ZyXEL Communications ES-4024A manuale d’uso

ZyXEL ES-4024A Series (ES-4024A) Ethernet Switch Support Notes V ersion 3.60 March 2006[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 2 INDEX How to manage & maintain your Switch? Firmware Upgrade Restore a Configuration File Backing Up a Configuration File Load Factory Default s Physical Switch connection Connecting two switches via Fiber Channel General Networking DHC[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 3 How to access the Switch through the console port? What is default login p assword of the console, telnet, and FTP? How to change the password? How to access the Command Line Interface? If I forgot the Switch p assword, how can I reset the [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 4 How to manage & maint ain your Switch? Firmware Upgrade From Web GUI: 1. Download (and unzipped) the correc t model firmware to your computer . 2. Click Management and then Maintenance in the navigator panel to bring up the following sc[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 5 From Console Port: 1. Download (and unzipped) the correc t model firmware to your computer . 2. Connect to the console port and open the T erminal Emulation Software. 3. Restarting the switch to ent er the debug mode via the terminal. 4. En[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 6 Restore a Configuration File From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” link of the Restore Configurati on to bring up the following scree[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 7 2. Restarting the Switch to enter the debug mode via the terminal. 3. Enter “A TLC” 4. Use X-modem protocol to tr ansfer (Send File) the firmware. 5. Enter “A TGO” to restart the Switch af ter done uploading the configuration file. [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 8 Backing Up a Configuration File From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” link of the Backup Configuration to bring up the following scre[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 9 4. Use X-modem protocol to trans fer (Receive File) the firmware. 5. Enter “A TGO” to restart the Switch af ter done uploading the configuration file. From Command Line FTP: 1. Download (and unzipped) the correc t model firmware to your[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 10 Load Factory Default s From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” button of the Load Factory Defaults to bring up the following screen. 3[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 Physical Switch connection How to connect two switches via Fiber Channel Y our Switc h may come with one or m any mini-GB ports. ZyXEL offers Small Form-factor Pluggable (SFP) transceiver s for Gigabit Ethernet and Fiber Channel applicatio[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 12 z Z y X E L S w i t c h w i t h M i n i - G B p o r t x 2 (note: Each ES-4024A Series Switch comes with 2 Mini-GB Port) z SFP-SX Transceiver x2 z LC/LC Fiber Cable (62.5/125MM) x 1 Here is the photo of the SFP-SX Tran sceiver & the LC/[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 13 Photo of the ES-2108-LC Switch 2. Find both Mini-GB Port on ES-2108-LC and GS-4024. 3. Get one transceiver and plug it in to the Mini-GB Port of ES-2108-LC[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 14 4. Plug another transceiver into th e Mini-GB Port of GS-4024 Switch[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 15 5. Remove both side of the protecti on cap from the LC/LC Fiber Cable. 6. Plug the LC/LC Fiber Cable into the transceivers on both ES-2108-LC and GS-4024 Switch. If you connected the cable correctly, the LED of the “L INK” will light u[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 16 7. Now, connect the first PC “A lpha” to ES-2108-LC and the second PC “Delta” to the GS-4024 via t he regular Ethernet cable. 8. Set the NICs in both comput ers to the same IP Domain. (ex, PC “Alpha” :192.168.1.4/24; PC “Delt[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 17 General Networking DHCP Relay Option 82 Application ISP may want to limit the number of IP address or deliver some specific IP addresses according to certain Switch port, VLAN ID and option 82 string. They can easily to achieve this with D[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 18 How to set up DHCP Relay Option 82 Environment Here, we will set up an environment to allo w a PC to get DHCP IP address in specific IP pool according to its Switch port, VLAN ID and the option 82 string. In this case, we are using GS-3012[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 19 3. IP Commander settings Open IP Commander . Right click “IP commander and then click “ connect new server ”. Input the DHCP IP addre ss or domain name and click “ok”. Our IP is 192.168.1.99.