Home » ZyXEL Manuals » Networking » ZyXEL NetAtlas » Manual Viewer

ZyXEL NetAtlas User Guide - Page 298

Advanced Configuration > Authentication continued

Get ZyXEL NetAtlas PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 298 highlights

Chapter 20 Advanced Configuration Table 150 Advanced Configuration > Authentication (continued) LABEL DESCRIPTION Mode Select index-priority and the OLT tries to authenticate with the first configured RADIUS server, if the RADIUS server does not respond then the OLT tries to authenticate with the second RADIUS server. Timeout Select round-robin to alternate between the RADIUS servers that it sends authentication requests to. Specify the amount of time in seconds that the OLT waits for an authentication request response from the RADIUS server. Server 1 ~ 2 Port Secret TACACS+ Server Mode If you are using index-priority for your authentication and you are using two RADIUS servers then the timeout value is divided between the two RADIUS servers. For example, if you set the timeout value to 30 seconds, then the OLT waits for a response from the first RADIUS server for 15 seconds and then tries the second RADIUS server. Enter the IP address of an external RADIUS server in dotted decimal notation. The default port of a RADIUS server for authentication is 1812. You need not change this value unless your network administrator instructs you to do so. Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external RADIUS server and the OLT. This key is not sent over the network. This key must be the same on the external RADIUS server and the OLT. Use this section to configure your TACACS+ authentication settings. Select index-priority and the OLT tries to authenticate with the first configured TACACS+ server, if the TACACS+ server does not respond then the OLT tries to authenticate with the second TACACS+ server. Timeout Select round-robin to alternate between the TACACS+ servers that it sends authentication requests to. Specify the amount of time in seconds that the OLT waits for an authentication request response from the TACACS+ server. Server 1 ~ 2 Port Shared Secret If you are using index-priority for your authentication and you are using two TACACS+ servers then the timeout value is divided between the two TACACS+ servers. For example, if you set the timeout value to 30 seconds, then the OLT waits for a response from the first TACACS+ server for 15 seconds and then tries the second TACACS+ server. Enter the IP address of an external TACACS+ server in dotted decimal notation. The default port of a TACACS+ server for authentication is 49. You need not change this value unless your network administrator instructs you to do so. Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the OLT. This key is not sent over the network. This key must be the same on the external TACACS+ server and the OLT. 298 NetAtlas EPON Manager User's Guide

