English dropdown-ico

Manual ZyXEL Communications MES3500-24F

349 pages 8.29 mb
Download

Go to site of 349

Summary
  • ZyXEL Communications MES3500-24F - page 1

    www .zyxel.com www .zyxel.com MES3500-24/24F Layer 2 Management Switch Copyright © 201 1 ZyXEL Communications Corporation Firmware V ersion 4.00 Edition 1, 12/2011 Default Login Details IP Address http://192.168.1.1 User Name admin Pa ss wo rd 12 34 ...

  • ZyXEL Communications MES3500-24F - page 2

    ...

  • ZyXEL Communications MES3500-24F - page 3

    About This User's Guide MES3500-24/24F U ser’s Guide 3 About This User's Guide IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Intended Audience This manual is intended for people who want to configure the S witch using the web configurator . Related Document ation • W eb Configur ator Online Help The emb ...

  • ZyXEL Communications MES3500-24F - page 4

    Document Conventions MES3500-24/24F U ser’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User’ s Guide. W arnings tell you about things that could harm you or your device. Note: Notes tell y ou other important information (for example, other things you ma y need to configure or helpful tips ...

  • ZyXEL Communications MES3500-24F - page 5

    Safety Warnings MES3500-24/24F U ser’s Guide 5 Safety Warnings • Do NOT use this pro duct near water , for example, in a wet basement or near a swimmi ng pool. • Do NOT expose y our device to da mpness, dust or c orrosive liquids. • Do NOT stor e things on the device. • Do NOT i nstall, use, or service this device during a thunderst orm. ...

  • ZyXEL Communications MES3500-24F - page 6

    Safety Warnings MES3500-24/24F U ser’s Guide 6 ...

  • ZyXEL Communications MES3500-24F - page 7

    Contents Overvi ew MES3500-24/24F U ser’s Guide 7 Contents Overview User ’ s Guide ......................................................................................... ......................... ......... 21 Getting to Know Y our Switch . ............. ................ ................. ................ ............. ................ ...... ...

  • ZyXEL Communications MES3500-24F - page 8

    Contents Overview MES3500-24/24F U ser’s Guide 8 DHCP ........... ............ ................. ............. ................ ............. ................ ............. ........... ............. 276 Maintenance ............. ....... ...... ....... ...... ....... ...... ... ....... ...... ....... ...... ....... ...... ....... ...... ....... . ...

  • ZyXEL Communications MES3500-24F - page 9

    Table of Contents MES3500-24/24F U ser’s Guide 9 Table of Contents About This User's Guide ................................................. ....................................................... .. 3 Document Conventions .................................................. ..................................................... .... 4 Safety W ...

  • ZyXEL Communications MES3500-24F - page 10

    Table of Contents MES3500-24/24F U ser’s Guide 10 3.1.5 Signal Slot .......... ... .... ............. ... ... ... ... .... ............. ... ... ... .... ... ... ............. ... ... .... ... ... .. ..... 35 3.2 LEDs ........................ ... ... .... ... ... ... .... ... ............. ... ... ... .... ... ............. ... ... ... .... ..... ...

  • ZyXEL Communications MES3500-24F - page 11

    Table of Contents MES3500-24/24F U ser’s Guide 11 Part II: T echnical Referenc e ..................................... .............................. 79 Chapter 7 System St atus and Port St atistics ............................................................................ ............. 81 7.1 Overview ......... ............. ... .... ... ... . ...

  • ZyXEL Communications MES3500-24F - page 12

    Table of Contents MES3500-24/24F U ser’s Guide 12 Chapter 10 St atic MAC Forward Setup ........................................................ ........................................... 1 14 10.1 Overview . ................ ............. ................ ............. ................ ................ ............. ......... ......... 1 14 10.2 ...

  • ZyXEL Communications MES3500-24F - page 13

    Table of Contents MES3500-24/24F U ser’s Guide 13 Chapter 16 Mirroring ................................. .................................................... ................................. .......... 146 16.1 Port Mirroring Setup .................. .......... ...... ............. ................. ............ ................. ....... .... 14 ...

  • ZyXEL Communications MES3500-24F - page 14

    Table of Contents MES3500-24/24F U ser’s Guide 14 21.4 Policy Example ........ ................ ............. ...... ............. ............. ................ ............. ......... ...... 175 Chapter 22 Queuing Method .............................................................................................. ................... .. 176 22. ...

  • ZyXEL Communications MES3500-24F - page 15

    Table of Contents MES3500-24/24F U ser’s Guide 15 25.1.1 Local User Accounts ...... ... .... ... ... ... ... .... ... ... ... .... ... ............. ... ... ... .... ... ... ... .... ... ... ..... 201 25.1.2 RADIUS and T ACACS+ .......... ............. ................ ................ ................ ................ .. 202 25.2 AAA Screens ... ...

  • ZyXEL Communications MES3500-24F - page 16

    Table of Contents MES3500-24/24F U ser’s Guide 16 29.1 Layer 2 Protocol Tunneling Overview .... .......... ............. ................ ............. ................ ..... 241 29.1.1 Layer-2 Protocol Tunne ling Mode ......... ................ ............. ................ ................ ..... 242 29.2 Configuring Layer 2 Protocol Tunneling ...

  • ZyXEL Communications MES3500-24F - page 17

    Table of Contents MES3500-24/24F U ser’s Guide 17 35.1 DiffServ Overview ............... ................ ............. ............. ................ ............. ................ . .... 268 35.1.1 DSCP and Per-Hop Behavior ............... ............. ................ ............. ................ ........ 268 35.1.2 DiffServ Network Exampl ...

  • ZyXEL Communications MES3500-24F - page 18

    Table of Contents MES3500-24/24F U ser’s Guide 18 38.2 The Access Co nt rol Main Screen ...... ............. ................ ................ ................ ............. ..... 290 38.3 About SNMP ...................... ................ ............. ................ ............. ................ ............. ..... 290 38.3.1 SNMP v3 and Sec ...

  • ZyXEL Communications MES3500-24F - page 19

    Table of Contents MES3500-24/24F U ser’s Guide 19 Chapter 43 ARP T able .................................................... ..................................................... ............. ........ 325 43.1 ARP T able Overview ..................... ................ ............. ................ ................ ............. ....... .3 2 5 4 ...

  • ZyXEL Communications MES3500-24F - page 20

    Table of Contents MES3500-24/24F U ser’s Guide 20 ...

  • ZyXEL Communications MES3500-24F - page 21

    21 P ART I User ’ s Guide ...

  • ZyXEL Communications MES3500-24F - page 22

    22 ...

  • ZyXEL Communications MES3500-24F - page 23

    MES3500-24/24F U ser’s Guide 23 C HAPTER 1 Getting to Know Your Switch This chapter introduces the main features and applications of the Switch. 1.1 Introduction The Switch is a layer-2 standalone Ethernet switch. The MES3500-24 has 24 10/100 Mbps fast Ethernet ports. The MES3 500 -24F has 24 100 Mbps fa st Ethernet SFP slots. Both also have four ...

  • ZyXEL Communications MES3500-24F - page 24

    Chapter 1 Getting to Know Your Switch MES3500-24/24F U ser’s Guide 24 1.1.2 Bridging Example In this example, the Switch connects different company departments ( RD and Sales ) to the corporate backbone. It can alleviate bandwidth contention and eliminate server and network bottlenecks. All users that need high bandwidth ca n connect to high-spee ...

  • ZyXEL Communications MES3500-24F - page 25

    Chapter 1 Getting to Know Your Switch MES3500-24/24F U ser’s Guide 25 1.1.4 IEEE 802.1Q VLAN Application Examples A VLAN (Virtual Local Area Network) allows a ph ysic al network to be partitioned into multiple logical networks. Stations on a logical network belong to one group. A station can belong to more than one group. With VLAN, a station can ...

  • ZyXEL Communications MES3500-24F - page 26

    Chapter 1 Getting to Know Your Switch MES3500-24/24F U ser’s Guide 26 1.2 W ays to Manage the Switch Use any of the following methods to manage the S witch. • W eb Configur ator . This is recommended for everyday management of the Switch using a (supported) web browser . See Chapter 4 on page 39 . • Command Line Interface. Line commands offer ...

  • ZyXEL Communications MES3500-24F - page 27

    MES3500-24/24F U ser’s Guide 27 C HAPTER 2 Hardware Installation and Connection This chapter shows you how to install and connect the Sw itch. 2.1 Inst allation Scenarios The Switch can be placed on a desktop or r ack -mounted on a standard EIA r ack. Use the rubber feet in a desktop installation and the br ackets in a rack -mounted installation. ...

  • ZyXEL Communications MES3500-24F - page 28

    Chapter 2 Hardware Installation and Connection MES3500-24/24F U ser’s Guide 28 2.3.1.1 Precautions • Make sure the r ack will safely support the comb ined weight of all the equipment it contains. • Make sure the position of the S witch does not make the r ack unstable or top-heav y . T ake all necessary precautions to anchor the rack securely ...

  • ZyXEL Communications MES3500-24F - page 29

    Chapter 2 Hardware Install ation and Conne ction MES3500-24/24F U ser’s Guide 29 2.3.3 Mounting the Switch on a Rack 1 Po sition a mounting bracket (that is already attach ed to the Switch) on one side of the r ack, lining up the two screw holes on the brack et with the screw holes on the side of the r ack. Figure 6 Mounting the Switch on a Rack ...

  • ZyXEL Communications MES3500-24F - page 30

    MES3500-24/24F U ser’s Guide 30 C HAPTER 3 Hardware Overview This chapter describes the front panel and rear pa nel of the Switch and shows you how to make the hardware connections. 3.1 Front Panel The following figure shows the front panel of the S witch. Figure 7 MES3500-24 Front Panel: AC Model Figure 8 MES3500-24 Front Panel: DC Model Figure ...

  • ZyXEL Communications MES3500-24F - page 31

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 31 Figure 10 MES3500-24F Front Panel: DC Model The following table describes the port labels on the front panel. 3.1.1 Console Port For local management, y ou can use a computer with terminal emulation software configured to the following parameters: • VT100 • T erminal emulation • 9 ...

  • ZyXEL Communications MES3500-24F - page 32

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 32 Connect the male 9-pin end of the console cable to the console port of the Switch. Connect the female end to a serial port (COM1, COM2 or other COM port) of your computer . 3.1.2 Ethernet Port s The Switch has 24 10/100 Mbps auto-negotiating, auto-crossover Ethernet ports. In 10/100 Mbp ...

  • ZyXEL Communications MES3500-24F - page 33

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 33 Y ou can change transceivers while the Switch is operating. Y ou can use different transceivers to connect to Ethernet switches with different types of fiber -optic or even copper cable connectors. T o avoid possible eye in jury , do not look into an operating fiber-optic module’ s co ...

  • ZyXEL Communications MES3500-24F - page 34

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 34 3 Pull the transceiver out of the slot. Figure 13 Removing the Fiber Optic Cables Figure 14 Opening the T ransceiv er’s Latch Example Figure 15 T ran sceiver Remov al Example 3.1.4 Power Connector Make sure you are using the corr ect power source as shown on the panel and that no obje ...

  • ZyXEL Communications MES3500-24F - page 35

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 35 3.1.4.2 DC Power Connection The Switch uses a single ETB series terminal block plug with four pins which allow s you to connect up to two separate power supplies. If one powe r supply fails the system can oper ate on the remaining power supply . Use two wires to connect to a single term ...

  • ZyXEL Communications MES3500-24F - page 36

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 36 1 Use a connector to connect wires of the correct gauge to the sensor’s signal output pins. See Chapter 46 on page 333 for the wire specifications. Check the sensor’s documentation to identify its two signal output pins. 2 Connect these two wires to any one of the following pairs of ...

  • ZyXEL Communications MES3500-24F - page 37

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 37 2 When daisy-chaining further S witches ensure that the signal output pins you use are the same as those you used when connecting to the first switch, as shown in the diagram below . Figure 17 Daisy-chaining an External Alarm Sensor to Other S witches of the Same Model 3.2 LEDs After yo ...

  • ZyXEL Communications MES3500-24F - page 38

    Chapter 3 Hardware Ove rview MES3500-24/24F U ser’s Guide 38 LNK Green On The link to this port is up . Off The link to th is port is down. ACT Green Blinking This port is receiving or transmitting data. 1000Base- T Ethernet Ports (in Dual P ersonality Interface) LNK/ACT Green Blinking The system is t ransmitt i ng/receiving t o/from a 1000 Mbps ...

  • ZyXEL Communications MES3500-24F - page 39

    MES3500-24/24F U ser’s Guide 39 C HAPTER 4 The Web Configurator This section introduces the configur ation and functions of the web configur ator . 4.1 Introduction The web configurator is an HTML -based management interface that allows easy Switch setup and management via Internet browser . Use Internet Explore r 6.0 and later or Firefox 2.0 and ...

  • ZyXEL Communications MES3500-24F - page 40

    Chapter 4 The Web Configurator MES3500-24/24F U ser’s Guide 40 3 The login screen appears. The default username is admin and associated default password is 1234 . The date and time display as shown if you have not conf igured a time server nor manually entered a time and date in the General Setup screen. Figure 18 W eb Configurator: Login 4 Click ...

  • ZyXEL Communications MES3500-24F - page 41

    Chapter 4 The Web Con figurator MES3500-24/24F U ser’s Guide 41 A - Click the menu items to open submenu links, an d then click on a submenu link to open the screen in the main window . B , C , D , E - These are quick links which allow you to perform certain tasks no matter which scree n you are currently working in. B - Click this link to sav e ...

  • ZyXEL Communications MES3500-24F - page 42

    Chapter 4 The Web Configurator MES3500-24/24F U ser’s Guide 42 The following table describes the links in the navigation panel. T able 4 Navigation Panel Links LINK DESCRIPTION Basic Settin gs System Info This link takes you to a screen that displa ys general system and hardw are monitoring information. General Setup This link takes you to a scre ...

