802.1x MES-2110 User’s Guide | ZyXEL Communications specs

Chapter 10 802.1x

88

MES-2110 User’s Guide

Image 88

ZyXEL Communications manual 802.1x MES-2110 User’s Guide

Contents

MES-2110 Page About This Users Guide Intended Audience Customer Support Document Conventions Syntax Conventions MES-2110 Computer Server DslamFirewall Telephone Router Safety Warnings Safety Warnings MES-2110 User’s Guide Contents Overview Contents Overview MES-2110 User’s Guide Table of Contents Chapter System Details 10.1 Igmp 137 Chapter Command Line Interface 179 Index 229 Table of Contents MES-2110 User’s Guide Overview IntroductionBackbone Application Bridging Example Backbone Application High Performance Switching Example Ieee 802.1Q Vlan Application Examples Shared Server Using Vlan Example Metro Ethernet Ways to Manage the MES-2110 Metro Ethernet Good Habits for Managing the MES-2110 Installation Scenarios Hardware Installation and ConnectionDesktop Installation Procedure Rack-mounted Installation Requirements Mounting the MES-2110 on a Rack Attaching the Mounting Brackets to the MES-2110 Attaching the Mounting Brackets Mounting the MES-2110 on a Rack Mounting the MES-2110 on a Rack Hardware Overview Front Panel Console Port Gigabit Ethernet PortsFront Panel Connections Label Description Default Ethernet Negotiation Settings Mini-GBIC Slots Transceiver Installation Power Connections Overview Removing the Fiber Optic Cables AC Power Connection DC Power Connection Powering on the MES-2110 LEDsLED Descriptions LED Color Statu Description Green Blinking Mbps Ethernet network Tutorials Igmp Snooping Radius Configuration Set Igmp Query Mode to Auto Tutorials Tutorials MVR Configuration Setting ValueMVR Tutorial Values Based802.1q before proceeding Open the Configuration Igmp Menu MVR screen Tutorials For Pri-Overide, select Enable Vlan ID Priority Untrusted ARP Inspection Set Action to Enable and Dhcp Snooping Vlan Mode to All-VLAN Outgoing Traffic Bandwidth Frame Tagging Frame Tagging Example To configure frame tagging Tutorials MES-2110 User’s Guide System Login Web ConfiguratorIntroduction Web Configurator Login Web Configurator Main Screen Main Screen System Details Configuration Mgmt Config System Restart Menu Navigation Panel Sub-links Overview Web Configurator Screen Sub-links Details System Details Configuration Mgmt Config Restart MenuSnmp Sntp Link Description Navigation Panel LinksDhcp ARP Set Up the Administrative Password Saving Your ConfigurationMade on the MES-2110 and restart the MES-2110 Resetting the MES-2110 Switch LockoutReload the Configuration File Resetting the MES-2110 Via the Console Port System Details System Information Screen Board Information Screen Dhcp Configuration Screen Address, subnet mask and a default gateway IP addressIP address from a Dhcp server if Dhcp client is enabled Undo Click this to restore your last saved settings Apply System Details Dhcp Config Apply Configuration Port Configuration Screen Truncated in some Web Configurator screens Auto Duplex This indicates the port’s duplex mode Half or Full DisabledPort Status Screen Manage the MES-2110 via that port Rmon Status Screen This shows whether auto-negotiation is On or Off RX+TX Configuration Rmon Status Switch in Loop State Loop Detection Loop Detection Screen Loop detection Probe Frame Snmp traps when it shuts down a port via the loop detection FeatureEnabled, the MES-2110 sends probe frames from this port to Down this port Loop Detection MES-2110 User’s Guide Jumbo Frame Jumbo Frame Configuration ScreenFrame Size Jumbo Frame MES-2110 User’s Guide Ieee 802.1x Authentication 802.1x Ieee 802.1x Authentication Process Guest Vlan 10.2 802.1x Global Configuration Screen 10.3 802.1x Radius Server Configuration Screen MES-2110. The key is not sent over the networkServer UDP Port Number 1812 Server 10.4 802.1x Port Configuration Screen Before configuring it on each port Reauthenticat Guest Vlan 10.5 802.1x Radius Server Configuration Screen Clients for port access Technical Reference Radius and TACACS+Supported Radius Attributes Radius vs. TACACS+ Attributes Used for Authentication Attributes Used for Authenticating Privilege Access Attribute Start INTERIM-UPDATE Stop Attributes Used for AccountingRadius Attributes Exec Events via Console Radius Attributes Exec Events via Telnet/SSH Attributes Used for Accounting Ieee 802.1x Events Radius Attributes-Exec Events via 802.1x MES-2110 User’s Guide Bridge STP TerminologySTP Path Costs Link Recommended Allowed Speed Value Range How STP Works Path 16Mbps 40 to Cost 100Mbps 10 to 1Gbps 10Gbps Bridge Configuration Screen STP Port StatesSTP Port States Port Description State Rstp System Configuration Screen Are done configuringYou select Rstp 802.1W in the Ring Protocol field Tunnel port receives Bridge Protocol Data Units Bpdu Same priority, the switch with the lowest MAC address will Determines Hello Time, Max Age and Forwarding DelayRoot Bridge Information List box Allowed range is 4 to 30 seconds As a general ruleSelected from among the MES-2110 ports attached to Network. The allowed range is 6 to 40 seconds 255 and the default value is Spanning Tree Port ConfigurationCost 1~65535 Enter the port’s path cost P2P Introduction to Ieee 802.1Q Tagged VLANs TpidUser Priority CFI Vlan ID Forwarding Tagged and Untagged Frames Ieee 802.1Q Vlan TerminologyVlan Term Description Parameter Vlan Port-Based