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 20 Input user name and passwor d. The default user name is “administrator” and password is “incognito”.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 21 It will bring up the following screen, please make sure that your DHCP is in “ online ” status. Then click “ wiza rd ” in the top tool bars and select “ ru le wiza rd ”.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 22 Give a name and description to the new rule.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 23 Assign a range of IP addresses or just one IP address to this rule. In our case, we set the IP pool from 192.168.1.201 to 192.168.1.203. After input IP pool, we select “DHCP Option” in Keywords combobox.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 24 After select the “DHCP Option”, it will pop up “Add DHCP Option Rule” dialog. Select “option 82 Relay Agent Information” , sub-option 1, binary data. For port 25, VLAN 1, “GS-3012”, please key in “0019000147532d33303 132?[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 25 After you finish above step, y ou will see the following figure.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 26 Then pop up the following screen and you can just press Next button. Then you can add DHCP template (option) such as gateway , DNS server and so on.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 27 Here we use “192.168.1.1” as gateway IP address of DHCP client PC.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 28 Y ou can apply DDNS service to DHCP server or not. The rule creation has been finished.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 29 After finishing all above procedures , your PC will get the IP address 192.168.1.201 when you send a DHCP request.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 30 Sep arating a physical network into many virtual networks What is V irtual LAN? • VLAN Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networ ks. S tations on a logical netwo[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 31 outgoing port s allowed for each port when using port-based VLANs. Note th at V LA N only governs the outgoing traffic, in the other word, it is unidirectional. Therefore, if you wish to allow two subscr iber ports to t alk to each other ,[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 32 Port-based VLAN definition : • Egress port for port 1: port 2, port 4, port 5 • Egress port for port 2: port 1, port 3 • Egress port for port 3: port 2 • Egress port for port 4: port 1, port 5 • Egress port for port 5: port 1, po[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 33 For Switch-2, port 1, port 2, and port 3 are allowed to communicate back and forth with uplink port 4, but not with other ports. • Switch-2 VLAN 1 member port: port 1 and port 4 • Switch-2 VLAN 2 member port: port 2 and port 4 • Swit[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 34 For Switch-1, port 1, port2, and port 3 are allowed to communicate back and forth with uplink port 4, but not with other ports. • Switch-1 VLAN 1 member port: port 1 and port 4 • Switch-1 VLAN 2 member port: port 2 and port 4 • Switc[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 35 Scenario In this scenario, Port Based VLAN is used to separate one physical Switch into two smaller logical Switches. Port 1~4 and 9, 10 are in o ne group. And Port 5~10 are in another group. Po rt-based VLANs are specific only to the swit[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 36 Configuring your Switch to fulfill this scenario (GUI) 1. Connect port 1 with a PC or Notebook via the RJ45 Cable. 2. By default the MGMT IP on every port is 192.168.1.1/24 3. Set your NIC to 192.168.1.2/24 4. Open an Internet browser such[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 37 8. Now, you need to tell the Switch how you are going to separate the physical Switch into some logical small Switches. Thus, we click “Advanced Application” then “VLAN”. On the ri ght screen, check the boxes to suit your need. In [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 38 9. Finally, you can now verify your re sult. If everything works fine, PC A can ping PC B and PC Z. But it cannot ping PC C or PC D. On the same time, this should work vice versa. 10. For example, PC A: 192.168.1.4/24 PC B: 192.168.1.5/24 [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 39 12. PING PC Z from PC A (Should work) 13. PING PC C from PC A (Should NOT work)[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 40 Configuring your Switch to fulfill this scenario (CLI) 1. Connect the Switch Console por t with your PC or Notebook. 2. Open your Terminal program.( Ex, Hyper Terminal in Windows System) 3. Make sure that your port settings are bps:9600 Da[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 41 scenario. 