  • ZyXEL Communications MES3500-24F - page 43

    Chapter 4 The Web Con figurator MES3500-24/24F U ser’s Guide 43 AAA This link takes you to a screen wh ere you can configure authen tication, authorization and accounting services via external serv ers. The external servers can be either RADIUS ( Remote Authentication Dial-In User Service) or T ACACS+ (T erminal Access Controller Acc ess -Control ...

  • ZyXEL Communications MES3500-24F - page 44

    Chapter 4 The Web Configurator MES3500-24/24F U ser’s Guide 44 4.3.1 Change Y our Password After you log in for the first time, it is recommended y ou change the default adm inistrator password. Click Management > Access Control > Logins to display the next screen. Figure 20 Change Administrator Login P assword 4.4 Saving Y our Configuratio ...

  • ZyXEL Communications MES3500-24F - page 45

    Chapter 4 The Web Con figurator MES3500-24/24F U ser’s Guide 45 4 Disable all ports. 5 Misconfigure the text configuration file. 6 F orge t the passw ord and/o r IP address. 7 Prevent all services from accessing the Switch. 8 Change a service port number but forget it. Note: Be c areful not t o lock your self and others out of the Switch. If you ...

  • ZyXEL Communications MES3500-24F - page 46

    Chapter 4 The Web Configurator MES3500-24/24F U ser’s Guide 46 6 After a configuration file upload, type atgo to restart the Switch. Figure 21 Resetting the Switch: Via the Console Port The Switch is now reinitialized with a default configur ation file includin g the default password of “1234” . 4.7 Logging Out of the W eb Configurator Click ...

  • ZyXEL Communications MES3500-24F - page 47

    Chapter 4 The Web Con figurator MES3500-24/24F U ser’s Guide 47 ...

  • ZyXEL Communications MES3500-24F - page 48

    Chapter 4 The Web Configurator MES3500-24/24F U ser’s Guide 48 ...

  • ZyXEL Communications MES3500-24F - page 49

    MES3500-24/24F U ser’s Guide 49 C HAPTER 5 Initial Setup Example This chapter shows how to set up th e Switch for an example network. 5.1 Overview The following lists the configuration steps fo r the initial setup: • Create a VLAN • Set port VLAN ID • Configure the Switch IP management address 5.1.1 Creating a VLAN VLANs confine broadcast f ...

  • ZyXEL Communications MES3500-24F - page 50

    Chapter 5 Initial Setup Example MES3500-24/24F U ser’s Guide 50 1 Click Advanced Application > VL AN in the navigation panel and click the Static VLAN link. 2 In the Static VLAN screen, select ACTIVE , enter a descriptive name in the Name field and enter 2 in the VLAN Group ID field for the VLAN2 network. Note: The VLAN Group ID field in this ...

  • ZyXEL Communications MES3500-24F - page 51

    Chapter 5 Initial Se tup Example MES3500-24/24F U ser’s Guide 51 In the example netw ork, conf igure 2 as the port VID on port 1 so that an y untagged frames received on that port get sent to VLAN 2. Figure 24 Initial Setup Network Example: Port VID 1 Click Advanced Applications > VLAN in the navigation panel. Then click the VLAN Port Setting ...

  • ZyXEL Communications MES3500-24F - page 52

    Chapter 5 Initial Setup Example MES3500-24/24F U ser’s Guide 52 1 Connect your computer to the S witch’ s port which is not in VLAN 2. 2 Open your web browse r and enter 192.168.1.1 (the default management IP ad dress) in the address bar to access the web configurator . See Section 4.2 on page 39 for more information. 3 Click Basic Setting > ...

  • ZyXEL Communications MES3500-24F - page 53

    MES3500-24/24F U ser’s Guide 53 C HAPTER 6 Tutorials This chapter provides some examples of using th e web configur ator to set up and use the S witch. The tutorials include: • How to Use DHCP Snooping on the S witch • How to Use DHCP R elay on the Switch • How to Use PPP oE IA on the Switch • How to Use Error Disable and Recov ery on the ...

  • ZyXEL Communications MES3500-24F - page 54

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 54 2 Go to Advanced Application > VLAN > Static VLAN , and create a VL AN with ID of 100. Add ports 5, 6 and 7 in the VLAN by selecting Fixed in the Control fie ld as show n. Deselect Tx Tagging because you don’t want outgoing traffic to contain this VLAN tag. Click Add . 3 Go to Advanced A ...

  • ZyXEL Communications MES3500-24F - page 55

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 55 4 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure , activate and specify VLAN 100 as the DHCP VLAN as shown. C lick Apply . 5 Click the Port link at the top right corner . 6 The DHCP Snooping Port Configure screen appears. Select Trusted in the Server Trusted st ...

  • ZyXEL Communications MES3500-24F - page 56

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 56 7 Go to Advanced Application > IP Source Guard > DHCP snooping > Configure > VLAN , show VLAN 100 by entering 100 in the St art VID and End VID fiel ds an d click Ap ply . Then select Yes in the Enabl ed field of the VLAN 100 entry shown at the bottom section of the screen. If you w ...

  • ZyXEL Communications MES3500-24F - page 57

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 57 6.2.1 DHCP Relay T u torial Introduction In this example, you have configured your DHCP server (192.168.2.3) and want to have it assign a specific IP address (say 172.16.1.18) an d gateway information to DHCP client A based on the system name, VLAN ID and port number in the DHCP request. Client ...

  • ZyXEL Communications MES3500-24F - page 58

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 58 3 Click Advanced Application > VLAN > Static VLAN . 4 In the Static VLAN screen, select ACTIVE , enter a descriptive name (V ALN 102 for example) in the Name field and enter 1 02 in the VLAN Group ID field. 5 Select Fixed to configure port 2 to be a permanent member of this VLAN. 6 Clear t ...

  • ZyXEL Communications MES3500-24F - page 59

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 59 9 Enter 102 in the PVID field for port 2 to add a tag to incoming untagged frames received on that port so that the frames are fo rwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory . 11 Click the Save link in the upper right corner of ...

  • ZyXEL Communications MES3500-24F - page 60

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 60 5 Click Apply to save your changes back to the run-time memory . 6 Click the Save link in the upper right corner of the web configurator to save your conf iguration permanently . 7 The DHCP server can then assign a specif ic IP address based on the DHCP request. 6.2.4 T roubleshooting Check the ...

  • ZyXEL Communications MES3500-24F - page 61

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 61 Switc h B is connected to switch A . In this way , PPPoE server S can identify subscriber C and may apply different settings to it. Note: For related information about PPPoE IA, see Section 31.3 on page 251 . The settings in this tutorial are as follows: 6.3.1 Configuring Switch A 1 Click Advanc ...

  • ZyXEL Communications MES3500-24F - page 62

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 62 2 Select Untrus ted for port 5 and enter userC as Circuit-id and 001 34900000A as Remote-id . Select Trusted for port 12 and then leave the other fiel ds em pty . Click Apply . Then Click Interm e diate Agent on the top of the screen. 3 The Intermediate Agent screen appears. Click VLAN on the to ...

  • ZyXEL Communications MES3500-24F - page 63

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 63 4 Enter 1 for both Start VID an d End VID since both the Switch and PPP oE server are in VLAN 1 in this example. Click Apply . 5 Then select Yes to enable PPPoE IA in VLAN 1 and also select Circuit-id and Remote-id to allow the Switch to add these two strings to fr ames tagged with VLAN 1 and pa ...

  • ZyXEL Communications MES3500-24F - page 64

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 64 1 Click Advanced Application > PPPoE > Intermediate Agent . Se lect Active then click Apply . Click Port on the top of the screen. 2 Select Trusted for ports 11 and 12 and then click Apply . Then Click Interm e diate Agent on the top of the screen. ...

  • ZyXEL Communications MES3500-24F - page 65

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 65 3 The Intermediate Agent screen appears. Click VLAN on the top of the screen. 4 Enter 1 for both Start VID an d End VID . Click Apply . 5 Then select Yes to enable PPPoE IA in VLAN 1 and also select Circuit-id and Remote-id to allow the Switch to add these two strings to fr ames tagged with VLAN ...

  • ZyXEL Communications MES3500-24F - page 66

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 66 The settings are completed now. If you miss some settings above, subscriber C could not successfully receive an IP address assigned by th e PPP oE Serv er . If this happe ns, make sure you follow the steps exactly in this tutorial. 6.4 How to Use Error Disabl e and Recovery on the Switch This tu ...

  • ZyXEL Communications MES3500-24F - page 67

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 67 2 Click Advanced Application > Errdisable > CPU Protecti on , select ARP as the reason, enter 100 as the rate limit (packets per second) for the first entry (port *) to apply the setting to all ports. Then click Apply . 3 Click Advanced Application > Errd isable > Errdisable Detect , ...

  • ZyXEL Communications MES3500-24F - page 68

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 68 6.5 How to Set Up a Guest VLAN All ports on the Switch are in VLAN 1 by default. Say you enable IEEE 802.1x authentication on ports 1 to 8. Clients that connect to these ports should provide the correct user name and password in order to access the ports. Y ou want to assign clients that connect ...

  • ZyXEL Communications MES3500-24F - page 69

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 69 2 Go to Basic Setting > Switch Setup and set the VLAN type to 802.1Q . Click Apply to sa ve the settings to the run-time memory . 3 Click Advanced Application > VLAN > Stati c VLAN . 4 In the Static VLAN screen, select ACTIVE , enter a descriptiv e na me (VLAN 20 0 for examp l e) in the ...

  • ZyXEL Communications MES3500-24F - page 70

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 70 7 Click Add to save the settings to the run-time memory . Settings in the run-time memory are lost when the Switch’ s power is turned off . 8 Click the VLAN Status link in the Static V LAN screen and then the VLAN Port Setting link in the VLAN Status screen. 9 Enter 200 in the PVID field for p ...

  • ZyXEL Communications MES3500-24F - page 71

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 71 10 Click Apply to save your changes back to the run-time memory . 11 Click the Save link in the upper right corner of the web configurator to save your conf iguration permanently . 6.5.2 Enabling IEEE 802. 1x Port Authentication Follow the steps below to enable port authentication to v alidate a ...

  • ZyXEL Communications MES3500-24F - page 72

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 72 2 Select the first Active checkbox to enable 802.1x au thentication on the Switch. Select the Active checkboxes for ports 1 to 8 to turn on 802.1x authentication on the selected ports. Click Apply . 6.5.3 Enabling Guest VLAN 1 Click the Guest Vlan link in the 802.1 x screen. ...

  • ZyXEL Communications MES3500-24F - page 73

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 73 2 Select Active and enter the guest VLAN ID (200 in this example) on ports 1, 2 and 3. The Switch puts unauthenticated clients in the specified guest VLAN. Set Host-mode to Multi-Secure to have the S witch authenticate each client that connects to one of these ports, and specify the maximum numb ...

  • ZyXEL Communications MES3500-24F - page 74

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 74 do port isolation in a VLAN instead of assigning each port to a separate VLAN and creating a different IP routing domain for each indiv idu al port. In this example, you put ports 2 to 4 and 25 in VLAN 123 and create a private VLAN rule for VLAN 123 to block traffic between ports 2, 3 and 4. 6.6 ...

  • ZyXEL Communications MES3500-24F - page 75

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 75 5 Select Fixed to configure ports 2, 3, 4 and 25 to be permanent members of this VLAN. 6 Clear the TX Tagging check box to set the Switch to remov e VLAN tags before sending frames out of these ports. 7 Click Add to save the settings to the run-time memory . Settings in the run-time memory are l ...

  • ZyXEL Communications MES3500-24F - page 76

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 76 9 Enter 123 in the PVID field for ports 2, 3, 4 and 25 to add a tag to incoming untagged frames received on these ports so that the frames are forwarded to the VLAN group that the tag defines. 10 Click Apply to save your changes back to the run-time memory . 11 Click the Save link in the upper r ...

  • ZyXEL Communications MES3500-24F - page 77

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 77 2 In the Private VLAN screen, select Active . Enter a descriptive name (Priv ateVLAN123 for example) in the Name field and enter 123 in the VLAN ID field. Click Add . 3 Click the Save link in the upper right corner of the web configurator to save your conf iguration permanently . Ports 2, 3 and ...

  • ZyXEL Communications MES3500-24F - page 78

    Chapter 6 Tutorials MES3500-24/24F U ser’s Guide 78 ...

  • ZyXEL Communications MES3500-24F - page 79

    79 P ART II T echnical Reference ...

  • ZyXEL Communications MES3500-24F - page 80

    80 ...

  • ZyXEL Communications MES3500-24F - page 81

    MES3500-24/24F U ser’s Guide 81 C HAPTER 7 System Status and Port Statistics This chapter describes the system status (web configurator home page) and port details screens. 7.1 Overview The home screen of the web configurator displays a port statistical summary with links to each port showing statistical details. 7.2 Port S t atus Summary T o vie ...

  • ZyXEL Communications MES3500-24F - page 82

    Chapter 7 System Status and Port Statistics MES3500-24/24F U ser’s Guide 82 The following table describes the labels in this screen. T able 7 Status LABEL DESCRIPTION Port This identif ies the Et hernet port. Click a port number to display the Port Details screen (refe r to Figure 27 on page 83 ). Name This is the nam e you assi gned to this port ...

  • ZyXEL Communications MES3500-24F - page 83

    Chapter 7 System Status and Port Statistics MES3500-24/24F U ser’s Guide 83 7.2.1 St atus: Port Det ails Click a number in the Port column in the Status screen to display individual port statistics. Use this screen to check status and detailed performance data about an individual port on the Switch. Figure 27 Status > Port Details The followin ...

  • ZyXEL Communications MES3500-24F - page 84

    Chapter 7 System Status and Port Statistics MES3500-24/24F U ser’s Guide 84 Status If STP (Spanning T ree Protoc ol) is enabled, th is field dis p lays the STP state of the port ( se e Sectio n 13.1 on pag e 122 for more information). If STP is disabled, this field displays FORWARDING if the link is up, otherwi se, it displays STOP . LACP This fi ...