Vlan Screen Vlan Type ScreenVlan Type Use this to set the MES-2110 to Port-Based or Tag Port-Based Vlan Configuration Then you cannot access the web configurator from a computer100 Connected to this port Tag-Based Vlan Screens Vlan StackingVlan Stacking Example 101 Vlan Stacking Port Roles 102 Vlan Tag Format 103Vlan Tag Format Type Priority Frame Format 104Single and Double Tagged 802.11Q Frame Format 802.1Q Frame 105 Vlan Stacking Configuration ScreenSP Tpid 106 Spvid 107 Tag-Based Port Information ScreenPvid Tag-Based Port Configuration Screen Enter the Vlan ID from 1-4094 that you want to configure108 Select whether you want to Add or Modify a Vlan ID Management Vlan Screen 109 110 Unless your current access belongs to the new VlanManagement Vlan This is the current management Vlan Bandwidth Control Bandwidth Control Setup111 112 Broadcast Storm Control Broadcast Storm Control Setup113 114 Storm Control ConfigurationStorm Control Status Port Mirroring Port Mirroring Setup115 116 Volatile memory when you are done configuringSelect the monitor port number from the list Dynamic Link Aggregation Link Aggregation117 Link Aggregation ID Local Switch Link Aggregation ID Peer SwitchStatic Trunking Example Link Aggregation ID Link Aggregation Setting 119 120 Link Aggregation Control ProtocolLacp 121 Lacp Link StatusMAC 122 Igmp Snooping IP Multicast Addresses123 Igmp Snooping and VLANs Igmp Configuration124 125 Igmp Vlan Igmp Vlan Query Mode 126 MVR Overview Igmp Status127 MVR Modes Types of MVR PortsHow MVR Works 128 General MVR Configuration 129 130 Disable to turn this feature offSelect Dynamic to send Igmp reports to all MVR source ports MVR Group Configuration 131 Group Configuration 132Drop-down list box MVR Group Status MVR Configuration Example 133 134 MVR Group Configuration Example 135 136 Dhcp Relay Configuration Dhcp Relay Agent Information137 Relay Agent Information Dhcp Relay Configuration 138Bytes This is the Vlan that the port belongs to To a Dhcp server 139 Option82 Information 140 IP Source Guard 141 Dhcp Snooping Overview 142 Dhcp Snooping Configuration 143 144 Dhcp requests will not succeed Dhcp Binding Table Mode VLANs or specific VLANs to Dhcp servers Dhcp Snooping145 146 Ddhhmm ARP Inspection Screen Configuring ARP Inspection147 148 Addresses permanently 149 150 MAC 151 MAC Table Status Screen 152 Undo Click this to load your last saved settings Apply MES-2110 or static manually configuredLock MAC Address Learning Screen 153 MAC Filter Configuration Screen 154Port This is the port number Lock To activate MAC address learning on the port 155 MAC Limit Configuration Screen Addresses may access port 2 at any one time. a sixth device156 Aged out. MAC address aging out time can be set in the MAC QoS QoS Base Configuration Screen157 Configuring the Base Configuration Screen 158 159 802.1p Priority Table 160 Tag Priority Table IP Dscp Priority Table161 Number This is the Ieee 802.1p priority level Priority Configuration QoS Menu IP Dscp Priority 162 Priority Override Configuration Screen 163 164 Serial Port Configuration Screen Mgmt Config and System Restart Menu165 Snmp Configuration Screens 166 Snmp Commands Command DescriptionSnmp Communities Screen IP Trap Manager Screen 168 Sntp ScreenTraps to 169 Alarms and Logs 170 171 Syslog User Configuration Screen Characters using characters found on a standard keyboardUser Password 172 173 Cable Test ScreenPHY RX/TX 174 Host DoS ProtectionTest 175 Port Abnormal Traffic Detection ScreenFields below Upgrading the Firmware 176 Managing the Configuration File 177 Restarting the System 178 Command Line Interface Setting Default ValueConsole Port Management Logging Using Shortcuts and Getting Help Command / Keys DescriptionSaving Changes 180 Command Modes Exit CommandBasic Commands Logging Out Basic Commands 182 Privileged Commands Privileged Command Mode183 184 Make while using the MES-2110 Command line interface185 Permanently save any changes you Configuration Mode Configuration Mode Commands186 Ancillary Trigger Description 187 188 189 190 191 Address over Telnet 192 Igmp Snooping Example 193 Radius Configuration Example 194 MVR Mode MVR-Configuration Mode CommandsThis command to work 195 MVR Command Example 196 Vlan Mode Commands Vlan Mode197 Vlan ID Priority Example Interface Mode198 Interface Mode Commands 199 200 201 202 Port, the port must allow framesBytes 1522 bytes + 4 bytes for Second tag to pass through it Sets the service provider Vlan ID of the current Ports Untrusted ARP Inspection ExampleOutgoing Traffic Bandwidth Limit Example 203 Frame Tagging Examples 204 205 206 Power, Hardware Connections, and LEDs Troubleshooting207 MES-2110 Access and Login 208 209 Advanced Suggestions 210 Pop-up Windows, JavaScript and Java Permissions MES-2110 Configuration and Console 211 My changes in the Web Configurator keep getting overwritten 212 213 214 Product Specifications Hardware SpecificationsSpecification Description 215 Feature Description Firmware Specifications216 217 Standards Supported 218Standard Description Removing a Fuse Installing a Fuse219 220 Common Services 221 222 Commonly Used ServicesName Protocol Ports Description 223 224 Certifications Copyright225 226 FCC Warning CE Mark Warning ZyXEL Limited Warranty 227 228 Index 229 230 MVR 127 configuration Password 58 path cost 89, 93 port authentication231 TACACS+ Weighted round robin scheduling 232