7. When all of the above are done, do not forget to give the “write memory” command under the enable mode to save your configuration. What is IEEE 802.1Q T ag-based VLAN? • T ag-based VLAN Overview Regarding IEEE 802.1Q sta[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 42 process the frame across the network. A tagged frame is four bytes longer than an untagged frame and cont ains two bytes of TPID (T ag Protocol Identifier , residing within the type/length field of the Ethernet frame) and two bytes of TCI [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 43 • How 802.1Q VLAN works According to the VID information in the t ag, the switch forward and filter the frames among ports. These ports with same VID can communicate with each other . IEEE 802.1Q VLAN function contai ns the following thr[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 44 untagged frame is received, Ingress Process insert a t ag cont ained the PVID into the untagged frame. Each physical port has a default VI D called PVID (Port VID). PVID is assigned to untagged frames or priority t agged frames (frames wit[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 45 • Forbidden registration: This port is forbidden to be the egress port of specified VID.. • Fixed registration: While ad control is fixed registration, it means this is a static registration entry . This port is the egress port of the [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 46 Filtering Database. If the value is t agged, the outgoing frame on the egress port is tagged. If the value is unt agged, the t ag will be removed before frame leaves the egress port. How to connect two switches using VLAN? I want to make V[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 47 -------------------------- ----------- 2. Configuration of VLAN on switch B Answer: -------------------------- ----------- In switch A, add port 25 in each VLAN VID:101 (port 1,2,3,"25 T AG") VID:102 (port 4,5,6,,"25 T AG&qu[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 48 VID:102 (port 6,7,8,9,10,"25 T AG") VID:103 (port 1 1,12,13,14,"25 T AG") VID:104 (port 15,16,17,18,"25 T AG") VID:105 (port 19,20, 21,23,22"25 T AG) Clients in same VLAN on both switches can communicate [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 49 Setting up VLAN T runking With the benefit of deploying VLAN trunki ng, we can connect two switches by a port that is configured as VLAN trunk ing port. PC1 with each VLAN tag frames from switch 1 can communicate with PC2 with another VLAN[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 50 In the switch 2, t he configuration is In the switch 1, we set port 2 as VLAN 2 unt ag[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 51 In the switch 2, we set port 6 as VLAN 2 unt ag. The switch 1 IP address: 192.168.1.31 The switch 2 IP address: 192.168.1.21 After the configuration, we can obse rve that in the switch 1, the PC 1 running on port 2 can find the PC 2 runnin[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 52 IP Multicasting How to setup IGMP snooping in your switch? Figure 1: IGMP and IGMP snooping IGMP snooping is designed for application wit h deployment of multicast traffic. It operates on the underlying IGMP mec hanism where a layer two sw[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 53 Configuration of IGMP snooping by web In this example, we enable the IGMP function on the GS-4024 (an IGMP router) to connect to a multimedia server . Al so, we enable IGMP snooping function on the ES-3124 or other ZyXEL L2 Switch to conne[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 54 S tep two : In the L2 Switch, click Basic Setting and then Swi tch Se tup where we can enable IGMP snooping function with WEB-GUI. Figure 4: IGMP Snooping Setup Configuration of IGMP and IGMP snooping by CLI S tep one: Enable IGMP function[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 55 In the configure mode of CLI, L2Switch(config)# igmp-snooping S tep three: Display the IGMP S tatus In the exec mode of CLI GS-4024# show router igmp S tep Four: Display the IGMP snooping S tatus In the exec mode of CLI L2Switch# show igmp[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 56 Overview of MVR MVR refers to Multicast VLAN Registra tion that enables a media server to transmit multicast stream in a single multicast VLAN while clients receiving multicast VLAN stream can reside in different VLANs. Clients in dif fere[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 57 Figure 2 MVR Mode  Dynamic Mode If we select the dynamic mode in MVR setting, IGMP report message transmitted from the receiver port will be forwarded to a multicast router through its source port. Multicast router knows which multicast[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 58 configured multicast MAC addre ss. If matches, the switch CPU modifies the hardware address table to include