Home

ZyXEL ES-1552 User's Manual

1. RMON Lite RMON MIB Table m Statistics Apply Help RMON Statistics Overview Refresh Help bees Owner Status Eos Owner Status Port 01 monitor Disabled Port27 monitor Disabled Port 02 monitor Disabled Port 28 monitor Disabled Port 03 monitor Disabled Port 29 monitor Disabled Port 04 monitor Disabled Port 30 monitor Disabled Port 05 monitor Disabled Port 31 monitor Disabled Port 06 monitor Disabled Port 32 monitor Disabled Port 07 monitor Disabled Port 33 monitor Disabled Port 08 monitor Disabled Port 34 monitor Disabled Port 09 monitor Disabled Port 35 monitor Disabled Port 10 monitor Disabled Port 36 monitor Disabled Port 11 monitor Disabled Port 3 monitor Disabled Port 12 monitor Disabled Port 38 monitor Disabled Port 13 monitor Disabled Port 39 monitor Disabled Port 14 monitor Disabled Port 40 monitor Disabled Port 15 monitor Disabled Port 41 monitor Disabled Port 16 monitor Disabled Port 42 monitor Disabled Port 17 monitor Disabled Port43 monitor Disabled Port 18 monitor Disabled Port 44 monitor Disabled Port 19 monitor Disabled Port 45 monitor Disabled Port 20 monitor Disabled Port 46 monitor Disabled Port 21 monitor Disabled Port 47 monitor Disabled Port 22 monitor Disabled Port
2. SUBNET MASK HOST ID SIZE MAXIMUM NUMBER OF HOSTS 8 bits 255 0 0 0 24 bits 242 16777214 16 bits 255 255 0 0 16 bits 216_2 65534 24 bits 255 255 255 0 8 bits 28 2 254 29 bits 255 255 255 248 3 bits 0925 6 Notation Since the mask 1s always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet This is usually specified by writing a followed by the number of bits in the mask after the address For example 192 1 1 0 25 is equivalent to saying 192 1 1 0 with subnet mask 255 255 255 128 The following table shows some possible subnet masks using both notations Table 78 Alternative Subnet Mask Notation ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION BINARY DECIMAL 255 255 255 0 124 0000 0000 0 255 255 255 128 25 1000 0000 128 ES 1552 User s Guide Appendix B IP Addresses and Subnetting Table 78 Alternative Subnet Mask Notation continued suaner non AUR T innen SER 255 255 255 192 26 1100 0000 192 255 255 255 224 27 1110 0000 224 255 255 255 240 28 1111 0000 240 255 255 255 248 29 1111 1000 248 255 255 255 252 30 1111 1100 252 Subnetting You can use subnetting to divide one network into multiple sub networks In
3. 67 Alem 69 0 pm ANAKAN oh we was dag KA AG KIN ANAN AA AA 71 Port Rate Limit and Storm Conwell iaasa maka BANNA a i R PLE AE 79 Layer 2 L2 Management magana AN NN psc ANN aa Aa 83 a AA 87 Aute Dental pr Series DOSY AAO AP POOH ON 89 PA ak AA AA AA AA AA AA 93 Management and Troubleshooting cccccccsssseeseneeeseeeeeseeseeeeeeeeeessseneeeeeeeeeeeeseeeeeseenees 95 Even GOC I ERREUR UU UU UI D 97 SNMP M 105 cr EDS P HC 119 UR il c C 135 Bs s gpn e 139 Appendices and MASK aet m 147 ES 1552 User s Guide 9 Contents Overview ES 1552 User s Guide Table of Contents Table of Contents About This User s Gilde saasina Eaa aa iaia 3 Document Conventos Mee 4 ct War i eet T PT 6 Contents COVEN WIG PR 9 Table of COMTGINIS io icc a dax acl iac adaa akaa aaas CRM Far RE Eb de EE 11 stor ROWO qc 17 List of TANG mer 21 Part I Introduction and Hardware Overview 25 Chapter 1 Getting to Know Your SWING Mi aa GIKAN 27 Uus men 27 T T A Backbone PE DIMSE 27 LLEBO E IE e 28 1
4. H for hours M for minutes and S for seconds Owner This field displays the name of the creator of this entry Delete Click this to remove the selected event configuration 19 6 1 RMON Event Create New Event Use the RMON Event Create and the RMON Event Modify screens to configure RMON events Click Create new Event in the RMON Event Overview screen to view the screen as shown You can also click an event index number in the RMON Event Overview screen to edit an existing event configuration The RMON Event Modify screen contains the same fields as the RMON Event Create screen shown as Figure 81 on page 131 ES 1552 User s Guide Chapter 19 RMON Lite Figure 81 RMON Event Create New Event RMON Lite Event Overview RMON MIB Table 3 Event bd Apply Help RMON Event Create New Event Help Index 2 Description Type None C Log SNMP Trap Log and Trap Community Owner Apply The following table describes the labels in this screen Table 63 RMON Event Configuration Screens LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Index This field displays the index number of the event entry Description Enter a description of the event You can use 1 127 printable ASCII characters Spaces
5. Table 39 SNMP Traps OBJECT LABEL OBJECT ID DESCRIPTION SNMPv1 SNMPv2 Trap Inform Requests authenticationFailure 1 3 6 1 6 3 1 1 5 5 This trap is sent when an SNMP request comes from non authenticated hosts RFC2819 Traps alarmEntry 1 3 6 1 2 1 16 3 1 1 A RMON event has been triggered 18 1 3 SNMP v3 and Authentication SNMP v3 adds the concept of groups and users to enhance security for SNMP management A user is an SNMP manager A group is a group of SNMP managers that are assigned common access rights to MIBs For example one group of managers may only have access to agents with MIB II System Group MIBs while another may have access to agents with the Ether like MIB ES 1552 User s Guide Chapter 18 SNMP In addition SNMP managers can also be required to authenticate with agents before conducting SNMP management sessions BES SNMP v3 is enabled when you create SNMP groups and users Once SNMP v3 is enabled you must configure unique SNMP communities for SNMP v1 and or SNMP v2c access 18 1 4 SNMP EnginelD The SNMP Engine ID is a unique identifier that identifies agents to the managers The default SNMP Engine ID is the MAC address of the agent You can change this Use the SNMP EngineID screen to specify the Engine ID for the switch Click SNMP gt EnginelID in the navigation panel to view the screen as shown Figure 58 SNMP EnginelD SNMP EnginelD Hel p O Engine
6. Trunk Group Member Trunk Group Member Trunk 5 Maximal number of ports per trunk 8 Apply The following table describes the labels in this screen Table 15 Trunking Configuration LABEL DESCRIPTION Distribution Trunking uses a distribution algorithm to balance traffic between trunk members Criterion Select the traffic distribution algorithm between trunk member ports Your choices are SA Source MAC Address DA Destination MAC Address SA DA Modify Trunk Configure the following settings to create and modify trunk groups Group Member Trunk id Select the trunk you want to modify or select a trunk id which is not yet configured to create a new trunk group Port Select the port you want to add or delete Add Click this to add the port to the trunk group you selected in the Trunk id field Del Click this to delete the port from the trunk group you selected in the Trunk id field Trunk 1 This summary table lists all the trunks Trunk Group Member column indicates which Trunk 6 ports are members of the trunk group Apply Click Apply to save your changes to the switch ES 1552 User s Guide Mirroring This chapter discusses port mirroring 10 1 Port Mirroring Settings Port mirroring allows you to copy traffic flow to a monitor port the port you copy the traffic to in order that you can examine the traffic from the mirrored port without interference
7. 49 2405 6909 99 Web Site www zyxel de Regular Mail ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany Hungary Support E mail support zyxel hu Sales E mail info zyxel hu Telephone 36 1 3361649 Fax 36 1 3259100 Web Site www zyxel hu Regular Mail ZyXEL Hungary 48 Zoldlomb Str H 1025 Budapest Hungary Kazakhstan Support http zyxel kz support Sales E mail sales zyxel kz ES 1552 User s Guide Appendix D Customer Support Telephone 7 3272 590 698 Fax 7 3272 590 689 Web Site www zyxel kz Regular Mail ZyXEL Kazakhstan 43 Dostyk ave Office 414 Dostyk Business Centre 050010 Almaty Republic of Kazakhstan North America Support E mail support zyxel com Sales E mail sales zyxel com Telephone 1 800 255 4101 1 714 632 0882 Fax 1 714 632 0858 Web Site www us zyxel com FTP Site ftp us zyxel com Regular Mail ZyXEL Communications Inc 1130 N Miller St Anaheim CA 92806 2001 U S A Norway e e e e Support E mail support zyxel no Sales E mail sales zyxel no Telephone 47 22 80 61 80 Fax 47 22 80 61 81 Web Site www zyxel no Regular Mail ZyXEL Communications A S Nils Hansens vei 13 0667 Oslo Norway Poland e LI e E mail info pl zyxel com Telephone 48 22 333 8250 Fax 48 22 333 8251 Web Site www pl zyxel com Regular Mail ZyXEL Communications ul Okrzei 1A 03 715 Warszawa Poland
8. Set Enable ear Help RMON MIB Object Value RMON MIB Object Value IStatsDropEvents 0 StatsJabbers 0 IStatsOctets 0 StatsCollisions 0 StatsPkts 0 IStatsPkts64Octets lo StatsBroadcastPkts 0 StatsPkts65to1270ctets 0 StatsMulticastPkts 0 IStatsPkts 128t02550ctets O IStatsCRCAlignErrors 0 StatsPkts256t05110ctets 0 StatsUndersizePkts 0 StatsPkts512t010230ctets 0 StatsOversizePkts 0 IStatsPkts1024t015180ctets 0 StatsFragments 0 Statistics Overview The following table describes the labels in this screen Table 55 RMON Statistics Port LABEL DESCRIPTION RMON MIB Table Use this drop down list box to select the MIB table you want to view Click Apply to refresh the screen to the selected MIB table view Set Enable Click this to activate statistics gathering for this port Clear Click this to reset all statistics values to O Refresh Click this to update all the fields in the RMON Statistics Port screen RMON MIB Object This column displays all types of statistics gathered for this port It displays the results in the Value column StatsDropEvents This field displays the total number of packets that were dropped StatsOctets This field displays the total number of octets received StatsPkts This field displays the total number of all good packets received StatsBroadcastPkts This field displays the total number of good broadcast packets received StatsMulticastPkts This f
9. gt Java Sun Use Java 2 v1 4 1 07 for applet requires restart 3 Microsoft VM Ld a console enabled requires restart E os jogging enabled Ni ompiler for virtual machine enabled requires restart Multimedia O Always show Internet Explorer 5 0 or later Radio toolbar O Don t display online media content in the media bar Enable Automatic Image Resizing Md b Restore Defaults Cancel Apply ES 1552 User s Guide Chapter 21 Troubleshooting ES 1552 User s Guide PART IV Appendices and Index This part contains the following chapters Product Specifications 149 IP Addresses and Subnetting 151 Legal Information 161 Customer Support 165 ndex 169 Product Specifications This section describes the general software features of the switch Table 74 Firmware Features FEATURE DESCRIPTION VLAN A VLAN Virtual Local Area Network allows a physical network to be partitioned into multiple logical networks Devices on a logical network belong to one group A device can belong to more than one group With VLAN a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router Layer 2 Management Forward traffic based on the destination MAC address and VLAN group ID QoS Queuing is used to help solve performance degradation when there is network congestion Two s
10. Click Mirror in the navigation panel to display the Mirror Setting screen Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port Figure 35 Mirror Setting Mirror Setting Help Mode Enabled 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 t6 t7 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 mlololololololololololololololololololololololololo Ingress Mirror P L T T1 T T T IT T IT 1 1 1 T pnipninijipnipipipnipBnipnipnipipimsinsinmipipipinminmpsipnmipmipinm5np 0 0 0 0 0 60 60 60 60 60 60 60 60 6 60 6 6 6 6 6 6 6 6 6 6 0 Egress Mirror NE Ps Pe bn a oe eee DA amay png be paang eee paang asar mmm Gear ee mara aang gaang Dp pBpnpBiwmivenimp mmpnmnpt ippbipmigippmmpp6npipmbpp p elololoclololololololololololioioclolololeloiololololo Mirror To f f f i f o lojlojojolojoj ojojejo olo ojoejo ojo oj o oj o o o ojo Apply The following table describes the labels in this screen Table 16 Mirror Setting LABEL DESCRIPTION Mode Select Enabled to turn on port mirroring or select Disabled to turn it off Ingress Select the ports for which you want to monitor the ingress incoming traffic Mirror Egress Select
11. ES 1552 User s Guide Chapter 17 Event Logging ES 1552 User s Guide SNMP This chapter describes how to user Simple Network Management Protocol SNMP to manage and monitor the switch 18 1 About SNMP Simple Network Management Protocol SNMP is an application layer protocol used to manage and monitor TCP IP based devices SNMP is used to exchange management information between the network management system NMS and a network element NE A manager station can manage and monitor the switch through the network via SNMP version one SNMPv1 SNMP version 2c or SNMP version 3 The next figure illustrates an SNMP management operation SNMP is only available if TCP IP is configured Figure 57 SNMP Management Model Manager i Y Agent Agent Agent Managed Device Managed Device Managed Device An SNMP managed network consists of two main components agents and a manager An agent is a management software module that resides in a managed switch the switch An agent translates the local management information from the managed switch into a form compatible with SNMP The manager is the console through which network administrators perform network management functions It executes applications that control and monitor managed devices The managed devices contain object variables managed objects that define each piece of information to be collected about a switch Examples of variables include number of packets received node
12. For example 192 168 1 1 Network Submask Enter the IP subnet mask of your switch in dotted decimal notation for example 255 255 255 0 Gateway Enter the IP address of the default outgoing gateway in dotted decimal notation for example 192 168 1 5 5 1 2 Layer 2 L2 Table Aging L2 Table Aging defines the aging time of the Address Resolution Logic ARL table This table learns and remembers MAC addresses of devices sending information through it See Chapter 13 on page 83 for more background information Click the link in the L2 Table Aging field to see the screen as shown next Figure 21 Configure L2 Table Aging L2 Table Aging Apply Enable L2 Table Aging Aging Time seconds Setting to O also disables aging ES 1552 User s Guide Chapter 5 System Select the Enable L2 Table Aging checkbox and enter the amount of time in seconds up to 1048575 that the switch remembers MAC address entries Select O to disable L2 table aging Click Apply to save your configuration changes 5 1 3 Backup Settings Backing up your switch configurations allows you to create various snap shots of your device from which you may restore at a later date Back up your current switch configuration to a computer using the Backup Settings link Follow the steps below to back up the current switch configuration 1 Click Backup 2 Click Save to display the Save As screen 3 Choose a location to save t
13. The following table describes the labels in this screen Table 64 RMON Event Log Overview LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON Event Log Overview screen Event Index This field displays an event index number Event Type This field displays the action taken when this event occurred None Log Trap or Log and Trap Last Time Sent This field indicates the value of system up time on the switch when this event was last generated It appears in the following format XXD XXH XXM XXS where XX stands for a number and D stands for days H for hours M for minutes and S for seconds Owner This field displays the entry creator It displays monitor if the entry was created by the switch itself 19 7 1 RMON Event Log Event Use the RMON Event Log Event screen to view the details of existing RMON event log entries Click on the specific Event Index numbers in the RMON Event Log Overview screen to view the screen as shown Figure 83 RMON Event Log Event RMON Lite RMON MIB Table 9 Event Log v Apply Help RMON Event Log Event Index 1 Refresh Help Log Index Log Time Log Description Event Log Overview 132 ES 1552 User s Guide Chapter 19 RMO
14. This field is only active if there are more VLANs than can be displayed on one screen Next Page Click this button to view VLANs with higher identification numbers This field is only active if there are more VLANs than can be displayed on one screen ES 1552 User s Guide Chapter 8 VLAN 8 2 2 Create IEEE 802 1Q VLAN Screen See Section 8 1 on page 63 for more information on VLANs Click VLAN in the navigation panel to display the IEEE 802 1Q VLAN screen as shown next Figure 32 VLAN Create VLAN All IEEE 802 1Q VLAN Help New VLANID 2 4094 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 U 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 Click the icon under each port to change member state To change state of all ports click the icon under All Not member T Tag egress packets U Untag egress packets Create Cancel The following table describes the labels in this screen Table 13 VLAN Create VLAN LABEL DESCRIPTION New VLAN ID Enter the VLAN ID of the VLAN you want to create ALL This button allows you to configure all the ports at once Click this button to change the state of all the ports at once The possible states are empty This indicates that the port is not part of the VLAN T This indicates that this port is a member of the VLAN When the packet leaves the member port th
15. management model 105 manager 105 MIB 106 network components 105 object variables 105 protocol operations 106 setup 107 traps 106 user 110 versions supported 105 SNMP Simple Network Management Protocol 105 SNMP traps 106 SP Strict Priority queuing 71 start up problems 139 static MAC address 83 ES 1552 User s Guide Index static MAC forwarding 83 84 status 44 LED 38 port details 53 60 VLAN 64 66 subnet 153 subnet mask 154 subnetting 156 switch lockout 47 switch reset 47 switching 150 syntax conventions 4 system control 151 system status 49 T tagged VLAN 63 trademarks 161 transceiver installation 36 removal 37 traps SNMP 106 troubleshooting 139 start up 139 trunk group 67 trunking 28 67 150 configuration 68 distribution criterion 67 Type of Service ToS 75 V ventilation holes 32 VID 63 number of possible VIDs 63 priority frame 63 VID VLAN Identifier 63 viewing MAC entries 84 VLAN 63 150 create 65 editing 66 ID 63 status 64 tagged 63 tagged and untagged 65 W warranty 162 note 163 web configurator 43 getting help 48 home 44 49 LED panel 45 login 43 logout 47 navigation 44 45 weight of the switch 151 weight queuing 71 Weighted Round Robin scheduling WRR 71 WRR Weighted Round Robin scheduling 71 ES 1552 User s Guide
16. 1 3 High Pertommanee Switching Example 22 ases naa rinnen haa ae 28 1 14 IEEE 802 10 VLAN Application Exemples i e esr errat tr kept Era t bk aa D n taa 29 Chapter 2 Hardware Installation and Connection ecce ceieeeeeeeee e eere nennen enun nana nana nana 31 FREI iml sre Tr 31 za Mou abe SWIG GN A TRACK AA NN RAE NAK AA 32 2 2 1 Rack mounted Installation Requirements sess 32 2 2 2 Attaching the Mounting Brackets to the Switch ssse 32 24 3 MOUNTING the Switch on a RACK uu 33 Chapter 3 Hardware COV poc roii N EA S AE SS KAEA AERA ANSE RAEE 35 3 1 Panel Connections and the RESET Button cceccecceceeececceeceeeeteeeeeeeeeeeeneaeeaeceeeeeeeeeees 35 3 13 AA 35 Bl NINO SIG anakan ANAN TK EFE ME AEEUV HH EE VEA RULES XV n EAE AIIB IBA 36 Ss INE REEL EUO T E T 37 AREA M a TN 38 ES 1552 User s Guide LE Table of Contents ani PANG uci err M 38 zr 48 ccm TURNER 38 Part Il Basic amp Advanced Settings 44 Chapter 4 ThE WEB COBTHUEFBEDE cani PEROHERO NIA NBI eo OENE nna MANANAIG 43 Libero mE 43 Lr cu uk A M 43 LSU ahas ge TE 44 4314 The LED Panel ANG ANA DAANAN ADIK ANNA ASA AA 45 Hg NG sausage UR 45 An anO Yow Paagi maa GRAN AA es 46 CE MC Uno geris nasaan as KA AA AN NAA AA AG 47 da ne LIE 020 ABA ATA A cau AA AA ANA K
17. 100 1000 Base Tx ports Auto negotiation Auto MDIX Compliant with IEEE 802 3ad u x Back pressure flow control for half duplex Flow control for full duplex IEEE 802 3x Layer 2 Features Bridging 8K MAC addresses Static MAC address forwarding by destination 8 static entries Broadcast storm control Static MAC address forwarding Switching Switching fabric 12 8Gbps non blocking Max Frame size 1522 bytes Forwarding frame IEEE 802 3 IEEE 802 1q Ethernet Il PPPoE Prevent the forwarding of corrupted packets QoS IEEE 802 1p 4 priority queues per port Port based egress traffic shaping DSCP to IEEE 802 1p mapping ToS to IEEE 802 1p mapping Source IP based prioritization of traffic VLAN Tag based IEEE 802 1Q VLAN Number of VLAN 4K 256 static maximum Port Aggregation Supports static port trunking Six groups up to 8 ports each Port mirroring All ports support port mirroring Rate control Supports rate limiting from 64 Kbps to 1 Gbps on a port by port basis for incoming traffic Supports egress traffic shaping via the bucket token algorithm Security Static MAC address filtering Dynamic ARP filtering 16 Static Entries ES 1552 User s Guide Appendix A Product Specifications Table 73 Management Specifications System Control Alarm Status surveillance LED indication for power status Performance monitoring Line s
18. 60 RMON Alarm Overview LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON Alarm Overview screen Create new Click this to view the RMON Alarm Create New Alarm screen where you can Alarm configure the parameters for an alarm Index This field displays the alarm configuration index number Click this number to edit the alarm entry Interval sec This field displays the time interval in seconds between data samplings Variable This field displays the name of the MIB field whose data is to be sampled Sample Type This field displays the method of obtaining the sample value absoluteValue or deltaValue Value This field displays the value of the statistic during the last sampling period This value is for comparing against the RisingThreshold and FallingThreshold values Startup Alarm This field displays the alarm type 1 rising 2 falling or 3 risingOrFallingAlarm that can be sent when this alarm is first activated ES 1552 User s Guide Chapter 19 RMON Lite Table 60 RMON Alarm Overview continued LABEL DESCRIPTION RisingThreshol This field displays the rising threshold value set up for this alarm d FallingThreshol d This field displays the falling threshold value set up for this
19. Based QoS QoS Enhancement Setting Help Mode Port Based QoS 7 Change Priority Port h x Priority fo 7 Change Port Priority Port Priority 01 oO Ean 0 02 0 IEJ 0 03 0 29 0 04 0 30 0 05 31 0 06 0 32 0 07 0 33 0 08 0 34 0 og 0 35 0 10 0 36 0 11 0 37 0 12 0 38 0 13 0 39 0 14 0 40 0 15 0 44 0 16 0 42 0 17 0 43 0 18 0 lag 0 19 0 45 0 20 0 46 0 24 0 47 0 22 0 48 0 23 0 49 0 24 0 50 0 25 0 51 0 26 0 52 0 Apply Change Settings ES 1552 User s Guide Chapter 11 QoS The following table describes the labels in this screen Table 18 Port Based QoS LABEL DESCRIPTION Mode Select Port Based QoS to specify priority rules based on the port of incoming packets Change Configure the following Priority Port Select the number of the port for which you want to assign IEEE 802 1p priority to incoming frames Priority Select the IEEE 802 1p priority you want to assign to the packets coming into the switch on the port specified in the Port field Click Change to view your changed settings Note The changes are not applied until you click Apply Change Settings Port This is a summary table of your port to IEEE 802 1p priority mappings The Port column Priority indicates the port number of the incomi
20. In Internet Explorer select Tools Internet Options and then the Privacy tab 2 Select Settings to open the Pop up Blocker Settings screen ES 1552 User s Guide Chapter 21 Troubleshooting Figure 89 Internet Options Internet Options General Security Privacy Content Connections Programs Advanced Settings e Move the slider to select a privacy setting for the Internet m zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable C3 information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker S Prevent most pop up windows from appearing Block pop ups Settings 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the IP address to the list of Allowed sites Figure 90 Pop up Blocker Settings Pop up Blocker Settings Exceptions Pop ups are currently blocked You can allow pop ups from specific Web sites by adding the site to the list below Address of Web site to allow http 192 168 1 1 Add Allowed sites Notifications and Filter Level Play a sound when a pop up is blocked Show Information Bar when a pop up is blocked Filter Level Me
21. Logs Flash screen in the following figure Figure 54 Logs RAM Flash Logs RAM Search Export Help Page 1 of 2 Goto page 1 2 Next No Index Level Category Time Message MEM 1 88 INFO RMON 2006 5 1 1 30 03 Reclaiming set age tid 1 row_id 1 2 e INFO RMON 2006 5 1 1 30 03 Reclaiming set agettid 1 row id 1 3 86 INFO PERSISTENCE 2006 5 11 27 34 Current settings for group 02000000 saved 4 85 INFO RMON 2006 5 11 19 38 Alarm table entry created index 1 5 84 INFO PERSISTENCE 2008 5 11 18 11 Current settings for item Tmon saved B pA INFOS BAON 2208 5441 1744 Brent tabi entrzaceate index a7 42 INFO NETWORK 2006 5 10 16 59 Start DHCP process with network interface eth as n INFO WEB 2008 5 10 16 53 User admin logined from 192 168 0 236 49 40 INFO PORT 2008 5 101500 WSS Link change UP port 2 100Mb Full Duplex i so 39 INFO PORT 2008 5 101500 WSS Linkchange UP port 14 100Mb Full Duplex The following table describes the labels in this screen Table 35 Logging RAM Flash LABEL DESCRIPTION Search Click this to search for specific log entries Export Click this to export save the log The logs default name is events csv A csv Comma Separated Values file can be viewed by most spreadsheet software such as Microsoft s Excel No This is the number of the log entry The log entries with the lo
