ZyXEL Communications MES-2110 guide

Chapter 1 Introduction

1.3 Good Habits for Managing the MES-2110

Do the following things regularly to make the MES-2110 more secure and to manage the MES-2110 more effectively.

•Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.

•Write down the password and put it in a safe place.

•Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the MES-2110 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the MES-2110. You could simply restore your last configuration.

24

MES-2110 User’s Guide

Image 24

ZyXEL Communications manual Good Habits for Managing the MES-2110

Contents

MES-2110 Page About This Users Guide Intended Audience Customer Support Document Conventions Syntax Conventions MES-2110 Computer Server DslamFirewall Telephone Router Safety Warnings Safety Warnings MES-2110 User’s Guide Contents Overview Contents Overview MES-2110 User’s Guide Table of Contents Chapter System Details 10.1 Igmp 137 Chapter Command Line Interface 179 Index 229 Table of Contents MES-2110 User’s Guide Introduction OverviewBackbone Application Bridging Example Backbone Application High Performance Switching Example Ieee 802.1Q Vlan Application Examples Shared Server Using Vlan Example Metro Ethernet Ways to Manage the MES-2110 Metro Ethernet Good Habits for Managing the MES-2110 Hardware Installation and Connection Installation ScenariosDesktop Installation Procedure Rack-mounted Installation Requirements Mounting the MES-2110 on a Rack Attaching the Mounting Brackets to the MES-2110 Attaching the Mounting Brackets Mounting the MES-2110 on a Rack Mounting the MES-2110 on a Rack Hardware Overview Front Panel Console Port Gigabit Ethernet PortsFront Panel Connections Label Description Default Ethernet Negotiation Settings Mini-GBIC Slots Transceiver Installation Power Connections Overview Removing the Fiber Optic Cables AC Power Connection DC Power Connection Powering on the MES-2110 LEDsLED Descriptions LED Color Statu Description Green Blinking Mbps Ethernet network Tutorials Igmp Snooping Radius Configuration Set Igmp Query Mode to Auto Tutorials Tutorials MVR Configuration Setting ValueMVR Tutorial Values Based802.1q before proceeding Open the Configuration Igmp Menu MVR screen Tutorials For Pri-Overide, select Enable Vlan ID Priority Untrusted ARP Inspection Set Action to Enable and Dhcp Snooping Vlan Mode to All-VLAN Outgoing Traffic Bandwidth Frame Tagging Frame Tagging Example To configure frame tagging Tutorials MES-2110 User’s Guide Web Configurator System LoginIntroduction Web Configurator Login Web Configurator Main Screen Main Screen System Details Configuration Mgmt Config System Restart Menu Navigation Panel Sub-links Overview Web Configurator Screen Sub-links Details System Details Configuration Mgmt Config Restart MenuSnmp Sntp Navigation Panel Links Link DescriptionDhcp ARP Saving Your Configuration Set Up the Administrative PasswordMade on the MES-2110 and restart the MES-2110 Switch Lockout Resetting the MES-2110Reload the Configuration File Resetting the MES-2110 Via the Console Port System Details System Information Screen Board Information Screen Dhcp Configuration Screen Address, subnet mask and a default gateway IP addressIP address from a Dhcp server if Dhcp client is enabled Undo Click this to restore your last saved settings Apply System Details Dhcp Config Apply Configuration Port Configuration Screen Truncated in some Web Configurator screens Auto Duplex This indicates the port’s duplex mode Half or Full DisabledPort Status Screen Manage the MES-2110 via that port Rmon Status Screen This shows whether auto-negotiation is On or Off RX+TX Configuration Rmon Status Switch in Loop State Loop Detection Loop Detection Screen Loop detection