this receiver port and VLAN as a forwarding destination of the MVLAN  Leave Operation Subscriber sends an IGMP leave message to[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 59 Configuration via W eb Ste p 1 : We need to create a V LAN for multic ast traffic in ES-4024A. In the ES-4024A , Click the Advanced Application and then select the VLAN and in the VLAN Configuration, create a new VLAN 100. Figure 4 VLAN Co[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 60 Figure 5 VLAN Port Setting Ste p 3 , we need to create separate VLAN s for dif ferent Clients. In the ES-3124 , in the Advanced Application , click Multicast to enter the Multicast Settin g and configure the MVR VLAN=100. Define port 14, p[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 61 Ste p 4 : In the ES-3124, after the MVR confi guration, click the Advanced Application to browse the VLAN St atus and see we have add a new VLAN 100 in the VLAN list. We also create th ree sep arate VLANs, 20, 30, 40 and assign their PVID [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 62 Figure 8 VLAN Port Setting Ste p 5 : Before we start to use th e MVR, it is quite fundamental to enable the IGMP Snooping first. In the ES-3124 Menu , click the Multicast and go toe the Multicast Setting , activate the IGMP Snooping. Figur[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 63 Ste p 6 : In the ES-3124, in the advanced application , select Multicast , and then in the Multicast setting , and choose MVR and click the Group configuration . Here, we configure 233.1.1.1~ 233.1.1.100 as the range of multicast address a[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 64 Configuration via CLI Step 1: On the ES-3124, in the configure mode, create VLAN 100 ES-3124# config ES-3124(config)# vlan 100 Step 2: In the VLAN 100, set the port 22 to be fixed port. ES-3124(config-vlan)# fixed 22 Step 3: On the ES-3124[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 65 ES-3124(config-interface)# pvid 20 ES-3124(config-int erface)# exit ES-3124(config)# interface port-channel 14 ES-3124(config-interface)# pvid 20 Step 7: On the ES-3124, set the PVID of specific VLAN 30 ES-3124(config)# interface port-chan[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 66 Step 14: Then, specify the source port 22 and assign it to be t agged ports ES-3124(config-mvr)# source-port 22 ES-3124(config-mvr)# t agged 22[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 67 T o ring a network by building reducdent links and connections between Switch What is S p anning T ree Protocol • Sp anning T ree Overview Spanning-Tree Protocol (STP) is a Layer 2 protocol designed to run on bridges and switches. The sp[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 68 2. Filtering Database Instability: When multiple copies of a frame arrive at different ports of a switch, the MAC entry instability in Filtering Database will occur. 1. Host sends an unicast frame to Router (source MAC address is Host&apos[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 69 How STP Works Spanning Tree provide a loop-free net work. When a switch supported STP recognize a loop in the network topol ogy, it blocks one or more redundant ports. Spanning Tree Protocol continually explore the network, so when the net[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 70 2. The bridge ID includes two parts , bridge priority (2 bytes) and bridge MAC address (6 bytes). The 802.1d default bridge priority is 32768. For example, a switch with default priority 32768 (8000 hex), MAC address is 00:A0:C5:12: 34:56,[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 71 For each LAN segment (collision domai n), there is a designated port. The designated port has the lowest cost to the root bridge. De signated ports are normally in the forwarding state to forw ard and receive traffic to the segment. If mor[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 72 1. Switch A bridge ID = 8000:00A0:C511:1111, Switch B bridge ID = 8000:00A0:C522:2222, Switch C bridge ID = 0001:00A0:C533:3333. Switch C has the lowest bridge ID, so Switch C is the root bridge. A ll ports of the root bridge are designate[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 73 Switching security Setting up 802.1x Radius Authentication. Port-Authentication -- RADIUS settings: Click Advanced Application , Port Authentication in the navigation panel to display configurat ion screen as shown. Click Enable Authentica[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 74 RADIUS server setup Click RADIUS , RADIUS SERVER in the navigation panel to display configuration screen as s hown. Y ou can us e the default values or change the Authentication port , Shared Secret . Remember these values MUST be the as t[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 75 Windows XP(Supplicant) settings: There are many supplicants we c an choose like MeetingHouse Aegis client, Funk Odyssey client and Microsof t 802.1x client. W e take Microsof t 802.1x client as an example here. 802.1x/MD5-challenge setup O[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 76 After click the icon, th ere will be a dialog for ent ering the user name and password. Click ok af ter input th e correct user name and password that are in the database of authentication server . The settings of client site are finished.