149 | ZyXEL Communications MES-2110 guide

		Chapter 19 IP Source Guard
	Table 55 Configuration > ARP Inspection
	LABEL	DESCRIPTION
	ARP Inspection VLAN	Select All-VLANto have the Switch look at all the VLANs on
	Mode	which ARP inspection is enabled.
		Select Fixed to have the Switch look at the specific VLANs on
		which ARP inspection in enabled..

	ARP Inspection VLAN	Enter the ID of a static VLAN; the valid range is between 1 and
	(Fixed)	4094.

	Action	This is the port number.

	Trust	Use this to set trust ports.

	Untrust	Use this to set un-trusted ports.

	All Port	Use this to configure all ports as trusted or un-trusted ports.

	ARP Inspection Status

	Action	This shows whether the ARP inspection feature is enabled or
		disabled on the MES-2110.

	MAC-Filter-Aging-	This shows the number of minutes that the MES-2110 retains
	Time	MAC addresses in its MAC address table.

	ARP Inspection VLAN	This shows whether the MES-2110 look at all VLANs or specific
	Mode	VLANs on which ARP inspection in enabled.

	ARP Inspection VLAN	This shows the specific VLAN ID.
	(Fixed)

	Trust/Untrust	This shows whether the port is trusted or un-trusted.

