ES-2108/ES-2108-G Ethernet Switch User’s Guide Version 3.
ES-2108/ES-2108-G User’s Guide Copyright Copyright © 2005 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
ES-2108/ES-2108-G User’s Guide Interference Statements and Warnings FCC Statement This switch complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: 1 This switch may not cause harmful interference. 2 This switch must accept any interference received, including interference that may cause undesired operations. FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital switch, pursuant to Part 15 of the FCC Rules.
ES-2108/ES-2108-G User’s Guide Certifications 1 Go to www.zyxel.com 2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3 Select the certification you wish to view from this page. Registration Register your product online for free future product updates and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. Safety Warnings For your safety, be sure to read and follow all warning notices and instructions.
ES-2108/ES-2108-G User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
ES-2108/ES-2108-G User’s Guide Customer Support Please have the following information ready when you contact customer support. • • • • Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. METHOD SUPPORT E-MAIL TELEPHONE* WEB SITE FAX FTP SITE REGULAR MAIL LOCATION CORPORATE HEADQUARTERS (WORLDWIDE) CZECH REPUBLIC DENMARK FINLAND SALES E-MAIL support@zyxel.com.tw +886-3-578-3942 sales@zyxel.
ES-2108/ES-2108-G User’s Guide METHOD SUPPORT E-MAIL TELEPHONE* WEB SITE SALES E-MAIL FAX FTP SITE info@pl.zyxel.com +48-22-5286603 www.pl.zyxel.com ZyXEL Communications ul.Emilli Plater 53 00-113 Warszawa Poland www.zyxel.ru ZyXEL Russia Ostrovityanova 37a Str. Moscow, 117279 Russia www.zyxel.es ZyXEL Communications Alejandro Villegas 33 1º, 28043 Madrid Spain www.zyxel.se ZyXEL Communications A/S Sjöporten 4, 41764 Göteborg Sweden www.ua.zyxel.com ZyXEL Ukraine 13, Pimonenko Str.
ES-2108/ES-2108-G User’s Guide Table of Contents Copyright .................................................................................................................. 1 Interference Statements and Warnings.................................................................. 2 ZyXEL Limited Warranty ......................................................................................... 4 Customer Support ..................................................................................................
ES-2108/ES-2108-G User’s Guide 3.1.1 Console Port ........................................................................................... 34 3.1.2 Ethernet Ports .......................................................................................... 34 3.1.2.1 Default Ethernet Settings ................................................................ 34 3.1.3 Mini-GBIC Slot ........................................................................................ 34 3.1.3.1 Transceiver Installation 3.1.
ES-2108/ES-2108-G User’s Guide 7.7 IP Setup .......................................................................................................... 62 7.7.1 Management IP Addresses ...................................................................... 62 7.8 Port Setup ....................................................................................................... 64 Chapter 8 VLAN .................................................................................................................
ES-2108/ES-2108-G User’s Guide Chapter 13 Broadcast Storm Control ...................................................................................... 89 13.1 Overview .......................................................................................................... 89 13.2 Broadcast Storm Control Setup ...................................................................... 89 Chapter 14 Mirroring ....................................................................................................
ES-2108/ES-2108-G User’s Guide Chapter 20 Differentiated Services ........................................................................................ 107 20.1 Overview ........................................................................................................ 107 20.1.1 DSCP and Per-Hop Behavior .............................................................. 107 20.1.2 DiffServ Network Example .................................................................. 107 20.
ES-2108/ES-2108-G User’s Guide 22.10 Service Port Access Control 22.11 Remote Management ..................................................................... 128 ............................................................................... 129 Chapter 23 Diagnostic............................................................................................................. 131 23.1 Diagnostic ....................................................................................................
ES-2108/ES-2108-G User’s Guide 27.8 Saving Your Configuration ............................................................................. 149 27.8.1 Logging Out .......................................................................................... 149 27.9 Command Summary ...................................................................................... 149 27.9.1 User Mode ............................................................................................ 150 27.9.2 Enable Mode .........
ES-2108/ES-2108-G User’s Guide Chapter 29 IEEE 802.1Q Tagged VLAN Commands ............................................................. 181 29.1 IEEE 802.1Q Tagged VLAN Overview .......................................................... 181 29.2 VLAN Databases ........................................................................................... 181 29.2.1 Static Entries (SVLAN Table) ............................................................... 181 29.2.2 Dynamic Entries (DVLAN Table) ............
ES-2108/ES-2108-G User’s Guide List of Figures Figure 1 Backbone Application .............................................................................. 26 Figure 2 Bridging Application ................................................................................ 26 Figure 3 High Performance Switched Application ................................................. 27 Figure 4 Tag-based VLAN Application ...................................................................
ES-2108/ES-2108-G User’s Guide Figure 39 Filtering .................................................................................................. 79 Figure 40 Spanning Tree Protocol: Status ............................................................. 83 Figure 41 Spanning Tree Protocol: Configuration .................................................. 84 Figure 42 Bandwidth Control ................................................................................. 87 Figure 43 Broadcast Storm Control ....
ES-2108/ES-2108-G User’s Guide Figure 82 Diagnostic .............................................................................................. 131 Figure 83 Clustering Application Example ............................................................. 133 Figure 84 Cluster Management: Status ................................................................. 134 Figure 85 Cluster Management: Cluster Member Web Configurator Screen ........
ES-2108/ES-2108-G User’s Guide Figure 125 qos priority Command Example .......................................................... 179 Figure 126 name Command Example ................................................................... 180 Figure 127 speed-duplex Command Example ...................................................... 180 Figure 128 Tagged VLAN Configuration and Activation Example ......................... 182 Figure 129 CPU VLAN Configuration and Activation Example ............................
ES-2108/ES-2108-G User’s Guide List of Tables Table 1 Front Panel ............................................................................................... 33 Table 2 Front Panel LEDs ...................................................................................... 37 Table 3 Navigation Panel Sub-links Overview ....................................................... 40 Table 4 Web Configurator Screen Sub-links Details ..............................................
ES-2108/ES-2108-G User’s Guide Table 39 DiffServ: DSCP Setting ........................................................................... 109 Table 40 Maintenance ........................................................................................... 111 Table 41 Filename Conventions ............................................................................ 115 Table 42 Access Control Overview ........................................................................ 117 Table 43 SNMP Commands ........
ES-2108/ES-2108-G User’s Guide Preface Congratulations on your purchase of the ES-2108/ES-2108-G Ethernet Switch. This preface introduces you to the ES-2108/ES-2108-G Ethernet Switch and discusses the conventions of this User’s Guide. It also provides information on other related documentation. Note: Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.
ES-2108/ES-2108-G User’s Guide Graphics Icons Key ES-2108/ES-2108-G Computer Server Computer DSLAM Gateway Central Office/ ISP Internet Hub/Switch User Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.
ES-2108/ES-2108-G User’s Guide CHAPTER 1 Getting to Know Your Switch This chapter introduces the main features and applications of the switch. 1.1 Introduction The switch is a stand-alone layer-2 Ethernet switch with eight 10/100Mbps ports. The ES2108-G also includes one Gigabit/Mini-GBIC port. With its built-in web configurator, managing and configuring the switch is easy.
ES-2108/ES-2108-G User’s Guide Queuing Queuing is used to help solve performance degradation when there is network congestion. Two scheduling services are supported: Strict Priority Queuing (SPQ) and Weighted Round Robin (WRR). This allows the switch to maintain separate queues for packets from each individual source or flow and prevent a source from monopolizing the bandwidth.
ES-2108/ES-2108-G User’s Guide Cluster management (also known as iStacking) allows you to manage switches through one switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another. • Configuration and Firmware Maintenance You can backup or restore the switch configuration or upgrade the firmware on the switch. 1.3 Hardware Features This section describes the ports on the switch.
ES-2108/ES-2108-G User’s Guide Figure 1 Backbone Application 1.4.2 Bridging Example In this example application the switch connects different company departments (RD and Sales) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth can connect to high-speed department servers via the switch. For ES-2108G, you can provide a super-fast uplink connection by using a Gigabit Ethernet/ mini-GBIC port on the switch.
ES-2108/ES-2108-G User’s Guide Switching to higher-speed LANs such as ATM (Asynchronous Transmission Mode) is not feasible for most people due to the expense of replacing all existing Ethernet cables and adapter cards, restructuring your network and complex maintenance. The switch can provide the same bandwidth as ATM at much lower cost while still being able to use existing adapters and switches. Moreover, the current LAN structure can be retained as all ports can freely communicate with each other.
ES-2108/ES-2108-G User’s Guide Figure 4 Tag-based VLAN Application 1.4.4.2 VLAN Shared Server Example Shared resources such as a server can be used by all ports in the same VLAN as the server, as shown in the following example. In this example, only ports that need access to the server need belong to VLAN 1. Ports can belong to other VLAN groups too.
ES-2108/ES-2108-G User’s Guide CHAPTER 2 Hardware Installation and Connection This chapter shows you how to install and connect the switch. 2.1 Freestanding Installation 1 Make sure the switch is clean and dry. 2 Set the switch on a smooth, level surface strong enough to support the weight of the switch and the connected cables. Make sure there is a power outlet nearby. 3 Make sure there is enough clearance around the switch to allow air circulation and the attachment of cables and the power cord.
ES-2108/ES-2108-G User’s Guide 2.2 Mounting the Switch on a Rack This section lists the rack mounting requirements and precautions and describes the installation steps. 2.2.1 Rack-mounted Installation Requirements • Two mounting brackets. • Eight M3 flat head screws and a #2 Philips screwdriver. • Four M5 flat head screws and a #2 Philips screwdriver. Note: Failure to use the proper screws may damage the unit. 2.2.1.
ES-2108/ES-2108-G User’s Guide Figure 8 Mounting the Switch on a Rack 2 Using a #2 Philips screwdriver, install the M5 flat head screws through the mounting bracket holes into the rack. 3 Repeat steps 1 and 2 to attach the second mounting bracket on the other side of the rack.
ES-2108/ES-2108-G User’s Guide 32 Chapter 2 Hardware Installation and Connection
ES-2108/ES-2108-G User’s Guide CHAPTER 3 Hardware Overview This chapter describes the front panel and rear panel of the switch and shows you how to make the hardware connections. 3.1 Front Panel Connection The figure below shows the front panel of the switch. Figure 9 Front Panel: ES-2108 Figure 10 Front Panel: ES-2108-G Console Port 10/100 Mbps Ethernet Ports Gigabit Ethernet/ Mini-GBIC Port The following table describes the port labels on the front panel.
ES-2108/ES-2108-G User’s Guide 3.1.1 Console Port For local management, you can use a computer with terminal emulation software configured to the following parameters: • • • • VT100 terminal emulation 9600 bps No parity, 8 data bits, 1 stop bit No flow control Connect the male 9-pin end of the console cable to the console port of the switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer. 3.1.
ES-2108/ES-2108-G User’s Guide There is one Gigabit Ethernet and mini-GBIC port each. The mini-GBIC port has priority over the Gigabit port. This means that if the mini-GBIC port and the corresponding Gigabit port are connected at the same time, the Gigabit port will be disabled. You can change transceivers while the switch is operating. You can use different transceivers to connect to Ethernet switches with different types of fiber-optic connectors.
ES-2108/ES-2108-G User’s Guide Figure 12 Installed Transceiver 3.1.3.2 Transceiver Removal Use the following steps to remove a mini GBIC transceiver (SFP module). 1 Open the transceiver’s latch (latch styles vary). Figure 13 Opening the Transceiver’s Latch Example 2 Pull the transceiver out of the slot.
ES-2108/ES-2108-G User’s Guide 3.2 Rear Panel The following figure shows the rear panel of the switch. The power receptacle is on the rear panel. Figure 15 Rear Panel 3.2.1 Power Connector Make sure you are using the correct power source as shown on the panel. To connect the power to the switch, insert the female end of power cord to the power receptacle on the rear panel. Connect the other end of the supplied power cord to the power source. Make sure that no objects obstruct the airflow of the fans. 3.
ES-2108/ES-2108-G User’s Guide Table 2 Front Panel LEDs (continued) LED COLOR STATUS DESCRIPTION 100/1000 Green On The link to a 1000 Mbps Ethernet network is up. Amber On The link to a 100 Mbps Ethernet network is up. Off The link to an Ethernet network is down. Blinking The port is receiving or transmitting data. On The port has a connection to an Ethernet network but not receiving or transmitting data. Off The link to an Ethernet network is down.
ES-2108/ES-2108-G User’s Guide CHAPTER 4 The Web Configurator This section introduces the configuration and functions of the web configurator. 4.1 Introduction The web configurator is an HTML-based management interface that allows easy switch setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
ES-2108/ES-2108-G User’s Guide 4 Click OK to view the first web configurator screen. 4.3 The Status Screen The Status screen is the first screen that displays when you access the web configurator. The following figure shows the navigating components of a web configurator screen. Figure 17 Web Configurator Home Screen (Status) In the navigation panel, click a main link to reveal a list of submenu links.
ES-2108/ES-2108-G User’s Guide The following table lists the various web configurator screens within the sub-links.
ES-2108/ES-2108-G User’s Guide Table 5 Navigation Panel Links (continued) LINK DESCRIPTION Advanced Application VLAN This link takes you to screens where you can configure port-based or 802.1Q VLAN (depending on what you configured in the Switch Setup menu). Static MAC Forwarding This link takes you to screens where you can configure static MAC addresses for a port. These static MAC addresses do not age out. Filtering This link takes you to a screen to set up filtering rules.
ES-2108/ES-2108-G User’s Guide 4.3.1 Change Your Password After you log in for the first time, it is recommended you change the default administrator password. Click Management, Access Control and then Logins to display the next screen. Figure 18 Change Administrator Login Password 4.4 Switch Lockout You could lock yourself (and all others) out from the switch by: 1 Deleting the management VLAN (default is VLAN 1). 2 Deleting all port-based VLANs with the CPU port as a member.
ES-2108/ES-2108-G User’s Guide 4.5.1 Reload the Factory-default Configuration File Uploading the factory-default configuration file replaces the current configuration file with the factory-default configuration file. This means that you will lose all previous configurations and the speed of the console port will be reset to the default of 9600bps with 8 data bit, no parity, one stop bit and flow control set to none. The password will also be reset to “1234” and the IP address to 192.168.1.1.
ES-2108/ES-2108-G User’s Guide Figure 20 Web Configurator: Logout Screen 4.7 Help The web configurator’s online help has descriptions of individual screens and some supplementary information. Click the Help link from a web configurator screen to view an online help description of that screen.
ES-2108/ES-2108-G User’s Guide 46 Chapter 4 The Web Configurator
ES-2108/ES-2108-G User’s Guide CHAPTER 5 Initial Setup Example This chapter shows how to set up the switch for an example network. 5.1 Overview The following lists the configuration steps for the initial setup: • Create a VLAN • Set port VLAN ID • Configure the switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast frames to the VLAN group in which the port(s) belongs. You can do this with port-based VLAN or tagged static VLAN with fixed port members.
ES-2108/ES-2108-G User’s Guide 1 Click Advanced Application and VLAN in the navigation panel and click the Static VLAN link. 2 In the Static VLAN screen, select ACTIVE, enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field in this screen and the VID field in the IP Setup screen refer to the same VLAN ID.
ES-2108/ES-2108-G User’s Guide In the example network, configure 2 as the port VID on port 5 so that any untagged frames received on that port get sent to VLAN 2. Figure 22 Initial Setup Network Example: Port VID 1 Click Advanced Applications and VLAN in the navigation panel. Then click the VLAN Port Setting link. 2 Enter 2 in the PVID field for port 5 and click Apply to save the settings. 5.1.3 Configuring Switch Management IP Address The default management IP address of the switch is 192.168.1.1.
ES-2108/ES-2108-G User’s Guide Figure 23 Initial Setup Example: Management IP Address 1 Connect your computer to any Ethernet port on the switch. Make sure your computer is in the same subnet as the switch. 2 Open your web browser and enter 192.168.1.1 (the default IP address) in the address bar to access the web configurator. See Section 4.2 on page 39 for more information. 3 Click Basic Setting and IP Setup in the navigation panel. 4 Configure the related fields in the IP Setup screen.
ES-2108/ES-2108-G User’s Guide CHAPTER 6 System Status and Port Statistics This chapter describes the system status (web configurator home page) and port details screens. 6.1 Overview The home screen of the web configurator displays a port statistical summary table with links to each port showing statistical details. 6.2 Port Status Summary To view the port statistics, click Status in all web configurator screens to display the Status screen as shown next.
ES-2108/ES-2108-G User’s Guide Table 6 Status LABEL DESCRIPTION System up Time This field shows how long the system has been running since the last time it was started. Port This identifies the Ethernet port. Click a port number to display the Port Details screen (refer to Figure 25 on page 53). Link This field displays the speed (either 10M for 10Mbps, 100M for 100Mbps or another value depending on the uplink module being used) and the duplex (F for full duplex or H for half duplex).
ES-2108/ES-2108-G User’s Guide Figure 25 Status: Port Details The following table describes the labels in this screen. Table 7 Status: Port Details LABEL DESCRIPTION Port Info Link This field shows whether the Ethernet connection is down, and the speed/duplex mode. Status This field shows the training state of the ports. The states are FORWARDING (forwarding), which means the link is functioning normally or STOP (the port is stopped to break a loop or duplicate path).
ES-2108/ES-2108-G User’s Guide Table 7 Status: Port Details (continued) LABEL DESCRIPTION TX Packet This field shows the number of good packets (unicast, multicast and broadcast) transmitted. Multicast This field shows the number of good multicast packets transmitted. Broadcast This field shows the number of good broadcast packets transmitted. Pause This field shows the number of 802.3x Pause packets transmitted. Rx Packet The following fields display detailed information about packets received.
ES-2108/ES-2108-G User’s Guide Table 7 Status: Port Details (continued) LABEL DESCRIPTION Poll Interval(s) The text box displays how often (in seconds) this screen refreshes. You may change the refresh interval by typing a new number in the text box and then clicking Set Interval. Stop Click Stop to stop port statistic polling.
ES-2108/ES-2108-G User’s Guide 56 Chapter 6 System Status and Port Statistics
ES-2108/ES-2108-G User’s Guide CHAPTER 7 Basic Setting This chapter describes how to configure the System Info, General Setup, Switch Setup, IP Setup and Port Setup screens. 7.1 Overview The System Info screen displays general switch information (such as firmware version number) and hardware polling information (such as fan speeds). The General Setup screen allows you to configure general switch identification information.
ES-2108/ES-2108-G User’s Guide Table 8 System Info (continued) LABEL DESCRIPTION Poll Interval(s) The text box displays how often (in seconds) this screen refreshes. You may change the refresh interval by typing a new number in the text box and then clicking Set Interval. Stop Click Stop to halt statistic polling. 7.3 General Setup Click Basic Setting and General Setup in the navigation panel to display the screen as shown.
ES-2108/ES-2108-G User’s Guide Table 9 General Setup (continued) LABEL DESCRIPTION Login Precedence Use this drop-down list box to select which database the switch should use (first) to authenticate an administrator (user for switch management). Configure the local user accounts in the Access Control Logins screen. The RADIUS is an external server. Before you specify the priority, make sure you have set up the corresponding database correctly first.
ES-2108/ES-2108-G User’s Guide In MTU (Multi-Tenant Unit) applications, VLAN is vital in providing isolation and security among the subscribers. When properly configured, VLAN prevents one subscriber from accessing the network resources of another on the same LAN, thus a user will not see the printers and hard disks of another user in the same building. VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain.
ES-2108/ES-2108-G User’s Guide Figure 28 Switch Setup The following table describes the labels in this screen. Table 10 Switch Setup LABEL DESCRIPTION VLAN Type Choose 802.1Q or Port Based. The VLAN Setup screen changes depending on whether you choose 802.1Q VLAN type or Port Based VLAN type in this screen. See Chapter 8 on page 67 for more information.
ES-2108/ES-2108-G User’s Guide Table 10 Switch Setup (continued) LABEL DESCRIPTION Priority Queue Assignment IEEE 802.1p defines up to eight separate traffic types by inserting a tag into a MAClayer frame that contains bits to define class of service. Frames without an explicit priority tag are given the default priority of the ingress port. Use the next two fields to configure the priority level-to-physical queue mapping. The switch has four physical queues that you can map to the 8 priority levels.
ES-2108/ES-2108-G User’s Guide Figure 29 IP Setup The following table describes the labels in this screen. Table 11 IP Setup LABEL DESCRIPTION Domain DNS (Domain Name System) is for mapping a domain name to its corresponding IP Name Server address and vice versa. Enter a domain name server IP address in order to be able to use a domain name instead of an IP address. Default Management Configure the fields to set the default management IP address.
ES-2108/ES-2108-G User’s Guide Table 11 IP Setup (continued) LABEL DESCRIPTION VID Enter the VLAN identification number associated with the switch IP address. This is the VLAN ID of the CPU and is used for management only. The default is "1". All ports, by default, are fixed members of this "management VLAN" in order to manage the device from any port. If a port is not a member of this VLAN, then users on that port cannot access the device.
ES-2108/ES-2108-G User’s Guide Figure 30 Port Setup The following table describes the labels in this screen. Table 12 Port Setup LABEL DESCRIPTION Port This is the port index number. Active Select this check box to enable a port. The factory default for all ports is enabled. A port must be enabled for data transmission to occur. Name Enter a descriptive name that identifies this port. Type This field displays 10/100M for an Ethernet connection and 1000M for the Gigabit Ethernet/ mini-GBIC ports.
ES-2108/ES-2108-G User’s Guide Table 12 Port Setup (continued) LABEL DESCRIPTION 802.1P Priority This priority value is added to incoming frames without a (802.1p) priority queue tag. See Priority Queue Assignment in Table 10 on page 61 for more information. 66 Apply Click Apply to save the settings. Cancel Click Cancel to reset the fields to your previous configuration.
ES-2108/ES-2108-G User’s Guide CHAPTER 8 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you how to configure 802.1Q tagged and port-based VLANs. 8.1 Introduction to IEEE 802.1Q Tagged VLAN A tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the switch on which they were created.
ES-2108/ES-2108-G User’s Guide 8.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automatically register VLAN membership across switches. 8.2.1 GARP GARP (Generic Attribute Registration Protocol) allows network switches to register and deregister attribute values with other GARP participants within a bridged LAN. GARP is a protocol that provides a generic mechanism for protocols that serve a more specific application, for example, GVRP. 8.2.1.
ES-2108/ES-2108-G User’s Guide Table 13 IEEE 802.1q Terminology (continued) VLAN PARAMETER TERM DESCRIPTION VLAN Port Port VID This is the VLAN ID assigned to untagged frames that this port received. Acceptable frame type You may choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port. Ingress filtering If set, the switch discards incoming frames for VLANs that do not have this port as a member 8.
ES-2108/ES-2108-G User’s Guide Figure 32 Switch Setup: Select VLAN Type 8.5 Static VLAN Use a static VLAN to decide whether an incoming frame on a port should be • sent to a VLAN group as normal depends on its VLAN tag. • sent to a group whether it has a VLAN tag or not. • blocked from a VLAN group regardless of its VLAN tag. You can also tag all outgoing frames (that were previously untagged) from a port with the specified VID. 8.5.
ES-2108/ES-2108-G User’s Guide Table 14 VLAN: VLAN Status (continued) LABEL DESCRIPTION Port Number This column displays the ports that are participating in a VLAN. A tagged port is marked as T, an untagged port is marked as U and ports not participating in a VLAN are marked as “–“. Elapsed Time This field shows how long it has been since a normal VLAN was registered or a static VLAN was set up.
ES-2108/ES-2108-G User’s Guide Figure 34 VLAN: Static VLAN The following table describes the related labels in this screen. Table 15 VLAN: Static VLAN 72 LABEL DESCRIPTION ACTIVE Select this check box to activate the VLAN settings. Name Enter a descriptive name for the VLAN group for identification purposes. VLAN Group ID Enter the VLAN ID for this static entry; the valid range is between 1 and 4094. Port The port number identifies the port you are configuring.
ES-2108/ES-2108-G User’s Guide 8.5.3 Configure VLAN Port Settings To configure the VLAN settings on a port, click the VLAN Port Setting link in the VLAN Status screen. Figure 35 VLAN: VLAN Port Setting The following table describes the labels in this screen. Table 16 VLAN: VLAN Port Setting LABEL DESCRIPTION GVRP GVRP (GARP VLAN Registration Protocol) is a registration protocol that defines a way for switches to register necessary VLAN members on ports across the network.
ES-2108/ES-2108-G User’s Guide Table 16 VLAN: VLAN Port Setting (continued) LABEL DESCRIPTION Apply Click Apply to save the changes Cancel Click Cancel to start configuring the screen again. 8.6 Port-based VLAN Setup Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port. Port-based VLANs require allowed outgoing ports to be defined for each port.
ES-2108/ES-2108-G User’s Guide Figure 36 Port Based VLAN Setup (All Connected) Figure 37 Port Based VLAN Setup (Port Isolation) The following table describes the labels in this screen.
ES-2108/ES-2108-G User’s Guide Table 17 Port Based VLAN Setup 76 LABEL DESCRIPTION Setting Wizard Choose All connected or Port isolation. All connected means all ports can communicate with each other, that is, there are no virtual LANs. All incoming and outgoing ports are selected. This option is the most flexible but also the least secure. Port isolation means that each port can only communicate with the CPU management port and cannot communicate with each other.
ES-2108/ES-2108-G User’s Guide CHAPTER 9 Static MAC Forwarding Use these screens to configure static MAC address forwarding. 9.1 Overview A static MAC address is an address that has been manually entered in the MAC address table. Static MAC addresses do not age out. When you set up static MAC address rules, you are setting static MAC addresses for a port. This may reduce the need for broadcasting.
ES-2108/ES-2108-G User’s Guide Table 18 Static MAC Forwarding LABEL DESCRIPTION Active Select this check box to activate your rule. You may temporarily deactivate a rule without deleting it by clearing this check box. Name Enter a descriptive name for identification purposes for this static MAC address forwarding rule. MAC Address Enter the MAC address in valid MAC address format, that is, six hexadecimal character pairs. Note: Static MAC addresses do not age out.
ES-2108/ES-2108-G User’s Guide CHAPTER 10 Filtering This chapter discusses static IP and MAC address port filtering. 10.1 Overview Port filtering means discarding (or dropping) packets based on the MAC addresses and VLAN group. 10.2 Configure a Filtering Rule Click Advanced Application and Filtering in the navigation panel to display the screen as shown next. Figure 39 Filtering The following table describes the related labels in this screen.
ES-2108/ES-2108-G User’s Guide Table 19 FIltering (continued) 80 LABEL DESCRIPTION Add Click Add to save the new rule to the switch. It then displays in the summary table at the bottom of the screen. Cancel Click Cancel to reset the fields to your previous configuration. Clear Click Clear to clear the fields to the factory defaults. Index This field displays the index number of the rule. Click an index number to change the settings.
ES-2108/ES-2108-G User’s Guide C H A P T E R 11 Spanning Tree Protocol This chapter introduces the Spanning Tree Protocol (STP). 11.1 Overview STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a switch to interact with other STP-compliant switches in your network to ensure that only one route exists between any two stations on the network. 11.1.
ES-2108/ES-2108-G User’s Guide 11.1.2 How STP Works After a bridge determines the lowest cost-spanning tree with STP, it enables the root port and the ports that are the designated ports for connected LANs, and disables all other ports that participate in STP. Network packets are therefore only forwarded between enabled ports, eliminating any possible network loops. STP-aware switches exchange Bridge Protocol Data Units (BPDUs) periodically.
ES-2108/ES-2108-G User’s Guide Figure 40 Spanning Tree Protocol: Status The following table describes the labels in this screen. Table 22 Spanning Tree Protocol: Status LABEL DESCRIPTION Spanning Tree Protocol This field displays Running if STP is activated. Otherwise, it displays Down. Configuration Click Configuration to configure STP settings. Refer to Section 11.3 on page 84. Bridge Root refers to the base of the spanning tree (the root bridge). Our Bridge is this switch.
ES-2108/ES-2108-G User’s Guide Table 22 Spanning Tree Protocol: Status (continued) LABEL DESCRIPTION Polling Interval The text box displays how often (in seconds) this screen refreshes. You may change the refresh interval by typing a new number in the text box and then clicking Set Interval. Stop Click Stop to halt STP statistic polling. 11.3 Configure STP To configure STP, click the Configuration link in the Spanning Tree Protocol screen as shown next.
ES-2108/ES-2108-G User’s Guide Table 23 Spanning Tree Protocol: Configuration (continued) LABEL DESCRIPTION Bridge Priority Bridge priority is used in determining the root switch, root port and designated port. The switch with the highest priority (lowest numeric value) becomes the STP root switch. If all switches have the same priority, the switch with the lowest MAC address will then become the root switch. Select a value from the drop-down list box.
ES-2108/ES-2108-G User’s Guide 86 Chapter 11 Spanning Tree Protocol
ES-2108/ES-2108-G User’s Guide CHAPTER 12 Bandwidth Control This chapter shows you how you can cap the maximum bandwidth using the Bandwidth Control screen. 12.1 Bandwidth Control Setup Bandwidth control means defining a maximum allowable bandwidth for incoming and/or outgoing traffic flows on a port. Click Advanced Application and then Bandwidth Control in the navigation panel to bring up the screen as shown next.
ES-2108/ES-2108-G User’s Guide Table 24 Bandwidth Control (continued) 88 LABEL DESCRIPTION Ingress Rate Specify the maximum bandwidth allowed in Kilobits per second (Kbps) for the incoming traffic flow on a port. If you enter a number between 64 and 1728, the switch automatically rounds the number down to the nearest multiple of 64. If you enter a number between 1729 and 1999, the rate is fixed at 1792.
ES-2108/ES-2108-G User’s Guide CHAPTER 13 Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature. 13.1 Overview Broadcast storm control limits the number of broadcast frames that can be stored in the switch buffer or sent out from the switch. Broadcast frames that arrive when the buffer is full are discarded. Enable this feature to reduce broadcast traffic coming into your network. 13.
ES-2108/ES-2108-G User’s Guide Table 25 Broadcast Storm Control 90 LABEL DESCRIPTION Active Select this check box to enable broadcast storm control on the switch. Clear this check box to disable the feature. Port This field displays a port number. Active Select this check box to enable broadcast storm control on the port. Clear this check box to disable the feature. Rate Specify the traffic a port receives in Kilobits per second (Kbps).
ES-2108/ES-2108-G User’s Guide CHAPTER 14 Mirroring This chapter discusses the Mirror setup screens. 14.1 Overview Port mirroring allows you to copy a traffic flow to a mirror port (the port you copy the traffic to) in order that you can examine the traffic from the mirror port without interference. 14.2 Port Mirroring Setup Click Advanced Application, Mirroring in the navigation panel to display the Mirroring screen.
ES-2108/ES-2108-G User’s Guide Table 26 Mirroring 92 LABEL DESCRIPTION Active Clear this check box to deactivate port mirroring on the switch. Mirror Port The mirror port is the port you copy the traffic to in order to examine it in more detail without interfering with the traffic flow on the original port(s). Select this port from this drop-down list box. Ingress You can specify to copy all incoming traffic or traffic to/from a specified MAC address.
ES-2108/ES-2108-G User’s Guide CHAPTER 15 Link Aggregation This chapter shows you how to logically aggregate physical links to form one logical, higherbandwidth link. 15.1 Overview Link aggregation (trunking) is the grouping of physical ports into one logical higher-capacity link. You may want to trunk ports if for example, it is cheaper to use multiple lower-speed links than to under-utilize a high-speed, but more costly, single-port link.
ES-2108/ES-2108-G User’s Guide 15.2.1 Link Aggregation ID LACP aggregation ID consists of the following information1: Table 27 Link Aggregation ID: Local Switch SYSTEM PRIORITY MAC ADDRESS KEY PORT PRIORITY PORT NUMBER 0000 0000 00 0000 00-00-00-00-00 Table 28 Link Aggregation ID: Peer Switch SYSTEM PRIORITY MAC ADDRESS KEY PORT PRIORITY PORT NUMBER 0000 0000 00 0000 00-00-00-00-00 15.3 Link Aggregation Status Click Advanced Application, Link Aggregation in the navigation panel.
ES-2108/ES-2108-G User’s Guide Table 29 Link Aggregation Control Protocol Status LABEL DESCRIPTION Index This field displays the trunk ID to identify a trunk group, that is, one logical link containing multiple ports. Aggregator ID Refer to Section 15.2.1 on page 94 for more information on this field. Enabled Port These are the ports you have configured in the Link Aggregation screen to be in the trunk group.
ES-2108/ES-2108-G User’s Guide Figure 46 Link Aggregation: Configuration The following table describes the labels in this screen. Table 30 Link Aggregation Control Protocol: Configuration LABEL DESCRIPTION Link Aggregation Control Protocol Active Select this checkbox to enable Link Aggregation Control Protocol (LACP). System Priority LACP system priority is a number between 1 and 65,535.
ES-2108/ES-2108-G User’s Guide CHAPTER 16 Port Authentication This chapter describes the 802.1x authentication method and RADIUS server connection setup. 16.1 Overview IEEE 802.1x is an extended authentication protocol2 that allows support of RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. 16.1.
ES-2108/ES-2108-G User’s Guide Figure 48 Port Authentication 16.2.1 Activate IEEE 802.1x Security From the Port Authentication screen, display the configuration screen as shown. Figure 49 Port Authentication: 802.1x The following table describes the labels in this screen. Table 31 Port Authentication: 802.1x LABEL DESCRIPTION Active Select this check box to permit 802.1x authentication on the switch. Note: You must first enable 802.1x authentication on the switch before configuring it on each port.
ES-2108/ES-2108-G User’s Guide 16.2.2 Configuring RADIUS Server Settings From the Port Authentication screen, click RADIUS to display the configuration screen as shown. Figure 50 Port Authentication: RADIUS The following table describes the labels in this screen. Table 32 Port Authentication: RADIUS LABEL DESCRIPTION Authentication Server IP Address Enter the IP address of the external RADIUS server in dotted decimal notation. UDP Port The default port of the RADIUS server for authentication is 1812.
ES-2108/ES-2108-G User’s Guide 100 Chapter 16 Port Authentication
ES-2108/ES-2108-G User’s Guide CHAPTER 17 Port Security This chapter shows you how to set up port security. 17.1 Overview Port security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the switch. For maximum port security, enable this feature, disable MAC address learning and configure static MAC address(es) for a port.
ES-2108/ES-2108-G User’s Guide The following table describes the labels in this screen. Table 33 Port Security LABEL DESCRIPTION Active Select this check box to enable the port security feature on the switch. Port This field displays a port number. Active Select this check box to enable the port security feature on this port. The switch forwards packets whose MAC address(es) is in the MAC address table on this port. Packets with no matching MAC address(es) are dropped.
ES-2108/ES-2108-G User’s Guide CHAPTER 18 Queuing Method This chapter introduces the queuing methods supported. 18.1 Overview Queuing is used to help solve performance degradation when there is network congestion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assignment in Switch Setup and 802.1p Priority in Port Setup for related information.
ES-2108/ES-2108-G User’s Guide Weighted Round Robin Scheduling (WRR) uses the same algorithm as round robin scheduling, but services queues based on their priority and queue weight (the number you configure in the queue Weight field) rather than a fixed amount of bandwidth. WRR is activated only when a port has more traffic than it can handle. Queues with larger weights get more service than queues with smaller weights.
ES-2108/ES-2108-G User’s Guide CHAPTER 19 Static Route This chapter shows you how to configure static routes. 19.1 Configuring Static Route Static routes tell the switch how to forward IP traffic when you configure the TCP/IP parameters manually. Click IP Application, Static Routing in the navigation panel to display the screen as shown. Figure 53 Static Routing The following table describes the labels in this screen.
ES-2108/ES-2108-G User’s Guide Table 36 Static Routing (continued) 106 LABEL DESCRIPTION Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between 1 and 15. In practice, 2 or 3 is usually a good number. Add Click Add to insert a new static route.
ES-2108/ES-2108-G User’s Guide CHAPTER 20 Differentiated Services This chapter shows you how to configure Differentiated Services (DiffServ) on the switch. 20.1 Overview Quality of Service (QoS) mechanisms provide the best service on a per-flow guarantee. To fine-tune the levels of services on the priority of the traffic flow using QoS places a heavy burden on the network infrastructure.
ES-2108/ES-2108-G User’s Guide Figure 55 DiffServ Network Example Switch A marks traffic flowing into the network based on the configured marking rules. Intermediary network devices 1 and 2 allocate network resources (such as bandwidth) by mapping the DSCP values and the associated policies. 20.2 Activating DiffServ Activate DiffServ to allow the switch to enable DiffServ on the selected port(s). Click IP Application, DiffServ in the navigation panel to display the screen as shown.
ES-2108/ES-2108-G User’s Guide 20.3 DSCP-to-IEEE802.1p Priority Mapping You can configure the DSCP to IEEE802.1p mapping to allow the switch to prioritize all traffic based on the incoming DSCP value according to the DiffServ to IEEE802.1p mapping table. The following table shows the default DSCP-to-IEEE802.1P mapping. Table 38 Default DSCP-IEEE802.1p Mapping DSCP VALUE 0 – 7 IEEE802.1P 0 8 – 15 16 – 23 24 – 31 32 – 39 40 – 47 48 – 55 56 – 63 1 2 3 4 5 6 7 20.3.
ES-2108/ES-2108-G User’s Guide 110 Chapter 20 Differentiated Services
ES-2108/ES-2108-G User’s Guide CHAPTER 21 Maintenance This chapter explains how to configure the maintenance screens that let you maintain the firmware and configuration files. 21.1 The Maintenance Screen Click Management, Maintenance in the navigation panel to open the following screen. Figure 58 Maintenance The following table describes the labels in this screen. Table 40 Maintenance LABEL DESCRIPTION Firmware Upgrade Access this screen to upload a new firmware.
ES-2108/ES-2108-G User’s Guide 21.2 Firmware Upgrade Make sure you have downloaded (and unzipped) the correct model firmware and version to your computer before uploading to the device. Note: Be sure to upload the correct model firmware as uploading the wrong model firmware may damage your device. From the Maintenance screen, display the Firmware Upgrade screen as shown next.
ES-2108/ES-2108-G User’s Guide 21.4 Backing Up a Configuration File Backing up your switch configurations allows you to create various “snap shots” of your device from which you may restore at a later date. Back up your current switch configuration to a computer using the Backup Configuration screen. Figure 61 Backup Configuration Follow the steps below to back up the current switch configuration to your computer in this screen. 1 Click Backup. 2 Click Save to display the Save As screen.
ES-2108/ES-2108-G User’s Guide Figure 63 Load Factory Default: Start 3 Click OK to begin resetting all switch configurations to the factory defaults and then wait for the switch to restart. This takes up to two minutes. If you want to access the switch web configurator again, you may need to change the IP address of your computer to be in the same subnet as that of the default switch IP address (192.168.1.1). 21.
ES-2108/ES-2108-G User’s Guide ZyNOS (ZyXEL Network Operating System sometimes referred to as the “ras” file) is the system firmware and has a “bin” filename extension. Table 41 Filename Conventions FILE TYPE INTERNAL NAME Configuration File config Firmware Ras EXTERNAL DESCRIPTION NAME This is the configuration filename on the switch.
ES-2108/ES-2108-G User’s Guide 7 Enter quit to exit the ftp prompt. 21.7.3 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients. General Commands for GUI-based FTP Clients COMMAND DESCRIPTION Host Address Enter the address of the host server. Login Type Anonymous. This is when a user I.D. and password is automatically supplied to the server for anonymous access.
ES-2108/ES-2108-G User’s Guide CHAPTER 22 Access Control This chapter describes how to control access to the switch. 22.1 Overview • A console port access control session and Telnet access control session cannot coexist. The console port has higher priority. If you telnet to the switch and someone is already logged in from the console port, then you will see the following message. Figure 66 Console Port Priority “Local administrator is configuring this device now!!! Connection to host lost.
ES-2108/ES-2108-G User’s Guide 22.3 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange management information between the network management system (NMS) and a network element (NE). A manager station can manage and monitor the switch through the network via SNMP version one (SNMPv1) and/or SNMP version 2c. The next figure illustrates an SNMP management operation.
ES-2108/ES-2108-G User’s Guide Table 43 SNMP Commands COMMAND DESCRIPTION Set Allows the manager to set values for object variables within an agent. Trap Used by the agent to inform the manager of some events. 22.3.1 Supported MIBs MIBs let administrators collect statistics and monitor status and performance.
ES-2108/ES-2108-G User’s Guide Figure 69 Access Control: SNMP The following table describes the labels in this screen. Table 45 Access Control: SNMP LABEL DESCRIPTION Get Community Enter the get community, which is the password for the incoming Get- and GetNextrequests from the management station. Set Community Enter the set community, which is the password for incoming Set- requests from the management station.
ES-2108/ES-2108-G User’s Guide Figure 70 Access Control: Logins The following table describes the labels in this screen. Table 46 Access Control: Logins LABEL DESCRIPTION Administrator This is the default administrator account with the “admin” user name. You cannot change the default administrator user name. Only the administrator has read/write access. Old Password Type the existing system password (1234 is the default password when shipped). New Password Enter your new system password.
ES-2108/ES-2108-G User’s Guide Figure 71 SSH Communication Example 22.6 How SSH works The following table summarizes how a secure connection is established between two remote hosts. Figure 72 How SSH Works 1 Host Identification The SSH client sends a connection request to the SSH server. The server identifies itself with a host key. The client encrypts a randomly generated session key with the host key and server key and sends the result back to the server.
ES-2108/ES-2108-G User’s Guide 3 Authentication and Data Transmission After the identification is verified and data encryption activated, a secure tunnel is established between the client and the server. The client then sends its authentication information (user name and password) to the server to log in to the server. 22.7 SSH Implementation on the Switch Your switch supports SSH version 2 using RSA authentication and three encryption methods (DES, 3DES and Blowfish).
ES-2108/ES-2108-G User’s Guide Figure 73 SSH Login Example C:\>ssh2 admin@192.168.1.1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the host key has just been changed. Please contact your system administrator.
ES-2108/ES-2108-G User’s Guide 1 HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the switch’s WS (web server). 2 HTTP connection requests from a web browser go to port 80 (by default) on the switch’s WS (web server). Figure 74 HTTPS Implementation Note: If you disable HTTP in the Service Access Control screen, then the switch blocks all HTTP connection attempts. 22.
ES-2108/ES-2108-G User’s Guide Figure 75 Security Alert Dialog Box (Internet Explorer) 22.9.2 Netscape Navigator Warning Messages When you attempt to access the switch HTTPS server, a Website Certified by an Unknown Authority screen pops up asking if you trust the server certificate. Click Examine Certificate if you want to verify that the certificate is from the switch. If Accept this certificate temporarily for this session is selected, then click OK to continue in Netscape.
ES-2108/ES-2108-G User’s Guide Figure 77 Security Certificate 2 (Netscape) 22.9.3 The Main Screen After you accept the certificate and enter the login username and password, the switch main screen appears. The lock displayed in the bottom right of the browser status bar denotes a secure connection.
ES-2108/ES-2108-G User’s Guide Figure 78 Login Screen (Internet Explorer) Figure 79 Login Screen (Netscape) 22.10 Service Port Access Control Service Access Control allows you to decide what services you may use to access the switch. You may also change the default service port and configure “trusted computer(s)” for each service in the Remote Management screen (discussed later).
ES-2108/ES-2108-G User’s Guide back to the main Access Control screen. Figure 80 Access Control: Service Access Control The following table describes the fields in this screen. Table 47 Access Control: Service Access Control LABEL DESCRIPTION Services Services you may use to access the switch are listed here. Active Select this option for the corresponding services that you want to allow to access the switch.
ES-2108/ES-2108-G User’s Guide Figure 81 Access Control: Remote Management The following table describes the labels in this screen. Table 48 Access Control: Remote Management 130 LABEL DESCRIPTION Entry This is the client set index number. A “client set” is a group of one or more “trusted computers” from which an administrator may use a service to manage the switch. Active Select this check box to activate this secured client set.
ES-2108/ES-2108-G User’s Guide CHAPTER 23 Diagnostic This chapter explains the Diagnostic screen. 23.1 Diagnostic Click Management, Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, reset the system or ping IP addresses. Figure 82 Diagnostic The following table describes the labels in this screen. Table 49 Diagnostic LABEL DESCRIPTION System Log Click Display to display a log of events in the multi-line text box.
ES-2108/ES-2108-G User’s Guide 132 Chapter 23 Diagnostic
ES-2108/ES-2108-G User’s Guide CHAPTER 24 Cluster Management This chapter introduces cluster management. 24.1 Overview Cluster Management allows you to manage switches through one switch, called the cluster manager. The switches must be directly connected and be in the same VLAN group so as to be able to communicate with one another.
ES-2108/ES-2108-G User’s Guide 24.2 Cluster Management Status Click Management, Cluster Management in the navigation panel to display the following screen. Note: A cluster can only have one manager. Figure 84 Cluster Management: Status The following table describes the labels in this screen. Table 51 Cluster Management: Status LABEL DESCRIPTION Status This field displays the role of this switch within the cluster.
ES-2108/ES-2108-G User’s Guide 24.2.1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink from the list of members to go to that cluster member switch's web configurator home page. This cluster member web configurator home page and the home page that you'd see if you accessed it directly are different. Figure 85 Cluster Management: Cluster Member Web Configurator Screen 24.2.1.
ES-2108/ES-2108-G User’s Guide Figure 86 Example: Uploading Firmware to a Cluster Member Switch C:\>ftp 192.168.1.1 Connected to 192.168.1.1. 220 FTP version 1.0 ready at Thu Jan 1 00:47:52 1970 User (192.168.1.
ES-2108/ES-2108-G User’s Guide Figure 87 Clustering Management Configuration The following table describes the labels in this screen. Table 53 Clustering Management Configuration LABEL DESCRIPTION Clustering Manager Active Select Active to have this switch become the cluster manager switch. A cluster can only have one manager. Other (directly connected) switches that are set to be cluster managers will not be visible in the Clustering Candidates list.
ES-2108/ES-2108-G User’s Guide Table 53 Clustering Management Configuration (continued) LABEL DESCRIPTION Password Each cluster member’s password is its web configurator password. Select a member in the Clustering Candidate list and then enter its web configurator password. If that switch administrator changes the web configurator password afterwards, then it cannot be managed from the Cluster Manager.
ES-2108/ES-2108-G User’s Guide CHAPTER 25 MAC Table This chapter introduces the MAC Table screen. 25.1 Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the switch’s ports. It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to which port(s) and whether the MAC address is dynamic (learned by the switch) or static (manually entered in the Static MAC Forwarding screen).
ES-2108/ES-2108-G User’s Guide 25.2 Viewing the MAC Table Click Management, MAC Table in the navigation panel to display the following screen. Figure 89 MAC Table The following table describes the labels in this screen. Table 54 MAC Table 140 LABEL DESCRIPTION Sort by Click one of the following buttons to display and arrange the data according to that button type. The information is then displayed in the summary table below.
ES-2108/ES-2108-G User’s Guide CHAPTER 26 ARP Table This chapter introduces ARP Table. 26.1 Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network. An IP (version 4) address is 32 bits long. In an Ethernet LAN, MAC addresses are 48 bits long. The ARP Table maintains an association between each MAC address and its corresponding IP address.
ES-2108/ES-2108-G User’s Guide Figure 90 ARP Table The following table describes the labels in this screen. Table 55 ARP Table 142 LABEL DESCRIPTION Index This is the ARP Table entry number. IP Address This is the learned IP address of a device connected to a switch port with corresponding MAC address below. MAC Address This is the MAC address of the device with corresponding IP address above.
ES-2108/ES-2108-G User’s Guide CHAPTER 27 Introducing the Commands This chapter introduces the commands and gives a summary of commands available. 27.1 Overview In addition to the web configurator, you can use line commands to configure the switch. Use line commands for advanced switch diagnosis and troubleshooting. If you have problems with your switch, customer support may request that you issue some of these commands to assist them in troubleshooting.
ES-2108/ES-2108-G User’s Guide 27.2.1 Access Priority • You can only access the CLI with the administrator account (the default username is admin and password is 1234). • By default, only one CLI management session is allowed via either the console port or Telnet. Console port access has higher priority. • Use the configure multi-login command in the configuration mode to allow multiple concurrent logins. However, no more than five concurrent login sessions are allowed. 27.2.
ES-2108/ES-2108-G User’s Guide 27.2.4 SSH You can use an SSH client program to access the switch. The following figure shows an example using a text-based SSH client program. Refer to the documentation that comes with your SSH program for information on using it. Figure 92 SSH Login Example C:\>ssh2 admin@192.168.1.
ES-2108/ES-2108-G User’s Guide 27.4 Command Syntax Conventions The rules of the commands are listed next. • The command keywords are in courier new font. • The required fields in a command are enclosed in angle brackets <>, for instance, ping means that you must specify an IP number for this command.
ES-2108/ES-2108-G User’s Guide Figure 94 CLI Help: List of Commands: Example 1 ras> help Commands available: help logout exit history enable show ip show hardware-monitor show system-information ping help ping [vlan ][..] ping traceroute help traceroute [vlan ][..
ES-2108/ES-2108-G User’s Guide Figure 96 CLI Help: Detailed Command Information: Example 1 ras> ping help Commands available: ping < [ vlan ] [ size <0-1472> ] [ -t ] > ras> Figure 97 CLI: Help: Detailed Command Information: Example 2 ras> ping ? help destination ip address Description of ping help 27.6 Command Modes There are three CLI command modes: User, Enable and Configure. When you first log into the CLI, the initial command mode is the User mode.
ES-2108/ES-2108-G User’s Guide 27.7 Using Command History The switch keeps a list of up to 256 commands you have entered for the current CLI session. You can use any commands in the history again by pressing the up (y) or down (z) arrow key to scroll through the previously used commands and press [ENTER]. Use the history command to display the list of commands. Figure 98 CLI: History Command Example ras> history enable exit show ip history ras> 27.
ES-2108/ES-2108-G User’s Guide 27.9.1 User Mode The following table describes the commands available for User mode. Table 56 Command Summary: User Mode COMMAND DESCRIPTION enable Accesses Enable (or privileged) mode. See Section 27.9.2 on page 150. exit Logs out from the CLI. help Displays help information. history Displays a list of previously command(s) that you have executed. The switch stores up to 256 commands in history. logout Exits from the CLI.
ES-2108/ES-2108-G User’s Guide Table 57 Command Summary: Enable Mode (continued) COMMAND DESCRIPTION enable Accesses Enable (or privileged) mode. erase Resets to the factory default settings. running-config exit Exits Enable (or privileged) mode. help Displays help information. history Displays a list of command(s) that you have previously executed. logout Exits Enable (or privileged) mode. mac-flush Clears the MAC address table.
ES-2108/ES-2108-G User’s Guide Table 57 Command Summary: Enable Mode (continued) COMMAND DESCRIPTION bstorm-control Displays broadcast storm control settings. egress Displays outgoing port information. Displays IP related information. ip arp Displays the ARP table. route Displays IP routing information. route static Displays IP static route information. lacp Displays LACP (Link Aggregation Control Protocol) settings. logging Displays system logs.
ES-2108/ES-2108-G User’s Guide Table 57 Command Summary: Enable Mode (continued) COMMAND DESCRIPTION session system-information Displays general system information. time Displays current system time and date. timesync Displays time server information. trunk Displays link aggregation information. vlan Displays the status of all VLANs. vlan1q gvrp Displays GVRP settings. port-isolation Displays port isolation settings. Connects to an SSH server with the specified SSH version.
ES-2108/ES-2108-G User’s Guide Table 58 Command Summary: Configuration Mode (continued) COMMAND DESCRIPTION exit Exits from the CLI. garp Configures GARP time settings. join <100-65535> leave leaveall help Displays help information. history Displays a list of previous command(s) that you have executed. hostname Sets the switch’s name for identification purposes. https cert-regeneration Re-generates a certificate.
ES-2108/ES-2108-G User’s Guide Table 58 Command Summary: Configuration Mode (continued) COMMAND mac-forward mirror-filter DESCRIPTION Configures a static MAC address forwarding rule. name mac vlan interface egress ingress inactive Disables a static MAC address forwarding rule. mac Sets port mirroring for the MAC address on the outgoing traffic. type Sets the direction of the outgoing traffic for port mirroring.
ES-2108/ES-2108-G User’s Guide Table 58 Command Summary: Configuration Mode (continued) COMMAND DESCRIPTION mac-filter mac-forward mac vlan drop inactive Enables the specified MAC-filter rule. mac vlan drop Disables the specified MAC filter rule. mac vlan interface Removes the specified MAC forwarding entry, belonging to a VLAN group (if any) forwarded through an interface(s).
ES-2108/ES-2108-G User’s Guide Table 58 Command Summary: Configuration Mode (continued) COMMAND DESCRIPTION snmp-server https Disables secure web browser access to the switch. icmp Disables ICMP access to the switch such as pinging and tracerouting. snmp Disables SNMP management. ssh Disables SSH (Secure Shell) server access to the switch. telnet Disables telnet access to the switch. trap-destination Disables sending of SNMP traps to a station. Disables STP.
ES-2108/ES-2108-G User’s Guide Table 58 Command Summary: Configuration Mode (continued) COMMAND DESCRIPTION Enables 802.1x authentication on the specified port(s). reauthenticate Sets a subscriber to periodically re-enter his or her username and password to stay connected to a specified port. reauth-period Specifies how often a client has to re-enter the username and password to stay connected to the specified port(s). Enables port security on the switch.
ES-2108/ES-2108-G User’s Guide Table 58 Command Summary: Configuration Mode (continued) COMMAND DESCRIPTION get-community Sets the get community. set-community Sets the set community. trap-community Sets the trap community. trap-destination Sets the IP addresses of up to four stations to send your SNMP traps to. Enables STP on the switch. spanning-tree Enables STP on a specified port.
ES-2108/ES-2108-G User’s Guide Table 58 Command Summary: Configuration Mode (continued) COMMAND DESCRIPTION lacp Enables LACP for a trunk group. interface timeout Defines the port number and LACP timeout period. vlan <1-4094> Enters the VLAN configuration mode. See Section 27.9.5 on page 162 for more information. vlan-type <802.1q|port-based> Specifies the VLAN type. vlan1q gvrp Enables GVRP. ingress-check Enables VLAN tag checking on incoming traffic.
ES-2108/ES-2108-G User’s Guide Table 59 interface port-channel Commands (continued) COMMAND DESCRIPTION egress set Sets the outgoing traffic port list for a port-based VLAN. exit Exits from the interface portchannel command mode. flow-control Enables interface flow control. Flow control regulates transmissions to match the bandwidth of the receiving port. frame-type Choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port.
ES-2108/ES-2108-G User’s Guide Table 59 interface port-channel Commands (continued) COMMAND DESCRIPTION The default PVID is VLAN 1 for all ports. Sets a PVID in the range 1 to 4094 for the specified interface. pvid <1-4094> Sets the quality of service priority for an interface. qos priority <0 .. 7> speed-duplex on the interface.
ES-2108/ES-2108-G User’s Guide Table 60 Command Summary: config-vlan Commands (continued) COMMAND DESCRIPTION default-gateway Sets a default gateway IP address for this VLAN. defaultmanagement dhcpbootp Sets the dynamic in-band IP address defaultmanagement Sets a static in-band IP address and subnet mask. defaultmanagement dhcpbootp release Releases the dynamic in-band IP address. defaultmanagement dhcpbootp renew Updates the dynamic in-band IP address.
ES-2108/ES-2108-G User’s Guide 164 Chapter 27 Introducing the Commands
ES-2108/ES-2108-G User’s Guide CHAPTER 28 Command Examples This chapter describes some commands in more detail. 28.1 Overview These are commands that you may use frequently in maintaining your switch. 28.2 show Commands These are the commonly used show commands. 28.2.1 show system-information Syntax: show system-information This command shows the general system information (such as the firmware version and system up time). An example is shown next.
ES-2108/ES-2108-G User’s Guide 28.2.2 show ip Syntax: show ip This command displays the IP related information (such as IP address and subnet mask) on all switch interfaces. The following figure shows the default interface settings. Figure 101 show ip Command Example ras> show ip IP Interface IP[192.168.1.1], Netmask[255.255.255.0], VID[1] ras> 28.2.3 show logging Note: This command is not available in User mode. Syntax: show logging This command displays the system logs.
ES-2108/ES-2108-G User’s Guide Figure 102 show logging Command Example ras# show logging 0 Sat Jan 01 00:00:24 2000 PP0e -WARN SNMP TRAP 26: Event On Trap 1 Sat Jan 01 00:00:24 2000 PINI -WARN SNMP TRAP 0: cold start 2 Sat Jan 01 00:00:24 2000 PINI INFO main: init completed 3 Sat Jan 01 00:07:54 2000 PP0e -WARN SNMP TRAP 26: Event On Trap 4 Sat Jan 01 00:07:54 2000 PINI -WARN SNMP TRAP 1: warm start 5 Sat Jan 01 00:07:54 2000 PINI INFO main: init completed 6 Sat Jan 01 00:08:00 2000 PP0e -WARN SNMP TRAP 26:
ES-2108/ES-2108-G User’s Guide Figure 103 show interface Command Example ras# show interface 2 Port Info Port NO. Link Status LACP TxPkts RxPkts Errors Tx KBs/s Rx KBs/s Up Time TX Packet Tx Packets Multicast Broadcast Pause RX Packet Rx Packets Multicast Broadcast Pause TX Collision Single Multiple Excessive Late Error Packet RX CRC Runt Distribution 64 65 to 127 128 to 255 256 to 511 512 to 1023 1024 to 1518 Giant ras# :2 :100M/F :FORWARDING :Disabled :1744 :12 :0 :0.64 :0.
ES-2108/ES-2108-G User’s Guide Figure 104 show mac address-table Command Example ras# show mac address-table all Port VLAN ID MAC Address 2 1 00:85:a0:01:01:04 ras# Type Dynamic 28.3 ping Syntax: ping < [vlan ] [ size <0-8024> ] [ -t ]> where = The IP address of an Ethernet device. [vlan ] = Specifies the VLAN ID to which the Ethernet device belongs. [size <0-8024> ] = Specifies the packet size to send.
ES-2108/ES-2108-G User’s Guide [ttl <1-255>] = Specifies the Time To Live (TTL) period. [wait <1-60>] = Specifies the time period to wait. [quesries <1-10>] = Specifies how many tries the switch performs the traceroute function. This command displays information about the route to an Ethernet device. The following example displays route information to an Ethernet device with an IP address of 192.168.1.100. Figure 106 traceroute Command Example ras> traceroute 192.168.1.100 traceroute to 192.168.1.
ES-2108/ES-2108-G User’s Guide Figure 108 CLI: boot config Command Example ras# boot config Use the reload config command to restart the system. The following figure shows an example. Figure 109 CLI: reload config Command Example ras# reload config 28.6.2 Resetting to the Factory Default Follow the steps below to reset the switch back to the factory defaults. 1 Enter erase running config to reset the current running configuration. 2 Enter write memory to save the changes to the configuration file.
ES-2108/ES-2108-G User’s Guide Figure 111 no mirror-port Command Example ras(config)# no mirror-port 28.7.2 no https timeout Syntax: no https timeout Resets the https session timeout to default. An example is shown next. The session timeout is reset to 300 seconds. Figure 112 no https timeout Command Example ras(config)# no https timeout Cache timeout 300 28.7.3 no trunk Syntax: no trunk no trunk lacp no trunk interface where Disables the trunk group.
ES-2108/ES-2108-G User’s Guide Figure 113 no trunk Command Example ras(config)# no trunk T1 ras(config)# no trunk T2 interface 1,3-5 28.7.4 no port-access-authenticator Syntax: no port-access-authenticator no port-access-authenticator reauthenticate no port-access-authenticator where = Disables port authentication on the switch. reauthenticate = Disables the re-authentication mechanism on the listed port(s). = Disables authentication on the listed ports.
ES-2108/ES-2108-G User’s Guide known-hosts Remove specific remote hosts from the list of all known hosts. known-hosts [1024|ssh-rsa|ssh-dsa] Remove remote known hosts with a specified public key (1024bit RSA1, RSA or DSA). An example is shown next. • Disable the secure shell RSA1 encryption key. • Remove the remote host with IP address 172.165.1.8 from the list of known hosts. • Remove the remote host with IP address 172.165.1.
ES-2108/ES-2108-G User’s Guide Figure 117 wrr Command Example ras# configure ras(config)# wrr ras(config)# wrr 4 3 2 1 28.10 interface Commands These are some commonly used commands that belong to the interface group of commands. 28.10.1 interface port-channel Syntax: interface port-channel Use this command to enable the specified ports for configuration. Type multiple ports or port ranges separated by a comma. Ranges of port numbers are typed separated by a dash. An example is shown next.
ES-2108/ES-2108-G User’s Guide An example is shown next. • Enable port one for configuration. • Enable broadcast control. • Set the broadband packet traffic the interface receives per second. Figure 119 broadcast-limit Command Example ras(config)# interface port-channel 1 ras(config-interface)# bmstorm-limit ras(config-interface)# bmstorm-limit 21 28.10.3 bandwidth-limit Syntax: bandwidth-limit bandwidth-limit egress bandwidth-limit ingress where Enables bandwidth control on the switch.
ES-2108/ES-2108-G User’s Guide where Enables port mirroring on the interface. = Enables port mirroring for incoming, outgoing or both incoming and outgoing traffic. Port mirroring copies traffic from one or all ports to another or all ports for external analysis. An example is shown next. • • • • • Enable port mirroring. Enable the monitor port three. Enable ports one, four, five and six for configuration. Enable port mirroring on the ports.
ES-2108/ES-2108-G User’s Guide Figure 122 gvrp Command Example ras(config)# vlan1q gvrp ras(config)# interface port-channel 1,3-5 ras(config-interface)# gvrp 28.10.6 frame-type Syntax: frame-type where Choose to accept both tagged and untagged incoming frames or just tagged incoming frames on a port. An example is shown next. • Enable ports one, three, four and five for configuration. • Enable tagged frame-types on the interface.
ES-2108/ES-2108-G User’s Guide Figure 124 egress set Command Example ras(config)# vlan-type port-based ras(config)# interface port-channel 1,3-5 ras(config-interface)# egress set 0,7-9 28.10.8 qos priority Syntax: qos priority <0 .. 7> where <0 .. 7> Sets the quality of service priority for a port. An example is shown next. • Enable ports one, three, four and five for configuration. • Set the IEEE 802.1p quality of service priority as four (4).
ES-2108/ES-2108-G User’s Guide Figure 126 name Command Example ras(config)# interface port-channel 1,3-5 ras(config-interface)# name Test 28.10.10 speed-duplex Syntax: speed-duplex where Sets the duplex mode (half or full) and speed (10, 100 or 1000 Mbps) of the connection on the port.
ES-2108/ES-2108-G User’s Guide CHAPTER 29 IEEE 802.1Q Tagged VLAN Commands This chapter describes the IEEE 802.1Q Tagged VLAN and associated commands. 29.1 IEEE 802.1Q Tagged VLAN Overview See the VLAN chapter for more information on VLANs. There are two kinds of tagging: 1 Explicit Tagging A VLAN identifier is added to the frame header that identifies the source VLAN. 2 Implicit Tagging The MAC (Media Access Control) number, the port or other information is used to identify the source of a VLAN frame.
ES-2108/ES-2108-G User’s Guide 29.2.2 Dynamic Entries (DVLAN Table) Dynamic entries are learned by the switch and cannot be created or updated by administrators. The switch learns this information by observing what port, source address and VLAN ID (or VID) is associated with a frame. Entries are added and deleted using GARP VLAN Registration Protocol (GVRP), where GARP is the Generic Attribute Registration Protocol. 29.
ES-2108/ES-2108-G User’s Guide Figure 129 CPU VLAN Configuration and Activation Example ras (config)# vlan 3 ras (config-vlan)# inactive 29.4 Global VLAN1Q Tagged VLAN Configuration Commands This section shows you how to configure and monitor the IEEE 802.1Q Tagged VLAN. 29.4.1 GARP Status Syntax: show garp This command shows the switch’s GARP timer settings, including the join, leave and leave all timers. An example is shown next.
ES-2108/ES-2108-G User’s Guide leave = This sets the duration of the Leave Period timer for GVRP in milliseconds. Each port has a single Leave Period timer. Leave Time must be two times larger than Join Timer; the default is 600 milliseconds. leaveall = This sets the duration of the Leave All Period timer for GVRP in milliseconds. Each port has a single Leave All Period timer. Leave All Timer must be larger than Leave Timer; the default is 10000 milliseconds.
ES-2108/ES-2108-G User’s Guide This command turns on GVRP in order to propagate VLAN information beyond the switch. 29.4.5 Disable GVRP Syntax: no vlan1q gvrp This command turns off GVRP so that the switch does not propagate VLAN information to other switches. 29.4.6 Enable Ingress Checking Syntax: ingress-check Enables the device to discard incoming frames for VLANs that are not included in a port member set. The following example activates ingress checking on the switch.
ES-2108/ES-2108-G User’s Guide Figure 134 vlan1q port default vid Command Example ras (config)# interface port-channel 1-5 ras (config-interface)# pvid 200 29.5.2 Set Acceptable Frame Type Syntax: frame-type where = Specifies all Ethernet frames (tagged and untagged) or only tagged Ethernet frames. This command sets the specified port to accept all Ethernet frames or only those with an IEEE 802.1Q VLAN tag. The following example sets ports 1 to 5 to accept only tagged frames.
ES-2108/ES-2108-G User’s Guide Syntax: vlan fixed forbidden name normal untagged no fixed no forbidden no untagged where = The VLAN ID [1 – 4094]. = A name to identify the SVLAN entry. = This is the switch port list. • Enter fixed to register the to the static VLAN table with .
ES-2108/ES-2108-G User’s Guide 4 Then the switch applies the port filter to finish the forwarding decision. This means that frames may be dropped even if the SVLAN says to forward them. Frames might also be dropped if they are sent to a CPE (customer premises equipment) DSL device that does not accept tagged frames. Untagged Frames 1 An untagged frame comes in from the LAN. 2 The switch checks the PVID table and assigns a temporary VID of 1.
ES-2108/ES-2108-G User’s Guide 29.7 Disable VLAN Syntax: vlan inactive This command disables the specified VLAN ID in the SVLAN (Static VLAN) table. 29.8 Show VLAN Setting Syntax: show vlan This command shows the IEEE 802.1Q Tagged SVLAN (Static VLAN) table. An example is shown next. • For the AdCtl section of the last column, “-“ is a port set to normal, “x” is a forbidden port and “F” is a fixed port. • For the TagCtl section of the last column, “T“ is a tagged port, “U” is an untagged port.
ES-2108/ES-2108-G User’s Guide 190 Chapter 29 IEEE 802.
ES-2108/ES-2108-G User’s Guide CHAPTER 30 Troubleshooting This chapter covers potential problems and possible remedies. 30.1 Problems Starting Up the Switch Table 61 Troubleshooting the Start-Up of Your Switch PROBLEM CORRECTIVE ACTION None of the LEDs Check the power connection and make sure the power source is turned on. turn on when you turn on the switch. If the error persists, you may have a hardware problem. In this case, you should contact your vendor. 30.
ES-2108/ES-2108-G User’s Guide 30.2.1 Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here. Screens for other Internet Explorer versions may vary. 30.2.1.1 Internet Explorer Pop-up Blockers You may have to disable pop-up blocking to log into your device.
ES-2108/ES-2108-G User’s Guide Figure 141 Internet Options 3 Click Apply to save this setting. 30.2.1.1.2 Enable pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 2 Select Settings…to open the Pop-up Blocker Settings screen.
ES-2108/ES-2108-G User’s Guide Figure 142 Internet Options 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites.
ES-2108/ES-2108-G User’s Guide Figure 143 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 30.2.1.2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer, click Tools, Internet Options and then the Security tab.
ES-2108/ES-2108-G User’s Guide Figure 144 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window.
ES-2108/ES-2108-G User’s Guide Figure 145 Security Settings - Java Scripting 30.2.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window.
ES-2108/ES-2108-G User’s Guide Figure 146 Security Settings - Java 30.2.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 make sure that Use Java 2 for
ES-2108/ES-2108-G User’s Guide Figure 147 Java (Sun) 30.3 Problems with the Password Table 63 Troubleshooting the Password PROBLEM CORRECTIVE ACTION Cannot access the switch. The password field is case sensitive. Make sure that you enter the correct password using the proper casing. The administrator username is “admin”. The default administrator password is “1234”. The username and password are case-sensitive. Make sure that you enter the correct password and username using the proper casing.
ES-2108/ES-2108-G User’s Guide 200 Chapter 30 Troubleshooting
ES-2108/ES-2108-G User’s Guide APPENDIX A Product Specifications These are the switch product specifications. Table 64 General Product Specifications Fast Ethernet Interface Eight 10/100 Base-TX interfaces Auto-negotiation Auto-MDI/MDIX Compliant with IEEE 802.3/802.3u Back pressure flow control for half duplex mode Flow control for full duplex (IEEE 802.
ES-2108/ES-2108-G User’s Guide Table 65 Management Specifications System Management Alarm/Status surveillance LED indication for alarm and system status Performance monitoring Line speed Four RMON groups 1,2,3,9 (history, statistics, alarms, and events) Throughput monitoring CMP packet transmission Port mirroring and aggregation Spanning Tree Protocol IGMP snooping Firmware upgrade and download through FTP/web/console Configuration by console/telnet/web Configuration backup and restore by FTP/web/console
ES-2108/ES-2108-G User’s Guide Table 66 Physical and Environmental Specifications (continued) Power Supply Overload protection 100-240VAC, 50/60Hz, 0.5A Max.
ES-2108/ES-2108-G User’s Guide 204 Product Specifications
ES-2108/ES-2108-G User’s Guide APPENDIX B IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes. The class of an address depends on the value of its first octet. • Class “A” addresses have a 0 in the left most bit.
ES-2108/ES-2108-G User’s Guide Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B” address has a valid range of 128 to 191. The first octet of a class “C” address begins with “110”, and therefore has a range of 192 to 223.
ES-2108/ES-2108-G User’s Guide Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with mask 255.255.255.128.
ES-2108/ES-2108-G User’s Guide Note: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after “borrowing”) determines the number of hosts you can have on each subnet. Table 72 Subnet 1 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 0 IP Address (Binary) 11000000.10101000.00000001.
ES-2108/ES-2108-G User’s Guide Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
ES-2108/ES-2108-G User’s Guide Table 77 Subnet 4 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 192 IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.193 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 Example Eight Subnets Similarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110).
ES-2108/ES-2108-G User’s Guide Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A” address has three host ID octets (see Table 67 on page 205) available for subnetting. The following table is a summary for class “B” subnet planning. Table 80 Class B Subnet Planning NO.
ES-2108/ES-2108-G User’s Guide 212 IP Subnetting
ES-2108/ES-2108-G User’s Guide Index Symbols B “standby” ports 93 Numerics Basement 3 Basic setting 57 BPDUs (Bridge Protocol Data Units) 82 Bridge Protocol Data Units (BPDUs) 82 Broadcast storm control 89 110V AC 3 230V AC 3 802.
ES-2108/ES-2108-G User’s Guide Copyright 1 Corrosive Liquids 3 Covers 3 CPU management port 74 CRC (Cyclic Redundant Check) 54 Current date 59 Current time 59 Customer Support 5 D Damage 3 Dampness 3 Danger 3 Denmark, Contact Information 5 DHCP 23 DHCP (Dynamic Host Configuration Protocol) 23 Diagnostic 131 Ethernet port test 131 Ping 131 System log 131 Differentiated Service (DiffServ) 107 DiffServ 107 Activate 108 DS field 107 DSCP 107 DSCP-to-IEEE802.
ES-2108/ES-2108-G User’s Guide H Hardware installation 29 Hardware overview 33 High Voltage Points 3 Host IDs 205 How SSH works 122 HTTPS 124 HTTPS Example 125 Log 131 Login 39 Password 43 Login account 120 Administrator 120 Non-administrator 120 Number of 120 Login password 121 M I IEEE 802.1p 62 IEEE 802.1Q Tagged VLAN 181 IEEE 802.
ES-2108/ES-2108-G User’s Guide P R Password 43, 138 PHB (Per-Hop Behavior) 107 Ping 131 Pipes 3 Pool 3 Port authentication 97 IEEE802.
ES-2108/ES-2108-G User’s Guide SSH Implementation 123 Static MAC address 24, 77, 101 Static MAC forwarding 77 Static VLAN 71 Control 72 Tagging 72 Status 40, 51 LED 37 Link aggregation 94 Port 51 Port details 52 STP 82 VLAN 70 STP 81 Bridge ID 83 Bridge priority 85 Configuration 84 Designated bridge 81 Forwarding Delay 85 Hello BPDU 82 Hello Time 83, 85 How it works 82 Max Age 83, 85 Path cost 81, 85 Port priority 85 Port state 82 Root port 81 Status 82 Terminology 81 STP (Spanning Tree Protocol) 24 Strict
ES-2108/ES-2108-G User’s Guide Number of VLANs 70 Port isolation 73 Port number 71 Port settings 73 Port-based VLAN 74 Registration Information 181 Static VLAN 71 Status 70, 71 Tagged 67 Trunking 69 Type 61, 69 VLAN (Virtual Local Area Network) 23, 59 VLAN Databases 181 VLAN number 64 VLAN trunking 73 vlan1q port accept 186 vlan1q port gvrp 186 vlan1q svlan active 188 vlan1q svlan delentry 188 vlan1q svlan inactive 189 vlan1q svlan list 189 vlan1q svlan setentry 186 Voltage Supply 3 Voltage, High 3 W Wall