22. Ports in the same VLAN group share the same frame broadcast domain thus increase network performance through reduced broadcast traffic VLAN groups can be modified at any time by adding moving or changing ports without any re cabling Shared resources such as a server can be used by all ports in the same VLAN as the server In the following figure only ports that need access to the server need to be part of VLAN 1 Ports can belong to other VLAN groups too Figure 4 Shared Server Using VLAN Example lt LE gt ae rA See m eee eee eee eee ES 1552 User s Guide Chapter 1 Getting to Know Your Switch ES 1552 User s Guide Hardware Installation and Connection This chapter shows you how to install and connect the switch 2 1 Freestanding Installation 1 Make sure the switch is clean and dry 2 Set the switch on a smooth level surface strong enough to support the weight of the switch and the connected cables Make sure there is a power outlet nearby 3 Make sure there is enough clearance around the switch to allow air circulation and the attachment of cables and the power cord 4 Remove the adhesive backing from the rubber feet 5 Attach the rubber feet to each corner on the bottom of the switch These rubber feet help protect the switch from shock or vibration and ensure space between devices when stacking Figure 5 Attaching Rubber Feet ES 1552 User s Guide 34 Chapter 2
23. Russia e Support http zyxel ru support Sales E mail sales zyxel ru Telephone 7 095 542 89 29 Fax 7 095 542 89 25 Web Site www zyxel ru Regular Mail ZyXEL Russia Ostrovityanova 37a Str Moscow 117279 Russia Support E mail support zyxel es Sales E mail sales zyxel es Telephone 34 902 195 420 Fax 34 913 005 345 ES 1552 User s Guide Appendix D Customer Support Web Site www zyxel es Regular Mail ZyXEL Communications Arte 21 5 planta 28033 Madrid Spain Sweden Support E mail support zyxel se Sales E mail sales zyxel se Telephone 46 31 744 7700 Fax 46 31 744 7701 Web Site www zyxel se Regular Mail ZyXEL Communications A S Sj porten 4 41764 G teborg Sweden Ukraine Support E mail support ua zyxel com Sales E mail sales ua zyxel com Telephone 380 44 247 69 78 Fax 380 44 494 49 32 Web Site www ua zyxel com Regular Mail ZyXEL Ukraine 13 Pimonenko Str Kiev 04050 Ukraine United Kingdom Support E mail support zyxel co uk Sales E mail sales zyxel co uk Telephone 444 1344 303044 08707 555779 UK only Fax 44 1344 303034 Web Site www zyxel co uk FTP Site ftp zyxel co uk Regular Mail ZyXEL Communications UK Ltd 11 The Courtyard Eastern Road Bracknell Berkshire RG12 2XB United Kingdom UK is the prefix number you dial to make an international telephone call ES 1552 User s Guide
24. TEDE pan AG KANG E AG 137 TEE OS ARP TADE pA ANNA AABANG ABANGAN UAE 138 Table 69 Troubleshooting the Start Up of Your Switch 139 Table 70 Troubleshooting Accessing Uie BANNA GAGANDA EH Od eer Hp I REFERS 139 U EXE 5113 Gates ATTI TOES 149 Tabe 72 General Product Specifications GABI esnean E ERRP exp E SPA t I EUN EAR MEER Na KAn ERE 150 Table 73 Management SDOCINCIONRS iuueni osse dvor ee prr GAAN AA NG 151 Table 74 Physical and Environmental Specifications 4 seed neret bored rni rn ANAN 151 Table 15 ubmnet Mask EXSImplg op vet ut ee E prater ebria n era te oes ta abeo bir aa E re aS ma MM 154 Wee 79 Subnet MASKS e 155 THE 77 Maadmum Host NUMDETS aman KAAU AA ANAK NAAN bedded ANA 155 Table 78 Alternative Subnet Mask Notation 5 GNG na N N 155 TANG T9 DUET T a ANAN ea oen or AA AA AA 157 le AN AA Cire 158 D assu aa AA GAAN ENNA 158 22 ES 1552 User s Guide List of Tables TANG Oe SUBD E ai 158 aaa EN UDONG 158 Table 84 24 bit Network Number Subnet Planning 2X aa aa aaa aaa 159 Table 85 16 bit Network Number Subnet Planning 211111111111777 eene eet natn tna 159 ES 1552 User s Guide 23 List of Tables ES 1552 User s Guide PART Introduction and Hardware Overview Getting to Know Your Switch This chapter introduces the main features and applications of the switch 1 1 Introduction The ES 1552
25. Trap Station Help Remote IP Address Community String public Create Cancel ES 1552 User s Guide Chapter 18 SNMP The following table describes the labels in this screen Table 52 SNMP Trap Station Create LABEL DESCRIPTION Remote IP Enter the IP address of the remote trap station in dotted decimal notation Address Community Specify the community string used with this remote trap station String Create Click this to add this SNMP user to the switch Cancel Click this to go back to the main SNMP Group screen without saving your changes 18 6 2 SNMP Trap Station Modify Click on the Trap Station ID number or select a Trap Station ID from the Trap Station ID drop down list box in the SNMP Trap Station screen to modify the settings of an existing trap station Figure 71 SNMP Trap Station Modify SNMP Trap Station Help Trap ID 1 Remove This Trap Station Display All Trap Station Remote IP Address 192 168 1 3 community String public Apply The following table describes the labels in this screen Table 53 SNMP Trap Station Modify LABEL DESCRIPTION Trap ID This field indicates which trap station you are modifying Click on Remove This Trap Station to delete this trap station configuration from the switch Click on Display All Trap Station to view the main SNMP Trap Station screen Remote IP Enter the IP address of
26. alarm Rising Event Index This field indicates the index number of the event entry which corresponds to the time when the alarm threshold was crossed Falling Event Index This field indicates the index number of the event entry which corresponds to the time when the alarm threshold was crossed Owner This field displays the name of the creator of this entry Delete Click this to remove the selected alarm entry 19 5 1 RMON Alarm Create New Alarm Use the RMON Alarm Create New Alarm screen to configure RMON alarms Click Create new Alarm view the screen as shown You can also click an alarm index entry in the RMON Alarm Overview screen to edit an existing alarm configuration The RMON Alarm Modify screen contains the same fields as the RMON Alarm Create New Alarm screen in the following figure Figure 79 RMON Alarm Create New Alarm RMON Lite RMON MIB Table 3 Alarm Apply Help RMON Alarm Create New Alarm Herp Index 1 Interval Sec p Interface Pto v Counter cRCAlignErrors Sample Type Absolute v Startup Alarm Rising Threshold v Rising Threshold n Falling Threshold lh Rising Event O NonefUnasigned Falling Event O NonefUnasigned Owner a Apply ES 1552 User s Guide Chapter 19 RMON Lite The following table describes the labels in this screen Table 61 RMON Alarm Create Ne
27. and delete event entries configured on the switch Select 9 Event from the RMON MIB Table drop down listbox in the RMON Lite screen to view the screen as shown Figure 80 RMON Event Overview RMON Lite RMON MIB Table 3 Event X Heb RMON Event Overview Refresh Help Create new Event Index Description Type Community 1 Fire 1 None one Owner monitor Last Time Sent 0D 0H 0M 0S Delete DELETE ES 1552 User s Guide Chapter 19 RMON Lite The following table describes the labels in this screen Table 62 RMON Event Overview LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON Event Overview screen Create new Click this to configure new events on the switch Event Index This field displays an event index number Click this number to edit the event entry Description This field displays a description of the event Type This field displays the event type 1 None 2 Log 3 SNMP Trap 4 Log and Trap Community This field displays the community or SNMP trap Last Time Sent This field indicates the value of system up time on the switch when this event was last generated It appears in the following format XXD XXH XXM XXS where XX stands for a number and D stands for days
28. as round robin scheduling but services queues based on their priority and queue weight the number you configure in the queue Weight field rather than a fixed amount of bandwidth WRR is activated only when a port has more traffic than it can handle Queues with larger weights get more service than queues with smaller weights This queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied 11 1 2 Strict Priority Strict priority scheduling singles out the highest priority queue and ensures all queued traffic in this queue is transmitted before servicing the lower priority queues Strict priority scheduling services the remaining queues using WRR As traffic comes into the switch traffic on the highest priority queue Queue 3 is transmitted first Only when that queue empties traffic on the lower priority queues is transmitted using WRR scheduling ES 1552 User s Guide Chapter 11 QoS 11 2 QoS Enhancement You can configure the switch to prioritize traffic even if the incoming packets are not marked with IEEE 802 1p priority tags or change the existing priority tags based on the criteria you select The switch allows you to choose one of the following methods for assigning priority to incoming packets on the switch Port Based QoS Assign priority to packets based on the incoming port on the switch See Section 11 4 1 on page 7
29. com Regular Mail ZyXEL Communications Corp 6 Innovation Road II Science Park Hsinchu 300 Taiwan Costa Rica Support E mail soporte zyxel co cr Sales E mail sales zyxel co cr Telephone 506 2017878 Fax 506 2015098 Web Site www zyxel co cr FTP Site ftp zyxel co cr Regular Mail ZyXEL Costa Rica Plaza Roble Escaz Etapa El Patio Tercer Piso San Jos Costa Rica Czech Republic E mail info cz zyxel com Telephone 420 241 091 350 Fax 420 241 091 359 Web Site www zyxel cz Regular Mail ZyXEL Communications Czech s r o Modransk 621 143 01 Praha 4 Modrany Cesk Republika ES 1552 User s Guide Appendix D Customer Support Denmark Support E mail support zyxel dk Sales E mail sales zyxel dk Telephone 45 39 55 07 00 Fax 45 39 55 07 07 Web Site www zyxel dk Regular Mail ZyXEL Communications A S Columbusvej 2860 Soeborg Denmark Finland Support E mail support zyxel fi Sales E mail sales zyxel fi Telephone 358 9 4780 8411 Fax 358 9 4780 8448 Web Site www zyxel fi Regular Mail ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland France E mail info zyxel fr Telephone 33 4 72 52 97 97 Fax 33 4 72 52 19 20 Web Site www zyxel fr Regular Mail ZyXEL France 1 rue des Vergers Bat 1 C 69760 Limonest France Germany Support E mail support zyxel de Sales E mail sales zyxel de Telephone 49 2405 6909 69 Fax
30. configuration settings 122 ES 1552 User s Guide Chapter 19 RMON Lite Figure 74 RMON History Control Overview RMON Lite RMON MIB Table 2 History Control Apply Help RMON History Control Overview Refresh Help Data Bucket Bucket Interval Source Requested Granted Sec masabi 1 Port 01 50 50 1800 monitor Disabled 2 Port 02 50 50 1800 monitor Disabled 3 Port 03 50 50 1800 monitor Disabled 4 Poto4 50 i so 1800 monitor Disabled 5 Port 05 50 50 1800 monitor Disabled 6 Pono 50 50 1800 monitor Disabled The following table describes the labels in this screen Table 56 RMON History Control Overview LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON History Control Overview screen Index This field displays the configuration index number Data Source This is the port of the switch polled for data Bucket This field displays the number of data samplings the network manager requests the Requested probe to store Bucket Granted This field displays the number of data samplings the probe allows to store Interval sec This field displays the time between data samplings Owner This field displays the entry creator It displays monitor if the entry was create
31. default configuration settings Follow the instructions in the screen below to reset or restart the switch Figure 26 System Restart Reset Restart Reset The Reset to Factory Defaults will reset the switch to Factory Defaults All configuration information including the IP address will be removed and the connectivity to the switch will be lost The Restart Switch option will restart the switch with current configuration Restart Switch C Resetto Factory Defaults Submit ES 1552 User s Guide 53 Chapter 5 System ES 1552 User s Guide Port Settings This chapter describes how to view and configure the port settings on the switch 6 1 Port Status Use this screen to view switch port settings Click System gt Port in the navigation panel to display the Port Status screen Figure 27 Port Status E Glan L x paa kal PORT Status Sala Duplex Control iind Status ZEE MF LEA E A Down 1 2z Down deme g 28 Down 30 Down Speed Duplex EIE E Control Refresh Help Flow Baal 34 Down 05 Down 31 31 Down 06 mom 3 RE 32 Down ping BEN Ha 09 Down 35 Down 36 Down 37 Down 1 1 1 1 1 1 12 Down 1 38 Down 1 13 Down 1 39 Down 1 14 Down 1 40 Down 1 15 Down m Sr ib 100Mbps Full Disa
32. ip asaan ANGKAN A E E E E E 69 Poue 20 OOS BEING inin ETSE EEES 72 Figure 37 Change Number of QUGUGS aa en epe R E AARAL ERA BAG ARAA 73 Figure 30 Port Based DOT e 74 ES 1552 User s Guide List of Figures Figure a9 DSC Basen OOG aa AA AA NAA IA ANNA GINANG 76 s PD a LI eo e P 77 Figure 41 IP Address Based QUO aa NAG ANA AGA AA 78 Figure 42 Port atte DIDI aai AG La iae o e ci on ca io aetna aio earns 79 Figure 43 Rate LIM ONNGNB M M 80 guae cerne nuIEe n 82 sx nm BUNGIE eee v 83 Figure 40 40d 6 cale MAC EMY E 84 Figure 47 Display LZ Address TIDO eise re Hope at tensile 85 Figure 49 Cable A PUN m ITE 87 Figure 49 Global Auto DoS Attack Preventi T aa aa AABANG 90 Figure 50 Advanced Auto DoS Attack Prevention 1 1 1 91 Figure 31 Aia NAP sp c RT 94 Figure S2 LOGGU aaa 97 Figure 53 Logging Add Derner aee TES 98 Pau laag PAMILA saana aE 99 Figure 55 Searching FAW PIS LOgS a ING GIG 8 CHI HR UC SH ta 101 Figura 50 Logs Search ROSUITS aunsekesectosu beth AGANG AA AA SE ELLE pA EL LE BRE G bI E LA cR ad 102 Figure 57 SNMP Management Model maan tuba NABABAGABAG ANAK EE dd dE buds 105 Figure B9 SNMP BEHRIHBID dd oite cen dae E cedat dao Hcr o dos enc e acc pe t 107 PANGA SPINE TOP AABANG 108 Figura 60 SNMP Group UF
33. it has a VLAN tag or not You can also tag all outgoing frames that were previously untagged from a port with the specified VID 8 2 1 IEEE 802 1Q VLAN Screen Use this screen to display IEEE 802 1Q VLAN status Click VLAN in the navigation panel to display the IEEE 802 1Q VLAN screen as shown next Figure 31 VLAN VLAN Status IEEE 802 1Q VLAN Help VLANID 7 Create New YLAN VLAN ID Member ports Tag egress packet E Untag egress packet 4 AA 01 02 03 e os oe o7 os na to 11 12 v3 n4 15 16 17 6 a gr ae 20 so t s2 3a 34 ss 36 a7 38 39 4o an a2 a3 44 a5 a6 Click on VLAN ID to change member state or remove vlan The following table describes the labels in this screen Table 12 VLAN VLAN Status LABEL DESCRIPTION VLAN ID Select which VLAN you want to configure or click Create New VLAN to go to the new VLAN configuration screen VLAN Status Table This table shows you the existing VLANs and their configurations VLAN ID Click on the VLAN ID to go to the VLAN edit screen Member Ports All the ports participating in the VLAN are listed here The ports show up in two different colors DA Orange When the packet leaves this member port the VLAN tag is added Turquoise When the packet leaves this member port the VLAN tag is removed Previous Page Click this button to view VLANs with lower identification numbers
34. on the ZyXEL home page to go to that product s page 3 Select the certification you wish to view from this page ZyXEL Limited Warranty ZyXEL warrants to the original end user purchaser that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials ZyXEL will at its discretion repair or replace the defective products or components without charge for either parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper operating ES 1552 User s Guide Appendix C Legal Information condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal or higher value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product has been modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser
35. or 126 possible hosts a host ID of all zeroes is the subnet s address itself all ones is the subnet s broadcast address 192 168 1 0 with mask 255 255 255 128 is subnet A itself and 192 168 1 127 with mask 255 255 255 128 is its broadcast address Therefore the lowest IP address that can be assigned to an actual host for subnet A is 192 168 1 1 and the highest is 192 168 1 126 Similarly the host ID range for subnet B is 192 168 1 129 to 192 168 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets Similarly to divide a 24 bit address into four subnets you need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 Each subnet contains 6 host ID bits giving 2 2 or 62 hosts for each subnet a host ID of all zeroes is the subnet itself all ones is the subnet s broadcast address Table 79 Subnet 1 LAST OCTET BIT IP SUBNET MASK NETWORK NUMBER VALUE IP Address Decimal 192 168 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address Lowest Host ID 192 168 1 1 192 168 1 0 Broadcast Address Highest Host ID 192 168 1 62 192 168 1 63 ES 1552 User s Guide Appendix B IP Addresses and Subnetting Table 80 Subne
36. port status and so on A Management Information Base MIB is a collection of managed objects SNMP allows a manager and agents to communicate for the purpose of accessing these objects ES 1552 User s Guide Chapter 18 SNMP SNMP itself is a simple request response protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operations Table 38 SNMP Commands COMMAND DESCRIPTION Get Allows the manager to retrieve an object variable from the agent GetNext Allows the manager to retrieve the next object variable from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series of GetNext operations Set Allows the manager to set values for object variables within an agent Trap Used by the agent to inform the manager of some events 18 1 1 Supported MIBs MIBs let administrators collect statistics and monitor status and performance The switch supports the following MIBs RFC 1213 SNMP MIB II MIB II System MIB II Interface RFC 1398 MIB Ether like RFC 2674 SNMPv2 SNMPv2c RFC2819 RMON Group 1 Statistics Group 2 History Group 3 Alarm Group 9 Event 18 1 2 SNMP Traps The switch sends traps to an SNMP manager when an event occurs SNMP traps supported are outlined in the following table
37. priority mappings Number of This field displays the number of queues configurable on the switch Click Change to edit queues the number of queues on the switch Scheduling Select Strict Priority or Weighted Round Robin Method Strict Priority scheduling singles out the highest priority queue and ensures all queued traffic in this queue is transmitted before servicing the lower priority queues Strict Priority scheduling services the remaining queues using WRR Note Queue weights can only be changed when Weighted Round Robin is selected Weighted Round Robin scheduling services queues on a rotating basis based on their queue weight the number you configure in the queue Weight field Queues with larger weights get more service than queues with smaller weights Priority This value indicates packet priority and is retrieved from the priority tag field of incoming packets The values range from 0 lowest priority to 7 highest priority Click the options below the priority values to send packets of a specific priority to a particular queue You can also set this priority based on criteria you configure in the Advanced QoS screens See the sections later in this chapter for more information Queue O This field indicates which Queue 0 to 3 you are configuring Queue O has the lowest Queue 3 priority and Queue 3 the highest priority Weight You can only configure the queue weights when Weighted Round Robin is s
38. s Guide Table of Contents 18 2 SNMP GT iE 110 Taal SAP USE CIERNE kaaa AA AA AA AKA 110 1832 SNMP User MOGI RES 1 TAMPUHAN NATAL ABALA TZ 184 1 SNMP Community EI rt 113 18 4 2 SNMP Community Modify aaa anak masa naa 114 Teor TP GRIND mna ANA KANAN PGKA NANA AA ANAN AA 114 TO ore APO gerna BN KAG 115 ISO T SNMP Tap Statio COE paa a aA 116 13 6 2 SNMP Trap Staton Mody sotaning 117 Chapter 19 RMON LNG iniisa es es Ate ceed a BANAAG 119 19 1 EL LUNES I M 119 19 2 RMON Statistics COVel VUE uds ivit a BANAAG 119 19 9 RMON Lite Sana POR AGA AGA ud belua n baton 121 19 4 RMON LIG History MIB iisciioceceeni ett EVI ED ER EUR I LESE OL EE HEU EE I EE E E COS AB AA 122 19 4 1 RMON History Control Overvi W mamamana maana aaa anh ag sean 122 19 4 2 RMON History Control MOGI aaa Eb t ra deb be Hasta sr PPae eR bbE debe Mea 123 19 4 3 RMON History Statistics Overview Lauiassezee hber Ehe nt horn d e ood i E nd d e Rd 124 19 4 4 RMON HO Statistics Ca AANI anne 125 13 5 RMON Alarm IMEPNEW mGA NAAAGNAS 127 19 5 1 RMON Alarm Create New Alarm mamana KAKANAN KANA 128 QE genda me Wm 129 19 6 1 RMON Event Create New Eveni rrt hor ER BIN LANA AGA 130 19 7 RMON Event Log DUOIVIGWE uses eiii cete tk no qd nk Ro d uh ha a hd d had add 131 19 7 1 RMON Event Log EVI mamamana AA AA 132 Chapter 20 Dynamic ARP A 135 20 TARP KN Eris MORE TS T S 135 2101 1 ABE Table
39. screens to add delete and view entries in the Layer 2 L2 address table 13 1 Configuring L2 Management Layer 2 L2 management refers to management based on the Media Access Control MAC address of networking devices A static Media Access Control MAC address is an address that has been manually entered in the MAC address table Static MAC addresses do not age out When you set up static MAC address rules you are setting static MAC addresses for a port This may reduce the need for broadcasting Click L2 Address gt Management in the navigation panel to display the configuration screen as shown Figure 45 L2 Management L2 Address Management Help Address Lookup MAC 00 00 00 00 00 0 VID fi Lookup Static Address ADD Item Source MAC VID Port Delete 0 CC AA11 11 11 1A 1 8 DELETE The following table describes the labels in this screen Table 25 L2 Management LABEL DESCRIPTION Address Enter the MAC address and the corresponding Vlan ID in the MAC and VID fields Lookup E re Click Lookup to search for the MAC address entry in the MAC address Static This section allows you to add or delete static MAC address entries Address ADD Click this to add a static MAC address entry to the MAC address table Item This is the index number of the static MAC address entry Source MAC This field displays the MAC address of a manually entered MAC address entry VID This field displays t
40. settings Click a port number in the Port Status screen to access this screen Figure 28 Port Configuration PORT Configuration Help Auto Speed Flow Default pet a Negotiate Duplex Control Priority nini pr Enable z Enable F seme mj os fr The following table describes the labels in this screen Table 9 Port Configuration LABEL DESCRIPTION Port This is the port index number Admin Select Enable to activate the port or Disable to deactivate the port Auto Negotiate Select Enable and the port will negotiate the speed duplex mode and flow control settings with the peer port If the peer port does not support auto negotiation or turns off this feature the switch determines the connection speed by detecting the signal on the cable and using half duplex mode Select Disable to configure the port settings manually When the switch s auto negotiation is turned off a port uses the pre configured speed and duplex mode when making a connection thus requiring you to make sure that the settings of the peer port are the same in order to connect Speed Duplex Select the speed and the duplex mode of the Ethernet connection on this port Choices are 10Mbps Half 10Mbps Full 100Mbps Half 100Mbps Full and 1000Mbps Full for Gigabit ports only ES 1552 User s Guide Chapter 6 Port Settings Table9 Port Configuration continued LABEL DESCRIPTION Fl
41. single location Figure2 Bridging Application Internet gt eo oo Sales a a Z maasasasanawa ni i See mmm 1 1 3 High Performance Switching Example The switch is ideal for connecting two networks that need high bandwidth In the following example use trunking to connect these two networks Switching to higher speed LANs such as ATM Asynchronous Transmission Mode is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards restructuring your network and complex maintenance The switch can provide the same bandwidth as ATM at much lower cost while still being able to use existing adapters and switches Moreover the current LAN structure can be retained as all ports can freely communicate with each other ES 1552 User s Guide Chapter 1 Getting to Know Your Switch Figure3 High Performance Switched Workgroup Application 1 1 4 IEEE 802 1Q VLAN Application Examples A VLAN Virtual Local Area Network allows a physical network to be partitioned into multiple logical networks Stations on a logical network belong to one group A station can belong to more than one group With VLAN a station cannot directly talk to or hear from stations that are not in the same group s unless such traffic first goes through a router For more information on VLANs refer to Chapter 8 on page 63 1 1 4 1 Tag based VLAN Example