  • ZyXEL Communications MES3500-24F - page 85

    Chapter 7 System Status and Port Statistics MES3500-24/24F U ser’s Guide 85 128-255 This field shows t he number of packets (inc ludin g bad packets) rece ived that were between 128 and 255 octets in length. 256-511 This field shows t he number of packets (inc ludin g bad packets) rece ived that were between 256 and 511 octets in length. 512-1023 ...

  • ZyXEL Communications MES3500-24F - page 86

    MES3500-24/24F U ser’s Guide 86 C HAPTER 8 Basic Setting This chapter describes how to configure the System Info, Ge neral Setup , Switch Setup , IP Setup and Port Setup screens. 8.1 Overview The System Info screen displays general S witch information (such as firmw are version number) and hardware polling information (such as temper atures). The ...

  • ZyXEL Communications MES3500-24F - page 87

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 87 The following table describes the labels in this screen. T able 9 Basic Setting > System Info LABEL DESCRIPTION System Name This field displa ys the descriptive name of the Swit ch for identification purposes. Product Model This field displays the model number of the Switch. ZyN O S F / W ...

  • ZyXEL Communications MES3500-24F - page 88

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 88 8.3 General Setup Use this screen to configure general settings such as the system name and time. Click Bas ic Setting > General Se tup in the navigation panel to display the screen as shown. Figure 29 Basic Setting > General Setup The following table describes the labels in this scree ...

  • ZyXEL Communications MES3500-24F - page 89

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 89 8.4 Introduction to VLANs A VLAN (Virtual Local Area Network) allows a ph ysic al network to be partitioned into multiple logical networks. Devices on a logical network belong to on e gr ou p. A d ev i ce ca n be lo ng t o m or e t ha n on e group. With VLAN, a device cannot directly talk to ...

  • ZyXEL Communications MES3500-24F - page 90

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 90 VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast pack ets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain. ...

  • ZyXEL Communications MES3500-24F - page 91

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 91 Y ou should enable RSTP or MRSTP before you can use smart isolation on the S witch. If th e network topology changes, the Switch automatically updates the isolated port list with the latest designated port information. Note: The uplink port connected to t he Internet should be the root port. ...

  • ZyXEL Communications MES3500-24F - page 92

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 92 Aging Time Enter a time from 10 to 3000 seconds. This is how long all dynamica lly learned MAC addresses remain in the MAC address ta ble before they age out (and must be relearned). GARP Timer: Swit ches join VLANs by m aking a declaration. A declaration is made by is su ing a Join message ...

  • ZyXEL Communications MES3500-24F - page 93

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 93 8.6 IP Setup Use the IP Setup screen to configure the Switch IP addres s, default gateway device, the default domain name server and the management VLAN ID. The default gateway specifies the IP address of the default gateway (next hop) for outgoing traffic. 8.6.1 Manage ment IP Addresses The ...

  • ZyXEL Communications MES3500-24F - page 94

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 94 The following table describes the labels in this screen. T able 12 Basic Setting > IP Setup LABEL DESCRIPTION Domain Nam e Serve r DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. Enter a domain name serv er IP addr ess in order to be a ...

  • ZyXEL Communications MES3500-24F - page 95

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 95 8.7 Port Setup Use this screen to configure Switch port settings. Click Basic Setting > Port Setup in the navigation panel to displa y the configuration screen. Figure 32 Basic Setting > Port Setup The following table describes the labels in this screen. Delete Check the manage ment IP ...

  • ZyXEL Communications MES3500-24F - page 96

    Chapter 8 Basic Setting MES3500-24/24F U ser’s Guide 96 Speed/Duplex Select the spee d and the duplex mode of the Ethernet c onnection on this port. Choices are Auto , 10M/Half Duplex , 10M /Full D uplex , 100M/Half Duplex , 100M/Full Duplex and 1000M/Full Duplex (Gigabit con nections only). Selecting Auto (auto-negotiation) allows one port to ne ...

  • ZyXEL Communications MES3500-24F - page 97

    MES3500-24/24F U ser’s Guide 97 C HAPTER 9 VLAN The type of screen you see here depends on the VLAN Type you selected in the Switch Setup screen. This chapter shows you h ow to conf igure 802.1Q tagged and port-based VLANs. 9.1 Introduction to IEEE 8 02.1Q T agged VLANs A tagged VLAN use s an explicit tag (VLA N ID) in the MAC header to identify ...

  • ZyXEL Communications MES3500-24F - page 98

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 98 9.2 Automatic VLAN Registration GARP and GVRP are the protocols used to automati cally register VLAN membership across switches. 9.2.1 GARP GARP (Generic Attribute R egistration Protocol) allows network switches to register and de-register attribute values with other GARP participants within a bridge ...

  • ZyXEL Communications MES3500-24F - page 99

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 99 9.3 Port VLAN T runking Enable VLAN Trunking on a port to allow fr ames belonging to unknown VLAN groups to pass through that port. This is useful if you want to set up VLAN groups on end devices without ha ving to configure the same VLAN grou ps on intermediary devices. The following figure describe ...

  • ZyXEL Communications MES3500-24F - page 100

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 100 9.5.1 VLAN S t atus See Section 9.1 on page 97 for more information on Static VLAN. Click Advanced Application > VLAN from the navigation panel to display the VLAN Status screen as shown next. Figure 35 Advanced Application > VLAN: VLAN Status The following table describes the labels in this s ...

  • ZyXEL Communications MES3500-24F - page 101

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 101 9.5.2 VLAN Det ails Use this screen to view detailed port setti ngs and status of the VLAN group. See Section 9.1 on page 97 for more information on static VLAN. Click on an index number in the VL AN Status screen to display VLAN details. Figure 36 Advanced Application > VLAN > VLAN Detail The ...

  • ZyXEL Communications MES3500-24F - page 102

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 102 9.5.3 Configure a St atic VLAN Use this screen to configure and view 802.1Q VLAN parameters for the Switch. See Section 9.1 on page 97 for more information on static VLAN. T o configure a static VLAN, click St atic VLAN in the VLAN Status screen to display the screen as shown next. Figure 37 Advance ...

  • ZyXEL Communications MES3500-24F - page 103

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 103 9.5.4 Configure VLAN Port Settings Use the VLAN Port Setting screen to configure the static VLAN (IEEE 802.1Q) settings on a port. See Section 9.1 on page 97 for more information on static VLAN. Click the VLAN Port Se tting link in the VLAN Status screen. Figure 38 Advanced Application > VLAN > ...

  • ZyXEL Communications MES3500-24F - page 104

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 104 9.6 Subnet Based VLANs Subnet based VLANs allow you to group traffic into logical VLANs based on the source IP subnet you specify . When a fr ame is received on a port, the Sw itch checks if a tag is added already and the IP subnet it c ame from. The untag ged packets from the same IP subnet are the ...

  • ZyXEL Communications MES3500-24F - page 105

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 105 services). All untagged incoming fr ames will be classified based on their source IP subnet and prioritized accordingly . That is, video services receive the highest priori ty and data the lowest. Figure 39 Subnet Based VLAN Application Example 9.7 Configuring Subnet Based VLAN Click Su bnet Based V ...

  • ZyXEL Communications MES3500-24F - page 106

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 106 Note: Subnet based VLAN applies to un-tagge d packet s and is applicable only when y ou use IEEE 802.1Q tagged VLAN. Figure 40 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN The following table describes the labels in this screen. T able 19 Advanced Application > VLA ...

  • ZyXEL Communications MES3500-24F - page 107

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 107 9.8 Protocol Based VLANs Protocol based VLANs allow you to grou p traffic into logical VLANs based on the protocol y ou specify . When an upstream frame is received on a port (configured for a protocol based VLAN), the Switch checks if a tag is added already and its protocol. The untagged packets of ...

  • ZyXEL Communications MES3500-24F - page 108

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 108 9.9 Configuring Protocol Based VLAN Click Protocol Based VLAN in the VLAN Port Se tting screen to display the configu ration screen as shown. Figure 42 Advanced Application > VLAN > VLAN Port Setting > Protocol Based VLAN The following table describes the labels in this screen. T able 20 Ad ...

  • ZyXEL Communications MES3500-24F - page 109

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 109 9.10 Create an IP -based VLAN Example This example shows you how to create an IP VLAN which includes ports 1, 4 and 8. F ollow these steps using the screen below: 1 Activate this protocol based VLAN. 2 T ype the port number you want to include in this protocol based VLAN. T ype 1 . 3 Give this proto ...

  • ZyXEL Communications MES3500-24F - page 110

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 11 0 6 Leave the priority set to 0 an d click Add . Figure 43 Protocol Based VLAN Configuration Example T o add more ports to this protocol based VLAN. 1 Click the index number of the protocol based VLAN entry . Click 1 2 Change the value in the Port field to the next port you want to add. 3 Click Add . ...

  • ZyXEL Communications MES3500-24F - page 111

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 111 9.1 1.1 Configure a Port-based VLAN Select Port Based as the VLAN Type in the Switch Setup screen and then click VLAN from the navigation panel to display the following screen. Select either All Connected or Port Isolated from the drop-down list depending on your VLAN and VLAN security requirements. ...

  • ZyXEL Communications MES3500-24F - page 112

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 11 2 The following screen shows users on a port -based, port-isolated VLAN configur ation. Figure 45 Advanced Application > VLAN: P ort Based VLAN Setup (P ort Isolation) ...

  • ZyXEL Communications MES3500-24F - page 113

    Chapter 9 VLAN MES3500-24/24F U ser’s Guide 11 3 The following table describes the labels in this screen. T able 21 Advanced Application > VLAN: Port Based VLAN Setup LABEL DESCRIPTION Setting Wizard Choose All connected or Port isolation . All connected me ans all ports can communi cate with each ot her , that is, th ere are no virtual LANs. ...

  • ZyXEL Communications MES3500-24F - page 114

    MES3500-24/24F U ser’s Guide 11 4 C HAPTER 10 Static MAC Forward Setup Use these screens to configure static MAC address forwarding. 10.1 Overview This chapter discusses how to configure forwarding rules based on MAC addresses of devices on your net wor k. 10.2 Configuring S t atic MAC Forwarding A static MAC address is an address that has been m ...

  • ZyXEL Communications MES3500-24F - page 115

    Chapter 10 Static MAC Forward Setup MES3500-24/24F U ser’s Guide 11 5 The following table describes the labels in this screen. T able 22 Advanced Application > Static MAC F orwarding LABEL DESCRIPTION Active Select this ch eck box to activ ate your ru le. Y ou may temporarily deact ivate a rule wit hout deleting it by clearing this check box. ...

  • ZyXEL Communications MES3500-24F - page 116

    MES3500-24/24F U ser’s Guide 11 6 C HAPTER 11 Static Multicast Forward Setup Use these screens to configure static multicast address forwarding. 1 1.1 S t atic Multicast Forwarding Overview A multicast MAC address is the MAC address of a member of a multicast group. A static multicast address is a multicast MAC address that has been manually ente ...

  • ZyXEL Communications MES3500-24F - page 117

    Chapter 11 Static Multicast Forward Setup MES3500-24/24F U ser’s Guide 11 7 within a VLAN group. Figure 48 shows frames being fo rwarded to devices connected to port 3. Figure 49 shows fr ames being forwarded to ports 2 and 3 within VLAN group 4. Figure 47 No Static Multicast Forw arding Figure 48 Static Multicast Forwarding to A Single P ort Fig ...

  • ZyXEL Communications MES3500-24F - page 118

    Chapter 11 Static Multicast Forward Setup MES3500-24/24F U ser’s Guide 11 8 Click Advanced Application > Static Multicast Forwarding to display the configuration screen as shown. Figure 50 Advanced Application > Static Multicast F orwarding The following table describes the labels in this screen. T able 23 Advanced Application > Static M ...

  • ZyXEL Communications MES3500-24F - page 119

    Chapter 11 Static Multicast Forward Setup MES3500-24/24F U ser’s Guide 11 9 Port This field displays the port(s) within a identi fied VLAN group to which frames containi ng the specified mult icast MAC a ddress will be forwarded. Delete Click Delete to remove the selected entry from the summary table. Cancel Click Cancel to clear the Del ete chec ...

  • ZyXEL Communications MES3500-24F - page 120

    MES3500-24/24F U ser’s Guide 120 C HAPTER 12 Filtering This chapter discusses MAC address port filtering. 12.1 Configure a Filtering Rule Configure the Switch to filter tr affic based on the tr affic’ s source, destination MAC addresses and/or VLAN group (ID). Click Advanced Application > Fil tering in the navigation panel to display the scr ...

  • ZyXEL Communications MES3500-24F - page 121

    Chapter 12 Filtering MES3500-24/24F U ser’s Guide 121 MAC T ype a MAC address in a valid MAC address fo rmat, that is, six hexa decimal character pairs. VID T ype the VLAN group ide ntification numbe r . Add Click Ad d to save your changes to the Switch’ s run-ti me memory . The S witch loses the se changes if it is turned off or loses power , ...

  • ZyXEL Communications MES3500-24F - page 122

    MES3500-24/24F U ser’s Guide 122 C HAPTER 13 Spanning Tree Protocol The Switch supports Spanning T ree Protocol (S TP), R apid Spanning T ree Protocol (RSTP) and Multiple Spanning T ree Protocol (MSTP) as defined in the following standards. • IEEE 802.1D Spanning T re e Protocol • IEEE 802.1w Rapid Spanning T ree Protocol • IEEE 802.1s Mult ...

  • ZyXEL Communications MES3500-24F - page 123

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 123 On each bridge, the bridge communicates with the r oot through the root port. The root port is the port on this Switch with the lowest path cost to the root (the root path cost). If there is no root port, then this Switch has been accepted as the root bridge of the spanning tree ...

  • ZyXEL Communications MES3500-24F - page 124

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 124 13.1.4 Multiple RSTP MRSTP (Multiple RSTP) is Z yXEL ’s proprietary featur e that is compatible with RSTP and STP . With MRSTP , you can have more than one spanning tree on y our S w itch and assign port(s) to each tree. Each spanning tree operates independ ently with its own b ...

