187 | ZyXEL Communications MES-2110 specification

	Chapter 23 Command Line Interface
Table 80 Configuration Mode Commands
COMMAND	DESCRIPTION
arp inspection enable	Enables ARP inspection.
	Note: You must still enable ARP inspection
	on specific VLAN and specify trusted
	ports if you use this option.

arp inspection vlan <1-4094>	Sets the ARP inspection VLAN ID.
arp inspection vlan-mode <allfixed>	Sets the ARP inspection VLAN mode.
arp inspection mac-filter-aging <0-10080>	Specifies how long (in minutes) MAC address
	filters remain in the device after it identifies an
	unauthorized ARP packet.
	The device automatically deletes the MAC
	address filter afterwards. Use ‘0’ in the
	parameter field to make it permanent.

console-baudrate <96001920038400>	Sets the console port’s baudrate.
console-timeout <010~3600>	Sets the console timeout in seconds.
	0: Sets the console to never timeout
	10~3600: Sets the console timeout in seconds
	(minimum 10 seconds, maximum 3600 seconds,
	default 300 seconds.)

dhcp binding <mac-address> <ip-address>	Adds the specified MAC address, IP address,
<port> <vlan-id>	port numer, and VLAN ID to the DHCP snooping
	static binding table.

dhcp client	Enables DHCP client.
dhcp option-information <remote-id>	Sets the DHCP Option Remote ID.
	remote-id: Enter a maximum of 64
	characters.

dhcp smart-relay enable	Enables DHCP smart relay.
dhcp smart-relay exlude-vlan <1-4094>	Sets the DHCP smart relay to exlude the
	specified VLAN.

dhcp smart-relay helper-address <ip-	Sets the IP address of the DHCP server.
address>	ip-address: Enter the IP address of the
	ip-address: Enter the IP address of the
	remote server.

dhcp smart-relay option	Allows the device to add DHCP relay agent
	information.

dhcp snooping enable	Enables DHCP snooping.
dhcp snooping vlan <1-4094>	Sets the DHCP snooping VLAN ID.
dhcp snooping vlan-mode <allfixed>	Sets the DHCP snooping VLAN mode.
	all: Enter this to have the device enable DHCP
	snooping on all VLANs dynamically.
	fixed: Enter this to specify which VLANS can
	be enabled with DHCP snooping.

dhcp snooping option	Allows the device to add the DHCP option.