42. table describes the links in the navigation panel Table 4 Navigation Panel Links LINK DESCRIPTION System Use these screens to view general system information such as firmware version IP address and so on You can also use this screen to backup and restore your configuration Status Use this screen to view general system and hardware monitoring information Password Use this screen to change the system login password Firmware Use this screen to perform firmware upgrades Restart Use this screen to reboot the switch or to restore the default configuration of the Reset switch Port Use these screens to view the status and configure settings for individual ports on the switch Statistics Use these screen to view system statistics such as the number of packets received on the switch collisions and errors and to view statistics for individual ports on the switch VLAN Use these screens to create new IEEE 802 1Q VLANS as well as view the status and edit existing IEEE 802 1Q VLANs on the switch Trunk Groups Use these screens to create trunk groups and add remove ports from existing trunk groups Mirror Use this screen to copy traffic from one port or ports to another port in order that you can examine the traffic from the first port without interference ES 1552 User s Guide Chapter 4 The Web Configurator Table 4 Navigation Panel Links continued LINK DESCRIP
43. the number of nonunicast packets transmitted Discards This field shows the number discarded dropped packets Errors This field shows the number of packets for which transmission failed because of excessive collision QLength This field shows the number of packets currently buffered RX The following fields display detailed information about packets received Octets This field shows the number of octets received UnicastPkts This field shows the number unicast packets received NonUnicastPkts This field shows the number of nonunicast packets received Discards This field shows the number discarded dropped packets Errors This field shows the number of undersize oversize fragmented or FCS error packets received UnknownProtos This field shows the number of packets received with unknown protocols Summary The following fields display a summary of types of errors and size of packets transmitted received Drop Events This is a count of dropped packets due to GBP or backpressure buffer overflow MulticastPkts This is a count of transmitted received multicast packets BroadcastPkts This is a count of transmitted received broadcast packets UndersizePkts This is a count of transmitted received packets with length less than the minimum packet size OversizePkts This is a count of transmitted received packets with length more than the maximum packet size Fragment
44. the number of packets including bad packets received that were between 128 and 255 octets in length StatsPkts256to511Octets This field displays the number of packets including bad packets received that were between 256 and 511 octets in length StatsPkts512to1023Octets This field displays the number of packets including bad packets received that were between 512 and 1023 octets in length StatsPkts1024to1518Octets This field displays the number of untagged packets including bad packets received that were between 1024 and 1518 octets in length This number also includes tagged packets received that were 1522 octets in size Statistics Overview Click this to go back to the RMON Statistics Overview screen 19 4 RMON Lite History MIB RMON Lite History MIB configuration is divided into two parts 2 History Control and 2 History Statistics Use the 2 History Control screens to view and define the statistical sampling of data from activity in your network Statistical sampling is controlled by defining the interface port polling period and the number of samples to be taken per polling period Use the 2 History Statistics screens to view the results of statistical sampling on the ports 19 4 1 RMON History Control Overview Click RMON Lite in the navigation panel and select 2 History Control to open the RMON History Control Overview screen Use this screen to view and configure RMON history
45. the remote trap station in dotted decimal notation Address Community Specify the community string used with this remote trap station String Apply Click this to save your settings to the switch ES 1552 User s Guide Chapter 18 SNMP ES 1552 User s Guide RMON L ite This chapter explains how to configure the RMON L ite screens 19 1 RMON Lite Overview The Remote Network Monitoring Management Information Base RMON MIB defines objects for managing remote network monitoring devices The remote network monitoring devices referred to as monitors or probes are usually stand alone devices and devote significant internal resources for the purposes of managing a network There are a total of nine RMON MIB groups defined in RFC 2819 The switch supports four of the RMON MIB groups Group 1 Statistics Group 2 History Group 3 Alarm Group 9 Event The switch s implementation is therefore referred to as RMON Lite The following sections describe how to configure the RMON Lite settings on the switch Refer to RFC 2819 for more information on RMON MIBs 19 2 RMON Statistics Overview Click RMON Lite in the navigation panel to open the RMON Statistics Overview screen Use this screen to look at and configure settings for gathering statistics for the Ethernet ports on the switch ES 1552 User s Guide Chapter 19 RMON Lite Figure 72 RMON Statistics Overview
46. they can be given high priority in order to provide better transmission resulting in higher sound quality for the end users The Auto VolP feature explicitly matches VoIP packets in Ethernet switches and provides them with the highest class of service The AutoVoIP feature provides the capability to assign the highest priority for the following VoIP packets SIP Session Initiation Protocol is an internationally recognized standard for implementing VoIP SIP is an application layer control signaling protocol that handles the setting up altering and tearing down of voice and multimedia sessions over the Internet MGCP Media Gateway Control Protocol is a control and signal standard for the conversion of audio signals carried on telephone circuits PSTN to data packets carried over the Internet or other packet networks SCCP Skinny Client Control Protocol is a Cisco proprietary protocol used between call managers and VoIP phones 16 2 Auto VoIP Settings Use the Auto VoIP Settings to enable automatic assignment of high priority to VoIP packets passing through the switch Click Auto VoIP in the navigation panel to view the following screen ES 1552 User s Guide Chapter 16 Auto VolP Figure 51 Auto VoIP Settings AutoVolP Settings Help Profiles MARE gt Apply The following table describes the labels in this screen Table 32 Auto VoIP Settings LABEL DESCRIPTION Profiles Select
47. 1 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 ES 1552 User s Guide Appendix B IP Addresses and Subnetting Table 83 Eight Subnets continued SUBNET ADDRESS FIRST ADDRESS ADDRESS ADDRESS 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 254 255 Subnet Planning The following table is a summary for subnet planning on a network with a 24 bit network number Table 84 24 bit Network Number Subnet Planning NO BORROWED SUBNET MASK NO SUBNETS NO NOSTS PER 1 255 255 255 128 25 126 2 255 255 255 192 26 62 3 255 255 255 224 27 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 255 255 255 252 30 64 7 255 255 255 254 31 128 1 The following table is a summary for subnet planning on a network with a 16 bit network number Table 85 16 bit Network Number Subnet Planning NosrE S OWED SUBNET MASK NO SUBNETS NO HOSTS PER 1 255 255 128 0 17 32766 2 255 255 192 0 18 16382 3 255 255 224 0 19 8190 4 255 255 240 0 20 16 4094 5 255 255 248 0 21 32 2046 6 255 255 252 0 22 64 1022 7 255 255 254 0 23 128 510 8 255 255 255 0 24 256 254 9 255 255 255 128 25 512 126 10 255 255 255 192 26 1024 62 11 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 ES 15
48. 168 1 34 L2 Table Aging Disabled 55 Backup settings Restore settings TG AIAI II 4 8 Help The web configurator s online help has descriptions of individual screens and some supplementary information Click the Help link from a web configurator screen to view an online help description of that screen ES 1552 User s Guide System This chapter describes the system screens 5 1 System Screen The home screen of the web configurator displays general system information and allows you to perform system maintenance Click System gt Status in the navigation panel to view device specific information such as system name firmware version and so on Figure 19 System System Help Device Name ES 1528 Firmware Version V1 12 ARD D b3 Upgrade Build Date Thu Oct 19 23 30 22 2006 MAC Address 00 10 18 53 47 01 IP Address i 192 168 1 1 Subnet Mask 255 255 255 0 Gateway 182 168 1 254 L2 Table Aging Disabled Backup settings Restore settings The following table describes the labels in this screen Table 5 System LABEL DESCRIPTION Device Name This read only field displays the name of your switch Firmware This field displays the version number of the switch s current firmware Click Version Upgrade to go to the firmware upgrade screen See Section 5 3 on page 52 Build Date This field displays the date of the currently in
49. 21 26 User admin logined from 192 168 1 33 45 INFO WEB 2006 5 1 0 18 15 User admin logined from 192 168 1 33 41 INFO WEB 2006 5 1 0 16 53 User admin logined from 192 168 0 236 The following table describes the labels in this screen Table 37 Logs Search Results LABEL DESCRIPTION Index This field indicates the index number of the log This number doesn t change even if some logs are deleted from the switch due to memory limits The index number increments by one for each recorded event The largest number represents the most recent log event Level This field displays the severity level of the log event The possible severity levels are Error Warning Info and Debug ES 1552 User s Guide Chapter 17 Event Logging Table 37 Logs Search Results continued LABEL DESCRIPTION Category This field displays what category the log entry fits The categories are based on software and hardware features of the switch For example the category AUTODOS records events which deal with the Auto Denial of Service features you set up and the category SYSTEM records events which deal with the overall operation of the switch Time This field specifies the time when the switch recorded the log event The switch resets its internal clock when it is restarted to 2006 5 1 00 00 00 Message This field displays an explanation for the log entry
50. 4 DSCP Based QoS Assign priority to packets based on their Differentiated Services Code Points DSCPs See Section 11 4 2 on page 75 ToS Based QoS Assign priority to packets based on their Type of Service ToS tagging See Section 11 4 5 on page 76 Advanced QoS methods only affect the internal priority queue mapping for the switch The switch does not modify the IEEE 802 1p value for the egress frames You can choose one of these ways to alter the way incoming packets are prioritized or you can choose not to use any QoS enhancement setting on the switch 11 3 Configuring QoS Use the QoS Setting screen to specify a queuing method and configure queue weights for the switch Click QoS in the navigation panel to view the following screen Figure 36 QoS Setting QoS Setting Help Advanced Number of queues 4 Change Scheduling Method i s T Low High Priority lo 1 2 a 4 s e Weight Queue O Low e fe elec lec hn ox Queue 1 e ojejejejeje z I lelelelelwmlel ol Quuwe2 Cc c c c e e c c fa s ary Queue 3 High C C C C C C e e 8 Weights 1 15 Apply ES 1552 User s Guide Chapter 11 QoS The following table describes the labels in this screen Table 17 QoS Setting LABEL DESCRIPTION Advanced Click this link to configure QoS settings based on port number IP address or configure DSCP or ToS priority to 802 1p
51. 48 monitor Disabled Port 23 monitor Disabled Port 49 monitor Disabled Port 24 monitor Disabled Port 50 monitor Disabled Port 25 monitor Disabled Port 51 monitor Disabled Port 26 monitor Disabled Port 52 monitor Disabled Click the DataSource ID to get the detail The following table describes the labels in this screen Table 54 RMON Statistics Overview Disabled if statistics are not being collected on this port LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON Lite Statistics Overview screen Data Source This field displays the ports on the switch Click on the port number to configure the settings for that port Owner This field displays the entry creator It displays monitor if the entry was created by the switch itself Status This field displays Enabled if statistics are being collected on this port It displays ES 1552 User s Guide Chapter 19 RMON Lite 19 3 RMON Lite Statistics Port Use this screen to enable statistics gathering and view the statistics for individual ports Click on a port number in the RMON Statistics Overview screen to view the screen as shown Figure 73 RMON Statistics Port RMON Lite RMON MIB Table 1 Statistics Apply Help RMON Statistics Port 01 Disabled
52. 52 User s Guide Appendix B IP Addresses and Subnetting Table 85 16 bit Network Number Subnet Planning continued NO BORROWED NO HOSTS PER HOST BITS SUBNET MASK NO SUBNETS SUBNET 14 255 255 255 252 30 16384 2 15 255 255 255 254 31 32768 1 Configuring IP Addresses Where you obtain your network number depends on your particular situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask If the ISP did not explicitly give you an IP network number then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 The Internet Assigned Number Authority LANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise You must also enable Network Address Translation NAT on the switch Once you have decided on the network number pick an IP address for your switch that is easy to remember for instance 192 168 1 1 but make sure that no other device on your network is using that IP address The subnet mask specifies the network number portion of an IP address Your switch will compute the subnet mask automatically based on the IP address th
53. ATA 47 AS Bali NGANGA KANA 47 4 7 Logging Out ot the Web Configurator Kana ANAN ate i adole a AH GAL 47 AA AA 48 Chapter 5 AA NAA 49 o1 System Sree e in 49 SN EP I II Re a EN Ea E SE ET 50 a Leger ZLA PBe AT e E t 50 BABA ENGE M 51 ALAB TUN Gd cc ond cae NAA AA DIEM UIT em awed RE t IM La E pU CAMPO da da MEE 51 5 2 System Change PassweoPQ paaa pesdcidku raa iE vuv diu Liu VE EE LM ELI 52 BANG iR gp s p 52 MERI uM cadi c e c 53 Chapter 6 Par Seting S e 55 wa rcr MU aa ao Aandi cy eek ANAK LAT peti ete Heuer TA 55 a bA 8 721105 apne ee ent are Orn cree rom a bed 56 Chapter 7 System and Port 04000000 Reeve 59 TA OVET e iian E ai 59 Fe M e vec v A S 59 yao ucro M AA AA GG 60 12 ES 1552 User s Guide Table of Contents Chapter 8 Li AA AA AA AA AA AA AR P 63 8 1 Introduction to IEEE 802 1Q Tagged VLANS euseeesssei saaan 63 8 1 1 Forwarding Tagged and Untagged Frames ua aaa anna 63 B OE VM AA AA AA 64 6 2 1 IEEE 302 10 VLAN SCTE asa Febr DEREN HATH HIM OF PHREFRRP CR YEREPCRE AR PREDEDE 64 noz Create IEEE BI VLAN Scheer dne onte oen E aser Mae bet oit io dti 65 82 3 Edit IEEE BIN TA VLAN OFEN aka NAAANINAG LER DUI EE EL E ades 65 Chapter 9 Dur ee 67 9 1 TRUNKING DIEPAEN aaa n w G 67 9 1 Distrib
54. Agreement 36 N NAT 160 ES 1552 User s Guide Index network management 151 network management system NMS 105 O open cable fault 87 P password 46 pop up Windows allowing 139 port details 60 port mirroring 69 150 port security 89 overview 89 port settings 55 56 port statistics 59 ports mirroring 69 speed duplex 56 power connector 38 power supply specifications 151 prioritizing VoIP traffic 93 product registration 163 product specification 150 PVID 63 PVID Priority Frame 63 Q QoS 150 QoS Quality of Service 71 Quality of Service see QoS 71 queue weight 71 queuing 71 SP 71 WRR 71 queuing method 71 R RAM logs 97 registration product 163 related documentation 3 Remote Network Monitoring Management Information Base RMON MIB 119 reset 53 reset button 35 47 default configuration 37 resetting 47 restart 53 restoring configuration 47 51 RMON alarm group 127 event group 129 history group 122 statistics group 119 RMON Lite 119 Round Robin Scheduling 71 rubber feet 31 S safety certifications 151 safety warnings 6 save configuration 47 SCCP Skinny Client Control Protocol 93 Session Initiation Protocol SIP 93 short cable fault 87 Simple Network Management Protocol SNMP 105 Simple Network Management Protocol see SNMP SIP Session Inititation Protocol 93 Skinny Client Control Protocol SCCP 93 SNMP 105 agent 105 and MIB 105 authentication 110 group 108
55. BABA NGA ABA 109 abi CNMP Gp si e EET 109 Tade 44 SNMP USEI m H 110 Toedo SNMP NET CICE aaa ANAN KAT GAGANA AA AG 111 Tabi d5 GNME User MB mGA NANANG 112 Tag CNMP COMMUNI Mem mm 112 Table 48 SNMP Community Creat 224 dean ANAN NAMANA NAG GB ANEK MAKA ANNA 113 Table 49 SNMP Community Madiin e 114 Table SU SMMP NONBOSLDDU 42 isis partc paha AA NANA AGA SU AA AA 115 Table cT SNMP Trap Stalon san AA 116 Table 52 SNMP Tap Station GEET BA 117 Table 53 SNMP Trap Station Modify Ae c 117 Table 54 RMON SIREN INENG AKA ERE a EE 120 Tabe 55 RMON SIISUGS POE asrasin AN AGA ANA 121 Table 56 RMON Histor Control Overvi W aa AGING IAN iiaia aaant AN 123 Table 57 RMON History Control Modify aaa aa ANA PAN GA AA NAA AA AA 124 Table 58 RMON History Statistics DVervibW AGA o OH Epp dXX Eso d XN Fase ub bo A t ana 125 Table S9 RMON History Stalsties vli eT 126 Tale GU ep Puer naka M 127 Table 61 RMON Alarmi Create New ALAM aaa n ha EUER REN eA Enna E LR ra Rx ER ERR Ra AA 129 Table B2 RMON Event OVEIVIOW GANGBANG GANGBANG 130 Table 63 RMON Event Configuration 3Er gansa rd d enr nnt nara de ka pod d EX PY RR A SER MO SR 131 Table 64 RMON Event Log OVOIVIBMW sueriz praet dnd ra ak kt d nah lk Rh GA lid 132 Table 65 RMON Event Lagi Eveni 133 Tana OG AP TANG AGA AA GA a aaa ad 136 THEO ARF
56. Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON History Statistics Control Index screen Sample Index This field displays the index number of the polling sample collected on the port Drop Events This field displays the total number of packets that were dropped in this polling sample Octets This field displays the total number of octets received in this polling sample Packets This field displays the total number of all good packets received in this polling sample Broadcast This field displays the total number of good broadcast packets received in this polling Packets sample Multicast This field displays the total number of good multicast packets received in this polling Packets sample CRCAlign This field displays the number of packets between 64 1518 octets long dropped Errors in this polling sample because they either had bad Frame Check Sequence FCS or non integral number of octets alignment error Undersize This field displays the number of packets including bad packets received in this Packets polling sample that were between 0 and 64 octets in length Oversize This field displays the number of untagged packets including bad packets received Packets in this polling sample that were greater than 1518 octets in length Fragments This field displays the number of frames dropped in this polling sample because they wer
57. Disable if you don t want to give higher priority to VoIP traffic or select IP Phone to give the highest priority to SIP MGCP and SCCP packets passing through the switch Apply Click Apply to save your changes to the switch ES 1552 User s Guide PART III Management and Troubleshooting Event Logging This chapter shows you different ways to inspect logs and how to configure an external log server 17 1 Event Logging Overview You can configure the switch to save specific events in four different log targets RAM This log is saved into the switch s volatile memory The logs are cleared when the switch is rebooted Flash This log is saved into the switch s non volatile memory You can view the logs even after the switch is rebooted Due to the space limitations on the switch the oldest log entries are overwritten as new events are recorded Server You can configure syslog servers to store system events from the switch The switch uses UDP protocol to send log messages to the remote servers The syslog servers must be Berkeley Software Distribution BSD syslog protocol compliant 17 2 Logging Screen Use this screen to specify which system events should be recorded and where the log messages should be saved Click Logging gt Settings in the navigation panel to view the screen as shown Figure 52 Logging Logging Help Add Server Logging Target Clickto view logs Error Warning Info D
58. EBIBNBE AGANG AG 135 21 2 How Dmniame ARF WORS IG IBA IB NIGERIAN 135 20 2 ycls ERI 12e lU 135 20 3 Viewing ARP Table Entries aaa NGANGA ANAN pad Eb bl MEX EE 137 20 4 Addng ARP Tabe ERNIE AABANGAN GG A TQGE Le Ad LS c ti b UR LER 137 Chapter 21 PI dila 139 21 1 Problema Starting Up he YIII maaga rici bcd RI PEL E Rr qHEEEELIHAq A 139 2 1 2 Problems Accessing he TWIN maan nace d aen og en dd NIKKA dei Ro a GR Rd 139 21 2 1 Pop up Windows JavaScripts and Java Permissions aaa naaa nanana 139 ES 1552 User s Guide 15 Table of Contents Part IV Appendices and Index cccceceeeeeeeeeeeeeeeeeeeneeeeeeeeaaeeneeeseees 147 Appendix A Product SRECTICANONE AANI NIAN ARN NENA GN NANAIG 149 Appendix B IP Addresses arid Subnetting Kia NABAHA ANGIN BANAAG 153 Appendix C Legal INGAY CO PRI URP Ew HERRERA 161 Appendix D Customer SUPREMA PR nian En ERES EF RE FE EF REX I 165 AG RAUL Adie 169 ES 1552 User s Guide List of Figures List of Figures Figure T Backbone ADIIESSUDE a NAAAGNAS NA BA ha AN 27 Figure 2 Bridging FMC GMO AA 28 Figure 3 High Performance Switched Workgroup Application ecce nene 29 Figure 4 Shared Server Using VLAN Example 11 oria sep rtt rrr AGING REM AS AG 29 AA 31 Figure 8 Attaching the Mounting Bra nkta aasa AKA AA AKUN 33 Figura 7 Mounting the Switehi n a Rack a a
59. ES 1552 52 port Web managed Ethernet Switch User s Guide Version 1 12 5 2007 Edition 2 ZyXEL www zyxel com About This User s Guide About This User s Guide Intended Audience This manual is intended for people who want to configure the switch using the web configurator You should have at least a basic knowledge of TCP IP networking concepts and topology Related Documentation Quick Start Guide The Quick Start Guide is designed to help you get up and running right away It contains information on setting up your hardware connections Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information BES It is recommended you use the web configurator to configure the switch Supporting Disk Refer to the included CD for support documents ZyXEL Web Site Please refer to www zyxel com for additional support documentation and product certifications User Guide Feedback Help us help you Send all User Guide related comments questions or suggestions for improvement to the following address or use e mail instead Thank you The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan E mail techwriters zyxel com tw ES 1552 User s Guide 3 Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User
60. ESET Button The switch allows you to reset the switch to its factory default configuration via the RESET button Press the RESET button for one second and release The switch automatically reboots and reloads its factory default configuration file ES 1552 User s Guide Chapter 3 Hardware Overview BS When you use the RESET button all of your configuration settings will be lost Use the default IP address 192 168 1 1 and user name admin and password 1234 to log back into the switch It may take up to 2 minutes for the switch to restart when you reload the default configuration file 3 3 Rear Panel The following figures show the rear panels of the AC power input model switch The rear panel contains a connector for the power receptacle Figure 13 Rear Panel 3 3 1 Power Connector l 100 240yAC 50 60 Jj 0 44 MAY Make sure you are using the correct power source as shown on the panel To connect the power to the switch insert the female end of power cord to the power receptacle on the rear panel Connect the other end of the supplied power cord to a 100 240V AC 0 8A power outlet 3 4 LEDs The following table describes the LEDs Table 2 LEDs LED COLOR STATUS DESCRIPTION PWR Green On The system is turned on Off The system is off 10 100 Mbps Ethernet Ports LNK ACT Amber Blinking The system is transmitting receiving data to from a 10 100 Mbps Ethernet networ
61. Figure 66 SNMP Community Create SNMP Community Help Community String public Remote Station IP 0 0 0 0 Group Name reate Cancel The following table describes the labels in this screen Table 48 SNMP Community Create LABEL DESCRIPTION Community An SNMP community string is a text string that acts as a password It is used to String authenticate messages that are sent between the management station the SNMP manager and the device the SNMP agent The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent Type the community string for this community You can use 1 33 any printable character Spaces are allowed Remote Station Specify the IP address of the remote SNMP management station in dotted decimal IP notation Group Name Select the SNMP group you want to belong to this community Create Click this to add this SNMP community to the switch Cancel maa this to go back to the main SNMP Community screen without saving your changes ES 1552 User s Guide 113 Chapter 18 SNMP 18 4 2 SNMP Community Modify Click on the Community ID number or select a Community ID from the Community ID drop down list box in the SNMP Community screen to modify the settings of an existing community Figure 67 SNMP Community Modify SNMP Community Help Community ID 1 Remove This Community Display All Community Commu