MES-2110 User’s Guide

149

Image 149

ZyXEL Communications MES-2110 manual 149

Contents

MES-2110 Page Intended Audience About This Users Guide Customer Support Syntax Conventions Document Conventions Dslam MES-2110 Computer ServerFirewall Telephone Router Safety Warnings Safety Warnings MES-2110 User’s Guide Contents Overview Contents Overview MES-2110 User’s Guide Table of Contents Chapter System Details 10.1 Igmp 137 Chapter Command Line Interface 179 Index 229 Table of Contents MES-2110 User’s Guide Backbone Application IntroductionOverview Backbone Application Bridging Example Ieee 802.1Q Vlan Application Examples High Performance Switching Example Metro Ethernet Shared Server Using Vlan Example Metro Ethernet Ways to Manage the MES-2110 Good Habits for Managing the MES-2110 Desktop Installation Procedure Hardware Installation and ConnectionInstallation Scenarios Mounting the MES-2110 on a Rack Rack-mounted Installation Requirements Attaching the Mounting Brackets Attaching the Mounting Brackets to the MES-2110 Mounting the MES-2110 on a Rack Mounting the MES-2110 on a Rack Front Panel Hardware Overview Gigabit Ethernet Ports Console PortFront Panel Connections Label Description Mini-GBIC Slots Default Ethernet Negotiation Settings Transceiver Installation Removing the Fiber Optic Cables Power Connections Overview DC Power Connection AC Power Connection LEDs Powering on the MES-2110LED Descriptions LED Color Statu Description Mbps Ethernet network Green Blinking Igmp Snooping Tutorials Set Igmp Query Mode to Auto Radius Configuration Tutorials Tutorials Setting Value MVR ConfigurationMVR Tutorial Values Based802.1q before proceeding Open the Configuration Igmp Menu MVR screen Tutorials Vlan ID Priority For Pri-Overide, select Enable Untrusted ARP Inspection Set Action to Enable and Dhcp Snooping Vlan Mode to All-VLAN Outgoing Traffic Bandwidth Frame Tagging Example Frame Tagging To configure frame tagging Tutorials MES-2110 User’s Guide Introduction Web ConfiguratorSystem Login Web Configurator Login Main Screen Web Configurator Main Screen Navigation Panel Sub-links Overview System Details Configuration Mgmt Config System Restart Menu System Details Configuration Mgmt Config Restart Menu Web Configurator Screen Sub-links DetailsSnmp Sntp Dhcp Navigation Panel LinksLink Description ARP Made on the MES-2110 and restart the MES-2110 Saving Your ConfigurationSet Up the Administrative Password Reload the Configuration File Switch LockoutResetting the MES-2110 Resetting the MES-2110 Via the Console Port System Information Screen System Details Board Information Screen Address, subnet mask and a default gateway IP address Dhcp Configuration ScreenIP address from a Dhcp server if Dhcp client is enabled Undo Click this to restore your last saved settings Apply System Details Dhcp Config Apply Port Configuration Screen Configuration Auto Truncated in some Web Configurator screens Disabled Duplex This indicates the port’s duplex mode Half or FullPort Status Screen Manage the MES-2110 via that port This shows whether auto-negotiation is On or Off Rmon Status Screen RX+TX Configuration Rmon Status Loop Detection Switch in Loop State Loop detection Probe Frame Loop Detection Screen Feature Snmp traps when it shuts down a port via the loop detectionEnabled, the MES-2110 sends probe frames from this port to Down this port Loop Detection MES-2110 User’s Guide Frame Size Jumbo Frame Configuration ScreenJumbo Frame Jumbo Frame MES-2110 User’s Guide 802.1x Ieee 802.1x Authentication Guest Vlan Ieee 802.1x Authentication Process 10.2 802.1x Global Configuration Screen MES-2110. The key is not sent over the network 10.3 802.1x Radius Server Configuration ScreenServer UDP Port Number 1812 Server Before configuring it on each port 10.4 802.1x Port Configuration Screen Guest Vlan Reauthenticat Clients for port access 10.5 802.1x Radius Server Configuration Screen Radius and TACACS+ Technical ReferenceSupported Radius Attributes Radius vs. TACACS+ Attributes Used for Authenticating Privilege Access Attributes Used for Authentication Attributes Used for Accounting Attribute Start INTERIM-UPDATE StopRadius Attributes Exec Events via Console Radius Attributes Exec Events via Telnet/SSH Radius Attributes-Exec Events via Attributes Used for Accounting Ieee 802.1x Events 802.1x MES-2110 User’s Guide STP Terminology BridgeSTP Path Costs Link Recommended Allowed Speed Value Range Path 16Mbps 40 to Cost 100Mbps 10 to 1Gbps 10Gbps How STP Works STP Port States Bridge Configuration ScreenSTP Port States Port Description State Are done configuring Rstp System Configuration ScreenYou select Rstp 802.1W in the Ring Protocol field Tunnel port receives Bridge Protocol Data Units Bpdu Determines Hello Time, Max Age and Forwarding Delay Same priority, the switch with the lowest MAC address willRoot Bridge Information List box As a general rule Allowed range is 4 to 30 secondsSelected from among the MES-2110 ports attached to Network. The allowed range is 6 to 40 seconds Cost 1~65535 Enter the port’s path cost Spanning Tree Port Configuration255 and the default value is P2P Tpid Introduction to Ieee 802.1Q Tagged VLANsUser Priority CFI Vlan ID Ieee 802.1Q Vlan Terminology Forwarding Tagged and Untagged FramesVlan Term Description Parameter Vlan Vlan Type Use this to set the MES-2110 to Port-Based or Tag Vlan Type ScreenPort-Based Vlan Screen Then you cannot access the web configurator from a computer Port-Based Vlan Configuration100 Connected to this port Vlan Stacking Tag-Based Vlan ScreensVlan Stacking Example 101 102 Vlan Stacking Port Roles 103 Vlan Tag FormatVlan Tag Format Type Priority 104 Frame FormatSingle and Double Tagged 802.11Q Frame Format 802.1Q Frame SP Tpid Vlan Stacking Configuration Screen105 Spvid 106 Pvid Tag-Based Port Information Screen107 Enter the Vlan ID from 1-4094 that you want to configure Tag-Based Port Configuration Screen108 Select whether you want to Add or Modify a Vlan ID 109 Management Vlan Screen Management Vlan This is the current management Vlan Unless your current access belongs to the new Vlan110 111 Bandwidth Control SetupBandwidth Control 112 113 Broadcast Storm Control SetupBroadcast Storm Control Storm Control Status Storm Control Configuration114 115 Port Mirroring SetupPort Mirroring Select the monitor port number from the list Volatile memory when you are done configuring116 117 Link AggregationDynamic Link Aggregation Link Aggregation ID Peer Switch Link Aggregation ID Local SwitchStatic Trunking Example Link Aggregation ID 119 Link Aggregation Setting Lacp Link Aggregation Control Protocol120 MAC Lacp Link Status121 122 123 IP Multicast AddressesIgmp Snooping 124 Igmp ConfigurationIgmp Snooping and VLANs Igmp Vlan 125 126 Igmp Vlan Query Mode 127 Igmp StatusMVR Overview How MVR Works 128 Types of MVR PortsMVR Modes 129 General MVR Configuration Select Dynamic to send Igmp reports to all MVR source ports Disable to turn this feature off130 131 MVR Group Configuration 132 Group ConfigurationDrop-down list box MVR Group Status 133 MVR Configuration Example 134 135 MVR Group Configuration Example 136 Dhcp Relay Agent Information Dhcp Relay Configuration137 Relay Agent Information 138 Dhcp Relay ConfigurationBytes This is the Vlan that the port belongs to To a Dhcp server Option82 Information 139 140 141 IP Source Guard 142 Dhcp Snooping Overview 143 Dhcp Snooping Configuration Dhcp requests will not succeed 144 145 Mode VLANs or specific VLANs to Dhcp servers Dhcp SnoopingDhcp Binding Table Ddhhmm 146 147 Configuring ARP InspectionARP Inspection Screen Addresses permanently 148 149 150 151 MAC 152 MAC Table Status Screen MES-2110 or static manually configured Undo Click this to load your last saved settings ApplyLock MAC Address Learning Screen 153 154 MAC Filter Configuration ScreenPort This is the port number Lock To activate MAC address learning on the port 155 Addresses may access port 2 at any one time. a sixth device MAC Limit Configuration Screen156 Aged out. MAC address aging out time can be set in the MAC 157 QoS Base Configuration ScreenQoS 158 Configuring the Base Configuration Screen 159 160 802.1p Priority Table IP Dscp Priority Table Tag Priority Table161 Number This is the Ieee 802.1p priority level Priority 162 Configuration QoS Menu IP Dscp Priority 163 Priority Override Configuration Screen 164 165 Mgmt Config and System Restart MenuSerial Port Configuration Screen 166 Snmp Configuration Screens Command Description Snmp CommandsSnmp Communities Screen IP Trap Manager Screen Traps to Sntp Screen168 169 170 Alarms and Logs Syslog 171 Characters using characters found on a standard keyboard User Configuration ScreenUser Password 172 PHY RX/TX Cable Test Screen173 Test Host DoS Protection174 Fields below Port Abnormal Traffic Detection Screen175 176 Upgrading the Firmware 177 Managing the Configuration File 178 Restarting the System Setting Default Value Command Line InterfaceConsole Port Management Logging Command / Keys Description Using Shortcuts and Getting HelpSaving Changes 180 Exit Command Command ModesBasic Commands Logging Out 182 Basic Commands 183 Privileged Command ModePrivileged Commands 184 Command line interface Make while using the MES-2110185 Permanently save any changes you Configuration Mode Commands Configuration Mode186 Ancillary Trigger Description 187 188 189 190 Address over Telnet 191 192 193 Igmp Snooping Example 194 Radius Configuration Example MVR-Configuration Mode Commands MVR ModeThis command to work 195 196 MVR Command Example 197 Vlan ModeVlan Mode Commands 198 Interface ModeVlan ID Priority Example 199 Interface Mode Commands 200 201 Port, the port must allow frames 202Bytes 1522 bytes + 4 bytes for Second tag to pass through it Untrusted ARP Inspection Example Sets the service provider Vlan ID of the current PortsOutgoing Traffic Bandwidth Limit Example 203 204 Frame Tagging Examples 205 206 207 TroubleshootingPower, Hardware Connections, and LEDs 208 MES-2110 Access and Login Advanced Suggestions 209 Pop-up Windows, JavaScript and Java Permissions 210 211 MES-2110 Configuration and Console 212 My changes in the Web Configurator keep getting overwritten 213 214 Hardware Specifications Product SpecificationsSpecification Description 215 216 Firmware SpecificationsFeature Description 217 Standard Description 218Standards Supported 219 Installing a FuseRemoving a Fuse 220 221 Common Services Name Protocol Ports Description Commonly Used Services222 223 224 225 CopyrightCertifications FCC Warning CE Mark Warning 226 227 ZyXEL Limited Warranty 228 229 Index 230 Password 58 path cost 89, 93 port authentication MVR 127 configuration231 TACACS+ 232 Weighted round robin scheduling