  • ZyXEL Communications MES3500-24F - page 125

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 125 13.1.5.1 MSTP Network Example The following figure shows a network example where two VLANs are configured on the two switches. If the switches are using STP or RSTP , th e link for VLAN 2 will be blocked as STP and RSTP allow only one link in the networ k and block the redundant ...

  • ZyXEL Communications MES3500-24F - page 126

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 126 Devices that belong to the same MST region are configu red to have the same MSTP configur ation identification settings. These include the following parameters: • Name of the MST region • Revision level as the unique number for the MST region • VLAN-to-MST Instance mapping ...

  • ZyXEL Communications MES3500-24F - page 127

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 127 13.2 S p anning T ree Protocol S t atus Screen The Spanning T ree Protocol status screen change s depending on what standard you choose to implement on your network. Click Advanced Application > Spanning Tree Protocol to see the screen as shown. Figure 57 Advanced Application ...

  • ZyXEL Communications MES3500-24F - page 128

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 128 The following table describes the labels in this screen. 13.4 Configure Rapid S p anning T ree Protocol Use this screen to configure RSTP settings, see Section 13.1 on page 122 for more information on RSTP . Click RSTP in the Advanced Application > Spanning Tree Protocol scree ...

  • ZyXEL Communications MES3500-24F - page 129

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 129 The following table describes the labels in this screen. T able 28 Advanced Application > Spanning T ree Protocol > RSTP LABEL DESCRIPTION Status Cl ick Statu s to display the RSTP Status screen (s ee Figure 60 on page 130 ). Active Select this check bo x to activate RSTP . ...

  • ZyXEL Communications MES3500-24F - page 130

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 130 13.5 Rapid S p anning T ree Protocol S t atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 122 for more information on RSTP . Note: This screen is only av ailable after y ou act ...

  • ZyXEL Communications MES3500-24F - page 131

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 131 13.6 Configure Multiple Ra pid S p anning T ree Protocol T o configure MRSTP , click MRSTP in the Advanced Application > Spanning Tree Protocol screen. See Section 13.1 on page 122 for more information on MRSTP . Figure 61 Advanced Application > Spanning T ree Protocol > ...

  • ZyXEL Communications MES3500-24F - page 132

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 132 Active Select this check box to activate an STP tree. Clea r t his checkbox to disable an STP tree. Note: Y ou must also activate Multiple Rapid Sp anning T ree in the Advanced Applicatio n > Sp anning T ree Protocol > C onfiguratio n screen to enable MRSTP on the Switch. B ...

  • ZyXEL Communications MES3500-24F - page 133

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 133 13.7 Multiple Rapid S p anning T r ee Protocol S t atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1 on page 122 for more information on MRSTP . Note: This screen is only av ailable aft ...

  • ZyXEL Communications MES3500-24F - page 134

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 134 Cost to Bridge This is the path cost from the root port on this Switch to the root switch. Port ID Th is is the priori ty and number o f the p o rt on the Switch through which this Switch must communicate with the root of th e Span ning T ree. T opology Changed Times This is the ...

  • ZyXEL Communications MES3500-24F - page 135

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 135 13.8 Configure Multiple S p anning T ree Protocol T o configure MSTP , click MSTP in the Advanced Application > Span ning Tree Pr otocol screen. See Section 13.1.5 on page 124 for more information on MSTP . Figure 63 Advanced Application > Spanning T ree Protocol > MSTP ...

  • ZyXEL Communications MES3500-24F - page 136

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 136 The following table describes the labels in this screen. T able 32 Advanced Application > Spanning T ree Protocol > MSTP LABEL DESCRIPTION Port Cl ic k Port to display the MSTP Port Configuration sc reen (see Figure 64 on page 138 ). Status Cl ick Statu s to display the MST ...

  • ZyXEL Communications MES3500-24F - page 137

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 137 VLAN Range Enter the start of the VLAN ID range th at you want to add or remove from the VLAN r ange edit area i n the Start field. Enter the end of the VLAN ID r ange that y ou want to a dd or remove from the VLAN r ange edit area in the End field. Next click: • Add - to add t ...

  • ZyXEL Communications MES3500-24F - page 138

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 138 13.8.1 Multiple S p anning T ree Protocol Port Configuration T o configure MSTP ports, click Po rt in the Advanced Appl ication > Spanning Tree Protocol > MSTP screen. Figure 64 Advanced Application > Spanning T ree Protocol > MSTP > P ort The following table descr ...

  • ZyXEL Communications MES3500-24F - page 139

    Chapter 13 Spanning T ree Protocol MES3500-24/24F U ser’s Guide 139 13.9 Multiple S p anning T ree Protocol S t atus Click Advanced Application > Spanning Tree Protocol in the navigation panel to display the status screen as shown next. See Section 13.1.5 on page 124 for more information on MSTP . Note: This screen is only av ailable after you ...

  • ZyXEL Communications MES3500-24F - page 140

    Chapter 13 Spanning Tree Pr otocol MES3500-24/24F U ser’s Guide 140 Port ID This is the priority and number o f the port on the S witch through whi ch t hi s S w it ch mu s t communicate with the root of th e Span ning T ree. Configur atio n Name This field displays the configuration name for this MST re gion. Revision Number This field displays ...

  • ZyXEL Communications MES3500-24F - page 141

    MES3500-24/24F U ser’s Guide 141 C HAPTER 14 Bandwidth Control This chapter shows you how y ou can cap the maximum bandwidth using th e Ban dwidth Control screen. 14.1 Bandwid th Control Overview Bandwidth c o ntrol mea n s defining a m a ximum allowable ba ndwidth fo r incoming an d/ o r out-going traffic flows on a port. 14.1.1 CIR and PIR The ...

  • ZyXEL Communications MES3500-24F - page 142

    Chapter 14 Bandwidth Control MES3500-24/24F U ser’s Guide 142 14.2 Bandwid th Control Setup Click Ad vanced Applic ation > Bandwidth Control in the navigation panel to bring up the screen as shown next. Figure 66 Advanced Application > Bandwidth Control The following table describes the related labels in this screen. T able 35 Advanced Appl ...

  • ZyXEL Communications MES3500-24F - page 143

    Chapter 14 Bandwidth Control MES3500-24/24F U ser’s Guide 143 Apply Click Apply to save your changes to the Switch’s run-time memory . The Switch lo ses these changes if it is turned off or loses power , so use the Save link on the top navigation panel to save y our change s to the non- volat ile memory when y ou are done c onfiguring. Cancel C ...

  • ZyXEL Communications MES3500-24F - page 144

    MES3500-24/24F U ser’s Guide 144 C HAPTER 15 Broadcast Storm Control This chapter introduces and shows you how to configure the broadcast storm control feature. 15.1 Broadcast S torm Control Setup Broadcast storm control limits the number of broadc ast, multicast and destination lookup failure (DLF) packets the Switch receives per second on the p ...

  • ZyXEL Communications MES3500-24F - page 145

    Chapter 15 Broadcast Storm Control MES3500-24/24F U ser’s Guide 145 * Settings in this row apply to all ports. Use this row only if you w ant to make some settings th e same for all ports. Use this row first to set the c ommon settin gs an d then ma ke adjustments on a port-b y-port basis. Note: Changes in this row are copied to all the ports as ...

  • ZyXEL Communications MES3500-24F - page 146

    MES3500-24/24F U ser’s Guide 146 C HAPTER 16 Mirroring This chapter discusses port mirroring setup screens. 16.1 Port Mirroring Setup Po rt mirroring allows you to copy a tr affic flow to a monitor port (the port y ou copy the tr affic to) in order that you can examine the tr affic from the monitor port without interference. Click Advanced Applic ...

  • ZyXEL Communications MES3500-24F - page 147

    Chapter 16 Mirroring MES3500-24/24F U ser’s Guide 147 * Settings in this row apply to all ports. Use this row only if you wa nt to make some sett ings th e same for all ports. Use this row first to set the common se ttings and then ma ke adjustments on a port-by-port basis. Note: Changes in this row are copied to all the ports as soon as you make ...

  • ZyXEL Communications MES3500-24F - page 148

    MES3500-24/24F U ser’s Guide 148 C HAPTER 17 Link Aggregation This chapter shows you how to logically aggregate ph ysical links to form one logical, higher- bandwidth link. 17.1 Link Aggregation Overview Link aggregation (trunking) is the groupin g of ph ysical ports into one logical higher-capacit y link. Y ou may want to trunk ports if fo r exa ...

  • ZyXEL Communications MES3500-24F - page 149

    Chapter 17 Link Aggrega tion MES3500-24/24F U ser’s Guide 149 Configure trunk groups or LACP before y ou connect the Ethernet switch to av oid causing network topology loops. 17.2.1 Link Aggregation ID LACP aggregation ID consists of the following information 1 : 17.3 Link Aggregation S t atus Click Advanced Application > Link Aggregation in t ...

  • ZyXEL Communications MES3500-24F - page 150

    Chapter 17 Link Aggregation MES3500-24/24F U ser’s Guide 150 Aggregator ID Link Aggregator ID cons ists o f the following: sy stem priori ty , MAC address, key , port priority and port number . R efer to Section 17.2.1 on page 149 for more information on thi s field. The ID displays only when there is a port be longing to this trun k gr oup and L ...

  • ZyXEL Communications MES3500-24F - page 151

    Chapter 17 Link Aggrega tion MES3500-24/24F U ser’s Guide 151 17.4 Link Aggregation Setting Click Advanced Application > Link Aggregation > Link Aggregation Setting to display the screen shown next. See Section 17.1 on page 148 for more information on link aggregation. Figure 70 Advanced Application > Link Aggreg ation > Link Aggregat ...

  • ZyXEL Communications MES3500-24F - page 152

    Chapter 17 Link Aggregation MES3500-24/24F U ser’s Guide 152 Criteria Select the outgo ing traffic distribution ty pe. Packets from the s ame source an d/or to the sa me destination are sent over th e same link within th e trunk. By default, th e Switch uses t he src- dst-mac distribution type. If the S witch is beh ind a rout er , the packet’ ...

  • ZyXEL Communications MES3500-24F - page 153

    Chapter 17 Link Aggrega tion MES3500-24/24F U ser’s Guide 153 17.5 Link Aggregation Control Protocol Click in the Advanced Applic ation > Link Aggregation > Link Aggregation Setting > LACP to display the screen shown next. See Section 17.2 on page 148 for more information on dynamic link aggregation. Figure 71 Advanced Application > L ...

  • ZyXEL Communications MES3500-24F - page 154

    Chapter 17 Link Aggregation MES3500-24/24F U ser’s Guide 154 17.6 S t atic T runking Example This example shows you how to create a static port trunk group for ports 2-5. 1 Make your physical connections - make sure that the ports that y ou want to belong to the trunk group are connected to the same destination. The following figure shows ports 2 ...

  • ZyXEL Communications MES3500-24F - page 155

    Chapter 17 Link Aggrega tion MES3500-24/24F U ser’s Guide 155 2 Configure static trunking - Click Advanced Application > Link A ggregation > Link Aggregation Setting . In this screen activate trunk group T1 , select the traffic distribution algorithm used by this group and select the ports that should belong to this group as shown in the fi ...

  • ZyXEL Communications MES3500-24F - page 156

    MES3500-24/24F U ser’s Guide 156 C HAPTER 18 Port Authentication This chapter describes the IEEE 802. 1x and MAC authentication methods. 18.1 Port Authentication Overview Port authentication is a way to v alidate access to po rts on the Switch to clients based on an external server (authentication server). The Switch supports the following method ...

  • ZyXEL Communications MES3500-24F - page 157

    Chapter 18 Port Authenticati on MES3500-24/24F U ser’s Guide 157 provides the login credentials, the Switch sends an authentication request to a RADIUS server . The RADIUS server v alidates whether this client is allowed access to the port. Figure 74 IEEE 802.1x Authentication Process 18.1.2 MAC Authentication MAC authentication works in a very s ...

  • ZyXEL Communications MES3500-24F - page 158

    Chapter 18 Port Authen tication MES3500-24/24F U ser’s Guide 158 on the source MAC address of the client connectin g to a po rt on the Switch along with a password configured specifically for MAC auth entication on the S witch. Figure 75 MAC Authentication Process 18.2 Port Authentication Configuration T o enable port authentication, first activa ...

  • ZyXEL Communications MES3500-24F - page 159

    Chapter 18 Port Authenticati on MES3500-24/24F U ser’s Guide 159 18.2.1 Activate IEEE 802.1x Security Use this screen to activate IEEE 802.1x securit y . In the Po rt Authenti cation screen click 802.1x to display the configur ation screen as shown. Figure 77 Advanced Application > P ort Authentication > 802.1x The following table describes ...

  • ZyXEL Communications MES3500-24F - page 160

    Chapter 18 Port Authen tication MES3500-24/24F U ser’s Guide 160 18.2.2 Guest VLAN When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the correct credentials are blocked from using the port(s). Y ou can configure your Switch to have on e VLAN that acts as a guest VLAN. If you enable the guest VLAN ( 1 ...

  • ZyXEL Communications MES3500-24F - page 161

    Chapter 18 Port Authenticati on MES3500-24/24F U ser’s Guide 161 Use this screen to enable and assign a guest VLAN to a port. In the Port Authentication > 802.1x screen click Guest Vlan to display the configuration screen as shown. Figure 79 Advanced Application > P ort Authentication > 802.1x > Guest VLAN The following table describe ...

  • ZyXEL Communications MES3500-24F - page 162

    Chapter 18 Port Authen tication MES3500-24/24F U ser’s Guide 162 18.2.3 Activate MAC Authentication Use this screen to activate MAC authentication. In th e Port Authentication screen click MAC Authentication to display the configur ation screen as shown. Figure 80 Advanced Application > P ort Authentication > MAC Authentication Host-mode Sp ...

  • ZyXEL Communications MES3500-24F - page 163

    Chapter 18 Port Authenticati on MES3500-24/24F U ser’s Guide 163 The following table describes the labels in this screen. T able 45 Advanced Application > Port Auth entication > MAC Authentication LABEL DESCRIPTION Active Se lect this check bo x to permit MAC au thentication on the Switch. Note: Y ou must first enable MAC authentication on ...