MES-2110 User’s Guide

187

Image 187

ZyXEL Communications MES-2110 manual 187

Contents

MES-2110 Page Intended Audience About This Users Guide Customer Support Syntax Conventions Document Conventions Telephone Router MES-2110 Computer ServerDslam Firewall Safety Warnings Safety Warnings MES-2110 User’s Guide Contents Overview Contents Overview MES-2110 User’s Guide Table of Contents Chapter System Details 10.1 Igmp 137 Chapter Command Line Interface 179 Index 229 Table of Contents MES-2110 User’s Guide Overview IntroductionBackbone Application Backbone Application Bridging Example Ieee 802.1Q Vlan Application Examples High Performance Switching Example Metro Ethernet Shared Server Using Vlan Example Metro Ethernet Ways to Manage the MES-2110 Good Habits for Managing the MES-2110 Installation Scenarios Hardware Installation and ConnectionDesktop Installation Procedure Mounting the MES-2110 on a Rack Rack-mounted Installation Requirements Attaching the Mounting Brackets Attaching the Mounting Brackets to the MES-2110 Mounting the MES-2110 on a Rack Mounting the MES-2110 on a Rack Front Panel Hardware Overview Label Description Console PortGigabit Ethernet Ports Front Panel Connections Mini-GBIC Slots Default Ethernet Negotiation Settings Transceiver Installation Removing the Fiber Optic Cables Power Connections Overview DC Power Connection AC Power Connection LED Color Statu Description Powering on the MES-2110LEDs LED Descriptions Mbps Ethernet network Green Blinking Igmp Snooping Tutorials Set Igmp Query Mode to Auto Radius Configuration Tutorials Tutorials Based802.1q before proceeding MVR ConfigurationSetting Value MVR Tutorial Values Open the Configuration Igmp Menu MVR screen Tutorials Vlan ID Priority For Pri-Overide, select Enable Untrusted ARP Inspection Set Action to Enable and Dhcp Snooping Vlan Mode to All-VLAN Outgoing Traffic Bandwidth Frame Tagging Example Frame Tagging To configure frame tagging Tutorials MES-2110 User’s Guide System Login Web ConfiguratorIntroduction Web Configurator Login Main Screen Web Configurator Main Screen Navigation Panel Sub-links Overview System Details Configuration Mgmt Config System Restart Menu Sntp Web Configurator Screen Sub-links DetailsSystem Details Configuration Mgmt Config Restart Menu Snmp Link Description Navigation Panel LinksDhcp ARP Set Up the Administrative Password Saving Your ConfigurationMade on the MES-2110 and restart the MES-2110 Resetting the MES-2110 Switch LockoutReload the Configuration File Resetting the MES-2110 Via the Console Port System Information Screen System Details Board Information Screen Undo Click this to restore your last saved settings Apply Dhcp Configuration ScreenAddress, subnet mask and a default gateway IP address IP address from a Dhcp server if Dhcp client is enabled System Details Dhcp Config Apply Port Configuration Screen Configuration Auto Truncated in some Web Configurator screens Manage the MES-2110 via that port Duplex This indicates the port’s duplex mode Half or FullDisabled Port Status Screen This shows whether auto-negotiation is On or Off Rmon Status Screen RX+TX Configuration Rmon Status Loop Detection Switch in Loop State Loop detection Probe Frame Loop Detection Screen Down this port Snmp traps when it shuts down a port via the loop detectionFeature Enabled, the MES-2110 sends probe frames from this port to Loop Detection MES-2110 User’s Guide Jumbo Frame Jumbo Frame Configuration ScreenFrame Size Jumbo Frame MES-2110 User’s Guide 802.1x Ieee 802.1x Authentication Guest Vlan Ieee 802.1x Authentication Process 10.2 802.1x Global Configuration Screen Port Number 1812 Server 10.3 802.1x Radius Server Configuration ScreenMES-2110. The key is not sent over the network Server UDP Before configuring it on each port 10.4 802.1x Port Configuration Screen Guest Vlan Reauthenticat Clients for port access 10.5 802.1x Radius Server Configuration Screen Radius vs. TACACS+ Technical ReferenceRadius and TACACS+ Supported Radius Attributes Attributes Used for Authenticating Privilege Access Attributes Used for Authentication Radius Attributes Exec Events via Telnet/SSH Attribute Start INTERIM-UPDATE StopAttributes Used for Accounting Radius Attributes Exec Events via Console Radius Attributes-Exec Events via Attributes Used for Accounting Ieee 802.1x Events 802.1x MES-2110 User’s Guide Link Recommended Allowed Speed Value Range BridgeSTP Terminology STP Path Costs Path 16Mbps 40 to Cost 100Mbps 10 to 1Gbps 10Gbps How STP Works Port Description State Bridge Configuration ScreenSTP Port States STP Port States Tunnel port receives Bridge Protocol Data Units Bpdu Rstp System Configuration ScreenAre done configuring You select Rstp 802.1W in the Ring Protocol field List box Same priority, the switch with the lowest MAC address willDetermines Hello Time, Max Age and Forwarding Delay Root Bridge Information Network. The allowed range is 6 to 40 seconds Allowed range is 4 to 30 secondsAs a general rule Selected from among the MES-2110 ports attached to 255 and the default value is Spanning Tree Port ConfigurationCost 1~65535 Enter the port’s path cost P2P CFI Vlan ID Introduction to Ieee 802.1Q Tagged VLANsTpid User Priority Vlan Forwarding Tagged and Untagged FramesIeee 802.1Q Vlan Terminology Vlan Term Description Parameter Port-Based Vlan Screen Vlan Type ScreenVlan Type Use this to set the MES-2110 to Port-Based or Tag Connected to this port Port-Based Vlan ConfigurationThen you cannot access the web configurator from a computer 100 101 Tag-Based Vlan ScreensVlan Stacking Vlan Stacking Example 102 Vlan Stacking Port Roles Type Priority Vlan Tag Format103 Vlan Tag Format 802.1Q Frame Frame Format104 Single and Double Tagged 802.11Q Frame Format 105 Vlan Stacking Configuration ScreenSP Tpid Spvid 106 107 Tag-Based Port Information ScreenPvid Select whether you want to Add or Modify a Vlan ID Tag-Based Port Configuration ScreenEnter the Vlan ID from 1-4094 that you want to configure 108 109 Management Vlan Screen 110 Unless your current access belongs to the new VlanManagement Vlan This is the current management Vlan Bandwidth Control Bandwidth Control Setup111 112 Broadcast Storm Control Broadcast Storm Control Setup113 114 Storm Control ConfigurationStorm Control Status Port Mirroring Port Mirroring Setup115 116 Volatile memory when you are done configuringSelect the monitor port number from the list Dynamic Link Aggregation Link Aggregation117 Link Aggregation ID Link Aggregation ID Local SwitchLink Aggregation ID Peer Switch Static Trunking Example 119 Link Aggregation Setting 120 Link Aggregation Control ProtocolLacp 121 Lacp Link StatusMAC 122 Igmp Snooping IP Multicast Addresses123 Igmp Snooping and VLANs Igmp Configuration124 Igmp Vlan 125 126 Igmp Vlan Query Mode MVR Overview Igmp Status127 MVR Modes Types of MVR PortsHow MVR Works 128 129 General MVR Configuration 130 Disable to turn this feature offSelect Dynamic to send Igmp reports to all MVR source ports 131 MVR Group Configuration MVR Group Status Group Configuration132 Drop-down list box 133 MVR Configuration Example 134 135 MVR Group Configuration Example 136 Relay Agent Information Dhcp Relay ConfigurationDhcp Relay Agent Information 137 To a Dhcp server Dhcp Relay Configuration138 Bytes This is the Vlan that the port belongs to Option82 Information 139 140 141 IP Source Guard 142 Dhcp Snooping Overview 143 Dhcp Snooping Configuration Dhcp requests will not succeed 144 Dhcp Binding Table Mode VLANs or specific VLANs to Dhcp servers Dhcp Snooping145 Ddhhmm 146 ARP Inspection Screen Configuring ARP Inspection147 Addresses permanently 148 149 150 151 MAC 152 MAC Table Status Screen 153 Undo Click this to load your last saved settings ApplyMES-2110 or static manually configured Lock MAC Address Learning Screen To activate MAC address learning on the port MAC Filter Configuration Screen154 Port This is the port number Lock 155 Aged out. MAC address aging out time can be set in the MAC MAC Limit Configuration ScreenAddresses may access port 2 at any one time. a sixth device 156 QoS QoS Base Configuration Screen157 158 Configuring the Base Configuration Screen 159 160 802.1p Priority Table Number This is the Ieee 802.1p priority level Priority Tag Priority TableIP Dscp Priority Table 161 162 Configuration QoS Menu IP Dscp Priority 163 Priority Override Configuration Screen 164 Serial Port Configuration Screen Mgmt Config and System Restart Menu165 166 Snmp Configuration Screens IP Trap Manager Screen Snmp CommandsCommand Description Snmp Communities Screen 168 Sntp ScreenTraps to 169 170 Alarms and Logs Syslog 171 172 User Configuration ScreenCharacters using characters found on a standard keyboard User Password 173 Cable Test ScreenPHY RX/TX 174 Host DoS ProtectionTest 175 Port Abnormal Traffic Detection ScreenFields below 176 Upgrading the Firmware 177 Managing the Configuration File 178 Restarting the System Logging Command Line InterfaceSetting Default Value Console Port Management 180 Using Shortcuts and Getting HelpCommand / Keys Description Saving Changes Logging Out Command ModesExit Command Basic Commands 182 Basic Commands Privileged Commands Privileged Command Mode183 184 Permanently save any changes you Make while using the MES-2110Command line interface 185 Ancillary Trigger Description Configuration ModeConfiguration Mode Commands 186 187 188 189 190 Address over Telnet 191 192 193 Igmp Snooping Example 194 Radius Configuration Example 195 MVR ModeMVR-Configuration Mode Commands This command to work 196 MVR Command Example Vlan Mode Commands Vlan Mode197 Vlan ID Priority Example Interface Mode198 199 Interface Mode Commands 200 201 Second tag to pass through it 202Port, the port must allow frames Bytes 1522 bytes + 4 bytes for 203 Sets the service provider Vlan ID of the current PortsUntrusted ARP Inspection Example Outgoing Traffic Bandwidth Limit Example 204 Frame Tagging Examples 205 206 Power, Hardware Connections, and LEDs Troubleshooting207 208 MES-2110 Access and Login Advanced Suggestions 209 Pop-up Windows, JavaScript and Java Permissions 210 211 MES-2110 Configuration and Console 212 My changes in the Web Configurator keep getting overwritten 213 214 215 Product SpecificationsHardware Specifications Specification Description Feature Description Firmware Specifications216 217 Standards Supported 218Standard Description Removing a Fuse Installing a Fuse219 220 221 Common Services 222 Commonly Used ServicesName Protocol Ports Description 223 224 Certifications Copyright225 FCC Warning CE Mark Warning 226 227 ZyXEL Limited Warranty 228 229 Index 230 TACACS+ MVR 127 configurationPassword 58 path cost 89, 93 port authentication 231 232 Weighted round robin scheduling