62. Hardware Installation and Connection BS Do NOT block the ventilation holes Leave space between devices when stacking For proper ventilation allow at least 4 inches 10 cm of clearance at the front and 3 4 inches 8 cm at the back of the switch This is especially important for enclosed rack installations 2 2 Mounting the Switch on a Rack This section lists the rack mounting requirements and precautions and describes the installation steps 2 2 1 Rack mounted Installation Requirements Two mounting brackets Fight M3 flat head screws and a 2 Philips screwdriver Four M5 flat head screws and a 2 Philips screwdriver LES Failure to use the proper screws may damage the unit 2 2 1 1 Precautions Make sure the rack will safely support the combined weight of all the equipment it contains Make sure the position of the switch does not make the rack unstable or top heavy Take all necessary precautions to anchor the rack securely before installing the unit 2 2 2 Attaching the Mounting Brackets to the Switch 1 Position a mounting bracket on one side of the switch lining up the four screw holes on the bracket with the screw holes on the side of the switch 32 ES 1552 User s Guide Chapter 2 Hardware Installation and Connection Figure 6 Attaching the Mounting Brackets 2 Using a 2 Philips screwdriver install the M3 flat head screws through the mounting bracket holes into the s
63. ID igo 00 07 e5 04 Eec a o using Default 80 00 07 e5 04 001018534701 Apply The following table describes the labels in this screen Table 40 SNMP EnginelD LABEL DESCRIPTION Engine ID Select this radio button and enter a unique Engine ID for the switch The format is limited to hexadecimal characters 0 9 and a f and the maximum length is 27 octets each octet is made up of a pair of hexadecimal characters Using Default Select this radio button to use the default Engine ID based on the MAC address of the switch for SNMP Apply Click this to save your changes to the switch 18 2 SNMP Group An SNMP group is a set of managers that are assigned common access rights to agent MIBs You can also choose to have all managers in a group authenticate with agents Use the SNMP Group screen to create SNMP groups Click SNMP 7 Group to view the screen as shown ES 1552 User s Guide Chapter 18 SNMP Figure 59 SNMP Group SNMP Group Help Group Name Group ID gt Create New Group Click on Group ID to edit or remove SNMP Version Authentication Access The following table describes the labels in this screen Table 41 SNMP Group LABEL DESCRIPTION Group ID Select the SNMP group you want to edit Create New Click this to configure a new SNMP group Group Group ID This field indicates the group identification number It is used for
64. Index A adding VLANs 65 Address Resolution Logic ARL table 50 Address Resolution Protocol ARP 135 allowing pop up windows 139 alternative subnet mask notation 155 applications backbone 27 bridging 28 IEEE 802 1Q VLAN 29 switched workgroup 28 ARL Address Resolution Logic table 50 ARP how it works 135 viewing 135 137 ARP Address Resolution Protocol 135 auto DoS prevention 90 configuration 90 auto VoIP configuration 94 feature explained 93 auto crossover ports 36 automatic Denial of Service DoS prevention 89 auto negotiating ports 36 B back up configuration file 51 bandwidth control 150 bridging 150 browser configuration 139 C cable diagnostics 87 types of faults 87 categories of events 100 certifications 161 notices 162 viewing 162 CFI Canonical Format Indicator 63 Index changing the password 46 Class of Service CoS 75 configuration file backup 51 restore 51 configuration saving 47 contact information 165 copyright 161 customer support 165 D default configuration and the reset button 37 DHCP Snooping 135 DiffServ DS field 75 DSCP 75 dimensions 151 disclaimer 161 distribution criterion and trunking 67 DS Differentiated Services 75 DSCP DiffServ Code Point 75 duplex modes 35 dynamic ARP how it works 135 E egress mirror 69 Ethernet ports 35 default settings 36 external logs 97 F FCC interference statement 161 firmware 49 up
65. ML based management interface that allows easy switch setup and management via Internet browser Use Internet Explorer 6 0 and later or Netscape Navigator 7 0 and later versions The recommended screen resolution is 1024 by 768 pixels In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScript enabled by default Java permissions enabled by default 4 2 System Login 1 Start your web browser 2 Type http and the IP address of the switch for example the default is 192 168 1 1 in the Location or Address field Press ENTER 3 The login screen appears The default username is admin and associated default password is 1234 ES 1552 User s Guide Chapter 4 The Web Configurator Figure 14 Web Configurator Login ES 1552 Welcome to ES 1552 Enter User Name Password and click to login User Name Password Reset 4 Click OK to view the first web configurator screen 4 3 The Status Screen The System screen is the first screen that displays when you access the web configurator The following figure shows the navigating components of the web configurator screen Figure 15 Web Configurator Home Screen System Device Name ES 1552 Firmware Version 1 12 ARS 0 b0 Upgrade Build Date Thu Dec 7 11 07 44 2006 MAC Address 00 13 49 A4 4B DD IP Ad
66. MP user You can use 1 33 any printable character Spaces are allowed Group Name Specify the SNMP group this user belongs to SNMP Version Specify the SNMP version this group uses to manage the switch Auth Type Authentication can only be configured for SNMP v3 Select None to allow this user to manage the switch without authentication or select MD5 and configure the Key field to force this user to authenticate with the switch Key Enter the MD5 key this user must use to authenticate with the switch You can use 1 8 printable ASCII characters Spaces are allowed but trailing spaces are truncated Create Click this to add this SNMP user to the switch Cancel Click this to go back to the main SNMP Group screen without saving your changes 18 3 2 SNMP User Modify Click on the User ID number or select a User ID from the User ID drop down list box in the SNMP User screen to modify the settings of an existing user Figure 64 SNMP User Modify SNMP User User ID 1 Remove This User Display All User User Name Usert GroupName ENING SNMP Version None Auth Type MDs z Old Key New Key Apply Help ES 1552 User s Guide Chapter 18 SNMP The following table describes the labels in this screen Table 46 SNMP User Modify LABEL DESCRIPTION User ID This field indicates which user you are modifying Click on Remove This User to de
67. N Lite The following table describes the labels in this screen Table 65 RMON Event Log Event LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON Event Log Event Index screen Log Index This field displays a log index number Log Time This field displays the time a log was generated Log Description This field displays an implementation dependent description of the event that activated this log entry Event Log Click this to view the RMON Event Log Overview screen Overview ES 1552 User s Guide 133 Chapter 19 RMON Lite ES 1552 User s Guide Dynamic ARP This chapter describes how to activate dynamic Address Resolution Protocol ARP learning and how to enter static ARP table entries 20 1 ARP Table Overview Address Resolution Protocol ARP is a protocol for mapping an Internet Protocol address IP address to a physical machine address also known as a Media Access Control or MAC address on the local area network An IP version 4 address is 32 bits long In an Ethernet LAN MAC addresses are 48 bits long The ARP table maintains an association between each MAC address and its corresponding IP address 20 1 1 ARP Table Entries The ARP table is populated with MAC and corresponding IP address map
68. OBIB maana AA BA NAKAKAIN AA AA ANG 108 Figure GT SNMP Group i eet 109 BEAR la mcm 110 Figure Go SNMP LISBIS COIE eui AGAR LAG BANAAG T Figure 64 SNMP User sip Mem ems 111 Figure 65 SNMP Comm A 112 Figure 66 SNMP Community DIBA ama ABA A E 113 Figure O7 SNMP Communi Mody pasa T 114 Figure 68 SNMP NOUNGAUION saaan AGANG BAGA GAAN aai 115 Figure S9 SNMP Trap cu maa PEN 116 Figure 70 SNMP Tap SoUo LIGA ms 116 FWS SNMP Trap SUDO ROOI aka IANG 117 Figure 72 RMON Statistics DEAN a aaa ANAKAN BEAR NERI KG 120 Figure 73 RMON Eccli em AA AGA AA BANAAG NAA AA 121 Figure 74 RMON History Comrol Cei vibW 10 eda ptis dd sai tad edet lei deant a c t d 123 Figure T RMON History Conte Modi mapia ARENA AGARANG 124 Figure 76 RMON History Statistics DVGIVIQU sicccccactasniacassacson cases eorr tpa paaasahin 125 Figure 77 RMON Hist ry Statistics Control aka sp taa cet n Ra E Hii di ki dh ERA a 126 Figure T9 RMON Alarmi SIV y ee 127 Figure 79 RMON Alarm Create New PES uiae seite RN pode d ead aae ate cd bd dao ood a Rte 128 Figure 80 RMON Event DVOPVIBI sese cose KG KABANKALAN GAGANA 129 Figure 81 RMON Event Create Now BUENA NAAN Ebr abs tenes AA AA 131 ES 1552 User s Guide List of Figures Figure o2 RMON Event Log UGE nanaman mai GU RANA 132 Figure 83 RMON Event Log Eveni e 132 Figure 84 Dynamic ARP aaa GAAN ain NA A aE PAG AA AA venice 136 Figure 25 Viowing ARP Table ENHNIBS maa BANGIN GIAN ea H
69. PTION 10 100 Mbps Connect these ports to a computer a hub an Ethernet switch or router RJ 45 Ethernet Ports RJ 45 Gigabit Connect these Gigabit Ethernet ports to high bandwidth backbone network Ethernet Ethernet Ports switches or use them to daisy chain other switches Mini GBIC Use mini GBIC transceivers in these slots for fiber optic connections to backbone Slots Ethernet switches 3 1 1 Ethernet Ports The switch has 48 10 100Mbps auto negotiating auto crossover Ethernet ports In 10 100Mbps Fast Ethernet the speed can be 10Mbps or 100Mbps and the duplex mode can be half duplex or full duplex ES 1552 User s Guide 35 Chapter 3 Hardware Overview There are two Gigabit Ethernet ports The speed of the Gigabit Ethernet ports can be 10 Mbps 100Mbps or 1000Mbps and the duplex mode can be half duplex at 100 Mbps or full duplex An auto negotiating port can detect and adjust to the optimum Ethernet speed 100 1000Mpbs and duplex mode full duplex or half duplex of the connected device 7 An auto crossover auto MDI MDI X port automatically works with a straight through or crossover Ethernet cable 3 1 1 1 Default Ethernet Settings The factory default negotiation settings for the Ethernet ports on the switch are Speed Auto Duplex Auto Flow control Off 3 1 2 Mini GBIC Slots There are two mini GBIC Gigabit Interface Converter slots for mini GBIC transceivers A transceiv
70. TION Qos Use these screens to configure queuing with associated queue weights for the switch Rate Use these screens to specify bandwidth limits and storm control limits for the switch Port Rate Use this screen to cap the maximum bandwidth allowed from specified source s to specified destination s Storm Use this screen to cap the rate of broadcast multicast and unknown unicast Control packets the switch will allow on individual ports L2 Address Use these screens to view and manage the MAC address table Management Use this screen to add delete or look up MAC addresses in the MAC address table Display Use this screen to view the entries in the MAC address table Cable Diagnostic Use this screen to perform cable testing on individual ports Auto DoS Use these screens to activate security features against Denial of Service DoS attacks Auto VoIP Use these screens to configure settings that automatically give higher priority to Voice over Internet Protocol VoIP traffic Logging Use these screens to configure log settings and view system logs Settings Use this screen to configure which events the switch should log RAM Logs Use this screen to configure logs which are saved to volatile memory These logs are cleared when the switch is rebooted Flash Logs Use this screen to configure logs which are saved to non volatile memory You can view these logs even after a switch is rebooted SNMP Use these sc
71. Time This field specifies the time when the switch recorded the log event The switch resets its internal clock when it is restarted Message This field displays an explanation for the log entry Goto page Click Next Previous or click on a page number to browse through the log pages 17 5 Searching RAM and Flash Logs Use these screens to search RAM or Flash logs based on level and category Click the Search link in the Logs RAM or Logs Flash screen to view the screen as shown ES 1552 User s Guide Chapter 17 Event Logging Figure 55 Searching RAM Flash Logs Criterion Logs Search Level T Error Warning T Info I Debug Category all C GENERAL C SYSTEM C KERNEL C INIT C DEVICE C NETWORK C PERSISTENCE c c C HTTPD C TELNETD C SNMPD C RMON C CABLEDIAG C VLAN C PORT Or C MIRROR C RATE C aos C AGING C TRUNKING C AUTODOS C AUTOVOIP C DYNAMICARP Submit Export ES 1552 User s Guide Chapter 17 Event Logging The following table describes the labels in this screen Table 36 Searching RAM Flash Logs LABEL DESCRIPTION Level Select the severity level s of the log events you want to find The possible severity levels are Error to search system failures such as events which will cause the switch to malfunction and events such as invalid user input in the web configurator War
72. To obtain the services of this warranty contact ZyXEL s Service Center for your Return Material Authorization number RMA Products must be returned Postage Prepaid It is recommended that the unit be insured when shipped Any returned products without proof of purchase or those with an out dated warranty will be repaired or replaced at the discretion of ZyXEL and the customer will be billed for parts and labor All repaired or replaced products will be shipped by ZyXEL to the corresponding return address Postage Paid This warranty gives you specific legal rights and you may also have other rights that vary from country to country Registration Register your product online to receive e mail notices of firmware upgrades and information at www zyxel com for global products or at www us zyxel com for North American products ES 1552 User s Guide Appendix C Legal Information ES 1552 User s Guide Customer Support Please have the following information ready when you contact customer support Required Information Product model and serial number Warranty Information Date that you received your device Brief description of the problem and the steps you took to solve it Corporate Headquarters Worldwide Support E mail support zyxel com tw Sales E mail sales zyxel com tw Telephone 886 3 578 3942 Fax 886 3 578 2439 Web Site www zyxel com www europe zyxel com FTP Site ftp zyxel com ftp europe zyxel
73. and Subnetting Figure 95 Network Number and Host ID 192 168 1 16 i TERAS i 4 a i i i af mmm i I L I LI L I L I i I LI I L L 7 2 U anm m m m m m m m 9 How much of the IP address is the network number and how much is the host ID varies according to the subnet mask Subnet Masks A subnet mask is used to determine which bits are part of the network number and which bits are part of the host ID using a logical AND operation The term subnet is short for sub network A subnet mask has 32 bits If a bit in the subnet mask is a 1 then the corresponding bit in the IP address is part of the network number If a bit in the subnet mask is O then the corresponding bit in the IP address is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of an IP address 192 168 1 2 in decimal Table 75 Subnet Mask Example OCTET OCTET OCTET t DALI 192 168 1 IP Address Binary 11000000 10101000 00000001 00000010 Subnet Mask Binary 4141111144 11111114 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by a continuous sequence of zeros for a total number of 32 bits Subnet masks can be referred to b
74. and found to comply with the limits for a Class A digital switch pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a commercial environment This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this device in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense CE Mark Warning This is a class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures Taiwanese BSMI Bureau of Standards Metrology and Inspection A Warning See BAHA allem TERHEBUIRSEDERINS HIBEXSEXATAR TER Sila T KAREENA MATET Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment This Class A digital apparatus complies with Canadian ICES 003 Cet appareil num rique de la classe A est conforme a la norme NMB 003 du Canada CLASS 1 LASER PRODUCT APPAREIL A LASER DE CLASS 1 PRODUCT COMPLIES WITH 21 CFR 1040 10 AND 1040 11 PRODUIT CONFORME SELON 21 CFR 1040 10 ET 1040 11 Viewing Certifications 1 Go to http www zyxel com 2 Select your product
75. any one instance In the Token Bucket algorithm this is referred to as the size of the bucket as this value limits the number of tokens that can accumulate in the bucket Apply Click this to save your changes to the switch 12 1 2 Broadcast Storm Control Setup Broadcast storm control limits the number of broadcast multicast and unknown unicast also referred to as Destination Lookup Failure or DLF packets the switch receives per second on the ports When the maximum number of allowable broadcast multicast and unknown unicast packets is reached per second the subsequent packets are discarded Enable this feature to reduce broadcast multicast and unknown unicast packets in your network Click Rate gt Storm Control in the navigation panel to display the screen as shown next ES 1552 User s Guide Chapter 12 Port Rate Limit and Storm Control Figure 44 Broadcast Storm Control Storm Control Help Port n m Iv Apply settings to all ports Storm Control Type Broadcast and multicast v Storm Control Rate fi Mbps z Current Setting Apply Port Storm Control Type Storm Control Rate o Broadcast and multicast 1024kbps O 02 Broadcast and multicast 1024 kbps 03 Broadcast and multicast 1024 kbps 04 Broadcast and multicast 1024 kbps 05 Broadcast and multicast 1024 kbps 06 Broadcast and multicast 1024 kbps iaz nd ay mam
76. are allowed You can also leave this field blank Type Select an event type None to do nothing Log to generate a log when an associated alarm is generated Trap to generate a trap when an associated alarm is generated Log and Trap to generate a log entry and trap when an associated alarm is generated Community This field displays the community or password You can use 1 31 printable ASCII characters Spaces are not allowed Owner Enter a descriptive name of the application that creates this entry You can use 1 64 printable ASCII characters Spaces are not allowed Apply Click this to save the settings to the switch Event Overview Click this to go to the RMON Event Overview screen 19 7 RMON Event Log Overview Use the RMON Event Log Overview screen to view the event log entries generated on the switch AII the entries in this table are generated by the RMON Lite probe when the event value meets the risingEventThreshold or fallingEventThreshold assigned in the RMON Alarm screens ES 1552 User s Guide Ben Chapter 19 RMON Lite Select 9 Event Log in the RMON MIB Table drop down list box in any RMON Lite screen to view the screen as shown Figure 82 RMON Event Log Overview RMON Lite RMON MIB Table 9 Event Log Apply Help RMON Event Log Overview Refresh Help Event Index Event Type Last Time Sent Owner 1 None 0D 0H OM 0S monitor
77. as a good connection Ok or it displays the type of fault the switch has detected Open Short or Short between pair It also displays the length of total twisted pair length or the distance to the detected fault depending whether the cable tested Ok or a fault was found ES 1552 User s Guide Chapter 14 Cable Diagnostics ES 1552 User s Guide Auto Denial of Service DoS This chapter shows you how to configure automatic Denial of Service prevention on the switch 15 1 About Denial of Service Attacks Denial of Service DoS attacks try to disable a device or network so users no longer have access to network resources The switch has features which automatically detect and thwart currently known DoS attacks 15 1 1 Dos Attacks Summary The following table summarizes the types of attacks the switch can prevent Table 29 DoS Attack Summary ATTACK DESCRIPTION Land Attacks These attacks result from sending a specially crafted packet to a machine where the source host IP address is the same as the destination host IP address The system attempts to reply to itself resulting in system lockup Blat Attacks These attacks result from sending a specially crafted packet to a machine where the source host port is the same as the destination host port The system attempts to reply to itself resulting in system lockup SYNFIN scans SYNchronization SYN ACKnowledgment ACK and FINish FIN packets are u
78. at you entered You don t need to change the subnet mask computed by the switch unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your networks are isolated from the Internet running only between two branch offices for example you can assign any IP addresses to the hosts without problems However the Internet Assigned Numbers Authority IANA has reserved the following three blocks of IP addresses specifically for private networks 10 0 0 0 10 255 255 255 e 172 16 0 0 172 31 255 255 192 168 0 0 192 168 255 255 You can obtain your IP address from the IANA from an ISP or it can be assigned from a private network If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines above For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space ES 1552 User s Guide Legal Information Copyright Copyright 2007 by ZyXEL Communications Corporation The contents of this publication may n
79. atic or whether it was learned by the switch dynamic Previous Use these navigation links to browse all L2 learned entries Page Next Page ES 1552 User s Guide 185 Chapter 13 Layer 2 L2 Management ES 1552 User s Guide Cable Diagnostics This chapter explains the Cable Diagnostics screen 14 1 Diagnostics Overview The cable diagnostics function works with systems using CAT 5 twisted pair cables The switch can perform basic cable diagnostics Click Cable Diagnostic in the navigation panel to view the screen as shown Figure 48 Cable Diagnostic Cable Diagnostic Help Port to diagnose 01 Apply Diagnostic for Port 01 2 pairs Status Open PAIR A Open length 1 meters PAIR B Open length 1 meters The following table describes the labels in this screen Table 28 Cable Diagnostic LABEL DESCRIPTION Port to diagnose Select the port you want to test Apply Click this to perform cable testing on the specified port Diagnostic for Port This field displays the number of wired pairs the port is communicating over 01 Status This field displays the results of the test Ok the cable is working properly Open there is no cable connected to the port or the cable is damaged Short there is a short along the cable Short between pair there is a short between two twisted pairs of cable Pair A Pair D This field displays the whether the twisted pair h
80. ber to view Index the details for this entry Data Source This is the port of the switch polled for data Bucket Granted This field displays the number of data samplings the probe allows to store Interval This field displays the time between data samplings in seconds Owner This field displays the creator of this entry 19 4 4 RMON History Statistics Control Use the RMON History Statistics Control screen to view the details of each polling sample collected for the history control index entries you configured Click on an individual History Control Index entry in the RMON History Statistics Overview screen to view the screen as shown ES 1552 User s Guide Chapter 19 RMON Lite Figure 77 RMON History Statistics Control RMON Lite RMON MIB Table 2 History Statistics j Apply Help RMON History Statistics Control Index 14 Refresh Help Utilization ng Sample Drop lOctects Packets Broadcast Multicast CRCAlign Undersize Oversize Fragments Jabbers Collisions Index Events Packets Packets Errors Packets Packets Er Lm 0 O 0 0 0 D 0 0 0 g 3 2 oT o o pi 7 c 0 0 D 0 o 0 3 0 0 O 0 0 0 0 0 0 0 a 2 History Statistics Overview The following table describes the labels in this screen Table 59 RMON History Statistics Control LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view
