ZyXEL ES-3124 User Manual

ES-3124Intelligent Layer 3 Switch 24-port Fast Ethernet + 2 Gigabit Ethernet Ports2 GbE Dual Personality Interfaces (Copper/SFP)User’s GuideVersion 3.

ES-3124 User’s Guide8 Customer Support+” is the (prefix) number you enter to make an international telephone [email protected] +47-22-80-61-

ES-3124 User’s Guide98 Chapter 8 VLAN8.9 Port-based VLAN Setup Port-based VLANs are VLANs where the packet forwarding decision is based on the de

ES-3124 User’s GuideChapter 8 VLAN 99Figure 41 Port Based VLAN Setup (All Connected)

ES-3124 User’s Guide100 Chapter 8 VLANFigure 42 Port Based VLAN Setup (Port Isolation)

ES-3124 User’s GuideChapter 8 VLAN 101The following table describes the labels in this screen. Table 19 Port Based VLAN Setup LABEL DESCRIPTIONSetti

ES-3124 User’s Guide102 Chapter 8 VLAN

ES-3124 User’s GuideChapter 9 Static MAC Forwarding 103CHAPTER 9Static MAC ForwardingUse these screens to configure static MAC address forwarding.9.1

ES-3124 User’s Guide104 Chapter 9 Static MAC ForwardingThe following table describes the labels in this screen. Table 20 Static MAC Forwarding LABEL

ES-3124 User’s GuideChapter 10 Filtering 105CHAPTER 10FilteringThis chapter discusses static IP and MAC address port filtering.10.1 Configure a Filte

ES-3124 User’s Guide106 Chapter 10 FilteringAction Select Discard source to drop frame from the source MAC address (specified in the MAC field). The s

ES-3124 User’s GuideChapter 11 Spanning Tree Protocol 107CHAPTER 11Spanning Tree ProtocolThe switch supports Spanning Tree Protocol (STP) and Rapid S

ES-3124 User’s GuideTable of Contents 9Table of ContentsCopyright ...

ES-3124 User’s Guide108 Chapter 11 Spanning Tree ProtocolOn each bridge, the root port is the port through which this bridge communicates with the roo

ES-3124 User’s GuideChapter 11 Spanning Tree Protocol 10911.1.4 Multiple RSTP MRSTP (Multiple RSTP) is ZyXEL’s proprietary feature that is compatibl

ES-3124 User’s Guide110 Chapter 11 Spanning Tree ProtocolFigure 46 Spanning Tree Protocol RSTP and MRSTPThe following table describes the labels in

ES-3124 User’s GuideChapter 11 Spanning Tree Protocol 111Figure 47 RSTP: Configuration

ES-3124 User’s Guide112 Chapter 11 Spanning Tree ProtocolThe following table describes the labels in this screen. Table 25 RSTP: Configuration LABEL

ES-3124 User’s GuideChapter 11 Spanning Tree Protocol 11311.4 Rapid Spanning Tree Protocol Status Click Advanced Application, Spanning Tree Prot

ES-3124 User’s Guide114 Chapter 11 Spanning Tree Protocol11.5 Configure Multiple Rapid Spanning Tree Protocol To configure MRSTP, select MRSTP in t

ES-3124 User’s GuideChapter 11 Spanning Tree Protocol 115Figure 49 MRSTP: Configuration

ES-3124 User’s Guide116 Chapter 11 Spanning Tree ProtocolThe following table describes the labels in this screen. Table 27 MRSTP: Configuration LABE

ES-3124 User’s GuideChapter 11 Spanning Tree Protocol 11711.6 Multiple Rapid Spanning Tree Protocol Status Click Advanced Application, Spanning

ES-3124 User’s Guide10 Table of ContentsChapter 3Hardware Overview...

ES-3124 User’s Guide118 Chapter 11 Spanning Tree ProtocolMax Age (second) This is the maximum time (in seconds) a switch can wait without receiving a

ES-3124 User’s GuideChapter 12 Bandwidth Control 119CHAPTER 12Bandwidth ControlThis chapter shows you how you can cap the maximum bandwidth using the

ES-3124 User’s Guide120 Chapter 12 Bandwidth ControlFigure 51 Bandwidth Control The following table describes the related labels in this screen. Tab

ES-3124 User’s GuideChapter 12 Bandwidth Control 121* Settings in this row apply to all ports.Use this row only if you want to make some settings the

ES-3124 User’s Guide122 Chapter 12 Bandwidth Control

ES-3124 User’s GuideChapter 13 Broadcast Storm Control 123CHAPTER 13Broadcast Storm ControlThis chapter introduces and shows you how to configure the

ES-3124 User’s Guide124 Chapter 13 Broadcast Storm ControlFigure 52 Broadcast Storm Control

ES-3124 User’s GuideChapter 13 Broadcast Storm Control 125The following table describes the labels in this screen. Table 30 Broadcast Storm Control

ES-3124 User’s Guide126 Chapter 13 Broadcast Storm Control

ES-3124 User’s GuideChapter 14 Mirroring 127CHAPTER 14MirroringThis chapter discusses the Mirror setup screens.14.1 Port Mirroring Setup Port mirrori

ES-3124 User’s GuideTable of Contents 11Chapter 7Basic Setting ...

ES-3124 User’s Guide128 Chapter 14 MirroringFigure 53 Mirroring

ES-3124 User’s GuideChapter 14 Mirroring 129The following table describes the labels in this screen. Table 31 Mirroring LABEL DESCRIPTIONActive Sele

ES-3124 User’s Guide130 Chapter 14 Mirroring

ES-3124 User’s GuideChapter 15 Link Aggregation 131CHAPTER 15Link AggregationThis chapter shows you how to logically aggregate physical links to form

ES-3124 User’s Guide132 Chapter 15 Link Aggregation15.2.1 Link Aggregation ID LACP aggregation ID consists of the following information1: 15.3

ES-3124 User’s GuideChapter 15 Link Aggregation 133The following table describes the labels in this screen. 15.4 Link Aggregation Setup Click Con

ES-3124 User’s Guide134 Chapter 15 Link AggregationFigure 55 Link Aggregation: Configuration