Section	Page
NetAtlas PON, EPON Manager	1
About This User's Guide	3
Document Conventions	5
Contents Overview	7
Table of Contents	9
Introduction	17
Introducing the EMS	19
1.1 Element Management System (EMS) Overview	19
1.1.1 Device Firmware Versions Supported	20
1.2 System Requirements	21
1.3 Uninstalling the EMS Server	21
Main Screen	23
2.1 Main Screen Overview	23
2.2 User Management	24
2.2.1 User Screens	26
2.2.2 Access Privilege Template Management	31
2.3 Access Log Browser	34
2.3.1 Search Device	36
2.4 Database Management	36
2.4.1 Backup and Restore	37
2.4.2 Database Log Storage Configuration	38
2.4.3 Scheduled Backup Configuration	38
2.5 About the EMS	40
2.6 EMS Registration	40
EPON Manager	43
EPON Manager	45
3.1 EPON Manager Overview	45
3.2 Device List and Icon Colors	46
3.3 System Message Panel Port Status	47
3.4 Menu Shortcut Buttons	47
3.5 EPON Manager Main Menu Summary	47
3.6 Common EMS Command Buttons	49
3.7 View the Devices	50
3.7.1 Device Information	50
3.8 Configuration Save	53
3.9 Device Configuration	54
3.9.1 Device Menu Summary	54
3.9.2 Properties Configuration	55
3.9.3 Introducing the Device Configuration Window	55
Map	61
4.1 Submap and Device Mapping	61
4.1.1 Adding a Submap or Device	62
4.1.2 Editing a Node	63
4.1.3 Deleting a Submap	63
4.1.4 Deleting a Device	63
4.1.5 Finding an Object	64
4.1.6 Updating Device Map	64
4.2 Exit	64
View	65
5.1 Ethernet Status	65
5.2 Hardware Status	66
5.3 Firmware Information	68
5.4 STP/RSTP	70
5.4.1 STP Terminology	70
5.4.2 STP Port States	71
5.4.3 STP/RSTP Status	71
5.5 PON Status	75
5.5.1 Port Status	75
5.5.2 MAC Table	77
5.5.3 IGMP Table	79
Template	81
6.1 Template Overview	81
6.2 IGMP Filter Profile Template	81
6.2.1 Configuring an IGMP Filter Profile Template	83
6.2.2 Adding an IP Range for an IGMP Filter Profile	84
6.3 Multicast Setting Template	84
6.3.1 Configuring a Multicast Template	86
Provisioning	89
7.1 Overview	89
7.2 IGMP Filter Profile Provision	89
7.2.1 View IGMP Filter	91
7.2.2 Applying an IGMP Filter Profile	91
7.2.3 Removing an IGMP Filter Profile	93
7.3 Multicast Setting Provisioning	95
7.3.1 Applying a Multicast Setting Template	96
Performance	99
8.1 Interface Performance	99
8.1.1 Viewing the Graph	100
8.1.2 Viewing the Table	101
8.2 OLT PON Performance	102
8.3 ONU PON Performance	104
8.4 UNI Performance	105
8.5 RMON Ethernet Statistics	108
8.5.1 Viewing the Table	110
8.6 RMON History Data	111
8.6.1 Viewing the Table	113
Fault	115
9.1 Event Log	115
9.1.1 Category Setting	118
9.2 Loopback Test	119
9.2.1 Perform an Internal Loopback Test	119
9.3 Ping and TraceRoute Test	120
9.3.1 Trace Route Test	122
9.4 Alarm Severity Configuration	123
Maintenance	127
10.1 Device Port/Reset	127
10.1.1 Rebooting a Device	128
10.2 Load Default Configuration	130
10.2.1 Loading the Factory Default Settings	130
10.3 Firmware Upgrade	131
10.3.1 Upgrading the Firmware	132
10.3.2 Procedure to Upgrade Firmware	133
10.4 ONU Firmware Upgrade	134
10.5 Device Configuration Backup and Restore	135
10.6 Scheduled Device Configuration Backup	136
10.6.1 Adding a New Scheduled Device Configuration Backup	138
10.7 Configuring Scheduled Device Configuration Restore	139
10.7.1 Adding a Scheduled Configuration Restore	140
10.7.2 Adding a Device to Scheduled Configuration Restore	141
10.8 Scheduled Firmware Upgrade	142
10.8.1 Adding a Scheduled Firmware Upgrade	143
10.8.2 Adding a Device to Scheduled Firmware Upgrade	144
Tools	145
11.1 Telnet	145
11.2 Ping	146
11.3 Trace Route	147
OLT Configuration Menus	149
OLT Configuration Overview	151
12.1 OLT Configuration Screens Overview	151
System Configuration	153
13.1 System Info	153
13.2 Syslog Setup	154
13.2.1 Configuring a Syslog Server	156
13.3 SNMP	156
13.3.1 Configuring SNMP	158
13.4 Trap Group	159
13.5 Service Access Control	163
13.6 Remote Management	164
13.7 Time Setup	165
13.8 Boot Image	167
Switch Configuration	169
14.1 Port Setup	169
14.2 Queuing Method	170
14.3 Link Aggregation	172
14.3.1 Dynamic Link Aggregation	172
14.3.2 Link Aggregation ID	173
14.3.3 Configuring Link Aggregation	173
14.4 Broadcast Storm Control	175
14.5 STP	176
14.5.1 Multiple RSTP	176
14.5.2 Multiple STP	176
14.5.3 STP Configuration	176
14.5.4 Configuring an MST Instance	181
14.5.5 Configuring MSTI VLAN	182
14.6 Priority Queue	182
14.7 GARP Timer	184
14.8 Port Mirroring	186
14.9 Port VLAN	188
14.10 VLAN	189
14.10.1 Configuring 802.1Q VLAN	190
14.10.2 Configuring an 802.1Q VLAN	191
14.10.3 Introduction to Port-based VLANs	193
14.10.4 Configuring Port Based VLAN	193
14.11 Port Security	195
Multicast Configuration	199
15.1 Overview	199
15.1.1 IP Multicast Addresses	199
15.1.2 IGMP Snooping	199
15.2 IGMP	200
15.3 Multicast	202
15.3.1 Displaying IGMP Filter Profile	204
15.4 MVR	205
15.4.1 Types of MVR Ports	205
15.4.2 MVR Modes	205
15.4.3 Multicast VLAN	206
15.4.4 Creating a New Multicast VLAN	207
15.4.5 Creating a New Multicast Group	209
15.5 EPON Multicast VLAN	210
15.5.1 Creating a New Multicast VLAN	211
15.5.2 Modifying Multicast Groups	212
15.6 IGMP Snooping VLAN	213
15.6.1 Adding a IGMP Snooping VLAN	215
IP Configuration	217
16.1 DHCP	217
16.1.1 DHCP modes	217
16.1.2 Configuring DHCP Relay	217
16.1.3 Configuring DHCP VLAN Settings	220
16.2 IP Address Setup	220
16.2.1 Management IP Address	221
16.2.2 Configuring an In-band IP Address	223
16.3 2-Rate 3-Color Marker	224
16.4 Static Route	226
16.4.1 Configuring a Static Route	227
RMON Configuration	229
17.1 RMON Overview	229
17.2 The History Control Screen	230
17.2.1 RMON History Configuration	231
17.3 The Event Screen	232
17.3.1 RMON Event Configuration	233
17.4 The Alarm Screen	233
17.4.1 Configuring an RMON Alarm	235
17.4.2 RMON Alarm Event Log	236
EPON Configuration	239
18.1 Common Setting	239
18.2 OLT Port Setting	241
18.3 ONU Service Config	244
18.3.1 Configuring an ONU Service	246
EPON Profile Configuration	249
19.1 EPON Profile Configuration	249
19.1.1 Configuring OLT Policy Port Rule Profiles	250
19.1.2 Configuring ONU Profiles	257
19.1.3 Configuring Link Bridging Profiles	264
19.1.4 Configuring ONU Rule Profiles	272
19.1.5 Configuring ONU Policy Rule Profiles	274
19.1.6 Configuring Upstream Link Profiles	278
19.1.7 Configuring Policy Link Rule Profiles	280
19.1.8 Configuring IGMP Filter Profiles	286
Advanced Configuration	291
20.1 MAC Filter	291
20.1.1 Creating a New Filter	292
20.2 802.1x	293
20.3 Authentication	295
20.4 MAC Authentication	299
20.5 Static MAC Forwarding	300
20.5.1 Configuring a System Static MAC Address Entry	302
20.5.2 Configuring an EPON Static MAC Address Entry	303
20.6 Loop Guard	304
20.7 Account	306
20.8 Subnet Based VLAN	308
20.8.1 Configuring a Subnet Based VLAN	310
20.9 Bandwidth Control	310
Appendices and Index	313
Alarm Types and Causes	315
SOAP Schema	317
Legal Information	335