81. bled 1 16 Down 1 42 Down 1 17 Down 1 43 Down 1 18 Down z a 1 44 Down 1 19 Down 1 as Down 1 20 Down 1 46 Down 1 21 Down a la hal ub 100Mbps Full Disabled 1 22 Down 1 48 Down 1 23 23 Down 1 49 49 Down 1 24 Down 1 50 Down 1 25 Down 51 51 Down 1 26 Down 52 Down 1 ES 1552 User s Guide Chapter 6 Port Settings The following table describes the labels in this screen Table 8 Port Status LABEL DESCRIPTION Refresh Click this to update the PORT Status screen Port This identifies the Ethernet port Click a port number to display the Port Configuration screen refer to Section 6 2 on page 56 Link Status This field displays the link status of the port Up if the port is enabled and active or Down if the port is disabled or not connected to any device Speed Duplex This field displays the speed either 10Mbps 100Mbps or 1000Mbps and the duplex mode Full or Half Flow Control Enables access to buffering resources for the port thus ensuring lossless operation across network switches This field displays either Enabled or Disabled PVID The PVID field specifies what tag the incoming untagged frames receive on that port so that the frames are forwarded to the VLAN group that the tag defines 6 2 Port Configuration Use this screen to configure individual port
82. cheduling services are supported Strict Priority SP and Weighted Round Robin WRR This allows the switch to maintain separate queues for packets from each individual source or flow and prevent a source from monopolizing the bandwidth Rate Control Rate control is a combination of bandwidth management and broadcast storm control This feature allows you to set limits for incoming and outgoing traffic on the ports The broadcast storm control feature helps prevent broadcast multicast or unknown unicast traffic from flooding your network Port Mirroring Port mirroring allows you to copy traffic going from one or all ports to another or all ports in order that you can examine the traffic from the mirror port the port you copy the traffic to without interference Link Aggregation Link aggregation trunking is the grouping of physical ports into one logical higher capacity link You may want to trunk ports if for example it is cheaper to use multiple lower speed links than to under utilize a high speed but more costly single port link Device Management Use the web configurator to easily configure the rich range of features on the switch Firmware Upgrade Download new firmware when available from the ZyXEL web site and use the web configurator to put it on the switch Note Only upload firmware for your specific model Configuration Backup amp Restoration Make a copy of the switch s configura
83. creen to enable the notification mechanisms Click SNMP Trap Station to view the screen as shown ES 1552 User s Guide Chapter 18 SNMP Figure 68 SNMP Notification SNMP Notification T7 Enable SNMP Notification Enable Authentication Notification Apply SNMP Trap Station Help Trap Station ID Create New Trap Station Trap p Remote IP Address Community String Click on Trap Station ID to edit or remove The following table describes the labels in this screen Table 50 SNMP Notification LABEL DESCRIPTION Enable SNMP Select this to enable the sending of SNMP traps to a remote SNMP management Notification station Enable Select this to enable logging of failed authentication attempts If an SNMP manager Authentication uses an unmatched community string to access an agent the switch will send a trap Notification notification Apply Click this to save your settings to the switch 18 6 SNMP Trap Station SNMP traps are used to send out SNMP notifications of urgent or normal events in the system to external management stations Use the SNMP Trap Station screen to enable the sending of SNMP traps to a remote SNMP management station s Click SNMP gt Trap Station to view the screen as shown ES 1552 User s Guide 1115 Chapter 18 SNMP Figure 69 SNMP Trap Station SNMP Notification Help T7 Enable SNMP Notification T Enable Authentication Notif
84. d by the switch itself Status This field displays Enabled if historical polling is activated on the port It displays Disabled if historical polling is not activated on the port 19 4 2 RMON History Control Modify Use the RMON History Control Modify screen to define the statistical sampling of data from activity in your network Click an index number in the RMON History Control Overview screen to see the screen as shown ES 1552 User s Guide 123 Chapter 19 RMON Lite Figure 75 RMON History Control Modify RMON Lite Disabled Index DataSource BucketRequested Interval Sec Owner Status RMON MIB Table r2 History Control Apply Help RMON History Control Modify Index 1 Apply History Control Overview Help 1 Port 01 50 1800 monitor C Enable Disable The following table describes the labels in this screen Table 57 RMON History Control Modify LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Index This field displays the entry index number Data Source This field displays the port number associated with the Index entry BucketRequeste This field displays the number of samplings the Owner of the entry requests d Interval Enter the time in seconds between data sampling
85. dium Block most automatic pop ups v Pop up Blocker FAQ Close 5 Click Close to return to the Privacy screen ES 1552 User s Guide Chapter 21 Troubleshooting 6 Click Apply to save this setting 21 2 1 2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaScripts are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 91 Internet Options General Security Privacy Content Connections Programs Advanced Select a Web content zone to specify its security settings 4 wo E O Q Internet Local intranet Trusted sites Restricted sites Internet This zone contains all Web sites you haven t placed in other zones r Security level for this zone Move the slider to set the security level for this zone E Medium Safe browsing and still functional e Prompts before downloading potentially unsafe content Unsigned ActiveX controls will not be downloaded Appropriate for most Internet sites OK Cancel Click the Custom Level button Scroll down to Scripting Under Active scripting make sure that Enable is selected the default Under Scripting of Java applets make sure that Enable is selected the default Click OK to close the window ona Rh WN ES 1552 User s Guide Chapter 21 Troubleshooting Figure 92 Security Setti
86. dress 19216811 Subnet Mask 255 255 255 0 Gateway 192 168 1 34 L2 Table Aging Disabled Backup settings Restore settings 5 IG B E L L HO L Bb B L A The LED panel displays the port status B The navigation panel has links to screens that let you configure the switch features C The function frame allows you to view and edit individual feature settings D Use the Help link to find out more information about the fields in the screen you are configuring ES 1552 User s Guide Chapter 4 The Web Configurator 4 3 1 The LED Panel Use the LED panel to view the status of the individual ports The LED panel in the web configurator updates automatically every 5 seconds Figure 16 LED Panel The following table describes the labels in this screen Table 3 LED Panel LABEL DESCRIPTION 1G This LED is green if the corresponding port has a 1 Gbps connection 100 This LED is green if the corresponding port has a 100 Mbps connection Full This LED is green if the corresponding port is transmitting in full duplex mode Link This LED is green if the corresponding port has an Ethernet connection It is orange if the port has been disabled 1 52 This number indicates the port number on the switch 4 3 2 The Navigation Panel Navigate to individual feature configuration screens from the navigation panel The following
87. e VLAN tag is added U This indicates that this port is a member of the VLAN When the packet leaves the member port the VLAN tag is removed These buttons allow you to specify whether the individual ports are members of this VLAN Click the buttons below the numbers to change the state of the ports The possible states are empty This indicates that the port is not part of the VLAN T This indicates that this port is a member of the VLAN When the packet leaves the member port the VLAN tag is added U This indicates that this port is a member of the VLAN When the packet leaves the member port the VLAN tag is removed Create Click Create to add this VLAN to the switch Cancel Click Cancel to return to the VLAN status screen without making any changes 8 2 3 Edit IEEE 802 1Q VLAN Screen See Section 8 1 on page 63 for more information on VLANs Click VLAN in the navigation panel to display the IEEE 802 1Q VLAN screen as shown next ES 1552 User s Guide Chapter 8 VLAN Figure 33 VLAN Edit VLAN All Ai NS IEEE 802 1Q VLAN Help VLANID 2 Remove This VLAN Display All VLAN AAR 33 48 agas YS 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 T T T T T T T T T T T T T T T T 2 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 Tit tT TIT TIT TIT TIT TIT TI T T Click the icon under each port to change member state To change state of all ports click the icon unde
88. e following table describes the related labels in this screen Table 22 Rate Limit and Storm Control LABEL DESCRIPTION Port This field displays the port number Click on an individual port number to configure rate limits on that port Ingress Rate Displays the maximum bandwidth allowed in kilobits per second Kbps for the incoming traffic flow on a port Egress Rate Displays the maximum bandwidth allowed in kilobits per second Kbps for the out going traffic flow on a port 12 1 1 Rate Limit Screen Click a port number in the Port Rate screen to bring up the screen as shown next Figure 43 Rate Limit Configuration Egress Traffic Sha Rate Burst Size Rate Limit For Port 01 Help Ingress Rate 10 Mbps j Tokens Added Per Interval 157 Tokens Token Update Interval 7 8125 us Each token represents 0 5 bit ping Enabled No Limit 66 KB Apply The following table describes the related labels in this screen Table 23 Rate Limit Configuration LABEL DESCRIPTION Ingress Rate Specify the maximum bandwidth allowed in kilobits per second Kbps for the incoming traffic flow on a port Egress Traffic Shaping Select Disabled to not have any bandwidth limits for outgoing traffic on the port or select Enabled to enable bandwidth limits for outgoing traffic on the port Rate This is a read only field indicating the rate limit of
89. e less than 64 octets long and contained an invalid FCS including non integral and integral lengths Jabbers This field displays the number of frames dropped in this polling sample because they were longer than 1518 octets and contained an invalid FCS including alignment errors Collisions This field displays the total number of collisions that occurred in this polling sample ES 1552 User s Guide Chapter 19 RMON Lite Table 59 RMON History Statistics Control continued LABEL DESCRIPTION Utilization This field displays the utilization as a percentage of maximum utilization allowed on the port in this polling sample History Click this to go back to the RMON History Statistics Overview screen Statistics Overview 19 5 RMON Alarm Overview Use the RMON Alarm Overview screen to view configured alarms that occur when the sampled data exceeds the specified threshold To open this screen select 3 Alarm in the RMON MIB Table drop down list box in the RMON Lite screen Figure 78 RMON Alarm Overview RMON Lite RMON MIB Table 3 Alarm z RMON Alarm Overview Create new Alarm Help Refresh Help ae Rising Falling Interval n Sample Startup Rising Falling Index Sec Variable Type Value Alarm Threshold Threshold nt Event Owner Delete L A E Index Index J The following table describes the labels in this screen Table
90. ebug Delete RAM Vv Iv Iv 3 CLEAR Flash Iv Iv O 3 CLEAR Server Syslog1 192 158 1 5 514 1 O C L DELETE Facility local0 Max number of remote syslogd servers 4 Apply ES 1552 User s Guide Chapter 17 Event Logging The following table describes the labels in this screen Table 33 Logging LABEL DESCRIPTION Add Server Click this to configure a new syslog server Logging Target Click the RAM or Flash links to view the logs stored on the switch Use the columns on the right to select the types of system events each logging target should record Select Error to record system failures such as events which will cause the switch to malfunction and events such as invalid user input in the web configurator Warning to record non critical errors on the switch The switch will continue to function when warnings are recorded Info to record regular system events such as configuration changes or logins Debug to record events which can be helpful for engineering debugging of the switch s function This field is not recommended to track as it creates many messages not helpful to typical users For RAM and Flash logs you can also hit Clear to delete all log entries For each Server log you configured you can hit Delete to remove this syslog server from logging system events for the switch Apply Click Apply to save your changes to the switch 17 3 Logging Add Serve
91. ec t ud aod RS 137 Figure oo NGAINGARP Table Enies nA RNGA KAKA bet eduev utu deck tulo vta tula 137 Figure g7 Pop up BIGQKEN e 140 si x Go intomet TIONS akan S 141 AA 142 Figure BU Pop up Blocker SEHINGE 25 9 xai BAKING NABINA KA dni ados UOD os ce doa do AKA 142 Figure 91 M ugue rr Re P 143 Figure 92 Security Settings Java SOdIDEIDI iiiioscscuceseni ette a ANAKAN AA EE EUR EXE eaii NA 144 Figure ID acuto SES c JING GB e dto taa ud poi a t Rit UR Ha d Noob t he 144 2o 2 Javed POO get de eeumeeietacaeiasaacmetaian 145 Figure 95 Network Number and Host ID waa pencsaies KG GIG AN TAG AG PAA 154 Figure 96 Subnetting Example Before Subnetting aanak 156 Figure 97 Subnetting Example After Subnetting ma GA IA 157 ES 1552 User s Guide List of Figures ES 1552 User s Guide List of Tables List of Tables THG Na NG CaS AA AA AN 35 THES LEDE AA nee ere 38 WADE SLED PARGI NC 45 Table 4 Navigalon Panel LING 45 PANAO NAO ES DT EINER SM 49 Table 6 Configure IP ell eet 50 Table 7 Change UR Lio gl a ania cae a a nia BR ead Nu Hesdadan uua VEDO 52 EU codec MEET 56 TOSS Forn CONU O M a 56 je ETES EE AA AA AA 59 Tabi Ti Status Por Detalg eem 60 Jab PAN CN YLAN DIIS AAP AA AA E EE RR 64 Table 13 VLAN Create VLAN BAGA GANA AG 65 Table IRA EGL LP AA 66 Table 15 Munking bene 7s saaan pssnced ces naaniildetnactandas
92. efault administrator password is 1234 access the The username and password are case sensitive Make sure that you enter the correct web password and username using the proper casing If you have changed the password configurator and have now forgotten it you will need to reset the switch to its factory defaults Press the RESET button on the front panel of the switch for one second and the switch automatically reloads its default configuration file The IP address of the switch reverts to 192 168 1 1 Your computer s and the switch s IP addresses must be on the same subnet See the following section to check that pop up windows JavaScripts and Java permissions are allowed 21 2 1 Pop up Windows JavaScripts and Java Permissions In order to use the web configurator you need to allow Web browser pop up windows from your device JavaScripts enabled by default Java permissions enabled by default ES 1552 User s Guide Chapter 21 Troubleshooting BES Internet Explorer 6 screens are used here Screens for other Internet Explorer versions may vary 21 2 1 1 Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address 21 2 1 1 1 Disable pop up Blockers 1 In Internet Explorer select To
93. elected Bandwidth is divided across the different traffic queues according to their weights Note If you want to use Strict Priority but want to change the weights for the queues configure them with Weighted Round Robin selected first and then change the scheduling method to Strict Priority Apply Click Apply to save your changes to the switch 11 3 1 Change Number of Queues Use the Change Number of Queues screen to edit the number of queues on the switch Click Change in the QoS Setting screen to view the following screen Figure 37 Change Number of Queues Change Number of Queues Help Number of Queues 4 Apply Select the number of queues from the Number of Queues drop down list box and click Apply to save your settings to the switch ES 1552 User s Guide Chapter 11 QoS 11 4 Advanced QoS Settings The following sections describe additional methods for setting priority for incoming packets on the ports The switch allows you to choose one of the following methods BS Advanced QoS methods only affect the internal priority queue mapping for the switch The switch does not modify the IEEE 802 1p value for the egress frames 11 4 1 Port Based QoS You can configure the switch to assign a IEEE 802 1p priority to packets based on the ingress incoming port of the packet Select Port Based QoS in the QoS Enhancement Setting screen to view the following screen Figure 38 Port
94. en the following screen Use this screen to view and add entries to the ARP table Figure 85 Viewing ARP Table Entries Dynamic ARP Static MAC IP binding ADD tem MAC Address Refresh Help IPAddress VLAN Type Delete 4 04 02 03 AA BE 12 182 168 1 37 1 static DELETE The following table describes the labels in this screen Table 67 ARP Table LABEL DESCRIPTION Static MAC IP This field is only available when you enable dynamic ARP in the Dynamic ARP gt binding ADD Settings screen Click ADD to add a static entry to the ARP table See Section 20 4 on page 137 Item This is the ARP table entry number MAC Address This is the MAC address of the device connected to the switch with the corresponding IP address below IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address above VLAN This is the VLAN number of the device connected to the switch Type This shows whether the MAC address is dynamic learned by the switch or static manually entered in the Add Static MAC IP binding screen DELETE Click this to remove this ARP table entry 20 4 Adding ARP Table Entries Click ADD in the Dynamic ARP gt ARP Entries screen to open the Add Static MAC IP binding screen Use this screen to add entries to the ARP table Figure 86 Viewing ARP Table Entries MAC Address IP Addr
95. er is a single unit that houses a transmitter and a receiver The switch does not come with transceivers You must use transceivers that comply with the SFP Transceiver MultiSource Agreement MSA See the SFF committee s INF 8074i specification Rev 1 0 for details You can change transceivers while the switch is operating You can use different transceivers to connect to Ethernet switches with different types of fiber optic connectors Type SFP connection interface Connection speed 1 Gigabit per second Gbps BES To avoid possible eye injury do not look into an operating fiber optic module s connectors 3 1 2 1 Transceiver Installation Use the following steps to install a mini GBIC transceiver SFP module 1 Insert the transceiver into the slot with the exposed section of PCB board facing down Figure 9 Transceiver Installation Example IS 2 Press the transceiver firmly until it clicks into place ES 1552 User s Guide Chapter 3 Hardware Overview 3 The switch automatically detects the installed transceiver Check the LEDs to verify that it is functioning properly Figure 10 Installed Transceiver 3 1 2 2 Transceiver Removal Use the following steps to remove a mini GBIC transceiver SFP module 1 Open the transceiver s latch latch styles vary Figure 11 Opening the Transceiver s Latch Example 2 Pull the transceiver out of the slot Figure 12 Transceiver Removal Example 3 2 The R
96. espectively Select the Priority value and click Add Change Use these fields to edit existing IP address based QoS entries Select the index of an Priority existing IP address based QoS entry This is the same value as listed in the ID column of this screen Select the Priority you want to assign to this entry Click Change to view your changed settings Note The changes are not applied until you click Apply Change Settings ID IP This is a summary table of your IP address based QoS settings This table updates when MASK you click the Change button in this screen Click DELETE in the Delete column to Priority remove this IP address based QoS entry from the switch Delete Apply Click this when you have reviewed the changes you want to make and you want to save Change them to the switch s memory Settings ES 1552 User s Guide Port Rate Limit and Storm Control This chapter shows you how you can manage bandwidth on each port and set up broadcast storm control settings using the Port Rate and Storm Control screens 12 1 Port Rate Screen Rate control means defining a maximum allowable bandwidth for incoming and or out going traffic flows on a port Click Rate gt Port Rate in the navigation panel to bring up the screen as shown next Figure 42 Port Rate Limit Port Rate Help Ingress Egress In
97. ess VLAN ID Add Static MAC IP binding COCK HK Help ha Add ES 1552 User s Guide Chapter 20 Dynamic ARP The following table describes the labels in this screen Table 68 ARP Table LABEL DESCRIPTION MAC Address Enter the MAC address in 6 pair hexadecimal format of the network device you want to XX XX XX be allowed to communicate via the switch An example entry of a MAC address is Oa XX XX XX b1 c2 d3 e4 f5 IP Address Enter the corresponding IP address in dotted decimal notation ex 192 168 1 5 of the network device you want to be allowed to communicate via the switch VLAN ID Select the VLAN ID for this ARP entry Add Click this to save this entry to the ARP table and view the Dynamic ARP screen ES 1552 User s Guide Troubleshooting This chapter covers potential problems and possible remedies 21 1 Problems Starting Up the Switch Table 69 Troubleshooting the Start Up of Your Switch PROBLEM CORRECTIVE ACTION None of the LEDs Check the power connection and make sure the power source is turned on turn on when you turn on the switch If the error persists you may have a hardware problem In this case you should contact your vendor 21 2 Problems Accessing the Switch Table 70 Troubleshooting Accessing the Switch PROBLEM CORRECTIVE ACTION cannot The administrator username is admin The d
98. grade 52 firmware version 49 ES 1552 User s Guide Index Flash logs 97 flow control 57 back pressure 57 IEEE802 3x 57 forwarding based on MAC 84 front panel 35 G general features 150 getting help 48 H hardware installation 31 mounting 32 hardware overview 35 help web configurator 48 IANA 160 ingress mirror 69 installation freestanding 31 precautions 32 rack mounting 32 Intemet setting up your browser 142 Internet Assigned Numbers AuthoritySee IANA 160 introduction 27 IP address 49 IP address setup 50 J Java permissions 144 L L2 Level 2 table aging 50 L2 management 83 configuration 84 layer 2 features 150 LEDs 38 link aggregation 67 lockout 47 login 43 password 46 logs 97 adding external syslog 98 categories 100 configuration 98 external 97 Flash 97 overview 97 RAM 97 searching 100 types of events 98 Viewing 99 MAC address 135 MAC address learning 83 MAC address table 50 84 maintanence configuration backup 51 firmware 52 restoring configuration 51 Management Information Base MIB 105 Media Gateway Control Protocol MGCP 93 MGCP Media Gateway Control Protocol 93 MIB and SNMP 105 supported MIBs 106 MIB Management Information Base 105 MIBs 151 mini GBIC slots 36 connection speed 36 connector type 36 transceiver installation 36 transceiver removal 37 mirroring ports 69 monitor port 69 mounting brackets 32 MSA MultiSource
99. gress Egress Port Rate Rate P Rate Rate 01 NoLimit No Limit 27 No Limit No Limit 02 NoLimit No Limit 28 No Limit No Limit 03 NoLimit No Limit 29 No Limit No Limit 04 NoLimit No Limit 30 No Limit No Limit 05 NoLimit No Limit 34 No Limit No Limit 06 No Limit No Limit 32 NoLimit No Limit 07 NoLimit No Limit 33 No Limit No Limit 08 NoLimit No Limit 34 No Limit No Limit 09 NoLimit No Limit 35 No Limit No Limit 10 NoLimit No Limit 36 No Limit No Limit 11 NoLimit No Limit 37 No Limit No Limit 12 NoLimit No Limit 38 No Limit No Limit 13 NoLimit No Limit 39 No Limit No Limit 14 NoLimit NoLimit 40 NoLimit No Limit 15 NoLimit No Limit 41 No Limit No Limit 16 NoLimit No Limit 42 No Limit No Limit 17 NoLimit No Limit 43 No Limit No Limit 18 NoLimit No Limit 44 No Limit No Limit 19 NoLimit No Limit 45 No Limit No Limit 20 NoLimit No Limit 46 No Limit No Limit 21 NoLimit NoLimit 47 NoLimit No Limit 22 NoLimit No Limit 48 No Limit No Limit 23 No Limit No Limit 49 NoLimit No Limit 24 NoLimit No Limit 50 No Limit No Limit 25 NoLimit No Limit 51 No Limit No Limit 26 NoLimit NoLimit 52 NoLimit No Limit ES 1552 User s Guide 79 Chapter 12 Port Rate Limit and Storm Control Th
100. he VID of a manually entered MAC address entry ES 1552 User s Guide Chapter 13 Layer 2 L2 Management Table 25 L2 Management continued LABEL DESCRIPTION Port This field displays the port number of a manually entered MAC address entry Delete Click DELETE to remove this manually entered MAC address entry from the MAC address table 13 1 1 Add a Static MAC Address Entry Click Add in the L2 Address Management screen to display the configuration screen as shown Figure 46 Add a Static MAC Entry Add Static L2 Address Help Static MAC Address ROC ee rece E VLAN ID Port NUM v Add Address The following table describes the labels in this screen Table 26 Add a Static MAC Entry LABEL DESCRIPTION MAC Address Enter the MAC address in valid MAC address format that is six hexadecimal character pairs Note Static MAC addresses do not age out VID Enter the VLAN identification number Port Select the port where the traffic with the destination MAC address entered in the MAC Address field will be automatically forwarded Add Address Click this to add this entry into the MAC address table 13 2 Viewing the L2 Address Table Use the L2 Address Table screen to view entries in the MAC address table Click L2 Address gt Display in the navigation panel to display the screen as shown ES 1552 User s Guide Cha