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 77 After finishing the above procedures , we can allow the authenticated port the access the server . If the swit ch port doesn’t be authenticated, the PCs behind the port can’t access the network.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 78 Fault Free Protection Overview of VRRP T raditional network has one and only one gateway to put between internal network and external network. When the lin k of router has some trouble, the user can’t access to internet anymore . But whe[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 79 handles all packets while the others ar e backup devices. When the master one fails, the backup device with highest priori ty will take over the packet handling. Terminology: • VRRP Router: A router running the Virtual Router Redundancy [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 80 PC IP:192.168.1.x Gateway:192.168.1.100 Switch A – ES-4024 downlink network:192.168.1.6 uplink IP:192.168.254.2 uplink gateway:192.168.254.1 virtual IP:192.168.1.100 Switch B – GS-4012F downlink network:192.168.1.5 uplink IP:192.168.25[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 81 Step 1. Configure a PC’s IP as same subnet of switchA (by default, it’s 192.168.1.1). Login switch’s GUI by http://switch’s_IP . Please refer to quick start quick if you got problem at this step. Step 2. Setup the switch A’s VLAN[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 82 a. Go to GUI menu Advanced Application >> VLAN >> Static VLAN >> choose VLAN1 to show the detail. Modify VLAN1 with all ports with “Fixed” and uncheck “Tx Tagging”. Press Add button then. b. Create the VLAN2 via G[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 83 Step 3. Setup the switch A’s IP address of two interfaces for layer 3 routing and its uplink gateway. Take ES-4024 for example. Configure Switch A’s IP setting via GUI menu Basic Setting >> IP Setup . - Default Gateway: 192.168.2[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 84 Step 4. Setup the switch A’s VRRP as the Master of group 1. In the GUI menu Advanced Application >> VRRP , enter the “ Configuration ” link. 1. choose ‘Simple’ for authentication 2. Enter type ‘12345’ for the key. 3. Pr[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 85 Step 5. Setup the switch B’s VLAN to apply the environment. Refer to Step2 for the same setting. Step 6. Setup the switch B’s IP address of two interfaces and uplink gateway. Similar as switch A’s setting at Step3, but different IP a[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 86 1. choose ‘Simple’ for authentication 2. type ‘12345’ for the key and press ‘Apply’ button 3. same ‘Virtual Router ID” (=7 in this example) 4. lower priority (=100 in this example) to be a backup role 5. same uplink gateway[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 87 Scenario 2 – Load Sharing Furthermore, ZyCompany wants to achieve load sharing based on the high availability application. To reach this target, two VRRP groups would be recommended. Each switch is a Master of one VRRP group and also act[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 88 PCs in group1 IP:192.168.1.x Gateway:192.168.1.100 PCs in group2 IP:192.168.1.x Gateway:192.168.1.200 Switch A – ES-4024 downlink network:192.168.1.5 downlink VLAN ID=1 VLAN ID Uplink Interface IP Uplink gateway Virtual IP VRRP ID VRRP R[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 89 Step 1. Here we assume that a ll setting are based on Scenario1’s configuration. Therefor e, we will skip the basic setting in this Scenario. Step 2. Add one more VLAN ID on Switch A for another subnet connecting to ISP2. Same as Scenari[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 90 Step 4. Setup the switch A’s VRRP as the Backup of VRRP group 1. In the GUI menu Advanced Application >> VRRP , enter the “ Configuration ” link. 1. authentication: no change 2. key: no change 3. Then input the VRRP information[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 91 Configure Switch B’s IP setting via GUI menu Basic Setting >> IP Setup . - Default Gateway: no change - Add 3rd IP address for another uplink interface : 192.168.253.3/24 with VID=3 Step 7. Setup the switch B as the Master ro le of[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 92 For Backup, CLI for VRRP no ip vrrp authentication-key • Description: Resets the V RRP authentication settings ip vrrp authentication-key <k> • Description: Sets the VRRP authentic ation key in the routing domain. • Ex: ip vrrp[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 93 name VRRP-7-B primary-virt ual-ip 192.168.1.100 no inactive no preempt[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 94 Centralized Management * Current version of NetAtlas does not support ES-4024A Series Introduction of SNMPc and NetAtlas With the number of network device increase, the demand to detect and respond to the network failure or external event [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 95 Overview of SNMPc The following diagram shows the main elements of SNMPc. SNMPc includes the following function ♦ Main Button Bar : Button and controls to execute commands quickly ♦ Edit Button Bar : Button to quickly insert map elemen[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 96 Overview of EMS The following diagram illustrates the main elements in EMS. EMS contains the four main functions. ♦ Menu Shortcut Bar : The buttons execute common commands ♦ Device Panel : This is a graphical device display . ♦ Devic[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 97 Configuration of adding a new device via SNMPc In the following example, we will illustrate how to get started with SNMPc and Netatlas with adding a new device. Follow the procedures from S tep 1 to S tep 11 . Ste p 1 : In the edit button [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 98 Step 2: In the map object prop erties, give the label name and enter the IP address of the selected device. In this example, we config ure 172.23.3.1 1 as its IP address of your Switch as shown in Figure 5 Figure 5 Map Object Properties St[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 99 Read Access Mode to SNMP V2c. Figure 6 Read Access mode Step 5: In the map object properti es, select Access tab to set the pa rameters of Read /Write Access Mode to SNMP V2c shown in Figure 7. Change the value of Read/write Access Mode to[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 100 Step 6: In the map object properti es, select Access tab to set the pa rameters of Read community to public as shown in Figure 8. Figure 8 Read Community[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 101 Step 7: In the map object propeies, select Access t ab to set the p arameters of Read community to public in Figure 9. Change the value of Read//write Community to Public. Figure 9 Read/write Community Step 8: In the Selection tool menu, [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 102 Step 9: Af ter the selection, a pop-up m enu will display the NetAtlas switch manager diagram. Click the Switch Manager to enter the EMS Mapping shown in Figure 1 1 Figure 1 1 Device Selection Step 10: In the EMS mapping, it display a l o[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 103 Figure 12. Figure 12 Rootmap Ste p 1 1: Click the your Switch to confi gure the device shown in Figure 13. Figure 13 Device mapping[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 104 VLAN Configuration via EMS In this section, we will give an example to illustrate how to use EMS to create a VLAN2 in GS-4024. Here are the procedures. S tep 1: In the device panel list shown in Figure 12, right-click Configuration , Swit[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 105 Figure 14 Selecting a VLAN T ype After the VLAN type selection, a pop- up window indicate s that you have finished the configuration. Then af ter we have defined the VLAN type to be the 802.1Q, go back to click the Configur ation and then[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 106 Figure 15. Figure 15 VLAN Configuration Click the New button to create a new VLAN ID in Figure 16. Figure 16 Creating a new VLAN ID Selecting Egress ports and defines them to be tagged or unt agged in Figure 17 Figure 17 Selecting the por[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 107 For more information, reference the user guide of NetAtlas.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 108 Cluster Management Overview Cluster Management allows you to manage up to 24 switches through a single IP to manage up to 24 switches simultaneously in the same broadcast domain and the same VLAN group ID. The cluster manager which can ma[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 109 A clustering member listens on UDP port 263. When a clustering member receives a request with the matching signature, it an swers with a HDAP Discover Response. In the response, t he clustering member provides identity information about i[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 0 slave switch. • How to set up Cluster Management in switch S tep 1: Go to menu: “Management” Æ ”Cluster Management” Æ ”Clustering Management Configuration” In “Clustering