 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 349
• Web: www.zyxel.co.cr • FTP: ftp.zyxel.co.cr • Regular Mail: ZyXEL Costa Rica, Plaza Roble Escazú, Etapa El Patio, Tercer Piso, San José, Costa Rica Czech Republic • E-mail: [email protected] • Telephone: +420-241-091-350 • Fax: +420-241-091-359 • Web: www.zyxel.cz ES-3148 User's Guide 349 - ZyXEL ES-3148 | User Guide - Page 350
GmbH., Adenauerstr. 20/A2 D-52146, Wuerselen, Germany Hungary • Support E-mail: [email protected] • Sales E-mail: [email protected] • Telephone: +36-1-3361649 • Fax: +36-1-3259100 • Web: www.zyxel.hu • Regular Mail: ZyXEL Hungary, 48, Zoldlomb Str., H-1025, Budapest, Hungary 350 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 351
17F, Bandar Puchong Jaya, 47100 Puchong, Selangor Darul Ehsan, Malaysia North America • Support E-mail: [email protected] • Sales E-mail: [email protected] • Telephone: +1-800-255-4101, +1-714-632-0882 • Fax: +1-714-632-0858 • Web: www.us.zyxel.com • FTP: ftp.us.zyxel.com ES-3148 User's Guide 351 - ZyXEL ES-3148 | User Guide - Page 352
Park, The Strategy #03-28, Singapore 609930 Spain • Support E-mail: [email protected] • Sales E-mail: [email protected] • Telephone: +34-902-195-420 • Fax: +34-913-005-345 • Web: www.zyxel.es • Regular Mail: ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spain 352 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 353
E-mail: [email protected] • Telephone: +44-1344-303044, 08707-555779 (UK only) • Fax: +44-1344-303034 • Web: www.zyxel.co.uk • FTP: ftp.zyxel.co.uk • Regular Mail: ZyXEL Communications UK Ltd., 11 The Courtyard, Eastern Road, Bracknell, Berkshire RG12 2XB, United Kingdom (UK) ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 354
Appendix G Customer Support 354 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 355
110 Class of Service (CoS) 225 classifier 149, 151 and QoS 149 editing 152 example 153 overview 149 setup 149, 151, 152 viewing 152 cloning a port See port cloning 280 cluster management 269 and switch passwords 274 cluster manager 269, 273 cluster member 269, 274 cluster member firmware upgrade 272 - ZyXEL ES-3148 | User Guide - Page 356
76 customer support 349 what 43 default service level 225 356 F fan speed 74 FCC interference statement 345 feature summary 54 file transfer using FTP command example 243 filename convention, configuration 243 filtering 105 rules 105 filtering database, MAC table 275 firmware ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 357
lockout 59 log 263 login 51 password 58 login accounts 253 Administrator 253 configuring via web configurator 253 multiple 253 non-administrator 254 number of 253 login password 254 loop guard 219 how it works 220 port shut down 221 probe packet 220 loop guard, vs STP 219 ES-3148 User's Guide 357 - ZyXEL ES-3148 | User Guide - Page 358
configuration 239 firmware 241 main 121 MIB and SNMP 246 supported MIBs 247 MIB (Management priority 173 and IGMP 171 IP addresses 171 overview 171 setup password 58 administrator 254 PHB (Per-Hop Behavior) 225 ping, test connection 263 policy 157, 158 and classifier 157 358 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 359
97 hexadecimal notation for protocols 93, 96 isolate traffic 94 priority 93, 96 ES-3148 User's Guide PVID 85, 91 PVID (Priority Frame) 85 Index Q QoS 288 and 3 remote management 260 service 261 trusted computers 260 resetting 59, 240 to factory default settings 240 restoring configuration - ZyXEL ES-3148 | User Guide - Page 360
252 version 3 and security 247 versions supported 246 SNMP traps 247 supported 247, 248, 250 Spanning Tree subnet mask 326 subnetting 328 switch lockout 59 switch reset 59 switch setup 77 switching 288 syntax conventions 4 syslog service protocol 76 format 76 trademarks 345 ES-3148 User's Guide - ZyXEL ES-3148 | User Guide - Page 361
226 Two Rate Three Color Marker, see TRTCM 226 Type of Service (ToS) 225 U untrusted ports ARP inspection 202 DHCP snooping 91 port number 89 port settings 90 port-based VLAN 98 ES-3148 User's Guide Index port-based, all connected 101 port-based, isolation 101 (ZyXEL Network Operating System) 243 361 - ZyXEL ES-3148 | User Guide - Page 362
Index 362 ES-3148 User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
 |
 |
www.zyxel.com
ES-3148 Series
Intelligent Layer 2+ Switch
User’s Guide
Version 3.80
8/2007
Edition 1
DEFAULT LOGIN
IP Address
User Name
admin
Password
1234