101. he file on your computer from the Save in drop down list box and type a descriptive name for it in the File name list box Click Save to save the configuration file to your computer 5 1 4 Restore Settings Restore a previously saved configuration from your computer to the switch using the Restore Settings screen Figure 22 Restore Settings Restore Settings Please select a saved configuration file Browse Restore Type the path and file name of the configuration file you wish to restore in the Please select a saved configuration file text box or click Browse to display the Choose File screen from which you can locate it After you have specified the file click Restore Make sure you are using the proper configuration when you are restoring your configuration The file name extension should be cfg If you attempt to restore a wrong configuration file the following error message appears Figure 23 Restore Configuration Error Restore Settings ERROR Invalid format or version not matched Retry You can click Retry to locate the proper configuration file ES 1552 User s Guide 151 Chapter 5 System 5 2 System Change Password Use the Change Password screen to change the administrator username and password for the switch Click System 5 Password to view the screen as shown Figure 24 System Password Old Password New Password Change Password Help Confirm New Pa
102. he main SNMP Group screen Group Name Edit the name for this SNMP group SNMP Version Specify the SNMP version this group uses to manage the switch Authentication This field is only editable if you select SNMPv3 in the SNMP Version field Select Enabled to force SNMP v3 groups to authenticate with the switch or select Disabled to deactivate authentication for the SNMP v3 groups For SNMP v1 and SNMP v2c ES 1552 User s Guide authentication is always disabled Chapter 18 SNMP Table 43 SNMP Group Modify continued LABEL DESCRIPTION Access Read select Enabled to allow this group to collect information from this switch Write select Enabled to allow this group to create or edit SNMP objects Apply Click this to save your settings to the switch 18 3 SNMP User An SNMP user is an SNMP manager SNMP managers must use the proper SNMP user and group credentials to gain access to and manage agents such as the switch Use the SNMP User screen to create SNMP users and associate them to SNMP groups Click SNMP gt User to view the screen as shown Figure 62 SNMP User SNMP User Help User ID Create New User User ID Auth User Name Group Name SNMP Version Type Click on User ID to edit or remove The following table describes the labels in this screen Table 44 SNMP User LABEL DESCRIPTION User ID Select the SNMP user you
103. ia TU Ae ops T 46 Broadcast and multicast 1024 kbps 47 Broadcast and multicast 1024 kbps 48 Broadcast and multicast 1024 kbps 49 Broadcast and multicast 1024 kbps 50 Broadcast and multicast 1024 kbps 51 Broadcast and multicast 1024 kbps 52 Broadcast and multicast f 1024 kbps The following table describes the labels in this screen Table 24 Broadcast Storm Control LABEL DESCRIPTION Port Select the port number for which you want to configure storm control settings or select Apply settings to all ports to configure all the ports at once Storm Control Type Select Disabled to turn off this feature Broadcast only to only specify a limit for the amount of broadcast packets received per second Broadcast and multicast to specify a limit for the amount of broadcast and multicast packets received per second Broadcast and unknown unicast to specify a limit for the amount of broadcast and DLF packets received per second Broadcast multicast and unknown unicast to specify a limit for the amount of broadcast multicast and DLF Destination Lookup Failure packets received per second Storm Control Rate Select the number of packets of the type specified in the Storm Control Type field per second the switch can receive per second Apply Click Apply to save your changes to the switch ES 1552 User s Guide Layer 2 L2 Management Use these
104. ication Apply SNMP Trap Station Help Trap Station ID Create New Trap Station Trap Station ID Remote IP Address Community String Click on Trap Station ID to edit or remove The following table describes the labels in this screen Table 51 SNMP Trap Station LABEL DESCRIPTION Trap Station ID Select the SNMP trap station you want to edit Create New Click this to configure a new SNMP Trap Station Trap Station Trap Station ID This field indicates the trap station number It is used for identification only Click on the individual trap station number to edit the trap station settings Remote IP This field displays the IP address of the remote SNMP management station Address Community An SNMP community string is a text string that acts as a password It is used to String authenticate messages that are sent between the management station the SNMP manager and the device the SNMP agent The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent This field displays the community string of this remote trap station Previous Page Use these navigation links to browse all of your SNMP groups Next Page 18 6 1 SNMP Trap Station Create Click on the Create New Trap Station link in the SNMP Trap Station screen to add an SNMP Trap Station The screen displays as shown Figure 70 SNMP Trap Station Create SNMP
105. ick Apply to create the VLAN or update the VLAN s configuration ES 1552 User s Guide Trunking This chapter shows you how to logically aggregate physical links to form one logical higher bandwidth link 9 1 Trunking Overview Trunking is the grouping of physical ports into one logical higher capacity link You may want to trunk ports if for example it is cheaper to use multiple lower speed links than to under utilize a high speed but more costly single port link However the more ports you aggregate then the fewer available ports you have A trunk group is one logical link containing multiple ports 9 1 1 Distribution Criterion The switch uses a traffic distribution algorithm to balance traffic between trunk members The switch allows you to specify what criteria it should use to calculate the most efficient distribution of traffic The choices are Source MAC Address SA Destination MAC Address DA or both SA DA The best choice of distribution criteria depends on your specific network environment 9 2 Trunk Setting Screen Use this screen to aggregate groups of physical ports into one higher capacity link Click Trunk Groups in the navigation panel to display the Trunk Setting screen ES 1552 User s Guide Chapter 9 Trunking Figure 34 Trunk Setting Trunk Setting Distribution Criterion SA Source MAC Address Modify Trunk Group Member Trunk id 1 Port 27 Add Help
106. identification only Click on the individual group number to edit the group settings Group Name This field displays the name of the SNMP group SNMP Version This field indicates which SNMP version this group uses to manage the switch Authentication This field indicates whether authentication is required for members of this group Authentication can only be configured for SNMP v3 Access This field indicates the rights this group has for SNMP management R indicates that this group has read rights and W indicates Write meaning that you can edit the MIBs on the switch Previous Page Next Page Use these navigation links to browse all of your SNMP groups 18 2 1 SNMP Group Create Use the SNMP Group Create screen to add an SNMP group Click on the Create New Group link in the SNMP Group screen The screen displays as shown Figure 60 SNMP Group Create SNMP Group SNMP Version GroupName Authentication Enabled C Disabled Access Read Enabled C Disabled write Enabled Disabled Create Cancel Help ES 1552 User s Guide Chapter 18 SNMP The following table describes the labels in this screen Table 42 SNMP Group Create LABEL DESCRIPTION Group Name Specify the name for this SNMP group You can use 1 33 any printable character Spaces are allowed SNMP Version Specify the SNMP version this group u
107. ield displays the total number of good multicast packets received Stats CRCAlignErrors This field displays the number of packets between 64 1518 octets long dropped because they either had bad Frame Check Sequence FCS or non integral number of octets alignment error StatsUndersizePkts This field displays the number of packets including bad packets received that were between 0 and 64 octets in length ES 1552 User s Guide 121 Chapter 19 RMON Lite Table 55 RMON Statistics Port continued LABEL DESCRIPTION StatsOversizePkts This field displays the number of untagged packets including bad packets received that were greater than 1518 octets in length StatsFragments This field displays the number of frames dropped because they were less than 64 octets long and contained an invalid FCS including non integral and integral lengths StatsJabbers This field displays the number of frames dropped because they were longer than 1518 octets and contained an invalid FCS including alignment errors StatsCollisions This field displays the total number of collisions occurred StatsPkts64Octets This field displays the number of packets including bad packets received that were 64 octets in length StatsPkts65to127Octets This field displays the number of packets including bad packets received that were between 65 and 127 octets in length StatsPkts 128t02550ctets This field displays
108. including bad packets received that BytePkts were between 512 and 1023 octets in length 1024 1518 This field shows the number of packets including bad packets received that BytePkts were between 1024 and 1522 octets in length ES 1552 User s Guide VLAN This chapter shows you how to configure IEEE 802 1Q tagged VLANs 8 1 Introduction to IEEE 802 1Q Tagged VLANs A tagged VLAN uses an explicit tag VLAN ID in the MAC header to identify the VLAN membership of a frame across bridges they are not confined to the switch on which they were created The VLANs can be created statically by hand or dynamically through GVRP The VLAN ID associates a frame with a specific VLAN and provides the information that switches need to process the frame across the network A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID Tag Protocol Identifier residing within the type length field of the Ethernet frame and two bytes of TCI Tag Control Information starts after the source address field of the Ethernet frame The CFI Canonical Format Indicator is a single bit flag always set to zero for Ethernet switches If a frame received at an Ethernet port has a CFI set to 1 then that frame should not be forwarded as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 VLANs Note that user priority and VLAN ID are independent of each other A frame
109. individual devices on a network Every networking device including computers servers routers printers etc needs an IP address to communicate across the network These networking devices are also known as hosts Subnet masks determine the maximum number of possible hosts on a network You can also use subnet masks to divide one network into multiple sub networks Introduction to IP Addresses One part of the IP address is the network number and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each house has its own house number each host on the network has its own unique identifying number the host ID Routers use the network number to send packets to the correct network while the host ID determines to which host on the network the packets are delivered Structure An IP address is made up of four parts written in dotted decimal notation for example 192 168 1 1 Each of these four parts is known as an octet An octet is an eight digit binary number for example 11000000 which is 192 in decimal notation Therefore each octet has a possible range of 00000000 to 11111111 in binary or O to 255 in decimal The following figure shows an example IP address in which the first three octets 192 168 1 are the network number and the fourth octet 16 is the host ID ES 1552 User s Guide Appendix B IP Addresses
110. is User s Guide may use the following generic icons The switch icon is not an exact representation of your device switch Computer Notebook computer Ness a Server Firewall NN LL a Goa Gil NG SS Do GES guru NO um Gea ug I Er Ss Telephone Switch Router ES 1552 User s Guide a Safety Warnings Safety Warnings O For your safety be sure to read and follow all warning notices and instructions e e e e e Do NOT use this product near water for example in a wet basement or near a swimming pool Do NOT expose your device to dampness dust or corrosive liquids Do NOT store things on the device Do NOT install use or service this device during a thunderstorm There is a remote risk of electric shock from lightning Connect ONLY suitable accessories to the device Do NOT open the device or unit Opening or removing covers can expose you to dangerous high voltage points or other risks ONLY qualified service personnel should service or disassemble this device Please contact your vendor for further information Make sure to connect the cables to the correct ports Place connecting cables carefully so that no one will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect the power adaptor or cord to the right supp
111. is an Ethernet switch with 48 10 100Mbps ports two RJ 45 Gigabit ports for stacking and two mini GBIC slots for fiber connections With its built in web configurator managing and configuring the switch is easy See Appendix A on page 149 for a full list of software features available on the switch 1 1 1 Backbone Application The switch is an ideal solution for small networks where rapid growth can be expected in the near future The switch can be used standalone for a group of heavy traffic users You can connect computers and servers directly to the switch s port or connect other switches to the switch In this example all computers can share high speed applications on the server To expand the network simply add more networking devices such as switches routers computers print servers etc Figure 1 Backbone Application ES 1552 User s Guide Chapter 1 Getting to Know Your Switch 1 1 2 Bridging Example In this example application the switch connects different company departments RD and Sales to the corporate backbone It can alleviate bandwidth contention and eliminate server and network bottlenecks All users that need high bandwidth can connect to high speed department servers via the switch You can provide a super fast uplink connection by using a Gigabit Ethernet mini GBIC port on the switch Moreover the switch eases supervision and maintenance by allowing network managers to centralize multiple servers at a
112. k On The link to a 10 100 Mbps Ethernet network is up Off The link to an Ethernet network is down Gigabit Ethernet Ports ES 1552 User s Guide Chapter 3 Hardware Overview Table 2 LEDs continued LED COLOR STATUS DESCRIPTION 100 1000 Green On The link to a 1000 Mbps Ethernet network is up Amber On The link to a 100 Mbps Ethernet network is up Off The link to a 10 Mbps Ethernet network is up Or the link to an Ethernet network is down ACT Green On The link to an Ethernet network is up Blinking The Ethernet port is transmitting receiving data Off The link to an Ethernet network is down GBIC Slots LNK Green On The port has a successful connection Off No Ethernet device is connected to this port ACT Green Blinking The port is receiving or transmitting data Off The link to an Ethernet network is down ES 1552 User s Guide Chapter 3 Hardware Overview ES 1552 User s Guide PART II Basic 4 Advanced Settings The Web Configurator 43 System 49 Port Settings 55 59 VLAN 63 Trunking 67 Mirroring 69 QoS 71 Port Rate Limit and Storm Control 79 Layer 2 L2 Management 83 Cable Diagnostics 87 Auto Denial of Service DoS 89 Auto VoIP 93 The Web Configurator This section introduces the configuration and functions of the web configurator 4 1 Introduction The web configurator is an HT
113. l of Service DOR ios cios iou ri rtnU E eea FAYEP ENETRA FEYRRTRRVRRIRTRA TRNR RRVAR ARN dn 89 15 1 About Denial af Service AUGOKS aaa AA 89 15 107 Das SIDES SOT oe aer ebi ER ER PODER P Soon AA 89 15 2 Global Auto Bos Attack Preveniion mGA ERIS SEN E EPA EE EFI IRR EERMI Co NF e HAT RPM RR 90 15 3 Advanced Auto DoS Attack PreventOD 1i dern ien tot nua au Fo RR nd uR Uo ni IER UR AN YR EE nnda 90 Chapter 16 Auto VolP e 93 To BUGA VOIE A S evene E ATE ECKEN HI EXER AA 93 16 2 onis nic iu Re 93 Part Ill Management and Troubleshooting 95 Chapter 17 Event Esset AA AA 97 T T Eveht LOGI INGKONG GA AB rp Le AA AK AA 97 NA GO GAN Mem S 97 17 3 Logging Add Server e sania 98 174 Viewing RAM and Flash LOSS coca i o Re Red end ie needs 99 17 5 Searching FRAM D sbg rugRo e 100 17 5 1 Search BESUNG e 102 Chapter 18 SNMP ep t 105 KOO Neg AA AA SEE 105 184 1 Supported MIBE aa AA AA AAG 106 T2 1 2 SNMP TAPS caicrsseassissstiisasietionussinenstavieniennss IKA AANI 106 16 1 5 SNMP v3 ang Authentication maa GA KEANNA BKA 106 TOTA ONP BaginelD m CE 107 Ta ovi aaa AANGAT ANA AABANG 107 16 201 SMP Group EG e AGA GAGA 108 19 2 2 SNMP Group MOD 3ps GANGBANG HEBIKNUGIDHAUBB d dS AA 109 ES 1552 User
114. lete this user configuration from the switch Click on Display All User to view the main SNMP User screen User Name Edit the name for this SNMP user Group Name Select the SNMP group this user should belong to SNMP Version Specify the SNMP version this group uses to manage the switch Auth Type Authentication can only be configured for SNMP v3 Select None to allow this user to manage the switch without authentication or select MD5 and configure the New Key field to force this user to authenticate with the switch Old Key Enter the old MD5 key this user used for authentication if you are setting up the key for the first time leave this field blank New Key Enter the new MD5 key this user must use to authenticate with the switch Apply Click this to save your settings to the switch 18 4 SNMP Community SNMP communities act like passwords and are used to define the security parameters of SNMP clients in an SNMP v1 and SNMP v2c environments The default SNMP community is public for both SNMP v1 and SNMP v2c before SNMP v3 is enabled Once SNMP v3 is enabled the communities of SNMP v1 and v2c have to be unique and cannot be shared Use the SNMP Community screen to create SNMP communities and associate SNMP groups to them Click SNMP gt Community to view the screen as shown Figure 65 SNMP Community SNMP Community Help Community ID Create New Community Community Communit
115. ly voltage for example 110V AC in North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution If the power adaptor or cord is damaged remove it from the power outlet Do NOT attempt to repair the power adaptor or cord Contact your local vendor to order a new one Do not use the device outside and make sure all the connections are indoors There is a remote risk of electric shock from lightning Do NOT obstruct the device ventilation slots as insufficient airflow may harm your device This product is recyclable Dispose of it properly ES 1552 User s Guide Safety Warnings ES 1552 User s Guide Safety Warnings ES 1552 User s Guide Contents Overview Contents Overview Introduction and Hardware Overview U 11111111111110 00nn AASA 25 BILING KO BNGYAN kA 27 Hardware Installation and Connection saan AN ttu dd Aa al Hardware OVEIVIOW nsaan BARAN ARAB AA AASA AA 35 Basic amp Advanced Sello S sssrinin a asas Na NAN a RE UD GAAN 41 The WER Been e 43 AA 49 a AA 55 Sa ad PO SIS EOS 25 cd cde as Ead adi e da Ed s b in APA PAO 59 ps Be aaa ce rere ah Ka elo ed dd breui mre een om URE LLL Haie eco aT dede 63 Bir
116. m m m m m m TC im m m m m m m m m m m m m m m m m m m m m Apply The following table describes the labels in this screen Table 66 ARP Table LABEL DESCRIPTION Enable Select or deselect this to activate or deactivate Dynamic ARP on the switch Dynamic ARP Note You must activate dynamic ARP first if you want to add static ARP table entries Aging Time Specify how long in hours the switch remembers the learned ARP table entries Specify O to have the switch remember the ARP table entries for an unlimited time period Trusted ports Packets arriving on trusted ports bypass all Dynamic ARP validation checks and those arriving on untrusted ports undergo the validation process Default state of all ports is untrusted Select the trusted ports for each Dynamic ARP configuration you set up Enable Select the range of VLANs you want to perform validation checks based on the ARP Dynamic ARP entries in the ARP table for VLAN from nto Disable Select the range of VLANs you want to bypass validation checks based on the ARP Dynamic ARP entries in the ARP table for VLAN from to Current This field shows the VLANs for which Dynamic ARP validation is enabled Enabled VLAN Apply Click this to save your settings to the switch ES 1552 User s Guide Chapter 20 Dynamic ARP 20 3 Viewing ARP Table Entries Click Dynamic ARP gt ARP Entries in the navigation panel to op
117. ming DSCP value according to the DiffServ to IEEE 802 1p mapping table 11 4 4 DSCP Based QoS Screen You can configure the switch to assign a IEEE 802 1p priority to packets coming into the switch with DSCPs assigned to them Select DSCP Based QoS in the QoS Enhancement Setting screen to view the following screen ES 1552 User s Guide Chapter 11 QoS Figure 39 DSCP Based QoS QoS Enhancement Setting Mode DscP Based QoS Help Change Priority DSCP o Priority o Change DSCP Priority DSCP Priority mo 8 i 0 01 D 33 D 42 I 34 j 0 03 D 35 0 EC s D 36 D 05 0 37 0 06 D 38 D WC MW p pup uu om D 60 0 29 D 61 D 30 D 62 0 31 0 63 D Apply Change Settings The following table describes the labels in this screen Table 19 DSCP Based QoS LABEL DESCRIPTION Mode Select DSCP Based QoS to specify mapping rules between DSCP priority and IEEE 802 1p priority for incoming packets on the switch Change Configure the following Priority DSCP Select the DSCP priority for which you want to change a priority mapping Priority Select the IEEE 802 1p priority you want to assign to the packets with the DSCP priority you specified in the DSCP field Click Change to view your changed settings Note The changes are not applied until you click Apply Change Settings DSCP This is a summary table of your DSCP to IEEE 802 1p priority mappings The DSCP Prio
118. na AB AN ARA KAN GAB KANE aE NN 33 Foe Mete ee E 35 Figure 9 Transceiver Installation EXIITIDIB 7a NG ERI Py HENRS ARM AES RFROL ES PROLES YER PLA ES RF IA NE RC RS 36 Figure T0 installed Transceiver a aan pede onc eb Ee ter PARI EEEE CUR REX COUR OR MA tru EREA STEEKR TANA 37 Figure 11 Opening the Transceiver s Latch Example a esee c rr rr ctt inne d rav 37 Figure TZ Transceiver Removal Example BAGAN petia dos beige enr is do p a owes eas RE ane 37 Figure T3 P959 P aaa AA AA AA BAGA AGA 38 Figure 14 Web Conig rator Login aanak 44 Figure 15 Web Configurator Home Screen System daanan saaan anna sans 44 Figure TO LED PANG NANANA mE 45 Figure 17 Change Administrator Login Password etra ttn GANG NGANGA tax rada 47 Figure 18 Web Configurator Logout LINK sma an IKAN AGA EE PARI OE 48 Figure T9 co nM 49 Figure Z0 Longa IP Aa ate SS ANAN EPOR URL REL OR a EIAS AR ASSAI S HK 50 Figure 21 Comer LZ TANG KANG eee n 50 Figure 22 Restore Segs saaan 51 Figure 23 Restore Configuration EMOT ANAKAN ABAKA pad RR LG I einai dapat 51 Foue AA Fase AA 52 Figure 5 FI UBFSEIB maa AN GAAN A 53 Figure 20 System RESET aan AA AA AABANGAN 53 Figure 27 PO eco dee 55 Fite 26 PER COPIO RE 56 YOUN ee Ka Cc 59 Figure 30 Status Port Baki aNG AA IBA KINAKAIN NN AA 60 Foure J1 VLAN VLAN SUS qe 64 Figure LAN Greate VLAN E 65 FoS do LITE VLAN zana a A 66 Foure 34 TUNK SONG AA AA 68 AM
119. ng packets and the Priority column indicates what IEEE 802 1p priority gets assigned to those packets Apply Click this when you have reviewed the changes you want to make and you want to save Change them to the switch s memory Settings 11 4 2 DSCP Based QoS The switch allows you to create a mapping table between Differentiated Services Code Points DSCPs tags and IEEE 802 1p priority tags 11 4 3 Differentiated Services Code Point DSCP Overview Differentiated Services DiffServ is a class of service CoS model that marks packets so that they receive specific per hop treatment at DiffServ compliant network devices along the route based on the application types and traffic flow Packets are marked with DiffServ Code Points DSCPs indicating the level of service desired This allows the intermediary DiffServ compliant network devices to handle the packets differently depending on the code points without the need to negotiate paths or remember state information for every flow In addition applications do not have to request a particular service or give advanced notice of where the traffic 1s going DiffServ defines a new DS Differentiated Services field to replace the Type of Service ToS field in the IP header The DS field contains a 2 bit unused field and a 6 bit DSCP field which can define up to 64 service levels You can configure the DSCP to IEEE 802 1p mapping to allow the switch to prioritize all traffic based on the inco
