Manuals / Brands / Computer Equipment / Switch / ZyXEL Communications / Computer Equipment / Switch

ZyXEL Communications ES-2008 Filter and Security Setup, 8.1IGMP, This chapter shows you how to set IGMP and MAC filters and port security, Table 8-1IGMP Message Descriptions

1 168

Download 168 pages, 4.88 Mb

Dimension ES-2008 Ethernet Switch

Chapter 8

Filter and Security Setup

This chapter shows you how to set IGMP and MAC filters and port security.

8.1IGMP

Traditionally, IP packets are transmitted in one of either two ways -Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast delivers IP packets to just a group of hosts on the network.

IGMP (Internet Group Multicast Protocol) is a session-layer protocol used to establish membership in a multicast group - it is not used to carry user data. Refer to RFC 1112 and RFC 2236 for information on IGMP versions 1 and 2 respectively.

A layer-2 switch can passively snoop on IGMP Query, Report and Leave (IGMP version

2)packets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly. Without IGMP snooping, multicast traffic is treated in the same manner as broadcast traffic, that is, it is forwarded to all ports. With IGMP snooping, group multicast traffic is only forwarded to ports that are members of that group. IGMP Snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your switch.

For each attached network, an IGMP server periodically sends a query message to request for group membership information. Hosts on the network that are members of a multicast group send report messages back to the IGMP server. When a host leaves a group, it sends a leave group message.

The following table describes the types of IGMP messages.

	Table 8-1 IGMP Message Descriptions

TYPE	DESCRIPTION

Query	An IGMP server sends query messages asking for a response from each
	host belonging to the multicast group.

Report	A host sends report messages to the IGMP server to indicate that the host
	wants to be or is a member of a given group indicated in the report
	message.

Leave Group	A host sends a leave group message to the IGMP server to indicate that the
	host has terminated its membership of a specific multicast group.