ES-3124 User’s GuideChapter 15 Link Aggregation 135The following table describes the labels in this screen.Table 35 Link Aggregation Control Protoco

ES-3124 User’s Guide136 Chapter 15 Link Aggregation

ES-3124 User’s GuideChapter 16 Port Authentication 137CHAPTER 16Port AuthenticationThis chapter describes the 802.1x authentication method and RADIUS

ES-3124 User’s Guide12 Table of Contents11.1.1 STP Terminology ...1071

ES-3124 User’s Guide138 Chapter 16 Port AuthenticationNote: Refer to the documentation that comes with your RADIUS server on how to configure a VSA. T

ES-3124 User’s GuideChapter 16 Port Authentication 139Click Advanced Application, Port Authentication in the navigation panel to display the screen as

ES-3124 User’s Guide140 Chapter 16 Port Authentication16.2.2 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x security. From

ES-3124 User’s GuideChapter 16 Port Authentication 141Figure 59 Port Authentication: 802.1x

ES-3124 User’s Guide142 Chapter 16 Port AuthenticationThe following table describes the labels in this screen. Table 39 Port Authentication: 802.1x

ES-3124 User’s GuideChapter 17 Port Security 143CHAPTER 17Port SecurityThis chapter shows you how to set up port security.17.1 About Port Security Po

ES-3124 User’s Guide144 Chapter 17 Port SecurityFigure 60 Port Security The following table describes the labels in this screen. Table 40 Port Sec

ES-3124 User’s GuideChapter 17 Port Security 145* Settings in this row apply to all ports.Use this row only if you want to make some settings the same

ES-3124 User’s Guide146 Chapter 17 Port Security

ES-3124 User’s GuideChapter 18 Classifier 147CHAPTER 18ClassifierThis chapter introduces and shows you how to configure the packet classifier on the s

ES-3124 User’s GuideTable of Contents 13Chapter 17Port Security...

ES-3124 User’s Guide148 Chapter 18 ClassifierFigure 61 ClassifierThe following table describes the labels in this screen. Table 41 Classifier LABE

ES-3124 User’s GuideChapter 18 Classifier 149Layer 2Specify the fields below to configure a layer 2 classifier.VLAN Select Any to classify traffic fro

ES-3124 User’s Guide150 Chapter 18 Classifier18.3 Viewing and Editing Classifier ConfigurationTo view a summary of the classifier configuration, scro

ES-3124 User’s GuideChapter 18 Classifier 151Some of the most common IP ports are: 18.4 Classifier ExampleThe following figure shows an example where

ES-3124 User’s Guide152 Chapter 18 ClassifierFigure 63 Classifier: Example

ES-3124 User’s GuideChapter 19 Policy Rule 153CHAPTER 19Policy RuleThis chapter shows you how to configure policy rules. 19.1 Policy Rules Overview A

ES-3124 User’s Guide154 Chapter 19 Policy Rule19.2 Configuring Policy Rules You must first configure a classifier in the Classifier screen. Refer to

ES-3124 User’s GuideChapter 19 Policy Rule 155The following table describes the labels in this screen. Table 45 Policy LABEL DESCRIPTIONActive Selec

ES-3124 User’s Guide156 Chapter 19 Policy Rule19.3 Viewing and Editing Policy ConfigurationTo view a summary of the classifier configuration, scroll

ES-3124 User’s GuideChapter 19 Policy Rule 157The following table describes the labels in this screen. 19.4 Policy ExampleThe figure below shows an e

ES-3124 User’s Guide14 Table of Contents22.1.3 IGMP Snooping ...1692

ES-3124 User’s Guide158 Chapter 19 Policy RuleFigure 66 Policy Example

ES-3124 User’s GuideChapter 20 Queuing Method 159CHAPTER 20Queuing MethodThis chapter introduces the queuing methods supported.20.1 Queuing Method Ov

ES-3124 User’s Guide160 Chapter 20 Queuing Method20.1.3 Weighted Round Robin Scheduling (WRR) Round Robin Scheduling services queues on a rotating ba

ES-3124 User’s GuideChapter 20 Queuing Method 161Figure 67 Queuing Method

ES-3124 User’s Guide162 Chapter 20 Queuing MethodThe following table describes the labels in this screen. Table 47 Queuing Method LABEL DESCRIPTION

ES-3124 User’s GuideChapter 21 VLAN Stacking 163CHAPTER 21VLAN StackingThis chapter shows you how to configure VLAN stacking on your switch. See the c

ES-3124 User’s Guide164 Chapter 21 VLAN StackingFigure 68 VLAN Stacking Example 21.2 VLAN Stacking Port RolesEach port can have three VLAN stacking

ES-3124 User’s GuideChapter 21 VLAN Stacking 165Type is a standard Ethernet type code identifying the frame and indicates that whether the frame carri

ES-3124 User’s Guide166 Chapter 21 VLAN Stacking21.4 Configuring VLAN StackingClick Advanced Applications and then VLAN Stacking to display the scree

ES-3124 User’s GuideChapter 21 VLAN Stacking 167The following table describes the labels in this screen. Table 51 VLAN StackingLABEL DESCRIPTIONActi

ES-3124 User’s GuideTable of Contents 15Chapter 27Access Control...

ES-3124 User’s Guide168 Chapter 21 VLAN Stacking

ES-3124 User’s GuideChapter 22 Multicast 169CHAPTER 22MulticastThis chapter shows you how to configure various multicast features. 22.1 Multicast Ove

ES-3124 User’s Guide170 Chapter 22 MulticastThe switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snoopin

ES-3124 User’s GuideChapter 22 Multicast 171Multicast Setting

ES-3124 User’s Guide172 Chapter 22 MulticastThe following table describes the labels in this screen. Table 53 Multicast Setting LABEL DESCRIPTIONIGM

ES-3124 User’s GuideChapter 22 Multicast 17322.4 IGMP Filtering Profile IGMP filter profiles allow you to control access to IGMP multicast groups. Th

ES-3124 User’s Guide174 Chapter 22 MulticastFigure 71 Multicast: IGMP Filtering Profile The following table describes the labels in this screen. Tab

ES-3124 User’s GuideChapter 22 Multicast 17522.5 MVR Overview Multicast VLAN Registration (MVR) is designed for applications (such as Media-on-Demand

ES-3124 User’s Guide176 Chapter 22 Multicast22.5.3 How MVR WorksThe following figure shows a multicast television example where a subscriber device (

ES-3124 User’s GuideChapter 22 Multicast 177Figure 74 MVR

ES-3124 User’s Guide16 Table of ContentsChapter 32ARP Table...