120. ngs Java Scripting Security Settings 2 xi Settings 125 Scripting 3 poe a E Allow paste operations via script QO Disable Enable O Prompt amp SURG of Java applets Q Prompt Lleaw Aukkhankic skian z Reset custom settings Reset to Medium Reset o se 21 2 1 3 Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab Click the Custom Level button Scroll down to Microsoft VM a Bb WN Click OK to close the window Figure 93 Security Settings Java Security Settings ajx Settings O Disable Enable EX Font download O Disable Enable i Q Prompt 3 Microsoft YM BJ Java permissions o Custom Reset to Medium Reset E twa custom settings Under Java permissions make sure that a safety level is selected ES 1552 User s Guide Chapter 21 Troubleshooting 21 2 1 3 1 JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 make sure that Use Java 2 for lt applet gt under Java Sun is selected 3 Click OK to close the window Figure 94 Java Sun General Security Privacy Content Connections Programs Advanced Settings Use inline AutoComplete O Use Passive FTP for firewall and DSL modem compatibility Use smooth scrolling HTTP 1 1 settings Use HTTP 1 1 O Use HTTP 1 1 through proxy connections
121. ning to search non critical errors on the switch The switch will continue to function when warnings are recorded Info to search regular system events such as configuration changes or logins e Debug to search events which can be helpful for engineering debugging of the switch s function This field is not recommended to track as it creates many messages not helpful to typical users Category Select All to search all categories or specify the individual categories you want to search The categories are based on software and hardware features of the switch For example the category AUTODOS records events which deal with the Auto Denial of Service features you set up and the category SYSTEM records events which deal with the overall operation of the switch Submit Click this to perform the search and view the results in the search results screen See Section 17 5 1 on page 102 Export Click this to export save the search results The logs default name is events csv A csv Comma Separated Values file can be viewed by most spreadsheet software such as Microsoft s Excel 17 5 1 Search Results The Search Results RAM Flash screen displays the results of your log query Click Submit in the Logs Search screen to view the logs which match your search criteria Figure 56 Logs Search Results Search Results RAM Help Index Level Category Time Message 97 INFO WEB 2006 5 1 17
122. nity String public Remote Station IP 0 0 0 0 Group Name v Apply The following table describes the labels in this screen Table 49 SNMP Community Modify LABEL DESCRIPTION Community ID This field indicates which community you are modifying Click on Remove This Community to delete this user configuration from the switch Click on Display All Community to view the main SNMP Community screen Community An SNMP community string is a text string that acts as a password It is used to String authenticate messages that are sent between the management station the SNMP manager and the device the SNMP agent The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent Type the community string for this community Remote Station Specify the IP address of the remote SNMP management station in dotted decimal IP notation Group Name Select the SNMP group you want to belong to this community Apply Click this to save your settings to the switch 18 5 SNMP Notification SNMP supports a notification mechanism to alert SNMP managers when events occur There are two types of notification mechanisms supported by the switch SNMP Notification SNMP traps are sent to external SNMP management stations Authentication Notification Failed authentication attempts are logged by the switch Use the SNMP Notification section of the SNMP Trap Station s
123. ols Pop up Blocker and then select Turn Off Pop up Blocker Figure 87 Pop up Blocker Tools Mail and News bj Turn Off Pop up Blocker Manage Add ons Pop up Blocker Settings Synchronize Windows Update poce eee rte eee tee Windows Messenger Internet Options You can also check if pop up blocking is disabled in the Pop up Blocker section in the Privacy tab 1 In Internet Explorer select Tools Internet Options Privacy 2 Clear the Block pop ups check box in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled ES 1552 User s Guide Chapter 21 Troubleshooting Figure 88 Internet Options Internet Options PIR General Security Privacy Content Connections Programs Advanced Settings f Move the slider to select a privacy setting for the Internet RE zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable CJ information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker O Prevent most pop up windows from appearing C Block pop up 3 Click Apply to save this setting 21 2 1 1 2 Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1
124. ot be reproduced in any part or as a whole transcribed stored in a retrieval system translated into any language or transmitted in any form or by any means electronic mechanical magnetic optical chemical photocopying manual or otherwise without the prior written permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Trademarks ZyNOS ZyXEL Network Operating System is a registered trademark of ZyXEL Communications Inc Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners Certifications Federal Communications Commission FCC Interference Statement This device complies with Part 15 of FCC rules Operation is subject to the following two conditions This device may not cause harmful interference This device must accept any interference received including interference that may cause undesired operations ES 1552 User s Guide Appendix C Legal Information FCC Warning This device has been tested
125. ourself and all others from using the web configurator if you 1 Remove all the ports from the default VLAN default is VLAN 1 when no other VLANS exist 2 Disable all ports Forget the password and or IP address 4 Enable Dynamic ARP without entering the proper MAC to IP address binding C 4 6 Resetting the Switch If you lock yourself and others from the switch or forget the administrator password you will need to reset the switch back to the factory defaults Use the RESET button on the front panel of the switch to reset the switch back to factory defaults Press and hold the RESET button for one second The switch will reload its factory defaults The switch is now reinitialized with a default configuration file including the default administrator username admin and password 1234 The IP address of the switch also reverts to the default 192 168 1 1 4 7 Logging Out of the Web Configurator Click Logout in the navigation panel to exit the web configurator You have to log in with your password again after you log out This is recommended after you finish a management session for security reasons ES 1552 User s Guide Chapter 4 The Web Configurator Figure 18 Web Configurator Logout Link Device Name ES 1552 Firmware Version N1 12 ARS 0 b0 Upgrade Build Date Thu Dec 7 11 07 44 2006 MAC Address 00 13 49 AA 4B DD IP Address 192 168 1 1 Subnet Mask 255 255 255 0 Gateway 192
126. outgoing traffic on the port in Kbps This value changes depending on the number of Tokens Added Per Interval ES 1552 User s Guide Chapter 12 Port Rate Limit and Storm Control Table 23 Rate Limit Configuration continued LABEL DESCRIPTION Tokens Added Per Interval The switch uses a Token Bucket algorithm to limit the outgoing rate on the ports and to limit the largest amount of packets that can leave the port in any one instance In this algorithm each token represents an allowed amount of bandwidth to be sent out on the port The bucket holds the tokens In other words the number of tokens in the bucket represents the maximum allowed bandwidth to go out on the port The size of the bucket is specified by the burst size see below Every time traffic goes out on the port tokens representing used up bandwidth are removed from the bucket thus limiting the amount of traffic allowed to go out on the port Tokens are also added to the bucket every Token Update Interval thus resetting the amount of bandwidth allowed to go out If the bucket is empty the data packets are dropped until more tokens are added to the bucket Select the number of tokens that should be added to the bucket per Token Update Interval Each token represents 5 bit in bandwidth allowed to go out on the port Burst Size The burst size specifies the maximum amount of traffic that can be allowed out the port at
127. ow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port The switch uses IEEE802 3x flow control in full duplex mode and backpressure flow control in half duplex mode IEEE802 3x flow control is used in full duplex mode to send a pause signal to the sending port causing it to temporarily stop sending signals when the receiving port memory buffers fill Back Pressure flow control is typically used in half duplex mode to send a collision signal to the sending port mimicking a state of packet collision causing the sending port to temporarily stop sending signals and resend later Select Enable to turn this feature on or select Disable to turn it off Default Priority This priority value is added to incoming frames without a priority queue tag PVID Enter a number identifying an existing VLAN The switch tags the incoming untagged frames on that port so that the frames are forwarded to the VLAN group that the tag defines Apply Click Apply to save your changes to the switch ES 1552 User s Guide Chapter 6 Port Settings ES 1552 User s Guide System and Port Statistics This chapter describes the overview and individual port statistics screens 7 1 Overview The statistics screen of the web configurator displa
128. peed Four RMON groups history statistics alarms and events Throughput monitoring Port mirroring and aggregation Firmware upgrade and download through HTTP FLASH memory Reset to default button Network Management Web based management SNMP v1 v2c and v3 10 Trap Stations supported RMON groups history statistics alarms and events 4 Logging servers supported MIB RFC1213 MIB Il System RFC1213 MIB II Interface RFC1398 MIB Ether like RFC2819 Four groups of RMON history statistics alarms and events Table 74 Physical and Environmental Specifications LEDs Main switch PWR Per Gigabit port ACT 100 1000 Per mini GBIC port LNK ACT Per 100 Mbps Ethernet port LNK ACT Dimension Standard 19 rack mountable WxDxH 441 mm x 195 mm x 44 mm Device Weight 2 74 Kg Temperature Operating 0 C 45 C 32 F 113 F Storage 10 C 70 C 13 F 158 F Humidity 10 9096 non condensing Power Supply AC 100 240V 50 60Hz 0 8A max internal universal power supply Wire Gauge Specifications Ground Wire 18 AWG or larger Power Wire 18 AWG or larger Safety CSA 60950 1 EN 60950 1 IEC 60950 1 EMC FCC Part 15 Class A CE EMC Class A ES 1552 User s Guide Appendix A Product Specifications 152 ES 1552 User s Guide IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks IP addresses identify
129. pings in two different ways DHCP Snooping The switch listens to traffic from a DHCP server on a trusted port and learns IP to MAC address bindings by parsing DHCP ACK packets Static Entries The switch administrator can enter static IP to MAC address mappings via the web configurator 20 1 2 How Dynamic ARP Works When an incoming ARP packet destined for a host device on a local area network arrives at the switch the switch s ARP program looks in the ARP table and if it finds the address sends it to the device If no entry is found for the IP address dynamic ARP discards the ARP packet 20 2 Enabling Dynamic ARP Click Dynamic ARP gt Settings in the navigation panel to open the following screen Use the Dynamic ARP screen to configure ARP filtering on the specified VLANs ES 1552 User s Guide 1135 Chapter 20 Dynamic ARP Figure 84 Dynamic ARP Dynamic ARP I Enable Dynamic ARP Aging Time hours Trusted ports Click the checkbox under each portto assign trusted ports 01 02 03 04 05 27 28 29 30 31 m m m m m mm m m m Enable Dynamic ARP for VLAN from to Disable Dyamic ARP for VLAN from to s Current Enabled VLAN Help 06 o7 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 SG m u im m m m m m m m
130. pplied until you click Apply Change Settings TOS This is a summary table of your ToS priority to IEEE 802 1p priority mappings The TOS Priority column indicates the ToS priority of the incoming packets and the Priority column indicates what IEEE 802 1p priority gets assigned to those packets Apply Click this when you have reviewed the changes you want to make and you want to save Change them to the switch s memory Settings 11 4 6 IP Address Based QoS You can configure the switch to assign a higher priority to packets coming into the switch from specific IP addresses Select IP Address Based QoS in the QoS Enhancement Setting screen to view the following screen ES 1552 User s Guide Chapter 11 QoS Figure 41 IP Address Based QoS QoS Enhancement Setting Help Mode IP Address Based QoS Add Entry iP MASK Priority 0 Add ww Xy Z Ww Xy Z Change Priority Index fi Priority fa Change D E MASK Priority Delete 01 192 168 1 33 25525528550 z DELETE Apply Change Settings The following table describes the labels in this screen Table 21 IP Address Based QoS LABEL DESCRIPTION Mode Select IP Address Based QoS to give higher or lower priority to packets coming into the switch from a specified source IP address Add Entry Enter the IP address and the subnet mask of the source whose traffic you want to assign a priority to in the IP and MASK fields r
131. pter 13 Layer 2 L2 Management Figure 47 Display L2 Address Table L2 Address Table Reload Address Table Help Total number of L2 Learned Entries 28 Static 1 Dynamic 27 Item Source MAC VID Port Type 1 20 06 08 22 00 08 1 18 dynamic 2 00 0F FE 1E 4A ED 1 18 dynamic 3 00 0F FE AD 58 AB 1 18 dynamic 4 00 02 E3 30 43 34 1 18 dynamic 5 00 OF FE 3D 07 5B 1 18 dynamic 6 00 10 18 53 47 01 1 HOST static 7 00 11 85 89 7A D9 1 18 dynamic 8 00 16 D3 27 D0 85 1 18 dynamic 9 00 16 D3 27 D0 1B 1 18 dynamic 10 00 13 49 D1 FADE 1 18 dynamic 11 00 C0 9F CD CC 5F 1 18 dynamic 42 00 C0 A8 FA E9 27 1 18 dynamic 13 00 50 BA AD 4F 81 1 2 dynamic 44 00 00 E8 7C 1 4 80 1 a dynamic 15 00 04 80 9B 78 00 1 18 dynamic Previous Page Next Page The following table describes the labels in this screen Table 27 Display L2 Address Table LABEL DESCRIPTION Reload Click this to update all the fields in the L2 Address table Address Table Item This is the index number of the MAC address entry Source MAC This field displays the MAC address VID This field displays the VID of a manually entered MAC address entry Port This field displays the port number of a MAC address entry or it displays HOST if its the entry for the switch itself Type This field displays whether this entry was entered manually into the L2 address table st
132. r Use this screen to configure a new syslog entry Click Add Server in the Logging screen to view the screen as shown Figure 53 Logging Add Server Port Logging Add Server Help Name Max 12 characters IP Address Facility Local 0 7 Add The following table describes the labels in this screen Table 34 Logging Add Server LABEL DESCRIPTION Name Enter a short descriptive name for identifying this server You can use 1 12 printable ASCII characters Spaces are allowed IP Address Enter the IP address in dotted decimal notation of the syslog server you want to add Port Specify the UDP port for sending log messages to this server Typically port 514 is used with syslog Facility The log facility allows you to send logs to different files in the syslog server Refer to the documentation of your syslog server for more details Add Click Add to save this entry to the switch and return to the Logging screen ES 1552 User s Guide Chapter 17 Event Logging 17 4 Viewing RAM and Flash Logs Use these screens to view or export RAM or Flash logs Click the RAM or Flash link in the Logging screen to view the following screen Logs RAM is shown here You can also click RAM Logs or Flash Logs in the navigation panel to view the Logs RAM or Logs Flash screen BS The RAM Logs and Flash Logs screen contain the same fields as the Logs RAM or
133. r All o Im ASAN 436 48 a3 42 7 mus aSnaQs5 Not member T Tag egress packets U Untag egress packets Apply The following table describes the labels in this screen Table 14 VLAN Edit VLAN LABEL DESCRIPTION VLAN ID Select which VLAN you want to configure Click Remove This VLAN to remove this VLAN from the switch Note VLAN 1 cannot be removed Display All VLAN Click this button to go back to the VLAN status screen ALL This button allows you to configure all the ports at once Click this button to change the state of all the ports at once The possible states are empty This indicates that the port is not part of the VLAN T This indicates that this port is a member of the VLAN When the packet leaves the member port the VLAN tag is added U This indicates that this port is a member of the VLAN When the packet leaves the member port the VLAN tag is removed These buttons allow you to specify whether the individual ports are members of this VLAN Click the buttons below the numbers to change the state of the port The possible states are empty This indicates that the port is not part of the VLAN T This indicates that this port is a member of the VLAN When the packet leaves the member port the VLAN tag is added U This indicates that this port is a member of the VLAN When the packet leaves the member port the VLAN tag is removed Apply Cl
134. reen to display individual port statistics Use this screen to check status and detailed performance data about an individual port on the switch Figure 30 Status Port Details Statistics Refresh Help Port 01 TX Octets 233808 UnicastPkts 918 NonUnicastPkts 0 Discards lo J Errors o Length s RX Octets 217656 UnicastPkKts 1280 NonUnicastPkts 459 Discards fo Errors jo UnkonwnProtos 0 Summary DropEvents 0 MulticastPkts 4 BrodcastPkts 456 lUndersizePkts Ir OversizePkts 0 Fragments 0 Jabbers 0 Collisions 0 ICRCAlignErr jo TotalOctets 217656 TotalPkts 1738 65 127 ik Ana l 112 ByePks mr 128 255 256 511 BytePkts s BytePkts P 512 1023 93 1024 1518 la BytePkts BBytePkts The following table describes the labels in this screen Table 11 Status Port Details LABEL DESCRIPTION Refresh Click this to retrieve the current information from the switch and update this screen Port This field displays the port number you are viewing TX The following fields display detailed information about packets transmitted Octets This field shows the number of octets transmitted UnicastPkts This field shows the number unicast packets transmitted ES 1552 User s Guide Chapter 7 System and Port Statistics Table 11 Status Port Details continued LABEL DESCRIPTION NonUnicastPkts This field shows
135. reens to configure SNMP management settings Engine ID Use this screen to configure SNMP engine ID Group Use this screen to configure groups with different access rights for SNMP management User Use this screen to create users and assign them to pre defined SNMP groups Community Use this screen to define security parameters for SNMP v1 and SNMP v2c Trap Station Use this screen to configure settings that define when notifications are sent to an external management station RMON Lite Use this screen to configure Remote Network Monitoring Management Information Base RMON MIB settings Dynamic ARP Use these screens to enable and configure ARP table settings Settings Use this screen to configure ARP table settings ARP Entries Use this screen to enter and view MAC address to IP address mappings Logout Click this to logout of the web configurator 4 3 3 Change Your Password After you log in for the first time it is recommended you change the default administrator password Click System Password to display the next screen ES 1552 User s Guide Chapter 4 The Web Configurator Figure 17 Change Administrator Login Password Change Password Help Old Password New Password Confirm New Password Apply 4 4 Saving Your Configuration When you are done modifying the settings in a screen click Apply to save your changes back to the switch 4 5 Switch Lockout You could block y
136. rity column indicates the DSCP values of the incoming packets and the Priority column indicates what IEEE 802 1p priority gets assigned to those packets Apply Click this when you have reviewed the changes you want to make and you want to save Change them to the switch s memory Settings 11 4 5 ToS Based QoS You can configure the switch to assign a IEEE 802 1p priority to packets coming into the switch with Type of Service ToS priority assigned to them Select ToS Based QoS in the QoS Enhancement Setting screen to view the following screen ES 1552 User s Guide Chapter 11 QoS Figure 40 ToS Based QoS QoS Enhancement Setting Help Mode Tos Based QoS Change Priority TOS o Priority o Change Tos Priority Tos Priority 00 O 04 0 a 0 05 0 az 0 o D 2 D 07 D Apply Change Settings The following table describes the labels in this screen Table 20 ToS Based QoS LABEL DESCRIPTION Mode Select ToS Based QoS to specify mapping rules between ToS priority and IEEE 802 1p priority for incoming packets on the switch Change Configure the following Priority TOS Select the ToS priority for which you want to change a priority mapping Priority Select the IEEE 802 1p priority you want to assign to the packets with the ToS priority you specified in the TOS field Click Change to view your changed settings Note The changes are not a
137. s Owner Enter a descriptive name of the application that creates this entry You can use 1 64 printable characters Spaces are not allowed Status Select Enable Disable to activate or deactivate statistical sampling on the port Apply Click this to save the settings on the switch History Control Click this to go back to the RMON History Control Overview screen Overview 19 4 3 RMON History Statistics Overview Use the RMON History Statistics Overview screen to view the results of statistical sampling on the ports Select 2 History Statistics from the RMON MIB Table drop down listbox in the RMON L ite screen to view the screen as shown ES 1552 User s Guide Chapter 19 RMON Lite Figure 76 RMON History Statistics Overview RMON Lite RMON MIB Table 2 History Statistics v Apply Help RMON History Statistics Overview Refresh Help History Data Bucket Control Source Granted Interval Owner Index 4 Port 01 50 1800 monitor The following table describes the labels in this screen Table 58 RMON History Statistics Overview LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Refresh Click this to update all the fields in the RMON History Statistics Overview screen History Control This field displays the configuration index number Click on the index num
138. s Guide lt gt Warnings tell you about things that could harm you or your device BS Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations Syntax Conventions The ES 1552 may be referred to as the ES 1552 the switch the device or the system in this User s Guide Product labels screen names field labels and field choices are all in bold font A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket 5 within a screen name denotes a mouse click For example Maintenance gt Log gt Log Setting means you first click Maintenance in the navigation panel then the Log sub menu and finally the Log Setting tab to get to that screen Units of measurement may denote the metric value or the scientific value For example k for kilo may denote 1000 or 1024 M for mega may denote 1000000 or 1048576 and so on e g is a Shorthand for for instance and i e means that is or in other words ES 1552 User s Guide Document Conventions Icons Used in Figures Figures in th
139. s This is a count of transmitted received packets that were too short shorter than 64 octets with invalid FCS or alignment errors Jabbers This is a count of transmitted received packets that which exceeded maximum size to receive frame length Collision This is a count of transmitted collision packets CRCAlignErr This is a count of transmitted received packets that were too short shorter than 64 octets with invalid FCS or alignment errors TotalOctets This is a count of all transmitted received packets that which exceeded maximum size to receive frame length TotalPkts This is a count of transmitted received packets including bad packets all unicast broadcast multicast and MAC control packets 64 BytePkts This field shows the number of packets including bad packets received that were 64 octets in length 65 127 BytePkts This field shows the number of packets including bad packets received that were between 65 and 127 octets in length 128 255 This field shows the number of packets including bad packets received that BytePkts were between 128 and 255 octets in length 256 511 This field shows the number of packets including bad packets received that BytePkts were between 256 and 511 octets in length ES 1552 User s Guide Chapter 7 System and Port Statistics Table 11 Status Port Details continued LABEL DESCRIPTION 512 1023 This field shows the number of packets