Filter and Security Setup

8-1

Contents

Ethernet Switch Version March Copyright ZyXEL Limited Warranty Information for Canadian Users Interference Statements and Warnings Customer Support Page Table of Contents Chapter 8 Filter and Security Setup Chapter 11 Port Mirroring Chapter 14 Basic System Setup Chapter 17 Status and Counters Chapter 18 Firmware and Configuration File Maintenance Appendix A Setting up Your Computer’s IP Address IP Subnetting Index List of Figures Page Page List of Tables Page Preface Part I: Getting Started Page Getting to Know Your ES-2008 1.1Features 1.2Management Features 1.3Management Methods 1.3.1 Console and Telnet Management 1.3.2 Web Configurator 1.4Applications 1.4.1 Standalone Workgroup 1.4.2 Bridging Application 1.4.3 VLAN Application Figure 1-3VLAN Application Example Page Hardware Description and Installation This chapter describes the switch hardware and installation 2.1Hardware Installation 2.2Hardware Connections 2.2.2 The Ethernet Connections 2.2.3 Network Cable Types 2.3Front Panel LEDs 2.3.1 The PWR LED 2.3.2 10/100M Ethernet Port LEDs 2.3.3 The Fiber Port 2.3.4 The Gigabit Port 2.4Rear Panel 2.4.1 Console Port 2.5Turning On the Switch Introducing the Web Configurator 3.1Accessing the Web Configurator 3.1.1 The Navigation Panel 3.1.2 The Web Configurator Front Panel Display 3.2Commonly Used Buttons 3.3General Switch Information 3.4Switch Console Port Settings Page Page Basic Switch Configuration 4.1Setting the IP Address of the Switch 4.2Changing System Username and Password 4.3Resetting the Switch 4.4Rebooting the Switch Part II: Advanced Settings Page Advanced Switch Configuration 5.1Switch Configuration Follow the instructions in the table below to configure this screen Table 5-1Switching Configuration: Advanced Page Page Port Control 6.1Configuring the Ethernet Ports 6.2View Port Status 6.3Port Statistics Figure 6-2Port Statistics The following table describes the fields in this screen Table 6-2Port Statistics Click Clear to reset the counters Page Port Trunking 7.1Introduction 7.1.1 Trunk Groups 7.1.2 Dynamic Port Trunking 7.1.3 Requirements 7.2Configuring Port Trunking 7.3Viewing Static Trunk Group Information 7.4State Activity Filter and Security Setup This chapter shows you how to set IGMP and MAC filters and port security 8.1IGMP 8.1.1 Configuring IGMP 8.1.2 IGMP Examples Figure 8-2IGMP Example Example 2: Select an IGMP Server Manually Switch A Figure 8-3IGMP Example Example 3: Disable IGMP on the Switch 8.1.3 Viewing IGMP Snooping Information 8.2Static MAC Address 8.2.1 Adding Static MAC Address 8.3Port Security 8.4MAC Address Filtering Figure 8-8MAC Address Filtering VLAN ID N/A Part III: Advanced Applications Page VLAN This chapter shows you how to set up Virtual LANs on the switch 9.1Introduction 9.2VLAN Types 9.2.1 Port-BasedVLAN 9.3Selecting VLANSupport 9.4Port-BasedVLAN Configuration 9.5Tag-BasedVLAN Configuration Page 9.5.1 Configure Port Settings Page Page Spanning Tree Protocol This chapter describes the basics and configuration of STP 10.1 Introduction 10.2 Activating Spanning Tree Protocol 10.3 Configuring Spanning Tree Parameters 10.4 Viewing Root Bridge Information 10.5 Configuring Spanning Tree Port Parameters 10.6 Viewing STP Port Status Page Port Mirroring This introduces the port mirroring or port sniffer feature of the switch 11.1 Introduction 11.2 Configuring Port Mirroring Table 11-1Port Mirroring SNMP This chapter explains SNMP in the web configurator 12.1 About SNMP 12.1.1 Trap Manager 12.2 Configuring SNMP Figure 12-2SNMP Management Table 12-1SNMP Management Page Part IV: Using the SMT and System Maintenance Page Introducing the SMT This chapter introduces the basics of managing the switch 13.1 Introduction 13.2 Accessing the SMT Using Telnet 13.3 Accessing the SMT Using the Console Port 13.4 Initial SMT Screen 13.5 The SMT Overview 13.6 Navigating the SMT Interface 13.6.1 SMT Screen Navigation 13.6.2 The Control Keys 13.7 SMT Main Menu 13.7.1 SMT Main Menu Summary Page Basic System Setup This chapter shows you how to set up the switch for administrative purposes 14.1 Introduction 14.2 Administration Configuration 14.2.1 General Setup 14.2.2 Ethernet IP Configuration 14.2.3 Changing the System User Name 14.2.4 Changing the System Password Page Switch Configuration This chapter introduces various switch configurations 15.1 Port and Trunk Group Settings 15.2 Port Mirroring Figure 15-2SMT: Port Monitoring Configuration Table 15-2SMT: Port Monitoring Configuration 15.3 VLAN 15.3.1 Setting VLAN Mode 15.3.2 Tag-BasedVLAN Configuration Figure 15-6SMT: Add a VLAN Group 15.3.3 Port-BasedVLAN Configuration 15.3.4 Creating a New VLAN Group 15.3.5 Changing VLAN Group Settings 15.3.6 Deleting a VLAN Group 15.4 Priority Configuration 15.5 MAC Address Configuration 15.5.1 Static MAC Address 15.5.2 MAC Address Filtering Figure 15-12SMT: MAC Address Filtering Step 2. Press [TAB] to select <Add> and press [ENTER] Figure 15-13SMT: Edit MAC Address Filtering Follow the instruction in the table next to set the fields in this screen Table 15-6Edit MAC Address Filtering SMT Field Descriptions 15.6 Miscellaneous Configuration 15.6.1 Port Security 15.6.2 MAC Address Time Out 15.6.3 Broadcast Storm Filter Mode 15.6.4 Setting Max Bridge Transmit Delay Bound Protocol Related Configuration This chapter shows you how to configure STP, SNMP, GVRP and LACP 16.1 Introduction 16.2 STP Configuration 16.2.1 Enable STP 16.2.2 Configure System Parameters 16.2.3 Configuring STP Parameters Per Port 16.3 SNMP Configuration 16.3.1 System Options 16.3.2 Community Strings 16.3.3 Trap Manager 16.4 GVRP Configuration 16.5 LACP Configuration 16.5.1 LACP Group Setting Figure 16-13SMT: LACP Group Setting Before you configure LACP, you must set the trunk groups first Refer to the chapter on Port Trunking Table 16-2SMT: LACP Group Setting 16.5.2 Port State Activity 16.5.3 LACP Group Status Figure 16-15SMT: LACP Group Status Table 16-4SMT: LACP Group Status Status and Counters 17.1 Status and Counters 17.1.1 Port Status 17.1.2 Port Statistics 17.1.3 General Switch Information Page Firmware and Configuration File Maintenance 18.1 Filename Convention 18.2 Firmware Upgrade 18.2.1 Firmware Upgrade Via Console Port 18.2.2 Firmware Upgrade Using the Web Configurator 18.3 Configuration File Maintenance 18.3.1 Backup Configuration 18.3.2 Restore Configuration Figure 18-9Web Configurator: Successful Configuration File Retrieval reboot Part V: Additional Information Page Troubleshooting 19.1 Using LEDs to Diagnose Problems 19.1.1 Power LED 19.1.2 The LK/ACT LED 19.1.3 The 100 LED 19.2 Console Port 19.3 Telnet 19.4 Web Configurator 19.5 Login Username and Password 19.6 Improper Network Cabling and Topology Table 19-10Troubleshooting Improper Network Cabling and Topology Page Appendix A Setting up Your Computer’s IP Address If you need the adapter: If you need TCP/IP: If you need Client for Microsoft Networks: Configuring Properties Verifying Settings Windows 2000/NT/XP Page Page Page Macintosh OS 8/9 Check your TCP/IP properties in the TCP/IP Control Panel window Macintosh OS Check your TCP/IP properties in the Network window Page Appendix B IP Subnetting Chart 2 Allowed IP Address Range By Class Subnet Masks Chart 3 “Natural” Masks Subnetting Page “borrowing”) determines the number of hosts you can have on each subnet Chart 5 Subnet Chart 6 Subnet – 2 or 126 hosts for each subnet Chart 7 Subnet Chart 8 Subnet Chart 9 Subnet Chart 10 Subnet Example Eight Subnets Chart 11 Eight Subnets Chart 12 Class C Subnet Planning Subnetting With Class A and Class B Networks Chart The following table is a summary for class “B” subnet planning Chart 13 Class B Subnet Planning Page Appendix C Product Specifications Physical and Environmental Page Index Page Port VLAN ID Port-BasedVLAN 9-1, 9-3 Priority Configuration Priority Level