Probe Frame Snmp traps when it shuts down a port via the loop detection FeatureEnabled, the MES-2110 sends probe frames from this port to Down this port Loop Detection MES-2110 User’s Guide Jumbo Frame Configuration Screen Jumbo FrameFrame Size Jumbo Frame MES-2110 User’s Guide Ieee 802.1x Authentication 802.1x Ieee 802.1x Authentication Process Guest Vlan 10.2 802.1x Global Configuration Screen 10.3 802.1x Radius Server Configuration Screen MES-2110. The key is not sent over the networkServer UDP Port Number 1812 Server 10.4 802.1x Port Configuration Screen Before configuring it on each port Reauthenticat Guest Vlan 10.5 802.1x Radius Server Configuration Screen Clients for port access Technical Reference Radius and TACACS+Supported Radius Attributes Radius vs. TACACS+ Attributes Used for Authentication Attributes Used for Authenticating Privilege Access Attribute Start INTERIM-UPDATE Stop Attributes Used for AccountingRadius Attributes Exec Events via Console Radius Attributes Exec Events via Telnet/SSH Attributes Used for Accounting Ieee 802.1x Events Radius Attributes-Exec Events via 802.1x MES-2110 User’s Guide Bridge STP TerminologySTP Path Costs Link Recommended Allowed Speed Value Range How STP Works Path 16Mbps 40 to Cost 100Mbps 10 to 1Gbps 10Gbps Bridge Configuration Screen STP Port StatesSTP Port States Port Description State Rstp System Configuration Screen Are done configuringYou select Rstp 802.1W in the Ring Protocol field Tunnel port receives Bridge Protocol Data Units Bpdu Same priority, the switch with the lowest MAC address will Determines Hello Time, Max Age and Forwarding DelayRoot Bridge Information List box Allowed range is 4 to 30 seconds As a general ruleSelected from among the MES-2110 ports attached to Network. The allowed range is 6 to 40 seconds Spanning Tree Port Configuration 255 and the default value isCost 1~65535 Enter the port’s path cost P2P Introduction to Ieee 802.1Q Tagged VLANs TpidUser Priority CFI Vlan ID Forwarding Tagged and Untagged Frames Ieee 802.1Q Vlan TerminologyVlan Term Description Parameter Vlan Vlan Type Screen Port-Based Vlan ScreenVlan Type Use this to set the MES-2110 to Port-Based or Tag Port-Based Vlan Configuration Then you cannot access the web configurator from a computer100 Connected to this port Tag-Based Vlan Screens Vlan StackingVlan Stacking Example 101 Vlan Stacking Port Roles 102 Vlan Tag Format 103Vlan Tag Format Type Priority Frame Format 104Single and Double Tagged 802.11Q Frame Format 802.1Q Frame Vlan Stacking Configuration Screen 105SP Tpid 106 Spvid Tag-Based Port Information Screen 107Pvid Tag-Based Port Configuration Screen Enter the Vlan ID from 1-4094 that you want to configure108 Select whether you want to Add or Modify a Vlan ID Management Vlan Screen 109 Unless your current access belongs to the new Vlan 110Management Vlan This is the current management Vlan Bandwidth Control Setup Bandwidth Control111 112 Broadcast Storm Control Setup Broadcast Storm Control113 Storm Control Configuration 114Storm Control Status Port Mirroring Setup Port Mirroring115 Volatile memory when you are done configuring 116Select the monitor port number from the list Link Aggregation Dynamic Link Aggregation117 Link Aggregation ID Local Switch Link Aggregation ID Peer SwitchStatic Trunking Example Link Aggregation ID Link Aggregation Setting 119 Link Aggregation Control Protocol 120Lacp Lacp Link Status 121MAC 122 IP Multicast Addresses Igmp Snooping123 Igmp Configuration Igmp Snooping and VLANs124 125 Igmp Vlan Igmp Vlan Query Mode 126 Igmp Status MVR Overview127 Types of MVR Ports MVR ModesHow MVR Works 128 General MVR Configuration 129 Disable to turn this feature off 130Select Dynamic to send Igmp reports to all MVR source