ES-3124 User’s Guide178 Chapter 22 MulticastThe following table describes the related labels in this screen. Table 55 MVRLABEL DESCRIPTIONActive Sel

ES-3124 User’s GuideChapter 22 Multicast 17922.7 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can recei

ES-3124 User’s Guide180 Chapter 22 Multicast22.7.1 MVR Configuration ExampleThe following figure shows a network example where ports 1, 2 and 3 on th

ES-3124 User’s GuideChapter 22 Multicast 181Figure 77 MVR Configuration Example To set the switch to forward the multicast group traffic to the subs

ES-3124 User’s Guide182 Chapter 22 MulticastFigure 78 MVR Group Configuration Example Figure 79 MVR Group Configuration Example

ES-3124 User’s GuideChapter 23 DHCP Relay 183CHAPTER 23DHCP RelayThis chapter shows you how to set up DHCP relay.23.1 DHCP Relay Overview DHCP (Dyna

ES-3124 User’s Guide184 Chapter 23 DHCP RelayFigure 80 DHCP RelayThe following table describes the labels in this screen. Table 57 DHCP Relay LAB

ES-3124 User’s GuideChapter 24 Static Route 185CHAPTER 24Static RouteThis chapter shows you how to configure static routes.24.1 Configuring Static Ro

ES-3124 User’s Guide186 Chapter 24 Static RouteDestination IP AddressThis parameter specifies the IP network address of the final destination. Routing

ES-3124 User’s GuideChapter 25 DiffServ Code Point 187CHAPTER 25DiffServ Code PointThis chapter shows you how to set up Diffserv Code Point (DSCP) on

ES-3124 User’s GuideTable of Contents 1735.2.5 show mac address-table ...26935.3 p

ES-3124 User’s Guide188 Chapter 25 DiffServ Code PointFigure 82 DiffServ

ES-3124 User’s GuideChapter 25 DiffServ Code Point 189The following table describes the related labels you use to create a static route. 25.3 Config

ES-3124 User’s Guide190 Chapter 25 DiffServ Code PointFigure 83 DiffServ The following table describes the related labels you use to create a static

ES-3124 User’s GuideChapter 26 Maintenance 191CHAPTER 26MaintenanceThis chapter explains how to configure the maintenance screens that let you maintai

ES-3124 User’s Guide192 Chapter 26 Maintenance26.2 Load Factory Defaults Follow the steps below to reset the switch back to the factory defaults. 1 I

ES-3124 User’s GuideChapter 26 Maintenance 193Note: Note: Clicking the Apply or Add button does NOT save the changes permanently. All unsaved changes

ES-3124 User’s Guide194 Chapter 26 MaintenanceFigure 87 Firmware Upgrade Type the path and file name of the firmware file you wish to upload to the

ES-3124 User’s GuideChapter 26 Maintenance 195Back up your current switch configuration to a computer using the Backup Configuration screen. Figure 89

ES-3124 User’s Guide196 Chapter 26 Maintenance26.8.1.1 Example FTP Commandsftp> put firmware.bin rasThis is a sample FTP session showing the trans

ES-3124 User’s GuideChapter 26 Maintenance 19726.8.3 GUI-based FTP ClientsThe following table describes some of the commands that you may see in GUI-

ES-3124 User’s Guide18 Table of Contents37.2.11 qos priority ...

ES-3124 User’s Guide198 Chapter 26 Maintenance

ES-3124 User’s GuideChapter 27 Access Control 199CHAPTER 27Access ControlThis chapter describes how to control access to the switch.27.1 Access Contr

ES-3124 User’s Guide200 Chapter 27 Access Control27.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to

ES-3124 User’s GuideChapter 27 Access Control 20127.3.1 Supported MIBs MIBs let administrators collect statistics and monitor status and performance

ES-3124 User’s Guide202 Chapter 27 Access Control27.3.3 Configuring SNMP From the Access Control screen, display the SNMP screen. You can click Ac

ES-3124 User’s GuideChapter 27 Access Control 203Note: It is highly recommended that you change the default administrator password (1234).• A non-adm

ES-3124 User’s Guide204 Chapter 27 Access Control27.4 SSH OverviewUnlike Telnet or FTP, which transmit data in clear text, SSH (Secure Shell) is a se

ES-3124 User’s GuideChapter 27 Access Control 205Figure 95 How SSH Works1 Host IdentificationThe SSH client sends a connection request to the SSH se

ES-3124 User’s Guide206 Chapter 27 Access Control27.6.1 Requirements for Using SSHYou must install an SSH client program on a client computer (Window

ES-3124 User’s GuideChapter 27 Access Control 20727.8 HTTPS ExampleIf you haven’t changed the default HTTPS port on the switch, then in your browser

ES-3124 User’s GuideTable of Contents 19Appendix AProduct Specifications ...

ES-3124 User’s Guide208 Chapter 27 Access ControlFigure 98 Security Certificate 1 (Netscape)Figure 99 Security Certificate 2 (Netscape)27.8.3 The

ES-3124 User’s GuideChapter 27 Access Control 209Figure 100 Login Screen (Internet Explorer)

ES-3124 User’s Guide210 Chapter 27 Access ControlFigure 101 Login Screen (Netscape)27.9 Service Port Access Control Service Access Control allows

ES-3124 User’s GuideChapter 27 Access Control 211Figure 102 Access Control: Service Access Control The following table describes the fields in this

ES-3124 User’s Guide212 Chapter 27 Access ControlFigure 103 Access Control: Remote Management The following table describes the labels in this scree

ES-3124 User’s GuideChapter 28 Diagnostic 213CHAPTER 28DiagnosticThis chapter explains the Diagnostic screen.28.1 Diagnostic Click Management, Diagno

ES-3124 User’s Guide214 Chapter 28 Diagnostic

ES-3124 User’s GuideChapter 29 Syslog 215CHAPTER 29SyslogThis chapter explains the syslog screens.29.1 Syslog Overview The syslog protocol allows dev

ES-3124 User’s Guide216 Chapter 29 SyslogFigure 105 Syslog The following table describes the labels in this screen. 29.3 Syslog Server Setup Click

ES-3124 User’s GuideChapter 29 Syslog 217Figure 106 Syslog: Server Setup The following table describes the labels in this screen.Table 73 Syslog:

ES-3124 User’s Guide20 Table of Contents

ES-3124 User’s Guide218 Chapter 29 Syslog

ES-3124 User’s GuideChapter 30 Cluster Management 219CHAPTER 30Cluster ManagementThis chapter introduces cluster management.30.1 Cluster Management S

ES-3124 User’s Guide220 Chapter 30 Cluster ManagementFigure 107 Clustering Application Example 30.2 Cluster Management Status Click Management, C

ES-3124 User’s GuideChapter 30 Cluster Management 221Figure 108 Cluster Management: Status The following table describes the labels in this screen.

ES-3124 User’s Guide222 Chapter 30 Cluster ManagementFigure 109 Cluster Management: Cluster Member Web Configurator Screen 30.2.1.1 Uploading Firmw

ES-3124 User’s GuideChapter 30 Cluster Management 223Figure 110 Example: Uploading Firmware to a Cluster Member Switch The following table explains

ES-3124 User’s Guide224 Chapter 30 Cluster ManagementFigure 111 Clustering Management Configuration The following table describes the labels in thi

ES-3124 User’s GuideChapter 30 Cluster Management 225Apply Click Apply to save your changes to the switch’s run-time memory. The switch loses these ch

ES-3124 User’s Guide226 Chapter 30 Cluster Management

ES-3124 User’s GuideChapter 31 MAC Table 227CHAPTER 31MAC TableThis chapter introduces the MAC Table screen.31.1 MAC Table Overview The MAC Table scr

ES-3124 User’s GuideList of Figures 21List of FiguresFigure 1 Backbone Application ...

ES-3124 User’s Guide228 Chapter 31 MAC Table31.2 Viewing the MAC Table Click Management, MAC Table in the navigation panel to display the followin

ES-3124 User’s GuideChapter 32 ARP Table 229CHAPTER 32ARP TableThis chapter introduces ARP Table.32.1 ARP Table Overview Address Resolution Protocol

ES-3124 User’s Guide230 Chapter 32 ARP TableFigure 114 ARP Table The following table describes the labels in this screen. Table 79 ARP Table LABEL

ES-3124 User’s GuideChapter 33 Configure Clone 231CHAPTER 33Configure CloneThis chapter shows you how you can copy the settings of one port onto other

ES-3124 User’s Guide232 Chapter 33 Configure CloneThe following table describes the labels in this screen. Table 80 Configure Clone LABEL DESCRIPTIO

ES-3124 User’s GuideChapter 34 Introducing Commands 233CHAPTER 34 Introducing CommandsThis chapter introduces commands and gives a summary of commands

ES-3124 User’s Guide234 Chapter 34 Introducing Commands34.2.1.1 Initial ScreenWhen you turn on your switch, it performs several internal tests as wel

ES-3124 User’s GuideChapter 34 Introducing Commands 235means that the contact and location fields are optional.• “Command” refers to a command used in

ES-3124 User’s Guide236 Chapter 34 Introducing CommandsSyntax: logins username <username> password <password>logins username <username&

ES-3124 User’s GuideChapter 34 Introducing Commands 237Enter exit to quit from the current mode or enter logout to exit the command interpreter.34.8

ES-3124 User’s Guide22 List of FiguresFigure 39 Protocol Based VLAN ... 96Fi

ES-3124 User’s Guide238 Chapter 34 Introducing Commands34.8.1 List of Available CommandsEnter “help” to display a list of available commands and the

ES-3124 User’s GuideChapter 34 Introducing Commands 239Enter <command> ? to display detailed help information about the sub commands and paramet

ES-3124 User’s Guide240 Chapter 34 Introducing Commands• Use the same configuration file to set all switches (of the same model) in your network to th

ES-3124 User’s GuideChapter 34 Introducing Commands 24134.11.2 Enable ModeThe following table describes the commands available for Enable mode. <I

ES-3124 User’s Guide242 Chapter 34 Introducing CommandsudpDisplays UDP related information. 13routeDisplays IP routing information. 13 route staticDis

ES-3124 User’s GuideChapter 34 Introducing Commands 243classifierDisplays all classifier related information.13<name>Displays the specified clas

ES-3124 User’s Guide244 Chapter 34 Introducing CommandsloginPrecedenceDisplays login precedence settings. 13loggingDisplays system logs. 13vlan-stacki

ES-3124 User’s GuideChapter 34 Introducing Commands 245kick tcp <Session ID>Resets a TCP connection. Use the show ip tcp command to get the Sess

ES-3124 User’s Guide246 Chapter 34 Introducing Commands34.11.3 General Configuration ModeThe following table lists the commands in Configuration (or

ES-3124 User’s GuideChapter 34 Introducing Commands 247no ipSets the management IP address to the default value.13route <ip> <mask> Remove

ES-3124 User’s GuideList of Figures 23Figure 82 DiffServ ...

ES-3124 User’s Guide248 Chapter 34 Introducing Commandsbandwidth-controlDisable bandwidth control on the switch. 13vlan1q gvrpDisables GVRP on the swi

ES-3124 User’s GuideChapter 34 Introducing Commands 249snmpDisables SNMP management. 13remote-management <index>Clears a secure client set entry

ES-3124 User’s Guide250 Chapter 34 Introducing Commandscluster member <mac-address>Removes the cluster member. 13mvr <vlan-id>Disables MV

ES-3124 User’s GuideChapter 34 Introducing Commands 251fe-spq <q0|q1|..|q7>Sets the switch to use SPQ to service the subsequent queue(s) after a

ES-3124 User’s Guide252 Chapter 34 Introducing Commands<T1|T2|T3|T4|T5|T6> interface <port-list>Adds a port(s) to the specified trunk grou

ES-3124 User’s GuideChapter 34 Introducing Commands 253classifier <name> <[ packet-format <802.3untag|802.3tag|EtherIIuntag|E

ES-3124 User’s Guide254 Chapter 34 Introducing Commandspolicy <name> classifier <classifier-list> < [ vlan<vlan-id> ]

ES-3124 User’s GuideChapter 34 Introducing Commands 255timeout <1-1000>Specifes the RADIUS server timeout value.13mode <priority|round-robin&

ES-3124 User’s Guide256 Chapter 34 Introducing Commandshello-time <1-10> maximum-age <6-40> forward-delay <4-30>Sets Hello Time, Max

ES-3124 User’s GuideChapter 34 Introducing Commands 257storm-controlEnables broadcast storm control on the switch.13bandwidth-controlEnables bandwidth

ES-3124 User’s Guide24 List of Figures

ES-3124 User’s Guide258 Chapter 34 Introducing Commands<index> start-addr <ip> end-addr <ip> service <[telnet] [ftp] [http] [icmp

ES-3124 User’s GuideChapter 34 Introducing Commands 25934.11.4 interface port-channel CommandsThe following table lists the interface port-channel co

ES-3124 User’s Guide260 Chapter 34 Introducing Commandspvid <1-4094>The default PVID is VLAN 1 for all ports. Sets a PVID in the range 1 to 4094

ES-3124 User’s GuideChapter 34 Introducing Commands 261multicast-limitEnables the interface multicast limit.13<pkt/s>Sets how many multicast pac

ES-3124 User’s Guide262 Chapter 34 Introducing Commandsvlan-trunkingDisables VLAN trunking on the port(s). 13mirrorDisables port mirroring on the port

ES-3124 User’s GuideChapter 34 Introducing Commands 26334.11.5 config-vlan CommandsThe following table lists the vlan commands in configuration mode.

ES-3124 User’s Guide264 Chapter 34 Introducing Commands34.11.6 mvr CommandsThe following table lists the mvr commands in configuration mode. inband-d

ES-3124 User’s GuideChapter 34 Introducing Commands 265group <name-str> start-address <ip> end-address <ip>Sets the multicast group

ES-3124 User’s Guide266 Chapter 34 Introducing Commands

ES-3124 User’s GuideChapter 35 User and Enable Mode Commands 267CHAPTER 35 User and Enable ModeCommandsThis chapter describes some commands which you

ES-3124 User’s GuideList of Tables 25List of TablesTable 1 Panel Connections ...

ES-3124 User’s Guide268 Chapter 35 User and Enable Mode Commands35.2.2 show ipSyntax: show ipThis command displays the IP related information (such

ES-3124 User’s GuideChapter 35 User and Enable Mode Commands 269This command displays statistics of a port. The following example shows that port 2 i

ES-3124 User’s Guide270 Chapter 35 User and Enable Mode CommandsThis command displays the MAC address(es) stored in the switch. The following example

ES-3124 User’s GuideChapter 35 User and Enable Mode Commands 271where This command displays information about the route to an Ethernet device. The fo

ES-3124 User’s Guide272 Chapter 35 User and Enable Mode Commandswhere An example is shown next.• Copy all attributes of port 1 to port 2 • Copy selec

ES-3124 User’s GuideChapter 35 User and Enable Mode Commands 273Note: When you use the write memory command without specifying a configuration file i

ES-3124 User’s Guide274 Chapter 35 User and Enable Mode Commands

ES-3124 User’s GuideChapter 36 Configuration Mode Commands 275CHAPTER 36Configuration Mode CommandsThis chapter describes how to enable and configure

ES-3124 User’s Guide276 Chapter 36 Configuration Mode Commands• Enable IGMP snooping on the switch. • Set the host-timeout and leave-timeout values to

ES-3124 User’s GuideChapter 36 Configuration Mode Commands 27736.3 Enabling STPUse the spanning-tree or the mrstp commands to enable and configure ST

ES-3124 User’s Guide26 List of TablesTable 39 Port Authentication: 802.1x ... 142Ta

ES-3124 User’s Guide278 Chapter 36 Configuration Mode CommandsAn example using spanning-tree command is shown next.• Enable STP on the switch. • Set t

ES-3124 User’s GuideChapter 36 Configuration Mode Commands 27936.4 no Command ExamplesThese are the commonly used command examples that belong to the

ES-3124 User’s Guide280 Chapter 36 Configuration Mode Commandswhere An example is shown next.• Enable the IP route with the IP address of 192.168.11.1

ES-3124 User’s GuideChapter 36 Configuration Mode Commands 28136.4.4.2 no port-access-authenticatorSyntax: no port-access-authenticator no port-acces

ES-3124 User’s Guide282 Chapter 36 Configuration Mode Commands• Disable the secure shell RSA1 encryption key.• Remove the remote host with IP address

ES-3124 User’s GuideChapter 36 Configuration Mode Commands 283Syntax: ip route <ip> <mask> <next-hop-ip>ip route <ip> <mask

ES-3124 User’s Guide284 Chapter 36 Configuration Mode Commandswhere An example is shown next.• Create a filtering rule called “filter1”. • Drop packe

ES-3124 User’s GuideChapter 36 Configuration Mode Commands 285• Place ports 5-10 in trunk 1.• Enable dynamic link aggregation (LACP) on trunk 1. 36.9

ES-3124 User’s Guide286 Chapter 36 Configuration Mode CommandsSee Section 36.9.2 on page 286 for an example.36.9.2 Port Authentication SettingsUse th

ES-3124 User’s GuideChapter 36 Configuration Mode Commands 287An example is shown next.• Specify RADIUS server 1 with IP address 10.10.10.1, port 1890

ES-3124 User’s GuideList of Tables 27Table 82 Command Summary: User Mode ... 240Table 83 Com

ES-3124 User’s Guide288 Chapter 36 Configuration Mode Commands

ES-3124 User’s GuideChapter 37 Interface Commands 289CHAPTER 37Interface CommandsThese are some commonly used configuration commands that belong to th

ES-3124 User’s Guide290 Chapter 37 Interface Commandswhere An example is shown next.• Enable ports 1, 3, 4 and 5 for configuration.• Set the BPDU cont

ES-3124 User’s GuideChapter 37 Interface Commands 291Syntax:bandwidth-limit bandwidth-limit pir <Kbps>bandwidth-limit cir <Kbps>bandwidth-

ES-3124 User’s Guide292 Chapter 37 Interface Commands• Enable port mirroring.• Enable the monitor port 3.• Enable ports 1, 4, 5 and 6 for configuratio

ES-3124 User’s GuideChapter 37 Interface Commands 293• Enable ingress checking on the interface.37.2.8 frame-type Syntax:frame-type <all|tagged|un

ES-3124 User’s Guide294 Chapter 37 Interface Commands• Set the queue weights from Q0 to Q7. 37.2.10 egress set Syntax:egress set <port-list>wh

ES-3124 User’s GuideChapter 37 Interface Commands 29537.2.12 nameSyntax:name <port-name-string>whereAn example is shown next.• Enable ports one

ES-3124 User’s Guide296 Chapter 37 Interface CommandsAn example is shown next.• Select ports 33-36 for internal loopback test.• Execute the test comma

ES-3124 User’s GuideChapter 38 IEEE 802.1Q Tagged VLAN Commands 297CHAPTER 38IEEE 802.1Q Tagged VLANCommandsThis chapter describes the IEEE 802.1Q Tag

ES-3124 User’s GuideCopyright 1CopyrightCopyright © 2006 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced in

ES-3124 User’s Guide28 List of Tables

ES-3124 User’s Guide298 Chapter 38 IEEE 802.1Q Tagged VLAN Commands38.2 Global VLAN1Q Tagged VLAN Configuration Commands This section shows you how t

ES-3124 User’s GuideChapter 38 IEEE 802.1Q Tagged VLAN Commands 299Switches join VLANs by making a declaration. A declaration is made by issuing a Joi

ES-3124 User’s Guide300 Chapter 38 IEEE 802.1Q Tagged VLAN Commands38.3.1 Set Port VID Syntax:pvid <VID>whereThis command sets the default VLAN

ES-3124 User’s GuideChapter 38 IEEE 802.1Q Tagged VLAN Commands 30138.3.4 Modify Static VLAN Use the following commands in the config-vlan mode to co

ES-3124 User’s Guide302 Chapter 38 IEEE 802.1Q Tagged VLAN Commands3 The switch notes what the SVLAN table says (that is, the SVLAN tells the switch w

ES-3124 User’s GuideChapter 38 IEEE 802.1Q Tagged VLAN Commands 30338.5 Disable VLANSyntax:vlan <vlan-id> inactiveThis command disables the spe

ES-3124 User’s Guide304 Chapter 38 IEEE 802.1Q Tagged VLAN Commands

ES-3124 User’s GuideChapter 39 Multicast VLAN Registration Commands 305CHAPTER 39Multicast VLAN RegistrationCommandsThis chapter shows you how to use

ES-3124 User’s Guide306 Chapter 39 Multicast VLAN Registration Commands• Enter MVR mode. Create a multicast VLAN with the name multiVlan and the VLAN

ES-3124 User’s GuideChapter 40 Troubleshooting 307CHAPTER 40TroubleshootingThis chapter covers potential problems and possible remedies. 40.1 Problem

ES-3124 User’s GuidePreface 29PrefaceCongratulations on your purchase of the ES-3124 Intelligent Layer 3 Switch.This preface introduces you to the ES-

ES-3124 User’s Guide308 Chapter 40 Troubleshooting40.2.1 Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you ne

ES-3124 User’s GuideChapter 40 Troubleshooting 309Figure 118 Internet Options3 Click Apply to save this setting.40.2.1.1.2 Enable pop-up Blockers

ES-3124 User’s Guide310 Chapter 40 TroubleshootingFigure 119 Internet Options3 Type the IP address of your device (the web page that you do not want

ES-3124 User’s GuideChapter 40 Troubleshooting 311Figure 120 Pop-up Blocker Settings5 Click Close to return to the Privacy screen. 6 Click Apply to

ES-3124 User’s Guide312 Chapter 40 TroubleshootingFigure 121 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Unde

ES-3124 User’s GuideChapter 40 Troubleshooting 313Figure 122 Security Settings - Java Scripting40.2.1.3 Java Permissions1 From Internet Explorer, c

ES-3124 User’s Guide314 Chapter 40 TroubleshootingFigure 123 Security Settings - Java 40.2.1.3.1 JAVA (Sun)1 From Internet Explorer, click Too ls,

ES-3124 User’s GuideChapter 40 Troubleshooting 315Figure 124 Java (Sun)40.3 Problems with the PasswordTable 90 Troubleshooting the PasswordPROBLE

ES-3124 User’s Guide316 Chapter 40 Troubleshooting

ES-3124 User’s GuideAppendix A Product Specifications 317APPENDIX AProduct SpecificationsThese are the switch product specifications. Table 91 Gener

ES-3124 User’s Guide30 PrefaceGraphics Icons Key User Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestio

ES-3124 User’s Guide318 Table 92 Management Specifications System Control Alarm/Status surveillanceLED indication for alarm and system statusPerform

ES-3124 User’s GuideAppendix A Product Specifications 319Safety ANS/UL 60950-1CSA 60950-1EN 60950-1IEC 60950-1EMC FCC Part 15 (Class A)CE EMC (Class A

ES-3124 User’s Guide320

ES-3124 User’s GuideAppendix B IP Addresses and Subnetting 321APPENDIX BIP Addresses and SubnettingThis appendix introduces IP addresses, IP address c

ES-3124 User’s Guide322 Appendix B IP Addresses and SubnettingThe following table shows the network number and host ID arrangement for classes A, B an

ES-3124 User’s GuideAppendix B IP Addresses and Subnetting 323Subnet MasksA subnet mask is used to determine which bits are part of the network number

ES-3124 User’s Guide324 Appendix B IP Addresses and SubnettingThe first mask shown is the class “C” natural mask. Normally if no mask is specified it

ES-3124 User’s GuideAppendix B IP Addresses and Subnetting 325Host IDs of all zeros represent the subnet itself and host IDs of all ones are the broad

ES-3124 User’s Guide326 Appendix B IP Addresses and SubnettingExample Eight SubnetsSimilarly use a 27-bit mask to create eight subnets (000, 001, 010,

ES-3124 User’s GuideAppendix B IP Addresses and Subnetting 327The following table shows class C IP address last octet values for each subnet.The follo

ES-3124 User’s GuideChapter 1 Getting to Know Your Switch 31CHAPTER 1Getting to Know Your SwitchThis chapter introduces the main features and applicat

ES-3124 User’s Guide328 Appendix B IP Addresses and SubnettingThe following table is a summary for class “B” subnet planning. Table 107 Class B Subn

ES-3124 User’s GuideIndex 329IndexSymbols“standby” ports 131Numerics10/1000 Ethernet ports 45802.1P priority 83Aaccess controllimitation 199login acco

ES-3124 User’s Guide330 Indexstatic VLAN table example 301summary 240syntax conventions 234user mode details 240using history 239vlan mode details 263

ES-3124 User’s GuideIndex 331GVRP 86, 94GVRP (GARP VLAN Registration Protocol) 86, 292gvrp disable 299gvrp enable 299gvrp status 299Hhardware 35connec

ES-3124 User’s Guide332 Indexmanagementport 45Management Information Base (MIB) 200management interface, See also CLImanagement port 101MIBand SNMP 20

ES-3124 User’s GuideIndex 333WFQ 160WRR 160queuing algorithm 159, 162queuing method 159, 162Rrack-mounting 42RADIUS 137advantages 137network example 1

ES-3124 User’s Guide334 Indexpath cost 107, 112, 116port priority 112, 116port state 108root port 108status 113, 117terminology 107STP (Spanning Tree

ES-3124 User’s GuideIndex 335Wwarning lights 49warnings 4warranty 6note 6web configuratorgetting help 60help 60home 52logging out 60login 51navigation

ES-3124 User’s Guide32 Chapter 1 Getting to Know Your SwitchQueuingQueuing is used to help solve performance degradation when there is network congest

ES-3124 User’s GuideChapter 1 Getting to Know Your Switch 33Port Authentication and SecurityFor security, the switch allows authentication using IEEE

ES-3124 User’s Guide34 Chapter 1 Getting to Know Your SwitchIP Protocols• IP Host (No routing)• Telnet for configuration and monitoring• SNMP for mana

ES-3124 User’s GuideChapter 1 Getting to Know Your Switch 351.3 Hardware FeaturesThis section describes the hardware features of the ES-3124. 24 10/1

ES-3124 User’s Guide36 Chapter 1 Getting to Know Your Switch1.4.1 Backbone Application In this application, the switch is an ideal solution for small

ES-3124 User’s GuideChapter 1 Getting to Know Your Switch 37Figure 2 Bridging Application 1.4.3 High Performance Switched ExampleThe switch is ide

ES-3124 User’s Guide2 CertificationsCertificationsFederal Communications Commission (FCC) Interference StatementThis device complies with Part 15 of F

ES-3124 User’s Guide38 Chapter 1 Getting to Know Your SwitchA VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multi

ES-3124 User’s GuideChapter 1 Getting to Know Your Switch 39Figure 5 Shared Server Using VLAN Example

ES-3124 User’s Guide40 Chapter 1 Getting to Know Your Switch

ES-3124 User’s GuideChapter 2 Hardware Installation and Connection 41CHAPTER 2Hardware Installation andConnectionThis chapter shows you how to install

ES-3124 User’s Guide42 Chapter 2 Hardware Installation and Connection2.2 Mounting the Switch on a Rack This section lists the rack mounting requireme

ES-3124 User’s GuideChapter 2 Hardware Installation and Connection 43Figure 8 Mounting the Switch on a Rack 2 Using a #2 Philips screwdriver, insta

ES-3124 User’s Guide44 Chapter 2 Hardware Installation and Connection

ES-3124 User’s GuideChapter 3 Hardware Overview 45CHAPTER 3Hardware OverviewThis chapter describes the front panel and rear panel of the switch and sh

ES-3124 User’s Guide46 Chapter 3 Hardware Overview3.1.1 Console Port For local management, you can use a computer with terminal emulation software co

ES-3124 User’s GuideChapter 3 Hardware Overview 473.1.3 Mini-GBIC Slots These are slots for mini-GBIC (Gigabit Interface Converter) transceivers. A t

ES-3124 User’s GuideCertifications 32 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page.3 Selec

ES-3124 User’s Guide48 Chapter 3 Hardware OverviewFigure 11 Installed Transceiver 3.1.3.2 Transceiver Removal Use the following steps to remove

ES-3124 User’s GuideChapter 3 Hardware Overview 49Figure 14 Rear Panel 3.2.1 Power ConnectorMake sure you are using the correct power source as sh

ES-3124 User’s Guide50 Chapter 3 Hardware OverviewLNK/ACT Green Blinking The system is transmitting/receiving to/from a 1000 Mbps Ethernet network.On

ES-3124 User’s GuideChapter 4 The Web Configurator 51CHAPTER 4The Web ConfiguratorThis section introduces the configuration and functions of the web c

ES-3124 User’s Guide52 Chapter 4 The Web Configurator4 Click OK to view the first web configurator screen.4.3 The Status Screen The Status screen

ES-3124 User’s GuideChapter 4 The Web Configurator 534.4 Menu OverviewIn the navigation panel, click a main link to reveal a list of submenu links.Ta

ES-3124 User’s Guide54 Chapter 4 The Web ConfiguratorThe following table lists the various web configurator screens within the sub-links.Table 4 Web

ES-3124 User’s GuideChapter 4 The Web Configurator 55The following table describes the links in the navigation panel. Table 5 Navigation Panel Links

ES-3124 User’s Guide56 Chapter 4 The Web Configurator4.4.1 Change Your Password After you log in for the first time, it is recommended you change t

ES-3124 User’s GuideChapter 4 The Web Configurator 57Figure 17 Change Administrator Login Password 4.5 Saving Your ConfigurationWhen you are done m

ES-3124 User’s Guide4 Safety WarningsSafety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• Do NOT use this

ES-3124 User’s Guide58 Chapter 4 The Web Configurator6 Forgetting the password and/or IP address.7 Preventing all services from accessing the switch.

ES-3124 User’s GuideChapter 4 The Web Configurator 59Figure 18 Example Xmodem Upload7 After a configuration file upload, type atgo to restart the sw

ES-3124 User’s Guide60 Chapter 4 The Web Configurator4 Type atbr after the "Enter Debug Mode" message.Figure 20 Resetting the Switch: Via

ES-3124 User’s GuideChapter 5 Initial Setup Example 61CHAPTER 5Initial Setup ExampleThis chapter shows how to set up the switch for an example networ

ES-3124 User’s Guide62 Chapter 5 Initial Setup Example1 Click Advanced Application and VLAN in the navigation panel and click the Static VLAN link.

ES-3124 User’s GuideChapter 5 Initial Setup Example 635.1.2 Setting Port VID Use PVID to add a tag to incoming untagged frames received on that port

ES-3124 User’s Guide64 Chapter 5 Initial Setup Example5.2 Configuring Switch Management IP AddressThe default management IP address of the switch is

ES-3124 User’s GuideChapter 6 System Status and Port Statistics 65CHAPTER 6System Status and PortStatisticsThis chapter describes the system status (w

ES-3124 User’s Guide66 Chapter 6 System Status and Port StatisticsFigure 25 Status The following table describes the labels in this screen. Table 6

ES-3124 User’s GuideChapter 6 System Status and Port Statistics 676.1.1 Status: Port Details Click a number in the Port column in the Status scre

ES-3124 User’s GuideSafety Warnings 5This product is recyclable. Dispose of it properly.

ES-3124 User’s Guide68 Chapter 6 System Status and Port StatisticsFigure 26 Status: Port Details The following table describes the labels in this s

ES-3124 User’s GuideChapter 6 System Status and Port Statistics 69LACP This field shows if LACP is enabled on this port or not. TxPkts This field show

ES-3124 User’s Guide70 Chapter 6 System Status and Port Statistics64 This field shows the number of packets (including bad packets) received that were

ES-3124 User’s GuideChapter 7 Basic Setting 71CHAPTER 7Basic Setting This chapter describes how to configure the System Info, General Setup, Switch S

ES-3124 User’s Guide72 Chapter 7 Basic Setting Figure 27 System Info The following table describes the labels in this screen. Table 8 System Info

ES-3124 User’s GuideChapter 7 Basic Setting 737.3 General Setup Use this screen to configure general settings such as the system name and time.

ES-3124 User’s Guide74 Chapter 7 Basic Setting Figure 28 General Setup The following table describes the labels in this screen. Table 9 General Se

ES-3124 User’s GuideChapter 7 Basic Setting 757.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a physical network to be partiti

ES-3124 User’s Guide76 Chapter 7 Basic Setting Note: VLAN is unidirectional; it only governs outgoing traffic.See Chapter 8 on page 85 for information

ES-3124 User’s GuideChapter 7 Basic Setting 77Aging Time Enter a time from 10 to 3000 seconds. This is how long all dynamically learned MAC addresse

ES-3124 User’s Guide6 ZyXEL Limited WarrantyZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is free from a

ES-3124 User’s Guide78 Chapter 7 Basic Setting 7.6 IP Setup Use the IP Setup screen to configure the default gateway device, the default domain nam

ES-3124 User’s GuideChapter 7 Basic Setting 79Figure 30 IP Setup

ES-3124 User’s Guide80 Chapter 7 Basic Setting The following table describes the labels in this screen. Table 11 IP SetupLABEL DESCRIPTIONDomain Na

ES-3124 User’s GuideChapter 7 Basic Setting 817.7 Port Setup Use this screen to configure switch port settings. Click Basic Setting and then Port

ES-3124 User’s Guide82 Chapter 7 Basic Setting Figure 31 Port Setup The following table describes the labels in this screen. Table 12 Port Setup

ES-3124 User’s GuideChapter 7 Basic Setting 83Active Select this check box to enable a port. The factory default for all ports is enabled. A port mus

ES-3124 User’s Guide84 Chapter 7 Basic Setting

ES-3124 User’s GuideChapter 8 VLAN 85CHAPTER 8VLANThe type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. Th

ES-3124 User’s Guide86 Chapter 8 VLAN8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN membership

ES-3124 User’s GuideChapter 8 VLAN 878.3 Port VLAN Trunking Enable VLAN Trunking on a port to allow frames belonging to unknown VLAN groups to pass

ES-3124 User’s GuideCustomer Support 7Customer SupportPlease have the following information ready when you contact customer support.• Product model an

ES-3124 User’s Guide88 Chapter 8 VLANFigure 33 Switch Setup: Select VLAN Type 8.5 Static VLANUse a static VLAN to decide whether an incoming frame

ES-3124 User’s GuideChapter 8 VLAN 898.5.2 Static VLAN Details Use this screen to view detailed port settings and status of the VLAN group. See Secti

ES-3124 User’s Guide90 Chapter 8 VLAN8.5.3 Configure a Static VLAN Use this screen to configure and view 802.1Q VLAN parameters for the switch. Se

ES-3124 User’s GuideChapter 8 VLAN 91Figure 36 VLAN: Static VLAN

ES-3124 User’s Guide92 Chapter 8 VLANThe following table describes the related labels in this screen. 8.5.4 Configure VLAN Port Settings Use the

ES-3124 User’s GuideChapter 8 VLAN 93Figure 37 VLAN: VLAN Port Setting

ES-3124 User’s Guide94 Chapter 8 VLANThe following table describes the labels in this screen. Table 17 VLAN: VLAN Port Setting LABEL DESCRIPTIONGV

ES-3124 User’s GuideChapter 8 VLAN 958.6 Protocol Based VLANs Protocol based VLANs allow you to group traffic into logical VLANs based on the protoco

ES-3124 User’s Guide96 Chapter 8 VLANFigure 39 Protocol Based VLAN The following table describes the labels in this screen. Table 18 Protocol Base

ES-3124 User’s GuideChapter 8 VLAN 978.8 Create an IP-based VLAN ExampleThis example shows you how to create an IP VLAN which includes ports 1, 10 an