Management Configuration” pages, check the “[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 111 Select a device in the Clustering Candidate table and enter the p assword which is the admin password for the candidate device to add the clustering member . S tep 3:[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 2 Click on the index number to manage the selected clustering member . S tep 4: In “ Member Menu ” p ages, you can change any setting of the clustering member , except Cluster Management, Firmware Upgrade and Restore Configuration. S t[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 3 Enter “ Management ”->” Cluster Management ”->” Clustering Management Stat us :” In “ Clustering Management St atus ” p ages, you can check the status for each member . S tep 6: Enter “ Management ”->” Clus[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 4 checking the remove checkbox and then, click on the Remove button to remove a cluster member .[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 5 Overview of RMON Remote Monitoring (RMON) is a st andard monitoring specification that enables various network monitors and console systems to exchange network-monitoring data. RMON provides network administrators with more freedom in se[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 6 requirements. Each group is optional so that vendors do not need to support all the groups within the Management Info rmation Base (MIB). Some RMON groups require support of other RMON groups to function properly. Table 1 summarizes the [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 7 Matrix S t ores and re t rieves statistics for conversations between sets of two addresses. Source and destination address pairs and packets, bytes, and errors for each pair. Filters Enables packets to be matched by a filter equation for[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 8 Event (1.3.6.1.2.1.16.9) All groups in this MIB ar e optional. (MIB-II is mandatory ) Scenario (ES-4024A Series supports RMON 1.2.3.9) In this illustration, SNMPc En terprise Edition Version 5.1.6c is installed on the PC. And this PC is [...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 11 9 In this scenario, we are going to m onitor the Broadcast Packets by using the RMON MIB. The following wi ll demonstrate the steps to monitor the Broadcast Packets by using SNMPc Enterprise Edition Version 5.1.6c. 1. Methodology of Scenar[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 120 2. Secondly, click on the “Mib” tab a nd expend the SNMP Mi bs’ tree. You will find that there is an “r mon” group over there and again you can expend its sub-tree.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 121 3. Right click the “etherStat sTable” and choose “View Table”[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 122 4. Find the interface or port that you ar e looking for. And you can look at the corresponding field and ther efore find the value that you want to monitor. In this case, we are looking for the Broadcast Packets.[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 123 Try to generate some broadcast tr affic from the probe or your network device, then you should see the BroadcastPkts increasing. 5. In conclusion, if the Switch supports RMON, then you can get the values from the Switch in the RMON Group([...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 124 FA Q What is the default setting of the IP parameters? IP address: 192.168.1.1 Subnet: 255.255.255.0 What is the default logi n Name and Password of the Web Configurator? ID: admin Password: 1234 How to access my SWITCH through the consol[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 125 How to change the password? Web Configurator is the only place y ou can change the p assword. Af ter you log in for the first time, it is recommended you change the default administrator password. From Web Configurator: Click Advanced App[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 126 2. Power off and then power on the Swit ch, and press any key to enter the debug mode when the screen shows “Pre ss any key to enter Debug Mode within 3 seconds.” 3. T ype “atlc” and press the enter key 4. When the message “star[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 127 Is Online Help available on the Web Configurator? Y es, the Web Configurator ’s Online Help is available. Clicking on the Help link will bring up a description of t he online help of that screen. How to restart device from W eb? 1. Clic[...]

ES-4024A Series Switch Support Notes All contents c opyright (c ) 2006 ZyXEL C ommunicat ions Corporati on. 128 operating. What is so called "Dual-Personality interface" in Ethernet Switching? Dual-Personality GbE interface means that one 1000Base-T Copper port and one SFP port share the same physical inte rface. Only one of them can be u[...]