ports MVR Group Configuration 131 Group Configuration 132Drop-down list box MVR Group Status MVR Configuration Example 133 134 MVR Group Configuration Example 135 136 Dhcp Relay Configuration Dhcp Relay Agent Information137 Relay Agent Information Dhcp Relay Configuration 138Bytes This is the Vlan that the port belongs to To a Dhcp server 139 Option82 Information 140 IP Source Guard 141 Dhcp Snooping Overview 142 Dhcp Snooping Configuration 143 144 Dhcp requests will not succeed Mode VLANs or specific VLANs to Dhcp servers Dhcp Snooping Dhcp Binding Table145 146 Ddhhmm Configuring ARP Inspection ARP Inspection Screen147 148 Addresses permanently 149 150 MAC 151 MAC Table Status Screen 152 Undo Click this to load your last saved settings Apply MES-2110 or static manually configuredLock MAC Address Learning Screen 153 MAC Filter Configuration Screen 154Port This is the port number Lock To activate MAC address learning on the port 155 MAC Limit Configuration Screen Addresses may access port 2 at any one time. a sixth device156 Aged out. MAC address aging out time can be set in the MAC QoS Base Configuration Screen QoS157 Configuring the Base Configuration Screen 158 159 802.1p Priority Table 160 Tag Priority Table IP Dscp Priority Table161 Number This is the Ieee 802.1p priority level Priority Configuration QoS Menu IP Dscp Priority 162 Priority Override Configuration Screen 163 164 Mgmt Config and System Restart Menu Serial Port Configuration Screen165 Snmp Configuration Screens 166 Snmp Commands Command DescriptionSnmp Communities Screen IP Trap Manager Screen Sntp Screen 168Traps to 169 Alarms and Logs 170 171 Syslog User Configuration Screen Characters using characters found on a standard keyboardUser Password 172 Cable Test Screen 173PHY RX/TX Host DoS Protection 174Test Port Abnormal Traffic Detection Screen 175Fields below Upgrading the Firmware 176 Managing the Configuration File 177 Restarting the System 178 Command Line Interface Setting Default ValueConsole Port Management Logging Using Shortcuts and Getting Help Command / Keys DescriptionSaving Changes 180 Command Modes Exit CommandBasic Commands Logging Out Basic Commands 182 Privileged Command Mode Privileged Commands183 184 Make while using the MES-2110 Command line interface185 Permanently save any changes you Configuration Mode Configuration Mode Commands186 Ancillary Trigger Description 187 188 189 190 191 Address over Telnet 192 Igmp Snooping Example 193 Radius Configuration Example 194 MVR Mode MVR-Configuration Mode CommandsThis command to work 195 MVR Command Example 196 Vlan Mode Vlan Mode Commands197 Interface Mode Vlan ID Priority Example198 Interface Mode Commands 199 200 201 202 Port, the port must allow framesBytes 1522 bytes + 4 bytes for Second tag to pass through it Sets the service provider Vlan ID of the current Ports Untrusted ARP Inspection ExampleOutgoing Traffic Bandwidth Limit Example 203 Frame Tagging Examples 204 205 206 Troubleshooting Power, Hardware Connections, and LEDs207 MES-2110 Access and Login 208 209 Advanced Suggestions 210 Pop-up Windows, JavaScript and Java Permissions MES-2110 Configuration and Console 211 My changes in the Web Configurator keep getting overwritten 212 213 214 Product Specifications Hardware SpecificationsSpecification Description 215 Firmware Specifications Feature Description216 217 218 Standards SupportedStandard Description Installing a Fuse Removing a Fuse219 220 Common Services 221 Commonly Used Services 222Name Protocol Ports Description 223 224 Copyright Certifications225 226 FCC Warning CE Mark Warning ZyXEL Limited Warranty 227 228 Index 229 230 MVR 127 configuration Password 58 path cost 89, 93 port authentication231 TACACS+ Weighted round robin scheduling 232