140. sed to initiate acknowledge and conclude TCP IP communication sessions The following scans exploit weaknesses in the TCP IP specification and try to illicit a response from a host to identify ports for an attack Scan SYNFIN SYN and FIN bits are set in the packet Xmascan TCP sequence number is zero and the FIN URG and PSH bits are set NULL Scan TCP sequence number is zero and all control bits are zeroes SYN with port lt 1024 SYN packets with source port less than 1024 Smurf Attacks This attack uses Internet Control Message Protocol ICMP echo requests packets pings to cause network congestion or outages Ping Flooding This attack floods the target network with ICMP packets SYN SYN ACK Flooding This attack floods the target network with SYN or SYN ACK packets ES 1552 User s Guide Chapter 15 Auto Denial of Service DoS 15 2 Global Auto DoS Attack Prevention Use the Global Auto DoS Attack Prevention screen to configure DoS attack prevention settings for the switch Click Auto DoS in the navigation panel to open the following screen Figure 49 Global Auto DoS Attack Prevention Advanced Scan SYNFIN r Deny Xmascan T Select All Global Auto DoS Attack Prevention Help Denial of Service Prevention Prevent Land Attacks M Prevent Blat Attacks Prevent NULL Scan Attacks Deny SYN with sport 1024 Apply The following table describes the labels in
141. ses to manage the switch Authentication This field is only editable if you select SNMPv3 in the SNMP Version field Select Enabled to force SNMP v3 groups to authenticate with the switch or select Disabled to deactivate authentication for the SNMP v3 groups For SNMP v1 and SNMP v2c authentication is always disabled Access Read select Enabled to allow this group to collect information from this switch Write select Enabled to allow this group to create or edit MIBs Create Click this to add this SNMP group to the switch Note A maximum of ten groups can be created on the switch Cancel Click this to go back to the main SNMP Group screen without saving your changes 18 2 2 SNMP Group Modify Click on the Group ID number or select a Group ID from the Group ID drop down list box in the SNMP Group screen to modify the settings of an existing group Figure 61 SNMP Group Modify SNMP Group Group ID 1 Remove This Group Display All Group Help Authentication Group Name Group1 SNMP Version 5NWPv1 7 C Enabled Disabled Access Read Enabled C Disabled Write Enabled Disabled Apply The following table describes the labels in this screen Table 43 SNMP Group Modify LABEL DESCRIPTION Group ID This field indicates which group you are modifying Click on Remove This Group to delete this group configuration from the switch Click on Display All Group to view t
142. sidautua E KANE E ENN ERANA E EA NE n EiS 68 TAB ENT SCT ka 69 jr KASU e R AA 73 uri a 6 OOS E ET 75 Table 19 DSCP Based QOG san BA KANAN QVIS CHE MV I RAPI ae Ei aR CENT IN EE VU aat 76 Tana 20 Tos Based QOS c 77 Table zT IP Address Based QOS AGA aes 78 Table 22 cune bsec MM 80 Table 23 Rate Limit Rs Ua TR RM NCU TE TT OD SET 80 Table 24 Broadcast Stom CONN a ARNAN GAGA AG 82 Tabie 2o L uo AGA 83 Table 26 Add a Stale MAC EY A c kA AA AA AN AA AA 84 Table 27 Display EZ Address Table ient toii odore eri orc certi vete ait dI Ec t docu ltd koe rid 85 Tabi Gaba DAGGER GA BAD LAGA ABAKADA NAK GG 87 Vale 22 DoS HAKA KUNAN NANANA 89 Table 30 Global Auto DGS Attack PEOVOHUCHE AGANG 90 Table 31 Advanced Auto DoS Attack Prevention c cccccceceeeeeeeeeeeceeeeeaeeeeeeeeeeeeeeeeceanaeseeseeeeeteeeees 91 Table 32 Uo Vol PF SONS nG NIANG KABANG KA 94 Dh aaa Boo GP UE 98 MMS ke Logging Add Server aaa S E anaes 98 Table 35 Logging ELI M ANI GATA GAI TANAGA 99 Table S5 Searching RAM Flash LOGGING AKA 102 Table oF Logs Search RESUS ordasan an E R 102 Table 38 SNMP COMMANDS aaa denii vex eon cones gears GNG KARGA 106 ES 1552 User s Guide 21 List of Tables Table 30 SMP TAPE MESI UTITUR 106 aaa SNMP En MED aaa NAAN 107 TANEAT SSN GOUR saiya DAGTA BAG NABA AA AA AA 108 Tang SNMP Grup TIG a GNG NG BA
143. ssword m Apply The following table describes the labels in this screen Table 7 Change Password LABEL DESCRIPTION Old Password Type the existing system password 1234 is the default password when shipped New Password Enter your new system password Enter up to 15 alpha numeric characters spaces are allowed Confirm New Password Retype your new system password for confirmation 5 3 Firmware Upgrade Make sure you have downloaded and unzipped the correct model firmware and version to your computer before uploading to the device O Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device From the System screen click Upgrade in the Firmware Version field to display the screen as shown next ES 1552 User s Guide Chapter 5 System Figure 25 Firmware Upgrade Firmware Upgrade File to upgrade Browse Upgrade Type the path and file name of the firmware file you wish to upload to the switch in the File Path text box or click Browse to locate it After you have specified the file click Upgrade After the firmware upgrade process is complete see the System gt Status screen to verify your current firmware version number 5 3 1 System Restart Reset Click System gt Restart Reset to perform a system restart keep current configuration or a system reset restore the switch s
144. stalled firmware MAC Address This field displays the MAC address of the switch IP Address This field indicates the IP address of the switch You can click the existing IP address to change it See Section 5 1 1 on page 50 Subnet Mask This field indicates the subnet mask of the switch Gateway This field indicates the IP address of the default gateway L2 Table Aging This field displays whether the L2 Table Aging is enabled or disabled Click Enabled Disabled to change the L2 Table Aging settings ES 1552 User s Guide Chapter 5 System Table 5 System continued LABEL DESCRIPTION Backup settings Click this link to create and save a backup configuration file See Section 5 1 3 on page 51 Restore settings Click this link to upload an existing configuration file to the switch See Section 5 1 4 on page 51 5 1 1 Configure IP Address Use the Configure IP Address screen to set up the IP address manually The following screen appears when you click the existing IP address in the System 7 Status screen Figure 20 Configure IP Address IP Address Network Submask Gateway Configure IP Address Apply 192 168 1 34 255 255 255 0 0 0 0 0 The following table describes the labels in this screen Table 6 Configure IP Address LABEL DESCRIPTION IP Address Enter the IP address of your switch in dotted decimal notation
145. t 2 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 64 IP Address Binary 11000000 10101000 00000001 01000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 64 Lowest Host ID 192 168 1 65 Broadcast Address 192 168 1 127 Highest Host ID 192 168 1 126 Table 81 Subnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 191 Highest Host ID 192 168 1 190 Table 82 Subnet 4 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 192 IP Address Binary 11000000 10101000 00000001 11000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 192 Lowest Host ID 192 168 1 193 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 Example Eight Subnets Similarly use a 27 bit mask to create eight subnets 000 001 010 011 100 101 110 and 111 The following table shows IP address last octet values for each subnet Table 83 Eight Subnets SUBNET ADDRESS FIRST ADDRESS ADDRESS ADDRESS 1 0 1 30 3
146. the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons In this example the company network address is 192 168 1 0 The first three octets of the address 192 168 1 are the network number and the remaining octet is the host ID allowing a maximum of 2 2 or 254 possible hosts The following figure shows the company network before subnetting Figure 96 Subnetting Example Before Subnetting LL ee ee ae 2 g ii fl jil ul ji I fl 0 ll B Fi i jil a a i li 2 t 192 168 1 0 24 a a m a Ry You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 255 128 or 25 The borrowed host ID bit can have a value of either 0 or 1 allowing two subnets 192 168 1 0 25 and 192 168 1 128 25 The following figure shows the company network after subnetting There are now two sub networks A and B ES 1552 User s Guide Appendix B IP Addresses and Subnetting Figure 97 Subnetting Example After Subnetting 2 T T i B 1 N a Mi b a ig Internet i a Ww B pi a i 1 8 192 168 1 0 25 88519 168 1 128 25 I 43 4 anaaaaaara fee eee xm In a 25 bit subnet the host ID has 7 bits so each sub network has a maximum of 27 2
147. the ports for which you want to monitor the egress outgoing traffic Mirror Mirror To The Mirror To monitor port is the port you copy the traffic to in order to examine it in more detail without interfering with the traffic flow on the original port s Select the monitor port Apply Click Apply to save your changes to the switch ES 1552 User s Guide KI Chapter 10 Mirroring ES 1552 User s Guide QoS This chapter introduces the quality of service QoS parameters you can configure on the switch 11 1 QoS Overview QoS is used to help solve performance degradation when there is network congestion Use the QoS Setting screen to configure queuing algorithms for outgoing traffic Queuing algorithms allow switches to maintain separate queues for packets from each individual source or flow and prevent a source from monopolizing the bandwidth 11 1 1 Weighted Round Robin WRR Round Robin scheduling services queues on a rotating basis and is activated only when a port has more traffic than it can handle A queue is given an amount of bandwidth irrespective of the incoming traffic on that port This queue then moves to the back of the list The next queue is given an equal amount of bandwidth and then moves to the end of the list and so on depending on the number of queues being used This works in a looping fashion until a queue is empty Weighted Round Robin WRR scheduling uses the same algorithm
148. this screen Table 30 Global Auto DoS Attack Prevention LABEL DESCRIPTION Advanced Click this link to configure advance Auto DoS settings Denial of Select the types of attacks you want to prevent or choose Select All to prevent all Service types of attacks and scans supported by the switch See Section 15 1 1 on page 89 Prevention for more information on specific types of attacks Apply Click Apply to save your changes to the switch 15 3 Advanced Auto DoS Attack Prevention Use the Advanced Auto DoS Attack Prevention screen to configure DoS attack prevention settings for individual ports Click the Advanced link in the Global Auto DoS Attack Prevention screen to view the following screen ES 1552 User s Guide Chapter 15 Auto Denial of Service DoS Figure 50 Advanced Auto DoS Attack Prevention Global Advanced Auto DoS Attack Prevention Help Port o Apply settings to all ports Denial of Service Prevention Parameter O Prevent Smurf Attacks O Prevent Ping Flooding C 64kbps C 128 kbps C Prevent SYNISYN ACK Flooding C 64 kbps 128 kbps C Select All Apply The following table describes the labels in this screen Table 31 Advanced Auto DoS Attack Prevention LABEL DESCRIPTION Global Click this link to view the Global Auto DoS Attack Prevention screen Port Select the port you want to configure or select Apply settings to all ports
149. tion and put it back on the switch later if you decide you want to revert back to an earlier configuration Auto DoS The Automatic Denial of Service DoS attack detection and prevention feature helps protect you from hackers trying to disrupt or shut down your network Auto VoIP The Automatic VoIP feature grants the highest priority to VoIP traffic ensuring better sound quality and reliability for end users ES 1552 User s Guide Appendix A Product Specifications Table 74 Firmware Features FEATURE DESCRIPTION Dynamic ARP Dynamic ARP allows you to filter incoming traffic based on the MAC to IP address mapping The switch can be configured to only allow trusted devices to communicate via its ports RMON Lite Remote Network Monitoring Management RMON allows you to gather information about the switch s performance view statistics and create alarms Cable Diagnostics Use this feature to inspect the Ethernet cables connected to the switch for shorts open faults or shorts between pairs Logging The switch allows you to specify what information should be logged and where it should be stored It supports internal logging as well as external logging via a syslog server The following tables list the product specifications Table 72 General Product Specifications Interface 48 10 100 Base Tx ports 2 Mini GBIC ports Small Form Factor Pluggable SFP fiber ports Two 10
150. to configure all the ports on the switch Denial of Service Prevention Select the types of attacks you want to prevent or choose Select All to prevent all types of attacks and scans supported by the switch See Section 15 1 1 on page 89 for more information on specific types of attacks Parameter For Ping and SYN SYN ACK Flooding attacks you can specify thresholds for triggering the dropping of packets by the switch Select 64 kbps the switch will drop packets when the rate of incoming Ping or SYN SYN ACK packets reaches this limit 128 kbps the switch will drop packets when the rate of incoming Ping or SYN SYN ACK packets reaches this limit Apply Click Apply to save your changes to the switch ES 1552 User s Guide Chapter 15 Auto Denial of Service DoS ES 1552 User s Guide Auto VolP This chapter shows you how to give higher priority to Voice over Internet Protocol VoIP packets over other data packets as they pass through the switch 16 1 About Auto VoIP Voice over Internet Protocol VoIP allows telephone calls to be made over a data network like the Internet With the increased prominence of delay sensitive applications voice video and other multimedia applications deployed in networks today proper QoS configuration ensures high quality application performance The Auto VoIP feature is intended to provide an easy classification mechanism for voice packets so that
151. ution AA 67 S Tink Sono DECENA scene E E E aeons 67 Chapter 10 Mirror cxa EDO SLOT 69 MA Port KINING gc aAa 69 Chapter 11 Pl mem MEE Re AP AA AA 71 Ng KE P 1 MP 71 11 1 1 Woigited Round Robin TUNIS iue aries Ert eden o RB ad Lo i a rd 71 fa Dc DINDI TRE Um UU TM 71 12 00S EMMAR eoi e 72 TIL COnN T DOT iA 72 11 3 1 Change Number ET c 73 TVA Advanced A ctu maa KA Ein a naa OE ANU 74 TAT POL BASE OOS UTER T ETT T 74 TAZ DEEP Buell QOS 2NA EES Dm PUDE ERE e RM RETE 75 11 4 3 Differentiated Services Code Point DSCP Overview eeeeeeese 75 Ts d DSGE Based COS BEEEN aori sanii iniaeeaa tita KAEN 75 145 T S Based IOS T 76 TAG IP address Based CIO ase nx ta o E ee ER UU AA ng eee ct 77 Chapter 12 Port Rate Limit and Storm Control AKA NIN GANAN 79 Aa Fae mes ge 79 XA LTR C CMCC c r 80 12 1 2 Broadcast Stonm Control Setup iu iceaee e tes innan Len BRE EAT ANAN 81 Chapter 13 Layer 2 L2 TET ipo UR 83 ES 1552 User s Guide 13 Table of Contents 121 Comigurnng LZ MSIE sisisi dean pA AR FORE ES MR E ER OS RH ASA Haa 83 13 1 1 dd a Static MAC Address ENNY ioa adesset erus AA NAKA E sanedunuasenniss 84 132 Viewing the L2 Address Table aaa AA Po Feo DII RE rera D Fe EAE ORS 84 Chapter 14 Cable DIBUNOENCT m 87 ek VMS Ge INENG NT AA TO ETT 87 Chapter 15 Auto Denta
152. w Alarm LABEL DESCRIPTION RMON MIB Use this drop down list box to select the MIB table you want to view Click Apply to Table refresh the screen to the selected MIB table view Index This field displays the index number of this alarm entry Interface Select the port which is monitored for this alarm Counter Select the data which is used to test if this alarm is triggered the choices are Drop Events Octets Packets and so on Sample Type Select the method of obtaining the sample value Choices are Absolute and Value Startup Alarm Select the startup alarm type Rising Threshold Falling Threshold Rising Or Falling Threshold Rising Specify a rising threshold between O and 2147483647 When a value is greater or Threshold equal to this threshold the probe triggers an alarm Falling Specify the falling threshold between O and 2147483647 When a value is smaller Threshold or equal to this threshold the probe triggers an alarm Rising Event Select an index number of a rising event Falling Event Select an index number of a falling event Owner Enter a descriptive name of the application that creates this entry You can use 1 64 printable ASCII characters Spaces are not allowed Apply Click this to save the settings to the switch Alarm Overview Click this to go back to the RMON Alarm Overview screen 19 6 RMON Event Overview Use the RMON Event Overview screen to view
153. want to edit Create New Click this to configure a new SNMP user User User ID This field indicates the manager identification number It is used for identification only Click on the individual user number to edit the user settings User Name This field displays the name of the SNMP user Group Name This field displays the name of the SNMP group the user belongs to SNMP Version This field indicates which SNMP version this user uses to manage the switch Auth Type This field indicates whether authentication is required for this user Authentication can only be configured for SNMP v3 This field displays None if no authentication is required for this user or it displays MD5 if Message Digest authentication is enabled Previous Page Use these navigation links to browse all of your SNMP groups Next Page 18 3 1 SNMP User Create You must configure an SNMP group first before you can create an SNMP user Click on the Create New User link in the SNMP User screen to add an SNMP user The screen displays as shown ES 1552 User s Guide Chapter 18 SNMP Figure 63 SNMP User Create SNMP User User Name Group Name fhyuthytt 7 Help SNMP Version SNMPy3 7 lAuth Type Mos v Key Create Cancel The following table describes the labels in this screen Table 45 SNMP User Create LABEL DESCRIPTION User Name Specify the name for this SN
154. west numerical value are the most recent Index This field indicates the index number of the log This number doesn t change even if some logs are deleted from the switch due to memory limits The index number increments by one for each recorded event The largest number represents the most recent log event ES 1552 User s Guide EY Chapter 17 Event Logging Table 35 Logging RAM Flash continued LABEL DESCRIPTION Level This field displays the severity level of the log event The possible severity levels are Error to record system failures such as events which will cause the switch to malfunction and events such as invalid user input in the web configurator Warning to record non critical errors on the switch The switch will continue to function when warnings are recorded Info to record regular system events such as configuration changes or logins e Debug to record events which can be helpful for engineering debugging of the switch s function This field is not recommended to track as it creates many messages not helpful to typical users Category This field displays what category the log entry fits The categories are based on software and hardware features of the switch For example the category AUTODOS records events which deal with the Auto Denial of Service features you set up and the category SYSTEM records events which deal with the overall operation of the switch
155. witch 3 Repeat steps and 2 to install the second mounting bracket on the other side of the switch 4 You may now mount the switch on a rack Proceed to the next section 2 2 3 Mounting the Switch on a Rack 1 Position a mounting bracket that is already attached to the switch on one side of the rack lining up the two screw holes on the bracket with the screw holes on the side of the rack Figure7 Mounting the Switch on a Rack aT Wy Sn D D Di p ol D ol x of of ee o O gt D pl AO y p O O Of A D O e D ol o o 9 D Dl p ol E LR gt D D D Uli k 2 Using a 2 Philips screwdriver install the M5 flat head screws through the mounting bracket holes into the rack 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack ES 1552 User s Guide 33 Chapter 2 Hardware Installation and Connection ES 1552 User s Guide Hardware Overview This chapter describes the front panel and rear panel of the switch and shows you how to make the hardware connections 3 1 Panel Connections and the RESET Button The figure below shows the front panel of the switch Figure 8 Front Panel LEDs RJ 45 Gigabit Ethernet Ports RESET Button 10 100 Mbps RJ 45 Ethernet Ports Mini GBIC Slots The following table describes the ports on the panels Table 1 Panel Connections CONNECTOR DESCRI
156. with VID VLAN Identifier of null 0 is called a priority frame meaning that only the priority level is significant and the default VID of the ingress port is given as the VID of the frame Of the 4096 possible VIDs a VID of 0 is used to identify priority frames and value 4095 FFF is reserved so the maximum possible VLAN configurations are 4 094 TPID User Priority CFI VLAN ID 2 Bytes 3 Bits 1 Bit 12 bits 8 1 1 Forwarding Tagged and Untagged Frames Each port on the switch is capable of passing tagged or untagged frames To forward a frame from an 802 1Q VLAN aware switch to an 802 1Q VLAN unaware switch the switch first decides where to forward the frame and then strips off the VLAN tag To forward a frame from an 802 1Q VLAN unaware switch to an 802 1Q VLAN aware switch the switch first decides where to forward the frame and then inserts a VLAN tag reflecting the ingress port s default VID The default PVID is VLAN 1 for all ports but this can be changed A broadcast frame or a multicast frame for a multicast group that is known by the system is duplicated only on ports that are members of the VID except the ingress port itself thus confining the broadcast to a specific domain ES 1552 User s Guide Chapter 8 VLAN 8 2 Static VLAN Use a IEEE 802 1Q VLAN to decide whether an incoming frame on a port should be sent toa VLAN group as normal depending on its VLAN tag sent to a group whether
157. y Remote Station ID String IP Click on Community ID to edit or remove Group Name The following table describes the labels in this screen Table 47 SNMP Community LABEL DESCRIPTION Community ID Select the SNMP community you want to edit Create New Community Click this to configure a new SNMP community Community ID This field indicates the community number It is used for identification only Click on the individual community number to edit the community settings ES 1552 User s Guide Chapter 18 SNMP Table 47 SNMP Community continued LABEL DESCRIPTION Community This field indicates the SNMP community string An SNMP community string is a text String string that acts as a password It is used to authenticate messages that are sent between the management station the SNMP manager and the device the SNMP agent The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent Remote Station This field displays the IP address of the remote SNMP management station IP Group Name This field indicates the group which is part of this SNMP community Previous Page Use these navigation links to browse all of your SNMP groups Next Page 18 4 1 SNMP Community Create Click on the Create New Community link in the SNMP Community screen to add an SNMP community The screen displays as shown
158. y the size of the network number part the bits with a 1 value For example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes ES 1552 User s Guide Appendix B IP Addresses and Subnetting Subnet masks are expressed in dotted decimal notation just like IP addresses The following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks Table 76 Subnet Masks BINARY DECIMAL octet OCTET ocTET SCTE 8 bit mask 11111111 00000000 00000000 00000000 255 0 0 0 16 bit mask 11111111 11111111 00000000 00000000 255 255 0 0 24 bit mask 11111111 11111111 11111111 00000000 255 255 255 0 29 bitmask 11111111 11111111 11111111 11111000 255 255 255 248 Network Size The size of the network number determines the maximum number of possible hosts you can have on your network The larger the number of network number bits the smaller the number of remaining host ID bits An IP address with host IDs of all zeros is the IP address of the network 192 168 1 0 with a 24 bit subnet mask for example An IP address with host IDs of all ones is the broadcast address for that network 192 168 1 255 with a 24 bit subnet mask for example As these two IP addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows Table 77 Maximum Host Numbers
159. ys a port statistical summary with links to each port showing statistical details 7 2 Statistics Summary Click Statistics in the navigation panel to view the screen as shown Use this screen to view the traffic counters for the switch Figure 29 Statistics Statistics Clear Counters Refresh Help Pot Tx Rx Pot Tx Rx 01 918 17393 15 0 o 02 21542 32142 6 0o oO ol o 0 4 D D oa o o fal o D e o o fal o D 06 0 0 20 0 0 o o 0 21 o O 08 D KH zl o O o9 o 0 23 o D 10 D 0 24 D 0 o o o 0 12 D 0 f o D 13 oy 3 32K D 0 14 0 0 28 o 0 All numbers shown are numbers of packets The following table describes the labels in this screen Table 10 Statistics LABEL DESCRIPTION Clear Counters Click this to reset all counters to zero Refresh Click this to retrieve the current information from the switch and update this screen ES 1552 User s Guide Chapter 7 System and Port Statistics Table 10 Statistics continued LABEL DESCRIPTION Port This identifies the Ethernet port Click a port number to display the Port Details screen refer to Figure 30 on page 60 Tx This field shows the number of transmitted frames on this port Rx This field shows the number of received frames on this port 7 3 Port Statistics Click a number in the Port column in the Statistics sc

ZyXEL ES-1552 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents