Home

ZyXEL VES-1616F-3X User's Manual

1. 64 Faus AO Cone Bt si E E 66 Figure E ANOO a atari cn ee DESERT me 68 Figure 22 1P Sp m 70 gf EG OU sd aL Tnm 73 Figure 22 VDSE PINO SEI sarian o ins RAE NCBI en RRO 78 Figure 25 vDSL Alam PIOS SOUP 1asiseretashiserttAa s paput AM ert E REESE FRLL A 81 Figure 2b PSD Freguency Example esse rre tarea Rt LER EE ca Ub REIR REPAIR ERR ECKE QU cL EP ERANA ERR ARR ERR tA EPA 82 Figure 27 VDSL PSD Profle Sel iuscdeeeci dictat redo ern dert eb radit cerei iene DIE ede 83 Figurg 29 Port VLAN TURR osse dele rte i oe iR o S e i o aeta db e zi RE XR Morea er p RR 89 Figure 29 Switch Setup Select VLAN TYPE udtepensnecerituetelvisqtt be o itu oe bo tarte utet eo EQ ERR ete 89 Figure 30 VLAN gt VLAN E cur 90 ub rim ic TOC 5 EC 91 Figure 22 VLAN VLAN POI SEU disstztecns rEo tis brbut ten a brboseperi bent depu PEE rig depen pH aie 92 Figure 33 Port Based VLAN Setup All Connected sensere nnne nannten nani nnnn 94 Figure 34 Port Based VLAN Setup Port Isolation eeueeeseeeueceese eene en tana nnne th nana haa 95 Figure 35 State MAC oisi e 97 Figure 26 FING nir R E 99 Figure 37 Spanning Tree Protocol SIUS lt cacccectanecanacs aneseiscisaveoiacerdaierieciamneiseisap ues oimemiedamenaeniow 103 Figure 38 Spanning Tree Protocol gt Configuration ccccsccsvicsiessis cctsccsevicssssssseidessaasin donat eb
2. LABEL DESCRIPTION Spanning Tree This field displays Running if STP is activated Otherwise it displays Down Protocol Configuration Click Configuration to configure STP settings Refer to Section 10 3 on page 104 Bridge Root refers to the base of the spanning tree the root bridge Our Bridge is this switch This switch may also be the root bridge Bridge ID This is the unique identifier for this bridge consisting of bridge priority plus MAC address This ID is the same for Root and Our Bridge if the switch is the root switch Hello Time This is the time interval in seconds at which the root switch transmits a second configuration message The root bridge determines Hello Time Max Age and Forwarding Delay Max Age second This is the maximum time in seconds a switch can wait without receiving a configuration message before attempting to reconfigure Forwarding Delay This is the time in seconds the root switch will wait before changing states that second is listening to learning to forwarding Cost to Bridge This is the path cost from the root port on this switch to the root switch Port ID This is the priority and number of the port on the switch through which this switch must communicate with the root of the Spanning Tree VES 1616F 3x Series User s Guide Chapter 10 Spanning Tree Protocol Table 26 Spanning Tree Protocol Status continued LABEL DESCRIPTION
3. 127 Ta STU a Classer mr 127 1S CESSO EX 81 2 n 130 Chapter 19 Polity oie ARA duRESA A EIN a Ud reer t pe Ter ee rrrn 133 TET PM CIV 1 e w 0 S 4 X n 133 VT Si E siin I TM 133 181 2 DSCP and Per Hop BENAMIOR iotesusaxet rio zxvAbero ee idea aiaa ad aii v ai 133 19 2 Comigunng a POl aisse EE 134 TOPON EO ea M 137 Chapter 20 VLAN Ecole 139 20 1 UN SE CIEN I mw 139 KW VLA E redigde cs 139 20 2 VLAN Slacking Port ROBS Me 140 UIA VLAN TO EDISOBE area ATAA EOS ETES A 141 COSA rane FOMA ao E a ease 141 20 4 Configuring VLAN SACKING 411 arde HE ace sans o b do RR Ee D d RE Dex a ada e 142 Chapter 21 Manie Sa oh citi hi evcad edidic di EEREROANRIM ACTUS LR IRE RI ue Te er VaVOKKNN DA UiSS BAS EIRR A MEUMERPMLUE 145 ZL Munca ct Vee xibtkengntiaddidsep d NER PONI ERR DOREM ae 145 2A el IS Ue xm 145 CS Ea ELA irt RE RE aS 145 Fame diee Pm ES 145 PA Multicast AWAUE de 146 Nd rsi ols c etn p ETT 146 21 4 IOMP Filtering Profe picaire oi o a i aiie Eia 148 ELS MR OVEN orasi A a AE E E 149 ON Oma MT a R PO E aaa 150 PAE PA eae e E EE E N AE E 150 ABS HORNY R VOS NN m 150 214 Genaral MYR COMUINN siiccsissisiaiecietaaiavacsaieeciet NN 151 ZET NDS Group COOU ia dc Hp Do ze Dad s EL 152 21 7 1 MVR Configuration EXOINIG cts isa etd enti
4. sysname config no vlan 2 34 5 Enable VLAN Syntax vlan lt vlan id gt This command enables the specified VLAN ID in the SVLAN Static VLAN table 34 6 Disable VLAN Syntax vlan lt vlan id gt inactive This command disables the specified VLAN ID in the SVLAN Static VLAN table 34 7 Show VLAN Setting Syntax show vlan This command shows the IEEE 802 1Q Tagged SVLAN Static VLAN table VES 1616F 3x Series User s Guide Chapter 34 IEEE 802 1Q Tagged VLAN Commands An example is shown next sysname show vlan The Number of VLAN 2 Idx VID Status Elap Time TagCtl 1 1 Static 0 54 40 Untagged 1 18 Tagged 2 2 Static 0 54 41 Untagged Tagged sysname VES 1616F 3x Series User s Guide Chapter 34 IEEE 802 1Q Tagged VLAN Commands VES 1616F 3x Series User s Guide Troubleshooting This chapter covers potential problems and possible remedies 35 1 Problems Starting Up the Switch Table 87 Troubleshooting the Start Up of Your Switch PROBLEM CORRECTIVE ACTION None of the LEDs Check the power connection and make sure the power source is turned on turn on when you turn on the switch If the error persists you may have a hardware problem In this case you should contact your vendor 35 2 Problems Accessing the Switch Table 88 Troubleshooting Accessing the Switch PROBLEM CORRECTIVE ACTION cannot Make sure the ports are
5. Time Zone Select the time difference between UTC Universal Time Coordinated formerly known as GMT Greenwich Mean Time and your time zone from the drop down list box Apply Click Apply to save the settings Cancel Click Cancel to reset the fields to your previous configuration 6 4 Introduction to VLANs A VLAN Virtual Local Area Network allows a physical network to be partitioned into multiple logical networks Devices on a logical network belong to one group A device can belong to more than one group With VLAN a device cannot directly talk to or hear from devices that are not in the same group s the traffic must first go through a router In MTU Multi Tenant Unit applications VLAN is vital in providing isolation and security among the subscribers When properly configured VLAN prevents one subscriber from accessing the network resources of another on the same LAN thus a user will not see the printers and hard disks of another user in the same building VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain In traditional switched environments all broadcast packets go to each and every individual port With VLAN all broadcasts are confined to a specific broadcast domain VES 1616F 3x Series User s Guide Chapter 6 Basic Setting BS VLAN is unidirectional it only governs outgoing traffic See Chapter 7 on 6 5 Switch Setup
6. remote management lt index gt Clears a secure client set entry from the list of secure clients 13 lt telnet http snmp https servic ftp icmp ssh Disables a secure client set entry number from using the selected remote management service s 13 service control ftp Disables FTP access to the switch 13 http Disables web browser control to the switch 13 https Disables secure web browser access to the switch 13 icmp Disables ICMP access to the switch such as pinging and tracerouting 13 snmp Disables SNMP management 13 VES 1616F 3x Series User s Guide 227 Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued You cannot delete a default profile DEFVAL COMMAND DESCRIPTION P ssh Disables SSH Secure Shell 13 Server access to the switch telnet Disables telnet access to the 13 Switch snmp server trap destination Disables sending of SNMP 13 ip traps to a station spanning tree Disables R STP 13 lt port list gt Disables R STP on the 13 specified ports ssh key rsal rsa dsa Disables the secure shell 13 server encryption key Your switch supports SSH versions 1 and 2 using RSA and DSA authentication known hosts Removes all remote hosts 13 known
7. 182 20S BS Ve HOW 184 FR draco tidem MT 184 20 7 SSA Implementation cm the SVM nai cesi ibis ev inb bae DUE ironi n HINC e PELO IU ovv bai o vane 185 26 7 1 Requirements Tor Using SSH uostri hr hana uk had hk oa dk da dada 185 PasW pr o9 Lg EXIT aiat oaa Ee E REER CERE Ne orba uade order bei edant teda todas ete tte 185 20 8 rote Bp MICA eer 186 zb RTPS EXSITDO dida dati uopt eia EAN ER FRATRE UR QU BR LER Gb EN Ut DN A AATA pI CAP DIU RAE 187 26 9 1 Internet Explorer Warning Messages 4 eieeeeeseiiseeee endete ditta d dtd 187 26 9 2 Netscape Navigator Warning Messages eese eene tntnnn 188 2b 9 3 The Maii Sree uu cte o b ERN ERR FEIER EEEE 188 20 10 Service Access CORO 1 issasscscesiie ies sac ise ee doses veer dms asas cuna auper deua sue pU doma ES 189 25 11 Romolo Managemen aca care snare ceca aedes doe d abc cie Ent d aao ced a e Cete EE Db e dad 190 Chapter 27 BI M T 191 EC TL NMI Sg eerie chats tesa iutiites abitum diutissime c EE i mE i UTE 191 Chapter 28 irn Me 193 BOs PME DU ARI EM TP 193 Vie Wigan 8 5 bor ilc t ret 193 VERE IO SPV SUD T 194 Chapter 29 Ghuster Mabageme Bibi das d iade RU ANO AR KR OR aca EZ II AM RE TA RU PAR denne 197 29 1 Cluster Management QUSPVIGW 5tusethiskmtent
8. The following table describes the labels in this screen Table 34 Link Aggregation Control Protocol Configuration LABEL DESCRIPTION Link Aggregation Control Protocol Active Select this checkbox to enable Link Aggregation Control Protocol LACP System LACP system priority is a number between 1 and 65 355 The switch with the lowest Priority system priority and lowest port number if system priority is the same becomes the LACP server The LACP server controls the operation of LACP setup Enter a number to set the priority of an active port using Link Aggregate Control Protocol LACP The smaller the number the higher the priority level Group ID The field identifies the link aggregation group that is one logical link containing multiple ports Active Select this option to activate a trunk group Dynamic Select this check box to enable LACP for a trunk LACP Port This field displays the port number Group Select the trunk group to which a port belongs VES 1616F 3x Series User s Guide Chapter 14 Link Aggregation Table 34 Link Aggregation Control Protocol gt Configuration continued LABEL DESCRIPTION LACP Timeout is the time interval between the individual port exchanges of LACP packets in Timeout order to check that the peer port in the trunk group is still up If a port does not respond after three tries then it is deemed to be down and
9. on all ports VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued COMMAND DESCRIPTION P vlan stacking Enables VLAN stacking on the 13 device lt SPTPID gt Sets the service provider s TP 13 Tagged Protocol ID vlan type lt 802 1q port based gt Specifies the VLAN type 13 wfq Sets the switch to use Weight 13 Fair Queuing WFQ queuing fe spq lt Q0 Q7 gt Sets the switch to use WFQ to 13 service all queues for the Ethernet port 32 11 4 interface Commands The following table lists the interface port channel commands in configuration mode Use these commands to configure the ports Table 82 interface port channel Commands COMMAND DESCRIPTION P interface port Enables a port or a list of ports for 13 channel port configuration list bandwidth Enables bandwidth control on the 13 limit port s cir Kbps Sets the guaranteed bandwidth 13 allowed for incoming traffic on the port s egress Kbps Sets the maximum bandwidth allowed 13 for outgoing traffic on the port s pir Kbps Sets the maximum bandwidth allowed 13 for incoming traffic on the port s bpdu control Sets how Bridge Protocol Data Units 13 lt peer tunnel BPDUs are used in STP port states discard netwo rk gt broadcast Enables broadcast
10. Ingress Rate Commit Rate Specify the guaranteed bandwidth allowed in kilobits per second Kbps for the incoming traffic flow on a port The commit rate should be less than the peak rate The sum of commit rates cannot be greater than or equal to the uplink bandwidth Peak Rate Specify the maximum bandwidth allowed in kilobits per second Kbps for the incoming traffic flow on a port Egress Rate Specify the maximum bandwidth allowed in kilobits per second Kbps for the out going traffic flow on a port Enter a number between 1000 and 1000 000 Apply Click Apply to save the settings Cancel Click Cancel to reset the fields to your previous configuration VES 1616F 3x Series User s Guide Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature 12 1 Broadcast Storm Control Overview Broadcast storm control limits the number of broadcast multicast and destination lookup failure DLF packets the switch receives per second on the ports When the maximum number of allowable broadcast multicast and or DLF packets is reached per second the subsequent packets are discarded Enable this feature to reduce broadcast multicast and or DLF packets in your network You can specify limits for each packet type on each port 12 2 Broadcast Storm Control Setup Click Advanced Application gt Broadcast Storm Control in the navigation
11. Notebook computer DSLAM Gateway NEN a _ oz omm ca Internet Hub Switch J o VES 1616F 3x Series User s Guide Safety Warnings Safety Warnings O For your safety be sure to read and follow all warning notices and instructions Do NOT use this product near water for example in a wet basement or near a swimming pool Do NOT expose your device to dampness dust or corrosive liquids Do NOT store things on the device Do NOT install use or service this device during a thunderstorm There is a remote risk of electric shock from lightning Connect ONLY suitable accessories to the device Do NOT open the device or unit Opening or removing covers can expose you to dangerous high voltage points or other risks ONLY qualified service personnel should service or disassemble this device Please contact your vendor for further information e Make sure to connect the cables to the correct ports e Place connecting cables carefully so that no one will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device e Connect the power adaptor or cord to the right supply voltage for example 110V AC in North America or 230V AC in Europe For DC models use DC power supply input of 48V DC to 60V DC 1 5A Max no tolerance Do NOT allow anything to r
12. Retype your new system password for confirmation Edit Logins You may configure passwords for up to four users These people have read only access User Name Set a user name up to 30 characters long Password Enter your new system password Retype to confirm Retype your new system password for confirmation Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Chapter 26 Access Control 26 5 SSH Overview Unlike Telnet or FTP which transmit data in clear text SSH Secure Shell is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts over an unsecured network Figure 87 SSH Communication Example Xcurc nneciuon SSH Server SER SSH Client 26 6 How SSH works The following table summarizes how a secure connection is established between two remote hosts Figure 88 How SSH Works T Internet JJ 1 Host Identification The SSH client sends a connection request to the SSH server The server identifies itself with a host key The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server The client automatically saves any new server public keys In subsequent connections the server public key is c
13. BS Static VLAN Tx Tagging MUST be enabled on a port where you choose Tunnel VES 1616F 3x Series User s Guide Chapter 20 VLAN Stacking 20 3 VLAN Tag Format A VLAN tag service provider VLAN stacking or customer IEEE 802 1Q consists of the following three fields Table 44 VLAN Tag Format Type Priority VID Type is a standard Ethernet type code identifying the frame and indicates that whether the frame carries IEEE 802 1Q tag information SP TPID Service Provider Tag Protocol Identifier is the service provider VLAN stacking tag type Many vendors use 0x8100 or 0x9100 TPID Tag Protocol Identifier is the customer IEEE 802 1Q tag Ifthe VLAN stacking port role is Access Port then the switch adds the SP TPID tag to all incoming frames on the service provider s edge devices 1 and 2 in the VLAN stacking example figure Ifthe VLAN stacking port role is Tunnel Port then the switch only adds the SP TPID tag to all incoming frames on the service provider s edge devices 1 and 2 in the VLAN stacking example figure that have an SP TPID different to the one configured on the switch If an incoming frame s SP TPID is the same as the one configured on the switch then the switch will not add the tag Priority refers to the IEEE 802 1p standard that allows the service provider to prioritize traffic based on the class of service CoS the customer has paid for On the switch configure priority leve
14. Index Poll Interval s Change Pages VAN status The Number Of VLAN 1 VLAN Port Setting Static VLAN Port Number VID 2 4 5 8 10 12 14 15 18 Elapsed Time Status 1 3 5 7 9 11 EA ELA eis U U U U U U U U u 1 1 35 54 Static U U U U U U U U U 40 Set Interval Stop Previous Next The following table describes the labels in this screen Table 18 VLAN gt VLAN Status LABEL DESCRIPTION The Number of VLAN This is the number of VLANs configured on the switch Index This is the VLAN index number VID This is the VLAN identification number that was configured in the Static VLAN screen Port Number This column displays the ports that are participating in a VLAN A tagged port is marked as T an untagged port is marked as U and ports not participating ina VLAN in marked as Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up Status This field shows how this VLAN was added to the switch dynamic using GVRP static added as a permanent entry or other added using Multicast VLAN Registration MVR Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt polling statistics Change Pages Click Previous Page or Ne
15. Table 63 SNMP Traps continued OBJECT LABEL OBJECT ID DESCRIPTION newRoot 1 3 6 1 2 1 17 0 1 This trap is sent when the STP root switch changes topologyChange 1 3 6 1 2 1 17 0 2 This trap is sent when the STP topology changes 26 3 3 Configuring SNMP From the Access Control screen display the SNMP screen You can click Access Control to go back to the Access Control screen Figure 85 Access Control SNMP isum Access Control Get Community public Set Community public Trap Community public ti CS Trap Destination joo Apply Cancel The following table describes the labels in this screen Table 64 Access Control SNMP LABEL DESCRIPTION Get Community Enter the get community which is the password for the incoming Get and GetNext requests from the management station Set Community Enter the set community which is the password for incoming Set requests from the management station Trap Community Enter the trap community which is the password sent with each trap to the SNMP manager Trap Destination Enter the IP addresses of up to four stations to send your SNMP traps to Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh 26 4 Setting Up Login Accounts Up to five people one administrator and four non administrators may access the switch via
16. VES 1616F 3x Series User s Guide Chapter 25 Maintenance From the Maintenance screen display the Firmware Upgrade screen as shown next BS Firmware upgrade using the web configurator saves the new firmware to ras 0 Figure 80 Firmware Upgrade ED Firmware Upgrade Maintenance To upgrade the internal switch firmware browse to the location of the binary BIN file and click Apply button File Path Browse Upgrade Type the path and file name of the firmware file you wish to upload to the switch in the File Path text box or click Browse to locate it After you have specified the file click Upgrade After the firmware upgrade process is complete see the System Info screen to verify your current firmware version number 25 8 Restore a Configuration File Restore a previously saved configuration from your computer to the switch using the Restore Configuration screen Figure 81 Restore Configuration Restore Configuration Maintenance To restore the device s configuration from a file browse to the location of the configuration file and click Restore button File Path Browse Re Type the path and file name of the configuration file you wish to restore in the File Path text box or click Browse to display the Choose File screen below from which you can locate it After you have specified the file click Restore config is the name of the configuration file on
17. OED VDSL Summary System Up Time 0 18 14 Port Payload Rate State Tx KB s Rx KBis Up Time Retrain 1 0 0 Standby 0 0 0 00 00 Retrain 2 o0 Standby 0 0 0 00 00 Retrain 3 v0 Standby 0 00 Re 0 0 ain 14 ovo Standby 0 0 0 00 00 Retrain 15 0 0 Standby 0 0 0 00 00 Retrain 16 0 0 Standby 0 0 0 00 00 Retrain Port Link State LACP TxPkts RxPkts Tx KB s Rx KB s UpTime 17 Down STOP Disabled 0 0 0 0 0 0 0 00 00 18 100M F FORWARDING Disabled 741 2453 17 428 2 794 0 18 03 Poll Interval s ao Set Interval Stop Port ALL Clear Counter VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics The following table describes the labels in this screen Table 6 Status LABEL DESCRIPTION System up This field shows how long the system has been running since the last time it was Time started The following fields are related to the VDSL ports Port This identifies the VDSL port Click a port number to display the VDSL Port Details screen PayLoad Rate This field displays the upstream and downstream payload rates State This field shows whether the port is connected Showtime not enabled Idle or is negotiating a connection Training Tx KB s This field shows the number of kilobytes per second transmitted on this port Rx KB s This field shows the number of kilobytes per second received on this port Up Time This field shows the total amount of time in hours minutes and se
18. Outgoing Select Send the packet to the mirror port to sent the packet to the mirror port Select Send the packet to the egress port to send the packet to the egress port Select Send the matching frames broadcast or DLF multicast marked for dropping or to be sent to the CPU to the egress port to send the broadcast multicast DLF marked to drop or CPU frames to the egress port Select Set the packet s VLANID to set the VLAN ID of the packet with the value you configure in the VLANID field Metering Select Enable to activate bandwidth limitation on the traffic flow s then set the actions to be taken on out of profile packets Out of profile Action Select the action s to be performed for out of profile traffic Select Drop the packet to discard the out of profile traffic Select Change the DSCP Value to replace the DSCP field with the value specified in the Out of Profile DSCP field above Select Do not drop the matching frame previously marked for dropping to queue the frames that are marked to be dropped Add Click Add to inset the entry to the summary table below Cancel Click Cancel to reset the fields back to your previous configuration Clear Click Clear to set the above fields back to the factory defaults Index This field displays the policy index number Click an index number to edit the policy Active This field displays Yes when policy is activated and No when is it deactivated Name Ente
19. PART IV Routing Protocol c Route 163 DHCP Relay 165 Static Route This chapter shows you how to configure static routes 23 1 Configuring Static Route Static routes tell the switch how to forward IP traffic when you configure the TCP IP parameters manually Click Routing Protocol gt Static Routing in the navigation panel to display the screen as shown Figure 70 Static Routing ED Static Routing g Active r Name OoOo Destination IP Address booo IP Subnet Mask booo Gateway IP Address booo Metric Index Active 1 Yes Name Example Add Cancel Clear Gateway Address Metric Delete 192 168 1 2 2 T Destination Address Subnet Mask 172 21 1 1 255 255 0 0 Delete Cancel The following table describes the related labels you use to create a static route Table 56 Static Routing LABEL DESCRIPTION Active This field allows you to activate deactivate this static route Name Enter a descriptive name for this route This is for identification purpose only Destination IP This parameter specifies the IP network address of the final destination Routing is always based on network number If you need to specify a route to a single host use Address a subnet mask of 255 255 255 255 in the subnet mask field to force the network number to be identical to the host ID IP Subnet Enter the subnet mask for this destination Mask Gateway IP Ente
20. VES 1616F 3x Series User s Guide Index PVID 87 92 Q QoS 127 157 Quality of Service See QoS queue weight Queuing 123 Queuing algorithm 123 queuing algorithm select 125 SPQ Queuing method 123 R rack mouting 35 requirement 35 Radio Frequency Interference See RFI RADIUS RADIUS server 117 Advantages 117 Network example 117 Settings 119 setup 119 shared secret 119 UDP port 119 Rapid Spanning Tree Protocol See RSTP rate adaption 76 79 fixed rate 76 rate adaptive decrease mode 76 rate adaptive decrease mode 76 reauthentication 118 reboot system 170 registration product 297 related documentation 3 Remote Authentication Dial In User Service See RADIUS remote management 190 service 189 190 Reset 51 reset configuration 170 reset to the factory defaults 170 restart system 170 Restore configuration 51 restore configuration 174 RFC 2131 RFC 2132 RFC 2138 RFC 2139 RFC 3046 165 RFC 3164 193 RFI 77 route cost 164 RSTP Runt 57 S Safety 277 safety warnings 6 Secure Shell See SSH Secure Socket Layer See SSL select VLAN type 68 service access control 189 service port 190 Service Provider s Network See SPN SFP Small Form factor Pluggable 38 shared secret 119 Signal to Noise Ratio See SNR Simple Network Management Protocol See SNMP SNMP 33 agent 180 command 180 community 182 manager 180 network component 180 object variable Management Information Base See MIB suppo
21. 33 9 9 egress set Syntax egress set lt port list gt VES 1616F 3x Series User s Guide Chapter 33 Command Examples where lt port list gt Sets the outgoing traffic port list for a port based VLAN An example is shown next Enable port based VLAN tagging on the switch Enable ports one three four and five for configuration Set the outgoing traffic ports as the CPU 0 seven 7 eight 8 and nine 9 sysname config vlan type port based sysname config interface port channel 1 3 5 sysname config interface egress set 0 7 9 33 9 10 qos priority Syntax gos priority lt 0 7 where 0 7 Sets the quality of service priority for a port An example is shown next Enable ports one three four and five for configuration Set the IEEE 802 1p quality of service priority as four 4 sysname config interface port channel 1 3 5 sysname config interface qos priority 4 33 9 11 name Syntax name lt port name string gt where lt port name string gt Sets a name for your port interface s An example is shown next Enable ports one three four and five for configuration Setaname for the ports sysname config interface port channel 1 3 5 sysname config interface name Test VES 1616F 3x Series User s Guide 257 Chapter 33 Command Examples 33 9 12 speed duplex Syntax speed duplex lt auto 10 half 10
22. Add New Profile Down Stream Up Stream Tone Freq kHz Tone Freq kHz PSD Level in 0 1 dBm Hz PSD Level in 0 1 dBm Hz Add Add BreakPoint Tone Freq PSD Level dBm Hz Delete BreakPoint Tone Freq PSD Level dBm Hz Delete Delete Applied Ports 1 16 Delete Cancle Delete r The following table describes the labels in this screen Table 16 VDSL PSD Profile Setup LABEL DESCRIPTION Profile Name Enter a descriptive name for identification purposes This field is configurable only when you click the Add New Profile link Add New Profile Click this link to add a new profile Add Click Add to save the new profile to the Switch It then displays in the summary table at the bottom of the screen Down Stream Up Stream Tone Freq Enter a downstream or upstream tone frequency between 0 and 30000 in kHz PSD Level dBm Specify a downstream or upstream PSD value between 125 and 1400 in units of Hz 0 1 dBm Hz For example if you want to set the transmit power to 20 dBm Hz enter 200 Add Click Add to save the new breakpoint to the Switch It then displays in the summary table in the center of the screen BreakPoint This is the index number of each breakpoint Tone Freq This displays the tone frequency for this breakpoint PSD Level dBm This displays the transmit power for this breakpoint Hz Delete Check the breakpoint s that you want to remove in
23. Anaheim CA 92806 2001 U S A Norway e e e e Support E mail support zyxel no Sales E mail sales zyxel no Telephone 47 22 80 61 80 Fax 47 22 80 61 81 Web Site www zyxel no Regular Mail ZyXEL Communications A S Nils Hansens vei 13 0667 Oslo Norway Poland e e e E mail info pl zyxel com Telephone 48 22 333 8250 Fax 48 22 333 8251 Web Site www pl zyxel com Regular Mail ZyXEL Communications ul Okrzei 1A 03 715 Warszawa Poland Russia e Support http zyxel ru support Sales E mail sales zyxel ru Telephone 7 095 542 89 29 Fax 7 095 542 89 25 Web Site www zyxel ru Regular Mail ZyXEL Russia Ostrovityanova 37a Str Moscow 117279 Russia Support E mail support zyxel es Sales E mail sales zyxel es Telephone 34 902 195 420 Fax 34 913 005 345 VES 1616F 3x Series User s Guide Appendix C Customer Support Web Site www zyxel es Regular Mail ZyXEL Communications Arte 21 5 planta 28033 Madrid Spain Sweden Support E mail support zyxel se Sales E mail sales zyxel se Telephone 46 31 744 7700 Fax 46 31 744 7701 Web Site www zyxel se e Regular Mail ZyXEL Communications A S Sj porten 4 41764 G teborg Sweden Ukraine Support E mail support ua zyxel com Sales E mail sales ua zyxel com Telephone 380 44 247 69 78 Fax 380 44 494 49 32 Web Site www ua zyxel com Regular Mail ZyXEL Ukraine 13
24. System Name Choose a descriptive name for identification purposes This name consists of up to 32 printable characters spaces are not allowed Location Enter the geographic location up to 30 characters of your switch Contact Person s Enter the name up to 30 characters of the person in charge of this switch Name Login Use this drop down list box to select which database the switch should use first to Precedence authenticate an administrator user for switch management Configure the local user accounts in the Access Control Logins screen The RADIUS is an external server Before you specify the priority make sure you have set up the corresponding database correctly first Select Local Only to have the switch just check the local user accounts configured in the Access Control Logins screen Select Local then RADIUS to have the switch check the local user accounts configured in the Access Control Logins screen If the user name is not found the switch then checks the user database on the specified RADIUS server You need to configure Port Authentication RADIUS first Select RADIUS Only to have the switch just check the user database on the specified RADIUS server for a login username and password VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 10 General Setup continued LABEL DESCRIPTION Use Time Server when Bootup Enter the time service protocol that a ti
25. VID Enter the VLAN identification number Port Select a port where the MAC address entered in the previous field will be automatically forwarded Add After you set the fields above click Add to insert a new rule Cancel Click Cancel to reset the fields Clear Click Clear to begin configuring this screen afresh Index Click an index number to modify the settings Active This field displays whether this static MAC address forwarding rule is active Yes or not No You may temporarily deactivate a rule without deleting it Name This field displays the descriptive name for identification purposes for this static MAC address forwarding rule MAC Address This field displays the MAC address that will be forwarded and the VLAN identification number to which the MAC address belongs VID This field displays the VLAN identification number to which the MAC address belongs Port This field displays the port where the MAC address shown in the next field will be forwarded Delete Click Delete to remove the selected entry from the summary table Cancel Click Cancel to clear the Delete check boxes VES 1616F 3x Series User s Guide Filtering This chapter discusses static IP and MAC address port filtering 9 1 Filtering Overview Filtering means sifting traffic going through the switch based on the source and or destination MAC addresses and VLAN group ID 9 2 Configure a Filtering Rule Click Advanced Application gt Filterin
26. Web configurator Getting help 52 Home 46 Login 45 Logout 52 Navigation panel 46 web configurator 32 Weighted Fair Scheduling See WFS WFS queue weight Z ZyNOS ZyXEL Network Operating System 175 VES 1616F 3x Series User s Guide Index VES 1616F 3x Series User s Guide
27. button Scroll down to Scripting Under Active scripting make sure that Enable is selected the default Under Scripting of Java applets make sure that Enable is selected the default Click OK to close the window oar WON VES 1616F 3x Series User s Guide 271 Chapter 35 Troubleshooting Figure 113 Security Settings Java Scripting Settings 125 Scripting 3 Allow paste operations via script Disable 9 Enable Q Prompt E Scripting of Java applets T T ji Q Prompt Llenar Aubkhanki Eon x L4 Reset custom settings Reset to Medium Reset E 35 3 1 3 Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab Click the Custom Level button Scroll down to Microsoft VM Under Java permissions make sure that a safety level is selected Click OK to close the window a fk WN Figure 114 Security Settings Java Security Settings A4 xl Settings Q Disable 9 Enable EX Font download Q Disable 9 Enable Q Prompt 3 Microsoft vM 3 Java permissions Custom oP auu A 9 High safety Q Low safety Reset to Medium Reset te custom settings cmd 272 VES 1616F 3x Series User s Guide Chapter 35 Troubleshooting 35 3 1 3 1 JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 make sure that Use Java 2 for lt applet gt under
28. ox 2 Namei mj j o s 3 Normal i pe o s V D hama mpm R7 16 Normal i o s 7 Normal Mi os 18 Normal i o s Jl Apply Cancel The following table describes the labels in this screen Table 47 VLAN Stacking LABEL DESCRIPTION Active Select this checkbox to enable VLAN stacking on the switch SP TPID SP TPID is a standard Ethernet type code identifying the frame and indicates whether the frame carries IEEE 802 1Q tag information Choose 0x8100 or 0x9100 from the drop down list box or select Others and then enter a four digit hexadecimal number from 0x0000 to OxFFFF Ox denotes a hexadecimal number It does not have to be typed in the Others text field Port The port number identifies the port you are configuring Role Select Normal to have the switch ignore frames received or transmitted on this port with VLAN stacking tags Anything you configure in SPVID and Priority are ignored Select Access Port to have the switch add the SP TPID tag to all incoming frames received on this port Select Access Port for ingress ports at the edge of the service provider s network Select Tunnel Port available for Gigabit ports only for egress ports at the edge of the service provider s network In order to support VLAN stacking on a port the port must be able to allow frames of 1526 Bytes 1522 Bytes 4 Bytes for the second tag to pass through it SPVID SPV
29. 4 5 1 Reload the Configuration File Uploading the factory default configuration file replaces the current configuration file with the factory default configuration file This means that you will lose all previous configurations and the speed of the console port will be reset to the default of 9600bps with 8 data bit no parity one stop bit and flow control set to none The password will also be reset to 1234 and the IP address to 192 168 1 1 To upload the configuration file do the following 1 2 Connect to the console port using a computer with terminal emulation software See Section 3 1 4 on page 39 for details Disconnect and reconnect the switch s power to begin a session When you reconnect the switch s power you will see the initial screen When you see the message Press any key to enter Debug Mode within 3 seconds press any key to enter debug mode Type at1c after the Enter Debug Mode message Wait for the Starting XMODEM upload message before activating XMODEM upload on your terminal After a configuration file upload type atgo to restart the switch VES 1616F 3x Series User s Guide Chapter 4 The Web Configurator Figure 13 Resetting the Switch Via the Console Port Bootbase Version V0 1 06 05 2006 18 30 17 RAM Size 32 Mbytes DRAM POST Testing 32768K OK DRAM Test SUCCESS FLASH AMD 32M ZyNOS Version V3 60 AIH 0 CO 01 25 2007 11 33 20 Pre
30. DSCP 157 DSCP to IEEE802 1p mapping 159 Dynamic Host Configuration Protocol See DHCP dynamic link aggregation E egress port 95 Ethernet broadcast address 205 Ethernet port connection 38 Ethernet port detail 59 Ethernet ports Default settings 38 extended authentication protocol 117 F fast mode 76 FCC interference statement 295 File Transfer Protocol See FTP filename convention 175 Filtering 99 filtering 99 database 203 IGMP 145 Firmware 64 firmware 173 firmware upgrade 173 199 firmware version 63 fixed rate 76 Flow control 74 75 Back pressure 74 75 IEEE802 3x 74 75 front panel 37 FTP 33 175 command example 175 procedure 176 restriction 177 G GARP Generic Attribute Registration Protocol See GARP join timer 69 leave all timer 69 leave timer 69 timer 69 88 garp status 260 GARP timer 88 general setup 65 Getting help 52 Gigabit Ethernet ports 38 GMT Greenwich Mean Time 67 VES 1616F 3x Series User s Guide Index GVRP GARP VLAN Registration Protocol See GVRP GVRP GARP VLAN Registration Protocol 255 gvrp disable 261 gvrp enable 261 gvrp status 261 H hardware connection 37 hardware installation 35 rack mount 35 hardware monitor 64 hop count 164 HTTP 130 HTTP over SSL See HTTPS HTTPS example 187 HyperText Transfer Protocol over Secure Socket Layer See HTTPS IANA 292 IEEE 802 1p 69 IEEE 802 1Q 87 IEEE 802 1w RSTP IEEE 802 1x 117 Note 117
31. Errors This field shows the number of received errors on this port Tx KB s This field shows the number kilobytes per second transmitted on this port Rx KB s This field shows the number of kilobytes per second received on this port Up Time This field shows the total amount of time the connection has been up Tx Packet The following fields display detailed information about packets transmitted TX Packets This field shows the number of good packets unicast multicast and broadcast transmitted Multicast This field shows the number of good multicast packets transmitted Broadcast This field shows the number of good broadcast packets transmitted Pause This field shows the number of 802 3x Pause packets transmitted Rx Packet The following fields display detailed information about packets received RX Packets This field shows the number of good packets unicast multicast and broadcast received Multicast This field shows the number of good multicast packets received Broadcast This field shows the number of good broadcast packets received Pause This field shows the number of 802 3x Pause packets received Control This field shows the number of control packets received including those with CRC error but it does not include the 802 3x Pause packets TX Collision The following fields display information on collisions while t
32. IEEE 802 3ad IGMP 145 snooping 145 version IGMP filtering 145 profile 148 IGMP snooping MVR In 139 ingress check 92 ingress port 95 interleave delay 76 Internet Assigned Numbers Authority See IANA 292 Internet Group Multicast Protocol See IGMP IP setup 69 L LACP link aggregation ID 114 note 113 server 115 system priority 115 timeout 116 latency mode 76 fast 76 interleave delay 76 LED 37 LEDs 40 limit MAC address learning 122 Link Aggregate Control Protocol See LACP link aggregation 113 ID 114 note 113 server 116 timeout 116 load factory defaults 170 Lockout 50 log 191 logical link 113 Login 45 Password 50 login 212 Login account administrator 182 login account 182 account type 182 non administrator 183 number of 182 login precedence 65 logout 217 MAC address aging time 68 MAC address filter 99 MAC address forwarding decision 203 MAC address learning 68 97 121 MAC table 203 disaply 204 sort 204 maintenance 169 backup configuration 174 firmware upgrade 173 load factory defaults 170 restore configuration 174 managament IP address 70 VES 1616F 3x Series User s Guide Index management interface CLI 210 managing the device good habits 33 using FTP See FTP using SNMP See SNMP using Telnet See command interface using the command interface See command interface using the web configurator See web configurator MIB supported 181 MIBs 277 Mini GBIC ports 38 Connection
33. Pimonenko Str Kiev 04050 Ukraine United Kingdom Support E mail support zyxel co uk Sales E mail sales zyxel co uk Telephone 444 1344 303044 08707 555779 UK only Fax 44 1344 303034 Web Site www zyxel co uk FTP Site ftp zyxel co uk Regular Mail ZyXEL Communications UK Ltd 11 The Courtyard Eastern Road Bracknell Berkshire RG12 2XB United Kingdom UK is the prefix number you dial to make an international telephone call VES 1616F 3x Series User s Guide Index Numerics 802 1P priority 74 75 A Access control SNMP 180 access control login account 182 remote management 190 service 189 SNMP activate IEEE 802 1x 118 Address Resolution Protocol See ARP alarm profile 80 82 alternative subnet mask notation 287 application 31 curbside 32 MTU ARP 205 ARP table ARP how it works 205 automatic VLAN registration VLAN automatic registration 88 B backup configuration 174 bandwidth control 107 Basic setting 63 BPDU Bridge Protocol Data Unit See BPDU broadcast 109 broadcast storm control 109 C Canonical Format Indicator See CFI Index certifications 295 296 notices 296 viewing 296 CFI 87 Change password 50 CI Commands 213 Class of Service See CoS classifier Ethernet type 129 example 130 packet format 128 CLI access 210 access priority 210 change password 214 login 212 login password 214 logout 217 management interface 210 CLI
34. Profiles allow you to configure VDSL ports efficiently You can configure all of the VDSL ports with the same profile thus removing the need to configure the VDSL ports one by one You can also change an individual VDSL port by assigning it a different profile For example you could set up different profiles for different kinds of accounts for example economy standard and premium Assign the appropriate profile to a VDSL port and it takes care of a large part of the port s configuration 6 9 VDSL Profile Setup The line profile defines VDSL parameters such as the payload rates the upstream downstream signal noise margins and impulse noise protection You can configure multiple profiles including profiles for troubleshooting To configure or view VDSL profiles click Basic Setting and VDSL Profile Setup to display the screen as shown next VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Figure 24 VDSL Profile Setup Name Fast Channel Payload Rate Rate Adaptive Max SNR Target SNR Min SNR Maxinterleave Delay Max Aggregate Power Rate Ratio Impulse Noise Protection FEC Redundancy Template PSD Mask PBO Control PBO Level Band Plan Band Plan FX Applicable Standard Deployment Scenario Compatible Mode Ham Band Plan Optional Band DownStream Slow Channel Payload Rate max 104960 min 64 Max 104960 min 64 Manual C AdaptAtinit 31 7548 6dB dB 2 ms 14 5 dom z mm
35. Topology This is the number of times the spanning tree has been reconfigured Changed Times Time Since Last This is the time since the spanning tree was last reconfigured Change Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt STP statistic polling 10 3 Configure STP To configure STP click the Configuration link in the Spanning Tree Protocol screen as shown next Refer to Section 10 1 on page 101 for background information Figure 38 Spanning Tree Protocol gt Configuration Spanning Tree Protocol Status Active iv Bridge Priority 32758 Hello Time 2 Seconds Max Age 20 Seconds Forwarding Delay 15 Seconds Port Active Priority Path Cost 17 iv 128 4 18 Vv 128 4 Apply Cancel The following table describes the labels in this screen Table 27 Spanning Tree Protocol gt Configuration LABEL DESCRIPTION Status Click Status to display the Spanning Tree Protocol Status screen Active Select this check box to activate STP Clear this checkbox to disable STP Bridge Priority Bridge priority is used in determining the root switch root port and designated port The switch with the highest priority lowest numeric value becomes the STP root switch If all switches have the same priority the switch with th
36. Up Time 0 00 00 Remote LAN Link 1 Remote LAN Link 2 Remote LAN Link 3 Remote LAN Link 4 VDSL status items Up Stream Down Stream Line Rate 0 000Mbps 0 000Mbps Payload Rate 0 000Mbps 0 000Mbps SNR Margin D 0dB 0 008 Interleave Delay 0 0ms 0 0ms Transmit Power 0 0dBm Attenuation 0 0dB 0 0dB CRC Error 0 0 RS Correct 0 0 RS Uncorrect 0 0 ES 0 0 SES 0 0 TX Packet TX Packets 1 Multicast D VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics TX Packet TX Packets 1 Multicast 0 Broadcast 1 Pause 0 RX Packet RX Packets 0 Multicast 0 Broadcast 0 Pause 0 Control 0 TX Collision Single 0 Multiple 0 Excessive 0 Late 0 Error Packet RX CRC 0 Length 0 Runt 0 Distribution 64 1 65 to 127 0 128 to 255 0 256 to 511 0 512 to 1023 0 1024 to 1518 0 Giant 0 VDSL Performance items Vtuc Vtur LOS 0 0 LOF 0 0 BMIN 0 0 BERR 0 0 Curr 15 Min Time Elapsed 630 630 LOS 15Min 0 0 LOF 15Min 0 0 BMIN 15Min 0 0 BERR 15Min 0 0 Curr 1 Day Time Elapsed 2430 2430 LOS 1 Day 0 0 LOF 1Day 0 0 BMIN 1 Day 0 0 BERR 1Day 0 0 Poll Interval s 40 Set Interval Stop The following table describes the labels in this screen Table 7 Status VDSL Port Details LABEL DESCRIPTION Port Info Number This field displays the port number Name This field displays the descriptive name of a port Link Type This field displays th
37. https gt Specifies a group of trusted computer s from which an administrator may use a service to manage the switch 13 service control ftp lt socket number gt Allows FTP access on the specified service port 13 http lt socket number gt lt timeout gt Allows HTTP access on the specified service port and defines the timeout period 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued Syslog server and the severity level COMMAND DESCRIPTION P https lt socket number gt Allows HTTPS access on the 13 specified service port icmp Allows ICMP access for 13 services like Ping snmp Allows SNMP management 13 ssh lt socket number gt Allows SSH access on the 13 specified service port telnet lt socket number gt Allows Telnet access on the 13 specified service port snmp server contact system Sets the geographic location 13 contact location and the name of the person in system location gt charge of this switch get community Sets the get community 13 property set community Sets the set community 13 lt property gt trap community Sets the trap community 13 lt property gt trap destination lt ip gt Sets the IP addresses of up to 13 four stations to send your SNMP traps to spann
38. number Table 105 24 bit Network Number Subnet Planning NO BORROWED SUBNET MASK NO SUBNETS NO HOSTS PER NET HOST BITS SUB 1 255 255 255 128 25 126 2 255 255 255 192 26 62 3 255 255 255 224 27 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252 30 64 2 7 255 255 255 254 31 128 1 The following table is a summary for subnet planning on a network with a 16 bit network number Table 106 16 bit Network Number Subnet Planning Nostre OWED SUBNET MASK NO SUBNETS NO HOSTS PER 1 255 255 128 0 17 32766 2 255 255 192 0 18 16382 3 255 255 224 0 19 8190 4 255 255 240 0 20 16 4094 5 255 255 248 0 21 32 2046 6 255 255 252 0 22 64 1022 7 255 255 254 0 23 128 510 8 255 255 255 0 24 256 254 9 255 255 255 128 25 512 126 10 255 255 255 192 26 1024 62 11 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting Table 106 16 bit Network Number Subnet Planning continued NO BORROWED NO HOSTS PER HOST BITS SUBNET MASK NO SUBNETS SUBNET 14 255 255 255 252 30 16384 2 15 255 255 255 254 31 32768 1 Configuring IP Addresses Where you obtain your network number depends on your particula
39. page 87 for information on port based and IEEE 802 1Q tagged VLANs Screen Click Basic Setting and then Switch Setup in the navigation panel to display the screen as shown The VLAN setup screens change depending on whether you choose 802 1Q or Port Based in the VLAN Type field in this screen Refer to the chapter on VLAN Figure 21 Switch Setup ED Switch Setup g VLAN Type 802 10 C Port Based Bridge Control Protocol Transparency Active O MAC Address Learning Aging Time 300 seconds Join Timer 200 milliseconds GARP Timer Leave Timer 600 milliseconds Leave All Timer 10000 milliseconds Priority Queue Assignment evel7 7 evel6 jez evel5 5z evel4 4 evel3 3 evel2 fi evelt joz evel 2 Apply Cancel The following table describes the labels in this screen Table 11 Switch Setup LABEL DESCRIPTION VLAN Type Choose 802 1Q or Port Based The VLAN Setup screen changes depending on whether you choose 802 1Q VLAN type or Port Based VLAN type in this screen See Chapter 7 on page 87 for more information Bridge Control Select Active to allow the switch to handle bridging control protocols STP for Protocol example You also need to define how to treat a BPDU in the Port Setup screen Transparency MAC Address MAC address learning reduces outgoing traffic broadcasts For MAC address Learning learning to occur on a port the port must be active Aging Time
40. 1 1 VLAN Stacking Example In the following example figure both A and B are Service Provider s Network SPN customers with VPN tunnels between their head offices and branch offices respectively Both have an identical VLAN tag for their VLAN group The service provider can separate these two VLANs within its network by adding tag 37 to distinguish customer A and tag 48 to distinguish customer B at edge device 1 and then stripping those tags at edge device 2 as the data frames leave the network VES 1616F 3x Series User s Guide Chapter 20 VLAN Stacking Figure 54 VLAN Stacking Example A VLAN 24 N cemara VLAN 24 20 2 VLAN Stacking Port Roles Each port can have three VLAN stacking roles Normal Access Port and Tunnel Port the latter is for Gigabit ports only Select Normal for regular non VLAN stacking IEEE 802 1Q frame switching Select Access Port for ingress ports on the service provider s edge devices 1 and 2 in the VLAN stacking example figure The incoming frame is treated as untagged so a second VLAN tag outer VLAN tag can be added BS Static VLAN Tx Tagging MUST be disabled on a port where you choose Normal or Access Port Select Tunnel Port available for Gigabit ports only for egress ports at the edge of the service provider s network All VLANs belonging to a customer can be aggregated into a single service provider s VLAN using the outer VLAN tag defined by SP VID
41. 33 2 6 show system ITOTIB TIGE usssasecuss a ke utet aka Rene ERR aeu e ennnen kn eet tel doa 245 S21 SNOW VES L apes Meet e E 246 2252 0 SHOW SS spas pascit ee ER de Dar OR cen ups o Re do eas 246 SUC EMIT oecetsabseoren etus ce are een Mrcencree mr nent rare ere ore tm eer eer rere er En finie D ASA 247 SRM e 248 23 5 Enabling RIP aa KR HERO FX sey E VY ERU KDE RUD ELK DR ERU SA UR d 249 39H vdal pon C oisi easesmict etie RERM I SUR REDI Sp n ERE EMI RENE IUE RN MUERE MEME 249 33 7 Configuration File MelntenatiGO uiiiieaceieccima deti rhbrbebxickbbd dti sebida iiuna niian 249 33 7 1 Barking p CODBQUEOBON 25 ccrnr coepi ar Ken ER Gd nad eda Ee a db aad 249 cx ce RES ONNE LIAN M mt 250 94 oo Resening to the Factory DOIault 22d p trt a ptt LRL PR UR ES p beside 250 damna COMMaAnd EXSIMpISS Krasus naaien iaaea nda ERE DE EA DR GS UMP REMO AP EO a DERNAN KAE 251 COE M IW PONY d 251 Doaa WU RUPS TO rc Hd 251 UN MUNE MERO OE LU DEESSET 251 338A NO POM ACCESS AUINENBOAION e H 252 23 9 9 FS E E ex acta Kad Ex EU ces NETE EEEE EN RN eae Re dvaa NAVAL tevin edn 252 02 9 nera COITISIS is perenne peter one emer mee e etu eui E NEIN EHE IUE MA MUR dabis eR EAE 253 209 T MMbriBco DORTEABBOl uoo ico Jan eode i D a Rp see a a oce a da en ias 253 BS DC pc aiaa eia OO OmU 253 EXSR Mere e 254 xxi dac uil Q C sE
42. 41 Common Ethernet Type NUMDOr 1s eesiseteie idet nit tdi ettet ana 130 Table 42 Common FretecoL Port NumDer uniuddaus etii me oS UP db Dto t o d t Eo dd eR Td 130 Ui rtg pem T 136 Table 44 VLAN Tag ei 141 Table 45 Single and Double Tagged 802 11Q Frame Format sse 141 E 46 EEE G02 10 Frame Mcr ee 141 Tae VCR SRC isiyssientsddidedvecodat bodie oda we dies pad dp dts d ia ev dora deo wes 142 Tabe do Multicast SOUS aerario E m I UU I UU UT 146 Tae do Multicast c 147 Table 50 Multicast gt IGMP Filtering Profle 12st inpr SUP t S Lp ES lH Ee rr ada da ntt tta 149 gri FI MER e DE 152 Table 52 MYR Group CONTIQUEBUOD 24ucdeccickunsedicku eun ddecs cuta d ater ekku dde tiet dd dd aAa vue dad venta 153 Table O3 DINOE aes ch sate Un vi vifi d oai dude a vai E a v saut vd o Du RsH LL biu AR ede 158 Table 54 Default DSCPIEEEBOZ Tp Mapping iuuesuxteietesexieiriesesyesoe E eR REEERIe EUH a uA RS UIS 159 Table 255 DIa DOG Senne sscicsuapctisviesktiiesutevxixzad astisesbts ea dadsulovaedesutsdd34qe tvi qas deitas 159 JH OD SEEM ROUNE saci cata tto aqui ket ade deena PA dba Kb p CER Cb S ARE UM a FER RRH RH UB C FUND MAU EK rb Rad bv GR UA ABK Lb 163 Table S7 DACP Relay e 166 TDO S0 NanoOS e 169 Taole 59 Owiec ard Ware Vario saan GNA AA 173 Table GE Filename Conventions M 175 Table 61 Acces
43. 6 1 Management IP Address suse e pha Ebr nni nord ak Et ed RR RR RR RR LR PARA RA Kaka d 70 OF PO SOUP e 72 06 VDSL Pala lelS ee 75 C AMR Fregen y Ban Plaen Aa 75 6 8 2 Configured Versus Actual Rale scscisscicccscsescneservesssncduvrsemeniadarmannese akain i 75 FL A NS 76 TAUFRE scana E 76 Coa AOO oL and 76 VES 1616F 3x Series User s Guide Table of Contents Toe RAIS AC SGN ER TET T 76 0 8 7 RFI Radio Frequency Interference 1 uiseceiee eere neon ni sor tta ibt di ck 77 GEB VDSL IL ee TT GB VDSLPONG SUI uicina tex Beste eei osa E dia deed db onte nds 77 GAB VDSL Alani Pros Sol secen E OAE 80 o1 VDSL PSD Profile SETUP M 82 Part Ii Aavan o asst rec 85 Chapter 7 SCAN m 87 7 1 Iniroduction to IEEE 202 10 Tagged VLAN eerte i RH Ran a td x dea 87 7 1 1 Forwarding Tagged and Untagged Frames 2e rrr errata at aot p va ek are ER Ra uA 87 7 2 Automate VLAN RSQISINANON M 88 FAUNE cl pr TT 88 POLICE TL 88 fon VLAN TONNI aicut diss prr P e pena ae nt EP FRU p i art a erate E I d 89 TA Select ihe YLAN Type esteem E 89 To Satie UM eai E 89 Pa aS VEAN c A 90 15 2 VOnngure a Sule Ello Mec 91 5 3 Configure VLAN Port
44. 63 system log 191 system name 63 system reboot 170 system time 65 System up time 54 I Tag Control Information See TCI Tag Protocol Identifier See TPID TCI TCP UDP protocol port numbers 129 Telco 50 Connector Pin Assignments 278 281 Telnet 211 time format time server 67 time zone 65 TPID 87 141 trademarks 295 Transceiver Installation 38 Removal 39 trap 181 destination 182 trunk group 113 trunking 113 note 113 U UPBO 76 Upstream Power Back Off See UPBO USER Telco 50 Connectors 281 UTC Universal Time Coordinated 67 VES 1616F 3x Series User s Guide Index V VDSL port connection 37 VDSL port detail 55 ventilation 35 VID 90 141 view log 191 Virtual Local Area Network See VLAN VLA stacking frame format 141 VLAN 67 139 acceptable frame type 93 double tagged frame 139 IEEE 802 1q parameter ingress check 92 Introduction 67 number of possible VIDs Number of VLANs 90 port isolation 92 95 port trunking 89 port based 93 priority frame select type 68 stacking 139 static Status 90 tage format 141 tagging 87 Trunking 89 Type 89 VLAN ID 87 VLAN Identifier See VID VLAN profile 77 VLAN stacking 139 port role 140 VLAN tag 87 VLAN trunking 93 vlan1q port accept 262 vlan1q port gvrp 262 vlan1q svlan active 264 vlan1q svlan delentry 264 vlan1q svlan inactive 264 vlan1q svlan list 264 vlan1q svlan setentry 262 W warranty 296 note 297 Web configuration Screen summary 47
45. A port must be enabled for data transmission to occur Name Enter a descriptive name that identifies this port You can enter up to 64 alpha numerical characters Note Due to space limitation the port name may be truncated in some web configurator screens Type This field displays 10 100 1000M for the Gigabit mini GBIC combo ports or 1000M for the mini GBIC ports Speed Duplex Select the speed and the duplex mode of the connection on this port Choices are Auto 10M Half Duplex 10M Full Duplex 100M Half Duplex 100M Full Duplex and 1000M Full Duplex Selecting Auto auto negotiation allows one port to negotiate with a peer port automatically to obtain the connection speed and duplex mode that both ends support When auto negotiation is turned on a port on the switch negotiates with the peer automatically to determine the connection speed and duplex mode If the peer port does not support auto negotiation or turns off this feature the switch determines the connection speed by detecting the signal on the cable and using half duplex mode When the switch s auto negotiation is turned off a port uses the pre configured speed and duplex mode when making a connection thus requiring you to make sure that the settings of the peer port are the same in order to connect VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 13 Port Setup continued LABEL DESCRIPTION Flow Control A concentra
46. BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 191 Highest Host ID 192 168 1 190 Table 103 Subnet 4 LAST OCTET BIT IP SUBNET MASK NETWORK NUMBER VALUE IP Address 192 168 1 192 IP Address Binary 11000000 10101000 00000001 11000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 192 Lowest Host ID 192 168 1 193 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 Example Eight Subnets Similarly use a 27 bit mask to create eight subnets 000 001 010 011 100 101 110 and 111 The following table shows IP address last octet values for each subnet Table 104 Eight Subnets SUBNET ADDRESS FIRST ADDRESS ADDRESS ADDRESS 1 0 1 30 31 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting Table 104 Eight Subnets continued SUBNET ADDRESS FIRST ADDRESS ADDRESS ADDRESS 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 254 255 Subnet Planning The following table is a summary for subnet planning on a network with a 24 bit network
47. Command Configure tagged VLAN example 259 cluster management 197 access password 201 cluster member 201 cluster member firmware upgrade 199 clustering candidate 201 manager 197 201 member 197 memeber web configurator screen 199 network example 197 setup 200 specification 197 status 198 switch models 197 warning icon 201 cluster manager 197 cluster member 197 clustering 197 Command Forwarding Process Example 263 Summary 217 Syntax conventions 212 command exit 217 command interface 32 Command Line Interface See CLI commands modes summary 215 configuration backup 174 VES 1616F 3x Series User s Guide Index Configuration file 51 Restore 51 configuration restore 174 configure port authentication 118 configuring STP 104 connection test 191 Console port Settings 39 console port 210 initial screen 211 contact information 299 copyright 295 CoS 157 CPU management port 93 CRC Cyclic Redundant Check 61 create login account 182 customer support 299 D destination lookup failure See DLF device MAC address 63 DHCP 165 option 82 165 relay agent information 165 DHCP relay diagnostic 191 ping 191 system log 191 test 191 Differentiated Services See DiffServ Differentiated ServicesSee DS DiffServ 133 157 activate 158 DSCP to IEEE802 1p mapping 159 marking rule DiffServ Code Point See DSCP disclaimer 295 DLF double tagged frame 139 double tagged frame format 141 DS 133 157
48. DESCRIPTION HOW TO LOGIN ACCESS PROMPT Config interface This is a sub mode of the config mode and allows you to configure port related settings Type interface port channel followed by a port number For example interface port channel 10 to configure port 10 on the switch sysname config interface alarm profiles followed by a profile name For example vdsl alarmprofile test Config mvr This is a sub mode of the config mode To enter MVR mode sysname config mvr and allows you to configure multicast enter mvr followed by VLAN settings a VLAN ID between 1 and 4094 For example enter mvr 2 to configure multicast settings on VLAN 2 config vdsl This is a sub mode of the config mode Type vlan sysname config alarmprofile and allows you to configure VDSL alarmprofile vdslalarmprofile config vdsl profile This is a sub mode of the config mode and allows you to configure VDSL profiles Type vlan profile followed by a profile name For example vdsl profile standard sysname config vdslprofile Config vlan This is a sub mode of the config mode and allows you to configure VLAN settings Type vlan followed by a number between 1 and 4094 For example vlan 10 to configure settings for VLAN 10 sysname config vlan 32 9 Using Command History The switch keeps a list of command s you have entered for the current CLI session
49. Displays service control settings 13 sfp display Displays detailed information of the 13 SFP transceiver s installed in the mini GBIC slot s snmp server Displays SNMP settings 13 spanning tree config Displays Spanning Tree Protocol 13 STP settings ssh Displays general SSH settings 13 key Displays internal SSH public and 13 rsal rsa dsa private key information known hosts Displays known SSH hosts 13 information session Displays current SSH session s 13 system information Displays general system information 13 time Displays current system time and 13 date timesync Displays time server information 13 trunk Displays link aggregation information 13 vdsl alarmprofile Displays a summary list of VDSL 13 alarm profiles lt profile name gt Displays the settings of a VDSL alarm 13 profile vdsl profile Displays a summary list of VDSL 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 80 Command Summary Enable Mode continued configuration file the switch is currently using COMMAND DESCRIPTION P lt profile name gt Displays settings of the specified 13 VDSL profile vdsl psdprofile Displays a summary list of VDSL PSD 13 profiles lt profile name gt Displays settings of the specified 13 VDSL PSD profile vlan Displays the status of all VLANs 13 lt vlan id gt Displays the status of the speci
50. Enable UPBO Upstream Power Back Off to allow the switch to adjust the transmit PSD of all lines based on a reference line length so that the PSD at the receiving end is the same 6 8 5 Latency Modes There are two latency modes interleave and fast nterleave Interleave delay is the wait in milliseconds that determines the size of a single block of data to be interleaved assembled and then transmitted Interleave delay is used when transmission error correction Reed Solomon is necessary due to a less than ideal telephone line The bigger the delay the bigger the data block size allowing better error correction to be performed Reed Solomon codes are block based error correcting codes with a wide range of applications The Reed Solomon encoder takes a block of digital data and adds extra redundant bits The Reed Solomon decoder processes each block and attempts to correct errors and recover the original data Fast Fast mode means no interleaving takes place and transmission is faster a fast channel This would be suitable if you have a good line where little error correction is necessary 6 8 6 Rate Adaption Rate adaption is the ability of a device to adjust from the configured transmission rate to the attainable transmission rate automatically depending on the line quality The VDSL transmission rate then stays at the new rate or adjusts if line quality improves or deteriorates The switch determines line quality usin
51. Federal Communications Commission FCC Interference Statement This device complies with Part 15 of FCC rules Operation is subject to the following two conditions This device may not cause harmful interference This device must accept any interference received including interference that may cause undesired operations VES 1616F 3x Series User s Guide Appendix B Legal Information FCC Warning This device has been tested and found to comply with the limits for a Class A digital switch pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a commercial environment This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this device in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense CE Mark Warning This is a class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures Taiwanese BSMI Bureau of Standards Metrology and Inspection A Warning See iB AE FE allem TERHEBUIRSEDERINS ARERR Sila T ABS eA SH STR Notices Changes or modifications not expressly approved by the party responsible for compliance cou
52. Guide Hardware Overview This chapter describes the front panel and rear panel of the switch and shows you how to make the hardware connections 3 1 Front Panel Connection The front panel contains switch LEDs and all the network ports and port connections Figure 5 Front Panel ZyXEL ves i6i6F 35 The following table describes the port labels on the front panel Table 1 Front Panel PORT DESCRIPTION POTS ISDN This Telco 50 port connects to the central office or a PBX LINE Optional VDSL LINE This Telco 50 port connects to the user subscriber VDSL equipment 17 18 These Gigabit mini GBIC uplink ports allow you to connect to any other switches CONSOLE The console port is for local management MGMT This RJ 45 port is for local management 3 1 1 VDSL and POTS Connections Connect the lines from the user equipment VDSL modem to the VDSL LINE port and the lines from the central office switch or PBX Private Branch Exchange to the POTS ISDN LINE port Make sure that the VDSL LINE Telco 50 cable and the POTS ISDN LINE Telco 50 cable are not shorted on the MDF Main Distribution Frame The line from the user carries both the VDSL and the voice signals For each line the switch has a built in splitter that separates the high frequency VDSL signal from the voice band signal and feeds the VDSL signal to the switch while the voice band signal is diverted to the POTS ISDN LINE port Refer to A
53. Iv 0 2 C Iv D 3 v D 4 xl amp a O 0 0 xl e a Apply Cancel VES 1616F 3x Series User s Guide 121 Chapter 16 Port Security The following table describes the labels in this screen Table 37 Port Security LABEL DESCRIPTION Active Select this check box to enable the port security feature on the switch Port This field displays a port number Active Select this check box to enable the port security feature on this port The switch forwards packets whose MAC address es is in the MAC address table on this port Packets with no matching MAC address es are dropped Clear this check box to disable the port security feature The switch forwards all packets on this port Address MAC address learning reduces outgoing broadcast traffic For MAC address Learning learning to occur on a port the port itself must be active with address learning enabled Limited Number Use this field to limit the number of dynamic MAC addresses that may be learned of Learned on a port For example if you set this field to 5 on port 2 then only the devices with MAC Address these five learned MAC addresses may access port 2 at any one time A sixth device would have to wait until one of the five learned MAC addresses aged out MAC address aging out time can be set in the Switch Setup screen The valid range is from 0 to 16K 0 means this feature is disabled so the switch will learn M
54. Java Sun is selected 3 Click OK to close the window Figure 115 Java Sun General Security Privacy Content Connections Programs Advanced Settings O Use inline AutoComplete O Use Passive FTP for firewall and DSL modem compatibility Use smooth scrolling i HTTP 1 1 settings Use HTTP 1 1 Use HTTP 1 1 through proxy connections Java Sun Use Java 2 v1 4 1 07 for applet requires restart E Microsoft VM Ld a console enabled requires restart BH enabled M ompiler for virtual machine enabled requires restart Multimedia O Always show Internet Explorer 5 0 or later Radio toolbar O Don t display online media content in the media bar Enable Automatic Image Resizing xf b Restore Defaults 35 4 Problems with the Password Table 90 Troubleshooting the Password PROBLEM CORRECTIVE ACTION Cannot access the The password field is case sensitive Make sure that you enter the correct switch password using the proper casing The administrator username is admin The default administrator password is 1234 The username and password are case sensitive Make sure that you enter the correct password and username using the proper casing If you have changed the password and have now forgotten it you will need to upload the default configuration file This restores all of the factory defaults including the password VES 1616F 3x Series User s Guide 273 Chapte
55. Ln ES aerei keen ondas en a popu ace EREIA UE EASA EPA DIG EU ECL E onstage ELM UR EE EATUS 40 Part IE Status and EaSiCioieciupabkvnaiz ec E ERR FF ERRER EMI E ERU UD RRN NUNEN 43 Chapter 4 THE Wep pepe Tn 45 cM uec TER ETE 45 LR culus A 45 LEM I cuc fovis r A S OESTE 46 4 3 1 Change Your PaSSWONI usce ese cuti een te ebria a zikk e ida iui enu col da acp wap Ea ka 50 S WIE EDCREDUL apne ee Pn Rx d a et EH RD M B tes pen DU DR Len id pte code 50 Lu PRESS to n eme 51 4 5 1 Reload the Contgurallori FIIO ieiccccct sess cct enpen eter ta rua bl muda n dava Ce epi ama E Pura 51 4 6 LOGGING Out of the Web Configurator iiuacsssccenaes sen crine ni dt rata kr tad ka naar t E 52 BIO CI dcus eH IPM ir M MEN IMMER HMM EAM 52 Chapter 5 System Status and Port Statisties iius enini uk bail L ARRA FEES XEM BUR MU DULLE pRU SEPA RAL D UA iadaaa UR Uv ANB BK 53 BN SU PRI Im 53 a nec ULT D 00708 aman 53 ARUBA 54 noz wDSLPOICDSIBES iioii ed pause p e deb eee did adii dd 55 paS duni Mio RA ELI T cabo enact ece enhance steed ee es 59 Chapter 6 CLIE uppme 63 mERSU QU e 63 EPA ic MISI EE e E ooo T 63 6 3 General SGU t 65 3 lnroduction to VLANS ssa casts priced ELE FIER Ean aaan EE DNE AAE AASA 67 0 5 VIC Sellp SCIO misii R A 68 DD IPSSEID un onini nito neu AA EE m ad 69 6
56. MAC Table ARP Table Port Status 29 2 1 1 Uploading Firmware to a Cluster Member Switch You can use FTP to upload firmware to a cluster member switch through the cluster manager switch as shown in the following example Figure 103 Example Uploading Firmware to a Cluster Member Switch C gt ftp 192 168 1 1 Connected to 192 168 1 1 220 FTP version 1 0 ready at Thu Jan 1 00 47 52 1970 User 192 168 1 1 none admin 331 Enter PASS command Password 230 Logged in ftp ls 200 Port command okay 150 Opening data connection for LIST 226 File sent OK ftp 297 bytes received in 0 01Seconds 19 80Kbytes sec ftp bin 200 Type I OK ftp put 360AIHO bin fw 00 13 49 00 00 01 200 Port command okay 226 File received OK ftp 262144 bytes sent in 0 63Seconds 415 44Kbytes sec ftp W w W 1 owner group 1459070 Jul 01 12 rw rw rw 1 owner group 49152 Jul 01 12 wW Ww wWw 1 owner group 0 Jul 01 12 rw rw rw 1 owner group 0 Jul 01 12 00 00 00 00 150 Opening data connection for STOR fw 00 13 49 00 00 01 ras config fw 00 13 49 00 00 01 config 00 13 49 00 00 01 VES 1616F 3x Series User s Guide Chapter 29 Cluster Management The following table explains some of the FTP parameters Table 74 FTP Upload to Cluster Member Example FTP PARAMETER DESCRIPTION User Enter admin Password The web configurator password default is 1234 ls Enter this
57. Pin Assignments CONSOLE Port RS 232 Female DB 9F DIAL BACKUP RS 232 Male DB 9M Pin 1 NON Pin 2 DCE TXD Pin 3 DCE RXD Pin 4 DCE DSR Pin 5 GND Pin 6 DCE DTR Pin 7 DCE CTS Pin 8 DCE RTS PIN 9 NON Pin 1 NON Pin 2 DTE RXD Pin 3 DTE TXD Pin 4 DTE DTR Pin 5 GND Pin 6 DTE DSR Pin 7 DTE RTS Pin 8 DTE CTS PIN 9 NON VES 1616F 3x Series User s Guide Chapter 36 Product Specifications VES 1616F 3x Series User s Guide PART VIII Appendices and Index The appendices provide general information Some details may not apply to your Switch Legal Information 295 Customer Support 299 Index 303 IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks IP addresses identify individual devices on a network Every networking device including computers servers routers printers etc needs an IP address to communicate across the network These networking devices are also known as hosts Subnet masks determine the maximum number of possible hosts on a network You can also use subnet masks to divide one network into multiple sub networks Introduction to IP Addresses One part of the IP address is the network number and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each hou
58. Protocol that allows faster convergence of the spanning tree than STP while also being backwards compatible with STP only aware bridges In RSTP topology change information is directly propagated throughout the network from the device that generates the topology change In STP a longer delay is required as the device that causes a topology change first notifies the root bridge that then notifies the network Both RSTP and STP flush unwanted learned addresses from the filtering database In RSTP the port states are Discarding Learning and Forwarding BS In this user s guide STP refers to both STP and RSTP 10 1 1 STP Terminology The root bridge is the base of the spanning tree it is the bridge with the lowest identifier value MAC address Path cost is the cost of transmitting a frame onto a LAN through that port It is assigned according to the speed of the link to which a port is attached The slower the media the higher the cost Table 24 STP Path Costs LINK RECOMMENDED RECOMMENDED ALLOWED SPEED VALUE RANGE RANGE Path 4Mbps 250 100 to 1000 1 to 65535 Cost Path 10Mbps 100 50 to 600 1 to 65535 Cost Path 16Mbps 62 40 to 400 1 to 65535 Cost VES 1616F 3x Series User s Guide Chapter 10 Spanning Tree Protocol Table 24 STP Path Costs LINK RECOMMENDED RECOMMENDED ALLOWED SPEED VALUE RANGE RANGE Path 100Mbps 19 10 to 60 1 to 65535 Cost Path 1Gbps 4 3 to 1
59. Refer to Section 7 1 on page 87 for background information Figure 32 VLAN gt VLAN Port Setting Biber Lh a x D x ED VLAN Port Settna eg VLAN Status GVRP O Port isolation O Port Ingress Check PVID GVRP Acceptable Frame Type VLAN Trunking 1 iv 1 C Al LH s iv 1 1 Al rH ni Ooo DOO Oo Apply Cancel The following table describes the labels in this screen Table 20 VLAN gt VLAN Port Setting label description GVRP GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network Select this check box to permit VLAN groups beyond the local switch Port Isolation Port Isolation allows each port to communicate only with the CPU management port and the uplink ports but not communicate with each other This option is the most limiting but also the most secure Port This field displays the port number Ingress Check Select this check box to discard incoming frames for VLANs that do not have this port as a member Clear this check box to disable ingress filtering PVID Enter a number between 1and 4094 as the port VLAN ID VES 1616F 3x Series User s Guide Chapter 7 VLAN Table 20 VLAN gt VLAN Port Setting continued label description GVRP Select this check box to allow GVRP on this port Acceptable Specify the type o
60. Telco 50 Connector Port and Pin Numbers sss 279 Table 85 Console Port Pin ASSIGNMENTS usce seduce eriei s ninda ADEN tdv canta das ctii dts sei d ddp pta 281 Table 96 IP Address Network Number and Host ID Example sss 286 Table ur Subtiet MOSKS iosasisiaisitbvtetaste dee E eee ei oie eee ee 287 Table 90 Maximum Hest NUMDETS Wa 287 Table 99 Alternative Subnet Mask Notation sssssssssssssssesssseeeneneenee nemen nnn en nnne nnne 287 Tabe TOO SUDET T e cR 289 Tabe UT SUEI eases wads cased Pants waves pid des eaves ae Sees ee a aa edd Br teeta 290 WARIS 102 SUDE LS areira E ENEN N iets 290 ABETI SUM A nnn ne aa aAA e Eei 290 Toe TOA EIS UDINE aiie A Oa a EEG aa eU IX e EE EEE MAL Sed ag a ANO A EEA 290 Table 105 24 bit Network Number Subnet Planning cciscaiciedsieaisiinaicesqschesirecacaidadesisimaiteatennateontane 291 Table 106 16 bit Network Number Subnet Planning seeeeeessseeessssssseerrneserssssessssnneeernrnasssnsnnnaaarenanesseens 291 VES 1616F 3x Series User s Guide List of Tables VES 1616F 3x Series User s Guide PART Introduction Getting to Know Your Switch 31 Hardware Installation 35 Hardware Overview 37 Getting to Know Your Switch This chapter introduces the main features and applications of the switch 1 1 Introduction BS The VES 1616F 3x series switches are stand alone layer 2 VDSL Ver
61. User s Guide Chapter 4 The Web Configurator Table 5 Navigation Panel Links continued LINK DESCRIPTION Maintenance This link takes you to screens where you can perform firmware and configuration file maintenance as well as reboot the system Access Control This link takes you to screens where you can change the system login password and configure SNMP and remote management Diagnostic This link takes you to screens where you can view system logs and test port s Syslog This link takes you to screens where you can enable syslog logging and configure syslog server settings Cluster This link takes you to a screen where you can configure clustering management Management and view its status MAC Table This link takes you to a screen where you can view the MAC addresses and types of devices attached to what ports and VLAN IDs ARP Table This link takes you to a screen where you can view the MAC addresses IP address resolution table 4 3 1 Change Your Password After you log in for the first time it is recommended you change the default administrator password Click Management gt Access Control gt Logins to display the next screen Figure 12 Change Administrator Login Password Logins Access Control Administrator Old Password New Password Retype to confirm Please record your new password whenever you change it The system will lock you out if you have
62. You can use any commands in the history again by pressing the up 4 or down arrow key to scroll through the previously used commands and press ENTER Use the history command to display the list of commands sysname gt history enable exit history sysname gt VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands 32 10 Saving Your Configuration After you set the switch settings with the configuration commands use the write memory command to save the changes permanently sysname write memory The write memory Command is not available in User mode You must save your changes after each CLI session All unsaved configuration changes are lost once you restart the switch 32 10 1 Logging Out In User or Enable mode enter the exit or logout command to log out of the CLI In Config mode entering exit takes you out of the Config mode and into Enable mode and entering logout logs you out of the CLI 32 11 Command Summary The following sections summarize the commands available in the switch together with a brief description of each command Commands listed are in alphabetical order The P column on the right indicates the administrator privilege level needed to use the command See the related section in the User s Guide for more background information 32 11 1 User Mode The following table describes the commands available for User mode Table 79 Command Summ
63. a DHCP server assigns to computer B which is a DHCP client Neither can access the Internet This problem can be solved by assigning a different static IP address to computer A or setting computer A to obtain an IP address automatically Figure 123 Conflicting Computer IP Addresses Example a 1 A um SN 192 168 1 33 ASD Internet a mmmmmmm Sa 192 168 1 33 eat Conflicting Router IP Addresses Example Since a router connects different networks it must have interfaces using different network numbers For example if a router is set between a LAN and the Internet WAN the router s LAN and WAN addresses must be on different subnets In the following example the LAN and WAN are on the same subnet The LAN computers cannot access the Internet because the router cannot route between networks Figure 124 Conflicting Computer IP Addresses Example EE WAN ANT Of COR NU 192 168 1 88 192 168 1 1 a Internet 3 oe ETETETT ummmmmmmm VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address In the following example the computer and the router s LAN port both use 192 168 1 1 as the IP address The computer cannot access the Internet This problem can be solved by assigning a different IP address to the computer o
64. by running ssh keygen F publickey pub on the keyfile Agent forwarding is disabled to avoid attacks by corrupted servers X11 forwarding is disabled to avoid attacks by corrupted servers Are you sure you want to continue connecting yes no yes Do you want to change the host key on disk yes no yes Agent forwarding re enabled X11 forwarding re enabled Host key saved to C Documents and Settings Administrator Application Data SSH hostkeys key 22 192 168 0 1 pub host key for 192 168 0 1 accepted by Administrator Thu May 12 2005 09 52 21 admin s password Authentication successful Copyright c 1994 2005 ZyXEL Communications Corp sysname gt 32 3 The Login Screen After you have successfully established a connection to the switch using a direct console connection or Telnet a login screen displays The following figure shows an example For your first login enter the default administrator login username admin and password 1234 Enter User Name admin Enter Password XXXX 32 4 Command Syntax Conventions The rules of the commands are listed next The command keywords are in courier new font The required fields in a command are enclosed in angle brackets for instance ping ip means that you must specify an IP number for this command VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands The optional f
65. forgotten your password Edit Logins Login User Name Password Retype to confirm bonc ss a e d MEM NENNEN ee NENNEN MEN mEEEEEEEE ee ee Apply Cancel 4 4 Switch Lockout You are locked out from managing the switch 1f another administrator is currently logged in You must wait until he she has logged out before you can log in Any ofthe following could also lock you and others out from using in band management managing through the data ports Moreover you could lock yourself and all others out from the switch by 1 Deleting the management VLAN default is VLAN 1 VES 1616F 3x Series User s Guide Chapter 4 The Web Configurator Deleting all port based VLANs with the CPU port as a member The CPU port is the management port of the switch Incorrectly configuring the access control settings This could also lock you out from performing out of band management managing through the console port or management port Disabling all ports Assigning minimum bandwidth to the CPU port If you limit bandwidth to the CPU port you may find that the switch performs sluggishly or not at all Be careful not to lock yourself and others out of the switch 4 5 Resetting the Switch If you lock yourself and others out of the switch you can try using out of band management If you still cannot correct the situation or forgot the password you will need to reload the factory default configuration file
66. full 100 half 100 full 1000 full gt where auto l0 half 10 Sets the duplex mode half or full and speed 10 100 or 1000 full 100 half 100 Mbps of the connection on the port Selecting auto auto full 1000 full gt Ante negotiation makes one port able to negotiate with a peer automatically to obtain the connection speed and duplex mode that both ends support An example is shown next Enable ports one three four and five for configuration Set the speed to 10 Mbps in half duplex mode sysname config interface port channel 1 3 5 sysname config interface speed duplex 10 half VES 1616F 3x Series User s Guide IEEE 802 1Q Tagged VLAN Commands This chapter describes the IEEE 802 1Q Tagged VLAN and associated commands 34 1 Configuring Tagged VLAN Refer to Chapter 7 on page 87 for background information on VLANs The following procedure shows you how to configure tagged VLAN 1 Use the IEEE 802 1Q tagged VLAN commands to configure tagged VLAN for the switch e Use the vlan lt vlan id gt command to configure or create a VLAN on the switch The switch automatically enters the config vlan mode Use the inactive command to deactivate the VLAN s Use the interface port channel lt port list gt command to enter the config interface mode to set the VLAN settings on a port then use the pvid lt vlan id gt command to set the VLAN ID you created for the port list to that specific port i
67. hosts host Removes the specified remote 13 ip gt hosts from the list of all known hosts known hosts host Removes remote known hosts 13 ip gt 1024 ssh with the specified public key rsa ssh dsa 1024 bit RSA1 RSA or DSA storm control Disables broadcast storm 13 control syslog Disables syslog logging 13 server ip Disables syslog logging to the 13 address specified syslog server server ip Enables syslog logging to the 13 address inactive specified syslog server type type Disables syslog logging for the 13 specified log type sys link config error or report timesync Removes the time server 13 protocol trunk T1 Disables port group trunking 13 interface port Removes ports from the trunk 13 list group lacp Disables LACP in the trunk 13 group vdsl alarmprofile lt profile name gt Removes a VDSL alarm 13 profile You cannot delete a default profile DEFVAL vdsl profile lt profile name gt Removes a VDSL profile You 13 cannot delete a default profile DEFVAL vdsl psd profile profile name Removes a VDSL PSD profile 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued on the specified port s COMMAND DESCRIPTION P lt profile name gt Removes the specified 13 physide lt 1 2 gt breakpoint in a VDSL PSD frequence 0 pr
68. info denotes your session index session remote ip console 2 telnet d WIZ 32 3237160 sysname If the multiple login feature is disabled using the no multi login command in Config mode the screen displays as shown sysname show multi login multi login is disabled sysname 33 2 6 show system information Syntax show system information VES 1616F 3x Series User s Guide 245 Chapter 33 Command Examples This command shows the general system information such as the firmware version and system up time An example is shown next sysname show system information VES 1616F 35 System Name System Contact System Location Ethernet Address ZyNOS CODE Product Model sysname VES 1616F 35 00 13 49 00 00 02 V3 60 AIH 0 CO 01 25 2007 29b44 ticks ZyNOS F W Version RomRasSize 3364912 System up Time 0 28 28 Bootbase Version V0 1 06 05 2006 RAS Jan 19 2007 19 22 28 33 2 7 show vdsl alarmprofile Syntax show vdsl alarmprofile lt profile name gt This command displays a summary list of VDSL alarm profiles or displays the settings of a VDSL alarm profile The following example shows the summary table sysname show vdsl alarmprofile Name LOSs ESs SESS InitFailure Applied Ports DEFVAL 0 0 0 Off 1 16 sysname The following example shows the settings of the test alarm profile sysname
69. is removed from the trunk Set a short timeout one second for busy trunked links to ensure that disabled ports are removed from the trunk group as soon as possible Select either 1 second or 30 seconds Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Port Authentication This chapter describes the 802 1x authentication method and RADIUS server connection setup 15 1 Port Authentication Overview IEEE 802 1x is an extended authentication protocol that allows support of RADIUS Remote Authentication Dial In User Service RFC 2138 2139 for centralized user profile and accounting management on a network RADIUS server 15 1 1 RADIUS RADIUS Remote Authentication Dial In User Service authentication is a popular protocol used to authenticate users by means of an external server instead of or in addition to an internal device user database that is limited to the memory capacity of the device In essence RADIUS authentication allows you to validate an unlimited number of users from a central location Figure 44 RADIUS Server m Client RADIUS Server E 15 2 Configure Port Authentication To enable port authentication first activate IEEE802 1x security both on the switch and the port s then configure the RADIUS server settings Click Advanced Application gt Port Authentication i
70. known hosts 252 VES 1616F 3x Series User s Guide Chapter 33 Command Examples Remove the remote host with IP address 172 165 1 9 and with an SSH RSA encryption key from the list of known hosts sysname config no ssh key rsal sysname config no ssh known hosts 172 165 1 8 sysname config no ssh known hosts 172 165 1 9 ssh rsa 33 9 interface Commands These are some commonly used commands that belong to the interface group of commands 33 9 1 interface port channel Syntax interface port channel lt port list gt Use this command to enable the specified ports for configuration Type multiple ports or port ranges separated by a comma Ranges of port numbers are typed separated by a dash The following example shows you how to access the interface command mode to configure ports 1 3 4 and 5 Enter the configuration mode Enable ports one three four and five for configuration Begin configuring for those ports sysname config sysname config interface port channel 1 3 5 sysname config interface 33 9 2 bpdu control Syntax bpdu control lt peer tunnel discard network gt where lt peer tunnel discard network Type peer to process any BPDUs received P on these ports Type tunnel to forward BPDUs received on these ports Type discard to drop any BPDUs received on these ports Type network to process and forward BPDUS with a VLAN tag and to process untagged
71. labels in this screen Table 13 Port Setup LABEL DESCRIPTION Ports 1 16 Port This is the port index number Active Select this check box to enable a port The factory default for all ports is enabled A port must be enabled for data transmission to occur Name Enter a descriptive name that identifies this port You can enter up to 64 alpha numerical characters Note Due to space limitation the port name may be truncated in some web configurator screens Type This field displays VDSL for the VDSL ports Profile Select a VDSL line profile from the drop down list box This field displays the profile names you configure in the VDSL Profile Setup screen Refer to Section 6 9 on page 77 for more information PSD Profile Select a VDSL PSD profile from the drop down list box This field displays the profile names you configure in the VDSL PSD Profile Setup screen Refer to Section 6 11 on page 82 for more information Alarm Profile Select a VDSL alarm profile from the drop down list box This field displays the alarm profile names you configure in the VDSL Alarm Profile Setup screen Refer to Section 6 10 on page 80 fore more information VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 13 Port Setup continued LABEL DESCRIPTION Flow Control A concentration of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and
72. mapping Table 54 Default DSCP IEEE802 1p Mapping DSCP 0 7 8 15 116 23 24 31 32 39 40 47 48 55 56 63 VALUE IEEE802 1P 0 1 2 3 4 5 6 7 22 3 1 Configuring DSCP Setting To change the DSCP IEEE 802 1p mapping click the DSCP Setting link in the DiffServ screen to display the screen as shown next Figure 69 DiffServ gt DSCP Setting o pH e ME 16 2 gt 24 3 2 32 4 40 5 gt 48 6 gt se 7 gt a P T DSCP to 802 1p Mapping o s M s om 7 omi i pm whe she 17 2x shka 19 2 20 2 21 ze 22 ze 23 pA 2 az 26 3 27 3 zba zba 30 3 31 hba 33 4 34 4e 35 4 36 a 37 ae 38 4 39 47 npa 42 5 sba 44 5 45 5 46 5s 47 57 aa jez so em s ev 52 6 s3 fey safer 55 6 gt s7 7 spa spa opa apa epa spa 1 fox 2 9 fix 10 uha cope spes uha 15 Apply Cancel The following table describes the labels in this screen Table 55 DiffServ gt DSCP Setting LABEL DESCRIPTION 0 63 This is the DSCP classification identification number To set the IEEE802 1p priority mapping select the priority level from the drop down list box Apply Click Apply to save the changes Cancel Click Cancel to discard all changes and start configuring the screen again VES 1616F 3x Series User s Guide Chapter 22 Differentiated Services VES 1616F 3x Series User s Guide
73. o ms D C Mask Mask2 X Disable OdB z BandPlanggs ANSI ETSI ITU other C FTTCab FTTEx other C None C 640kHz C 1100kHz 2200kHz start p 1810kHz 3500kHz 7000kHz 10100kHz 14000kHz 18068kHz F CustomNotch1 F CustomNotch2 Amateur Radio Amateur Radio Amateur Radio Amateur Radio Amateur Radio Amateur Radio F Amateur Radio 21000kHz 24890kHz 28000kHz Amateur Radio Amateur Radio G kHz kHz off C Upstream Downstream UpStream Max 1104960 Min 64 Max 104950 min 64 C Manual Adaptatinit 31 75dB gt 6dB OdB b ms 145 dom b 0 ms E y C Maski Mask2 Disable 7 OdB X X stop 0 2000kHz 3800kHz ETSI 4000kHz ANSI T100kHz ETSD 7 300kHz ANSI 10150kHz 14350kHz 18168kHz kHz kHz 21450kHz 24990kHz 29700kHz Line Type Add Cancel Clear Name Payload Rate SNR Margin Applied Ports Delete DEFVAL S 104M 104M F 104MA 04M 6dB 6dB 1 16 r Delete Cancel The following table describes the labels in this screen Table 14 VDSL Profile Setup Payload Rate LABEL DESCRIPTION Name Enter a descriptive name for identification purposes Slow Channel Specifies the maximum minimum slow channel data rate in bits second Enter a number between 104960 and 64 Fast Channel Payload Rate Specifies the maximum minimum fast channel data rate
74. policy in the Policy screen to define action s on the classified traffic flow VES 1616F 3x Series User s Guide Chapter 18 Classifier Figure 51 Classifier Example Classifier Active iv Name Example Packet Format All VLAN c Type C Others Hex A C Any Layer 2 Source PEN mac joo pc a NN fr BC Port Port2 Any C wc El RR RR Destination MAC Address DSCP c All I Establish Only IP Protocol C Others Dec IP Address pooo 0 0 0 0 lovers Address Prefix e Source C any Socket Number c IP Address pooo 0 0 0 0 Address Prefix j Destination G Any Socket Number c Add Cancel Clear Index Active Name Rule Delete 3 Yes Example SrcMac 00 50 ba ad 4f 81 SrcPort port 2 r Delete Cancel VES 1616F 3x Series User s Guide Chapter 18 Classifier 132 VES 1616F 3x Series User s Guide Policy This chapter shows you how to configure policy rules 19 1 Policy Overview A classifier distinguishes traffic into flows based on the configured criteria refer to Chapter 18 on page 127 for more information A policy rule ensures that a traffic flow gets the requested treatment in the network 19 1 1 DiffServ DiffServ Differentiated Services is a class of service CoS model that marks packets so that they receive specific per hop treatment at DiffServ compliant network devices along the route based on the applic
75. pops up asking if you trust the server certificate Click Examine Certificate if you want to verify that the certificate is from the switch If Accept this certificate temporarily for this session is selected then click OK to continue in Netscape Select Accept this certificate permanently to import the switch s certificate into the SSL client Figure 92 Security Certificate 1 Netscape xl Unable to verify the identity of VES 1616F 34 001349038296 as a trusted site A Possible reasons for this error Your browser does not recognize the Certificate Authority that issued the site s certificate The site s certificate is incomplete due to a server misconfiguration You are connected to a site pretending to be VES 1616F 34 001349038296 possibly to obtain your confidential information Please notify the site s webmaster about this problem Before accepting this certificate you should examine this site s certificate carefully Are you willing to to accept this certificate for the purpose of identifying the Web site VES 1616F 34 001349038296 Accept this certificate permanently Accept this certificate temporarily For this session Do not accept this certificate and do not connect to this Web site e m Figure 93 Security Certificate 2 Netscape x You have attempted to establish a connection with 192 168 1 1 However the security certificate presented belongs to NES 1616F 34 001349038296 It is p
76. port list gt Disables the receiver port s An MVR receiver port can only receive multicast traffic in a multicast VLAN 13 source port Xport list Disables the source port s An MVR source port can send and receive multicast traffic in a multicast VLAN 13 tagged port list Sets the port s to remove VLAN tags 13 receiver port port list Sets the receiver port s An MVR receiver port can only receive multicast traffic in a multicast VLAN 13 Source port port list Sets the source port s An MVR source port can send and receive multicast traffic in a multicast VLAN 13 tagged port list Sets the port s to include VLAN tags 13 32 11 6 vdsl alarmprofile Commands The following table lists the v s1 alarmprofile commands in configuration mode Table 84 vdsl alarmprofile Commands COMMAND DESCRIPTION vdsl alarmprofile lt name gt Enters the VDSL alarm profile mode 15minsESs lt threshold gt Sets the number of Errored Seconds ES allowed in any 15 minute period An alarm is triggered if this number is exceeded 13 VES 1616F 3x Series User s Guide 237 Chapter 32 Introducing the Commands Table 84 vdsl alarmprofile Commands continued COMMAND DESCRIPTION P 15minsLoss Sets the number of Lost of Signal 13 lt threshold gt Los errors allowed in a
77. speed 38 Connector type 38 Transceiver installation 38 Transceiver removal 39 mini GBIC port connection 38 monitor port 111 MSA MultiSource Agreement 38 MTU 31 MTU Multi Tenant Unit 67 Multicast 149 multicast 145 address 145 setup 146 multicast group 148 multicast VLAN 152 multiple login 210 Multiple Tenant Unit See also MTU MVR configuration 151 configuration example 154 group configuration 152 how it works 150 mode 150 Multicast VLAN Registration See MVR network example port 150 N NAT 292 Network Element NE Network Management System NMS Network Time Protocol See NTP NTP 67 O Operating Temperature 277 Operational Humidity 277 P Password 50 Per Hop Behavior See PHB PHB 133 157 physical queue 69 ping 191 policy 133 example 137 POP3 130 port and MVR 150 Port authentication RADIUS server 119 port authentication 117 Port Based VLAN Type 68 port connection 37 port isolation 92 95 Port Mirroring 234 255 Port mirroring 111 port redundancy 113 port security 121 limit MAC address learning 122 port setup 72 Port speed duplex 74 port status 53 port test 191 Port VID Default for all ports 236 port VID 87 port VLAN trunking 89 port based VLAN 93 port isolation 95 setting wizard 95 POTS port connection 37 Power Spectral Density See PSD priority 69 priority level 69 priority queue assignment 69 product registration 297 profile alarm 80 82 VDSL line 77 PSD 76
78. storm control limit 13 limit on the switch lt pkt s gt Sets how many broadcast packets the 13 interface receives per second cable diagnos Displays whether a cable is connected 13 tics to the port good or not open diffserv Enables DiffServ settings on the 13 port s dlf limit Enables the Destination Lookup 13 Failure DLF limit lt pkt s gt Sets the interface DLF limit in packets 13 per second pps egress set Sets the outgoing traffic port list fora 13 lt port list gt port based VLAN VES 1616F 3x Series User s Guide Ed Chapter 32 Introducing the Commands Table 82 interface port channel Commands continued name string gt descriptive name up to nine printable ASCII characters COMMAND DESCRIPTION P exit Exits from the interface port channel 13 command mode flow control Enables interface flow control Flow 13 control regulates transmissions to match the bandwidth of the receiving port frame type Choose to accept both tagged and 13 all tagged u untagged incoming frames or just ntagged tagged incoming frames on a port gvrp Enables this function to permit VLAN 13 groups beyond the local switch help Displays a description of the interface 13 port channel commands igmp profile name Applies the specified IGMP filtering 13 filtering profile igmp group Enables the IGMP group limiting 13 limit featu
79. switch IP address 192 168 1 1 25 3 Reboot System Reboot System allows you to restart the switch without physically turning the power off Follow the steps below to reboot the switch 1 Inthe Maintenance screen click the Click Here button next to Reboot System to display the next screen Figure 75 Reboot System Confirmation x 2 Are you sure you want to reboot system i Cancel VES 1616F 3x Series User s Guide Chapter 25 Maintenance 2 Click OK to display the screen shown next Figure 76 Reboot System Start x AN rebooting please close this session then reconnect later 3 Click OK again and then wait for the switch to restart This takes up to two minutes This does not affect the switch s configuration 25 4 Remote Device Upgrade The switch allows you to perform remote firmware upgrade on the connected CPE device s Click Management and Maintenance then click the Click Here link next to Remote Device Upgrade to display the screen as shown next BS Be sure to upload the correct model firmware as uploading the wrong model firmware may damage the device Figure 77 Maintenance Remote Device Upgrade LSS Device Upgrade g Maintenance Please Choose VDSL Lines VDSLLineO1 5 4 1r3 To upgrade the Remote Device firmware browse to the location of the binary BIN file and click Apply button File Path Browse Upgrade Follow the steps below to perform remote f
80. the number of Errored Seconds ESs that are permitted to occur within 15 Threshold minutes 15 Minute SESs Enter the number of Severely Errored Seconds SESs that are permitted to occur Threshold within 15 minutes 15 Minute UASs Enter the number of UnAvailable Seconds UASs that are permitted to occur Threshold within 15 minutes Initialization Select On to trigger an alarm for an initialization failure trap Failure Select Off to disable trap sending when a line fails to initialize Add Click Add to save the new rule to the switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults Name This field displays the descriptive name for the alarm profile LOSs This field displays the number of Loss Of Signal LOS seconds that are permitted to occur within 15 minutes ESs This field displays the number of Errored Seconds ESs that are permitted to occur within 15 minutes VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 15 VDSL Alarm Profile Setup continued LABEL DESCRIPTION SESs This field displays the number of Severely Errored Seconds SESs that are permitted to occur within 15 minutes Init This field displays whether the initialization failure trap sending feature is enabled On or not Off Applied Ports You can apply a profile
81. the switch to forward or discard unknown multicast group traffic With IGMP snooping group multicast traffic is only forwarded to ports that are members of that group IGMP snooping generates no additional network traffic allowing you to significantly reduce multicast traffic passing through your switch 21 2 Multicast Status Click Advanced Application gt Multicast to display the screen as shown This screen shows the multicast group information Refer to Section 21 1 on page 145 for more information on multicast Figure 56 Multicast Status Multicast Status Multicast Setting Index VID Port Multicast Group The following table describes the labels in this screen Table 48 Multicast Status LABEL DESCRIPTION Index This is the index number of the entry VID This field displays the multicast VLAN ID Port This field displays the port number that belongs to the multicast group Multicast Group This field displays IP multicast group addresses 21 3 Multicast Setup Click Advanced Application gt Multicast to display the screen as shown Use this screen to enable and configure multicast settings on the switch and apply IGMP profiles to ports See Section 21 1 on page 145 for background information VES 1616F 3x Series User s Guide Chapter 21 Multicast Figure 57 Multicast OMEGNEN Multicast Status IGMP Filtering Profile Port Immed Leave 1 m 17 18 Ei
82. the switch using TFTP 33 7 1 Backing up Configuration Syntax copy running config tftp lt ip gt lt remote file gt VES 1616F 3x Series User s Guide Chapter 33 Command Examples where lt ip gt The IP address of a TFTP server on which you want to store the backup configuration file lt remote file gt Specifies the name of the configuration file This command backs up the current configuration file on a TFTP server The following example backs up the current configuration to a file test cfg on the TFTP server 172 23 19 96 sysname copy running config tftp 172 23 19 96 test cfg Backuping 683 Bytes Done sysname 33 7 2 Restoring Configuration Syntax copy tftp config lt index gt lt ip gt lt remote file gt where lt index gt Specifies to restore which configuration file 1 on the Switch ip The IP address of a TFTP server from which you want to get the backup configuration file lt remote file gt Specified the name of the configuration file This command restores a configuration file on the switch The following example uploads the configuration file test cfg from the TFTP server 172 23 19 96 to the switch sysname copy tftp config 1 172 23 19 96 test cfg Restoring 683 Bytes Done sysname 33 7 3 Resetting to the Factory Default Follow the steps below to reset the switch back to the factory defaults 1 Entererase running config to res
83. you haven t changed the default HTTPS port on the switch then in your browser enter https switch IP Address as the web site address where switch IP Address is the IP address or domain name of the switch you wish to access 26 9 1 Internet Explorer Warning Messages When you attempt to access the switch HTTPS server a Windows dialog box pops up asking if you trust the server certificate Click View Certificate if you want to verify that the certificate is from the switch You see the following Security Alert screen in Internet Explorer Select Yes to proceed to the web configurator login screen if you select No then web configurator access is blocked Figure 91 Security Alert Dialog Box Internet Explorer x ran Information you exchange with this site cannot be viewed or changed by others However there is a problem with the site s security certificate A The security certificate was issued by a company you have not chosen to trust View the certificate to determine whether you want to trust the certifying authority o The security certificate date is valid The name on the security certificate is invalid or does not match the name of the site Do you want to proceed Yes No View Certificate VES 1616F 3x Series User s Guide Chapter 26 Access Control 26 9 2 Netscape Navigator Warning Messages When you attempt to access the switch HTTPS server a Website Certified by an Unknown Authority screen
84. 0 1 to 65535 Cost Path 10Gbps 2 1to5 1 to 65535 Cost On each bridge the root port is the port through which this bridge communicates with the root It is the port on this switch with the lowest path cost to the root the root path cost If there is no root port then this switch has been accepted as the root bridge of the spanning tree network For each LAN segment a designated bridge is selected This bridge has the lowest cost to the root among the bridges connected to the LAN 10 1 2 How STP Works After a bridge determines the lowest cost spanning tree with STP it enables the root port and the ports that are the designated ports for connected LANs and disables all other ports that participate in STP Network packets are therefore only forwarded between enabled ports eliminating any possible network loops STP aware switches exchange Bridge Protocol Data Units BPDUs periodically When the bridged LAN topology changes a new spanning tree is constructed Once a stable network topology has been established all bridges listen for Hello BPDUs Bridge Protocol Data Units transmitted from the root bridge If a bridge does not get a Hello BPDU after a predefined interval Max Age the bridge assumes that the link to the root bridge is down This bridge then initiates negotiations with other bridges to reconfigure the network to re establish a valid network topology 10 1 3 STP Port States STP assigns five port
85. 00 00000000 255 0 0 0 16 bit mask 11111111 11111111 00000000 00000000 255 255 0 0 24 bit mask 11111111 11111111 11111111 00000000 255 255 255 0 29 bit mask 11111111 11111111 11111111 11111000 255 255 255 248 Network Size The size of the network number determines the maximum number of possible hosts you can have on your network The larger the number of network number bits the smaller the number of remaining host ID bits An IP address with host IDs of all zeros is the IP address of the network 192 168 1 0 with a 24 bit subnet mask for example An IP address with host IDs of all ones 1s the broadcast address for that network 192 168 1 255 with a 24 bit subnet mask for example As these two IP addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows Table 98 Maximum Host Numbers SUBNET MASK HOST ID SIZE MAXIMUM NUMBER OF HOSTS 8bits 255 0 0 0 24 bits 242 16777214 16 bits 255 255 0 0 16 bits 216_2 65534 24 bits 255 255 255 0 8 bits 28 2 254 29 bits 255 255 255 248 3 bits 0925 6 Notation Since the mask 1s always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet This is usually specified by writing a followed by the number o
86. 0C AE C 2 FIKIRI C 7 7 77 et eee ee ae cf 7 7 c o c c Cr so 0 Cc 0 Re lhl ea ls eo co 0c cE lhl 7 el 7 0 oc Cc cE lhl hl aaa 7 oc rr oe ll el em tt os ee 2 5 7o o ANT Outgoing v MNEGE NER Ce el ERE PIII 770 ea 7 c7 ee 2 WERE REN o 7 c OAEI r r o WIRED eo 0 r ee o e C EEE r rrr oe ol el sie 0 0 oe Cc ee C e rr r e ENNE O ee r ta O 07 7C ot c nC EAE cu v iv v iv MM FM wv MR FM FM Fw FW M FM Fw Ww M ou 1 2 3 4 5 6 7 8 9 40 44 42 43 44 15 48 iz d Apply Cancel The following table describes the labels in this screen Table 21 Port Based VLAN Setup LABEL DESCRIPTION Setting Choose All connected or Port isolation Wizard All connected means all ports can communicate with each other that is there are no virtual LANs All incoming and outgoing ports are selected This option is the most flexible but also the least secure Port isolation means that each port can only communicate with the CPU management port and cannot communicate with each other All incoming ports are selected while only the CPU outgoing port is selected This option is the most limiting but also the most secure After you make your selection click Set top right of screen to display the screens as mentioned above You can still customize these settings by adding deleting incoming or outgoing ports but you must also click Apply at the botto
87. 1 2 Enable Mode The following table describes the commands available for Enable mode Table 80 Command Summary Enable Mode COMMAND DESCRIPTION P baudrate 11213141 5 Changes the console port speed 13 Choices are 1 9600 2 19200 3 38400 4 57600 and 5 115200 boot config Restarts the system 13 configure Accesses Configuration mode See 13 Section 32 11 3 on page 223 copy running config tftp ip Backs up running configuration to the 13 remote file specified TFTP server with the specified file name tftp config index Restores configuration with the 13 ip remote specified filename from the specified file TFTP server flash ip Restores firmware via TFTP 13 lt remote file gt disable Exits Enable or privileged mode 13 enable Accesses Enable or privileged 13 mode erase running config Resets to the factory default settings 13 exit Exits Enable or privileged mode 13 help Displays help information 13 history Displays a list of command s that you 13 have previously executed igmp flush Clears all IGMP information 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 80 Command Summary Enable Mode continued COMMAND DESCRIPTION P kick tcp lt session ID gt Disconnects the specified TCP 13 session logout Exits Enable or privileged mode
88. 12 031 12 031 i 6 Normal Poll Interval s ao Setinterval_ Stop The following table describes the labels in this screen Table 9 System Info LABEL DESCRIPTION System Name This field displays the descriptive name of the switch for identification purposes OS FAN This field displays the version number of the switch s current firmware including the Version date created Modem Code This field displays the version number of the switch s current VDSL modem code F W Version version Ethernet This field refers to the Ethernet MAC Media Access Control address of the switch Address Hardware Monitor Temperature The switch has temperature sensors that are capable of detecting and reporting if the Unit temperature rises above the threshold You may choose the temperature unit Centigrade or Fahrenheit in this field Temperature IFE8 Switch and ADT7463 refer to the location of the temperature sensors on the circuit board Current This shows the current temperature in degrees centigrade at this sensor MAX This field displays the maximum temperature measured at this sensor MIN This field displays the minimum temperature measured at this sensor Threshold This field displays the upper temperature limit at this sensor Status ns field displays Normal for temperatures below the threshold and Error for those above If Error displays check that the fans are working and make sure that
89. 13 mac flush Clears the MAC address table 13 lt port num gt Removes all learned MAC address on 13 the specified port s no arp Clears the ARP table 13 interface lt port number gt Clears interface statistics 13 logging Clears system logs 13 ping iplhost name Sends Ping request to an Ethernet 13 in band out of device band vlan lt vlan id gt size lt 0 1472 gt t help Displays command help information 13 reload config Restarts the system with the stored 13 configurations show classifier Displays all classifier related 13 information name Displays the specified classifier 13 related information cluster Displays cluster management status 13 candidates Displays cluster candidate 13 information member Displays the MAC address of the 13 cluster member s member config Displays the configuration of the 13 cluster member s member mac mac Displays the status of the cluster 13 addr gt member s diffserv Displays general DiffServ settings 13 garp Displays GARP information 13 hardware monitor Displays current hardware monitor 13 C F information with the specified temperature unit Celsius C or Fahrenheit F hardware version Displays whether the Switch is a 13 VDSL1 100100 or 10050 or VDSL2 device 5030 https Displays the HTTPS information 13 certificate Displays the HTTPS certificates 13 key lt rsa dsa gt Displays the HTTPS key 13 session Displays current HTTPS session s 13 timeout
90. 14 password string gt password bandwidth Enables bandwidth control 13 control bcp Enables Bridge Control 13 transparency Protocol BCP transparency classifier name packet format Configures a classifier A 13 802 3untag 802 3tag E classifier groups traffic into therIIuntag EtherIItag data flows according to gt priority 0 7 specific criteria such as the vlan lt vlan id gt source address destination ethernet type lt ether address source port number num iplipx arplrarplap destination port number or pletalk decnet sna net incoming port number bios dlc source mac src mac addr source port port num gt destination mac lt dest mac addr gt dscp lt 0 63 gt ip protocol lt protocol num tcp udp icmp egp o spf rsvp igmp igp pim ipsec gt establish only source ip src ip addr gt mask bits lt mask bits gt source socket lt socket num gt destination ip dest ip addr mask bits lt mask bits gt destination socket lt socket num gt inactive gt help Displays command 13 information cluster lt vlan id gt Sets the cluster management 13 VLAN ID member lt mac address gt password Sets the cluster member 13 lt password str gt switch s hardware MAC address and password name lt cluster name gt Configures a name to identify 13 the cluster manager rcommand lt mac address gt Logs into a cluster member 13 Switch default lt in band out of band gt Specifies throug
91. 2 1x authentication on this port You must first allow 802 1x authentication on the switch before configuring it on each port Reauthenticatio Specify if a subscriber has to periodically re enter his or her username and n password to stay connected to the port Reauthenticatio Specify how often a client has to re enter his or her username and password to stay n Timer connected to the port It is recommended that you enter a number more than 60 seconds The valid range is between 1 and 65535 seconds Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Chapter 15 Port Authentication 15 2 2 Configuring RADIUS Server Settings From the Port Authentication screen click RADIUS to display the configuration screen as shown Use this screen to configure RADIUS server settings See Section 15 1 on page 117 for background information Figure 47 Port Authentication gt RADIUS OLD Port Authentication Authentication Server IP Address 0 0 0 0 UDP Port 1812 Shared Secret 1234 Apply Cancel The following table describes the labels in this screen Table 36 Port Authentication RADIUS LABEL DESCRIPTION Authentication Server IP Address Enter the IP address of the external RADIUS server in dotted decimal notation UDP Port The default port of the RADIUS server for authentication is 1812 You need not c
92. 254 cxcRcgn pic MERETUR ee 255 399G OI e M 255 QS MOSSEN anttecusei el acuta pL Ru pnt oc E dul RED IE P 256 pete Ihe RU cavncticielquaccsreieaatacsscusuntc dan nicateiuciace banner tn eamcmeamac 256 Dee ORES GEN a 256 IOI PN Se PHO qnie Rp PET TT 257 Set MN C e M 257 2H TS See NV 1 ss ooi Dodd eve api bata NE 258 Chapter 34 IEEE 802 1Q Tagged VLAN Commands eeeee eee eeeeeeeeceeeseeeeeeeee nennen nennen 259 24 1 Conmaunng Togoad VLAN erem 259 34 2 Global VLAN1Q Tagged VLAN Configuration Commands sse 260 ELO P SURE MUNN Lu send cdi edicts Pose Evae dade aod emn Reto bud odadx sodes etg Ead 260 esc pllNDu Ar 260 VES 1616F 3x Series User s Guide Table of Contents MLZ S OVRE TINON 4c ipe raa eed vas Ie aai aU pte RE tei dde 261 az d END OE acerca a E LOI SEES ea EE PAPER es nlc iad EETA A CHO Ga ER 261 35 2 5 Disable VRE rrrainis 261 24 2 Pan VLAN COINS oci ro Caen Ja sete epar e ER e PC a RR RUD Rag t aco 261 2125 TL SSEP E VID agsia tid e ui m cuipiam aic uidetur pd 261 34 3 2 Set Acceptable Frame TV oiiascie ese s mit eb ero tub satraganstiesicanlsceenijessraeusisaniseriasaeiecns 262 2435 0 Enable f Disable PON GVRP Lies cisco CES Ep Ho E CR iinun PHARA RYE MEER ua EASi 262 24 2 5 Modi Sane VLAN uuccsdqutetnsisiutetisquietudqes zem Du nemo nd eben rest tu p perti enn 262 34 3 5 Forwarding Process EX Implb oi po
93. 35 3 Problem with the VDSL Connection Table 89 Troubleshooting VDSL Connection PROBLEM CORRECTIVE ACTION The VDSL link Make sure the VDSL port is activated is down Check the port connection Make sure the cable is faulty The VDSL port may be faulty Try connecting to a different VDSL port on the switch The target transmission rate s may be too high Set the switch to use a lower link transmission rate The CPE device may be faulty Try connecting another CPE device to the VDSL port Cannotsend Make sure the VDSL port is activated and that the physical link status is up traffic overthe Check that the traffic on this VDSL port is not blocked by the filter settings on the VDSL link switch Check the MAC address learning limitation on the VDSL port Make sure the maximum number of MAC address is not reached or turn off this feature Make sure the VDSL client IP address is configured correctly Check the VLAN settings on the switch Make sure the VLAN group VLAN ID and egress settings are correct on the VDSL port 35 3 1 Pop up Windows JavaScripts and Java Permissions In order to use the web configurator you need to allow Web browser pop up windows from your device JavaScripts enabled by default Java permissions enabled by default BES Internet Explorer 6 screens are used here Screens for other Internet Explorer versions may vary 35 3 1 1 Internet Explorer Pop up Blockers You m
94. 46 to configure multicast IP Multicast Addresses In IPv4 a multicast address allows a device to send packets to a specific group of hosts multicast group in a different subnetwork A multicast IP address represents a traffic receiving group not individual receiving devices IP addresses in the Class D range 224 0 0 0 to 239 255 255 255 are used for IP multicasting Certain IP multicast numbers are reserved by IANA for special purposes see the IANA web site for more information 21 1 2 IGMP Filtering With IGMP filtering you can control which IGMP groups a subscriber on a port can join This allows you to control the distribution of multicast services such as content information distribution based on service plans and types of subscription You can set the switch to filter the multicast group join reports on a per port basis by configuring an IGMP filtering profile and associating the profile to a port 21 1 3 IGMP Snooping A layer 2 switch can passively snoop on IGMP Query Report and Leave IGMP version 2 packets transferred between IP multicast routers switches and IP multicast hosts to learn the IP multicast group membership It checks IGMP packets passing through it picks out the group registration information and configures multicasting accordingly VES 1616F 3x Series User s Guide Chapter 21 Multicast Without IGMP snooping multicast traffic is treated in the same manner as broadcast traffic you can configure
95. 5 x see a e Lr J3 16 P POR T2 P PORTZ P POR T4 P PORTA P POR T5 P PORTS P PORTS P PORTE P POR T10 P PORT10 P POR T12 P PORTIZ P POR T14 P PORT14 P POR T16 P PORT16 Solder side Reverse type P POR TI P PORTI P POR T3 P POR TS P POR TS P POR T5 P POR T7 P POR T7 P POR H P POR T9 P POR T11 P POR T11 P POR T13 P POR T13 P POR T15 P POR T15 Solder side Reverse type VDSL PORT NUMBER PIN NUMBER 1 48 49 2 22 23 3 45 46 4 19 20 5 42 43 6 16 17 7 39 40 8 13 14 9 36 37 10 10 11 11 33 34 12 7 8 13 30 31 J4 TELC O 50 25 P POR T2 22 P POR T2 21 20 P POR T4 18 P POR T4 18 17 P POR T5 16 P POR TO 14 P POR TS 13 P POR TS 12 11 F POR T10 10 P POR T10 9 8 P POR T12 P POR T12 P POR T14 4 P POR T14 3 2 P POR T16 1 P POR T6 VES 1616F 3x Series User s Guide 279 Chapter 36 Product Specifications Table 94 Hardware Telco 50 Connector Port and Pin Numbers continued VDSL PORT NUMBER PIN NUMBER 14 4 5 15 27 28 16 1 2 Telco 50 Cable Telco 50 Connector Pin Assignments Use Telco 50 cables to connect the VDSL LINE port to the user equipment VDSL modem and the POTS ISDN LINE port to the central office switch or PBX Private Branch Exchange The following diagram shows the pin assignments that you need to have on the Telco 50
96. 75 Sets the target burst rate for the 13 downstream slow channel us 0 1275 Sets the target burst rate forthe 13 upstream slow channel 32 11 8 vlan Commands The following table lists the vlan commands in configuration mode Table 86 vlan Commands COMMAND DESCRIPTION P vlan 1 4094 Creates a new VLAN group 13 exit Leaves the VLAN configuration mode 13 fixed port Specifies the port s to be a permanent 13 list member of this VLAN group forbidden Specifies the port s you want to prohibit from 13 port list joining this VLAN group help Displays a list of available VLAN commands 13 inactive Disables the specified VLAN 13 ip address lt ip address gt Sets the IP address and subnet mask of the 13 lt mask gt switch in the specified VLAN for packet loopback test VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 86 vlan Commands continued lt port list gt outgoing frames transmitted with this VLAN Group ID COMMAND DESCRIPTION P lt ip address gt Allows the switch to be managed using this 13 lt mask gt specified IP address manageable default Sets a default gateway IP address for this 13 gateway lt ip VLAN address gt inband defaul Sets a static in band IP address and subnet 13 lt ip address gt mask lt mask gt i
97. 9000 None POTS only Denmark 2709 7500 150nF None POTS only Finland 2709 7500 150nF None POTS only France 2709 7500 150nF 1350 2B1Q Germany 2200 8200 115nF 1500 4B3T Iceland 2709 7500 150nF None POTS only VES 1616F 3x Series User s Guide 277 Chapter 36 Product Specifications Table 92 CO Impedance Splitter Board Specifications continued COUNTRY POTS ISDN Netherlands 2709 7500 150nF 1350 2B1Q Norway 270Q 7500 150nF 1350 2B1Q Russia 6000 None POTS only Sweden 2709 7500 150nF None POTS only Swiss 2709 7500 150nF 1350 2B1Q UK 3200 10500 230nF None POTS only USA 9000 None POTS only Hardware Telco 50 Connector Pin Assignments The following table and diagram show the pin assignments of the Telco 50 connectors on the switch Table 93 Hardware Telco 50 Pin Assignments VDSL POTS ISDN PINT P PORT16 PIN26 Nut PIN1 P PORT16 PIN26 PIN2 P PORT16 PIN27 P PORT15 PIN2 P PORT16 PIN27 P PORT15 PIN3 PIN28 P PORT15 PIN3 PIN28 P PORT15 PIN4 P PORT14 PIN29 PIN4 P PORT14 PIN29 PINS P PORT14 PIN30 P PORT13 PINS P PORT14 PIN30 P PORT13 PING PIN31 P PORT13 PIN6 PIN31 P PORT13 PIN7 P PORT12 P
98. A em 29 Cee TO NOW D ecc cd T 31 Hardware RUAN DTE cocos EORR rs GE e Pa bar beso tt beled esis a pleb lord uk eoi EL neon FEBR CUBR S EE E aud 35 Farw e VOID vaiinu ned Mos aa cu nidi cu eepoten Fold adap Las nU ub MU DNO s ob ba I AS cep PPdCH Dad be or ratas amd BUSES aoicevaten DOE NEDREPWA NU TIU QUI Qr TEE FRU DrkM T CUNT EUM VEL andes 43 The WED Xenon A 45 System elatus and CN Ee SIS Lou teresa EpL ex Ein qhva Eine tbs EE U Fa ba E Hi naaa A ea bla REN PR ERU LEVER a 53 BAS OON scicnisiuteau quite iid hate aint un MEN DEMNM ee 63 BAD Lost dera exo erbe e LEE d a E A AN ea Fang ad Lan Eu N a LN LOC AA AE E VR A Eu T 85 pills eee EO ERR E ERE 87 Stalig MAC Foward DOUP sorain 97 PP UU TP 99 Spanning Tree PROG e M 101 Panaw CONTON ocana A A 107 Broadcast SOM LE 1 a A a aaa 109 MUTONO ccvteansecetsrensceccivecauctteviaientatusstencsecteiieentacues tent acne deudeseats qeuusemun demmecieidedceariieumenniuaueeertas 111 BI Wee S MARI T D oc ev E UTE 113 Por Stet DIY isiosasdcso pep ERROREM NN DRIRPMIMIR RU RiHUMI EMI dE 117 up clc mm 121 E ES Try 5 aires NER LT 123 CAES Gee esis os EAA Dea Orc eem sod eei Der eb A isle Dues le ivre Qu E edna Seana Due NO I eet ere Copa 127 acd e M 132 pis peres 139 EIU SE aimans innia e opti reso antur cote d Ex Hi Soc D Bc Seb LP frt Ea EO En Gre Poo Oh deter Lud
99. AC addresses up to the global limit of 16K Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Queuing Method This chapter introduces the queuing methods supported 17 1 Queuing Method Overview Queuing is used to help solve performance degradation when there is network congestion Use the Queuing Method screen to configure queuing algorithms for outgoing traffic See also Priority Queue Assignment in Switch Setup and 802 1p Priority in Port Setup for related information Queuing algorithms allow switches to maintain separate queues for packets from each individual source or flow and prevent a source from monopolizing the bandwidth The switch has eight physical queues QO to Q7 Q7 has the highest priority and QO has the lowest Table 38 Physical Queue Priority QUEUE PRIORITY Q7 8 Highest Q6 7 Q5 6 Q4 5 Q3 4 Q2 3 Q1 2 QO 1 Lowest 17 1 1 Strict Priority Queuing SPQ Strict Priority Queuing SPQ services queues based on priority only As traffic comes into the switch traffic on the highest priority queue Q3 is transmitted first When that queue empties traffic on the next highest priority queue Q2 is transmitted until Q2 empties and then traffic is transmitted on Q1 and so on If higher priority queues never empty then traffic on lower priority queues never gets
100. ADIUSOnly gt authenticate a user logins username lt name gt password lt pwd gt Configures up to four read 14 only login accounts privilege lt 0 14 gt Sets the access privilege for 14 the existing login accounts The higher the value the more commands are allowed logout Exits from the CLI 13 mac aging 10 3000 Sets learned MAC aging time 13 time mac filter name name mac mac Configures a static MAC 13 addr vlan vlan id address port filtering rule drop lt src dst both gt inactive Disables a static MAC address 13 port filtering rule mac forward name name mac mac Configures a static MAC 13 addr vlan vlan id address forwarding rule interface interface id inactive Disables a static MAC address 13 forwarding rule mirror port Enables port mirroring 13 lt port num gt Sets a monitor port 13 mode zynos Changes the CLI mode to the 13 ZyNOS format multi login Enables multi login 14 mvr vlan id Enters the MVR Multicast 13 VLAN Registration configuration mode See Section 32 11 5 on page 236 for more information no bandwidth control Disable bandwidth control on 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued filter rule COMMAND DESCRIPTION P bcp transparency Disables Bridge Control 13 Protocol
101. Active O Host Timeout jeo IGMP Snooping Leave Timeout b 802 1p Priority No Change IGMP Filtering Active D Unknown Multicast Frame 7 r O Defau Auto X fault 16 rH O Default v Auto amp Flooding C Drop Group Limited Max Group Num IGMP Filtering Profile IGMP Querier Mode O 0 Default v Auto gt e E 0 Default v Auto O 0 Default Auto Apply Cancel The following table describes the labels in this screen Table 49 Multicast LABEL DESCRIPTION IGMP Snooping Active Select Active to enable IGMP snooping to forward group multicast traffic only to ports that are members of that group Host Timeout Specify the time from 1 to 16 716 450 in seconds that elapses before the switch removes an IGMP group membership entry if it does not receive report messages from the host Leave Timeout Enter an IGMP leave timeout value from 1 to 16 716 450 in seconds This defines how many seconds the switch waits before removing an IGMP snooping membership entry when an IGMP leave message is received from a host 802 1p Priority Select a priority level 0 7 to which the switch changes the priority in outgoing IGMP control packets Otherwise select No Change to not replace the priority Multicast Frame IGMP Filtering Select Active to enable IGMP filtering to limit the IGMP groups a subscriber on a port can join Unknown Specify the action to perform when the switc
102. BCP transparency classifier name Disables the classifier Each 13 classifier has one rule If you disable a classifier you cannot use policy rule related information inactive Enables a classifier 13 cluster Disables cluster management 13 on the switch member mac Removes the cluster member 13 address dhcp relay Disables DHCP relay 13 information Disables the relay agent 13 information option 82 option System name is not appended 13 to option 82 information field diffserv Disables the DiffServ settings 13 https timeout Resets the session timeout to 13 the default of 300 seconds igmp filtering Disables IGMP filtering on the 13 Switch profile name Disables the specified IGMP 13 filtering profile profile name Clears the settings of the 13 start address ip specified IGMP filtering profile end address ip igmp snooping Disables IGMP snooping on 13 the switch 8021p priority Disables 8021 p priority 13 change in the outgoing IGMP control packets ip Disables management 13 ip route ip mask Removes a specified IP static 13 route inactive Enables a specified IP static 13 route lacp Disables the link aggregation 13 control protocol dynamic trunking on the switch logins username name Disables login access for the 14 specified account name mac filter name name Disables the specified MAC 13 mac lt mac addr gt vlan filter rule lt vlan id gt inactive Enables the specif
103. BPDUs VES 1616F 3x Series User s Guide 253 Chapter 33 Command Examples An example is shown next Enable ports one three four and five for configuration e Set the BPDU control to tunnel to forward BPDUs received on ports one three four and five sysname config interface port channel 1 3 5 sysname config interface bpdu control tunnel sysname config interface 33 9 3 broadcast limit Syntax broadcast limit broadcast limit lt pkt s gt where Enables broadcast storm control limit on the switch lt pkt s gt Sets how many broadcast packets the interface receives per second An example is shown next Enable port one for configuration e Enable broadcast control Set the number of broadband packets the interface receives per second sysname config interface port channel 1 sysname config interface broadcast limit sysname config interface broadcast limit 21 33 9 4 bandwidth limit Syntax bandwidth limit bandwidth limit egress lt Kbps gt bandwidth limit ingress lt Kbps gt where Enables bandwidth control on the switch lt Kbps gt Sets the maximum bandwidth allowed for outgoing traffic egress or incoming traffic ingress on the switch An example is shown next Enable port one for configuration Enable bandwidth control Set the outgoing traffic bandwidth limit to 7Mbps VES 1616F 3x Series User s Guide Chapter 33 Comman
104. Blocker Prevent most pop up windows from appearing C Block pop up Cx OK Th coca Cancel 3 Click Apply to save this setting 35 3 1 1 2 Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools Internet Options and then the Privacy tab 2 Select Settings to open the Pop up Blocker Settings screen VES 1616F 3x Series User s Guide Chapter 35 Troubleshooting Figure 110 Internet Options Internet Options Sere General Security Privacy Content Connections Programs Advanced Rura Settings Move the slider to select a privacy setting for the Internet zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker S Prevent most pop up windows from appearing v Block pop ups Settings 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the IP address to the list of Allowed sites Figure 111 Pop up Blocker Settings Pop up Blocker Settings Exceptions Pop ups are currently bloc
105. C F OPWEPIBI uouuisiauiccenisiic niniin iEn eei tua dod dd Rok d dap caxaniuneerastieduetiavnrderesaniade 97 Ds career CT 99 Table 24 SIF FANGOS apran a N 101 VANS 25 SIP FOM SOS naana aA Aa 102 Table 26 spanning Ires Pretecol STAINS sesiis aoaia iai a ERE IEEE MPH LSU CE niaaa E DENA ENAA 103 Table 27 Spanning Tree Protocol gt Configuration 1 sisse seid tet detti deze dad 104 J ecsudorner p Bau MNUT PE 108 Tapie 29 Broadcast Stomm CONO M P 109 TAN MUTO 112 Tabe 31 Link Aggregation ID Local Sate T E KEA 114 Table 32 Link Aggregation ID Peer Switeh iuxixisesackereseea d EE PRI d HERE REH Od kar E PER TEX kann 114 Table 33 Link Aggregation Control Protocol SUUS 1 aieo Ia Faso Pre eo RH sare oe br Er end xa 114 Table 34 Link Aggregation Control Protocol gt Configuration ssssssssssssseeeene 115 Table 35 Port Authentication BUD TX iisect caseo esctteduete ee teen Sassi TRU cedes sip e e eR eI a QUI ior Leen tun ELD Gd E EEUU IO 118 Table 38 Port Authentication gt IUDILES 1iissss pesci pepe EEERHFRP 9 EE an ian nn Fe 9 OO Rar LEER Pr e dead 119 Pais Br POOO E 122 Table 38 Physical Quete PHONY acuusasecenei eiit dorsi dues bed detis cand deans Sa E EE a Ai 123 VES 1616F 3x Series User s Guide 25 List of Tables Tabie 32 CSU MORON M 125 WET A TEE E E E tT RT 128 Table
106. Clear the check box if you wish to temporarily disable the set without deleting it Start Address Configure the IP address range of trusted computers from which you can manage this End Address Switch The switch checks if the client IP address of a computer requesting a service or protocol matches the range set here The switch immediately disconnects the session if it does not match Telnet FTP Select services that may be used for managing the switch from the specified trusted Web ICMP computers SNMP SSH HTTPS Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Diagnostic This chapter explains the Diagnostic screen 27 1 Diagnostic Click Management gt Diagnostic in the navigation panel to open this screen Use this screen to check system logs reset the system or ping IP addresses Figure 97 Diagnostic System Log IP Ping Port Test c viagnostic S Display Clear IP Address Ping Pot Internal Test External Test The following table describes the labels in this screen Table 68 Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi line text box Click Clear to empty the text box and reset the syslog entry IP Ping Type the IP address of a device that you want to ping in order to test a connection Click P
107. Commands ica zer prit ond vob Ete tied aa aa aaa aaa EE aaa bela 213 32 5 2 Detailed Command Informed 2 oiccuso to eene E ERE E Por oa FE HP UT E PER a nsa 214 rA LMCI WPS PSS WON c 214 32 7 Account Privilege Levels ev 215 32 0 Command Modes Em 215 ee Ueno Comman HEO oa DLL 216 De VIG TODE TAMING ec edunr bote o itu ed oer iub d etes bubutedio bte aqna bul et ee ibunt esa din el 217 Se NT LG CHG COME qe 217 ad oma DOR IBENC eacus sia tarta to adlata b ERE pi ttr dt anc E I Riu cube ad 217 CEBIT d su staal A A 217 22 01 ENPO MOIS goi A 218 32 11 3 General Configuration Mode 1 eee rena nra Er x rna E PR Ra ramen 223 32 E RS M inerace eI E 233 22 TS mU LOTS oa ae AANA 236 32 11 86 vesl alannpronle Commands cciensjeasniaierscasiniscadenadoseaivaaisdiacccesionsageaabeiorsew tants 237 32117 VEST PPT OUI ANAS med 238 id 11 9 VENIS EN MUU PAV ec bs aid aha Lp pa Eod iet pate ra cu b cna Dara dU aw eis 240 Chapter 33 Command chiurrfeee 243 CE URE I i ETC TREES SUUS 243 VES 1616F 3x Series User s Guide Table of Contents nudas Ge aT IE PENIS EET EIE DTE 243 ee pie dni LE METRE ET EI ER Tor HT 243 coru io e 244 Te a INE Eres MTS 244 33 2 4 show mac addressstsible all sssctscicccnstedtcantiiocantorciasiiaaeaeieientwansahecsiens 244 Sood IR NOD M 245
108. Displays the HTTPS session timeout 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 80 Command Summary Enable Mode continued Registration settings COMMAND DESCRIPTION P igmp filtering profile Displays IGMP filtering profile 13 settings igmp snooping Displays global IGMP snooping 13 settings interfaces port Displays current interface status 13 number interfaces config Displays current interface 13 port list configuration bandwidth control Displays bandwidth control settings 13 bstorm control Displays broadcast storm control 13 settings egress Displays outgoing port information 13 igmp filtering Displays IGMP filtering settings 13 igmp group Displays the IGMP group limit 13 limited imgp immediate Displays the IGMP Immediate Leave 13 leave setting igmp query mode Displays IGMP query mode settings 13 protocol based Displays protocol based VLAN 13 vlan settings ip Displays IP related information 13 arp Displays the ARP table 13 route Displays IP routing information 13 route static Displays IP static route information 13 tcp Displays IP TCP status 13 udp Displays UDP status 13 lacp Displays LACP Link Aggregation 13 Control Protocol settings logging Clears system logs 13 loginPrecedence Displays login precedence settings 13 logins Displays log
109. ES 1616F 3x Series User s Guide Chapter 25 Maintenance Table 58 Maintenance continued LINK DESCRIPTION Load Factory Click this button to clear all user entered configuration information and return the Default switch to its factory defaults You may need to change the IP address of your computer to be in the same subnet as that of the default device IP address 192 168 1 1 Reboot System Click this button to restart the switch without turning the power off This does not affect the switch s configuration 25 2 Load Factory Default Follow the steps below to reset the switch back to the factory defaults 1 Inthe Maintenance screen click the Click Here button next to Load Factory Defaults to clear all switch configuration information you configured and return to the factory defaults The following message appears Figure 73 Load Factory Default Conformation Microsoft Internet Explorer xj lt 2 Are you sure you want to load factory default 2 Click OK to display the screen shown next Figure 74 Load Factory Default Start xl A rebooting please close this session then reconnect later 3 Click OK to begin resetting all switch configurations to the factory defaults and then wait for the switch to restart This takes up to two minutes If you want to access the switch web configurator again you may need to change the IP address of your computer to be in the same subnet as that of the default
110. Enter a time from 10 to 3000 seconds This is how long all dynamically learned MAC addresses remain in the MAC address table before they age out and must be relearned VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 11 Switch Setup continued LABEL DESCRIPTION GARP Timer Switches join VLANs by making a declaration A declaration is made by issuing a Join message using GARP Declarations are withdrawn by issuing a Leave message A Leave All message terminates all registrations GARP timers set declaration timeout values See the chapter on VLAN setup for more background information Join Timer Join Timer sets the duration of the Join Period timer for GVRP in milliseconds Each port has a Join Period timer The allowed Join Time range is between 100 and 65535 milliseconds the default is 200 milliseconds See the chapter on VLAN setup for more background information Leave Timer Leave Time sets the duration of the Leave Period timer for GVRP in milliseconds Each port has a single Leave Period timer Leave Time must be two times larger than Join Timer the default is 600 milliseconds Leave All Leave All Timer sets the duration of the Leave All Period timer for GVRP in Timer milliseconds Each port has a single Leave All Period timer Leave All Timer must be larger than Leave Timer the default is 1000 milliseconds Priority Queue Assignment IEEE 802 1p defines up to 8 separate tra
111. Ethernet Il untagged A value of 802 3 indicates that the packets are formatted according to the IEEE 802 3 standards A value of Ethernet II indicates that the packets are formatted according to RFC 894 Ethernet encapsulation Layer 2 Specify the fields below to configure a layer 2 classifier VLAN Select Any to classify traffic from any VLAN or select the second option and specify the source VLAN ID in the field provided VES 1616F 3x Series User s Guide Chapter 18 Classifier Table 40 Classifier continued LABEL DESCRIPTION Ethernet Type Select an Ethernet type or select Other and enter the Ethernet type number in hexadecimal value Refer to Table 41 on page 130 for information Select All if you don t know Source MAC Select Any to apply the rule to all MAC addresses Address To specify a source select MAC and type a MAC address in valid MAC address format six hexadecimal character pairs Port Select the port to which the rule should be applied You may choose one port only or all ports All Ports Destination MAC Address Select Any to apply the rule to all MAC addresses To specify a destination select the second choice and type a MAC address in valid MAC address format six hexadecimal character pairs Layer 3 Specify the fields below to configure a layer 3 classifier DSCP Select Any to classify traffic from any DSCP or select the second op
112. ID is the service provider s VLAN ID the outer VLAN tag Enter the service provider ID from 1 to 4094 for frames received on this port See Chapter 7 on page 87 for more background information on VLAN ID VES 1616F 3x Series User s Guide Chapter 20 VLAN Stacking Table 47 VLAN Stacking continued LABEL DESCRIPTION Priority Select a number from the drop down list box to configure the priority level of the outer tag 0 is the lowest priority level and 7 is the highest Note Configure the priority level of the inner IEEE 802 1Q tag in the Port Setup screen Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Chapter 20 VLAN Stacking VES 1616F 3x Series User s Guide Multicast This chapter shows you how to configure various multicast features 21 1 Multicast Overview Traditionally IP packets are transmitted in one of either two ways Unicast 1 sender to 1 recipient or Broadcast 1 sender to everybody on the network Multicast delivers IP packets to just a group of hosts on the network IGMP Internet Group Multicast Protocol is a session layer protocol used to establish membership in a multicast group it is not used to carry user data Refer to RFC 1112 and RFC 2236 for information on IGMP versions and 2 respectively See Section 21 3 on page 1
113. IN32 PIN7 P PORT12 PIN32 PINS P PORT12 PIN33 P PORT11 PIN8 P PORT12 PIN33 P PORT11 PIN9 PIN34 P PORT11 PIN9 PIN34 P PORT11 PIN10 P PORT10 PIN35 PIN10 P PORT10 PIN35 PIN11 P PORT10 PIN36 P PORT9 PIN11 P PORT10 PIN36 P PORT PIN12 PIN37 P PORT9 PIN12 PIN37 P PORT9 PIN13 P PORT8 PIN38 PIN13 P PORT8 PIN38 PIN14 P PORT8 PIN39 P PORT7 PIN14 P PORT8 PIN39 P PORT7 PIN15 PIN40 P PORT7 PIN15 PIN40 P PORT7 PIN16 P PORT6 PIN41 NULL PIN16 P PORT6 PIN41 PIN17 P PORT6 PIN42 PKPORT5 PIN17 P PORT6 PIN42 P PORT5 PIN18 PIN43 P PORT5 PIN18 PIN43 P PORT5 PIN19 P PORT4 PPIN44 NuL PNte P PORT4 PIN44 PIN20 P PORT4 PIN45 P PORT3 PIN20 P PORT4 PIN45 P PORT3 PIN21 PIN46 P PORT3 PIN21 PIN46 P PORT3 PIN22 P PORT2 PIN47 PIN22 P PORT2 PIN47 PIN23 P PORT2 PIN48 P PORT1 PIN23 P PORT2 PIN48 P PORT1 278 VES 1616F 3x Series User s Guide Chapter 36 Product Specifications Table 93 Hardware Telco 50 Pin Assignments Figure 116 Hardware Telco 50 Pin Assignments This table lists the ports and matching pin numbers for the hardware Telco 50 connector Table 94 Hardware Telco 50 Connector Port and Pin Numbers VDSL 8 P PORT4 PPOR TI P PORT3 P POR T3 P PORTS P POR T5 P PORT P POR T P PORTS P POR TB P PORT11 P POR T11 E3 63 Se en 69 S388 8 s 3 HR o e E P PORT13 P POR T13 P PORT15 P POR T1
114. LAN group identification number Add Click Add to save the new rule to the switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults Index This field displays the index number of the rule Click an index number to change the settings Active This field displays Yes when the rule is activated and No when is it deactivated Name This field displays the descriptive name for this rule This is for identification purpose only MAC This field displays the source destination MAC address with the VLAN identification Address number to which the MAC address belongs Action This field displays the filter action Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cancel Click Cancel to clear the selected checkbox es in the Delete column VES 1616F 3x Series User s Guide Spanning Tree Protocol This chapter introduces the Spanning Tree Protocol STP and Rapid Spanning Tree Protocol RSTP 10 1 STP RSTP Overview R STP detects and breaks network loops and provides backup links between switches bridges or routers It allows a switch to interact with other R STP compliant switches in your network to ensure that only one path exists between any two stations on the network The switch uses IEEE 802 1w RSTP Rapid Spanning Tree
115. LOS failures within the last 1 day time segment The counter resets to zero after the time segment elapses LOF 1 Day This field displays the number of Loss of Framing LOF failures within the last 1 day period The counter resets to zero after the time segment elapses BMIN 1 Day This field displays how many times the connection has been dropped due to the average SNR s falling below the specified minimum SNR within the last 1 day period The counter resets to zero after the time segment elapses BERR 1 Day This field displays how many times the connection has been dropped due to the CRC errors being increasing for more than 30 consecutive seconds within the last 1 day period The counter resets to zero after the time segment elapses VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics Table 7 Status VDSL Port Details continued LABEL DESCRIPTION Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to stop port statistic polling 5 2 3 Ethernet Port Details Click a number in the Port column in the Status screen to display the Ethernet port statistics Use this screen to check status and detailed performance data about an Ethernet port on the switch Figure 18 Status Port Details unns
116. MVLAN Name Start Address End Address Delete All Delete Group Delete Cancel The following table describes the labels in this screen Table 52 MVR gt Group Configuration LABEL DESCRIPTION Multicast Select a multicast VLAN ID that you configured in the MVR screen from the drop VLAN ID down list box Name Enter a descriptive name for identification purposes Start Address Enter the starting IP multicast address of the multicast group in dotted decimal notation Refer to Section 21 1 1 on page 145 for more information on IP multicast addresses End Address Enter the ending IP multicast address of the multicast group in dotted decimal notation Enter the same IP address as the Start Address field if you want to configure only one IP address for a multicast group Refer to Section 21 1 1 on page 145 for more information on IP multicast addresses Add Click Add to save the settings Cancel Click Cancel to discard all changes MVLAN This field displays the multicast VLAN ID Name This field displays the descriptive name for this setting Start Address This field displays the starting IP address of the multicast group End Address This field displays the ending IP address of the multicast group Delete Select Delete All and click Delete to remove all entries from the table Select Delete Group and click Delete to remove the selected entry ies from the table Cancel Select Cancel to clear the
117. N SEN NN NN EN n i 8 I A E Uu a i 1 Internet t a H Ol I li I li I i I I I li y 192 168 1 0 24 4 r 4 LE E Amo m um um m um Um Um Em Em um um You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 255 128 or 25 The borrowed host ID bit can have a value of either 0 or 1 allowing two subnets 192 168 1 0 25 and 192 168 1 128 25 The following figure shows the company network after subnetting There are now two sub networks A and B VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting Figure 122 Subnetting Example After Subnetting 1 A LE I B D P E3 mo SN i I LE CS hs 5 pos H P T Internet gt a n B TM P i P i i i 9 192 168 1 0 25 4 W192 168 1 128 ue a mumumumumum um eom um um um um um um In a 25 bit subnet the host ID has 7 bits so each sub network has a maximum of 27 2 or 126 possible hosts a host ID of all zeroes is the subnet s address itself all ones is the subnet s broadcast address 192 168 1 0 with mask 255 255 255 128 is subnet A itself and 192 168 1 127 with mask 255 255 255 128 is its broadcast address Therefore the lowest IP address that can be assigned to an actual host for subnet A is 192 168 1 1 and the highest is 192 168 1 126 Similarly the host ID range for subnet B is 192 168 1 129 t
118. NTER to continue 32 2 3 Telnet Use the following steps to telnet into your switch 1 For local management connect your computer to the RJ 45 management port labeled MGMT on the switch 2 Make sure your computer IP address and the switch IP address are on the same subnet In Windows click Start usually in the bottom left corner Run and then type telnet 192 168 0 1 the default management IP address and click OK 3 Alogin screen displays VES 1616F 3x Series User s Guide 211 Chapter 32 Introducing the Commands 32 2 4 SSH You can use an SSH client program to access the switch The following figure shows an example using a text based SSH client program Refer to the documentation that comes with your SSH program for information on using it C gt ssh2 admin 192 168 0 1 G0 Qaae e ea e a a ee ee a e e e e ee WARNING HOST IDENTIFICATION HAS CHANGED G2 Qa eaae e e e e e a e e e e ee IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY Someone could be eavesdropping on you right now man in the middle attack It is also possible that the host key has just been changed Please contact your system administrator Add correct host key to C Documents and Settings Administrator Application Data SSH hostkeys key 22 192 168 0 1 pub to get rid of this message Received server key s fingerprint xigil gidot homug duzab tocyh pamyb ronep tisaf hebip gokeb goxix You can get a public key s fingerprint
119. P r a 19 E fodu ou Ten c M 21 List of TaDIeS Meter M 25 z dmi poo e 29 Chapter 1 Getting to Know Your DWIEGDL s aa idikakeknk ink ina iE Ea EHE R K HE OI LED EK KE Rae EE I in md LEAK ARM URNA 31 USB Mer E 31 T8 PBDIUCRUOS caso Uvade at oiu E ted cad cam eae t p eium du oM dietis faded 31 D201 ITLL ABICO soraira pi HERR RE DEB PIER FERE SENSE E eM REB HORE LS E PR E EREDA 31 12 2 IS MUG inn ccc rncoes fisems ied sass taundscsarmoutimes UU UT 32 1 9 Ways to Manage the SWIG iiiiciecsesiecte better trattato naan ddr v pti ttti pup dde bad 32 14 Good Habits cor Managing tie SMEs prede taa Ye ea ot da d lg edd da 33 Chapter 2 Hardware nstallat sisirin aa 35 Pe re Sas Ne SWI Onr a RAK dee IE 25 2 1 1 Rack mounted Installation Requirements sess 35 2 1 2 Attaching the Mounting Brackets to the Switch sse 36 2 1 23 Mounting the Switeh on a RACK ue M 36 Chapter 3 Hardware COV OP VIOW ssnin aeaa Eaa E RE aE KAEA AERA AANS REENE 37 ea PEE Panel Coneco suosia a aaia aa a pap sl enda 37 a4 YDSL and POTS Connections i esdtutideve uix ieludqu E EEEE EE 37 LTL ICSI EDT FONS srin n 38 autos MipBIC i ASIE ec ls gels IAA D TAA NAE AA TI EAA A A 38 oF A Consdle POR sayrini anaiai inated A iae 39 VES 1616F 3x Series User s Guide 9 Table of Contents TS Powa II ei MC a 40 uus
120. S GVRP Support 34 2 4 Enable GVRP Syntax vlanlq gvrp This command turns on GVRP in order to propagate VLAN information beyond the switch 34 2 5 Disable GVRP Syntax no vlanlq gvrp This command turns off GVRP so that the switch does not propagate VLAN information to other switches 34 3 Port VLAN Commands You must configure the switch port VLAN settings in config interface mode 34 3 1 Set Port VID Syntax pvid VID VES 1616F 3x Series User s Guide Chapter 34 IEEE 802 1Q Tagged VLAN Commands where VID Specifies the VLAN number between 1 and 4094 This command sets the default VLAN ID on the port s The following example sets the default VID to 200 on ports 1 to 5 sysname config interface port channel 1 5 sysname config interface pvid 200 34 3 2 Set Acceptable Frame Type Syntax frame type lt all tagged gt where lt all tagged gt Specifies all Ethernet frames tagged and untagged or only tagged Ethernet frames This command sets the specified port to accept all Ethernet frames or only those with an IEEE 802 1Q VLAN tag The following example sets ports 1 to 5 to accept only tagged frames sysname config interface port channel 1 5 sysname config interface frame type tagged 34 3 3 Enable or Disable Port GVRP Use the gvrp command to enable GVRP on the port s Use the no gvrp command to disable GVRP The following example turn
121. SL Chip Rese 2iuuebpdentvnep de ia i eren Pen ud ID Eri I n ON pn FM NEED 172 Figure 79 Maintenance Remote Device Reset eese eene nnn anita anna anna ne kan anna 173 Figura 80 Firmware Upgrade aisses dede e epa e akon aan dap C LGodtu baa dd d 174 Figure 81 Restore Configuration e 174 22 VES 1616F 3x Series User s Guide List of Figures Figure o2 Backup Connora TOR ares 175 FOUG Co en ae CORTON serraria irane Ee ESTE TNTA PANE TEE 180 Figure 84 SNMP Management Model scssicsisivssenesccacsssenacacsts nied anainn a a aaia 180 Figure 95 Access Cook SNMP ii uec cai o peer exin aie EY a d Konto a d t a dou du 182 Figure ao Access Contool Logie secs n iuiatetuteni se se cop sr lation te nene iD a ata ee tia cedse cu ven td 183 Figure 87 SSH Communication Exemple i e erras prre cttte bunc eee euPu e totes iaa n eE EA 184 Foure 0o How SSH WOKE e 184 Figure GO Sar LOCI EATE csaa aA 186 Figure BOHTTPS RDIBGBHEOE ponsa od Pree doa te one rrr tren d er rere rrr 187 Figure 91 Security Alert Dialog Box Internet Explorer sssessseeeee eene 187 Figure 92 Security Certificate 1 NetScape iucscecns scope taret rr tue port teda pue pe Idae kept a pu inaa MEM E E Ed 188 Figure 93 Security Certificate 2 INGIBOBE assises usce bsp a ES PEEL REV MEER ESVOUR LA EXKL LEER ALLE 188 Figure 94 Example Lock Denoting a Secure Connection ccccseercecceeseesccceeteeeacnenteeneacecneneeecana
122. Seting iaieasiceicis cesis iiid E 92 TOPOtDaSSd VLAN seica a nee mrere ry emir reer Creer Mm are 93 L5 1 Conngure a Porbbised VLAN oi crccaseiyicasinenlvicatseoaieimcadinmiatalackom ii Ameena 93 Chapter 8 Static MAG Forward Setup ssieissscesansaxcansasnicarcansacatsaxantantannasantenrandavaanamancnethcnsensteekantatienimnasnenns 97 8 1 Statie MAC Forwarding Overview 2uuccidken sebo den aha eens ala anaes 97 3 2 Doungaig Stale MAG Forwalding estetistiebecn sa send dene het ibn De d qute bu d he fe RR ORI d dA 97 Chapter 9 lm M 99 el ICM Ii Aet 99 9 2 Configure a Filtering Rule suisse e ceded teas annantua enact seins eae pha as Gb ATRIDES a aaah 99 Chapter 10 Spanning Tree PLOtOCOl c M 101 TOA STPIRS IP OVYGNVIEW m 101 TOLLS cad C G11 ep m 101 TECT 2 PIOS TEC WR EE E A E tee E E E E ea 102 O STF Fon EE aii A OAO AA 102 VES 1616F 3x Series User s Guide LE Table of Contents pUersgeca qe 103 TRY a RT GENES SUI eee m 104 Chapter 11 Bandwidih AEP ON M 107 11 4 Configuring Bandwidth CONN caeccsescccacsseese cstiscscacesssteesecesrtannrcesssiennasessisauee ESSEE 107 QEAETI CL d Temm TRU 107 Chapter 12 Broadcast Stormi GOntr ol c 109 12 1 Broadcast Storm Control OVEIVIGW dasssscccaussuseecserv
123. TEJE IE Pp b VES 1616F 3x Series User s Guide Chapter 17 Queuing Method The following table describes the labels in this screen Table 39 Queuing Method LABEL DESCRIPTION Method Select Strictly Priority or Weighted Fair Scheduling Strictly Priority services queues based on priority only When the highest priority queue empties traffic on the next highest priority queue begins Q7 has the highest priority and QO the lowest Weighted Fair Scheduling is used to guarantee each queue s minimum bandwidth based on their bandwidth portion weight the number you configure in the Weight field Queues with larger weights get more guaranteed bandwidth than queues with smaller weights FE Port SPQ This field is applicable only when you select Weighted Fair Scheduling Enable Select a queue Q0 to Q7 to have the switch use Strictly Priority to service the subsequent queue s after and including the specified queue for the 10 100 Mbps Ethernet ports For example if you select Q5 the switch services traffic on Q5 Q6 and Q7 using Strictly Priority Select None to always use Weighted Fair Scheduling for the 10 100 Mbps Ethernet ports Port This label shows the port you are configuring Weight Q0 Q7 When you select Weighted Fair Scheduling enter the queue weight here Bandwidth is divided across the different traffic queues according to their weights Queues with larger weights get more guaranteed bandwi
124. TION VLAN Type Permanent VLAN This is a static VLAN created manually Dynamic VLAN This is a VLAN configured by a GVRP registration deregistration process Mie AUS Registration Fixed Fixed registration ports are permanent VLAN members ontro Registration Forbidden Ports with registration forbidden are forbidden to join the specified VLAN Normal Registration Ports dynamically join a VLAN using GVRP VLAN Tag Control Tagged Ports belonging to the specified VLAN tag all outgoing frames transmitted Untagged Ports belonging to the specified don t tag all outgoing frames transmitted VLAN Port Port VID This is the VLAN ID assigned to untagged frames that this port received Acceptable frame type You may choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port Ingress filtering If set the switch discards incoming frames for VLANs that do not have this port as a member VES 1616F 3x Series User s Guide Chapter 7 VLAN 7 3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass through that port This is useful if you want to set up VLAN groups on end devices without having to configure the same VLAN groups on intermediary devices Refer to the following figure Suppose you want to create VLAN groups 1 and 2 V1 and V2 on devices A and B Without VLAN Trunking you must configure VLAN g
125. These are the commonly used show commands 33 2 1 show interface Syntax show interface por t number This command displays statistics of a port The following example shows that port 2 is up and the related information Port Info Port Link LACP LPRs Curri Curr 1 Currl Curri Curr 1 Curr Curr Curri sysname sysname show interface 2 NO Status TxPkts C15MinsTimeElapsed 5MinLofs 5MinLoss 5MinLols 5MinLprs ClDayTimeElapsed lDayLofs lDayLoss lDayLols LDayLprs i2 100M F FORWARDING Disabled QoOocornmcocoococococ 7Vo7Vo7Vo Vo aS 07V oV cV V 7M 0 QoOococorncocococococcoc VES 1616F 3x Series User s Guide Chapter 33 Command Examples 33 2 2 show ip Syntax show ip This command displays the IP related information such as IP address and subnet mask on all switch interfaces The following figure shows the default interface settings sysname gt show ip Out of band Management IP Address 192 168 0 1 Management IP Address IP 192 168 0 1 Netmask 255 255 255 0 VID 0 IP Interface IP 192 168 1 1 Netmask 255 255 255 0 VID 1 33 2 3 show logging Syntax show logging This command displays the system logs The following figure shows an example sysname show logging 56 Thu Jan 1 00 01 04 1970 PSSV WARN SNMP TRAP 0 cold start 57 Thu Jan 1 00 01 04 1970 PSSV WARN Syst
126. U ioscsnsiiter exeo tem tIM P MepP TUER ERINNMEE DA IRR UID PM Ebr b PREDA EIN EM 170 ose Reboot SYSIOIN M 170 25 4 Remote Device Upgrade civcsseacetunssconsdeasssanadedh nbn in a Rd ad n e ax Ld d ad ig 171 25 5 VOSL ROG 172 250 Romet DEVICE Reset e 172 2a PUNO WIENS e TRUM 173 25 8 Restore a Configuration FIC sscccseiisvccusstevncseciseasascssrtvenngsessaewcectiaaacergvvusncdivyveataaqery iene 174 25 5 Backing Upa Coniguralion Fie uie i dece vi en o nda dca as cen M a RU wes 174 Cm MES eM Mec 175 25 10 1 Filename CORVOlVllOWs iusccorsuui siue at iE Er canis oihanen XI MDC FE EPA aia eis hiaan 175 25 102 F IP Command Ling Procedure 1sussiessok vin de ka PERLE Fe Eua cist Ee Eon dba Skaidi 176 25 180 32 SU based FTP CIBIB 1 I DE EPI EEEHRRRDCREYEHA REDE FERE SEE E 176 e 10 5 F TE RESTIGOS aai iod exp ER aO p a o eden Un oL oa a ve td 177 VES 1616F 3x Series User s Guide Table of Contents Chapter 26 PCC SSS COE ENTER NEN TUTTI 179 26 1 Access Control OVervi W Aem T 179 20 2 The Access Control Main QOFGODDI scccisiciccccsacccstsnasserscensaswursemenaseenyieneasestsenanaessstectaucarvienes 179 Re AD ONNIE TANTI A 180 20 3 T upped MBS e eee 181 20 2 7 UL Ua ais tec Bee tta Db d dad ery aa 181 26 9 9 DOO SNMP as Cagis oda epa e pua i eva puc su denota toda baden tae e 182 26 4 Setting NEP corri e
127. VES 1616F 3x Series VDSL Switch User s Guide Version 3 60 ZyXEL www zyxel com About This User s Guide About This User s Guide Intended Audience This manual is intended for people who want to configure the Switch series VDSL switch using the web configurator or via commands You should have at least a basic knowledge of TCP IP networking concepts and topology Related Documentation Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information Supporting Disk Refer to the included CD for support documents ZyXEL Web Site Please refer to www zyxel com for additional support documentation and product certifications User Guide Feedback Help us help you Send all User Guide related comments questions or suggestions for improvement to the following address or use e mail instead Thank you The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan E mail techwriters zyxel com tw VES 1616F 3x Series User s Guide 3 Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User s Guide lt gt Warnings tell you about things that could harm you or your device BS Notes tell you other important information for example other things you may need to configure or helpful tips or recommen
128. above MAC address was learned Type This shows whether the MAC address is dynamic learned by the switch or static manually entered in the Static MAC Forwarding screen VES 1616F 3x Series User s Guide ARP Table This chapter introduces ARP table 31 1 ARP Table Overview Address Resolution Protocol ARP is a protocol for mapping an Internet Protocol address IP address to a physical machine address also known as a Media Access Control or MAC address on the local area network An IP version 4 address is 32 bits long In an Ethernet LAN MAC addresses are 48 bits long The ARP Table maintains an association between each MAC address and its corresponding IP address 31 1 1 How ARP Works When an incoming packet destined for a host device on a local area network arrives at the switch the switch s ARP program looks in the ARP Table and if it finds the address sends it to the device If no entry is found for the IP address ARP broadcasts the request to all the devices on the LAN The switch fills in its own MAC and IP address in the sender address fields and puts the known IP address of the target in the target IP address field In addition the switch puts all ones in the target MAC field FF FF FF FF FF FF is the Ethernet broadcast address The replying device which is either the IP address of the device being sought or the router that knows the way replaces the broadcast address with the target s MAC addres
129. ady when you contact customer support Required Information Product model and serial number Warranty Information Date that you received your device Brief description of the problem and the steps you took to solve it Corporate Headquarters Worldwide Support E mail support zyxel com tw Sales E mail sales zyxel com tw Telephone 886 3 578 3942 Fax 886 3 578 2439 Web Site www zyxel com www europe zyxel com FTP Site ftp zyxel com ftp europe zyxel com Regular Mail ZyXEL Communications Corp 6 Innovation Road II Science Park Hsinchu 300 Taiwan Costa Rica Support E mail soporte zyxel co cr Sales E mail sales zyxel co cr Telephone 506 2017878 Fax 506 2015098 Web Site www zyxel co cr FTP Site ftp zyxel co cr Regular Mail ZyXEL Costa Rica Plaza Roble Escaz Etapa El Patio Tercer Piso San Jos Costa Rica Czech Republic E mail info cz zyxel com Telephone 420 241 091 350 Fax 420 241 091 359 Web Site www zyxel cz Regular Mail ZyXEL Communications Czech s r o Modransk 621 143 01 Praha 4 Modrany Cesk Republika VES 1616F 3x Series User s Guide Appendix C Customer Support Denmark Support E mail support zyxel dk Sales E mail sales zyxel dk Telephone 45 39 55 07 00 Fax 45 39 55 07 07 Web Site www zyxel dk Regular Mail ZyXEL Communications A S Columbusvej 2860 Soeborg Denmark Finland Support E mail support zyxel fi Sales E mail
130. aggregation ID consists of the following system priority MAC address key port priority and port number Refer to Section 14 1 2 on page 114 for more information on this field Enabled Ports These are the ports you have configured in the Link Aggregation screen to be in the trunk group Synchronized These are the ports that are currently transmitting data as one logical link in this trunk Ports group 1 Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group not the individual port VES 1616F 3x Series User s Guide Chapter 14 Link Aggregation Table 33 Link Aggregation Control Protocol Status continued LABEL DESCRIPTION Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt statistic polling 14 3 Link Aggregation Setup Click Configuration in the Link Aggregation Control Protocol Status screen to display the screen shown next See Section 14 1 on page 113 for background information Figure 43 Link Aggregation Control Protocol Configuration OIE Status Link Aggregation Control Protocol Active O System Priority 65535 Group ID Active Dynamic LACP Ti C n Port Group LACP Timeout 17 None 30 v seconds 18 None 30 7f seconds Apply Cancel
131. ak Rod Ex XR ERR REA RR BAR RM ERA NEU aad 154 VES 1616F 3x Series User s Guide 13 Table of Contents Chapter 22 Differentlated Service eriin aan nsira EE EENAA aisles 157 ce DINGEN OVET bhian aaea ia ad ad a Laa aie aada aa EAN 157 22 1 1 DSGP and Per Hop BOlBVIOE 22cicssctossectessxteuti ta es Min oaa L0 E Qr ret aaan e ERR UE T5 22 1 2 Dnsere Mobwotk EXOmIIQ susirna annnka E EHE EN EE ER aa SR E Mn PRV RR RA Y Edd KE pe 157 22 2 eruca msgRoic ecc 158 22 9 DSGP oJ4EBESUZ 1p PROFIDE SQUE cass sass cers acento db a clon ch oc en o at 159 22 3 1 C nfigarumg EDSCP SI usse cere ten eL prd Lean xd a eR da V Lees ib ade e p 159 Part IV Routing Protocol iuuenes nnno nun pha tC REA pinnana ena BR nn EE RRR EM Naai 161 Chapter 23 SIR OIL Pee M Q 163 xwSusDymsE ti sper sonnan 163 Chapter 24 DROGE RE Iy Pre c aaa sdetails eee aan 165 24 TDOHCP 8 1 GM HQ 165 24 1 1 DHCP Relay Agent Informatori 1 atria pei te t rbR pit perra ao R PR Sra pen a rE 165 24 2 Configuring DACP REY acdiveciccsaterssowtcadessemiicdiiacscatencs cinis CI du i3a Eid dO Lind Leni EX tad RU E Rad 165 Parn V coti gp A aidaa 167 Chapter 25 PSM AE RV SUING fee M 169 22 1 The Maintenance DORT ccisascassaudsdeccocasdnssesdsei saauasastl Eo ARI ERR PEEL PRR E d SU HEURE ap 169 zd Los Fare DI
132. all changes VLAN This field displays the multicast VLAN ID Active This field displays whether the multicast group is enabled or not Name This field displays the descriptive name for this setting Mode This field displays the MVR mode Source Port This field displays the source port number s Receiver Port This field displays the receiver port number s 802 1p This field displays the priority with which the switch replaces the priority in outgoing IGMP control packets belonging to this multicast VLAN Delete To delete the group s and all the accompanying rules select the group s that you want to remove in the Delete column then click the Delete button Cancel Click Cancel to clear the Delete check boxes 21 7 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group See Section 21 5 on page 149 for background information 152 VES 1616F 3x Series User s Guide Chapter 21 Multicast BS Configure MVR IP multicast group address es in the Group Configuration screen Click Group Configuration in the MVR screen A port can belong to more than one multicast VLAN However IP multicast group addresses in different multicast VLANs cannot overlap Figure 62 MVR gt Group Configuration Group Configuration MVR Multicast VLAN ID hd Name Start Address End Address 0 0 0 0 0 0 0 0 Add Cancel
133. ange with this command is required to enter Enable and Config modes of the CLI Syntax password lt password gt where lt password gt Specifies the new password up to 32 alphanumeric characters users have to type in to enter Enable and Config modes VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands 32 7 Account Privilege Levels You can use a command whose privilege level is equal to or less than that of your login account For example if your login account has a privilege level of 12 you can use all commands with privilege levels from 0 to 12 0 privileged commands are available to all login accounts 32 8 Command Modes There are three command modes User Enable and Configure The modes and commands available to you depend on what level of privilege your account has Use the logins username command in Configure mode to set up accounts and privilege levels When you first log into the command interpreter with a read only account having a privilege of 0 to 12 the initial mode is User mode The User mode commands are a subset of the Enable mode commands The User mode command prompt ends with an angle bracket gt To enter Enable or privileged mode using a read only account type enable and enter the administrator password when prompted the default is 1234 When you enter Enable mode the command prompt changes to the pound sign 4 If you log into the command interpreter as an admin
134. are switch the switch first decides where to forward the frame and then strips off the VLAN tag To forward a frame from an 802 1Q VLAN unaware switch to an 802 1Q VLAN aware switch the switch first decides where to forward the frame and then inserts a VLAN tag reflecting the ingress port s default VID The default PVID is VLAN 1 for all ports but this can be changed VES 1616F 3x Series User s Guide Chapter 7 VLAN 7 2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN membership across switches 7 2 1 GARP GARP Generic Attribute Registration Protocol allows network switches to register and de register attribute values with other GARP participants within a bridged LAN GARP is a protocol that provides a generic mechanism for protocols that serve a more specific application for example GVRP 7 2 1 1 GARP Timers Switches join VLANs by making a declaration A declaration is made by issuing a Join message using GARP Declarations are withdrawn by issuing a Leave message A Leave All message terminates all registrations GARP timers set declaration timeout values 7 2 2 GVRP GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network Enable this function to permit VLANs groups beyond the local switch Table 17 IEEE 802 1Q Terminology VLAN PARAMETER TERM DESCRIP
135. ary User Mode COMMAND DESCRIPTION P enable Accesses Enable or privileged mode See Section 0 32 11 2 on page 218 exit Logs out from the CLI 0 help Displays help information 0 history Displays a list of previously command s that you have 0 executed The switch stores up to 256 commands in history logout Exits from the CLI 0 ping lt ip host name gt Sends Ping request to an Ethernet device lt in band out of band vlan lt vlan id gt size lt 0 1472 gt t gt help Displays command help information 0 VES 1616F 3x Series User s Guide 217 Chapter 32 Introducing the Commands Table 79 Command Summary User Mode continued COMMAND DESCRIPTION P show hardware monitor C F Displays current hardware monitor information with the specified temperature unit Celsius C or Fahrenheit F hardware version Displays whether the Switch is a VDSL1 100100 or 0 10050 or VDSL2 device 5030 ip Displays the IP settings system information Displays general system information 0 ssh 1 2 lt user dest ip gt Connects to an SSH server with the specified SSH 0 version traceroute lt ip host name gt Determines the path a packet takes to a device 0 in band out of band vlan vlan id ttl lt 1 255 gt wait lt 1 60 gt queries lt 1 10 gt help Displays the command help information 0 32 1
136. ast marked for dropping or to be sentto the CPU to the egress port Set the packet s VLAN ID Metering Enable Iv Drop the packet Change the DSCP value I Do not drop the matching frame previously marked for dropping Out of profile action Add Cancel Clear VES 1616F 3x Series User s Guide VLAN Stacking This chapter shows you how to configure VLAN stacking on your switch See the chapter on VLANs for more background information on Virtual LAN 20 1 VLAN Stacking Overview A service provider can use VLAN stacking to allow it to distinguish multiple customers VLANs even those with the same customer assigned VLAN ID within its network Use VLAN stacking to add an outer VLAN tag to the inner IEEE 802 1Q tagged frames that enter the network By tagging the tagged frames double tagged frames the service provider can manage up to 4 094 VLAN groups with each group containing up to 4 094 customer VLANs This allows a service provider to provide different service based on specific VLANs for many different customers A service provider s customers may require a range of VLANS to handle multiple applications A service provider s customers can assign their own inner VLAN tags on ports for these applications The service provider can assign an outer VLAN tag for each customer Therefore there is no VLAN tag overlap among customers so traffic from different customers is kept separate 20
137. at was previously a cluster member is later set to become a cluster manager then its Status is displayed as Error in the Cluster Management Status screen and a warning icon amp appears in the member summary list below Name Type a name to identify the Clustering Manager You may use up to 32 printable characters spaces are allowed VID This is the VLAN ID and is only applicable if the switch is set to 802 1Q VLAN All switches must be directly connected and in the same VLAN group to belong to the same cluster Switches that are not in the same VLAN group are not visible in the Clustering Candidates list This field is ignored if the Clustering Manager is using Port based VLAN Apply Click Apply to save your changes to the switch Cancel Click Cancel to begin configuring this part of the screen afresh Clustering The following fields relate to the switches that are potential cluster members Candidate List A list of suitable candidates found by auto discovery is shown here The switches must be directly connected Directly connected switches that are set to be cluster managers will not be visible in the Clustering Candidate list Switches that are not in the same management VLAN group will not be visible in the Clustering Candidate list Password Each cluster member s password is its web configurator password Select a member in the Clustering Candidate list and then enter its web configurator password If that s
138. at were between 65 and 127 octets in length 128 255 This field shows the number of packets including bad packets received that were between 128 and 255 octets in length 256 511 This field shows the number of packets including bad packets received that were between 256 and 511 octets in length 512 1023 This field shows the number of packets including bad packets received that were between 512 and 1023 octets in length 1024 This field shows the number of packets including bad packets received that were 1518 between 1024 and 1518 octets in length Giant This field shows the number of packets dropped because they were bigger than the maximum frame size Poll The text box displays how often in seconds this screen refreshes You may change Interval s the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to stop port statistic polling VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics VES 1616F 3x Series User s Guide Basic Setting This chapter describes how to configure the System Info General Setup Switch Setup IP Setup and Port Setup screens 6 1 Overview The System Info screen displays general switch information such as firmware version number and hardware polling information such as fan speeds The General Setup screen allows you to configure general switch identification information The General Setup screen als
139. ation level protocol that enables secure transactions of data by ensuring confidentiality an unauthorized party cannot read the transferred data authentication one party can identify the other party and data integrity you know if data has been changed It relies upon certificates public keys and private keys HTTPS on the switch is used so that you may securely access the switch using the web configurator The SSL protocol specifies that the SSL server the switch must always authenticate itself to the SSL client the computer which requests the HTTPS connection with the switch whereas the SSL client only should authenticate itself when the SSL server requires it to do so Authenticating client certificates is optional and if selected means the SSL client must send the switch a certificate You must apply for a certificate for the browser from a CA that is a trusted CA on the switch Please refer to the following figure 1 HTTPS connection requests from an SSL aware web browser go to port 443 by default on the switch s WS web server 186 VES 1616F 3x Series User s Guide Chapter 26 Access Control 2 HTTP connection requests from a web browser go to port 80 by default on the switch s WS web server Figure 90 HTTPS Implementation WS 443 80 HTTPS HTTP BS If you disable HTTP in the Service Access Control screen then the switch blocks all HTTP connection attempts 26 9 HTTPS Example If
140. ation types and traffic flow Packets are marked with DiffServ Code Points DSCPs indicating the level of service desired This allows the intermediary DiffServ compliant network devices to handle the packets differently depending on the code points without the need to negotiate paths or remember state information for every flow In addition applications do not have to request a particular service or give advanced notice of where the traffic is going 19 1 2 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to replace the Type of Service TOS field in the IP header The DS field contains a 2 bit unused field and a 6 bit DSCP field which can define up to 64 service levels The following figure illustrates the DS field DSCP is backward compatible with the three precedence bits in the ToS octet so that non DiffServ compliant ToS enabled network device will not conflict with the DSCP mapping The DSCP value determines the forwarding behavior the PHB Per Hop Behavior that each packet gets across the DiffServ network Based on the marking rule different kinds of traffic can be marked for different kinds of forwarding Resources can then be allocated according to the DSCP values and the configured policies VES 1616F 3x Series User s Guide 133 Chapter 19 Policy 19 2 Configuring a Policy BS You must first configure a classifier in the Classifier screen Refer to Chapter 18 on page 127 f
141. autions Make sure the rack will safely support the combined weight of all the equipment it contains Make sure the position of the switch does not make the rack unstable or top heavy Take all necessary precautions to anchor the rack securely before installing the unit VES 1616F 3x Series User s Guide 35 Chapter 2 Hardware Installation 2 1 2 Attaching the Mounting Brackets to the Switch 1 Position a mounting bracket on one side of the switch lining up the four screw holes on the bracket with the screw holes on the side of the switch Figure3 Attaching the Mounting Brackets 2 Using a 2 Philips screwdriver install the M3 flat head screws through the mounting bracket holes into the switch 3 Repeat steps and 2 to install the second mounting bracket on the other side of the switch 4 You may now mount the switch on a rack Proceed to the next section 2 1 3 Mounting the Switch on a Rack 1 Position a mounting bracket that is already attached to the switch on one side of the rack lining up the two screw holes on the bracket with the screw holes on the side of the rack Figure 4 Mounting the Switch on a Rack B D B D D D D D D D D D D D 2 Using a 2 Philips screwdriver install the MS flat head screws through the mounting bracket holes into the rack 3 Repeat steps and 2 to attach the second mounting bracket on the other side of the rack VES 1616F 3x Series User s
142. ay have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address 35 3 1 1 1 Disable pop up Blockers 1 In Internet Explorer select Tools Pop up Blocker and then select Turn Off Pop up Blocker VES 1616F 3x Series User s Guide Chapter 35 Troubleshooting Figure 108 Pop up Blocker Mail and News Pop up Blocker Turn Off Pop up Blocker Manage Add ons Pop up Blocker Settings Synchronize Windows Update Windows Messenger Internet Options You can also check if pop up blocking is disabled in the Pop up Blocker section in the Privacy tab 1 In Internet Explorer select Tools Internet Options Privacy 2 Clear the Block pop ups check box in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 109 Internet Options Internet Options R General Security Privacy Content Connections Programs Advanced Settings Move the slider to select a privacy setting for the Internet EE zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up
143. bcc edible n Cede Odd 145 Diterentated SOROICBS iis cette ce aisi rt pa data lebt eed Efe cU p bar ep bau a ERA Ld cafa 157 Routing Protocol ee X 161 A IDE oed boa E OA AEE EE E E E 163 DEHGP POOT caki a 165 ELE jr MPO Tcr 167 Pal AMON IS EE E C OE DE RE RT 169 PCS CSI 222i ipn bise ene O eei Eoi i edd IO lada ME uad dea ade Dee lada crea add 179 EANO ee MNT ANTUURTRINMPIUM 191 ccn 193 VES 1616F 3x Series User s Guide Contents Overview Sua LI e ted 197 MAG EI aget Poen 203 EI m 205 Commands Troubleshooting and Specifications esses 207 Introducing the Commands ee 209 enis E rampes mE TT D E Ea a Al aaa aaia 243 IEEE 892 10 Tagged VLAN Commanda ssencerennsndans kinini a 259 TOULE HODIE aa T Fn rere tere ree ttre te 267 Product SOCIO IN aus losa duree eth d ei pd ro ted M ode tale oad cade A 275 Appendices and Index sssrinin nonne Maauo Kano Mab eaaa KKERnxkE AER ER MEA URRIAREI Ta aiies 283 VES 1616F 3x Series User s Guide List of Figures List of Figures Fiure TTL Nt 2 a a a a a i i he Bs adc I a a a at 32 Figures Curbside A pIiCaUON auchiivo seien dx eet beni pe cosa Erde edi esa ufi Geese Hic Ea exe pu L E Duda da 32 Figure 3 Attaching the Mounting Brakels 36 Figure 4 Mounting thie Switeh go si RACK cd
144. c flow on a port The Peak Information Rate PIR is the maximum bandwidth allowed for the incoming traffic flow on a port when there is no network congestion The CIR and PIR should be set for all ports that use the same uplink bandwidth If the CIR is reached packets are sent at the rate up to the PIR When network congestion occurs packets through the ingress port exceeding the CIR will be marked for drop N The CIR should be less than the PIR N The sum of CIRs cannot be greater than or equal to the uplink bandwidth Click Advanced Application and then Bandwidth Control in the navigation panel to bring up the screen as shown next VES 1616F 3x Series User s Guide Chapter 11 Bandwidth Control Figure 39 Bandwidth Control c Bandwidth Contro J Active C Port Active resa tae Egress Rate Commit Rate Peak Rate 1 r hoo lips kbps o eps 2 Oo Ir Kbps h Kbps n Kbps m oO d n ps 16 m 1 Kbps Kbps Booo Kbps 17 m K Kbps Kbps hoo Kbps 18 r 1 Kbps 1 Kbps 1 Kbps Apply Cancel The following table describes the related labels in this screen Table 28 Bandwidth Control LABEL DESCRIPTION Active Select this check box to enable bandwidth control on the switch Port This field displays the port number Active Make sure to select this check box to activate your rule You may temporarily deactivate a rule without deleting it by deselecting this check box
145. cally used for best effort traffic Apply Click Apply to save the settings Cancel Click Cancel to reset the fields to your previous configuration 6 6 IP Setup Use the IP Setup screen to configure the default gateway device the management IP address and the default domain name server VES 1616F 3x Series User s Guide Chapter 6 Basic Setting 6 6 1 Management IP Address The switch needs an IP address for it to be managed over the network The factory default in band IP address is 192 168 1 1 and out of band management IP is 192 168 0 1 The subnet mask specifies the network number portion of an IP address The factory default subnet mask is 255 255 255 0 You can configure up to 128 IP addresses which are used to access and manage the switch from the ports belonging to the pre defined VLAN s You must configure a VLAN first Figure 22 IP Setup LETE Domain Name Server 0 0 0 0 Default Management in band C Outofband in band Management IP C DHCP Client Address Static IP Address IP Address fsz19833 IP Subnet Mask 255 255 255 0 Default Gateway oon VID a Out of band Management IP IP Address fiszi6601 pee IP Subnet Mask 255 255 255 0 Default Gateway ooo Apply Cancel In band IP Addresses IP Address noon IP Subnet Mask noon VID I Default Gateway noon Manageable lu Add Cancel Index IP Address IP Subnet Mask VID D
146. cel Click Cancel to reset the fields to your previous configuration 6 8 VDSL Parameters The following sections describe the VDSL parameters you configure in the following screens VDSL Profile Setup see Section 6 9 on page 77 VDSL Alarm Profile Setup see Section 6 10 on page 80 VDSL PSD Profile Setup see Section 6 11 on page 82 6 8 1 Frequency Band Plan Each VDSL mode operates in a different frequency band allocation resulting in different upstream and downstream speeds Your VES switch automatically changes the band plan based on the loop condition and loop length All of the band plans include an optional band Use the optional band for upstream transmission which is to be negotiated during line initiation 6 8 2 Configured Versus Actual Rate You configure the maximum rate of an individual VDSL port by modifying its profile see the VDSL Profile Setup screen or assigning the port to a different profile see the Port Setup screen However the actual rate varies depending on factor such as transmission range and interference VES 1616F 3x Series User s Guide Chapter 6 Basic Setting 6 8 3 PSD PSD Power Spectral Density defines the distribution of a VDSL line s power in the frequency domain A PSD mask specifies the maximum allowable PSD for a line 6 8 4 UPBO In a network with varying telephone wiring lengths the PSD on each line is different This causes crosstalk between the lines
147. ch is best suited for data transmission Enter 100 to use fast channel at the rate you specified in the Fast Channel Payload Rate field for latency sensitive applications such as voice Impulse Noise Protection Specify the level of impulse noise burst protection in microseconds for a slow or interleaved channel Enter a number between 0 and 1275 FEC Redundancy This field displays the Forward Error Correction FEC redundancy overhead for a fast channel This field is neither configurable nor applicable at the time of writing Template PSD Mask Select a PSD mask for the upstream and downstream traffic PBO Control Set the upstream PBO control PBO Power Back Off allows the switch to provide better service in a network environment with telephone wiring of varying lengths Select Disable to disable this feature Select Auto to set the switch to automatically adjust the power backoff Select Manual to specify a power backoff level in the PBO Level field PBO Level If you select Manual in the PBO Control field select a PBO level Band Plan Specify a VDSL band plan to use for the line Select BandPlan998 for ITU T G 993 1 Bandplan A and ANSI Plan 998 Band Plan FX This field displays the band frequency range 3750 to 12000 between the D2 and U2 bands This field is neither configurable nor applicable at the time of writing Applicable Your switch automatically selects a standard to use for VDSL
148. checkbox es in the table VES 1616F 3x Series User s Guide E Chapter 21 Multicast 21 7 1 MVR Configuration Example The following figure shows a network ex VLAN 1 In addition port 17 belongs to t ample where ports 1 2 and 3 on the switch belong to he multicast group with VID 200 to receive multicast traffic the News and Movie channels from the remote streaming media server S Computers A B and C in VLAN are able to receive the traffic Figure 63 M VR Configuration Example NM i To configure the MVR settings on the sw set the receiver and source ports Figure 64 MVR Configuration Example n i News 224 1 4 10 224 1 4 50 1 Multicast VID 200 Movie 230 1 2 50 230 1 2 60 Itch create a multicast group in the MVR screen and CS MVR Active Iv Name Multicast VLAN ID os Dynamic 802 1p Priority Mode a e Receiver Port Cc Source Port 0 0 fox a zia aiaia o O 90 90 90 90 9 0 9 0 9 9 90 0 90 0 a OPO OOO OOOO Bid a o1O o i gt oO e e eo Premium 200 Multicast Setting Group Configuration C Compatible Tagging OREO EEO EEO BO EEO EE OREO BBO BBO EEO EEO EEO EEO EEO IO Oo OAO OOO wa aoa HIE CHI 74 Add Cancel To set the switch to forward the multicast group traffic to the subscribers configure multicast group settings in the Group Configuration screen The foll
149. cking state otherwise temporary data loops might result The allowed range is 4 to 30 seconds As a general rule 2 Forward Delay 1 gt Max Age gt 2 Hello Time 1 Port This field displays the port number Active Select this check box to activate STP on this port Priority Configure the priority for each port here Priority decides which port should be disabled when more than one port forms a loop in a switch Ports with a higher priority numeric value are disabled first The allowed range is between 0 and 255 and the default value is 128 Path Cost Path cost is the cost of transmitting a frame on to a LAN through that port It is assigned according to the speed of the bridge The slower the media the higher the cost see Table 24 on page 101 for more information Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Chapter 10 Spanning Tree Protocol VES 1616F 3x Series User s Guide Bandwidth Control This chapter shows you how you can cap the maximum bandwidth allowed on the ports using the Bandwidth Control screen 11 1 Configuring Bandwidth Control Bandwidth control means defining a maximum allowable bandwidth for incoming and or out going traffic on a port 11 1 1 CIR and PIR The Committed Information Rate CIR is the guaranteed bandwidth for the incoming traffi
150. command to list the name of cluster member switch s firmware and configuration file 360AIHO bin This is the name of the firmware file you want to upload to the cluster member switch fw 00 13 49 00 00 01 This is the cluster member switch s firmware name as seen in the cluster manager switch config 00 13 49 00 00 01 This is the cluster member switch s configuration file name as seen in the cluster manager switch 29 3 Configuring Cluster Management Click Configuration from the Cluster Management screen to display the next screen Refer to Section 29 1 on page 197 for more information Figure 104 Clustering Management Configuration Clustering Candidate List Index MacAddr Clustering Management Configuration g Status Clustering Manager Active Iv Name Master VID 1 Apply Cancel 00 13 49 00 00 02 VES 1608FA 35 VES 1508FA 35 Password Ada Cancel Refresh Name Model Remove Remove Cancel VES 1616F 3x Series User s Guide Chapter 29 Cluster Management The following table describes the labels in this screen Table 75 Clustering Management Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this switch become the cluster manager switch A cluster can only have one manager Other directly connected switches that are set to be cluster managers will not be visible in the Clustering Candidates list If a Switch th
151. conds Each port has a Join Period timer The allowed Join Time range is between 100 and 32767 milliseconds the default is 200 milliseconds leave lt msec gt This sets the duration of the Leave Period timer for GVRP in milliseconds Each port has a single Leave Period timer Leave Time must be two times larger than Join Timer the default is 600 milliseconds leaveall This sets the duration of the Leave All Period timer for GVRP in lt msec gt milliseconds Each port has a single Leave All Period timer Leave All Timer must be larger than Leave Timer the default is 10000 milliseconds VES 1616F 3x Series User s Guide Chapter 34 IEEE 802 1Q Tagged VLAN Commands This command sets the switch s GARP timer settings including the join leave and leave all timers Switches join VLANs by making a declaration A declaration is made by issuing a Join message using GARP Declarations are withdrawn by issuing a Leave message A Leave All message terminates all registrations GARP timers set declaration timeout values The following example sets the Join Timer to 300 milliseconds the Leave Timer to 800 milliseconds and the Leave All Timer to 11000 milliseconds sysname config garp join 300 leave 800 leaveall 11000 34 2 3 GVRP Timer Syntax show vlanlq gvrp This command shows the switch s GVRP settings An example is shown next sysname show vlanlq gvrp GVRP Support gvrpEnable YE
152. conds the port has been up Retrain Click Retrain to re establish the line connection The following fields are related to the Ethernet ports Port This identifies the port Click a port number to display the Port Details screen Link This field displays the speed 10M for 10Mbps 100M for 100Mbps or 1000M for 1000Mbps and the duplex F for full duplex or H for half duplex State This field displays the STP state of the port See the Spanning Tree Protocol chapter for details on STP port states LACP This fields displays whether the Link Aggregation Control Protocol LACP has been enabled on the port TxPkts This field shows the number of transmitted frames on this port RxPkts This field shows the number of received frames on this port Errors This field shows the number of received errors on this port Tx KB s This field shows the number of kilobytes per second transmitted on this port Rx KB s This field shows the number of kilobytes per second received on this port Up Time deis field shows the total amount of time in hours minutes and seconds the port has een up Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to halt system statistics polling Clear Counter Select ALL in the Port field and then click Clear Counter to erase
153. connectors on the Telco 50 cables Figure 117 Telco 50 Cable VDSL Telco 50 Pin Assignments A 9TLYOd A 9TLYOd A vTLuOd v T LWOd A A A cTILuOd CLLHOd A OTLYOd OTLYOd A A 8LYOd 8LYoOd A A 9LYOd A 9LYOd A t LYOd A V LHOqd A CLYOdt A 7LYOd A lt v E Sj n1 Ui STLHOd A ETLYOd A ETLYOd A TILYOd A TTLYOd A 6LYOd A 6LYOd A ZLYOdt A ZLYOd A lt lt lt FIS JEI FI a g E vj p p SIS ISS 8 8 Ala Jaa gaja I Eea wiw a jim Figure 118 Telco 50 Cable POTS ISDN Telco 50 Pin Assignments 9TLYOd d 9TLYOd d bILdOdt d Vv T LHOd d TILYOd d TLYOd d OTLYOd d OTLYOd d 8LYOd d 8LYOd d 9LYOd d 9LYOd d tLYOd d t LYOd d CLYOdt d C L HOd d CU UU O E me Ui ST LHOd d TLYOd d TLYOd d TTLYOd d TLLHOd d 6LYOd d 6LYOd d ZLdOd d Z1YOd d SLYOd d SLYOd d ELYOd d ELYOd d TLYOd d TLYOd d VES 1616F 3x Series User s Guide Chapter 36 Product Specifications Console Cable Pin Assignments In a serial communications connection generally a computer is DTE Data Terminal Equipment and a modem is DCE Data Circuit terminating Equipment The Switch is DCE when you connect a computer to the console port The following diagrams and chart show the pin assignments of the console cable The pin layout for the DB 9 connector end of the cables is as follows Figure 119 Console Cable DB 9 End Pin Layout Table 95 Console Port
154. d Examples Set the incoming traffic bandwidth limit to 9Mbps sysname config interface port channel 1 sysname config interface bandwidth limit sysname config interface bandwidth limit egress 7000 sysname config interface bandwidth limit ingress 9000 33 9 5 mirror Syntax mirror mirror dir lt ingress egress both gt where Enables port mirroring on the interface ingress egress both Enables port mirroring for incoming outgoing or both incoming and outgoing traffic Port mirroring copies traffic from one or all ports to another or all ports for external analysis An example is shown next Enable port mirroring Enable the monitor port three Enable ports one four five and six for configuration Enable port mirroring on the ports Enable port mirroring for outgoing traffic Traffic is copied from ports one four five and six to port three in order to examine it in more detail without interfering with the traffic flow on the original port s mirror mirror monitor port mirror mirroed port mirror mirroed port sysname config sysname config sysname config sysname config sysname config mirror mirroed port sysname config mirror mirroed port sysname config interface mirror dir egress No Fr W 33 9 6 gvrp Syntax gvrp GVRP GARP VLAN Registration Protocol is a registration protocol that defines a way for switches to regis
155. d VLAN 13 lt ethernet type gt vlan lt vid gt inactive packet format Creates a protocol based VLAN with 13 lt packet format gt the packet format VLAN ID and ethernet type priority lt ethernet type vlan lt vid gt priority lt 0 7 gt VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 82 interface port channel Commands continued COMMAND DESCRIPTION P packet format Disables the protocol based VLAN 13 lt packet format gt ethernet type lt ethernet type gt vlan lt vid gt priority 0 7 inactive pvid lt 1 4094 gt The default PVID is VLAN 1 for all 13 ports Sets a PVID in the range 1 to 4094 for the specified interface qos priority 0 7 Sets the quality of service priority for 13 an interface speed duplex auto 10 half 10 Sets the duplex mode half or 13 full 100 half 100 full and speed 10 100 or 1000 full 1000 full gt Mbps of the connection on the interface Selecting auto auto negotiation makes one port able to negotiate with a peer automatically to obtain the connection speed and duplex mode that both ends support test Performs an interface loopback test 13 vlan stacking priority lt 0 7 gt Sets the priority of the specified port s 13 in VLAN stacking role lt normal Sets the VLAN stacking port roles of 13 access tunnel gt the specified port s SPVID lt 1 4094 gt S
156. d cen ati n cce doom Hn pun 263 AA DERE VLAN ID 4 cocco bii deben E Hm eat eR HEEL IUER Cose nearer ror 264 2S Enable VLAN M 264 vo CORBA LAIN Me 264 AT Shop YLAN SEWING dreon rre E EE RR 264 Chapter 35 Hijo iisdp p QA 267 35 1 Problems Starting Up tab SIUE uiiescii dedi Ia ERES REIR HERE RAIL SERA GL FM Rad at RR HS 267 29 2 Problems Accessing the SWIEOET uiiiepeeeine ora au nih khan ania R9 RA khi FENNAS E EENE EN M REO E LEAK EIU sends 267 25 3 Problem with the VDSE Connection 2 ise e e etta er Ebr Ivo niaii RP LEO LUE NE rants 268 35 3 1 Pop up Windows JavaScripts and Java Permissions eeeeeeesssssss 268 25 4 Problems with he Password uou ieriden es ie po E a ERU E E nM EUH 273 Chapter 36 Product Specifications Tc 275 Part VII Appendices and Index sees 283 Appendix A IP Addresses and Subnetting eessssssssesseeeeeenennenenne 285 Append B Legal Monna iinet WERDE DEI POET ORAE FEE V ROPA ia sc 295 Appendix C Customer SUDBOFLssmerkaerFETEUHEEREEREEETEEERAYECEEEUEEMCERATRYHEEEX tia HE ELE SA ESE AEE 299 p M RR 303 VES 1616F 3x Series User s Guide Contents Overview Contents Overview hiroduc J De ELTE LE
157. d conssassiegervinee 104 VES 1616F 3x Series User s Guide 21 List of Figures Figure SO Barwa OUI auuesidiepectsiacqetis vant ai a pg p a ated do atu ua dtd qo FR t d Rd 108 Figure 40 Broadcast Storm ESOT m 109 Figure 41 nij 111 Figure 42 Link Aggregation Control Protocol Status uisu nde pn pe Besson ea pe EX ERR REK ESAME REPE inns 114 Figure 43 Link Aggregation Control Protocol gt Configuration nnne 115 Figure 44 RADIUS Sever T 117 Fi ure 49 Port Authentication eT TEE 118 Figure 46 Fort Authenticaton G02LTX vrnn 118 Figure 47 Port Authentication gt RADIUS Luzern pa b sain Etpa dad ANEA EANA 119 Foue do Pon SEGUY haat ate tcersl PT 121 Figure 49 Queuing Method M 124 zo SO CARAS SINS e 128 Figure 31 Cbs Exaile dee RE 131 Fiore D2 POY e 135 Figure eM le 5 stat arene retin n T E Suits 138 Figure 54 VLAN Slacking EXAMP oidapsestapdanen onte nad eee ene epe t octo t oda buts edan topped prio ada 140 Figure 59 VILAN SCRI Lausexsnassitaptbadquaeqeti ad dq Ha dac e HRS aad addas a ye a MUI ERA Kat a R4 142 Figure oo Mulkicost AUE MOT 146 Figure OF MMUNGASE orainari anin i AA i 147 Figure 58 Multicast gt IGMP Filtering Prone 4i ecc idonei kc Eia ado d Moa xa ado d ade 148 Figure So MVE Ne Wok EXSITIB IS ioiusnititvieesielebmad nera Eu pap to
158. damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contact ZyXEL s Service Center for your Return Material Authorization number RMA Products must be returned Postage Prepaid It is recommended that the unit be insured when shipped Any returned products without proof of purchase or those with an out dated warranty will be repaired or replaced at the discretion of ZyXEL and the customer will be billed for parts and labor All repaired or replaced products will be shipped by ZyXEL to the corresponding return address Postage Paid This warranty gives you specific legal rights and you may also have other rights that vary from country to country Registration Register your product online to receive e mail notices of firmware upgrades and information at www zyxel com for global products or at www us zyxel com for North American products VES 1616F 3x Series User s Guide 297 Appendix B Legal Information VES 1616F 3x Series User s Guide Customer Support Please have the following information re
159. dations Syntax Conventions The VES 1616F 34 or VES 1616F 35 may be referred to as the Switch the device the system or the switch in this User s Guide Product labels screen names field labels and field choices are all in bold font A key stroke 1s denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket gt within a screen name denotes a mouse click For example Maintenance gt Log gt Log Setting means you first click Maintenance in the navigation panel then the Log sub menu and finally the Log Setting tab to get to that screen Units of measurement may denote the metric value or the scientific value For example k for kilo may denote 1000 or 1024 M for mega may denote 1000000 or 1048576 and so on e g is a Shorthand for for instance and i e means that is or in other words VES 1616F 3x Series User s Guide Document Conventions Icons Used in Figures Figures in this User s Guide may use the following generic icons The Switch icon is not an exact representation of your device Server Switch A Computer m lt gt Ss T
160. dth than queues with smaller weights Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Chapter 17 Queuing Method VES 1616F 3x Series User s Guide Classifier This chapter introduces and shows you how to configure the packet classifier on the switch 18 1 Classifier Overview Quality of Service QoS refers to both a network s ability to deliver data with minimum delay and the networking methods used to control the use of bandwidth Without QoS all traffic data is equally likely to be dropped when the network is congested This can cause a reduction in network performance and make the network inadequate for time critical application such as video on demand A layer 2 classifier groups traffic according to the Ethernet type VLAN group MAC address and or port number A layer 3 classifier groups traffic according to the IP address and or TCP UDP protocol number Configure QoS on the switch to group and prioritize application traffic and fine tune network performance Setting up QoS involves two separate steps 1 Configure classifiers to sort traffic into different flows 2 Configure policy rules to define actions to be performed for a classified traffic flow refer to Chapter 19 on page 133 to configure policy rules 18 2 Configuring a Classifier Use the Classifier screen to define the classifiers Afte
161. e 23 List of Figures Figure 125 Conflicting Computer and Router IP Addresses Example VES 1616F 3x Series User s Guide List of Tables List of Tables TAS TROMPITE cc E 37 ils 27A NIE X CD ER TETUER NONIS 40 Table 3 Navigation Panel Sub links Overview occeeosscecis iecciateisa tascabili er Rar Rr eni anD E CIN U CE Y VT E Aua A 47 Table 4 Web Configurator Screen Sub links Details 48 Table S Nauocslion Panel LINKS 3 oco rhe E Re pa ERH o M erc EEME e EE Pu pp PME MH M eu REPRE UU M RPMMES 48 D Jgctcu Hee 54 Tabe fatus VDSL P rt Detalls iiuscacexmisielvensadisseodetebxb aa a cl epp Ra Fett isa erin dio d Dade 56 Tabe S SRE Pat Dolai inisee EE 60 Tape O Syston IMO 64 Jule T0 Gener SEME aiaro awenesiertaswitewenaciins ET QUEE EP A E OEA AEOS OANE deine 66 Te UE i S E E A E EE E T E E EE EAT 68 TIS IZIP ORUN aa A E a ac A A EAA aati 71 Table T3 POI Se or E eons 73 Tade 14 VES Lc 78 Tabe 19 YDSL Alama zr Setup MR T T TM 81 Table T5 VDSL PSD Prone Seb uuo eti pe DE EERF EVE EE Sab A n pep ee GI 83 Too EEE reser c sc Tt 88 Tabe 16 VLAN YLAN SIBIUS emm 90 Tele 1S VLAN gt Slat VLAN em M 91 Tabe 20 VLAN gt YLAN POr SONING sanna adaa a A 92 Table 27 Part Based YLAN GOND ciccccxicecedctaiecagisidie recs ieweneu siete So aidecea eee 95 Table 22 Static MA
162. e a DSL port on the switch If there is another subscriber device connected to this port in the same subscriber VLAN the receiving port will still be on the list of forwarding destination for the multicast traffic Otherwise the switch removes the receiver port from the forwarding table Figure 60 MVR Multicast Television Example VES 1616F 3x Series User s Guide Chapter 21 Multicast 21 6 General MVR Configuration Use the MVR screen to create multicast VLANs and select the receiver port s and a source port for each multicast VLAN Click Advanced Application and Multicast in the navigation panel Click the Multicast Setting link and then the MVR link to display the screen as shown next See Section 21 5 on page 149 for background information ES You can create up to three multicast VLANs and up to 266 multicast rules on the switch LES Your switch automatically creates a static VLAN with the same VID when you create a multicast VLAN in this screen Figure 61 MVR 4 OLD Multicast Setting Group Configuration Active O Name Multicast VLAN ID 802 1p Priority Oy Mode Dynamic C Compatible Port Source Port Receiver Port None Tagging 1 e e Oo 2 e G rz m PP ccnl c 3 16 c D 17 C C c D 18 C C c 0 Add Cancel VLAN Active Name Mode Source Port Receiver Port 802 1p Delete Delete Cancel VES 1616F 3x Series User s Guide 151 Chapter 21 Multicast The followin
163. e 13 port s broadcast limit Disables broadcast storm control limit 13 on the port s diffserv Disables DiffServ settings on the 13 port s dlf limit Disables destination lookup failure 13 DLF on the switch egress set lt port Sets the outgoing traffic port list fora 13 list gt port based VLAN flow control Disables flow control on the port s 13 gvrp Disable GVRP on the port s 13 igmp filtering Disables IGMP filtering 13 profile igmp group limit Disables IGMP group limitation 13 igmp immediate Disables the IGMP immediate leave 13 leave function inactive Enables the port s on the switch 13 ingress check Disables ingress checking on the 13 port s intrusion lock Disables intrusion lock on a port so 13 that a port can be connected again after you disconnected the cable mirror Disables port mirroring on the port s 13 multicast limit Disables multicast limit on the port s 13 protocol based vlan Disables protocol based VLAN of the 13 ethernet type specified protocol on the port s lt ethe gt protocol based vlan Disables protocol based VLAN of the 13 packet format specified packet format on the port s lt pack gt ethernet type ethernet type vlan trunking Disables VLAN trunking on the port s 13 protocol ethernet type Creates a protocol based VLAN with 13 based vlan lt ethernet type gt the protocol type and VLAN ID name lt name gt vlan lt vid gt ethernet type Disables the protocol base
164. e 64 octets in length 65 127 This field shows the number of packets including bad packets transmitted that were between 65 and 127 octets in length VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics Table 7 Status VDSL Port Details continued LABEL DESCRIPTION 128 255 This field shows the number of packets including bad packets transmitted that were between 128 and 255 octets in length 256 511 This field shows the number of packets including bad packets transmitted that were between 256 and 511 octets in length 512 1023 This field shows the number of packets including bad packets transmitted that were between 512 and 1023 octets in length 1024 1518 This field shows the number of packets including bad packets transmitted that were between 1024 and 1518 octets in length Giant This field shows the number of packets including bad packets transmitted that were longer than 1518 octets in length VDSL Performance LOS This field displays the number of Loss of Signal LOS failures LOF This field displays the number of Loss of Framing LOF failures BMIN If the actual SNR falls below the minimum SNR the DSL connection will be dropped and re initialized This field displays how many times the connection has been dropped due to the average SNR falling below the specified minimum SNR BERR This field displays how many times
165. e Sort by field to display the MAC address table entries Figure 106 MAC Table A Sort by MAC VID Port Index MAC Address VID Port Type 1 00 02 e3 57 ea 4f 1 17 dynamic 2 00 04 80 9b 78 00 1 17 dynamic 3 00 0a e4 13 7 67 1 17 dynamic 4 00 0d 50 8f 09 a1 1 17 dynamic 5 D0 0d 50 cb 3b c8 1 17 dynamic B D0 0ffe 32 b4 12 1 17 dynamic 7 00 10 b5 ae 56 9b 1 17 dynamic 8 00 11 85 89 7a d9 1 17 dynamic 9 00 13 49 22 a3 3b 1 17 dynamic 10 00 16 36 10 26 c3 1 17 dynamic 11 00 15 36 16 12 73 1 17 dynamic 12 00 50 70 12 04 39 1 17 dynamic 19 00 50 ba ad 4f 81 1 17 dynamic 14 00 c0 9f cd cc 5f 1 17 dynamic 16 00 c0 38 fa e9 27 1 17 dynamic 16 00 d0 59 58 10 3c 1 43 dynamic The following table describes the labels in this screen Table 76 MAC Table LABEL DESCRIPTION Sort by Click one of the following buttons to display and arrange the data according to that button type The information is then displayed in the summary table below MAC Click this button to display and arrange the data according to MAC address VID Click this button to display and arrange the data according to VLAN group Port Click this button to display and arrange the data according to port number Index This is the incoming frame index number MAC Address This is the MAC address of the device from which this incoming frame came VID This is the VLAN group to which this frame belongs Port This is the port from which the
166. e a e a e a a e ee e e a e e e ee IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY Someone could be eavesdropping on you right now man in the middle attack It is also possible that the host key has just been changed Please contact your system administrator Add correct host key to C Documents and Settings Administrator Application Data SSH hostkeys key 22 192 168 1 1 pub to get rid of this message Received server key s fingerprint xigil gidot homug duzab tocyh pamyb ronep tisaf hebip gokeb goxix You can get a public key s fingerprint by running ssh keygen F publickey pub on the keyfile Agent forwarding is disabled to avoid attacks by corrupted Servers X11 forwarding is disabled to avoid attacks by corrupted servers Are you sure you want to continue connecting yes no yes Do you want to change the host key on disk yes no yes Agent forwarding re enabled X11 forwarding re enabled Host key saved to C Documents and Settings Administrator Application Data SSH hostkeys key 22 192 168 1 1 pub host key for 192 168 1 1 accepted by Administrator Thu May 12 2005 09 52 21 admin s password Authentication successful Copyright c 1994 2005 ZyXEL Communications Corp sysname gt 26 8 Introduction to HTTPS HTTPS HyperText Transfer Protocol over Secure Socket Layer or HTTP over SSL is a web protocol that encrypts and decrypts web pages Secure Socket Layer SSL is an applic
167. e cci serre PELLIS ER PEG AR REEL AIR ERO EB PR ML ASSAY PRA ASA RAS 36 act zdga cado eee cec 37 Figure 8 Transceiver Installation EXamiple 1st irrita eerie dcr tiber ie eina i te tnr i ker bro dc pci E pcd 39 Figure 7 stalled Transceiver sses as eain aote E ER Mee nian Reid a pi E Ra D ine 39 Figure 8 Opening ihe Dransceiver e Lateh Example ierat to rtt e RIRRRR PP EREREE EH EXLURUE HERI RRER E FERE Ekra 39 Figure 9 Transceiver Removal EXSImDIG 5 5 5 orertt t Supr LEIS E eyLHS RS PR PE EE YR PRO PR RULES IR PE AES KL HAN PEAKS 39 Figure 10 Web Coniigurator EGY casts sceviti ica seti kon p CR c MLE BR Patin ENAA FERRE CE UMP CUI RE EGER LR Hb ERR da 45 Figure 11 Web Configurator Home Screen Status iuscssccsecetii des iendee eh rin ttti pct i piede 46 Figure 12 Change Administrator Login Password 1occisasore eite norte n ar ped Mea 3E Rr pe dE a R EE ARA MER d sd 50 Figure 13 Resetting the Switch Via the Console Port 1s sors swcnsannessenananrssucdnasarrsniadeanedvnaceazerauweansanrsens 52 Figure 14 Web Configurator Logout Srl 2 iooserce trt Erb ri cte e oct o pet by cu epe pe So E E de rb EEA 52 PPIs To MEMO RUIT UTNMES 53 Figure 16 Sis VO SL SUNIKISEY ccccaiacssanidiinaeriindcaxternaasateolaiaeenidaaien PEU EUER PIRE E REPERI FR PUN ERRRDOIUA 55 Figure 17 Siu VDSL PUR Dee esizeieaipscte Deor iss d pai sp od baec ae 55 Figure T6 Status Port Detalls tals arts asta ta Boe Und cede gebp ebd po adl Usk cl Rubeo eG pU dU 59 Figure T9 System INIO T
168. e lowest MAC address will then become the root switch Select a value from the drop down list box The lower the numeric value you assign the higher the priority for this bridge Bridge Priority determines the root bridge which in turn determines Hello Time Max Age and Forwarding Delay Hello Time This is the time interval in seconds between BPDU Bridge Protocol Data Units configuration message generations by the root switch The allowed range is 1 to 10 seconds VES 1616F 3x Series User s Guide Chapter 10 Spanning Tree Protocol Table 27 Spanning Tree Protocol gt Configuration continued LABEL DESCRIPTION Max Age This is the maximum time in seconds a switch can wait without receiving a BPDU before attempting to reconfigure All switch ports except for designated ports should receive BPDUs at regular intervals Any port that ages out STP information provided in the last BPDU becomes the designated port for the attached LAN If it is a root port a new root port is selected from among the switch ports attached to the network The allowed range is 6 to 40 seconds Forwarding Delay This is the maximum time in seconds a switch will wait before changing states This delay is required because every switch must receive information about topology changes before it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to a blo
169. e type of the port State This field displays the status of the port Training Idle or Showtime Up Time This field shows the total amount of time the line has been up be LAN Link 1 This field displays the status of the link to the remote CPE device VDSL Status Line Rate This field displays the upstream downstream transmission rate 56 VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics Table 7 Status VDSL Port Details continued LABEL DESCRIPTION Payload Rate This field displays the upstream downstream payload rate SNR Margin This field displays the upstream downstream SNR margin Interleave Delay This field displays the upstream downstream interleave delay Transmit Power This field displays the upstream downstream transmission power of the line Attenuation This field displays the upstream downstream attenuation CRC Error This field displays the number of CRC Cyclical Redundancy Check error packet RS Correct This field displays the number of Reed Solomon RS correct packets RS Uncorrect This field displays the number of Reed Solomon RS uncorrect packets ES This displays port endpoint errored seconds ESs SES This displays port endpoint severely errored seconds SESs Tx Packet Tx Packets This field displays the number of packets transmitted Multicast This field shows the
170. efault Gateway Manageable Delete Delete Cancel VES 1616F 3x Series User s Guide Chapter 6 Basic Setting The following table describes the labels in this screen Table 12 IP Setup LABEL DESCRIPTION Domain Name Server Enter the IP address of the domain name server in dotted decimal notation for example 192 168 1 20 Default Management Select which traffic flow In Band or Out of band the switch is to use to send packets with an unknown source or that originated from the switch itself such as SNMP traps Select Out of band to have the switch send the packets to the out of band management port This means that device s connected to the other port s do not receive these packets Select In Band to have the switch send the packets to all ports except the out of band management port This means that device s connected to out of band management port do not receive these packets In band Management IP Address DHCP Client Select this option if you have a DHCP server that can assign the switch an IP address and subnet mask a default gateway IP address and a domain name server IP address Static IP Select this option if you don t have a DHCP server or if you wish to assign static IP Address address information to the switch You need to fill in the following fields when you select this option IP Address Enter the IP address of your switch in dotted decimal notation for exa
171. em cold start 58 Thu Jan 1 00 01 04 1970 PP1f WARN SNMP TRAP 26 Event On Trap 59 Thu Jan 1 00 01 06 1970 PKEB INFO User admin login 60 Thu Jan 1 00 02 46 1970 PPOc WARN SNMP TRAP 3 port 18 link up 61 Thu Jan 1 00 02 46 1970 PPOc ERROR Port 18 link up 62 Thu Jan 1 00 03 23 1970 PP27 INFO User admin logout 63 Thu Jan 1 00 03 28 1970 PKEB INFO User admin login Clear Error Log y n If you clear a log by entering y at the Clear Error Log y n prompt you cannot view it again 33 2 4 show mac address table all Syntax show mac address table all lt sort gt Where lt sort gt Specifies the sorting criteria MAC VID or port 244 VES 1616F 3x Series User s Guide Chapter 33 Command Examples This command displays the MAC address es stored in the switch The following example shows the MAC address table sysname show mac address table all Port VLAN ID AC Address Type 18 1 00 02 e3 30 43 34 Dynamic 18 1 00 04 80 9b 78 00 Dynamic 18 1 00 0d 60 8f 09 al Dynamic 18 1 00 0f fe le 4a e0 Dynamic 18 1 00 13 49 22 a3 3b Dynamic 18 1 DOSCOSOTcdiCcOo 5f Dynamic 18 1 00 c0 a8 a e9 27 Dynamic sysname 33 2 5 show multi login Syntax show multi login This command displays the multiple login settings or the number of CLI management sessions The following example shows that there are currently one console port and one Telnet sessions to the switch sysname show multi login session
172. en the corresponding bit in the IP address is part of the network number If a bit in the subnet mask is 0 then the corresponding bit in the IP address is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of an IP address 192 168 1 2 in decimal Table 96 IP Address Network Number and Host ID Example OCTET OCTET OCTET Se TOE 192 168 1 2 IP Address Binary 11000000 10101000 00000001 00000010 Subnet Mask Binary 11111111 11111114 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by a continuous sequence of zeros for a total number of 32 bits Subnet masks can be referred to by the size of the network number part the bits with a 1 value For example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting Subnet masks are expressed in dotted decimal notation just like IP addresses The following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks Table 97 Subnet Masks BINARY DECIMAL octet OCTET ocTET SCTE 8 bit mask 11111111 00000000 000000
173. enkie vod ur ARN ener RH d ox pl Pe rH EH XR ARE RS 197 49 2 Cluster Maregerrignt SIBIUS eese sensaievietcteneacsseceenancis SEL nEn SEE VERR AE SE 198 29 2 1 Cluster Member Switch Management eeeeeeseceeeeeeennr enn tna nna hirta nna nn 199 49 9 Configuring Cluster Management udecdssirieessxkisssepsisbuttsspauEbite Ma biam pde EHI pe ERI MPs Ende 200 Chapter 30 MAC Ll PT UR 203 IGT MAS TADS MSI e M 203 20 MII he RIAC TADIG e E 204 VES 1616F 3x Series User s Guide 15 Table of Contents Chapter 31 ARPSTSDIS cuiii voee RS EREXEEIE T E N E E EEE 205 SUNG PUR TOPe 4r dtm ecc 205 cUMELSUE DIU ICE M 205 v1 2 Viewng Ro ARP TOBIE ter T 205 Part VI Commands Troubleshooting and Specifications 207 Chapter 32 Intr du cing TNE COMMAS s curis ierbiuid A eM ao DEAE Pre P REEKO na ERR EET REA ER AAA ROI POUR RaU SERT aKa A 209 LUAM PI oi e 209 32 1 1 Swit h Configuration qe M 209 rk ESO O COLL pente tr T 210 nS NU Isis Em 210 ee oe TR EET PON m 210 QUU a IBINSE qus didi dodici PRT eer Ber Hisce ONCE Tee Pree enon Seeman ere ene abis enitn edd 211 AME Mori 212 Jaor The LI SLICE 212 324 sphere 2 ecc ER 2412 32 9 Getting Help C 213 32 5 1 List of Available
174. eries User s Guide 275 Chapter 36 Product Specifications 276 Table 91 Product Specifications continued Security Static MAC address forward MAC address learning 10 per port Block unresolved address forwarding Port security 802 1x port authentication Multicasting Support IGMP snooping and filtering IGMP V1 and V2 RFC2236 and RFC112 Bridging 16K MAC addresses learning Static MAC address forwarding 256 entries Broadcast storm control Automatic address learning and aging Aging time from 10 to 765 seconds in 1 second increment default 300 seconds Transparent bridging Switching 6 4 Gbps non blocking Maximum frame size 1522 bytes including tag CRC Store and forward QoS IEEE 802 1p Eight priority queues Queuing Algorithm SP WFS Port based bandwidth control from 100Kbps to 100Mbps by 1518bytes packets DiffServ RFC 2475 STP IEEE 802 1d IEEE 802 1w Port Mirroring Port based mirroring to a monitor port Broadcast Storm Support broadcast storm control Port Aggregation One aggregation group LACP support DHCP DCHP server relay DHCP relay Option82 System Configuration via console telnet web Management Firmware upgrade via FTP web console Configuration backup and restore via FTP web console System management access control Multi login single management System clock manual setup or NTP SNMP v2c RMON group 1 2 3 9 ICMP echo echo rep
175. ernet Assigned Numbers Authority IANA has reserved the following three blocks of IP addresses specifically for private networks e 10 0 0 0 10 255 255 255 e 172 16 0 0 172 31 255 255 192 168 0 0 192 168 255 255 You can obtain your IP address from the IANA from an ISP or it can be assigned from a private network If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines above For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting IP Address Conflicts Each device on a network must have a unique IP address Devices with duplicate IP addresses on the same network will not be able to access the Internet or other resources The devices may also be unreachable through the network Conflicting Computer IP Addresses Example More than one device can not use the same IP address In the following example computer A has a static or fixed IP address that is the same as the IP address that
176. escribes the labels in this screen Table 50 Multicast gt IGMP Filtering Profile LABEL DESCRIPTION Profile Name Enter a descriptive name for the profile for identification purposes To configure additional rule s for a profile that you have already added enter the profile name and specify a different IP multicast address range Start Address Type the starting multicast IP address for a range of multicast IP addresses that you want to belong to the IGMP filter profile End Address Type the ending multicast IP address for a range of IP addresses that you want to belong to the IGMP filter profile If you want to add a single multicast IP address enter it in both the Start Address and End Address fields Add Click Add to save the settings to the switch Clear Click Clear to clear the fields to the factory defaults Profile Name This field displays the descriptive name of the profile Start Address This field displays the start of the multicast address range End Address This field displays the end of the multicast address range Delete To delete the profile s and all the accompanying rules select the profile s that you want to remove in the Delete Profile column then click the Delete button To delete a rule s from a profile select the rule s that you want to remove in the Delete Rule column then click the Delete button Cancel Click Cancel to clear the Delete Profile Delete Rule check boxe
177. est on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution e If the power adaptor or cord is damaged remove it from the power outlet The length of exposd bared power wire should not exceed 7mm Do NOT attempt to repair the power adaptor or cord Contact your local vendor to order a new one e Do not use the device outside and make sure all the connections are indoors There is a remote risk of electric shock from lightning e Wire Gauge Specifications Ground Wire 18 AWG or larger for Ground Wire or Power Wire Use only No 26 AWG American Wire Gauge or larger telecommunication line cord Connect the POTS line and VDSL line test pin TNV Circuit according to CSA60950 1 2 1 3 Protection in restricted access locations section 3 amp fake Ios do SS ES ELSE A E 7a EA Re BR E This product is recyclable Dispose of it properly 6 VES 1616F 3x Series User s Guide e Safety Warnings VES 1616F 3x Series User s Guide Safety Warnings VES 1616F 3x Series User s Guide Table of Contents Table of Contents About This Vs rs cnl toe m 3 D cument Conventos Mee 4 Saroiy War fe DIT c P 6 Table of CODIGO ice ner resp rea Pang Rue CERE EaxRRE Tab A vu RR VERREM EQUO NENEA 9 Contents QVErYIEW PT T
178. et the current running configuration 2 Enter write memory to save the changes to the current configuration file The following example resets both configuration files to the factory default settings sysname erase running config sysname write memory VES 1616F 3x Series User s Guide Chapter 33 Command Examples 33 8 no Command Examples These are the commonly used command examples that belong to the no group of commands 33 8 1 no mirror port Syntax no mirror port Disables port mirroring on the switch An example is shown next sysname config no mirror port 33 8 2 no https timeout Syntax no https timeout Resets the https session timeout to default An example is shown next The session timeout is reset to 300 seconds sysname config no https timeout Cache timeout 300 33 8 3 no trunk Syntax no trunk T1 no trunk T1 lacp no trunk T1 interface port list where T1 Disables the trunk group T1 lacp Disables LACP in the trunk group T1 interface port list Removes ports from the trunk group e An example is shown next Disable the trunk group Disable LAPC on the trunk group Remove ports 17 and 18 from the trunk group sysname config no trunk T1 sysname config no trunk T1 lacp sysname config no trunk Tl interface 17 18 VES 1616F 3x Series User s Guide 251 Chapter 33 Command Exam
179. eta de da 217 Table 80 Command Summary Enable Mode eese einen enint nhanh nha danda nada 218 Table 81 Command Summary Configuration Mode 2 esisseecesiseeeeeet doesnt detta ben a dtd 223 VES 1616F 3x Series User s Guide List of Tables Table 82 interface port channel Commands ciscsdesssssisesdezesevevesesenssaacsdentiesudenettaonexsaeivaaaessesasaracsseeeaieiss 233 ee Ee E MATING TTE 236 Table 34 vdskalarmproile Commands 2 cadem ve vous coii acci i ra vict AE E aE A ea 237 Tapo OS vast proime Commands 2 asc e o voe EA AE A A ete eta n it 238 Table S0 vlan Eo atas aset tie i t tede i ea uina fete bet idi tundetenu iu mae iure E Cada 240 Table 87 Troubleshooting the Start Up of Your SWICK is sisi eceaiun sua sanata bea eani te ria adhe E ance 267 Table 88 Troubleshooting Accessing the Switch auus esee este tnaa kk tak kh ak korr AER ER da o 267 Table 89 Troubleshooting VLISL CONDICIO ucisuesacirritipaxkrErEos ek pReEEDI REX HER DuSE er EFEUCI Ex ERR SER FRU NER FERRE 268 Table 90 Troubleshooting tho Password 42 doro Den o dr p dla i Fu de c o dac dte pads 273 Table 07 Product SDODITIGCOBOPIS ousconied iore biu a a e pad aRE pea T bn Fas dad onda Fou uh ER RECEN Sina 219 Table 92 CO Impedance Splitter Board Specifications cccccececceceeeceeeeececeeeeceseeaeaeseaeaeaeeeeesaeeseeees 277 Table 93 Hardware Telco 50 Pin ASSIGNIMGNIS iecit tnnt n nonet nme i nn d hd ests d 278 Table 94 Hardware
180. ets the service provider VID of the 13 specified port s vlan trunking Enables VLAN Trunking on ports 13 connected to other switches or routers but not ports directly connected to end users to allow frames belonging to unknown VLAN groups to pass through the switch weight wtl Sets the queuing weight 13 lt wt2 gt iain lt wt8 gt 32 11 5 mvr Commands The following table lists the mvr commands in configuration mode Table 83 mvr Commands COMMAND DESCRIPTION P mvr 1 Enters the MVR Multicast VLAN 13 4094 Registration configuration mode 8021p priority 0 7 Select a priority level 0 7 with which 13 the switch replaces the priority in outgoing IGMP control packets belonging to this multicast VLAN exit Exist from the MVR configuration 13 mode VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 83 mvr Commands continued COMMAND DESCRIPTION group lt name str gt start address lt ip gt end address lt ip gt Sets the multicast group range for the MVR inactive Disables MVR settings 13 mode lt dynamic compatible gt Sets the MVR mode 13 name lt name gt Sets the MVR name for identification purposes 13 no group Disables all MVR group settings 13 group lt name gt Disables the specified MVR group setting 13 inactive Enables MVR 13 receiver port lt
181. ex This field displays the index number of the rule Click an index number to edit the rule Active This field displays Yes when the rule is activated and No when is it deactivated VES 1616F 3x Series User s Guide Chapter 18 Classifier Table 40 Classifier continued LABEL DESCRIPTION Name This field displays the descriptive name for this rule This is for identification purpose only Rule This field displays a summary of the classifier rule s settings Delete Click Delete to remove the selected entry from the summary table Cancel Click Cancel to clear the Delete check boxes The following table shows some other common Ethernet types and the corresponding protocol number Table 41 Common Ethernet Type Number Ethernet Type number IP ETHII 0800 X 75 Internet 0801 NBS Internet 0802 ECMA Internet 0803 Chaosnet 0804 X 25 Level 3 0805 XNS Compat 0807 Banyan Systems OBAD BBN Simnet 5208 IBM SNA 80D5 AppleTalk AARP 80F3 Some of the most common protocol port numbers are Table 42 Common Protocol Port Number PORT NUMBER NAME 21 FTP 23 Telnet 25 SMTP 53 DNS 80 HTTP 110 POP3 18 3 Classifier Example The following screen shows an example where you configure a classifier that identifies all traffic from MAC address 00 50 ba ad 4f 81 on port 2 After you have configured a classifier you can configure a
182. f bits in the mask after the address For example 192 1 1 0 25 is equivalent to saying 192 1 1 0 with subnet mask 255 255 255 128 The following table shows some possible subnet masks using both notations Table 99 Alternative Subnet Mask Notation ALTERNATIVE LAST OCTET LAST OCTET SUBNET MASK NOTATION BINARY DECIMAL 255 255 255 0 24 0000 0000 0 255 255 255 128 25 1000 0000 128 VES 1616F 3x Series User s Guide 287 Appendix A IP Addresses and Subnetting Table 99 Alternative Subnet Mask Notation continued sumerweek AUR T innen SERRE 255 255 255 192 26 1100 0000 192 255 255 255 224 27 1110 0000 224 255 255 255 240 28 1111 0000 240 255 255 255 248 29 1111 1000 248 255 255 255 252 30 1111 1100 252 Subnetting 288 You can use subnetting to divide one network into multiple sub networks In the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons In this example the company network address is 192 168 1 0 The first three octets of the address 192 168 1 are the network number and the remaining octet is the host ID allowing a maximum of 2 2 or 254 possible hosts The following figure shows the company network before subnetting Figure 121 Subnetting Example Before Subnetting QUE EB EM EN EN EM EM EN EN ONE N
183. f commands you can use sysname help Commands available help logout exit history enable show ip cr ping lt ip host name gt cr traceroute ip host name cr ssh 1 2 lt user dest ip gt cr ssh lt 1 2 gt lt user dest ip gt command lt gt sysname gt VES 1616F 3x Series User s Guide 213 Chapter 32 Introducing the Commands sysname gt enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system history Show a list of previously run commands logout Exit from the EXEC ping Exec ping show Show system information ssh SSH client traceroute Exec traceroute sysname gt 32 5 2 Detailed Command Information Enter lt command gt help to display detailed sub command and parameters Enter command to display detailed help information about the sub commands and parameters sysname gt ping help Commands available ping ip in band out of band vlan lt vlan id gt size lt 0 1472 gt ica gt sysname gt sysname gt ping lt ip host name gt destination ip address help Description of ping help sysname gt 32 6 Changing the Password This command is used to change the password for Enable mode By default the same password is used to enter the command line interface CLI and Enable and Config modes of the CLI The password you ch
184. f frames allowed on a port Choices are All Tag Only and Frame Type Untag Only Select All to accept all untagged or tagged frames on this port This is the default setting Select Tag Only to accept only tagged frames on this port All untagged frames will be dropped Select Untag Only to accept only untagged frames on this port All tagged frames will be dropped VLAN Trunking Enable VLAN Trunking on ports connected to other switches or routers but not ports directly connected to end users to allow frames belonging to unknown VLAN groups to pass through the switch Apply Click Apply to save the changes Cancel Click Cancel to start configuring the screen again 7 6 Port based VLAN Port based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port Port based VLANs require allowed outgoing ports to be defined for each port Therefore if you wish to allow two subscriber ports to talk to each other for example between conference rooms in a hotel you must define the egress an egress port is an outgoing port that is a port through which a data packet leaves for both ports Port based VLANs are specific only to the switch on which they were created LES When you activate port based VLAN the switch uses a default VLAN ID of 1 You cannot change it BES In screens such as IP Setup and Filtering that require a VID you must enter 1 as t
185. f the amber LED is on at the same time Blinking The port is receiving or transmitting data at 10 Mbps Amber On The link to a 100 Mbps Ethernet network is up The link to a 1000 Mbps Ethernet network is up if the green LED is on at the same time Blinking The port is receiving or transmitting data at 100 Mbps Off The link to an Ethernet network is down Mini GBIC Slots VES 1616F 3x Series User s Guide Chapter 3 Hardware Overview Table 2 LEDs continued LED COLOR STATUS DESCRIPTION LNK Green On The port has a successful connection Off No Ethernet device is connected to this port ACT Green Blinking The port is sending or receiving data Off The port is not sending or receiving data MGMT Green On The link to a 10 Mbps Ethernet network is up Blinking The port is receiving or transmitting data at 10 Mbps Amber On The link to a 100 Mbps Ethernet network is up Blinking The port is receiving or transmitting data at 100 Mbp Off The link to an Ethernet network is down VES 1616F 3x Series User s Guide Chapter 3 Hardware Overview VES 1616F 3x Series User s Guide PART Il Status and Basic The Web Configurator 45 System Status and Port Statistics 53 Basic Setting 63 The Web Configurator This section introduces the configuration and functions of the web configurator 4 1 Introduction The web configurator is an HTML based mana
186. ffic types by inserting a tag into a MAC layer frame that contains bits to define class of service Frames without an explicit priority tag are given the default priority of the ingress port Use the following fields to configure the priority level to physical queue mapping The switch has eight physical queues that you can map to the 8 priority levels On the switch traffic assigned to higher index queues gets through faster while traffic in lower index queues is dropped if the network is congested Priority Level The following descriptions are based on the traffic types defined in the IEEE 802 1d standard which incorporates the 802 1p Level 7 Typically used for network control traffic such as router configuration messages Level 6 Typically used for voice traffic that is especially sensitive to jitter jitter is the variations in delay Level 5 Typically used for video that consumes high bandwidth and is sensitive to jitter Level 4 Typically used for controlled load latency sensitive traffic such as SNA Systems Network Architecture transactions Level 3 Typically used for excellent effort or better than best effort and would include important business traffic that can tolerate some delay Level 2 This is for spare bandwidth Level 1 This is typically used for non critical background traffic such as bulk transfers that are allowed but that should not affect other applications and users Level 0 Typi
187. fied 13 VLAN vlaniq gvrp Displays GVRP settings 13 port isolation Displays VLAN based port isolation 13 settings vlan stacking Displays VLAN stacking settings 13 ssh 1 2 lt user dest Connects to an SSH server with the 13 ip specified SSH version command lt gt gt Connects to an SSH server with the 13 specified SSH version and addition commands to be executed on the Server traceroute lt ip host name gt Determines the path a packet takes to 13 a device lt vlan id gt ttl Determines the path a packet takes to 13 lt 1 255 gt wait a device in the specified VLAN lt 1 60 gt queries lt 1 10 gt vdsl lt port remote reset Resets the connection information 13 list gt and settings on the remote CPE device s remote test Sets the port s to test the connection 13 to the remote CPE device s reset Clears port statistics and connection 13 information This re initializes the connection retrain Sets the port s to establish the 13 connection again write memory Saves current configuration to the 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands 32 11 3 General Configuration Mode The following table lists the commands in Configuration or Config mode Table 81 Command Summary Configuration Mode COMMAND DESCRIPTION P admin lt pw string gt lt confirm Changes the administrator
188. for details The mini GBIC ports have priority over the Gigabit ports This means that if a mini GBIC port and the corresponding Gigabit port are connected at the same time the Gigabit port will be disabled You can change transceivers while the switch is operating You can use different transceivers to connect to Ethernet switches with different types of fiber optic connectors Type SFP connection interface Connection speed 1 Gigabit per second Gbps BES To avoid possible eye injury do NOT look into an operating fiber optic module s connectors 3 1 3 1 Transceiver Installation Use the following steps to install a mini GBIC transceiver SFP module 1 Insert the transceiver into the slot with the exposed section of PCB board facing down VES 1616F 3x Series User s Guide Chapter 3 Hardware Overview Figure 6 Transceiver Installation Example 2 Press the transceiver firmly until it clicks into place 3 The switch automatically detects the installed transceiver Check the LEDs to verify that it is functioning properly Figure Installed Transceiver 3 1 3 2 Transceiver Removal Use the following steps to remove a mini GBIC transceiver SFP module 1 Open the transceiver s latch latch styles vary Figure 8 Opening the Transceiver s Latch Example 2 Pull the transceiver out of the slot Figure 9 Transceiver Removal Example 3 1 4 Console Port For local management you can use a compu
189. frame losses Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port The switch uses IEEE 802 3x flow control in full duplex mode and back pressure flow control in half duplex mode IEEE 802 3x flow control is used in full duplex mode to send a pause signal to the sending port causing it to temporarily stop sending signals when the receiving port memory buffers fill Back Pressure flow control is typically used in half duplex mode to send a collision signal to the sending port mimicking a state of packet collision causing the sending port to temporarily stop sending signals and resend later Select Flow Control to enable it 802 1P Priority This priority value is added to incoming frames without a 802 1p priority queue tag See Priority Queue Assignment in Table 11 on page 68 for more information BPDU Control Configure the way to treat BPDUs received on this port You must activate bridging control protocol transparency in the Switch Setup screen first Select Peer to process any BPDU Bridge Protocol Data Units received on this port Select Tunnel to forward BPDUs received on this port Select Discard to drop any BPDU received on this port Select Network to process a BPDU with no VLAN tag and forward a tagged BPDU Ports 17 18 Port This is the port index number Active Select this check box to enable a port The factory default for all ports is enabled
190. from the monitor port without interference 13 2 Port Mirroring Configuration Click Advanced Application gt Mirroring in the navigation panel to display the configuration screen Use this screen to select a monitor port and specify the traffic flow to be copied to the monitor port Figure 41 Mirroring au nnnm Active 0 Monitor Port Pot Port Mirrored Direction 1 O ngress gt 2 C ngress HU VN TW m o a end mtl 15 ngress 16 O ngress 17 ul ngress 18 C ngress Apply Cancel VES 1616F 3x Series User s Guide Chapter 13 Mirroring The following table describes the related labels in this screen Table 30 Mirroring LABEL DESCRIPTION Active Clear this check box to deactivate port mirroring on the switch Monitor The monitor port is the port you copy the traffic to in order to examine it in more detail Port without interfering with the traffic flow on the original port s Select this port from this drop down list box Port This field displays the port number Mirrored Select this option to mirror the traffic on a port Direction Specify the direction of the traffic to mirror Choices are Egress outgoing Ingress incoming and Both Apply Click Apply to save the changes Cancel Click Cancel to start configuring the screen again 112 VES 1616F 3x Series User s Guide Link Aggregation This chapter shows you how to l
191. g in the navigation panel to display the screen as shown next Scroll down to the bottom of the screen to view the summary table for the settings Figure 36 Filtering C Filtering Active O Name I Discard source Action Discard destination MAC a E E E VID Add Cancel Clear Index Active Name MAC Address Action Delete Delete Cancel The following table describes the related labels in this screen Table 23 Filtering LABEL DESCRIPTION Active Make sure to select this check box to activate your rule You may temporarily deactivate a rule without deleting it by deselecting this check box Name Type a descriptive name for this filter rule This is for identification purpose only VES 1616F 3x Series User s Guide Chapter 9 Filtering Table 23 Filtering continued LABEL DESCRIPTION Action Select Discard source to drop frame from the source MAC address specified in the MAC field The switch can still send frames to the MAC address Select Discard destination to drop frames to the destination MAC address specified in the MAC field The switch can still receive frames originating from the MAC address Select Discard source and Discard destination to block traffic to from the MAC address specified in the MAC field MAC Type a MAC address in valid MAC address format that is six hexadecimal character pairs VID Type the V
192. g table describes the related labels in this screen Table 51 MVR LABEL DESCRIPTION Active Select this check box to enable MVR to allow one single multicast VLAN to be shared among different subscriber VLANs on the network Name Enter a descriptive name up to 32 printable ASCII characters for identification purposes Multicast VLAN Enter the VLAN ID 1 to 4094 of the multicast VLAN ID 802 1p Priority Select a priority level 0 7 with which the switch replaces the priority in outgoing IGMP control packets belonging to this multicast VLAN Mode Specify the MVR mode on the switch Choices are Dynamic and Compatible Select Dynamic to send IGMP reports to all MVR source ports in the multicast VLAN Select Compatible to set the switch not to send IGMP reports Port This field displays the port number on the switch Source Port This field is applicable for Ethernet ports Select this option to set this port as the MVR source port that sends and receives multicast traffic Receiver Port Select this option to set this port as a receiver port that only receives multicast traffic None Select this option to set the port not to participate in MVR No MVR multicast traffic is sent or received on this port Tagging Select this checkbox if you want the port to tag the VLAN ID in all outgoing frames transmitted Add Click Add to save the settings Cancel Click Cancel to discard
193. g the Signal to Noise Ratio SNR SNR is the ratio of the amplitude of the actual signal to the amplitude of noise signals at a given point in time A low SNR indicates poor line quality If you disable transmission rate adjustment and the attainable speeds cannot match configured speeds then the VDSL link may go down or link communications may be sporadic due to line errors and consequent retransmissions Enable the switch to adjust to a new lower rate when the line quality deteriorates until the connection is broken The switch will first disconnect and then re establish the line connection to maintain connectivity However the new line rate might be lower or higher than the configured line rate VES 1616F 3x Series User s Guide Chapter 6 Basic Setting 6 8 7 RFI Radio Frequency Interference RFI is induced noise on the lines by surrounding radio frequency electromagnetic radiation from sources such as AM and HAM radio stations Since the VDSL uses a much larger frequency range that overlaps with other radio frequency systems signals from VDSL lines and other radio systems interfere with each other To avoid performance degradation due to RFI set the switch to not transmit VDSL signals in the RFI band 6 8 8 VDSL Profiles A profile is a table that contains a list of pre configured VDSL line settings or VDSL alarm threshold settings Each VDSL port has one and only one line and alarm profile assigned to it at any given time
194. ge measured at this point Threshold This field displays the percentage tolerance of the voltage with which the switch still works Status Normal indicates that the voltage is within an acceptable operating range at this point otherwise Error is displayed If Error displays an electronic component might be defective Have the switch serviced by a qualified technician Poll Interval s The text box displays how often in seconds this screen refreshes You may change the refresh interval by typing a new number in the text box and then clicking Set Interval Stop Click Stop to stop port statistic polling 6 3 General Setup Click Basic Setting and General Setup in the navigation panel to display the screen as shown Use this screen to configure the system name the system time and date and specify the login authentication database priority VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Figure 20 General Setup General Setup nd System Name Location Login Precedence Local Only Contact Person s Name z Use Time Server when Bootup None Y Time Server IP Address 0 0 0 0 Current Time New Time hh mm ss Current Date 1970 J nc 7 or New Date yyyy mm dd 1970 nc nc Time Zone UTC X It will take 60 seconds if time server is unreachable Apply Cancel The following table describes the labels in this screen Table 10 General Setup LABEL DESCRIPTION
195. gement interface that allows easy switch setup and management via Internet browser Use Internet Explorer 6 0 and later or Netscape Navigator 7 0 and later versions The recommended screen resolution is 1024 by 768 pixels In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default Java permissions enabled by default 4 2 System Login 1 Start your web browser 2 Type http and the IP address of the switch for example the default for the management port is 192 168 0 1 and for the switch port is 192 168 1 1 in the Location or Address field Press ENTER 3 The login screen appears The default username is admin and associated default password is 1234 The date and time display as shown if you have not configured a time server nor manually entered a time and date in the General Setup screen Figure 10 Web Configurator Login gt Please type your user name and password Site 192 168 1 1 Realm VES 1616F 35 at Tue Jan 6 23 24 02 1970 User Name l Password Save this password in your password list Cancel VES 1616F 3x Series User s Guide Chapter 4 The Web Configurator 4 Click OK to view the first web configurator screen 4 3 The Status Screen The Status screen is the first screen that displays when you access the web configurator The fo
196. h receives an unknown multicast frame Select Drop to discard the frame s Select Flooding to send the frame s to the destination device Port This field displays the port number Immed Leave Select this option to set the switch to remove this port from the multicast tree when an IGMP version 2 leave message is received on this port Select this option if there is only one host connected to this port Group Limited Select this option to limit the number of multicast groups this port is allowed to join Max Group Num Select this option and enter a number to limit the number of multicast groups this port is allowed to join Once a port is registered in the specified number of multicast groups any new IGMP join report frame s is dropped on this port IGMP Filtering Profile Select the name of the IGMP filtering profile to use for this port VES 1616F 3x Series User s Guide Chapter 21 Multicast Table 49 Multicast continued LABEL DESCRIPTION IGMP Querier This field is applicable on the Ethernet ports Mode The switch treats an IGMP query port as being connected to an IGMP multicast router or server The switch forwards IGMP join or leave packets to an IGMP query port Select Auto to have the switch use the port as an IGMP query port if the port receives IGMP query packets Select Fixed to have the switch always use the port as an IGMP query port Select this when yo
197. h which traffic 13 management flow the switch is to send packets dhcp relay Enables DHCP relay settings 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued COMMAND DESCRIPTION P helper address remote dhcp Sets the IP addresses of up to 13 remote dhcp serverl server2 remote 3 DHCP servers dhcp server3 information string Specifies the agent information 13 the device to add to DHCP requests option Sets the device to add DHCP 13 relay agent information diffserv Enables DiffServ 13 dscp 0 63 priority Sets the DSCP to IEEE 13 0 7 802 1q mappings exit Exits from the CLI 13 garp join 100 65535 leave Configures GARP time 13 msec leaveall lt msec gt settings help Displays help information 13 history Displays a list of previous 13 command s that you have executed hostname name string Sets the switch s name for 13 identification purposes https cert regeneration Re generates a certificate 13 rsa dsa timeout 0 65535 Sets how many seconds a 13 management session via the web configurator can be left idle before the session times out igmp Enables IGMP filtering 13 filtering profile name start Sets the starting and ending 13 address ip end IGMP addresses address ip igmp snooping Enable
198. hange this value unless your network administrator instructs you to do so Shared Secret Specify a password up to 32 alphanumeric characters as the key to be shared between the external RADIUS server and the switch This key is not sent over the network This key must be the same on the external RADIUS server and the switch Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Chapter 15 Port Authentication VES 1616F 3x Series User s Guide Port Security This chapter shows you how to set up port security 16 1 Port Security Overview Port security allows only packets with dynamically learned MAC addresses and or configured static MAC addresses to pass through a port on the switch The switch can learn up to 16K MAC addresses in total with no limit on individual ports other than the sum cannot exceed 16K For maximum port security enable this feature disable MAC address learning and configure static MAC address es for a port It is not recommended you disable Port Security together with MAC address learning as this will result in many broadcasts 16 2 Port Security Setup Click Advanced Application gt Port Security in the navigation panel to display the screen as shown Figure 48 Port Security OLE a Active D Port Active Address Learning Limited Number of Learned MAC Address 1 O
199. he VID The port based VLAN setup screen is shown next The CPU management port forms a VLAN with all Ethernet ports 7 6 1 Configure a Port based VLAN Select Port Based as the VLAN Type in the Switch Setup screen see Figure 29 on page 89 and then click VLAN from the navigation panel to display the next screen VES 1616F 3x Series User s Guide Chapter 7 VLAN Figure 33 Port Based VLAN Setup All Connected Allconnected Setting Wizard o e e r oe o 9 z 9e 9 e 5 9 DODE EBEE BE ooo ooo Bib BRB gt B e gt ERRE gt ek eeke gt DREE gt e e bbb Be Bee gt BIDEE gt e gt bbs be Bee bb e e DDE Be ERED gt gt gt BERE gt gt gt BE HDD e e bb e e 2 BE e ERRE gt gt gt RARD gt gt RB e o RBE gt Bs 5o gt b Be r bee gt DREE gt Bb gt bbs Be ok E pb x B e DDED e eE BEBE gt gt EREE Bi Boas e e EEEN ooo BR GG R i rjajo jpt jojo s oe x ES Pe Sie pe e 13 14 15 16 17 12 v IET a a a HIEN v iv iv zd IET UE iv MiK v 13 14 15 16 17 18 12 VES 1616F 3x Series User s Guide Chapter 7 VLAN Figure 34 Port Based VLAN Setup Port Isolation a gt etur Setting Wizard Portisolation x Set Incoming 4 2 3 4 5 6 7 8 9 40 146 42 19 44 de 48 17 48 C O O 7 EARERERER 7
200. he service know the new port number for that service Timeout Type how many minutes a management session via the web configurator can be left idle before the session times out After it times out you have to log in with your password again Very long idle timeouts may have security risks Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh 26 11 Remote Management From the Access Control screen display the Remote Management screen as shown next You can specify a group of one or more trusted computers from which an administrator may use a service to manage the switch Click Access Control to return to the Access Control Screen Figure 96 Access Control Remote Management ED Remote Management MN NN Secured Client Setup Access Control Entry Active Start Address End Address Telnet FIP Web ICMP SNMP SSH HTTPS 1 v foooo foooc e E WM RF RW RF FM 2 O foo pooo o o on o n o o s D foo joo GO O GO 8 n O 4 Dn foo pow O O GO 0 0 oO Apply Cancel The following table describes the labels in this screen Table 67 Access Control Remote Management LABEL DESCRIPTION Entry This is the client set index number A client set is a group of one or more trusted computers from which an administrator may use a service to manage the switch Active Select this check box to activate this secured client set
201. hecked against the saved version on the client computer 2 Encryption Method VES 1616F 3x Series User s Guide Chapter 26 Access Control Once the identification is verified both the client and server must agree on the type of encryption method to use 3 Authentication and Data Transmission After the identification is verified and data encryption activated a secure tunnel is established between the client and the server The client then sends its authentication information user name and password to the server to log in to the server 26 7 SSH Implementation on the Switch Your switch supports SSH version 2 using RSA authentication and three encryption methods DES 3DES and Blowfish The SSH server is implemented on the switch for remote management and file transfer on port 22 26 7 1 Requirements for Using SSH You must install an SSH client program on a client computer Windows or Linux operating system that is used to connect to the switch over SSH 26 7 2 SSH Login Example You can use an SSH client program to access the switch The following figure shows an example using a text based SSH client program Refer to the documentation that comes with your SSH program for information on using it VES 1616F 3x Series User s Guide Chapter 26 Access Control Figure 89 SSH Login Example C gt ssh2 admin 192 168 1 1 G0 Qaa eaae a e ae e ee e e e e e ee WARNING HOST IDENTIFICATION HAS CHANGED G0 Qaa
202. ication You could place the Switch outdoors in a street cabinet for example in residential areas that are too far away from the ISP Internet Service Provider to receive DSL services Residents only need to be within range of the Switch not the ISP to receive high speed VDSL Internet access and have enough bandwidth for data voice and video services In the following example the Switch labeled B is placed a considerable distance from the ISP and connected to a backbone switch labeled C Figure 2 Curbside Application Internet JJ 1 3 Ways to Manage the Switch Use any of the following methods to manage the Switch Web Configurator This is recommended for everyday management of the Switch using a supported web browser See Chapter 4 on page 45 Command Line Interface Line commands offer an alternative to the Web Configurator and may be necessary to configure advanced features See Chapter 32 on page 209 32 VES 1616F 3x Series User s Guide Chapter 1 Getting to Know Your Switch FTP Use File Transfer Protocol for firmware upgrades and configuration backup restore See Chapter 25 on page 169 SNMP The device can be monitored and or managed by an SNMP manager See Chapter 26 on page 179 1 4 Good Habits for Managing the Switch Do the following things regularly to make the Switch more secure and to manage the Switch more effectively Change the password Use a password that s not eas
203. ied MAC 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued COMMAND DESCRIPTION mac forward name name mac mac addr vlan vlan id interface interface id Removes the specified MAC forwarding entry belonging to a VLAN group if any forwarded through an interface s inactive Enables the specified MAC address belonging to a VLAN group if any forwarded through an interface s 13 mirror port Disables port mirroring on the Switch 13 multi login Disables multiple logins 14 mvr vlan id Disable MVR on the switch 13 policy name Deletes the specified policy A policy sets actions for the classified traffic 13 inactive Enables a policy 13 port access authenticator Disables port authentication on the switch 13 lt port list gt Disables authentication on the listed ports 13 lt port list gt reauthenticate Disables the re authentication mechanism on the listed port s 13 port security Disables port security on the switch 13 lt port list gt Disables port security on the specified ports 13 lt port list gt learn inactive Enables MAC address learning on the specified ports 13 radius server Disables the use of authentication from the RADIUS server 13
204. ields in a command are enclosed in square brackets for instance configure snmp server contact lt system contact gt location system location gt means that the contact and location fields are optional Command refers to a command used in the command line interface CI command The symbol means or The entry cr in the command lines refers to carriage return Press ENTER or carriage return after a command to execute the command Use the up 4 or down arrow key to scroll through the command history list The CLI does not accept partial or incomplete commands You may enter a unique part of a command and press TAB to have the switch automatically display the full command For example if you enter config and press TAB the full command of configure automatically displays Each interface refers to a port on the switch Commands configured after the interface command correspond to the port Type multiple ports or port ranges separated by a comma Ranges of port numbers are typed separated by a dash 32 5 Getting Help The system includes a help facility to provide you with the following information about the commands ist of available commands under a command group Detailed descriptions of the commands 32 5 1 List of Available Commands Enter help to display a list of available commands and the corresponding sub commands Enter to display a list o
205. ies the network interface or the VLAN ID to which the Ethernet device belongs Specifies the Time To Live TTL period Specifies the time period to wait Specifies how many tries the switch performs the traceroute function VES 1616F 3x Series User s Guide Chapter 33 Command Examples This command displays information about the route to an Ethernet device The following example displays route information to an Ethernet device with an IP address of 192 168 1 100 sysname gt traceroute 192 168 1 100 traceroute to 192 168 1 100 30 hops max 40 byte packet 1 192 168 1 100 10 ms 10 ms 0 ms traceroute done 33 5 Enabling RSTP Syntax snapping tree port number To enable RSTP on a port Enter spanning tree followed by the port number and press ENTER The following example enables RSTP on port 17 sysname config spanning tree 17 sysname 33 6 vdsl port Command Syntax vdsl port lt port list gt profilename lt name str gt where lt port list gt Selects the VDSL port s port 1 to 16 Specifies the name of the VDSL profile lt name str gt This command sets the specified VDSL port s to use a VDSL profile The following example configures VDSL ports 1 to 5 to use the test VDSL profile sysname config vdsl port 1 5 profilename test 33 7 Configuration File Maintenance This section shows you how to backup or restore the configuration file on
206. igure VDSL alarm profiles to Profile Setup apply to the VDSL lines VDSL PSD This link takes you to a screen where you can configure VDSL PSD profiles to apply to the VDSL lines Advanced Applica tion VLAN This link takes you to screens where you can configure port based or 802 1Q VLAN depending on what you configured in the Switch Setup screen Static MAC This link takes you to screens where you can configure static MAC addresses for a Forwarding port These static MAC addresses do not age out Filtering This link takes you to a screen to set up filtering rules Spanning Tree This link takes you to screens where you can configure the STP RSTP to prevent Protocol network loops Bandwidth This link takes you to screens where you can cap the maximum bandwidth allowed Control from specified source s to specified destination s Broadcast Storm This link takes you to a screen to set up broadcast filters Control Mirroring This link takes you to screens where you can copy traffic from one port or ports to another port in order that you can examine the traffic from the first port without interference Link Aggregation This link takes you to a screen where you can logically aggregate physical links to form one logical higher bandwidth link Port This link takes you to a screen where you can configure RADIUS Remote Authentication Authentication Dial In User Service a protocol for user authen
207. in account information 13 mac address table all lt sort gt Displays MAC address table 13 sort mac vidor port count Displays the count of the MAC 13 addresses stored in the MAC address table static Displays static MAC address table 13 mac aging time Displays MAC learning aging time 13 multicast Displays multicast settings 13 multi login Displays multi login information 13 mvr DIsplays all MVR Multicast VLAN 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 80 Command Summary Enable Mode continued profiles COMMAND DESCRIPTION P lt VID gt Displays the specified MVR group 13 settings plt Displays Packet Loop Test PLT 13 policy Displays all policy related information 13 lt name gt Displays the specified policy related 13 information port access Displays all port authentication 13 authenticator settings lt port list gt Displays port authentication settings 13 on the specified port s port security Displays all port security settings 13 lt port list gt Displays port security settings on the 13 specified port s radius server Displays RADIUS server settings 13 remote management Displays all secured client 13 information index Displays the specified secured client 13 information running config Displays current operating 13 configuration service control
208. in bits second Enter a number between 104960 and 64 78 VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 14 VDSL Profile Setup continued LABEL DESCRIPTION Rate Adaptive Rate adaption is the ability of a device to adjust from the configured transmission rate to the attainable transmission rate automatically depending on the line quality The VDSL transmission rate then stays at the new rate or adjusts if line quality improves or deteriorates Select a rate adaptive mode Select Manual to disable transmission rate adjustment Select AdaptAtlnit to enable the switch to adjust to a new lower rate when the line quality deteriorates until the connection is broken Max SNR Select the maximum SNR Signal to Noise Ratio margin allowed on the channel Target SNR Select the target SNR Signal to Noise Ratio margin for the channel Min SNR Select the minimum SNR Signal to Noise Ratio margin allowed on the channel Maxlnterleave Delay Specify maximum interleave delay for the slow channel It is recommended that you configure the same latency delay for both downstream and upstream Max Aggregate Specify the maximum aggregate power level for upstream and downstream Power transmission Rate Ratio Select to use the data rate allocated for the fast or slow channel Valid values are 0 and 100 Enter 0 to use slow channel at the rate you specified in the Slow Channel Payload Rate field whi
209. ing to have the switch ping the IP address in the field to the left Port Test From the Port drop down list box select a port number and click Internal Test to perform internal loopback test or click External Test on VDSL ports to perform loopback test to the remote devices VES 1616F 3x Series User s Guide Chapter 27 Diagnostic VES 1616F 3x Series User s Guide Syslog This chapter explains the syslog screens 28 1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages A syslog enabled device can generate a syslog message and send it to a syslog server Syslog is defined in RFC 3164 The RFC defines the packet format content and system log related information of syslog messages Each syslog message has a facility and severity level The syslog facility identifies a file in the syslog server Refer to the documentation of your syslog program for details The following table describes the syslog severity levels Table 69 Syslog Severity Levels CODE SEVERITY Emergency The system is unusable Alert Action must be taken immediately Critical The system condition is critical Error There is an error condition on the system Warning There is a warning condition on the system Notice There is a normal but significant condition on the system Informational The syslog contai
210. ing tree Enables STP on the switch 13 lt port list gt Enables STP on a specified 13 port lt port list gt path cost Sets the STP path cost for a 13 lt 1 65535 gt specified port lt port list gt priority Sets the priority for a specified 13 lt 0 255 gt port hello time lt 1 10 gt Sets Hello Time Maximum 13 maximum age 6 40 Age and Forward Delay forward delay 4 30 help Displays command help 13 information priority lt 0 61440 gt Sets the bridge priority of the 13 Switch Spq Sets the switch to use Strictly 13 Priority Queuing SPQ ssh known hosts host ip Adds a remote host to which 13 lt 1024 ssh rsa ssh dsa gt the switch can access using lt key gt SSH service storm control Enables broadcast storm 13 control on the switch syslog Enables syslog logging 13 server lt ip adderss gt inactive Disables syslog logging to the 13 specified syslog server level 0 7 Sets the IP address of the 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued COMMAND DESCRIPTION P type type Sets the log type 13 facility 0 7 Sets the log type and the file 13 location on the syslog server time lt Hour Min Sec gt Sets the time in hour minute 13 and second format date lt month day year gt Sets the date in year month 13 and day format help D
211. irmware upgrade on the CPE devices connected to the switch 1 Download the latest firmware for the CPE device from www zyxel com and save it on a computer connected to the switch VES 1616F 3x Series User s Guide Chapter 25 Maintenance 2 Inthe Remote Device Upgrade screen select the VDSL line s of the CPE device s to which you want to upgrade the firmware You can select multiple CPE devices by holding down the SHIFT or CTRL key and clicking the mouse at the same time 3 Type the path and file name of the firmware file you wish to upload to the switch in the File Path text box or click Browse to locate it 4 After you have specified the file click Upgrade 25 5 VDSL Chip Reset There are four VDSL chips in the switch and each VDSL chip controls four VDSL ports You can reset the VDSL chip s using the VDSL Chip Reset screen N Resetting VDSL chip s disconnects the associated VDSL line s N Resetting the VDSL chip s does NOT restart the switch Follow the steps below to reset VDSL chips in the switch 1 Access the VDSL Chip Reset screen from the Maintenance screen Figure 78 Maintenance VDSL Chip Reset VDSL Chip Reset Maintenance Please Choose Following VDSL Chips Chip01 Line 1 08 Chip02 Line09 16 Reset 2 Select the VDSL chips you want to reset in the list box You can select multiple entries by holding down the SHIFT or CTRL key 3 Click Reset to re
212. isplays help information 13 timezone lt Selects the time difference 13 12001 11200 between UTC formerly known as GMT and your time zone timesync daytime time ntp Sets the time server protocol 13 server ip Sets the IP address of your 13 time server trunk T1 Activates port group trunking 13 interface port Adds a port s to the trunk 13 list group lacp Enables LACP for the trunk 13 group interface lt port list gt timeout lacp Defines the port number and 13 timeout LACP timeout period vdsl Enters the VDSL alarm profile 13 alarmprofile mode name See Section 32 11 6 on page 237 for more information vdsl port lt port list gt lt enable disable gt Activates deactivates the 13 VDSL port s alarm profilename Sets the VDSL port s to use 13 lt name str gt the VDSL alarm profile profilename lt name Sets the VDSL port s to use 13 str gt the VDSL profile psd profilename Sets the VDSL port s to use 13 lt name str gt the VDSL PSD profile vdsl profile Enters VDSL profile command 13 lt name gt mode See Section 32 11 7 on page 238 for more information vdsl psd physide 1 2 Sets a VDSL PSD profile 13 profile frequence 0 30000 1 DownStream name level 125 1400 2 UpStream vlan 1 4094 Enters the VLAN configuration 13 mode See Section 32 11 8 on page 240 for more information vlaniq gvrp Enables GVRP 13 port isolation Enables VLAN port isolation 13
213. istrator you automatically enter Enable mode The following table describes command interpreter modes and how to access them Table 78 Command Interpreter Mode Summary HOW TO LOGIN allow you to configure settings that affect the switch globally configurein Enable mode MODE DESCRIPTION ACCESS PROMPT User Commands available in this mode are Default login level fora sysname gt a subset of enable mode You can read only account The first part of the prompt is perform basic tests and display the system name In the CLI general system information examples in this User s Guide the system name is always sysname Enable Commands available in this mode Default login level for sysname allow you to save configuration the administrator or settings reset configuration settings accounts with a as well as display further system privilege of 13 or 14 information This mode also contains Read only accounts the configure command which with a privilege of 0 takes you to config mode 12 need to type the enable command and enter the Enable mode password Config Commands available in this mode Type configor sysname config mode Command modes that follow are sub modes of the config mode and can only be accessed from within the config VES 1616F 3x Series User s Guide C Chapter 32 Introducing the Commands Table 78 Command Interpreter Mode Summary continued MODE
214. ither ASCII plain text format or in binary mode Configuration and firmware files should be transferred in binary mode Initial Remote Specify the default remote directory path Directory Initial Local Directory Specify the default local directory path VES 1616F 3x Series User s Guide Chapter 25 Maintenance 25 10 4 FTP Restrictions FTP will not work when FTP service is disabled in the Access Control screen The IP address es in the Secured Client Set in the Remote Management screen does not match the client IP address If it does not match the switch will disconnect the Telnet session immediately VES 1616F 3x Series User s Guide Chapter 25 Maintenance VES 1616F 3x Series User s Guide Access Control This chapter describes how to control access to the switch 26 1 Access Control Overview The console port and FTP are allowed one session each Telnet and SSH share four sessions up to five web management sessions five different usernames and passwords and or limitless SNMP access control sessions are allowed Table 61 Access Control Overview Console Port SSH Telnet FTP Web SNMP Number of 1 SSH and Telnet 1 5 No limit concurrent share 4 sessions allowed sessions When multiple login is disabled and there is already a console port session you cannot telnet to the switch The following error message displays Connection to h
215. ked You can allow pop ups from specific Web sites by adding the site to the list below Address of W eb site to allow http 192 168 1 1 Allowed sites Notifications and Filter Level Play a sound when a pop up is blocked Show Information Bar when a pop up is blocked Filter Level Medium Block most automatic pop ups Pop up Blocker FAG 270 VES 1616F 3x Series User s Guide Chapter 35 Troubleshooting 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting 35 3 1 2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaScripts are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 112 Internet Options internet Options n General Security Privacy Content Connections Programs Advanced Select a Web content zone to specify its security settings e amp oe Internet Local intranet Trusted sites Restricted sites K This zone contains all Web sites you Gites haven t placed in other zones r Security level for this zone Move the slider to set the security level for this zone Medium Safe browsing and still functional e Prompts before downloading potentially unsafe content Unsigned ActiveX controls will not be downloaded Appropriate for most Internet sites q Custom Level D Default Level Click the Custom Level
216. l of inner IEEE 802 1Q tag in the Port Setup screen 0 is the lowest priority level and 7 is the highest VID is the VLAN ID SP VID is the VID for the second service provider s VLAN tag 20 3 1 Frame Format The frame format for an untagged Ethernet frame a single tagged 802 1Q frame customer and a double tagged 802 1Q frame service provider is shown next Configure the fields as circled in the switch VLAN Stacking screen Table 45 Single and Double Tagged 802 11Q Frame Format DA SA Len Data FCS Untagged Etype Ethernet frame DA SA TPID Priorit VID Len Data FCS IEEE 802 1Q y Etype customer tagged frame DA SA SPTPI Priority VID TPID Priorit VID Len Data FCS Double tagged D y Etype frame Table 46 IEEE 802 1Q Frame DA Destination Address Priority 802 1p Priority SA Source Address Len Length and type of Etype Ethernet frame VES 1616F 3x Series User s Guide Chapter 20 VLAN Stacking Table 46 IEEE 802 1Q Frame SP TPID Service Provider Tag Protocol IDentifier Data Frame data VID VLAN ID FCS Frame Check Sequence 20 4 Configuring VLAN Stacking Click Advanced Application and then VLAN Stacking in the navigation panel to display the screen as shown Figure 55 VLAN Stacking OXERECUUT Active C SP TPID ns C Others Hex Port Role SPVID Priority 1 Noma M
217. ld void the user s authority to operate the equipment This Class A digital apparatus complies with Canadian ICES 003 Cet appareil num rique de la classe A est conforme a la norme NMB 003 du Canada CLASS 1 LASER PRODUCT APPAREIL A LASER DE CLASS 1 PRODUCT COMPLIES WITH 21 CFR 1040 10 AND 1040 11 PRODUIT CONFORME SELON 21 CFR 1040 10 ET 1040 11 Viewing Certifications 1 Go to http www zyxel com 2 Select your product on the ZyXEL home page to go to that product s page 3 Select the certification you wish to view from this page ZyXEL Limited Warranty ZyXEL warrants to the original end user purchaser that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials ZyXEL will at its discretion repair or replace the defective products or components without charge for either parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper operating VES 1616F 3x Series User s Guide Appendix B Legal Information condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal or higher value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product has been modified misused tampered with
218. lick Management and then Syslog in the navigation panel to display the Syslog Setup screen Click the Syslog Server Setup link to open the following screen Use this screen to configure a list of external syslog servers VES 1616F 3x Series User s Guide Chapter 28 Syslog Figure 99 Syslog Server Setup Server Address Log Level Index Active ESSE Syslog Setup Active D 0 0 0 0 Level Add Cancel Clear IP Address Log Level Delete Delete Cancel The following table describes the labels in this screen Table 71 Syslog Server Setup LABEL DESCRIPTION Active Select this check box to have the device send logs to this syslog server Clear the check box if you want to create a syslog server entry but not have the device send logs to it you can edit the entry later Server Address Enter the IP address of the syslog server Log Level Select the severity level s of the logs that you want the device to send to this syslog server The lower the number the more critical the logs are Add Click Add to save your changes back to the device The entry displays in the table below Cancel Click Cancel to begin configuring this screen afresh Clear Click Clear to return the fields to the factory defaults Index This is the index number of a syslog server entry Click this number to edit the entry Active This field displays Yes if the device is to send logs to the sys
219. llowing figure shows the navigating components of a web configurator screen Figure 11 Web Configurator Home Screen Status Status O Logout B Help Basic tting ED VDSL Summary Advanced Application System Up Time 0 18 14 Routing Protocol Port PayLoad Rate State Tx KB S RxKBis UpTime Retrain Management 1 oro Standby a a 0 00 00 Retrain 2 oro Standby 0 0 0 00 00 Retrain 3 0 0 Standby 0 0 0 00 00 Retrain 4 uu Standby 0 0 0 00 00 Retrain 5 oro Standby 0 0 0 00 00 Retrain B ui Standby 0 0 0 00 00 Retrain i oo Standby 0 0 0 00 00 Retrain 8 oro Standby 0 0 0 00 00 Retrain 9 oro Standby 0 0 0 00 00 Retrain 10 oo Standby D 0 0 00 00 Retrain 11 oro Standby 0 0 0 00 00 Retrain 12 oro Standby 0 0 0 00 00 Retrain TT uiu Standby 0 0 0 00 00 Retrain 14 oO Standby 0 0 0 00 00 Retrain 15 0 0 Standby 0 0 0 00 00 Retrain 16 uiu Standby 0 0 0 00 00 Retrain Port Link State LACP TxPkts RxPkts Tx KB s RxKB s UpTime 17 Down STOP Disabled 0 0 0 0 0 0 0 00 00 18 100M F FORWARDING Disabled 741 2453 17 428 2 794 0 18 03 Pollntewa s 40 Setinteral ston Pot ALL e Clear Counter In the navigation panel click a main link to reveal a list of submenu links VES 1616F 3x Series User s Guide Chapter 4 The Web Configurator Table 3 Navigation Panel Sub links Overview BASIC SETTING ADVANCED APPLICATION ROUTING PROTOCOL MANAGEMENT System Info General Setup Switch Setu
220. log server No displays if the device is not to send logs to the syslog server IP Address This field displays the IP address of the syslog server Log Level This field displays the severity level of the logs that the device is to send to this Syslog server Delete Select an entry s Delete check box and click Delete to remove the entry Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Chapter 28 Syslog VES 1616F 3x Series User s Guide Cluster Management This chapter introduces cluster management 29 1 Cluster Management Overview Cluster Management allows you to manage switches through one switch called the cluster manager The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another Table 72 ZyXEL Clustering Management Specifications Maximum number of cluster members 24 Cluster Member Models Must be compatible with ZyXEL cluster management implementation Cluster Manager The switch through which you manage the cluster member switches Cluster Members The switches being managed by the cluster manager switch In the following example switch A in the basement is the cluster manager and the other switches on the upper floors of the building are cluster members Figure 100 Clustering Application Example VES 1616F 3x Series User s Guide Chapter 29 Clu
221. ly CPE Device Remote CPE firmware upgrade via the web configurator Management Remote CPE line reset retrain Management User ID Password for Telnet and Web based management authentication Security Up to five login accounts VES 1616F 3x Series User s Guide Chapter 36 Product Specifications Table 91 Product Specifications continued MIBs RFC1213 RFC1493 Bridge MIB RFC1643 Ethernet MIB RFC1757 RMON RFC1155 SMI RFC 2233 ifVHCPacketGroup RFC 2647 Bridge MIB extension for 802 1Q RFC 2925 PING MIB and TRACEROUTE MIB RFC 3728 VDSL line MIB Physical and Enviro nmental Specifications Weight 8kg Power Suplpy 100 240 V 50 60 Hz AC Power 75 W max Consumption Temperature Three temperature sensors Threshold T1 VDSL Chipset 81 C ON 60 C OFF T2 Switch 73 C ON 65 C OFF T3 Monitor chipset 88 C ON 60 C OFF Voltage Threshold Four voltages 2 5V 696 1 2V 696 3 5V 6 12V 6 Operating 0 50 C Temperature Storage 25 70 C Temperature Operational 10 90 non condensing Humidity Safety UL60950 1 CSA60950 1 EN60950 1 IEC60950 1 ITU T K 20 Version 2000 EMC CE EMC Class A FCC Part 15 Class A The following table lists the splitter board specifications Table 92 CO Impedance Splitter Board Specifications COUNTRY POTS ISDN Belgium 2709 7500 150nF 1350 2B1Q Taiwan
222. m Notch2 Stop OkHz Optional Band unused Line Type fastOrInterleaved sysname 33 3 ping Syntax ping ip lt in band out of band vlan lt vlan id gt size lt 0 8024 gt t gt VES 1616F 3x Series User s Guide 247 Chapter 33 Command Examples where lt ip gt ut in band out of band vlan vlan id size lt 0 8024 gt The IP address of an Ethernet device Specifies the network interface or the VLAN ID to which the Ethernet device belongs out of band refers the management port while in band means the other ports on the switch Specifies the packet size to send Sends Ping packets to the Ethernet device indefinitely Click CTRL C to terminate the Ping process This command sends Ping packets to an Ethernet device The following example sends Ping requests to and displays the replies from an Ethernet device with an IP address of 192 168 1 100 1 2 3 sysname rate 100 100 100 ret 0 0 0 sysname ping 192 168 1 100 sent rcvd avg mdev max min reply from 0 0 0 0 192 168 1 100 0 0 0 0 192 168 1 100 0 0 0 0 192 168 1 100 33 4 traceroute Syntax traceroute ip in band out of band vlan vlan id ttl lt 1 255 gt wait 1 60 gt queries lt 1 10 gt where lt ip gt id in band out of band vlan vlan ttl 1 255 wait lt 1 60 gt quesries lt 1 10 gt The IP address of an Ethernet device Specif
223. m of the screen Incoming These are the ingress ports an ingress port is an incoming port that is a port through which a data packet enters If you wish to allow two subscriber ports to talk to each other you must define the ingress port for both ports The numbers in the top row denote the incoming port for the corresponding port listed on the left its outgoing port CPU refers to the switch management port By default it forms a VLAN with all Ethernet ports If it does not form a VLAN with a particular port then the switch cannot be managed from that port Outgoing These are the egress ports an egress port is an outgoing port that is a port through which a data packet leaves If you wish to allow two subscriber ports to talk to each other you must define the egress port for both ports CPU refers to the switch management port By default it forms a VLAN with all Ethernet ports If it does not form a VLAN with a particular port then the switch cannot be managed from that port VES 1616F 3x Series User s Guide 95 Chapter 7 VLAN Table 21 Port Based VLAN Setup continued LABEL DESCRIPTION Apply Click Apply to save the changes Cancel Click Cancel to start configuring the screen again VES 1616F 3x Series User s Guide Static MAC Forward Setup Use these screens to configure static MAC address forwarding 8 1 Static MAC Forwarding Overview A static MAC address is an address
224. m renener te tre Petree rere tree reneitre errr itr trerr free 270 Figure TI Pop up Blocker SQUINGS sccctsdeitsercgsccsssreciccsens M 270 Figure 112 intemet CIN TTE T T I S A ota T 271 Figur 113 Security Settings Java OO nesscsscnsnniiini EFpEO S EF ER Ev VE PH uo pre ac E EHPO SEHR Ep PAR PHUDA 272 2s XaLP ep rael cQ P 272 33r 115 BA PMI EN ON AEA Koo N rta VAN be du d IEAA AA ERR N 273 Figure 116 Hardware Telco 50 Pin Assignments uccisi ernannt etna itn adnata 279 Figure 117 Telco 50 Cable VDSL Telco 50 Pin Assignments ccccseccccceeseeecccceeseeeacceenenseacaeeenneeaes 280 Figure 118 Telco 50 Cable POTS ISDN Telco 50 Pin Assignments cccseescccceteeeeccceeseeeecceeeteeeas 280 Figure 119 Console Cable DB 9 End Pin Layout 22er rtt torret etra Eo epp e renr ser sen as erri d uu inia 281 Figure 120 Network Number and Host ID 2 eueeccises rentre abe ka tia ta nd b Rt kc 286 Figure 121 Subnetting Example Before Subnetting 2a eciereceseskkptt auae ERE TIE qRERERP ERE se rieri Ite REO THERE RRRMdE 288 Figure 122 Subnetting Example After Subnetting 15 neret eter etn t red et ed aa x nda 289 Figure 123 Conflicting Computer IP Addresses Example sssee emen 293 Figure 124 Conflicting Computer IP Addresses Example eeesesieseesecsieeee esee en maa n 293 VES 1616F 3x Series User s Guid
225. manager to set values for object variables within an agent Trap Used by the agent to inform the manager of some events 26 3 1 Supported MIBs MIBs let administrators collect statistics and monitor status and performance The switch supports the following MIBs SNMP MIB II RFC 1213 RFC 1155 SMI RFC 1157 SNMP v1 RFC 1493 Bridge MIBs RFC 1643 Ethernet MIBs RFC 1757 RMON e RFC 2233 ifVHCPacketGroup RFC 2674 SNMPv2 SNMPv2c RFC 2925 PING MIB and TRACEROUTE MIB e RFC 3728 VDSL line MIB SNMPv2 SNMPv2c or later version compliant with RFC 2011 SNMPv2 MIB for IP RFC 2012 SNMPv2 MIB for TCP RFC 2013 SNMPv2 MIB for UDP 26 3 2 SNMP Traps The switch sends traps to an SNMP manager when an event occurs SNMP traps supported are outlined in the following table Table 63 SNMP Traps OBJECT LABEL OBJECT ID DESCRIPTION SNMPv2 Trap Cold Start 1 3 6 1 6 3 1 1 5 This trap is sent when the switch is turned on 1 WarmStart 1 3 6 1 6 3 1 1 5 This trap is sent when the switch restarts 2 linkDown 1 3 6 1 6 3 1 1 5 This trap is sent when the Ethernet link is down 3 linkUp 1 3 6 1 6 3 1 1 5 This trap is sent when the Ethernet link is up 4 authenticationFailure 1 3 6 1 6 3 1 1 5 This trap is sent when an SNMP request comes from 5 non authenticated hosts RFC 1493 Traps VES 1616F 3x Series User s Guide Chapter 26 Access Control
226. meserver sends when you turn on the switch Not all time servers support all protocols so you may have to use trial and error to find a protocol that works The main differences between them are the time format When you select the Daytime RFC 867 format the switch displays the day month year and time with no time zone adjustment When you use this format it is recommended that you use a Daytime timeserver within your geographical time zone Time RFC 868 format displays a 4 byte integer giving the total number of seconds since 1970 1 1 at 0 0 0 NTP RFC 1305 is similar to Time RFC 868 None is the default value Enter the time manually Each time you turn on the switch the time and date will be reset to 2000 1 1 0 0 Time Server IP Address Enter the IP address of your timeserver The switch searches for the timeserver for up to 60 seconds If you select a timeserver that is unreachable then this screen will appear locked for 60 seconds Please wait Current Time This field displays the time you open this menu or refresh the menu New Time hh min ss Enter the new time in hour minute and second format The new time then appears in the Current Time field after you click Apply Current Date This field displays the date you open this menu New Date yyyy mm dd Enter the new date in year month and day format The new date then appears in the Current Date field after you click Apply
227. mple 192 168 1 1 IP Subnet Enter the IP subnet mask of your switch in dotted decimal notation for example Mask 255 255 255 0 Default Enter the IP address of the default outgoing gateway in dotted decimal notation for Gateway example 192 168 1 254 VID Enter the VLAN identification number associated with the switch IP address This is the VLAN ID of the CPU and is used for management only The default is 1 All ports by default are fixed members of this management VLAN in order to manage the device from any port If a port is not a member of this VLAN then users on that port cannot access the device To access the switch make sure the port that you are connected to is a member of Management VLAN Out of band Management IP Address IP Address Enter the IP address of your switch in dotted decimal notation for example 192 168 0 1 IP Subnet Mask Enter the IP subnet mask of your switch in dotted decimal notation for example 255 255 255 0 Apply Click Apply to save the settings Cancel Click Cancel to reset the fields to your previous configuration In band IP Addresses You can create up to 128 IP addresses which are used to access and manage the switch from the ports belonging to the pre defined VLAN s You must configure a VLAN first IP Address Enter the IP address for managing the switch by the members of the VLAN specified in the VID field below IP Subnet Mask Enter the IP subne
228. n the PVID table Use the exit command when you are finished configuring the VLAN Example sysname config vlan 2000 sysname config vlan name upl sysname config vlan fixed 10 12 sysname config vlan no untagged 10 12 sysname config vlan exit sysname config interface port channel 10 12 sysname config interface pvid 2000 sysname config interface exit 2 Configure your management VLAN Use the vlan lt vlan id gt command to create a VLAN VID 3 in this example for managing the switch and the switch will activate the new management VLAN Use the inactive command to disable the new management VLAN VES 1616F 3x Series User s Guide Chapter 34 IEEE 802 1Q Tagged VLAN Commands Example sysname config vlan 3 sysname config vlan inactive 34 2 Global VLAN1Q Tagged VLAN Configuration Commands This section shows you how to configure and monitor the IEEE 802 1Q Tagged VLAN 34 2 1 GARP Status Syntax show garp This command shows the switch s GARP timer settings including the join leave and leave all timers An example is shown next sysname show garp GARP Timer Join Timer 200 Leave Timer 600 Leave All Timer 10000 sysname 34 2 2 GARP Timer Syntax garp join lt msec gt leave lt msec gt leaveall lt msec gt where join lt msec gt This sets the duration of the Join Period timer for GVRP in millise
229. n the navigation panel to display the screen as shown 2 Atthe time of writing only Windows XP of the Microsoft operating systems supports it See the Microsoft web site for information on other Windows operating system support For other operating systems see its documentation If your operating system does not support 802 1x then you may need to install 802 1x client software VES 1616F 3x Series User s Guide Chapter 15 Port Authentication Figure 45 Port Authentication Port Authentication RADIUS Click here 802 1x Click here 15 2 1 Activate IEEE 802 1x Security From the Port Authentication screen display the configuration screen as shown See Section 15 1 on page 117 for background information Figure 46 Port Authentication gt 802 1x EAE Active Port 1 2 16 3 C 360 sec ds 15 On v 3600 seconds Port Authentication r Active Reauthentication Reauthentication Timer O On 3600 seconds O On 3600 seconds On D On 3600 seconds Cancel The following table describes the labels in this screen Table 35 Port Authentication gt 802 1x LABEL DESCRIPTION Active Select this check box to permit 802 1x authentication on the switch Note You must first enable 802 1x authentication on the switch before configuring it on each port Port This field displays a port number Active Select this checkbox to permit 80
230. nals in the pre defined HAM Handheld Amateur Radio radio band s Optional Band Specify whether the switch is to use the optional band for the upstream traffic For POTS the optional bands range from 25 to 138 K For ISDN the optional bands range from 138 276 K The optional bands are not supported in a VDSL1 device Line Type This displays the VDSL line type fastOrlnterleaved that means either fast or interleaved channel exists but only one works at a time Add Click Add to save the new profile to the switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Clear Click Clear to clear the fields to the factory defaults Name This field displays the descriptive name for this profile Payload Rate This field displays the configured maximum upstream and downstream payload rates in megabits per second SNR Margin This field displays the configured upstream and downstream signal to noise ration in decibels Applied Ports You can apply a profile to a VDSL port in the Port Setup screen This field displays the VDSL port number s to which this profile is applied Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cancel Click Cancel to clear the selected checkboxes in the Delete column 6 10 VDSL Alarm Profile Setup Alarm profiles define VDSL
231. nband defaul Sets the dynamic in band IP address 13 dhcp bootp lt cr gt inband defaul Releases the dynamic in band IP address 13 dhcp bootp release inband defaul Updates the dynamic in band IP address 13 dhcp bootp renew name lt name Specifies a name for identification purposes 13 str no fixed port Sets fixed port s to normal port s 13 list forbidden Sets forbidden port s to normal port s 13 lt port list gt inactive Enables the specified VLAN 13 ip address Deletes the IP address and subnet mask in 13 lt ip address gt this VLAN lt mask gt ip address Deletes the default gateway in this VLAN 13 default gateway ip address Sets the default in band interface to use a 13 inband default static IP address in this VLAN dhcp bootp The switch will use the default IP address of 0 0 0 0 if you do not configure a static IP address untagged Specifies the port s you want to tag all 13 lt port list gt outgoing frames transmitted with this VLAN Group ID normal port Specifies the port s to dynamically join this 13 list VLAN group using GVRP untagged Specifies the port s you don t want to tag all 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands VES 1616F 3x Series User s Guide Command Examples This chapter describes some commands in more detail 33 1 Overview These are commands that you may use frequently in maintaining your switch 33 2 show Commands
232. ng 0 0 0 00 00 Retrain 16 oo Training 0 0 0 00 00 Retrain zl Pollintemal s 40 Set Interval Stop Pot ALL 7 Clear Counter 26 10 Service Access Control Service Access Control allows you to decide what services you may use to access the switch You may also change the default service port and configure trusted computer s for each service in the Remote Management screen discussed later Click Access Control to go back to the main Access Control screen Figure 95 Access Control Service Access Control EEE Access Control Services Active Service Port Timeout Telnet iv B3 SSH 2 l2 FTP 2 Iu HTTP iv 80 s Minutes HTTPS Vv 443 ICMP iv SNMP Vv Apply Cancel The following table describes the fields in this screen Table 66 Access Control Service Access Control LABEL DESCRIPTION Services Services you may use to access the switch are listed here Active Select this option for the corresponding services that you want to allow to access the Switch VES 1616F 3x Series User s Guide Chapter 26 Access Control Table 66 Access Control Service Access Control continued LABEL DESCRIPTION Service Port For Telnet SSH FTP HTTP or HTTPS services you may change the default service port by typing the new port number in the Server Port field If you change the default port number then you will have to let people who wish to use t
233. ng Status Port Info Port NO 17 Link 1000M F Status FORWARDING LACP Disabled TxPkts 105 RxPkts 88 Errors 0 Tx KBs s 0 0 Rx KBs s 0 0 Up Time 0 00 42 TX Packet TX Packets 105 Multicast 0 Broadcast 3 Pause 0 RX Packet RX Packets 88 Multicast 0 Broadcast 0 Pause 0 Control 0 TX Collision Single 0 Multiple 0 Excessive 0 Late 0 Error Packet RX CRC 0 Length 0 Runt 0 Distribution 64 89 65 to 127 10 128 to 255 6 256 to 511 36 512 to 1023 5 1024 to 1518 48 Giant 0 Poll Interval s 40 Set Interval Stop VES 1616F 3x Series User s Guide 59 Chapter 5 System Status and Port Statistics The following table describes the labels in this screen Table 8 Status Port Details LABEL DESCRIPTION Port Info Link This field displays the speed either 10M for 10Mbps 100M for 100Mbps or 1000M for 1000Mbps and the duplex F for full duplex or H for half duplex It also shows the cable type Copper or Fiber for the combo ports Status If STP Spanning Tree Protocol is enabled this field displays the STP state of the port see Section 10 1 3 on page 102 for more information If STP is disabled this field displays FORWARDING if the link is up otherwise it displays STOP LACP This field shows if LACP is enabled on this port or not TxPkts This field shows the number of transmitted frames on this port RxPkts This field shows the number of received frames on this port
234. ng the Commands Table 81 Command Summary Configuration Mode continued COMMAND DESCRIPTION reauthenticate Sets a subscriber to periodically re enter his or her username and password to stay connected to a specified port reauth period reauth period Specifies how often a client has to re enter the username and password to stay connected to the specified port s 13 port security Enables port security on the Switch 13 lt port list gt Enables the port security feature on the specified port s 13 address limit number Disables MAC address learning on the specified port s 13 learn inactive Limits the number of dynamic MAC addresses that may be learned on a port 13 MAC freeze Disables MAC address learning and enables port security Note All previously learned dynamic MAC addresses are saved to the static MAC address table 13 queue level 0 7 priority 0 7 Sets the priority level to physical queue mapping 13 radius server host ip Sets the IP address of the external RADIUS server 13 acct port socket number key lt key string gt Sets the UDP port and shared key for the external RADIUS server 13 remote management index Enables a remote management setting 13 start addr ip end addr ip service telnet ftp http icmp snmp ssh
235. ngs they can be saved back to your computer under a filename of your choosing ZyNOS ZyXEL Network Operating System sometimes referred to as the ras file is the system firmware and has a bin filename extension Table 60 Filename Conventions FILE TYPE INTERNAL NAME EXTERNA L NAME DESCRIPTION Configuration File config This is the configuration filename on the switch Uploading the config file replaces the specified configuration file system including your switch configurations system related data including the default password the error log and the trace log Firmware ras bin This is the generic name for the ZyNOS firmware on the switch 25 10 1 1 Example FTP Commands ftp gt put firmware bin ras This is a sample FTP session showing the transfer of the computer file firmware bin to the switch ftp gt get config config cfg VES 1616F 3x Series User s Guide Chapter 25 Maintenance BS This is a sample FTP session saving the current configuration to a file called config cfg on your computer If your T FTP client does not allow you to have a destination filename different than the source you will need to rename them as the switch only recognizes config and ras Be sure you keep unaltered copies of both files for later use Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your de
236. ns an informational message siol oO BR Ww N o Debug The message is intended for debug level purposes 28 2 Syslog Setup Click Management and then Syslog in the navigation panel to display this screen The syslog feature sends logs to an external syslog server Use this screen to configure the device s system logging settings VES 1616F 3x Series User s Guide Chapter 28 Syslog Figure 98 Syslog Setup System Interface Switch IP ESSE D gt Syslog Logging type Authentication Syslog Server Setup Active Active Facility O local use 0 local use 0 local use 0 local use 0 local use 0 o EA e E m E m me Cancel The following table describes the labels in this screen Table 70 Syslog LABEL DESCRIPTION Syslog Select Active to turn on syslog system logging and then configure the syslog setting Logging Type This column displays the names of the categories of logs that the device can generate Active Select this option to set the device to generate logs for the corresponding category Facility The log facility allows you to send logs to different files in the syslog server Refer to the documentation of your syslog program for more details Apply Click Apply to save your changes back to the device Cancel Click Cancel to begin configuring this screen afresh 28 3 Syslog Server Setup C
237. nsists of two main components agents and a manager An agent is a management software module that resides in a managed switch this device An agent translates the local management information from the managed switch into a form compatible with SNMP The manager is the console through which network administrators perform network management functions It executes applications that control and monitor managed devices The managed devices contain object variables managed objects that define each piece of information to be collected about a switch Examples of variables include such as number of packets received node port status etc A Management Information Base MIB is a collection of managed objects SNMP allows a manager and agents to communicate for the purpose of accessing these objects SNMP itself is a simple request response protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operations VES 1616F 3x Series User s Guide Chapter 26 Access Control Table 62 SNMP Commands COMMAND _ DESCRIPTION Get Allows the manager to retrieve an object variable from the agent GetNext Allows the manager to retrieve the next object variable from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series of GetNext operations Set Allows the
238. nteres 189 Figure 95 Access Control Service ACCESS Control 1e eie seesiesee cett ea auus reca nay ya bte E pe ped aad 189 Figure 96 Access Control Remote Management eeeeeeeieseesssenee rennen ninh nan nna nita a ana ana 190 z 2 PEN CS c intinauetetaenadaonsceuaanenenlaasin aa oamnekenmneiss 191 IQUE BS feycocope 0 e 194 Figure 99 Syslog Servar SIUE usce iiokenbei pr tte odii pre bin ea pe osi xa pati d RP trt REC A KL Beda a dU Ri 195 Figure 100 Clustering Application Example 234 5 i deus ier beta Co RR PP ne pe bcd UNE prb Ex PE Eo uLa FA PI EE e 197 Figure TOT Cluster Management SIUE 411 eni sured aes ue Mee dag td i dae op ecu ed do lau ki 198 Figure 102 Cluster Management Cluster Member Web Configurator Screen seus 199 Figure 103 Example Uploading Firmware to a Cluster Member Switch ssseeeeeesss 199 Figure 104 Clustering Management Configuration 1 esee rennen ntn annua nita anna Eua 200 Figure 109 MAC Tapia FIONCIIBEC sinen d tap ep dRHU M UPREpRPM DUO be EDI RR ER MI Ee EHI V E e o E NN EE LIPPE 203 Figuie OG MAG Table iouis there aene RD Ead dito amin aden tete d c c d pe Fi dg a ata 204 Foure TOP ARP TOE se ise a waa bls eta ick aw acacia op ce St lena Mondes iaaadef cia eK e ecw avd 206 Figure 108 Pop Up BIOOKET TT M 269 ia OS Menet BUGS P 269 gs aw USL a 12 212 cH recreate rer fer or
239. number of good multicast packets transmitted Broadcast This field shows the number of good broadcast packets transmitted Pause This field shows the number of 802 3x Pause frames transmitted Rx Packet Rx Packets This field displays the number of packets received Multicast This field shows the number of good multicast packets received Broadcast This field shows the number of good broadcast packets received Pause This field shows the number of 802 3x Pause frames received Control This field shows the number of control received including those with CRC error but it does not include the 802 3x Pause frames Tx Collision Single This field shows the number of packets with 1 collision detected Multiple This field shows the number of packets with 2 to 15 collisions detected Excessive This field shows the number of packets with in excess of 15 collisions detected Late A late collision is counted when a device detects a collision after it has sent the 512th bit of its frame This field shows the number of times such a collision is detected Error Packet Rx CRC This field shows the number of frames with CRC Cyclic Redundant Check error s Length This field shows the number of frames with a length that was out of range Runt This field shows the number of frames received that were too short shorter than 64 octets including the ones with CRC errors Distribution 64 This field shows the number of packets including bad packets transmitted that wer
240. ny 15 minute period An alarm is triggered if this number is exceeded 15minsSESs Sets the number of Severely Errored 13 lt threshold gt Seconds SES errors allowed in any 15 minute period An alarm is triggered if this number is exceeded exit Exits from this command mode 13 initFailure Sets whether the device is to send an 13 on off initialization failure trap or not 32 11 7 vdsl profile Commands The following table lists the v s1 profile commands in configuration mode Table 85 vdsl profile Commands COMMAND DESCRIPTION P vdsl profile Enters VDSL profile command 13 name mode applicablestandard 2 Sets a standard your switch uses 13 for VDSL services 2 ETSI bandplan 2 Sets a VDSL band plan to use for 13 the line 2 Bandplan998 compatiblemode lt 1 4 gt Sets the starting band of the 13 frequency range used by VDSL services 1 none 2 640kHz 3 1100kHz 4 2200kHz deployment 1 2 Specify a VDSL deployment 13 scenario 1 FTTCab 2 FTTEx exit Exits from the VDSL profile 13 mode hamband mask Sets the device not to transmit 13 00000000000 00 signals in the pre defined HAM 000111100 gt Handheld Amateur Radio radio band s interleavedelay ds lt 0 255 gt Specify maximum interleave 13 delay for downstream traffic in the slow channel us lt 0 255 gt Specify maximum interleave 13 dela
241. o 192 168 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets Similarly to divide a 24 bit address into four subnets you need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 Each subnet contains 6 host ID bits giving 26 2 or 62 hosts for each subnet a host ID of all zeroes is the subnet itself all ones is the subnet s broadcast address Table 100 Subnet 1 LAST OCTET BIT IP SUBNET MASK NETWORK NUMBER VALUE IP Address Decimal 192 168 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address Lowest Host ID 192 168 1 1 192 168 1 0 Broadcast Address Highest Host ID 192 168 1 62 192 168 1 63 VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting Table 101 Subnet 2 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 64 IP Address Binary 11000000 10101000 00000001 01000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 64 Lowest Host ID 192 168 1 65 Broadcast Address 192 168 1 127 Highest Host ID 192 168 1 126 Table 102 Subnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET
242. o allows you to set the system time manually or get the current time and date from an external server when you turn on your switch The real time is then displayed in the switch logs The Switch Setup screen allows you to set up and configure global switch features The IP Setup screen allows you to configure a switch IP address subnet mask s and DNS domain name server for management purposes 6 2 System Information In the navigation panel click Basic Setting and System Info to display the screen as shown You can check the firmware version number and the device MAC address and monitor the switch temperature fan speeds and voltage in this screen VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Figure 19 System Info Systeminfo System Name VES 1616F 35 OS FAV Version V3 60 AIH O CO 01 25 2007 Modem Code FAW Version 1 0 5r111K004010 Ethernet Address 00 13 49 00 00 02 Hardware Monitor Temperature unit C z Temperature C Current MAX MIN Threshold Status IFES 50 0 50 0 29 0 81 0 Normal Switch 35 0 37 0 23 0 73 0 Norma ADT7463 35 0 36 0 25 0 88 0 ormal FAN Speed RPM Current MAX MIN Threshold Status FAN 3454 6101 3358 1000 ormal FAN2 3602 6308 3422 1000 orma FAN3 3483 6129 3327 1000 ormal FAN4 3400 7049 3199 1000 ormal Voltage V Current MAX MIN Threshold Status 2 5VIN 2 506 2 506 2 506 i B96 Norma 1 2VIN 1 201 1 201 1 189 i 6 Norma 3 3VIN 3 320 3 320 3 320 i 6 Normal 12 0VIN 12 031
243. ofile 30000 vlan vlan id Deletes the static VLAN entry 13 vlaniq gvrp Disables GVRP on the switch 13 port isolation Disables port isolation 13 vlan stacking Disables VLAN stacking 13 wfq fe spq Disables Strict Priority 13 Queuing on the fast Ethernet 10 100Mbps ports password password Change the password for 14 Enable mode policy name classifier Configures a policy A 13 classifier list classifier distinguishes traffic vlan lt vlan id gt into flows based on the egress port port configured criteria A policy num priority 0 7 rule ensures that a traffic flow I dscp lt 0 63 gt tos gets the requested treatment 0 7 bandwidth in the network lt bandwidth gt egress mask lt port list gt outgoing packet format lt tagged untagged gt out of profile dscp lt 0 63 gt forward action lt drop forward egressma sk gt queue action Xprio set prio queue prio replace tos diffserv action diff set tos diff replace priority diff set dscp outgoing mirror outgoing eport outgoing non unicast eport outgoing set vlan metering out of profile action change dscp drop forward set drop prec inactive gt help Displays command 13 information port access Enables 802 1x authentication 13 authenticator on the switch lt port list gt Enables 802 1x authentication 13 VES 1616F 3x Series User s Guide Chapter 32 Introduci
244. ofile DSCP Specify a new DSCP number between 0 and 63 if you want to replace or remark the DSCP number for out of profile traffic Action Specify the action s the switch takes on the associated classified traffic flow Forwarding Select No change to forward the packets Select Discard packet to drop the packets Select Do not drop the matching frame previously marked for dropping to retain the frames that were marked to be dropped before Priority Select No change to keep the priority setting of the frames Select Set the packet s 802 1 priority to replace the 802 1 priority field with the value you set in the Priority field Select Send the packet to priority queue to put the packets in the designated queue Select Replace the 802 1 priority field with IP TOS value to replace the 802 1 priority field with the value you set in the TOS field DiffServ Select No change to keep the TOS and or DSCP fields in the packets Select Set the packet s TOS field to set the TOS field with the value you configure in the TOS field Select Replace the IP TOS field with the 802 1 priority value to replace the TOS field with the value you configure in the Priority field Select Set the Diffserv Codepoint field in the frame to set the DSCP field with the value you configure in the DSCP field VES 1616F 3x Series User s Guide Chapter 19 Policy Table 43 Policy continued LABEL DESCRIPTION
245. ogically aggregate physical links to form one logical higher bandwidth link 14 1 Link Aggregation Overview Link aggregation trunking is the grouping of physical ports into one logical higher capacity link You may want to trunk ports if for example it is cheaper to use multiple lower speed links than to under utilize a high speed but more costly single port link However the more ports you aggregate then the fewer available ports you have A trunk group is one logical link containing multiple ports 14 1 1 Dynamic Link Aggregation The switch adheres to the IEEE 802 3ad standard for static and dynamic LACP port trunking The switch supports the link aggregation IEEE802 3ad standard This standard describes the Link Aggregate Control Protocol LACP which is a protocol that dynamically creates and manages trunk groups When you enable LACP link aggregation on a port the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups LACP also allows port redundancy that is if an operational port fails then one of the standby ports become operational without user intervention Please note that You must connect all ports point to point to the same Ethernet switch and configure the ports for LACP trunking LACP only works on full duplex links All ports in the same trunk group must have the same media type speed duplex mode and flow control settings Configure trunk grou
246. or more information Click Advanced Application and then Policy Rule in the navigation panel to display the screen as shown VES 1616F 3x Series User s Guide Chapter 19 Policy Figure 52 Policy GOLOTE Active O Name Example Classifier s General Metering VLAN ID Bandwidth Mbps EgressPort Port1 re lea Parameters Outgoing packet format for Egress port Tag C Untag Priority pz DSCP TOS o s Forwarding No change C Discard the packet C Do not drop the matching frame previously marked for dropping Priority No change C Setthe packet s 802 1 priority C Sendthe packetto priority queue o Replace the 802 1 priority field with the IP TOS value Diffserv No change C Setthe packet s TOS field Action C Replace the IP TOS field with the 802 1 priority value C Setthe Diffserv Codepoint field in the frame Outgoing Send the packetto the mirror port I Sendthe packetto the egress port Sendthe matching frames broadcast or DLF multicast marked for dropping orto be sentto the CPU to the egress port Setthe packet s VLAN ID Metering Enable Drop the packet Out of profile actio Change the DSCP value Do not drop the matching frame previously marked for dropping Add Cancel Clear Index Active Name Classifier s Delete 1 Yes Test Example rH Delete Cancel The following table describes the labels in this screen VES 1616F 3x Series User
247. ossible though unlikely that someone may be trying to intercept your communication with this web site If you suspect the certificate shown does not belong to 192 168 1 1 please cancel the connection and notify the site administrator View Certificate Cancel Help 26 9 3 The Main Screen After you accept the certificate and enter the login username and password the switch main screen appears The lock displayed in the bottom right of the browser status bar denotes a secure connection VES 1616F 3x Series User s Guide Chapter 26 Access Control Figure 94 Example Lock Denoting a Secure Connection BEE File Edit View Favorites Tools Help Back gt OA A Reach XjFavortes media S D 5 c4 8 Address https 192 168 1 1 z Coo Great E Links Status Logout B Help OD VDSL Summary E Application System Up Time 6 58 13 Routing Protocol Port PayloadRate State TxKBis RxKBis UpTime Retrain Management 1 oro Training 0 0 0 00 00 Retrain 2 oo Training 0 0 0 00 00 Retrain 2 oo Training 0 Du 0 00 00 Retrain 4 ovo Training 0 Du 0 00 00 Retrain 5 oo Training 0 0 0 00 00 Retrain B oo Training 0 0 0 00 00 Retrain i o0 Training 0 Du 0 00 00 Retrain 8 ovo Training 0 D 0 00 00 Retrain 8 0 0 Training 0 0 0 00 00 Retrain 10 oo Training 0 0 0 00 00 Retrain 1i 0 0 Training 0 0 0 00 00 Retrain 12 0 0 Training D D 0 00 00 Retrain 12 ovo Training 0 0 0 00 00 Retrain 14 oo Traini
248. ost lost CENS Ifyou disable multiple login while another administrator is accessing the switch via telnet the switch will immediately log out the administrator and disconnect the telnet session The following error message displays multi login is disabled please exit immediately Connection to host lost CNS 26 2 The Access Control Main Screen Click Management gt Access Control in the navigation panel to display the main screen as shown Use these links to configure remote management options and create user accounts on the switch VES 1616F 3x Series User s Guide Chapter 26 Access Control Figure 83 Access Control ED Access Control SNMP Click Here Logins Click Here Service Access Control Click Here Remote Management Click Here 26 3 About SNMP Simple Network Management Protocol SNMP is an application layer protocol used to manage and monitor TCP IP based devices SNMP is used to exchange management information between the network management system NMS and a network element NE A manager station can manage and monitor the switch through the network via SNMP version one SNMPv1 and or SNMP version 2c The next figure illustrates an SNMP management operation SNMP is only available if TCP IP is configured Figure 84 SNMP Management Model Manager b Y Agent Agent Agent Managed Device Managed Device Managed Device An SNMP managed network co
249. owing figure shows an example where two multicast groups News and Movie are configured for the multicast VLAN 200 VES 1616F 3x Series User s Guide Chapter 21 Multicast Figure 65 MVR Group Configuration Example OIE D Multicast VLAN ID 200 e 5 Name Start Address End Address Movie 230 1 2 50 230 1 2 60 Add Cancel MVLAN Name Start Address End Address Delete All Delete Group 200 L1 News 2241 4 10 224 1 4 50 A Delete Cancel VES 1616F 3x Series User s Guide Chapter 21 Multicast VES 1616F 3x Series User s Guide Differentiated Services This chapter shows you how to configure Differentiated Services DiffServ on the switch 22 1 DiffServ Overview Quality of Service QoS is used to prioritize source to destination traffic flows All packets in the flow are given the same priority You can use CoS class of service to give different priorities to different packet types DiffServ is a class of service CoS model that marks packets so that they receive specific per hop treatment at DiffServ compliant network devices along the route based on the application types and traffic flow Packets are marked with DiffServ Code Points DSCPs indicating the level of service desired This allows the intermediary DiffServ compliant network devices to handle the packets differently depending on the code points without the need to negotiate paths or remember state informa
250. ows how frames are forwarded or filtered across the switch s ports It shows what device MAC address belonging to what VLAN group if any is forwarded to which port s and whether the MAC address 1s dynamic learned by the switch or static manually entered in the Static MAC Forwarding screen The switch uses the MAC table to determine how to forward frames See the following figure 1 The switch examines a received frame and learns the port on which this source MAC address came 2 The switch checks to see if the frame s destination MAC address matches a source MAC address already learned in the MAC table Ifthe switch has already learned the port for this MAC address then it forwards the frame to that port Ifthe switch has not already learned the port for this MAC address then the frame is flooded to all ports Too much port flooding leads to network congestion Ifthe switch has already learned the port for this MAC address but the destination port is the same as the port it came in on then it filters the frame Figure 105 MAC Table Flowchart 4 Is destination MAC address in the MAC Table Yes Forward to all ports Is the outgoing port different from the incoming port Filter this Forward to frame outgoing port VES 1616F 3x Series User s Guide Chapter 30 MAC Table 30 2 Viewing the MAC Table Click Management gt MAC Table in the navigation panel BS Click a button in th
251. p IP Setup Port Setup VDSL Profile Setup VDSL Alarm Profile Setup VDSL PSD Profile Setup VLAN Static MAC Forwarding Filtering Spanning Tree Protocol Bandwidth Control Broadcast Storm Control Mirroring Link Aggregation Port Authentication Port Security Queuing Method Classifier Policy Rule VLAN Stacking Multicast DiffServ Static Routing DHCP Relay Maintenance Access Control Diagnostic Syslog Cluster Management MAC Table ARP Table The following table lists the various web configurator screens within the sub links VES 1616F 3x Series User s Guide 47 Chapter 4 The Web Configurator Table 4 Web Configurator Screen Sub links Details VDSL Profile Setup VDSL Alarm Profile Spanning Tree Protocol Status IGMP Filtering Profile Multicast Status MVR Group Configuration DiffServ DSCP Setting ROUTING BASIC SETTING ADVANCED APPLICATION APPLICATION MANAGEMENT System Info VLAN Status Static Routing Maintenance General Setup VLAN Port Setting DHCP Relay Remote Device Upgrade Switch Setup Static VLAN VDSL Chip Reset IP Setup Static MAC Forwarding Remote Device Reset Port Setup Filtering Firmware Upgrade Restore Configuration Backup Configuration Load Factory Default Setup Spanning Tree Protocol Reboot System VDSL PSD Profile Gonfiguration Access Control Bandwidth Control Setup SNMP Broadcast Storm Control Login
252. p for identification purposes VLAN Group ID Enter the VLAN ID for this static VLAN the valid range is between 1 and 4094 Port The port number identifies the port you are configuring Control Select Normal for the port to dynamically join this VLAN group using GVRP This is the default selection Select Fixed for the port to be a permanent member of this VLAN group Select Forbidden if you want to prohibit the port from joining this VLAN group Tagging Select TX Tagging if you want the port to tag all outgoing frames that were previously untagged transmitted with this VLAN Group ID Add Click Add to add the settings as a new entry in the summary table below VES 1616F 3x Series User s Guide Chapter 7 VLAN Table 19 VLAN gt Static VLAN continued LABEL DESCRIPTION Cancel Click Cancel to reset the fields Clear Click Clear to start configuring the screen again VID This field displays the ID number of the VLAN group Click the number to edit the VLAN settings Active This field indicates whether the VLAN settings are enabled Yes or disabled No Name This field displays the descriptive name for this VLAN group Delete Click Delete to remove the selected entry from the summary table Cancel Click Cancel to clear the Delete check boxes 7 5 3 Configure VLAN Port Setting To configure the VLAN settings on a port click the VLAN Port Setting link in the VLAN Status screen
253. p to 32 bytes this is optional 24 2 Configuring DHCP Relay Click Routing Protocol gt DHCP Relay in the navigation panel Use this screen to enable DHCP relay on the switch and specify the IP address es of the DHCP server s VES 1616F 3x Series User s Guide Chapter 24 DHCP Relay Figure 71 DHCP Relay ED DHCP Relay ng Active Remote DHCP Server 1 Remote DHCP Server 2 Remote DHCP Server 3 Relay Agent Information Information Option 82 M VES 1518F 35 Apply Cancel The following table describes the labels in this screen Table 57 DHCP Relay LABEL DESCRIPTION Active Select this check box to enable DHCP relay settings Remote DHCP Enter the IP address es of the DHCP server s Server 1 3 Relay Agent Select the Option 82 check box to have the switch add information slot number port Information number and VLAN ID to client DHCP requests that it relays to a DHCP server Information This read only field displays the system name you configure in the General Setup Screen Select the check box for the switch to add the system name to client DHCP requests that it relays to a DHCP server Apply Click Apply to save the changes Cancel Click Cancel to reset the fields to your previous configurations VES 1616F 3x Series User s Guide PART V Management Maintenance 169 Access Control 179 Diagnostic 191 Syslog 193 Cluster Managemen
254. panel to display the screen as shown next Figure 40 Broadcast Storm Control OE EXE a Active C Port Broadcast pkt s Multicast pktis DLF pkt s 1 Oo p rH 0 A jo 2 r p r 0 r p 3 r i0 0 p cn e ce TIT TIT Apply Cancel The following table describes the labels in this screen Table 29 Broadcast Storm Control LABEL DESCRIPTION Active Select this check box to enable broadcast storm control on the switch Port This field displays a port number VES 1616F 3x Series User s Guide Chapter 12 Broadcast Storm Control Table 29 Broadcast Storm Control continued LABEL DESCRIPTION Broadcast pkt s Select this option and specify how many broadcast packets the port receives per second Multicast pkt s Select this option and specify how many multicast packets the port receives per second DLF pkt s Select this option and specify how many destination lookup failure DLF packets the port receives per second Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh VES 1616F 3x Series User s Guide Mirroring This chapter shows you how to configure mirroring on the switch 13 1 Mirroring Overview Port mirroring allows you to copy a traffic flow to a monitor port the port you copy the traffic to in order that you can examine the traffic
255. pe N YE EUbSIM cac Een e M Irae 149 Figure 60 MVR Multicast Television EXImple isis cesee eme eoru rhe conn denssccmeadanse aiian ioentcemenaauvyyens 150 UI CINE P TN 151 Figure 62 MYR gt Group arr an C P 153 Figure 63 MYR Coniguration Example 5 5m Sa ssa ws cota aot Fat Raw daa sa aas e ac d doa OR 154 Figure 64 MVR Configuration Example secessit ai ed d En in a Ke a a c 154 Figure 65 MVR Group Configuration EXample cessisset tnnt errem natia ro duni tiere tI serrian 155 Figure 66 DiffServ Differentiated Service Field esseeeeseeseeeeeee nennen nnn nnne nnn 157 Figure 07 DINSery Menor Exaile det T 158 Figure GO DINGE t SS SX X S X 158 Figure 69 DiffServ gt DSCP Setting cunexcxmienelaxtexkksiodadeskeniud en e ARR RE Rod n bas ened a NB KR RR Seana aba specs 159 gs mitis 0s Rp perenne ete ener re rem secre V II 163 2 FiNse e 166 PRIUS ge cranii o TN T RREN 169 Figure 73 Load Factory Default Conformation ieciecssi secet terere dtt pota cadet kept t tt sssini seniii iani 170 Figure 74 Los Facto Default SENE qusiiseetzcadasvedlxd olg toad god ds adt o muna pde dau ptr dd Ie 170 SECWidu ees4 qp mE D UNS m mE 170 Figure 76 Reboot Systemi SIAM e 171 Figure 77 Maintenance Remote Device Upgrade cccccescccceeeenecccceesesecceceeseeeeeneaeneeeeeneaeneeeeenaneneaed 171 Figure 9 Maintenance YD
256. ples 33 8 4 no port access authenticator Syntax no port access authenticator no port access authenticator lt port list gt reauthenticate no port access authenticator lt port list gt where Disables port authentication on the switch lt port list gt Disables the re authentication mechanism on the listed port s reauthenticate lt port list gt Disables authentication on the listed ports An example is shown next Disable authentication on the switch Disable re authentication on ports one three four and five Disable authentication on ports one six and seven sysname config no port access authenticator sysname config no port access authenticator 1 3 5 reauthenticate sysname config no port access authenticator 1 6 7 33 8 5 no ssh Syntax no ssh key lt rsal rsa dsa gt no ssh known hosts lt host ip gt no ssh known hosts lt host ip gt 1024 ssh rsa ssh dsa where key rsal rsa dsa Disables the secure shell server encryption key Your switch supports SSH versions 1 and 2 using RSA and DSA authentication known hosts lt host ip gt Remove specific remote hosts from the list of all known hosts known hosts lt host ip gt Remove remote known hosts with a specified public key 1024 ssh rsa ssh dsa 1024 bit RSAT RSA or DSA An example is shown next Disable the secure shell RSA1 encryption key Remove the remote host with IP address 172 165 1 8 from the list of
257. port alarm thresholds The device sends an alarm trap and generates a syslog entry when the thresholds of the alarm profile are exceeded Click Basic Settings and VDSL Alarm Profile Setup in the navigation panel to display the screen as shown VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Figure 25 VDSL Alarm Profile Setup VDSL Alarm Profile Setup ng Name DEFVAL 15 Minute LOFs Threshold 0 15 Minute LOSs Threshold 0 15 Minute LPRs Threshold 0 15 Minute LOLs Threshold 0 15 Minute ESs Threshold 0 15 Minute SESs Threshold 0 15 Minute UASs Threshold 0 Initialization Failure Off v Add Cancel Clear Name LOSs ESs SESS Init Applied Ports Delete DEFVAL 0 0 0 Off 1 16 E Delete Cancel The following table describes the labels in this screen Table 15 VDSL Alarm Profile Setup LABEL DESCRIPTION Name Enter a descriptive name for identification purposes 15 Minute LOFs Enter the number of Loss Of Framing seconds LOFs that are permitted to occur Threshold within 15 minutes 15 Minute LOSs Enter the number of Loss Of Signals seconds LOSs that are permitted to occur Threshold within 15 minutes 15 Minute LPRs Enter the number of Loss of PoweR seconds LPRs is permitted to occur within Threshold 15 minutes 15 Minute LOLs Enter the number of Loss Of Link seconds LOLs that are permitted to occur Threshold within 15 minutes 15 Minute ESs Enter
258. ppendix on page 275 for Telco50 pin assignments VES 1616F 3x Series User s Guide Chapter 3 Hardware Overview 3 1 2 Gigabit Ethernet Ports There are two pairs of Gigabit Ethernet mini GBIC ports The mini GBIC ports have priority over the Gigabit ports This means that if a mini GBIC port and the corresponding Gigabit port are connected at the same time the Gigabit port will be disabled The speed of the Gigabit Ethernet mini GBIC ports can be 100Mbps or 1000Mbps and the duplex mode can be half duplex at 100 Mbps or full duplex The ports are auto negotiating and auto crossover An auto negotiating port can detect and adjust to the optimum Ethernet speed 10 100 1000Mpbs and duplex mode full duplex or half duplex of the connected device An auto crossover auto MDI MDI X port automatically works with a straight through or crossover Ethernet cable 3 1 2 1 Default Ethernet Settings The factory default negotiation settings for the Ethernet ports on the switch are Speed Auto Duplex Auto Flow control on Trunking Disabled 3 1 3 Mini GBIC Slots These are slots for mini GBIC Gigabit Interface Converter transceivers A transceiver is a single unit that houses a transmitter and a receiver The switch does not come with transceivers You must use transceivers that comply with the Small Form factor Pluggable SFP Transceiver MultiSource Agreement MSA See the SFF committee s INF 80741 specification Rev 1 0
259. properly connected access the You may have exceeded the maximum number of concurrent Telnet sessions Close switch using other Telnet session s or try connecting again later Telnet Check that you have enabled Telnet service access If you have configured a secured client IP address your computer s IP address must match it Refer to the chapter on access control for details cannot The administrator username is admin The default administrator password is 1234 access the The username and password are case sensitive Make sure that you enter the correct web password and username using the proper casing If you have changed the password configurator and have now forgotten it you will need to upload the default configuration file This restores all of the factory defaults including the password If you have configured more than one IP interface make sure another administrator is NOT logged into the web configurator on a different IP interface using the same account Check that you have enabled web service access If you have configured a secured client IP address your computer s IP address must match it Refer to the chapter on access control for details Your computer s and the switch s IP addresses must be on the same subnet See the following section to check that pop up windows JavaScripts and Java permissions are allowed VES 1616F 3x Series User s Guide 267 Chapter 35 Troubleshooting
260. ps or LACP before you connect the Ethernet switch to avoid causing network topology loops VES 1616F 3x Series User s Guide 113 Chapter 14 Link Aggregation 14 1 2 Link Aggregation ID LACP aggregation ID consists of the following information Table 31 Link Aggregation ID Local Switch SYSTEM PRIORITY MAC ADDRESS KEY PORT PRIORITY PORT NUMBER 0000 00 00 00 00 00 0000 00 0000 Table 32 Link Aggregation ID Peer Switch SYSTEM PRIORITY MAC ADDRESS KEY PORT PRIORITY PORT NUMBER 0000 00 00 00 00 00 0000 00 0000 14 2 Link Aggregation Status Click Advanced Application gt Link Aggregation in the navigation panel The Link Aggregation Control Protocol Status screen displays by default This screen displays LACP group aggregator ID member port number s and the group status Figure 42 Link Aggregation Control Protocol Status c Link Aggregation Control Protocol Status Configuration Index Aggregator ID Enabled Ports Synchronized Ports 0000 00 00 00 00 00 00 0000 00 0000 0000 00 i 00 00 00 00 00 0000 00 0000 Polling Interval s 40 Set Interval Stop The following table describes the labels in this screen Table 33 Link Aggregation Control Protocol Status LABEL DESCRIPTION Index This field displays the trunk ID to identify a trunk group that is one logical link containing multiple ports Aggregator ID This field displays the link aggregation ID Link
261. r the router s LAN port Figure 125 Conflicting Computer and Router IP Addresses Example Qo um um um Um Um UN UN D t 1 t 192 168 1 1 LAN WAN E Mr a pi lt I E 3 AE a e qu 8 192 168 1 1 Internet i ua VES 1616F 3x Series User s Guide Legal Information Copyright Copyright 2007 by ZyXEL Communications Corporation The contents of this publication may not be reproduced in any part or as a whole transcribed stored in a retrieval system translated into any language or transmitted in any form or by any means electronic mechanical magnetic optical chemical photocopying manual or otherwise without the prior written permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Trademarks ZyNOS ZyXEL Network Operating System is a registered trademark of ZyXEL Communications Inc Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners Certifications
262. r 35 Troubleshooting 274 VES 1616F 3x Series User s Guide Product Specifications These are the switch product specifications Table 91 Product Specifications General Product Specifications Standards IEEE802 3 10BASE T Ethernet twisted pair copper IEEE802 3u 100BASE TX Fast Ethernet twisted pair copper ANSI IEEE802 3 Auto negotiation IEEE802 3x Flow Control IEEE802 1p Priority Queues IEEE802 1Q Tagged VLAN VDSL One Telco connector for16 VDSL or POTS ISDN lines Duplex Method DMT FDD Band Plan 998 Tone spacing 4 3125 8 625 KHz 50 ppm Upstream speed 100 Mbps or 50 Mbps VDSL1 or 30 Mbps VDSL2 Downstream speed 100 Mbps VDSL1 or 50 Mbps VDSL2 Optional band 25 138 K VES 1616F 34 138 276 K VES 1616F 35 Interfaces Two Gigabit mini GBIC uplink ports One Console port DB 9 female Telco 50 for VDSL and POTS ISDN lines Performance and Management Specifications VDSL Fixed Rate and Rate Adaptive Power back off Interleave delay setting RFI configuration Resynchronization Diagnostics The switch can perform self diagnostic tests These tests check the operation of the following Capabilities circuits FLASH memory DRAM LAN port local and remote loopback test Per VDSL port loopback test HTP items VLAN IEEE 802 1Q tag based VLAN 4094 Max Port based VLAN Up to 256 VLAN groups Multicast VLAN Registration MVR 3 groups VES 1616F 3x S
263. r a descriptive name up to 32 printable ASCII characters for identification purposes Classifier s This field displays the name s of the classifier to which this policy applies Delete Click Delete to remove the selected entry from the summary table Cancel Click Cancel to clear the Delete check boxes 19 3 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth and discard out of profile traffic on a traffic flow classified using the Example classifier refer to Section 18 3 on page 130 VES 1616F 3x Series User s Guide Chapter 19 Policy Figure 53 Policy Example Active iv Name Test Classifier s Metering VLAN ID Bandwidth 1000 Mbps Out of Profile Port 1 63 EgressPort hd DSCP Parameters Outgoing packet format for Egress port Tag Untag Priority DSCP TOS Forwarding No change C Discard the packet C Do notdrop the matching frame previously marked for dropping Priority No change C Setthe packet s 802 1 priority C Send the packetto priority queue C Replace the 802 1 priority field with the IP TOS value Diffserv No change C Setthe packet s TOS field Action C Replace the IP TOS field with the 802 1 priority value C Setthe Diffserv Codepoint field in the frame Outgoing Send the packet to the mirror port Send the packet to the egress port Send the matching frames broadcast or DLF multic
264. r situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask If the ISP did not explicitly give you an IP network number then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 The Internet Assigned Number Authority LANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise You must also enable Network Address Translation NAT on the Switch Once you have decided on the network number pick an IP address for your Switch that 1s easy to remember for instance 192 168 1 1 but make sure that no other device on your network is using that IP address The subnet mask specifies the network number portion of an IP address Your Switch will compute the subnet mask automatically based on the IP address that you entered You don t need to change the subnet mask computed by the Switch unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your networks are isolated from the Internet running only between two branch offices for example you can assign any IP addresses to the hosts without problems However the Int
265. r the IP address of the gateway The gateway is an immediate neighbor of your Address switch that will forward the packet to the destination The gateway must be a router on the same segment as your switch VES 1616F 3x Series User s Guide Chapter 23 Static Route Table 56 Static Routing continued LABEL DESCRIPTION Metric The metric represents the cost of transmission for routing purposes IP routing uses hop count as the measurement of cost with a minimum of 1 for directly connected networks Enter a number that approximates the cost for this link The number need not be precise but it must be between 1 and 15 In practice 2 or 3 is usually a good number Add Click Add to insert a new static route Cancel Click Cancel to reset the above fields to your previous configuration Clear Click Clear to set the above fields back to the factory defaults Index This field displays the index number of the route Click a number to edit the static route entry Active This field displays Yes when the static route is activated and NO when it is deactivated Name This field displays the descriptive name for this route This is for identification purpose only Destination This field displays the IP network address of the final destination Address Subnet Mask This field displays the subnet mask for this destination Gateway This field displays the IP address of the gatewa
266. r you define the classifier you can specify actions or policy to act upon the traffic that match the rules To configure policy tules refer to Chapter 19 on page 133 Click Advanced Application and Classifier in the navigation panel to display the configuration screen as shown VES 1616F 3x Series User s Guide Chapter 18 Classifier Figure 50 Classifier Name VLAN Layer 2 Layer 3 Active O Packet Format fall C Any c Ethernet fall Type Source Destination MAC Address c vac B B B BM B DSCP IP Protocol C Others Dec Source Any Destination G Any C Others Hex Any MAC Address C wc NA RR RR RR B RR Port All Port Any G Any c c fall I Establish Only IP Address pooo 0 0 0 0 Address Prefix Socket Number IP Address pooo 0 0 0 0 Address Prefix Socket Number Cc Index 1 Active Yes Add Cancel Clear Name Rule Delete Example SrcMac 00 50 ba ad 4f 81 SrcPort port 2 ri Delete Cancel The following table describes the related labels in this screen Table 40 Classifier LABEL DESCRIPTION Active Select this option to enable this rule Name Type a descriptive name up to 32 printable ASCII characters for this rule This is for identification purpose only Packet Format Specify the format of the packet Choices are All 802 3 tagged 802 3 untagged Ethernet Il tagged and
267. ransmitting Single This is a count of successfully transmitted packets for which transmission is inhibited by exactly one collision Multiple This is a count of successfully transmitted packets for which transmission was inhibited by more than one collision Excessive This is a count of packets for which transmission failed due to excessive collisions Excessive collision is defined as the number of maximum collisions before the retransmission count is reset Late This is the number of times a late collision is detected that is after 512 bits of the packets have already been transmitted VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics Table 8 Status Port Details continued LABEL DESCRIPTION Error Packet The following fields display detailed information about packets received that were in error RX CRC This field shows the number of packets received with CRC Cyclic Redundant Check error s Length This field shows the number of packets received with a length that was out of range Runt This field shows the number of packets received that were too short shorter than 64 octets including the ones with CRC errors Distribution 64 This field shows the number of packets including bad packets received that were 64 octets in length 65 127 This field shows the number of packets including bad packets received th
268. re number number Sets the maximum number IGMP 13 groups allowed igmp Enables the IGMP immediate leave 13 immediate function leave igmp querier Sets the IGMP querier mode of a port 13 mode auto uses the port as an IGMP query auto fixed e port after it receives IGMP query dge packets fixed always uses the port as an IGMP query port edge stops the switch from using the port as an IGMP query port inactive Disables the specified port s on the 13 Switch ingress check Enables the device to discard 13 incoming frames for VLANs that are not included in a port member set intrusion Enables intrusion lock on a port anda 13 lock port cannot be connected again after you disconnected the cable mirror Enables port mirroring on the port s 13 dir Enables port mirroring for incoming 13 lt ingress egress bot outgoing or both incoming and h outgoing traffic Port mirroring copies traffic from one or all ports to another or all ports for external analysis multicast Enables the port s multicast limit 13 limit lt pkt s gt Sets how many multicast packets the 13 port s receives per second name port Sets a name for the port s Enter a 13 VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 82 interface port channel Commands continued COMMAND DESCRIPTION P no bandwidth limit Disables bandwidth limit on th
269. roups 1 and 2 on all intermediary switches C D and E otherwise they will drop frames with unknown VLAN group tags However with VLAN Trunking enabled on a port s in each intermediary switch you only need to create VLAN groups in the end devices A and B C D and E automatically allow frames with VLAN group tags 1 and 2 VLAN groups that are unknown to those switches to pass through their VLAN trunking port s Figure 28 Port VLAN Trunking 000 Sm Nep EB LE vi v2 Nem c 7 4 Select the VLAN Type Select a VLAN type in the Switch Setup screen Figure 29 Switch Setup Select VLAN Type Switch Setup 802 10 C PortBased IGMP Snooping Active r VLAN Type ines Aine Timo 3nn a e 7 5 Static VLAN Use a static VLAN to decide whether an incoming frame on a port should be e sent toa VLAN group as normal depends on its VLAN tag sent to a group whether it has a VLAN tag or not blocked from a VLAN group regardless of its VLAN tag You can also tag all outgoing frames that were previously untagged from a port with the specified VID VES 1616F 3x Series User s Guide Chapter 7 VLAN 7 5 1 Static VLAN Status Click Advanced Application gt VLAN from the navigation panel to display the VLAN Status screen as shown next Use this screen to view the current static VLAN group s you have configured Refer to Section 7 1 on page 87 for background information Figure 30 VLAN gt VLAN Status
270. rted MIB 181 supported version trap 181 trap destination 182 SNR 76 SP TPID Service Provider Tag Protocol Identifier See SP TPID spanning tree Spanning Tree Protocol STP 101 Spanning Tree Protocol See STP SPN 139 SPQ SSH 212 how it works 184 implimentation 185 login example 185 requirement 185 standard port 185 VES 1616F 3x Series User s Guide 307 Index version supported 185 SSL Standards 275 standby port 113 stastic VLAN port setup 92 static MAC address 97 121 Static MAC forwarding 97 static MAC forwarding 97 static route 163 destination IP address 163 metric 164 static VLAN acceptable frame type 93 Control 91 create 91 ingress check 92 port isolation 92 status 90 tagging 91 Status 46 LED 40 VLAN 90 status 53 Ethernet port detail 59 port 53 STP 103 VLAN port detail 55 STP 101 Bridge ID 103 bridge priority 104 designated bridge 102 forwarding delay 105 Hello BPDU 102 hello time 104 How it works 102 max age 102 105 path cost 101 105 port priority 105 port state 102 root path cost 102 root port 102 setup 104 status 103 Terminology 101 terminology 101 Strict Priority Queuing See SPQ subnet 285 subnet mask 286 subnetting 288 Switch lockout 50 Switch reset 51 switch setup 68 syntax conventions 4 sys Commands examples 243 251 253 sys log disp 253 syslog 193 log type 194 protocol 193 server setup 194 setup 193 severity level 193 system date 65 system information
271. s 21 5 MVR Overview Multicast VLAN Registration is designed for applications such as Media on Demand MoD that use multicast traffic across a service provider network MVR allows one single multicast VLAN to be shared among different subscriber VLANs on the network While isolated in different subscriber VLANs connected devices can subscriber to and unsubscribe from the multicast stream in the multicast VLAN This improves bandwidth utilization with reduced multicast traffic in the subscriber VLANs and simplifies multicast group management You must enable IGMP snooping to use MVR However MVR only responds to IGMP join and leave control messages from multicast groups that are configured under MVR Join and leave reports from other multicast groups are managed by IGMP snooping The following figure shows a network example The subscriber VLAN 1 2 and 3 information is hidden from the streaming media server S In addition the multicast VLAN information is only visible to the switch and S Figure 59 MVR Network Example VES 1616F 3x Series User s Guide Chapter 21 Multicast 21 5 1 Types of MVR Ports In MVR a source port is a port on the switch that can send and receive multicast traffic in a multicast VLAN while a receiver port can only receive multicast traffic Once configured the switch maintains a forwarding table that matches the multicast stream to the associated multicast group 21 5 2 MVR Mode
272. s You can set your switch to operate in either dynamic or compatible mode In dynamic mode the switch sends IGMP leave and join reports to the other multicast devices such as multicast routers or servers in the multicast VLAN This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to the receiver ports In compatible mode the switch does not send any IGMP reports In this case you must manually configure the forwarding settings on the multicast devices in the multicast VLAN 21 5 3 How MVR Works The following figure shows a multicast television example where a subscriber device such as a computer in VLAN 1 receives multicast traffic from the streaming media server S via the switch Multiple subscriber devices can connect through a port configured as the receiver on the switch When the subscriber selects a television channel computer A sends an IGMP report to the switch to join the appropriate multicast group If the IGMP report matches one of the configured MVR multicast group addresses on the switch an entry is created in the forwarding table on the switch This maps the subscriber VLAN to the list of forwarding destinations for the specified multicast traffic When the subscriber changes the channel or turns off the computer an IGMP leave message is sent to the switch to leave the multicast group The switch sends a query to VLAN 1 on the receiver port in this cas
273. s Mirroring Service Access Control Link Aggregation Status Remote Management Link Aggregation Diagnostic Configuration Syslog Port Authentication Cluster Management Sova MAC Table Ax Port Security RISE TARE Queuing Method Classifier Policy Rule VLAN Stacking Multicast The following table describes the links in the navigation panel Table 5 Navigation Panel Links LINK DESCRIPTION Basic Settings System Info This link takes you to a screen that displays general system and hardware monitoring information General Setup This link takes you to a screen where you can configure general identification information about the switch Switch Setup This link takes you to a screen where you can set up global switch parameters such as VLAN type MAC address learning IGMP snooping GARP and priority queues IP Setup This link takes you to a screen where you can configure the IP address subnet mask necessary for switch management and DNS domain name server Port Setup This link takes you to screens where you can configure settings for individual switch ports VDSL Profile This link takes you to a screen where you can configure VDSL profiles Setup VES 1616F 3x Series User s Guide Chapter 4 The Web Configurator Table 5 Navigat ion Panel Links continued LINK DESCRIPTION Profile Setup VDSL Alarm This link takes you to a screen where you can conf
274. s swaps the sender and target pairs and unicasts the answer directly back to the requesting machine ARP updates the ARP Table for future reference and then sends the packet to the MAC address that replied 31 2 Viewing the ARP Table Click Management gt ARP Table in the navigation panel to open the following screen Use the ARP table to view IP to MAC address mapping s VES 1616F 3x Series User s Guide Chapter 31 ARP Table Figure 107 ARP Table Index 1 ED ARP Table g IP Address MAC Address Type 172 23 37 116 00 0f fe 32 b4 12 dynamic The following table describes the labels in this screen Table 77 ARP Table LABEL DESCRIPTION Index This is the ARP Table entry number IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below MAC Address This is the MAC address of the device with corresponding IP address above Type This shows whether the MAC address is dynamic learned by the switch or static manually entered in the Static MAC Forwarding screen VES 1616F 3x Series User s Guide PART VII Commands Troubles Introducing the Commands 209 Command Examples 243 IEEE 802 1Q Tagged VLAN Commands 259 Troubleshooting 267 Product Specifications 275 207 Introducing the Commands This chapter introduces the commands and gives a summary of command
275. s Contool CIV er 179 Table G2 SNMP COMMAS sanninna E E 181 TE S O NME TapE i sec PP AIEA A a su la 181 Table 64 Access Control SNMP 205 acce didt dede dnd aed non ANER ven p eiTe aa D a La Dx Doha d ENA 182 Table 65 Access Control LOGINS 22e ieiescceriseesaeit etico r stuba eit att vL ke td A O 183 Table 66 Access Control Service Access Control 0 c ccccccssenteceeeesenseeeeeeeenneeeececenseeeeeeeenneseeecesnneees 189 Table 67 Access Control Remote Management 3 3 correre pedea erF erp rey bk ERR dS EFE TER eY rH Rey be EER Id ERG 190 Bs DER i dyads 191 Table 69 Syslog Seventy Levels 2 ener pas UR ene ERE ab ei enata ed RSS Fe dla epu kp Le E sa p in 193 Was PS O c 194 Table 7 1 Syslog Server SOUD sesini oaee A PRU d E E E ad ioa Ltd Het i aii 195 Table 72 ZyXEL Clustering Management Specifications sssssssssssssssssssseeeenenne 197 Table 73 Cluster Management Status 2s erit ed dtt tdi tht additur dtd xe ddr i dd adita 198 Table 74 FTP Upload to Cluster Member Example sss nnne 200 Table 75 Clustering Management Configuration ioensetesee mienne ecenbe Feb dee ek k EHE NER RERFE nda EFerEFRS Ye eh sssri Ian EKkHEn 201 Er Ku RE e 204 TAME 7T ARP TBIG Mew ToS 206 Table 78 Command Interpreter Mode Summary aasctsiriaiesascanerneenicnniaveeeins rann ERE IENE RR ERERERRR 215 Table 79 Command Summary User Mode 5 ndi rti or te at da dis id e
276. s Guide Chapter 19 Policy Table 43 Policy LABEL DESCRIPTION Active Select this option to enable the policy Name Enter a descriptive name up to 32 printable ASCII characters for identification purposes Classifier s This field displays the active classifier s you configure in the Classifier screen refer to Chapter 18 on page 127 Select the classifier s to which this policy rule applies To select more than one classifier press SHIFT and select the choices at the same time Parameters Set the fields below for this policy You only have to set the field s that is related to the action s you configure in the Action field General VLAN ID Specify a VLAN ID number Egress Port Select an outgoing port Outgoing Select Tag to add the specified VID to packets on the specified outgoing port packet format Otherwise select Untag The switch removes the VLAN tag from the packets for Egress Port Priority Specify a priority level DSCP Specify a DSCP DiffServ Code Point number between 0 and 63 TOS Specify the type of service TOS priority level Metering You can configure the desired bandwidth available to a traffic flow Traffic that exceeds the maximum bandwidth allocated in cases where the network is congested is called out of profile traffic Bandwidth Specify the bandwidth in mega bits per second Mbps Enter a number between 1 and 1023 Out of Pr
277. s IGMP snooping 13 8021p priority 0 7 Sets a priority level 0 7 to 13 which the switch changes the priority in outgoing IGMP control packets host timeout 1 Sets the host timeout value 13 16711450 leave timeout 1 Sets the leave timeout value 13 16711450 unknown multicast Sets the action on unknown 13 frame drop flooding multicast frames received interface Enables a port or a list of ports 13 port channel for configuration See Section port list 32 11 4 on page 233 for more details ip address ip mask Sets the management IP 13 address and subnet mask VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 81 Command Summary Configuration Mode continued the switch COMMAND DESCRIPTION P default gateway Sets the default gateway s IP 13 ip address name server ip Sets the IP address of a 13 domain name server route lt ip gt mask Creates a static route 13 lt next hop ip gt metric lt metric gt Sets the metric of a static route 13 name lt name gt or deactivates a static route inactive lacp Enables Link Aggregation 13 Control Protocol LACP system priority 1 65535 Sets the priority of an active 13 port using LACP loginPreceden lt LocalOnly Select which database the 14 ce LocalRADIUS switch should use first to R
278. s available 32 1 Overview In addition to the web configurator you can use line commands to configure the switch Use line commands for advanced switch diagnosis and troubleshooting If you have problems with your switch customer support may request that you issue some of these commands to assist them in troubleshooting BS See the web configurator parts of this User s Guide for background information on features configurable by the web configurator 32 1 1 Switch Configuration File When you configure the switch using either the CLI or web configurator the settings are saved as a series of commands in a configuration file on the switch You can perform the following with a configuration file Back up switch configuration once the switch is set up to work in your network Restore switch configuration Use the same configuration file to set all switches of the same model in your network to the same settings N You may also edit a configuration file using a text editor N Make sure you use valid commands The switch rejects configuration files with invalid or incomplete commands VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands 32 2 Accessing the CLI You can use a direct console connection or Telnet to access the CLI on the switch LES The switch automatically logs you out of the management interface after five minutes of inactivity If this happens to you simpl
279. s field displays Online the cluster member switch is accessible Error for example the cluster member switch password was changed or the switch was set as the manager and so left the member list etc Offline the switch is disconnected Offline shows approximately 1 5 minutes after the link between cluster member and manager goes down VES 1616F 3x Series User s Guide Chapter 29 Cluster Management 29 2 1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then click on an Index hyperlink from the list of members to go to that cluster member switch s web configurator home page This cluster member web configurator home page and the home page that you d see if you accessed it directly are different Figure 102 Cluster Management Cluster Member Web Configurator Screen VES 1608FA 35 VES 1608FA 35 Basic Setting Advanced Application Routing Protocol Management Status El Logout Help Member Menu anagement System Info VLAN Static Routing Diagnostic General Setup Static MAC Forwarding Switch Setup Filtering IP Setup Spanning Tree Protocol Port Setup Bandwidth Control Broadcast Storm Control Maintenance Access Control Diagnostic Mirrorin Syslog Link Aggregation Cluster Management Port Authentication MAC Table Port Security ARP Table Access Control Queuing Method Classifier Policy Rule VLAN Stacking Multicast DHCP Relay
280. s off GVRP for ports 1 to 5 sysname config interface port channel 1 5 sysname config interface no gvrp 34 3 4 Modify Static VLAN Use the following commands in the config vlan mode to configure the static VLAN table VES 1616F 3x Series User s Guide Chapter 34 IEEE 802 1Q Tagged VLAN Commands Syntax vlan lt vlan id gt fixed lt port list gt forbidden lt port list gt name lt name str gt normal lt port list gt untagged lt port list gt no fixed lt port list gt no forbidden lt port list gt no untagged lt port list gt where lt vlan id gt The VLAN ID 1 4094 lt name str gt A name to identify the SVLAN entry lt port list gt This is the switch port list Enter fixed to register the lt port list gt to the static VLAN table with lt vlan id gt Enter normal to confirm registration of the lt port list gt to the static VLAN table with lt vlan id gt Enter forbidden to block a lt port list gt from joining the static VLAN table with lt vlan id gt e Enter no fixedorno forbidden to change lt port list gt to normal status Enter untagged to send outgoing frames without a tag Enter no untagged to tag outgoing frames The following example configures ports 1 to 5 as fixed and untagged ports in VLAN 2000 sysname config vlan 2000 sysname config vlan fixed 1 5 sysname config vlan untagged 1 5 34 3 5 Forwarding Proce
281. sales zyxel fi Telephone 358 9 4780 8411 Fax 358 9 4780 8448 Web Site www zyxel fi Regular Mail ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland France E mail info zyxel fr Telephone 33 4 72 52 97 97 Fax 33 4 72 52 19 20 Web Site www zyxel fr Regular Mail ZyXEL France 1 rue des Vergers Bat 1 C 69760 Limonest France Germany Support E mail support zyxel de Sales E mail sales zyxel de Telephone 49 2405 690969 Fax 49 2405 6909 99 Web Site www zyxel de Regular Mail ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany Hungary Support E mail support zyxel hu Sales E mail info zyxel hu Telephone 36 1 3361649 Fax 36 1 3259100 Web Site www zyxel hu Regular Mail ZyXEL Hungary 48 Zoldlomb Str H 1025 Budapest Hungary Kazakhstan Support http zyxel kz support Sales E mail sales zyxel kz VES 1616F 3x Series User s Guide Appendix C Customer Support Telephone 7 3272 590 698 Fax 7 3272 590 689 Web Site www zyxel kz Regular Mail ZyXEL Kazakhstan 43 Dostyk ave Office 414 Dostyk Business Centre 050010 Almaty Republic of Kazakhstan North America Support E mail support zyxel com Sales E mail sales zyxel com Telephone 1 800 255 4101 1 714 632 0882 Fax 1 714 632 0858 Web Site www us zyxel com FTP Site ftp us zyxel com Regular Mail ZyXEL Communications Inc 1130 N Miller St
282. se has its own house number each host on the network has its own unique identifying number the host ID Routers use the network number to send packets to the correct network while the host ID determines to which host on the network the packets are delivered Structure An IP address is made up of four parts written in dotted decimal notation for example 192 168 1 1 Each of these four parts is known as an octet An octet is an eight digit binary number for example 11000000 which is 192 in decimal notation Therefore each octet has a possible range of 00000000 to 11111111 in binary or 0 to 255 in decimal The following figure shows an example IP address in which the first three octets 192 168 1 are the network number and the fourth octet 16 is the host ID VES 1616F 3x Series User s Guide Appendix A IP Addresses and Subnetting Figure 120 Network Number and Host ID 192 168 1 16 mt i at i i i M mmmh i I L L L I L I i I L I L I L 7 n mm m m m m m um m 9 How much of the IP address is the network number and how much is the host ID varies according to the subnet mask Subnet Masks A subnet mask is used to determine which bits are part of the network number and which bits are part of the host ID using a logical AND operation The term subnet is short for sub network A subnet mask has 32 bits If a bit in the subnet mask is a 1 th
283. sent SPQ does not automatically adapt to changing network requirements VES 1616F 3x Series User s Guide 123 Chapter 17 Queuing Method 17 1 2 Weighted Fair Scheduling WFS Weighted Fair Scheduling is used to guarantee each queue s minimum bandwidth based on their bandwidth weight portion the number you configure in the Weight field when there is traffic congestion WFS is activated only when a port has more traffic than it can handle Queues with larger weights get more guaranteed bandwidth than queues with smaller weights This queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues By default the weight for QO is 1 for Q1 is 2 for Q2 is 3 and so on Guaranteed bandwidth is calculated as follows Guaranteed bandwidth Queu Weight Total Queue Weight x Port Speed For example using the default setting QO on Port 1 gets a guaranteed bandwidth of 1 14 2 3 44 54 6 7 8 x 100 Mbps 3 Mbps 17 2 Configuring Queuing Click Advanced Application gt Queuing Method in the navigation panel Figure 49 Queuing Method Cancel g i Apply C Gueung Method J Strictly Priority Method C Weighted Fair Scheduling FE Port SPQ Enable None J Weight Port Q0 01 Q2 Q3 Q4 Q5 Q6 Q7 1 fi 2 3 4 5 6 7 8 2 fi 2 3 4 5 6 8 Jeep Fees SE mU cU wen 4 6 8 3 4 5 b 0 15 fi 2 3 4 5 6 7 8 16 fi 2 3 4 5 6 7 8 17 1 2 3 4 5 6 7 8 p R TE
284. services Standard Deployment Specify a VDSL deployment scenario Scenario Select FTTCab if the switch is located in a street cabinet Select FTTEx if the switch is located at the central office CO VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 14 VDSL Profile Setup continued LABEL DESCRIPTION Compatible Mode Specify the starting band of the frequency range used by VDSL services The end frequency band varies depending on the VDSL2 profile frequency plan 8a 8b 8c 8d 12a 12b 17a or 30a applied to the switch This can avoid interference with other services such as ISDN ADSL or ADSL2 provided by other device on the same bundle of lines ISDN in Europe uses a frequency range of up to 80 kHz while ISDN in Japan uses a frequency range of up to 640 kHz ADSL utilizes the 1 1 MHz band Both ADSL2 and ADSL 2 utilize the 2 2 MHz band Select None to turn on any tone over 25 kHz The VDSL services then use the frequency bands above 138 kHz Select 640kHz to have the VDSL services use the frequency bands above 640 kHz Select 1100kHz to turn off all tones below 1 1 MHz The VDSL services then use the frequency bands above 1 1 MHz Select 2200kHz to disable all tones below 2 2 MHz The VDSL services then use the frequency bands above 2 2 MHz Ham Band Plan To avoid performance degradation due to RFI Radio Frequency Interference you can set your switch not to transmit sig
285. seseesssiasiacessisanen arssinat in 109 T2 4 Broadcast Stormi Conil SEUD 3 E beer tr E E eR LEUR E 109 Chapter 13 PME NYG PTT OT Terr TRITT 111 EN PARAL SEU AR oer 111 prac udu EE M T M 111 Chapter 14 Link PRS A e A A E T T T T AA E A E TET 113 TET Link Aggregation OYO W aceto edem n tnb N tialerdea aman 113 14 11 Dynamic Link AQ QIAQa WON 113 APAR e l e e I I EA INE sap ENA E A A N A ATA 114 142 Onk pru bul t 114 Td 3 Link Agregado QE cauna 115 Chapter 15 Pon Pete CALM RTI TOT CIL E I DINI IINE 117 15 1 PO Authenicalon SVE s aere em 117 154 1 EADIUS earner enemy crete re mcr ey rer ovr E ii errr Te reer 117 16 2 Configure Port Authentication 2 tea crede Der ak ba dada kid dade Fora aa rbd ak nd dd 117 TO I Acia IEEE SU TX Seer ioisssbetnpueumseui n kein Pa Sa io en ERA Ce Eu EAR RM 118 15 2 2 Configuring RADIUS Server Selle aecieoscix trait 3I YR ESSAI ESSI d eR o 119 Chapter 16 EE SO CUNO Terr 121 TIPO Se OVON e 121 10 2 Port Gecuniy SEUD sarasini R 121 Chapter 17 miening MEMO MET 123 17 1 Queuing Method COVekviGW 225 caet erra Ld SEGA qa Etna dana Ea ea Ead eda ak opa 123 17 1 1 Strict Priority Queuing SPO sieniniai abord p petet ta verti Euiz 123 12 VES 1616F 3x Series User s Guide Table of Contents Tr 12 Weighted Far Sodaling WES aeterni pdt ira ba inre 124 ae a EEE m 124 Chapter 18 Cassia iea aAa S 127 18 1 Classiier OvVeriGW A
286. set the selected VDSL chip s 25 6 Remote Device Reset Use the Remote Device Reset screen to reset the VDSL line The switch re negotiates the VDSL link to the remote CPE device VES 1616F 3x Series User s Guide Chapter 25 Maintenance 1 Access the Remote Device Reset screen from the Maintenance screen Figure 79 Maintenance Remote Device Reset OLETAN Maintenance Please Choose VDSL Lines VDSLLineD02 VDSLLine03 VDSLLine04 VDSLLine05 VDSLLine0b VDSLLineO VDSLLineD8 Reset 2 Select the VDSL line s you want to reset in the list box You can select multiple entries by holding down the SHIFT or CTRL key 3 Click Reset to reset the selected VDSL line s BES Resetting the VDSL lines does NOT restart the switch 25 7 Firmware Upgrade BS You can only upload the firmware of the same VDSL standard as your Switch Use the show hardware version command to check whether your device is a VDSL1 switch 100100 or 10050 or VDSL2 switch 5030 See Chapter 1 on page 31 and Chapter 32 on page 209 for more information Table 59 Switch Hardware Version HARDWARE VERSION STANDARD 100100 VDSL1 10050 VDSL1 5030 VDSL2 Make sure you have downloaded and unzipped the correct model firmware and version to your computer before uploading to the device BS Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device
287. show vdsl alarmprofile test Profile 15Mins ame LOSs Threshold 15Mins ESs Threshold 15Mins SESs Threshold Initialization Failure sysname test 15 10 33 2 8 show vdsl profile Syntax show vdsl profile lt profile name gt VES 1616F 3x Series User s Guide Chapter 33 Command Examples This command displays a summary list of VDSL profiles or displays the settings of a VDSL profile The following example shows the summary table sysname show vdsl profile Name Payload Rate SNR Margin Applied Ports DEFVAL 104M 104M 1 16 test 104M 104M sysname The following example shows the settings of the test VDSL profile Profile Name test Slow Channel Payload Rate Fast Channel Payload Rate sysname show vdsl profile test Downstream MAX 104960 MIN 64 MAX 104960 MIN 64 Upstream MAX 104960 MIN 64 MAX 104960 MIN 64 Rate Adaption adaptAtInit adaptAtInit ax SNR Margin 31dB 31dB Target SNR Margin 6dB 6dB in SNR Margin OdB OdB ax Interleave Delay 2ms 2ms ax Aggregate Power 14dBm 14dBm Rate Raio 0 0 Impulse Noise Protection Oms Oms FEC Redundancy 0 0 PSD Template Mask templateMask2 templateMask2 PBO Control disabled disabled PBO Level OdB OdB Band Plan bandPlan998 Deployment Scenario fttEx Compatible Mode none Applicable Standard etsi Ham Band Mask Custom Notchl Start OkHz Custom Notchl Stop OkHz Custom Notch2 Start OkHz Custo
288. ss Example 34 3 5 1 Tagged Frames 1 First the switch checks the VLAN ID VID of tagged frames or assigns temporary VIDs to untagged frames 2 The switch then checks the VID in a frame s tag against the SVLAN table 3 The switch notes what the SVLAN table says that is the SVLAN tells the switch whether or not to forward a frame and if the forwarded frames should have tags 4 Then the switch applies the port filter to finish the forwarding decision This means that frames may be dropped even if the SVLAN says to forward them Frames might also be dropped if they are sent to a CPE customer premises equipment DSL device that does not accept tagged frames 34 3 5 2 Untagged Frames 1 Anuntagged frame comes in from the LAN 2 The switch checks the PVID table and assigns a temporary VID of 1 VES 1616F 3x Series User s Guide Chapter 34 IEEE 802 1Q Tagged VLAN Commands 3 The switch ignores the port from which the frame came because the switch does not send a frame to the port from which it came The switch also does not forward frames to forbidden ports 4 Ifafter looking at the SVLAN the switch does not have any ports to which it will send the frame it won t check the port filter 34 4 Delete VLAN ID Syntax no vlan vlan id where lt vlan id gt The VLAN ID 1 4094 This command deletes the specified VLAN ID entry from the static VLAN table The following example deletes entry 2 in the static VLAN table
289. ss any key to enter debug mode within 3 seconds Enter Debug Mode sysname gt atlc Starting XMODEM upload CRC mode CCCCCCCCCCCCCCCC Total 393216 bytes received Erasing sysname gt atgo The switch is now reinitialized with a default configuration file including the default password of 1234 4 6 Logging Out of the Web Configurator Click Logout in a screen to exit the web configurator You have to log in with your password again after you log out This is recommended after you finish a management session both for security reasons and so as you don t lock out other switch administrators Figure 14 Web Configurator Logout Screen Thank you for using the Web Configurator Goodbye 4 7 Help The web configurator s online help has descriptions of individual screens and some supplementary information Click the Help link from a web configurator screen to view an online help description of that screen Li VES 1616F 3x Series User s Guide System Status and Port Statistics This chapter describes the system status web configurator home page and port details screens 5 1 Overview The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details 5 2 Port Status Summary To view the port statistics click Status in all web configurator screens to display the Status screen as shown next Figure 15 Status
290. states to eliminate packet looping A bridge port is not allowed to go directly from blocking state to forwarding state so as to eliminate transient loops Table 25 STP Port States PORT STATE DESCRIPTION Disabled STP is disabled default Blocking Only configuration and management BPDUs are received and processed Listening All BPDUs are received and processed Learning All BPDUs are received and processed Information frames are submitted to the learning process but not forwarded Forwarding All BPDUs are received and processed All information frames are received and forwarded VES 1616F 3x Series User s Guide Chapter 10 Spanning Tree Protocol 10 2 STP Status Click Advanced Application gt Spanning Tree Protocol in the navigation panel to display the screen View current STP status on the switch in this screen Refer to Section 10 1 on page 101 for background information Figure 37 Spanning Tree Protocol Status Spanning Tree Protocol Status Configuration Spanning Tree Protocol Running Bridge Root Our Bridge Bridge ID 8000 001 349038297 8000 001 349038297 Hello Time second 2 2 Max Age second 20 20 Forwarding Delay second 15 15 Cost to Bridge 0 Port ID 0x0000 Topology Changed Times 0 Time Since Last Change 0 00 10 Polling Interval 40 Set Interval Stop The following table describes the labels in this screen Table 26 Spanning Tree Protocol Status
291. ster Management 29 2 Cluster Management Status Click Management gt Cluster Management in the navigation panel to display the following screen BS A cluster can only have one manager Figure 101 Cluster Management Status JNSUECHDFRALEREFENDnDETIC TH Configuration Status Manager Manager 00 19 cb 00 00 02 The Number Of Member 1 Index MacAddr Name Model Status 00 13 49 00 00 02 VES 1608FA 35 VES 1608FA 35 Online The following table describes the labels in this screen Table 73 Cluster Management Status LABEL DESCRIPTION Status This field displays the role of this switch within the cluster Manager Member you see this if you access this screen in the cluster member switch directly and not via the cluster manager None neither a manager nor a member of a cluster Manager This field displays the cluster manager switch s hardware MAC address The Number of This field displays the number of switches that make up this cluster The following Member fields describe the cluster member switches Index You can manage cluster member switches via the cluster manager switch Each number in the Index column is a hyperlink leading to the cluster member switch s web configurator see Figure 102 on page 199 MacAddr This is the cluster member switch s hardware MAC address Name This is the cluster member switch s System Name Model This field displays the model name Status Thi
292. t 197 MAC Table 203 ARP Table 205 Maintenance This chapter explains how to configure the maintenance screens that let you maintain the firmware and configuration files 25 1 The Maintenance Screen The maintenance screens can allow you to upload new firmware to the switch manage configuration reset to factory defaults and restart your switch Click Management gt Maintenance in the navigation panel to open the screen as shown next Figure 72 Maintenance E Maintenance Remote Device Upgrade Click Here VDSL Chip Reset Click Here Remote Device Reset Click Here Firmware Upgrade Click Here Restore Configuration Click Here Backup Configuration Click Here Load Factory Default Click Here Reboot System Click Here The following table describes the links in this screen Table 58 Maintenance LINK DESCRIPTION Remote Device Access this screen to perform remote firmware upgrade on the connected non Upgrade manageble CPE device s VDSL Chip Reset Access this screen to reset the VDSL chip s on this switch p Device Access this screen to reset the VDSL link s to the CPE device s ese Firmware Upgrade Access this screen to upload a new firmware to this switch Restore Access this screen to upload a previously saved configuration file to the switch Configuration Backup Access this screen to back up the current switch configuration Configuration V
293. t mask in dotted decimal notation VID Type the VLAN group identification number Default Gateway Enter the IP address of the default outgoing gateway in dotted decimal notation VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 12 IP Setup continued LABEL DESCRIPTION Manageable Select this option to allow device management using this IP address setting Clear this option to set the switch to block management access using this IP address Add Click Add to save the new rule to the switch It then displays in the summary table at the bottom of the screen Cancel Click Cancel to reset the fields to your previous configuration Index This field displays the index number of the rule Click an index number to edit the rule IP Address This field displays the IP address IP Subnet Mask This field displays the subnet mask VID This field displays the ID number of the VLAN group Default Gateway This field displays the IP address of the default gateway Manageable This field displays whether device management on this IP address is allowed Delete Check the rule s that you want to remove in the Delete column then click the Delete button Cancel Click Cancel to clear the selected checkboxes in the Delete column 6 7 Port Setup Click Basic Setting and then Port Setup in the navigation panel to display the configuration screen Use
294. ter necessary VLAN members on ports across the network Enable this function to permit VLANs groups beyond the local switch VES 1616F 3x Series User s Guide 255 Chapter 33 Command Examples An example is shown next Enable the IEEE 802 1Q tagged VLAN command to configure tagged VLAN for the switch Enable ports one three four and five for configuration Enable GVRP on the interface sysname config vlanlq gvrp sysname config interface port channel 1 3 5 sysname config interface gvrp 33 9 7 ingress check Syntax ingress check Enables the device to discard incoming frames for VLANs that are not included in a port member set An example is shown next Enable ports one three four and five for configuration Enable ingress checking on the interface sysname config interface port channel 1 3 5 sysname config interface ingress check 33 9 8 frame type Syntax frame type lt all tagged untagged gt where all tagged u Choose to accept both tagged and untagged incoming frames or just ntagged gt tagged or untagged incoming frames on a port An example is shown next Enable ports one three four and five for configuration Enable ingress checking on the ports Enable tagged frame types on the interface sysname config interface port channel 1 3 5 sysname config interface ingress check sysname config interface frame type tagged
295. ter with terminal emulation software configured to the following parameters VES 1616F 3x Series User s Guide Chapter 3 Hardware Overview 9600 bps No parity 8 data bits 1 stop bit No flow control VT100 terminal emulation Connect the male 9 pin end of the console cable to the console port of the switch Connect the female end to a serial port COMI COM or other COM port of your computer 3 1 5 Power Connector Make sure you are using the correct power source as shown on the panel LES Make sure that no objects obstruct the airflow of the fans 3 2 LEDs The LEDs are located on the front panel The following table describes the LEDs on the front panel Table 2 LEDs LED COLOR STATUS DESCRIPTION PWR Green On The system is turned on Off The system is off SYS Green Blinking The system is rebooting and performing self diagnostic tests On The system is on and functioning properly Off The power is off or the system is not ready or malfunctioning ALM Red On There is a hardware failure abnormal temperature voltage or fan speeds Off The system is functioning normally VDSL Green On The link to a VDSL line is up and the system is transmitting or receiving to from a VDSL link Off The link to a VDSL line is down Gigabit Ports LNK ACT Green On The link to a 10 Mbps Ethernet network is up The link to a 1000 Mbps Ethernet network is up i
296. that has been manually entered in the MAC address learning table Static MAC addresses do not age out When you set up static MAC address tules you are setting static MAC addresses for a port This may reduce the need for broadcasting 8 2 Configuring Static MAC Forwarding Click Advanced Applications gt Static MAC Forwarding in the navigation panel to display the configuration screen as shown Scroll down to the bottom of the screen to view the summary table for the settings Figure 35 Static MAC Forwarding Oe Static MAC Forwarding 9 Active C Name MAC Address VID Port Poti Add Cancel Clear Index Active Name MAC Address VID Port Delete 1 No Example 00 b2 a0 9e f0 3c 2 1 Ci Delete Cancel The following table describes the labels in this screen Table 22 Static MAC Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule You may temporarily deactivate a rule without deleting it by clearing this check box Name Enter a descriptive name for identification purposes for this static MAC address forwarding rule VES 1616F 3x Series User s Guide Chapter 8 Static MAC Forward Setup Table 22 Static MAC Forwarding continued LABEL DESCRIPTION MAC Address Enter the MAC address in valid MAC address format that is six hexadecimal character pairs Note Static MAC addresses do not age out
297. the Delete column and then click the Delete button Profile Name This field displays the descriptive name for this profile Applied Ports You can apply a profile to a VDSL port in the Port Setup screen This field displays the VDSL port number s to which this profile is applied Delete Check the profile s that you want to remove in the Delete column and then click the Delete button Cancel Click Cancel to clear the selected checkboxes in the Delete column VES 1616F 3x Series User s Guide Chapter 6 Basic Setting VES 1616F 3x Series User s Guide PART III Advanced VLAN 87 Static MAC Forward Setup 97 Filtering 99 Spanning Tree Protocol 101 Bandwidth Control 107 Broadcast Storm Control 109 Mirroring 111 Link Aggregation 113 Port Authentication 117 Port Security 121 Queuing Method 123 Classifier 127 Policy 133 VLAN Stacking 139 Multicast 145 Differentiated Services 157 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen This chapter shows you how to configure 802 1Q tagged and port based VLANs 7 1 Introduction to IEEE 802 1Q Tagged VLAN A tagged VLAN uses an explicit tag VLAN ID in the MAC header to identify the VLAN membership of a frame across bridges they are not confined to the switch on which they were created The VLANs can be created statically by hand or dynamically thro
298. the connection has been dropped due to the CRC errors being increasing for more than 30 consecutive seconds Curr 15 Min This field displays the total number of errors detected within the last 15 minute Time Elapsed 900 second time segment The counter resets to zero after the time segment elapses LOS 15Min This field displays the number of Loss of Signal LOS failures within the last 15 minute 900 second time segment The counter resets to zero after the time segment elapses LOF 15Min This field displays the number of Loss of Framing LOF failures within the last 15 minute 900 second time segment The counter resets to zero after the time segment elapses BMIN 15Min This field displays how many times the connection has been dropped due to the average SNR falling below the specified minimum SNR within the last 15 minute 900 second time segment The counter resets to zero after the time segment elapses BERR 15Min This field displays how many times the connection has been dropped due to the CRC errors being increasing for more than 30 consecutive seconds within the last 15 minute 900 second time segment The counter resets to zero after the time segment elapses Curr 1 Day This field displays the total number of errors detected within the last 1 day time Time Elapsed segment The counter resets to zero after the time segment elapses LOS 1Day This field displays the number of Loss of Signal
299. the recorded statistical information for all ports Otherwise select a port from the Port drop down list box and then click Clear Counter to erase the recorded statistical information for that port 5 2 1 VDSL Summary To view VDSL statistics click VDSL Summary in the Status screen VES 1616F 3x Series User s Guide Chapter 5 System Status and Port Statistics Figure 16 Status VDSL Summary ED VOS eae Line Rate PayLoad Rate SNR Margin URS Name EHE Up Down Up Down Up Down 1 port 1 Standby NA NA NA NA NA NA 2 port 2 Standby NA NA NA NA NA NA 3 port 3 Standby NA NA NA NA NA NA 4 port 4 Standby NA NA NA NA NA NA port 5 Standby NA NA NA NA NA NA 6 pornog Standby NA NA NA NA NA NA T porto Standby NA NA NA NA NA NA N 8 port 8 Standby NA NA NA NA NA NA 9 porog Standby NA NA NA NA NA NA 10 portio Standby NA NA NA NA NA NA 11 portt1 Standby NA NA NA NA NA NA 12 port12 Standby NA NA NA NA NA NA 13 port13 Standby NA NA NA NA NA NA 14 port14 Standby NA NA NA NA NA NA Ja port15 Standby NA NA NA NA NA NA 16 porti 6 Standby NA NA NA NA NA NA 5 2 2 VDSL Port Details Click a number in the Port column in the Status screen to display individual port statistics Use this screen to check status and detailed performance data about an individual port on the switch Figure 17 Status VDSL Port Details VDSL Port Details Status Port Info Number Port 1 Name porto Link Type VDSL State Training
300. the switch so your backup configuration file is automatically renamed when you restore using this screen 25 9 Backing Up a Configuration File Backing up your switch configurations allows you to create various snap shots of your device from which you may restore at a later date VES 1616F 3x Series User s Guide Chapter 25 Maintenance Back up your current switch configuration to a computer using the Backup Configuration screen Figure 82 Backup Configuration Backup button Backup Configuration This page allows you to back up the device s current configuration to your workstation Now click the Backup Maintenance Follow the steps below to back up the current switch configuration to your computer in this screen 1 Click Backup 2 Click Save to display the Save As screen 3 Choose a location to save the file on your computer from the Save in drop down list box and type a descriptive name for it in the File name list box Click Save to save the configuration file to your computer 25 10 FTP Command Line This section shows some examples of uploading to or downloading files from the switch using FTP commands First understand the filename conventions 25 10 1 Filename Conventions The configuration file also known as the romfile or ROM contains the factory default settings in the screens such as password switch setup IP Setup etc Once you have customized the switch s setti
301. this screen to configure general VDSL and Ethernet port settings VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Figure 23 Port Setup COLETE Port Active Name Type Profile PSD Profile Alarm Profile Flow Control 802 1p Priority BPDU Control 1 pont vos perve pv s prar E om Per 2 M t2 vos oervay pv s prar E of reer ial 3 W bonos vos prz oras Dervis FW om Pee m 4 m onos vos Dervacs ovas prz FW of Peer al 5 m boos vos prz oras Dervis md Peer m e W bons vos prz orar prz FW of reer ial 7 m boor vos Dervacs ovas Dervis FW cm Peer m e FW os vos oervals beraz pv sz FW om reer ial o m ots vos oervals pv sz pz FW om Peer id 10 v pomo vos oErva m DEFVAL y DEFVAL gt 2 OF Peer gt 1 v omi vosL_ s DEFVAL gt DEFVAL y DEFVAL z 2 ox Peer 12 fpott2 vosk pErva y perve y DEFVaL 7 oy Peer gt 139 amp om3 vos oervals Derva z ova rz F ox reer zl 14 poms vost oervals oervals ovr F oz reer wl 16 amp poms vos oervals Derva ovr F os reer x 16 W bome vos oervaly peas prz F ox reer wl Port Active Name Type Speed Duplex Flow Control 802 1p Priority BPDU Control 137 v port 10 100 1000M auto l 2 0 Peer 18 v oms 10 1 00 1 000M auto e 2 OF Peer gt Apply Cancel The following table describes the
302. tication that allows you to use an external server to validate an unlimited number of users Port Security This link takes you to a screen where you can activate MAC address learning and set the maximum number of MAC addresses to learn on a port Queuing Method This link takes you to a screen where you can configure SPQ or WFQ with associated queue weights for each port Classifier This link takes you to a screen where you can configure the switch to group packets based on the specified criteria Policy Rule This link takes you to a screen where you can define actions on classified traffic flows VLAN Stacking This link takes you to a screen where you can configure VLAN stacking Multicast This link takes you to screens where you can configure multicast functions such as IGMP on the switch MVR This link takes you to screens where you can configure MVR Multicast VLAN Registration DiffServ This link takes you to screens where you can enable DiffServ configure marking rules and set DSCP to IEEE802 1p mappings Routing Protocol Static Routing This link takes you to screens where you can configure static routes A static route defines how the switch should forward traffic by configuring the TCP IP parameters manually DHCP Relay This link takes you to a screen where you can configure the DHCP relay settings for the network on the switch Management VES 1616F 3x Series
303. tion and specify a DSCP DiffServ Code Point number between 0 and 63 in the field provided IP Protocol Select an IP protocol type or select Other and enter the protocol number in decimal value Refer to Table 42 on page 130 for more information You may select Establish Only for TCP protocol type This means that the switch will pick out the packets that are sent to establish TCP connections Source IP Enter a source IP address in dotted decimal notation juri Specify the address prefix by entering the number of ones in the subnet mask Prefix aes Note You must select either UDP or TCP in the IP Protocol field before you configure the socket numbers Select Any to apply the rule to all TCP UDP protocol port numbers or select the second option and enter a TCP UDP protocol port number Destination IP Enter a destination IP address in dotted decimal notation v pd Specify the address prefix by entering the number of ones in the subnet mask Prefix cee Note You must select either UDP or TCP in the IP Protocol field before you configure the socket numbers Select Any to apply the rule to all TCP UDP protocol port numbers or select the second option and enter a TCP UDP protocol port number Add Click Add to save the changes Cancel Click Cancel to reset the fields back to your previous configuration Clear Click Clear to set the above fields back to the factory defaults Ind
304. tion for every flow In addition applications do not have to request a particular service or give advanced notice of where the traffic is going 22 1 1 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to replace the Type of Service ToS field in the IP header The DS field contains a 2 bit unused field and a 6 bit DSCP field which can define up to 64 service levels The following figure illustrates the DS field DSCP is backward compatible with the three precedence bits in the ToS octet so that non DiffServ compliant ToS enabled network device will not conflict with the DSCP mapping Figure 66 DiffServ Differentiated Service Field DSCP 6 bits DS 2 bits The DSCP value determines the forwarding behavior the PHB Per Hop Behavior that each packet gets across the DiffServ network Based on the marking rule different kinds of traffic can be marked for different priorities of forwarding Resources can then be allocated according to the DSCP values and the configured policies 22 1 2 DiffServ Network Example The following figure depicts a simple DiffServ network consisting of a group of contiguous DiffServ compliant network devices VES 1616F 3x Series User s Guide Chapter 22 Differentiated Services Figure 67 DiffServ Network Example Switch A marks traffic flowing into the network based on the configured marking rules Intermediary network devices 1 and 2 allocate ne
305. tion of traffic on a port decreases port bandwidth and overflows buffer memory causing packet discards and frame losses Flow Control is used to regulate transmission of signals to match the bandwidth of the receiving port The switch uses IEEE802 3x flow control in full duplex mode and back pressure flow control in half duplex mode IEEE802 3x flow control is used in full duplex mode to send a pause signal to the sending port causing it to temporarily stop sending signals when the receiving port memory buffers fill Back Pressure flow control is typically used in half duplex mode to send a collision signal to the sending port mimicking a state of packet collision causing the sending port to temporarily stop sending signals and resend later Select Flow Control to enable it 802 1P Priority This priority value is added to incoming frames without a 802 1p priority queue tag See Priority Queue Assignment in Table 11 on page 68 for more information BPDU Control Configure the way to treat BPDUs received on this port You must activate bridging control protocol transparency in the Switch Setup screen first Select Peer to process any BPDU Bridge Protocol Data Units received on this port Select Tunnel to forward BPDUs received on this port Select Discard to drop any BPDU received on this port Select Network to process a BPDU with no VLAN tag and forward a tagged BPDU Apply Click Apply to save the settings Can
306. to a VDSL port in the Port Setup screen This field displays the VDSL port number s to which this profile is applied Delete Check the rule s that you want to remove in the Delete column and then click the Delete button Cancel Click Cancel to clear the selected checkboxes in the Delete column 6 11 VDSL PSD Profile Setup PSD Power Spectral Density profiles define the allowable downstream and upstream PSD values for a line Ina PSD profile you can configure a set of breakpoints each of which is defined by a frequency and PSD level The set of breakpoints forms a PSD mask that specifies the maximum transmission power of each VDSL frequency band If the frequency range used by the Switch and other devices overlap you can configure the PSD of your Switch to prevent interference with other nearby signals In the following example the Switch s PSD is configured to not exceed the PSD mask dashed line within the 5 MHz to 16 MHz frequency range After configuration the shaded area is the Switch s actual PSD for the specified frequency range Figure 26 PSD Frequency Example TETTE YI PSD Mask Breakpoint 1 0 5000 9500 16000 Frequency in KHz Click Basic Settings and VDSL PSD Profile Setup in the navigation panel to display the screen as shown VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Figure 27 VDSL PSD Profile Setup Profile Name DEFVAL a PSD pind Profile Name MOC
307. trol lt 1 3 gt Sets the upstream PBO control 13 1 Disable 2 Auto 3 Manual uslevel lt 0 120 gt Sets the upstream PBO level 13 psdtemplate deu Sets a PSD mask for the 13 downstream traffic us 1 2 Sets a PSD mask for the 13 upstream traffic ratemode ds lt 1 2 gt Sets a rate adaptive mode for the 13 downstream traffic 1 Manual 2 AdaptAtlnit VES 1616F 3x Series User s Guide 239 Chapter 32 Introducing the Commands Table 85 vdsl profile Commands continued COMMAND DESCRIPTION P us 1 2 Sets a rate adaptive mode for the 13 upstream traffic 1 Manual 2 AdaptAtlnit rateratio ds 0 100 Specify the downstream data rate 13 allocated for the fast and slow channels 0 slow channel 100 fast channel us 0 100 Specify the upstream data rate 13 allocated for the fast and slow channels 0 slow channel 100 fast channel snr dsmax lt 0 127 gt Sets the maximum downstream 13 SNR Signal to Noise Ratio dsmin lt 0 127 gt Sets the minimum downstream 13 SNR Signal to Noise Ratio dstarget Sets the target downstream SNR 13 0 127 Signal to Noise Ratio usmax lt 0 127 gt Sets the maximum upstream 13 SNR Signal to Noise Ratio usmin lt 0 127 gt Sets the minimum upstream SNR 13 Signal to Noise Ratio ustarget Sets the target upstream SNR 13 0 127 Signal to Noise Ratio targetslowburst ds 0 12
308. twork resources such as bandwidth by mapping the DSCP values and the associated policies 22 2 Activating DiffServ Activate DiffServ to allow the switch to enable DiffServ and apply marking rules and IEEE802 1p priority mapping on the selected port s Click Advanced Application gt DiffServ in the navigation panel to display the screen as shown Figure 68 DiffServ Auc DSCP Setting Active O Port Active Iv 16 Iv 17 iv 18 Vv Apply Cancel The following table describes the labels in this screen Table 53 DiffServ LABEL DESCRIPTION Active Select this option to enable DiffServ on the switch Default DSCP Enter the default DSCP value between 0 to 63 to use if no marking rule is configured for a traffic type Port This field displays the index number of a port on the switch Active Select this option to apply the default DSCP value you set in the Default DSCP field on a port Apply Click Apply to save the changes Cancel Click Cancel to start configuring this screen again VES 1616F 3x Series User s Guide Chapter 22 Differentiated Services 22 3 DSCP to IEEE802 1p Priority Setting You can configure the DSCP DiffServ Code Point to IEEE802 1p mapping to allow the switch to prioritize all traffic based on the incoming DSCP value according to the DiffServ to IEEE802 1p mapping table The following table shows the default DSCP to EEE802 1P
309. u connect an IGMP multicast server to the port Select Edge to stop the switch from using the port as an IGMP query port The switch will not keep any record of an IGMP router being connected to this port The switch does not forward IGMP join or leave packets to this port Apply Click Apply to save your changes back to the switch Cancel Click Cancel to begin configuring this screen afresh 21 4 IGMP Filtering Profile IGMP filter profiles allow you to control access to IGMP multicast groups This allows you to have a service available to a specific IGMP multicast group You can configure an IGMP filter profile for an IGMP multicast group that has access to a service like a SIP server for example Within a profile configure an IGMP filter to specify the multicast IP address ranges Then assign the IGMP filter profile to the ports in the Multicast screen that are allowed to use the service Click Advanced Application and Multicast in the navigation panel Click the IGMP Filtering Profile link to display the screen as shown Figure 58 Multicast gt IGMP Filtering Profile ED IGMP Filtering Profile Multicast Setting Profile Setup Profile Name Start Address End Address 224 0 0 0 224 0 0 0 Profile Name Default Ada Clear Start Address End Address Delete Profile Delete Rule O 0 0 0 0 0 0 0 0 m Delete Cancel VES 1616F 3x Series User s Guide Chapter 21 Multicast The following table d
310. ugh GVRP The VLAN ID associates a frame with a specific VLAN and provides the information that switches need to process the frame across the network A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID Tag Protocol Identifier residing within the type length field of the Ethernet frame and two bytes of TCI Tag Control Information starts after the source address field of the Ethernet frame The CFI Canonical Format Indicator is a single bit flag always set to zero for Ethernet switches If a frame received at an Ethernet port has a CFI set to 1 then that frame should not be forwarded as it is to an untagged port The remaining twelve bits define the VLAN ID giving a possible maximum number of 4 096 VLANs Note that user priority and VLAN ID are independent of each other A frame with VID VLAN Identifier of null 0 is called a priority frame meaning that only the priority level is significant and the default VID of the ingress port is given as the VID of the frame Of the 4096 possible VIDs a VID of 0 is used to identify priority frames and value 4095 FFF is reserved so the maximum possible VLAN configurations are 4 094 TPID User Priority CFI VLAN ID 2 Bytes 3 Bits 1 Bit 12 Bits 7 1 1 Forwarding Tagged and Untagged Frames Each port on the switch is capable of passing tagged or untagged frames To forward a frame from an 802 1Q VLAN aware switch to an 802 1Q VLAN unaw
311. vice 25 10 2 FTP Command Line Procedure 1 Launch the FTP client on your computer 2 Enter open followed by a space and the IP address of your switch 3 Press ENTER when prompted for a username 4 Enter your password as requested the default is 1234 5 Enter bin to set transfer mode to binary 6 Use put to transfer files from the computer to the switch for example put firmware bin ras transfers the firmware on your computer firmware bin to the switch and renames it to ras Similarly put config cfg config transfers the configuration file on your computer config cfg to the switch and renames it to config Likewise get config config cfg transfers the configuration file on the switch to your computer and renames it config cfg See Table 60 on page 175 for more information on filename conventions 7 Enter quit to exit the ftp prompt 25 10 3 GUI based FTP Clients The following table describes some of the commands that you may see in GUI based FTP clients General Commands for GUI based FTP Clients COMMAND DESCRIPTION Host Address Enter the address of the host server Login Type Anonymous This is when a user I D and password is automatically supplied to the server for anonymous access Anonymous logins will work only if your ISP or service administrator has enabled this option Normal The server requires a unique User ID and Password to login Transfer Type Transfer files in e
312. web configurator at any one time An administrator is someone who can both view and configure switch changes The username for the Administrator is always admin The default administrator password is 1234 VES 1616F 3x Series User s Guide Chapter 26 Access Control BS It is highly recommended that you change the default administrator password 1234 A non administrator username is something other than admin is someone who can view but not configure switch settings Click Access Control from the navigation panel and then click Logins from this screen Figure 86 Access Control Logins acr Administrator Edit Logins Old Password New Password Retype to confirm Please record your new password whenever you change it The system will lock you out if you have forgotten your password Login User Name 1 2 MEM ENNENENEEEEEEEEN NENNEN NENNEN 4 Access Control Password Retype to confirm Apply Cancel The following table describes the labels in this screen Table 65 Access Control Logins LABEL DESCRIPTION Administrator This is the default administrator account with the admin user name You cannot change the default administrator user name Only the administrator has read write access Old Password Type the existing system password 1234 is the default password when shipped New Password Enter your new system password Retype to confirm
313. witch administrator changes the web configurator password afterwards then it cannot be managed from the Cluster Manager Its Status is displayed as Error in the Cluster Management Status screen and a warning icon X appears in the member summary list below If multiple devices have the same password then hold SHIFT and click those Switches to select them Then enter their common web configurator password Add Click Add to save this part of the screen to the switch Cancel Click Cancel to begin configuring this part of the screen afresh Refresh Click Refresh to perform auto discovery again to list potential cluster members The next summary table shows the information for the clustering members configured Index This is the index number of a cluster member switch MacAddr This is the cluster member switch s hardware MAC address Name This is the cluster member switch s System Name Model This is the cluster member switch s model name Remove Select this checkbox and then click the Remove button to remove a cluster member switch from the cluster Cancel Click Cancel to begin configuring this part of the screen afresh VES 1616F 3x Series User s Guide 201 Chapter 29 Cluster Management VES 1616F 3x Series User s Guide MAC Table This chapter introduces the MAC Table screen 30 1 MAC Table Overview The MAC Table screen a MAC table is also known as a filtering database sh
314. xt Page to show the previous next screen if all status information cannot be seen in one screen VES 1616F 3x Series User s Guide Chapter 7 VLAN 7 5 2 Configure a Static VLAN To configure a static VLAN click Static VLAN in the VLAN Status screen to display the screen as shown next Use a static VLAN to decide whether an incoming frame on a port should be e sent toa VLAN group as normal depends on its VLAN tag sent to a group whether it has a VLAN tag or not blocked from a VLAN group regardless of its VLAN tag You can also tag all outgoing frames that were previously untagged from a port with the specified VID Refer to Section 7 1 on page 87 for background information Figure 31 VLAN gt Static VLAN Static VLA VLAN Status ACTIVE C Name A VLAN Group ID a Port Control Tagging 1 Norma C Fixed C Forbidden v TxTauging Norma C Fixed C Forbidden v TxTagging 2 3 Norma C Fi C Forbidden v 1xTaugi 4 f Fixed Tx Tagging 16 Norma C Fixed C Forbidden v TxTagging 17 Norma C Fixed C Forbidden M Tx Tagging 18 Norma C Fixed C Forbidden Iv Tx Tagging Add Cancel Clear VID Active Name Delete 1 Yes 1 E Delete Cancel The following table describes the related labels in this screen Table 19 VLAN gt Static VLAN LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings Name Enter a descriptive name for the VLAN grou
315. y The gateway is an immediate Address neighbor of your switch that will forward the packet to the destination Metric This field displays the cost of transmission for routing purposes Delete Click Delete to remove the selected entry from the summary table Cancel Click Cancel to clear the Delete check boxes VES 1616F 3x Series User s Guide DHCP Relay This chapter shows you how to configure the DHCP feature 24 1 DHCP Overview DHCP Dynamic Host Configuration Protocol RFC 2131 and RFC 2132 allows individual computers to obtain TCP IP configuration at start up from a server You can configure the switch to relay client DHCP requests to a DHCP server and the server s responses back to the clients 24 1 1 DHCP Relay Agent Information The switch can add information to client DHCP requests that it relays to a DHCP server This helps provide authentication about the source of the requests You can also specify additional information for the switch to add to the client DHCP requests that it relays to the DHCP server Please refer to RFC 3046 for more details The DHCP relay agent information feature adds an Agent Information field to the option 82 field of the DHCP headers of client DHCP request frames that the switch relays to a DHCP server The following lists the DHCP relay agent option 82 information that the switch sends to the DHCP server Slot ID 1 byte Port ID 1 byte VLAN ID 2 bytes System name u
316. y High Speed Digital Subscriber Line over POTS ISDN switches The series consist of the following models at the time of writing VES 1616F 34 VDSL 1 VES 1616F 34 VDSL2 VES 1616F 35 VDSL1 and VES 1616F 35 VDSL2 Use the show hardware version command to check whether your device is a VDSL 1 switch 100100 or 10050 or VDSL2 switch 5030 See Chapter 32 on page 211 for more information VDSL2 is the second generation of the VDSL which is currently denoted VDSL 1 standard You can only upload the firmware of the same VDSL standard as your Switch model 1 2 Applications This section shows the main applications for the switch 1 2 1 MTU Application The following diagram depicts a typical application of the Switch labeled B with the VDSL modems labeled A in a large residential building or multiple tenant unit MTU that leverages existing phone line wiring to provide Internet access to all tenants Note that VDSL service can coexist with voice service on the same line The Switch 1s connected to a backbone switch labeled C using an Ethernet cable or a fiber optic cable The fiber connection allows connection is a suitable link for distances up to 100 meters 328 feet VES 1616F 3x Series User s Guide distances of up to several kilometers depending on your transceivers The Ethernet Chapter 1 Getting to Know Your Switch Figure 1 MTU Application Internet 1 2 2 Curbside Appl
317. y for upstream traffic in the slow channel VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands Table 85 vdsl profile Commands continued COMMAND DESCRIPTION P maxpower ds lt 0 58 gt Specify the maximum aggregate 13 power level for downstream transmission us lt 0 58 gt Specify the maximum aggregate 13 power level for upstream transmission optusage lt 1 2 gt Sets the use of optional channel 13 for the upstream or downstream traffic 1 unused 2 upstream payloadrate maxdsfast Specifies the maximum 13 lt 64 104960 gt downstream fast channel data rate in bits second maxdsslow Specifies the maximum 13 lt 64 104960 gt downstream slow channel data rate in bits second maxusfast Specifies the maximum upstream 13 lt 64 104960 gt fast channel data rate in bits second maxusslow Specifies the maximum upstream 13 lt 64 104960 gt slow channel data rate in bits second mindsfast Specifies the minimum 13 lt 64 104960 gt downstream fast channel data rate in bits second mindsslow Specifies the minimum 13 lt 64 104960 gt downstream slow channel data rate in bits second minusfast Specifies the minimum upstream 13 lt 64 104960 gt fast channel data rate in bits second minusslow Specifies the minimum upstream 13 lt 64 104960 gt slow channel data rate in bits second pbo uscon
318. y log back in again 32 2 1 Multiple Login You can use a direct console connection or Telnet to access the command interpreter on the switch LES The switch automatically logs you out of the management interface after five minutes of inactivity If this happens to you simply log back in again By default the multi login feature is enabled to allow multiple CLI management sessions e Use the configure multi login command in the configuration mode to allow multiple concurrent logins However no more than five concurrent login sessions are allowed To disable this feature use the configure no multi login command 32 2 2 The Console Port Connect to the switch s console port using a terminal emulation software configured to the following settings VT100 terminal emulation 9600 bps No parity 8 data bits 1 stop bit No flow control VES 1616F 3x Series User s Guide Chapter 32 Introducing the Commands 32 2 2 1 Initial Screen When you turn on your switch it performs several internal tests as well as line initialization You can view the initialization information using the console port After the initialization the login screen displays refer to Section 32 3 on page 212 Copyright c 1994 2006 ZyXEL Communications Corp initialize mgmt ethernet address 00 13 49 01 23 45 initialize switch ethernet address 00 13 49 01 23 46 Initializing switch unit 0 Press E
319. y to guess and that consists of different types of characters such as numbers and letters Write down the password and put it in a safe place Back up the configuration and make sure you know how to restore it Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes If you forget your password you will have to reset the Switch to its factory default settings If you backed up an earlier configuration file you would not have to totally re configure the Switch You could simply restore your last configuration VES 1616F 3x Series User s Guide 33 Chapter 1 Getting to Know Your Switch VES 1616F 3x Series User s Guide Hardware Installation This chapter shows you how to install the switch LES Do NOT block the ventilation holes Leave space between devices when stacking For proper ventilation allow at least 4 inches 10 cm of clearance at the front and 3 4 inches 8 cm at the back of the switch This is especially important for enclosed rack installations 2 1 Mounting the Switch on a Rack This section lists the rack mounting requirements and precautions and describes the installation steps 2 1 1 Rack mounted Installation Requirements Two mounting brackets Eight M3 flat head screws and a 2 Philips screwdriver Four MS flat head screws and a 2 Philips screwdriver LES Failure to use the proper screws may damage the unit 2 1 1 1 Prec
320. you do not block ventilation holes on the switch Fan Speed A properly functioning fan is an essential component along with a sufficiently RPM ventilated cool operating environment in order for the device to stay within the temperature threshold Each fan has a sensor that is capable of detecting and reporting if the fan speed falls below the threshold shown 64 VES 1616F 3x Series User s Guide Chapter 6 Basic Setting Table 9 System Info continued LABEL DESCRIPTION Current This field displays this fan s current speed in Revolutions Per Minute RPM MAX This field displays this fan s maximum speed measured in Revolutions Per Minute RPM MIN This field displays this fan s minimum speed measured in Revolutions Per Minute RPM Threshold This field displays the minimum speed at which a normal fan should work Status Normal indicates that this fan is functioning above the minimum speed Error indicates that this fan is functioning below the minimum speed If Error displays it is recommended that the fan s on the switch be replaced by a qualified technician Voltage V The power supply for each voltage has a sensor that is capable of detecting and reporting if the voltage falls out of the tolerance range Current This is the current voltage reading MAX This field displays the maximum voltage measured at this point MIN This field displays the minimum volta

ZyXEL VES-1616F-3X User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents