ZyXEL Communications IES-5005, IES-6000 RADIUS Setup Vantage, IES-5000/5005/6000 Support Notes

Page 71
2. RADIUS Setup: Vantage 50

IES-5000/5005/6000 Support Notes

2. RADIUS Setup: Vantage 50

You can use any RADIUS server (such as Funk Steel-Belted RADIUS, Cisco Access Control Server or MeetingHouse Aegis server). In this example, we will use ZyXEL Vantage 50 as the RADIUS server. You can configure Vantage 50 through its web configurator (the default management IP address is 192.168.1.3).

2.1 RADIUS server setup

Click RADIUS and RADIUS SERVER in the navigation panel to display the configuration screen as shown. You can use the default values or change the Authentication port, Shared Secret settings. Make sure these values MUST are the same as on the client.

2.2 Create a User Account

Click RADIUS and USER ACCOUNT in the navigation panel to display the configuration screen as shown. You can use existing user accounts or create a new one by clicking the Add New User button. Clients must enter the correct user name and password to log into the network.

70

All contents copyright (c) 2008 ZyXEL Communications Corporation.

Image 71
Contents Support Notes Integrated Ethernet SwitchIES-5000/5005/6000 INDEX IES-5000/5005/6000 Support NotesTriple Play Triple play Application with VLC Line CardApplication Notes Triple Play scenario topology MSC1000G Hardware connectionsP-870H-51 IES-5000M Main ChassisIES-5000 Firmware versionsHow to set the P-870H-51 to factory-default? Configure the P-870H-511. System login Configure the IES-50002. Configure the VLC1348G-51 a. Click Port VDSL Sub-step 1 Open VLAN setup page Sub-step 2 Join VLAN 100 to VDSL port Sub-step 3 Join VLAN 500 to VDSL port IES-5000/5005/6000 Support Notes 3. Configure the MSC1000G a. Click VLAN VLAN d. Check the final VLAN setup status of the MSC1000G 4. Use ACL rule to replace the VID / Priority for the PPPoE packets a. Loginb. ACL-rule profile CLI syntax 1 Create ACL profiles 5. Use MVR to configure the IPTV setting on MSC1000G a. Login 6. Configure the IGMP-Proxy and Static Query VLAN a. Login d. Check the Query VLAN status 2. If setting is successful, result is as below 7. Save configuration for the IPDSLAMConfigure the ES-2024A 2. Configure VLANs 2. VLAN 500 for VoIP 3. VLAN 700 for IPTV 4. Check final status of the VLAN settings 2.Set port 1 / 5 / 7’s PVID as 100 / 500 / 700 as below c. Set the default PVID for the relative ports in this scenario1. Click Advance Application VLAN, then choose the VLAN Port Setting Don’t forget to click Apply to save the settings2. Click Apply at bottom to save the settings 1. Click Basic Setting Port Setup to call the page belowe. Save all the settings for the ES-2024A IES-5000 SLC-1248G or ALC-1248G Setting up Multiple PVCsTriple play Application with ALC/SLC Line Card 1. IES-5000 Settings 2. Prestige 660R-61P791 Settings 3.1 VALN 3. ES-2024 settingsIES-5000/5005/6000 Support Notes Set the PVIDs on port 1 and 2 to 10 and 20 respectively 3.2 PVID setupIES-5000/5005/6000 Support Notes ADSL2+ CPE IES-5000/5005/6000 Support Notes VDSL2 to ADSL2+ FallbackIES‐5000 Slot VLC1348G‐51 P‐660H‐611. Telnet into the P-660H-61 Configure the P-660H-61c. Select No in the Route IP field d. Select Yes in the Bridge field 2. General Setupa. Enter 1 in the Main Menu to open Menu 1 - General Setup b. Type a name in the System Name fieldb. Enter 1 to configure the remote node of MyISP ISP, SUA 3. Remote Node Setupa. Enter 11 in the Main Menu to open Menu 11 - Remote Node Setup f. Select LLC-based in the Multiplexing field c. Menu 11.1 - Remote Node Profile appearse. Select RFC 1483 in the Encapsulation field l. Press ENTER to confirm your changes j. Menu 11.6 - Remote Node ATM Layer Options appears1. Login Configure the VLC1348G-51IES-5000/5005/6000 Support Notes e. Click Apply 2. VDSL Port Setupc. Select Enable a. Click Port VDSL3. PVC Setup a. Click Config Save on the navigation panel 4. Config savef. Click the Test button to perform an OAM F5 loopback test on port c. Click Diagnostic Loopback5. Check status a. Click Statistics Port Statistics d. Select port e. Type 8 in VPI and 35 in VCIIES-5000/5005/6000 Support Notes IES-5000/5005/6000 Support Notes Impulse Noise Protection INP PSD f PSD f IES-5000/5005/6000 Support Notes Upstream Power Back-Off UPBOWhat is UPBO? 1. Protection of the long loop Modes of UPBONon-FEXT dominated environment Do not apply UPBO FEXT-dominated environment3. Improved performance of short loops 4. Spectral mask compatibility with other servicesMethods of UPBO What is CFM? IES-5000/5005/6000 Support Notes 802.1ag CFMCFM Terms MD--Maintenance DomainMA--Maintenance Association MEP--Maintenance End pointMIP--Maintenance Intermediate Point 1. CFM MD Screen WEB GUI Introduction2. CFM MA Screen 3. CFM MEP Screen 4. Loopback Diagnosis Create a MEP MSC1000G switch cfmmep set CLI Command IntroductionEnable CFM Disable CFM MSC1000Gswtichcfm disable Create a MDIES-5000/5005/6000 Support Notes IES-5000 ALC-1248G Setting up different DSL port speeds to different subscribersConfiguring and applying the profiles to subscriber ports Internet2. Prestige 660R-61 2.3 Menu11.1 Remote Node Profile 2.1 Menu 1 General Setup2.2 Menu 4 Internet Access Setup 2.4 Menu11.6 Remote Node ATM Layer Options Setting up a VLAN IES-5000/5005/6000 Support Notes Configuring 802.1Q VLAN1.1 VLAN settings 1.2 PVID settingsTGE1 switch port pvid up1 TGE1 switch port pvid up2 802.1x Application1. Authenticator Setup IES-5000 Authentication Server RADIUSAuthenticator Authorized Setting up2.2 Create a User Account 2. RADIUS Setup Vantage2.1 RADIUS server setup 3. Supplicant Setup Windows XP IES-5000/5005/6000 Support Notes Please refer to the procedures described in the previous application 4. Prestige 660R-61 SettingsSyslog Server Application Network Setting up a Syslog server1. Installing and Running Kiwi’s Syslog Server 2. IES-5000 settings 1.1 Activating Spanning Tree protocol on Ethernet Ports Setting up a Ring Environment1. IES-5000 settings IES-5000/5005/6000 Support Notes Ring Topology ApplicationTGE1 sys sw rstp enable TGE1 sys sw rstp port enable 2. Setup IES-2000 2.1 Activating Spanning Tree protocol2.2 Activating Spanning Tree protocol on Ethernet ports ports 1 and 2. The following shows the CLI commands CI commandSelect Rapid Spanning Tree Protocol to enable it on the port Click Uplink2 to configure this portIES-5000/5005/6000 Support Notes 3. ES-4024 Settings 3.1 Activating Spanning Tree protocol 4. Status Results Router IGMP Snooping/IGMP Filtering ApplicationIGMP Ethernet Port1.2 Setting up IGMP Filtering Setting up IGMP snooping/IGMP filtering1. IES-5000 settings 1.1 Activating IGMP Snooping 1. IES-5000 settings 1.1 Configuring MAC filter Limiting Internet access to users on specific DSL portsSetting up MAC Filter/Port Security DHCP Relay Option 82 Application 1.2 Configuring Port SecurityADSL/SHDSL CPE DHCP Client Setting up DHCP Relay OptionNetwork DHCP Server 3. IP Commander settings 2. CPE settingsIES-5000/5005/6000 Support Notes Enter a name and description for the new rule IES-5000/5005/6000 Support Notes Select DHCP Option in the Keywords field IES-5000/5005/6000 Support Notes In the next wizard screen, click Next to continue IES-5000/5005/6000 Support Notes Click Finish to complete the wizard setup After the configuration, your computer should obtain an IP address of 192.168.1.201 from the DHCP server once the computer is connected to the network Packet FilteringClient Setting up Packet Filtering1. IES-5000 settings ALC-1248G/SLC 1248G Network Client7- 4 accept-all 7- 5 accept-all 7- 6 accept-all 7- 7 accept-all 7-46 accept-all 7-47 accept-all 7-48 accept-all TGE1 7-42 accept-all 7-43 accept-all 7-44 accept-all 7-45 accept-all