Match case Limit results 1 per page

Chapter 20 Advanced Configuration

NetAtlas EPON Manager User’s Guide

298

Mode

Select

index-priority

and the OLT tries to authenticate with the

first configured RADIUS server, if the RADIUS server does not

respond then the OLT tries to authenticate with the second

RADIUS server.

Select

round-robin

to alternate between the RADIUS servers

that it sends authentication requests to.

Timeout

Specify the amount of time in seconds that the OLT waits for an

authentication request response from the RADIUS server.

If you are using

index-priority

for your authentication and you

are using two RADIUS servers then the timeout value is divided

between the two RADIUS servers. For example, if you set the

timeout value to 30 seconds, then the OLT waits for a response

from the first RADIUS server for 15 seconds and then tries the

second RADIUS server.

Server 1 ~ 2

Enter the IP address of an external RADIUS server in dotted

decimal notation.

Port

The default port of a RADIUS server for authentication is

1812

You need not change this value unless your network

administrator instructs you to do so.

Secret

Specify a password (up to 32 alphanumeric characters) as the

key to be shared between the external RADIUS server and the

OLT. This key is not sent over the network. This key must be the

same on the external RADIUS server and the OLT.

TACACS+ Server

Use this section to configure your TACACS+ authentication

settings.

Mode

Select

index-priority

and the OLT tries to authenticate with the

first configured TACACS+ server, if the TACACS+ server does not

respond then the OLT tries to authenticate with the second

TACACS+ server.

Select

round-robin

to alternate between the TACACS+ servers

that it sends authentication requests to.

Timeout

Specify the amount of time in seconds that the OLT waits for an

authentication request response from the TACACS+ server.

If you are using

index-priority

for your authentication and you

are using two TACACS+ servers then the timeout value is divided

between the two TACACS+ servers. For example, if you set the

timeout value to 30 seconds, then the OLT waits for a response

from the first TACACS+ server for 15 seconds and then tries the

second TACACS+ server.

Server 1 ~ 2

Enter the IP address of an external TACACS+ server in dotted

decimal notation.

Port

The default port of a TACACS+ server for authentication is

You need not change this value unless your network

administrator instructs you to do so.

Shared Secret

Specify a password (up to 32 alphanumeric characters) as the

key to be shared between the external TACACS+ server and the

OLT. This key is not sent over the network. This key must be the

same on the external TACACS+ server and the OLT.

Table 150

Advanced Configuration > Authentication (continued)

LABEL

DESCRIPTION