  • ZyXEL Communications MES3500-24F - page 164

    MES3500-24/24F U ser’s Guide 164 C HAPTER 19 Port Security This chapter shows you how to set up port security . 19.1 About Port Security Po rt security allows only packets with dynamically learned MAC addresses and/or configured static MAC addresses to pass through a port on the S witch. The Switch can learn up to 16K MAC addresses in total with ...

  • ZyXEL Communications MES3500-24F - page 165

    Chapter 19 Port Security MES3500-24/24F U ser’s Guide 165 The following table describes the labels in this screen. T able 46 Advanced Application > P ort Security LABEL DESCRIPTION Port List Enter the number of the port(s) (separated by a comma) on which y ou want to enable port security and disable MAC addr ess learning. After you click MAC f ...

  • ZyXEL Communications MES3500-24F - page 166

    MES3500-24/24F U ser’s Guide 166 C HAPTER 20 Classifier This chapter introduces and shows you how to co nfigure the packet classifier on the Sw itch. 20.1 About the Classifier and QoS Quality of Service (QoS) refers to both a network's ability to deliv er data with minimum delay , and the networking methods used to control the use of bandwid ...

  • ZyXEL Communications MES3500-24F - page 167

    Chapter 20 Classifier MES3500-24/24F U ser’s Guide 167 Click Advanced Application > Classifier in the navigation panel to display the configur ation screen as shown. Figure 82 Advanced Application > Classifier The following table describes the labels in this screen. T able 47 Advanced Application > Classifier LABEL DESCRIPTION Active Sel ...

  • ZyXEL Communications MES3500-24F - page 168

    Chapter 20 Classifier MES3500-24/24F U ser’s Guide 168 20.3 V iewing and Editing Classifier Configuration T o view a summary of the classifier configuration, scroll down to the summary table at the botto m of the Classifier screen. T o change the settings of a rule, click a number in the Index field. Port T ype the port number to which the rule s ...

  • ZyXEL Communications MES3500-24F - page 169

    Chapter 20 Classifier MES3500-24/24F U ser’s Guide 169 Note: When two rules conflict with each other , a higher layer rule has priority over a lower layer rule. Figure 83 Advanced Application > Classifier: Summary T able The following table describes the labels in this screen. The following table shows some other common Ethernet types and the ...

  • ZyXEL Communications MES3500-24F - page 170

    Chapter 20 Classifier MES3500-24/24F U ser’s Guide 170 20.4 Classifier Example The following screen shows an example of configuring a classifier that identifies all traffic from MAC address 00:50:ba:ad:4f:81 on port 2. Figure 84 Classifier: E xample After you have configured a classifier , you can configure a policy to define action(s) on the cla ...

  • ZyXEL Communications MES3500-24F - page 171

    MES3500-24/24F U ser’s Guide 171 C HAPTER 21 Policy Rule This chapter shows you how to configure policy rules. 21.1 Policy Rules Overview A classifier distinguishes traffic into flows based on the con figured criteria (refer to Chapter 20 on page 166 for more information). A policy rule ensure s that a traffic flow gets the requested treatment in ...

  • ZyXEL Communications MES3500-24F - page 172

    Chapter 21 Policy Rule MES3500-24/24F U ser’s Guide 172 Click Advanced Applications > Policy Rule in the navigation panel to displa y the screen as shown. Figure 85 Advanced Application > P olicy Rule The following table describes the labels in this screen. T able 51 Advanced Application > P olicy Rule LABEL DESCRIPTION Active Select thi ...

  • ZyXEL Communications MES3500-24F - page 173

    Chapter 21 Policy Rule MES3500-24/24F U ser’s Guide 173 Gener al Egress Port T ype the numbe r of an outgoing port. Priority Specify a priority lev el. DSCP Specify a DSCP (DiffServ Code Point) number between 0 and 63. TOS Specify the type of service (TOS) priority level. Rate Limit You can configure the desired bandwidth available to a tr affic ...

  • ZyXEL Communications MES3500-24F - page 174

    Chapter 21 Policy Rule MES3500-24/24F U ser’s Guide 174 21.3 V iewing and Editing Policy Configuration T o view a summary of the classifier configuration, scroll down to the summary table at the botto m of the Policy screen. T o change the settings of a rule, click a number in the Index field. Figure 86 Advanced Application > P olicy Rule: Sum ...

  • ZyXEL Communications MES3500-24F - page 175

    Chapter 21 Policy Rule MES3500-24/24F U ser’s Guide 175 21.4 Policy Example The figure below shows an example Policy screen where you configure a policy to limit bandwidth on a traffic flow classified using the Example classifier (refer to Section 20.4 on page 1 70 ). Figure 87 Policy Example EXAMPLE ...

  • ZyXEL Communications MES3500-24F - page 176

    MES3500-24/24F U ser’s Guide 176 C HAPTER 22 Queuing Method This chapter introduces the queuing methods supported. 22.1 Queuing Method Overview Queuing is used to help solve performance degr ad ation when there is network conge stion. Use the Queuing Method screen to configure queuing algorithms for outgoing traffic. See also Priority Queue Assig ...

  • ZyXEL Communications MES3500-24F - page 177

    Chapter 22 Queuing Meth od MES3500-24/24F U ser’s Guide 177 22.1.3 We ighted Round Robin Scheduling (WRR) Round R ob in Scheduling services queues on a rotating basis and is activated only when a port has more traffi c than it can handle. A queue is a given an am ount of bandwidth irrespective of the incoming traffic on that port. This queue then ...

  • ZyXEL Communications MES3500-24F - page 178

    Chapter 22 Queuing Method MES3500-24/24F U ser’s Guide 178 The following table describes the labels in this screen. T able 53 Advanced Application > Queuing Method LABEL DESCRIPTION Port This label shows the port you are configuring. * Settings in this row apply to all ports. Use this row only if y ou want to make some se ttings the same for a ...

  • ZyXEL Communications MES3500-24F - page 179

    MES3500-24/24F U ser’s Guide 179 C HAPTER 23 VLAN Stacking This chapter shows you how to con figu re VLAN stac king on your Switch. See the chapter on VLANs for more background information on Virtual LAN 23.1 VLAN S t acking Overview A service provider can use VLAN stacking to allow it to distinguish multiple customers VLANs, ev en those with the ...

  • ZyXEL Communications MES3500-24F - page 180

    Chapter 23 VLAN Stacking MES3500-24/24F U ser’s Guide 180 adding tag 37 to distinguish customer A and tag 48 to distinguish customer B at edge device 1 and then stripping those tags at edge device 2 as the data fr ames leave the network. Figure 89 VLAN Stacking Exampl e 23.2 VLAN S t acking Port Roles Each port can have three VLAN stackin g “ro ...

  • ZyXEL Communications MES3500-24F - page 181

    Chapter 23 VLAN Stacking MES3500-24/24F U ser’s Guide 181 23.3 VLAN T ag Format A VLAN tag (service provider VLAN stacking or customer IEEE 802.1Q) consists of the following three fields. Type is a standard Ethernet type code identifying the fr ame and indicates that whether the fr ame carries IEEE 802.1Q tag information. SP TPID (Service Provide ...

  • ZyXEL Communications MES3500-24F - page 182

    Chapter 23 VLAN Stacking MES3500-24/24F U ser’s Guide 182 23.4 Configuring VLAN S t acking Click Advanced Applications > VLAN Stacking to display the screen as shown. Figure 90 Advanced Application > VLAN Stacking The following table describes the labels in this screen. T able 57 Advanced Application > VLAN Stacking LABEL DESCRIPTION Act ...

  • ZyXEL Communications MES3500-24F - page 183

    Chapter 23 VLAN Stacking MES3500-24/24F U ser’s Guide 183 23.4.1 Port-based Q-in-Q Po rt-based Q-in-Q lets the Switch treat all fr ames received on the same port as the same VLAN flows and add the same outer VLAN tag to them, ev en they have different customer VLAN IDs. Click Port-based QinQ in the Advanced Application > VLAN Stacking screen t ...

  • ZyXEL Communications MES3500-24F - page 184

    Chapter 23 VLAN Stacking MES3500-24/24F U ser’s Guide 184 23.4.2 Selective Q-in-Q Selective Q-in-Q is VLAN-based. It allows the Sw itch to add different outer VLAN tags to the incoming fr ames received on one port according to their inner VLAN tags. Note: Selective Q-i n-Q rules are only applied to si ngle-tagged frames receiv ed on the access po ...

  • ZyXEL Communications MES3500-24F - page 185

    Chapter 23 VLAN Stacking MES3500-24/24F U ser’s Guide 185 Active This sh ows whether this rule is acti vated or not. Name This is the descript ive name for this rule. Port This is the port number to which this rule is applied. CVID This is the customer VLAN ID in the inco ming packets. SPVID This is the service provider’ s VLAN ID that adds to ...

  • ZyXEL Communications MES3500-24F - page 186

    MES3500-24/24F U ser’s Guide 186 C HAPTER 24 Multicast This chapter shows you how to configure v arious multicast features. 24.1 Multicast Overview T raditionally , IP packets are transmitted in one of either two wa ys - Unicast (1 sender to 1 recipient) or Broadcast (1 sender to ev erybody on the networ k). Multicast delivers IP pack ets to just ...

  • ZyXEL Communications MES3500-24F - page 187

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 187 24.1.4 IGMP Snooping and VLANs The Switch can perform IGMP snooping on up to 16 VLANs. Y ou can configure the Switch to automatically learn multicast group membership of any VLANs. The Switch then performs IGMP snooping on the first 16 VLANs that send IGMP packets. This is refe rred to as auto ...

  • ZyXEL Communications MES3500-24F - page 188

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 188 24.3 Multicast Setting Click Advanced Applications > Multicast > Multicast Setting link to display the screen as shown. See Section 24.1 on pag e 186 for more information on multicasting. Figure 94 Advanced Application > Multicast > Multicast Setting The following table describes t ...

  • ZyXEL Communications MES3500-24F - page 189

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 189 Unknown Multicast Fr ame Specify the action to perform when the Swit ch receives an unknown multicast frame. Select Drop to discard the frame(s). Select Floo ding to send the frame(s) to all ports. Res er ve d Multicast Group The IP address range of 224.0.0.0 to 22 4.0.0. 255 are reserved for ...

  • ZyXEL Communications MES3500-24F - page 190

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 190 Throttling IGMP throttling controls how the Swit ch deals with the IGMP reports wh en the maximum number of the IGMP gro ups a port can join is reached. Select Deny to drop any new IGMP join repor t rece ived on this port until an existing multicast forwarding table entry is aged out. Select R ...

  • ZyXEL Communications MES3500-24F - page 191

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 191 24.4 IGMP Snooping VLAN Click Advanced Applications > Multicast in the navigation panel. Click the Multicast Setting link and then the IGMP Snooping VLAN link to display the screen as shown. See Section 24.1.4 on page 187 for more information on IGMP Snooping VLAN. Figure 95 Advanced Applic ...

  • ZyXEL Communications MES3500-24F - page 192

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 192 24.5 IGMP Filtering Profile An IGMP filtering profile specifie s a range of multicast groups that clients connected to the S witch are able to join. A profile contains a r ange of mu lticast IP addresses which you want clients to be able to join. Profiles are assigned to ports (in the Multicas ...

  • ZyXEL Communications MES3500-24F - page 193

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 193 The following table describes the labels in this screen. 24.6 MVR Overview Multicast VLAN Registr ation (MVR) is designed for applications (such as Media-on-Demand (MoD)) that use multicast traffic across an Ethern et ring-based service prov ider network. MVR allows one single multicast VLAN t ...

  • ZyXEL Communications MES3500-24F - page 194

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 194 The following figure shows a network example. The subscriber VLAN ( 1 , 2 and 3 ) information is hidden from the streaming media server , S . In addition, the multicast VLAN information is only visible to the Switch and S . Figure 97 MVR Network Example 24.6.1 T ypes of MVR Port s In MVR, a so ...

  • ZyXEL Communications MES3500-24F - page 195

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 195 port in the same subscriber VLAN , the receiving port will still be on the list of forwarding destination for the multicast tr affic. Otherwise, the Switch removes the receiver port from the forw arding table. Figure 98 MVR Multicast T elevision Example 24.7 General MVR Configuration Use the M ...

  • ZyXEL Communications MES3500-24F - page 196

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 196 Note: Y our Switch automatically creates a st atic VLAN (with the same VID) when you create a multicast VLAN in this screen. Figure 99 Advanced Application > Multic ast > Multicast Setting > MVR The following table describes the related labels in this screen. T able 64 Advanced Applic ...

  • ZyXEL Communications MES3500-24F - page 197

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 197 24.8 MVR Group Configuration All source ports and receiver ports belonging to a multicast group can receive multicast data sent to this multicast group. Configure MVR IP multicast group address(es) in the Group Configuration screen. Click Group Configuration in the MVR screen. Source Port Sele ...

  • ZyXEL Communications MES3500-24F - page 198

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 198 Note: A port can belong to more than one multicast VLAN. However , IP multicast group addresses in different mult icas t VLANs cannot overlap . Figure 100 Advanced Application > Multicast > Multic ast Setting > MVR: Group Configur ation The following table describes the labels in this ...

  • ZyXEL Communications MES3500-24F - page 199

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 199 News and Movie channels) from the remote streaming media server , S . Computers A, B and C in VLAN 1 are able to receive the traffic. Figure 101 MVR Configuration Example T o configure the MVR settings on the S witch, create a multicast group in the MVR screen and set the receiver and source p ...

  • ZyXEL Communications MES3500-24F - page 200

    Chapter 24 Multicast MES3500-24/24F U ser’s Guide 200 T o set the Switch to forward the multicast group traffic to the subscribers, configure multicast group settings in the Group Configuration screen. The following figure shows an exam ple where two multicast groups ( News and Movie ) are configured for the multicast VLAN 200. Figure 103 MVR Gro ...

  • ZyXEL Communications MES3500-24F - page 201

    MES3500-24/24F U ser’s Guide 201 C HAPTER 25 AAA This chapter describes how to configure authenti cation, authorization and accounting settings on the Switch. 25.1 Authentication, Author ization and Accounting (AAA) Authentication is the process of determining who a user is and v alidating access to the Sw itch. The Switch can authenticate users ...

  • ZyXEL Communications MES3500-24F - page 202

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 202 25.1.2 RADIUS and T ACACS+ RADIUS and T ACACS+ are security protocols used to authenticate users by means of an extern al server instead of (or in addition to) an internal de vice user database th at is limited to the memory capacity of the device. In essence, RADIUS and T ACACS+ authentication both ...

  • ZyXEL Communications MES3500-24F - page 203

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 203 authentication and accounting features on the Switch. Click on the RADIUS Server Setup link in the AAA screen to view the screen as shown. Figure 107 Advanced Application > AAA > RADIUS Server Setup The following table describes the labels in this screen. T able 67 Advanced Application > AA ...

  • ZyXEL Communications MES3500-24F - page 204

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 204 Shared Secret Specify a password (up to 32 alphanumer ic characters) as the key to be shared betwe en the e x t e r n a l R A D I U S s e r v e r a n d t h e S w i t c h . T h i s k e y i s n o t s e n t o v e r t h e n e t w o r k . T h i s k e y m u s t be the same on the external RADIUS server an ...

  • ZyXEL Communications MES3500-24F - page 205

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 205 25.2.2 T ACACS+ Server Setup Use this screen to configure your T ACACS+ server settings. See Section 25.1.2 on page 202 for more information on T ACACS+ servers. Click on the TACACS+ Server Setup link in the Authentication and Accounti ng screen to view the scre en as shown. Figure 108 Advanced Appl ...

  • ZyXEL Communications MES3500-24F - page 206

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 206 TCP P ort The default port of a T ACACS+ server for authentication is 49 . Y ou need not change this value unless your network administ rator instructs y ou to do so. Shared Secret Specify a password (up to 32 alphanumeric characters) as the k ey to be sh ared between the external T ACACS+ server an ...

  • ZyXEL Communications MES3500-24F - page 207

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 207 25.2.3 AAA Setup Use this screen to configure authentication, authorization an d accounting settings on the Switch. Click on the AAA Setup link in the AAA screen to view the screen as shown. Figure 109 Advanced Application > AAA > AAA Setup The following table describes the labels in this scre ...

  • ZyXEL Communications MES3500-24F - page 208

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 208 Login These fields specif y which database the S witch should use (fi rst, second and third) to authenticat e administrator accounts (users for Switch management). Configure t he local us er account s in the Access Control > Logins screen. The T ACACS+ and RADIUS are external servers. Before you ...

  • ZyXEL Communications MES3500-24F - page 209

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 209 25.2.4 V endor S pecific Attribute RFC 2865 standard specifies a method for sending vendor-specific information between a RADIUS server and a network access device (for exampl e, th e Switch). A company can create V endor Specific Attributes (VSAs) to expand the functionality of a RADIUS server . Th ...

  • ZyXEL Communications MES3500-24F - page 210

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 210 The following table describes the VS As supported on the Switch. Note that these attributes only work when you enable authorization (see Section 25.2.3 on page 207 ). 25.2.5 T unnel Protocol Attribute Y ou can configure tunnel protocol attributes on th e RADIUS serv er (refer to y our RADIUS serv er ...

  • ZyXEL Communications MES3500-24F - page 211

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 21 1 Refer to RFC 2865 for more information about RADIUS attributes used for authentication. Refer to RFC 2866 and RFC 2869 for RADIUS attributes used for accounting. This section lists the attributes used by authenti cation and accounting functions on the Sw itch. In cases where the attribute has a spe ...

  • ZyXEL Communications MES3500-24F - page 212

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 212 25.3.2.1 Attributes Used fo r Accounting System Event s NAS-IP- Address NAS-Identifier Acct-S tatus- T ype Acct-S ession-ID - The format of Acct- Session-Id is date+time+8-di git sequenti al number , for example, 200704191721030000 0001. (date: 2007/04/19, time: 17:2 1:03, serial number: 00000001) A ...

  • ZyXEL Communications MES3500-24F - page 213

    Chapter 25 AAA MES3500-24/24F U ser’s Guide 213 25.3.2.3 Attributes Used for A ccounting IEEE 802.1x Event s The attributes are listed in the following table al ong with the time of the session they are sent: T able 74 RADIUS Attributes - Exec Events via Console ATTRIBUT E START INTERIM-UP DATE STOP User-Name   NAS-IP- Address   ...

  • ZyXEL Communications MES3500-24F - page 214

    MES3500-24/24F U ser’s Guide 214 C HAPTER 26 IP Source Guard Use IP source guard to filter unauthoriz ed DHCP and ARP packets in y our network. 26.1 IP Source Guard Overview IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and ARP packets in y our network. A binding contains these key attributes: •M A ...

  • ZyXEL Communications MES3500-24F - page 215

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 215 T rusted ports are connec ted to DHCP servers or other switches. The Switch discards DHCP packets from trusted ports only if the r ate at which DHCP packets arrive is too high. The S witch learns dynamic bindings from trusted ports. Note: The Swit ch will drop all DHCP requests if you en ...

  • ZyXEL Communications MES3500-24F - page 216

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 216 26.1.1.3 DHCP Rela y Option 82 Information The Switch can add information to DHCP requests th at it does not discard. This provides the DHCP server more information about the source of the requests. The Sw itch can add the following information: • Slot ID (1 byte), port ID (1 byte), an ...

  • ZyXEL Communications MES3500-24F - page 217

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 217 • It pretends to be computer A and responds to computer B . • It pretends to be computer B and sends a message to computer A . As a result, all the communication between computer A and com puter B passes through computer X . Computer X can read and alter the information passed betwee ...

  • ZyXEL Communications MES3500-24F - page 218

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 218 26.2 IP Source Guard Us e t h is sc re e n t o l o ok at t he cu rr e nt bi n di ng s f o r D H CP sn oo p in g a n d A RP in s pe ct io n . B i nd in g s a re used by DHCP snooping and ARP inspection to distinguish between authorized and unauthoriz ed packets in the network. Th e Switch ...

  • ZyXEL Communications MES3500-24F - page 219

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 219 ID as an existing static binding, the new static binding replaces the original one. T o open this screen, click Advanced Application > IP Source Guard > Static Bindi ng . Figure 1 13 IP Source Guard Static Binding The following table describes the labels in this screen. T able 76 I ...

  • ZyXEL Communications MES3500-24F - page 220

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 220 26.4 DHCP Snooping Use this screen to look at various statistics abou t the DHCP snooping database. T o open this screen, click Advanced Application > IP So urce Guard > DHCP Snooping . Figure 1 14 DH CP Snooping The following table describes the labels in this screen. T able 77 DH ...

  • ZyXEL Communications MES3500-24F - page 221

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 221 Write delay timer This field disp lays how long (in sec o nds) the Switch tries t o complete a specifi c update in the DHCP snooping da tabase before it gives up. Abort timer This field displays how long (in se conds) the Switch waits to upda te the DHCP snooping database after the curre ...

  • ZyXEL Communications MES3500-24F - page 222

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 222 26.5 DHCP Snooping Configure Use this screen to enable DHCP snooping on the Sw itch (not on specific VLAN), specify the V LAN where the defau lt DH CP server is loca ted , and configure the DHCP snooping database. The DHCP snooping database stores the current bindings on a secure, extern ...

  • ZyXEL Communications MES3500-24F - page 223

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 223 still av ailable after a restart. T o open this screen, click Advanced Application > IP Source Guard > DHCP Snooping > Configure . Figure 1 15 DH CP Snooping Conf igure The following table describes the labels in this screen. T able 78 DHCP Snooping Configure LABEL DESCRIPTION A ...

  • ZyXEL Communications MES3500-24F - page 224

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 224 26.5.1 DHCP Snooping Port Configure Use this screen to specify whether ports are tr usted or untrusted ports for DHCP snooping. Note: The Swit ch will drop all DHCP requests if you enable DHCP snooping and there are no trusted ports. Y ou can also specify the maximum number for DHCP pack ...

  • ZyXEL Communications MES3500-24F - page 225

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 225 The following table describes the labels in this screen. 26.5.2 DHCP Snooping VLAN Configure Use this screen to enable DHCP snooping on each VLAN and to specify whether or not the Sw itch adds DHCP relay agent option 82 information ( Chapter 36 on page 276 ) to DHCP requests that the Sw ...

  • ZyXEL Communications MES3500-24F - page 226

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 226 26.6 ARP Inspection S t atus Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unautho rized ARP packet. Wh en the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filt er to block tra ...

  • ZyXEL Communications MES3500-24F - page 227

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 227 26.6.1 ARP Inspection VLAN S t atus Use this screen to look at various statistics about ARP packets in each VLAN. T o open this screen, click Advanced Applicati on > IP Source Gu ard > ARP In s p ect ion > VLAN Status . Figure 1 19 ARP Inspection VLA N Status The following table ...

  • ZyXEL Communications MES3500-24F - page 228

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 228 26.6.2 ARP Inspection Log St atus Use this screen to look at log messages that were gener ated by ARP packets and that ha ve not been sent to the syslog server yet. T o open this screen, click Advanced Application > IP Source Guard > ARP Inspection > Log Status . Figure 120 ARP ...

  • ZyXEL Communications MES3500-24F - page 229

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 229 26.7 ARP Inspection Configure Use this screen to enable ARP inspection on the Sw itch. Y ou can also configure the length of time the Switch stores records of discarded ARP pack ets and global settings for the ARP inspection log. T o open this screen, click Advanced Application > IP S ...

  • ZyXEL Communications MES3500-24F - page 230

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 230 The following table describes the labels in this screen. 26.7.1 ARP Inspection Port Configure Use this screen to specify whether ports are trusted or untrusted ports for ARP inspection. Y ou can also specify the maximum rate at which the Switch receives ARP packets on each untrusted port ...

  • ZyXEL Communications MES3500-24F - page 231

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 231 open this screen, click Advanced Application > IP Sour ce Guard > ARP Inspection > Configure > Port . Figure 122 ARP Inspection Port Con figure The following table describes the labels in this screen. T able 85 ARP Inspection Port Configure LABEL DESCRIPTION Port This fiel d ...

  • ZyXEL Communications MES3500-24F - page 232

    Chapter 26 IP Source Guard MES3500-24/24F U ser’s Guide 232 26.7.2 ARP Inspection VLAN Configure Use this screen to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from each VLAN. T o open this screen, click Advanced Application > IP Source G uard > ARP Inspection > Confi ...

  • ZyXEL Communications MES3500-24F - page 233

    MES3500-24/24F U ser’s Guide 233 C HAPTER 27 Loop Guard This chapter shows you how to configure the Switch to guard against loops on th e edge of your network. 27.1 Loop Guard Overview Loop guard allows you to configure the Switch to shut down a port if it detects that packets sent out on that port loop back to the Switch. While y ou can use Span ...

  • ZyXEL Communications MES3500-24F - page 234

    Chapter 27 Loop Guard MES3500-24/24F U ser’s Guide 234 The following figure shows port N on switch A connected to switch B . Switch B is in loop state. When broadcast or multicast packets leave port N and reach switch B , they are sent back to port N on A as they are rebroadcast from B . Figure 125 Switch in Loop State The loop guard feature chec ...

  • ZyXEL Communications MES3500-24F - page 235

    Chapter 27 Loop Guard MES3500-24/24F U ser’s Guide 235 Note: After resolving the loop problem on yo ur network y ou can re-activ ate the disabled port via the web configur ator (see S ection 8.7 on page 95 ) or via commands (see the Ethernet Switch CLI R eference Guide). 27.2 Loop Guard Setup Click Advanced Application > Loop Guard in the navi ...

  • ZyXEL Communications MES3500-24F - page 236

    Chapter 27 Loop Guard MES3500-24/24F U ser’s Guide 236 Apply Click Apply to sa ve your ch anges to the S witch’ s run-time memory . The Sw itch loses the se changes if it is turned off or loses power , so use th e Save link on the top navigation panel to save your changes to the non-v olatile memor y when you ar e done configur ing. Cancel Clic ...

  • ZyXEL Communications MES3500-24F - page 237

    MES3500-24/24F U ser’s Guide 237 C HAPTER 28 VLAN Mapping This chapter shows you how to configure VLAN mapping on the S witch. 28.1 VLAN Mapping Overview With VLAN mapping enabled, the Switch can map the VLAN ID and priority level of packets received from a private network to those used in the service provider’s network. The Switch checks incom ...

  • ZyXEL Communications MES3500-24F - page 238

    Chapter 28 VLAN Mapping MES3500-24/24F U ser’s Guide 238 28.2 Enabling VLAN Mapping Click Advanced Application and then VLAN Mapping in the na vigation panel to display the screen as shown. Figure 130 VLAN Mapping The following table describes the labels in this screen. T able 88 VLAN Mapping LABEL DESCRIPTI ON Active Select this opt ion to enabl ...

  • ZyXEL Communications MES3500-24F - page 239

    Chapter 28 VLAN Mapping MES3500-24/24F U ser’s Guide 239 28.3 Configuring VLAN Mapping Click the VLAN Mapping Configure link in the VLAN Mapping screen to displa y the screen as shown. Use this screen to enable and edit the VLAN mapping rule(s). Figure 131 VLAN Mapping Configuration The following table describes the labels in this screen. T able ...

  • ZyXEL Communications MES3500-24F - page 240

    Chapter 28 VLAN Mapping MES3500-24/24F U ser’s Guide 240 ...

  • ZyXEL Communications MES3500-24F - page 241

    MES3500-24/24F U ser’s Guide 241 C HAPTER 29 Layer 2 Protocol Tunneling This chapter shows you how to configure la yer-2 protocol tunneling on the Switch. 29.1 Layer 2 Protocol T unneling Overview Layer-2 pr otocol tunneling (L2PT) is used on the se rvice prov ider's edge devices. L2PT allows edge switches ( 1 and 2 in the following figure) ...

  • ZyXEL Communications MES3500-24F - page 242

    Chapter 29 Layer 2 Protocol Tunnel ing MES3500-24/24F U ser’s Guide 242 T o emulate a point-to-point topology between two custome r switches at different sites, such as A and B , you can enable protocol tunneling on edge switches 1 and 2 for P AgP (Port Aggregation Protocol), LACP or UDLD (UniDirectional Link Detection). Figure 133 L2PT Network E ...

  • ZyXEL Communications MES3500-24F - page 243

    Chapter 29 Layer 2 Protocol Tunneling MES3500-24/24F U ser’s Guide 243 29.2 Configuring Layer 2 Prot ocol T unneling Click Advanced Application > Layer 2 Protocol Tunneling in the navigation panel to display the screen as shown. Figure 134 Advanced Application > Layer 2 Protocol T unneling The following table describes the labels in this sc ...

  • ZyXEL Communications MES3500-24F - page 244

    Chapter 29 Layer 2 Protocol Tunnel ing MES3500-24/24F U ser’s Guide 244 STP Select this o ption to have the Swit ch tunnel STP (Spann ing T ree Protocol ) packets so that STP can run properly across the service provider ’s network and spanning trees can be set up based on bridge information from all (local and remote) networks. VTP Select this ...

  • ZyXEL Communications MES3500-24F - page 245

    MES3500-24/24F U ser’s Guide 245 C HAPTER 30 sFlow This chapter shows you how to configure sFlow to ha ve the Switch monitor tr affic in a network and send information to an sFlow collector for analysis. 30.1 sFlow Overview sFlow (RFC 3176) is a standard technology for monitoring switched n etworks. An sFlow agent embedded on a switch or router g ...

  • ZyXEL Communications MES3500-24F - page 246

    Chapter 30 sFlow MES3500-24/24F U ser’s Guide 246 30.2 sFlow Port Configuration Click Advanced Application > sFlow in the navigation panel to display the screen as shown. Figure 136 Advanced Application > sFlow The following table describes the labels in this screen. T able 91 Advanced Application > sFlow LABEL DESCRIPTION Active Selec t ...

  • ZyXEL Communications MES3500-24F - page 247

    Chapter 30 sFlow MES3500-24/24F U ser’s Guide 247 30.2.1 sFlow Collector Configuration Click the Collector link in the sFlow screen to display the screen as shown. Y ou can configure up to four sFlow collectors in this screen. Y ou may want to configure more than one collector if th e traffic load to be monitored is more than one collector can ma ...

  • ZyXEL Communications MES3500-24F - page 248

    Chapter 30 sFlow MES3500-24/24F U ser’s Guide 248 Clear Clic k Clear to clear the fields to the factory defaults. Index This field displays the index number of this entry . Collecto r Address This field displa ys IP address of the s Flow collector . UDP Port This field displays port number the Switch u ses to send sFlow datagr am to the col lecto ...

  • ZyXEL Communications MES3500-24F - page 249

    MES3500-24/24F U ser’s Guide 249 C HAPTER 31 PPPoE This chapter describes how the Switch give s a PPP oE termination server additional information that the server can use to identify and authenticate a PPP oE client. 31.1 PPPoE Intermediate Agent Overview A PPP oE Intermediate Agent (P PPoE IA) is d eployed betw een a PPP oE server and PPPoE clie ...

  • ZyXEL Communications MES3500-24F - page 250

    Chapter 31 PPPoE MES3500-24/24F U ser’s Guide 250 The 1 in the first field identifies this as an Agent Circu it ID sub-option and 2 identifies this as an Agent Remote ID sub-option. The next field specifie s the length of the field. The Switch takes the Circuit ID string you manu ally configure for a VLAN on a port as the highest priority and the ...

  • ZyXEL Communications MES3500-24F - page 251

    Chapter 31 PPPoE MES3500-24/24F U ser’s Guide 251 T rusted ports are connec ted to PPPoE serv ers. • If a P ADO (PPP oE Active Discov ery Offer), P ADS (PPPoE Active Disco very Session-confirmation), or P ADT (PPP oE Active Discovery T erminate) packet is sent from a PPP oE server and received on a trusted port, the Switch forw ards it to all o ...

  • ZyXEL Communications MES3500-24F - page 252

    Chapter 31 PPPoE MES3500-24/24F U ser’s Guide 252 Click Advanced Application > PPPoE > Intermediate Ag ent in the navigation panel to displa y the screen as shown. Figure 139 Advanced Application > PPP oE > Intermediate Agent The following table describes the labels in this screen. T able 98 Advanced Application > PPP oE > Inter ...

  • ZyXEL Communications MES3500-24F - page 253

    Chapter 31 PPPoE MES3500-24/24F U ser’s Guide 253 31.3.1 PPPoE IA Per-Port Use this screen to specify whether individual ports are trusted or untrusted ports and have the Switch add extr a information to PPP oE discovery pack ets from PPPoE clients on a per-port basis. Note: The Switch will drop all PPP oE packets if you enable the PPP oE Interme ...

  • ZyXEL Communications MES3500-24F - page 254

    Chapter 31 PPPoE MES3500-24/24F U ser’s Guide 254 31.3.2 PPPoE IA Per-Port Per-VLAN Use this screen to configure PPP oE IA settings that apply to a specific VLAN on a port. Server T rusted State Select whether this port is a trusted port ( Trusted ) or an untrusted port ( Untrusted ). T rusted ports are uplink ports connected to PPPoE servers. ? ...

  • ZyXEL Communications MES3500-24F - page 255

    Chapter 31 PPPoE MES3500-24/24F U ser’s Guide 255 Click the VLAN link in the Intermediate Agent > Port screen to display the screen as shown. Figure 141 Advanced Application > PPPoE > Intermediate Agent > P ort > VLAN The following table describes the labels in this screen. T able 100 Advanced Application > PPP oE > Intermedi ...

  • ZyXEL Communications MES3500-24F - page 256

    Chapter 31 PPPoE MES3500-24/24F U ser’s Guide 256 31.3.3 PPPoE IA for VLAN Use this screen to set whether the PPPoE Intermedia te Agent is enabled on a VLAN and whether the Switch appends the Circuit ID and/or R emote ID to PPP oE discovery packets from a specific VLAN. Click the VLAN link in the Intermediate Agent screen to display the screen as ...

  • ZyXEL Communications MES3500-24F - page 257

    MES3500-24/24F U ser’s Guide 257 C HAPTER 32 Error Disable This chapter shows you how to configure the r ate limit for control packets on a port, and set the Switch to take an action (such as to shut down a port or stop sending packets) on a port when the Switch detects a pre-configured error . It also shows you how to configure the Switch to aut ...

  • ZyXEL Communications MES3500-24F - page 258

    Chapter 32 Error Disable MES3500-24/24F U ser’s Guide 258 32.3 The Error Disable Screen Use this screen to configure error disable related settings. Click Advanced Application > Errdisable in the navigation panel to open the following screen. Figure 143 Advanced Application > Errdisable 32.4 CPU Protection Configuration Use this screen to l ...

  • ZyXEL Communications MES3500-24F - page 259

    Chapter 32 Error Disable MES3500-24/24F U ser’s Guide 259 The following table describes the labels in this screen. 32.5 Error-Disable Detect Configuration Use screen to have the Switch detect whether the control packets exceed the rate limit configured for a port and configure the action to ta ke once the limit is exceeded. Click the Click Here l ...

  • ZyXEL Communications MES3500-24F - page 260

    Chapter 32 Error Disable MES3500-24/24F U ser’s Guide 260 32.6 Error-Disable R ecovery Configuration Use this screen to to configure the S witch to automatically undo an action after the error is gone. Click the Click Here link next to Errdisable Recovery in the Advanced Application > Errdisable screen to display the screen as shown. Figure 14 ...

  • ZyXEL Communications MES3500-24F - page 261

    Chapter 32 Error Disable MES3500-24/24F U ser’s Guide 261 Timer Status Select thi s option to allow t he Switch to wait for th e specified ti me interv al to act ivate a port or allow specific packets on a port , after the error was gone. Deselect this option to turn off this rule. Interval Enter the number of seconds (fro m 30 to 259200 0) for t ...

  • ZyXEL Communications MES3500-24F - page 262

    MES3500-24/24F U ser’s Guide 262 C HAPTER 33 Private VLAN This chapter shows you how to configure the Swit ch to prevent communications between ports in a VLAN. 33.1 Private VLAN Overview Private VLAN allows you to do port isolation within a VLAN in a simple wa y . If you enable a priv ate VLAN rule for a VLAN on the Switch, the Switch automatica ...

  • ZyXEL Communications MES3500-24F - page 263

    Chapter 33 Private VLAN MES3500-24/24F U ser’s Guide 263 33.2 Configuring Private VLAN Click Advanced Application > Private VLAN in the navigation panel to display the screen as shown. Figure 148 Advanced Application > Private VLAN The following table describes the labels in this screen. T able 105 Advance d Application > Priv ate VLAN L ...

  • ZyXEL Communications MES3500-24F - page 264

    Chapter 33 Private VLAN MES3500-24/24F U ser’s Guide 264 ...

  • ZyXEL Communications MES3500-24F - page 265

    MES3500-24/24F U ser’s Guide 265 C HAPTER 34 Static Route This chapter shows you how to configure static routes. 34.1 S t atic Routing Overview The Switch uses IP for communication with management computers, for example using HT TP , T elnet, SSH, or SNMP . Use IP static routes to have the S witch respond to remote management stations that are no ...

  • ZyXEL Communications MES3500-24F - page 266

    Chapter 34 Static Route MES3500-24/24F U ser’s Guide 266 34.2 Configuring S t atic Routing Click IP Applicati on > Static Routing in the navigation panel to display the screen as shown. Figure 150 IP Application > Static Routing The following table describes the related labels you use to create a static route. T able 106 IP Application > ...

  • ZyXEL Communications MES3500-24F - page 267

    Chapter 34 Static Route MES3500-24/24F U ser’s Guide 267 Name This field displays the de scriptive name for this route. This is for i dentification purposes only . Destinat ion Address This field displays the IP network address of the final destination. Subnet Mask Th is field displays the subnet mask for this destinat ion. Gatew ay Address This ...

  • ZyXEL Communications MES3500-24F - page 268

    MES3500-24/24F U ser’s Guide 268 C HAPTER 35 Differentiated Services This chapter shows you how to configure Differ entiated Services (DiffS erv) on the Switch. 35.1 DiffServ Overview Quality of Service (QoS) is used to prioritize sour ce-to-destination traffic flows. All pack ets in the flow are given the same priority . Y ou can use CoS (class ...

  • ZyXEL Communications MES3500-24F - page 269

    Chapter 35 Differenti ated Services MES3500-24/24F U ser’s Guide 269 various tr affic policies to the tr affic flows. An example tr affic policy , is to give higher drop precedence to one traffic flow over others. In our example, packets in the Bronze tr affic flow are more likely to be dropped when conges tion occurs than the packets in the Plat ...

  • ZyXEL Communications MES3500-24F - page 270

    Chapter 35 Differentiated Services MES3500-24/24F U ser’s Guide 270 35.2.1 TRTCM-Color-blind Mode All packets are evaluated against the PIR. If a packet ex ceeds the PIR it is marked red. Otherwise it is evaluated against the CIR. If it exceeds the CIR then it is marked yellow . Finally , if it is below the CIR then it is marked green. Figure 153 ...

  • ZyXEL Communications MES3500-24F - page 271

    Chapter 35 Differenti ated Services MES3500-24/24F U ser’s Guide 271 Click IP Applicati on > DiffServ in the navigation panel to display the screen as shown. Figure 155 IP Application > DiffServ The following table describes the labels in this screen. 35.3.1 Configuring 2-Rate 3 Color Marker Settings Use this screen to configure TRT CM sett ...

  • ZyXEL Communications MES3500-24F - page 272

    Chapter 35 Differentiated Services MES3500-24/24F U ser’s Guide 272 Note: Y ou cannot en able both TR TCM and Bandwidth Control at the same time. Figure 156 IP Application > DiffServ > 2-rate 3 Color Marker The following table describes the labels in this screen. T able 108 IP Application > DiffServ > 2-rate 3 Color Marker LABEL DESCR ...

  • ZyXEL Communications MES3500-24F - page 273

    Chapter 35 Differenti ated Services MES3500-24/24F U ser’s Guide 273 35.3.2 Configuring DSCP Profiles Use this screen to configur e DSCP profiles. Click the DS CP Profile link in the 2-Rate 3 Color Marker screen to display the screen as shown next. Figure 157 IP Application > DiffServ > 2-rate 3 Color Marker > DSCP Profile The following ...

  • ZyXEL Communications MES3500-24F - page 274

    Chapter 35 Differentiated Services MES3500-24/24F U ser’s Guide 274 35.4 DSCP-to-IEEE 802.1p Priority Settings Y ou can configure the DSCP to IEEE 802.1p mapping to allow the Switch to prioritize all traffic based on the incoming DSCP value according to the DiffServ to IEEE 802.1p mapping table. The following table shows the defa ult DSCP-to-IEEE ...

  • ZyXEL Communications MES3500-24F - page 275

    Chapter 35 Differenti ated Services MES3500-24/24F U ser’s Guide 275 The following table describes the labels in this screen. Ta b l e 111 IP Application > DiffServ > DSCP Setting LABEL DESCRIPTION 0 … 63 This is the DSCP clas sification identif ication number . T o set the IEEE 802.1p priority ma pping, select th e priority level from th ...

  • ZyXEL Communications MES3500-24F - page 276

    MES3500-24/24F U ser’s Guide 276 C HAPTER 36 DHCP This chapter shows you how to configure the DHCP feature. 36.1 DHCP Overview DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to obtain T CP/IP configuration at start -up from a server . Y ou can configure the Switch as a DHCP server or a DHCP relay agen ...

  • ZyXEL Communications MES3500-24F - page 277

    Chapter 36 DHCP MES3500-24/24F U ser’s Guide 277 The following table describes the labels in this screen. 36.3 DHCP Relay Configure DHCP relay on th e Switch if the DHCP clients and the DHCP server are not in the same broadcast domain. During the initial IP addre ss leasing, the Switch helps to relay network information (such as the IP address an ...

  • ZyXEL Communications MES3500-24F - page 278

    Chapter 36 DHCP MES3500-24/24F U ser’s Guide 278 36.3.2 Configuring DHCP Global Relay Configure global DHCP relay in the DHCP Relay screen. Click IP Application > DHCP in the navigation panel and click the Global link to displa y the screen as shown. Figure 160 IP Application > DHCP > Global The following table describes the labels in th ...

  • ZyXEL Communications MES3500-24F - page 279

    Chapter 36 DHCP MES3500-24/24F U ser’s Guide 279 36.3.3 Global DHCP Re lay Configuration Example The follow figure shows a network example where the Switch is used to relay DHCP requests for the VLAN1 and VLAN2 domains. There is only one DHCP server that service s the DHCP clients in both domains. Figure 161 Global DHCP R elay Network Example Con ...

  • ZyXEL Communications MES3500-24F - page 280

    Chapter 36 DHCP MES3500-24/24F U ser’s Guide 280 36.4 Configuring DH CP VLAN Settings Use this screen to configure your DHCP settings ba sed on the VLAN domain of the DHCP clients. Click IP Application > DHCP in the navigation panel, then click the VLAN link In the DHCP Status screen that displays. Note: Y ou must set up a manageme nt IP addre ...

  • ZyXEL Communications MES3500-24F - page 281

    Chapter 36 DHCP MES3500-24/24F U ser’s Guide 281 36.4.1 Example: DHCP Relay for T wo VLANs The following example displays two VLANs (VIDs 1 and 2) for a campus network. T wo DHCP servers are installed to serve each VLAN. The system is set up to forw ard DHCP requests from the dormitory rooms (VLAN 1) to the DHCP server with an IP address of 192.1 ...

  • ZyXEL Communications MES3500-24F - page 282

    Chapter 36 DHCP MES3500-24/24F U ser’s Guide 282 ...

  • ZyXEL Communications MES3500-24F - page 283

    MES3500-24/24F U ser’s Guide 283 C HAPTER 37 Maintenance This chapter explains how to configure the screens that let y ou maintain the firmware and configuration files. 37.1 The Maintenance Screen Use this screen to manage firmw are and your configur ation files. Click Management > Maintenance in the navigation panel to open the following scre ...

  • ZyXEL Communications MES3500-24F - page 284

    Chapter 37 Maintenance MES3500-24/24F U ser’s Guide 284 37.2 Load Factory Default Follow th e steps below to reset the Switch back to the factory defaults. 1 In the Maintenance screen, click the Click Here button next to Load Factory Default to clear all Switch configur ation information you configured and return to the factory defaults. 2 Click ...

  • ZyXEL Communications MES3500-24F - page 285

    Chapter 37 Maintenance MES3500-24/24F U ser’s Guide 285 1 In the Maintenance screen, click the Config 1 button next to Reboot System to reboot and load configuration one. The following screen displa ys. Figure 168 Reboot S ystem: Confirmation 2 Click OK again and then wait for the Switch to restart. This takes up to two minutes. This does not aff ...

  • ZyXEL Communications MES3500-24F - page 286

    Chapter 37 Maintenance MES3500-24/24F U ser’s Guide 286 37.6 Restore a Configuration File R estore a previously saved configur ation from your computer to the Switch using the Restore Configuration screen. Figure 170 Management > Maintenance > R estore Configuration T ype the path and file name of the configuration file you wish to restore ...

  • ZyXEL Communications MES3500-24F - page 287

    Chapter 37 Maintenance MES3500-24/24F U ser’s Guide 287 37.8 FTP Command Line This section shows some examples of uploading to or downloading files from the Switch using FTP commands. First, understand the filename conventions. 37.8.1 Filename Conventions The configuration file (also known as the romf i le or ROM) contains the factory default set ...

  • ZyXEL Communications MES3500-24F - page 288

    Chapter 37 Maintenance MES3500-24/24F U ser’s Guide 288 Be sure to upload the correct mode l firmware as uploading the wrong model firmware may damage your device. 37.8.2 FTP Command Line Procedure 1 Launch the FTP client on your computer . 2 Enter open , followed by a space and the IP address of your Switch. 3 Press [ENTER] when prompted for a u ...

  • ZyXEL Communications MES3500-24F - page 289

    Chapter 37 Maintenance MES3500-24/24F U ser’s Guide 289 • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the Switch will disconnect the FTP session immediately . ...

  • ZyXEL Communications MES3500-24F - page 290

    MES3500-24/24F U ser’s Guide 290 C HAPTER 38 Access Control This chapter describes how to control access to the Switch. 38.1 Access Control Overview A console port and FTP are allowed one session each, T elnet and SSH share nine sessions, up to five W eb sessions (five different user names and passwords) and/or limitless SNMP access control sessi ...

  • ZyXEL Communications MES3500-24F - page 291

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 291 SNMP version 3. The next figure illustr ates an SNMP management operation. SNMP is only available if TCP/IP is configured. Figure 173 SNMP Management Model An SNMP managed network consists of two main components: agents an d a manager . An agent is a management software module that reside ...

  • ZyXEL Communications MES3500-24F - page 292

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 292 38.3.2 Supported MIBs MIBs let administrators collect statistics and monitor status and performance. The Switch supports the following MIBs: • SNMP MIB II (RFC 1213) • RFC 1157 SNMP v1 • RFC 1493 Bridge MIBs • RFC 1643 Ethernet MIBs • RFC 1155 SMI • RFC 2674 SNMPv2, S NMPv2c ? ...

  • ZyXEL Communications MES3500-24F - page 293

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 293 reset Uncon trolledResetEventO n 1.3.6.1.4.1. 890.1.5.8.68.27.2. 1 1.3.6.1.4.1. 890.1.5.8.57.27.2. 1 This trap is sent when the S witch automatica lly resets. ControlledR esetEventOn 1.3.6. 1.4.1.890.1.5.8.6 8.27.2.1 1.3.6.1.4.1. 890.1.5.8.57.27.2. 1 This trap is sent when the Switch rese ...

  • ZyXEL Communications MES3500-24F - page 294

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 294 lldp LLDPRemote T opologyChange 1.0.88 02.1.1.2.0.0.1 T his tr ap is sent when the LLDP (Link La yer Discovery Prot ocol) remote topology changes. tran sceiv er -ddmi transce iverddmiEventOn 1.3 .6.1.4.1.890.1.5. 8.68.27.2.1 1.3.6.1.4.1.890 .1.5.8.57.27.2.1 This trap is sent when one of t ...

  • ZyXEL Communications MES3500-24F - page 295

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 295 T able 124 SNMP Switch Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION stp STPN ewRoot 1.3.6.1.2.1 .1 7.0.1 This trap is sent when the STP root s witch changes. MRSTPNewR oot 1.3.6.1.4.1. 890.1.5.8.68.36.2.1 1.3.6.1.4.1. 890.1.5.8.57.36.2.1 This trap is sent when the MRSTP root switch cha ...

  • ZyXEL Communications MES3500-24F - page 296

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 296 38.3.4 Configuring SNMP Click Management > Access Control > SNMP to view the screen as shown. Use this screen to configure your SNMP settings. Figure 174 Management > Access Control > SNMP The following table describes the labels in this screen. T able 125 Management > Acce ...

  • ZyXEL Communications MES3500-24F - page 297

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 297 38.3.5 Configuring SNMP T rap Group Click Management > Access Control > SNMP > Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP trap s that should be sent to each SNMP manager . Figure 175 Management > Access Control > SNMP > ...

  • ZyXEL Communications MES3500-24F - page 298

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 298 38.3.6 Configuring SNMP User From the SNMP screen, click User to view the screen as shown. Use the User screen to create SNMP users for authentication with managers using SNMP v3 and associate them to SNMP groups. An SNMP user is an SNMP manager . Figure 176 Management > Access Control ...

  • ZyXEL Communications MES3500-24F - page 299

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 299 38.4 Setting Up Login Account s Up to five people (one administr ator and four non-administr ators) may access the Switch via web configurator at any one time. • An administrator is someone who can both view and configure Switch changes. The username for the Administrator is alw ays adm ...

  • ZyXEL Communications MES3500-24F - page 300

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 300 Note: It is hi ghly recommended that y ou change the defaul t admini strator password ( 1234 ). • A non-administr ator (username is something other than admin ) is someone who can view but not configure Switch settings. Click Management > Access Control > Logins to view the screen ...

  • ZyXEL Communications MES3500-24F - page 301

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 301 38.5 SSH Overview Unlike T elnet or FTP , which transmit data in clear text, SSH (Secure Shell) is a secure communication protocol that combines authentication and data encryption to provide secure encrypted communication between two hosts ov er an unsecured network. Figure 178 SSH Commun ...

  • ZyXEL Communications MES3500-24F - page 302

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 302 38.6 How SSH works The following table summarizes how a secure connection is established betwe en two remote hosts. Figure 179 How SSH W orks 1 Host Identification The SSH client sends a connection request to the SSH server . The server identifies itself with a host key . The client encry ...

  • ZyXEL Communications MES3500-24F - page 303

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 303 38.7 SSH Implement ation on the Switch Y our Switch supports SSH version 2 using RS A au thentication and three encryption methods (DES, 3DES and Blowfish). The SSH server is implemente d on the Switch for remote management and file transfer on port 22. Only one S SH connection is allowed ...

  • ZyXEL Communications MES3500-24F - page 304

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 304 Note: If you disable HTTP in the Service Access Control screen, then the Switch blocks all HT TP connection attempts. 38.9 HTTPS Example If you haven’t changed the default HT TPS port on the Switch, then in your browser enter “https:// Switch IP Address/” as the web site address whe ...

  • ZyXEL Communications MES3500-24F - page 305

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 305 38.9.1.2 Internet Explorer 7 or 8 When you attempt to access the Switch HT TPS server , a screen with the me ssage "There is a problem with this websi te's security certificate." may display . If that is the case, click Continue to this website (not recommended) to proceed ...

  • ZyXEL Communications MES3500-24F - page 306

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 306 Click Install Certificate... and follow the on-screen instructions to install the certificate in your browser . Figure 184 Certificate (Internet Explorer 7 or 8) ...

  • ZyXEL Communications MES3500-24F - page 307

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 307 38.9.2 Mozilla Firefox W arning Messages When you attempt to access the Switch HTTPS server , a This Connect ion is Unstr ucted screen may display . If that is the case, click I Understand the Risks and then the Add Exception ... button. Figure 185 Security Alert (Mozilla Firefox) ...

  • ZyXEL Communications MES3500-24F - page 308

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 308 Confirm the HT TPS serv er URL matches. Click Confirm Security Exception to proceed to the web configurator login screen. Figure 186 Security Alert (Mozilla Firefox) 38.9.3 The Main Screen After you accept the certificate and enter the logi n username and password, the S witch main screen ...

  • ZyXEL Communications MES3500-24F - page 309

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 309 Mozilla Firefox) or next to the address bar (in Internet Explorer 7 or 8) denotes a secure connection. Figure 187 Example: Lock Denoting a Secure Connection 38.10 Service Port Access Control Service Access Control allows you to decide what services you ma y use to access the Switch. Y ou ...

  • ZyXEL Communications MES3500-24F - page 310

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 310 the Remote Management screen (discussed later). Click Management > Access Control > Service Access Co ntrol to view the screen as shown. Figure 188 Management > Access Control > Service Access Control The following table describes the fields in this screen. 38.1 1 Remote Manag ...

  • ZyXEL Communications MES3500-24F - page 311

    Chapter 38 Access Control MES3500-24/24F U ser’s Guide 31 1 Y o u can specify a group of one or m ore “trusted computers” from which an administrator ma y use a service to manage the Switch. Click Access Control to return to the Access Control screen. Figure 189 Management > Access Control > Remote Management The following table describ ...

  • ZyXEL Communications MES3500-24F - page 312

    MES3500-24/24F U ser’s Guide 312 C HAPTER 39 Diagnostic This chapter explains the Diagnostic screen. 39.1 Diagnostic Click Management > Diagnostic in the navigation panel to open this screen. Use this screen to check system logs, ping IP addresses or perform port tests. Figure 190 Management > Diagnostic The following table describes the la ...

  • ZyXEL Communications MES3500-24F - page 313

    MES3500-24/24F U ser’s Guide 313 C HAPTER 40 Syslog This chapter explains the syslog screens. 40.1 Syslog Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages. A syslog-enabled device can generate a syslog message and send it to a syslog server . Sys ...

  • ZyXEL Communications MES3500-24F - page 314

    Chapter 40 Syslog MES3500-24/24F U ser’s Guide 314 40.2 Syslog Setup Click Management > Syslog in the navigation panel to display this screen. The syslog feature sends logs to an external syslog server . Use this screen to configure the device’ s system logging settings. Figure 191 Management > Syslog The following table describes the lab ...

  • ZyXEL Communications MES3500-24F - page 315

    Chapter 40 Syslog MES3500-24/24F U ser’s Guide 315 40.3 Syslog Server Setup Click Management > Syslog > Syslog Server Setup to view the screen as shown next. Use this screen to configure a list of external syslog servers. Figure 192 Management > Syslog > S yslog Server Setup The following table describes the labels in this screen. T a ...

  • ZyXEL Communications MES3500-24F - page 316

    MES3500-24/24F U ser’s Guide 316 C HAPTER 41 Cluster Management This chapter introduces cluster management. 41.1 Cluster Management S t atus Overview Cluster Management allows y ou to manage switches through one S witch, called the cluster manager . The switches must be directly connected an d be in the same VLAN g roup so as to be able to commun ...

  • ZyXEL Communications MES3500-24F - page 317

    Chapter 41 Cluster Management MES3500-24/24F U ser’s Guide 317 41.2 Cluster Management S t atus Click Management > Cluster Management in the navigation panel to display the following screen. Note: A cluster can only have one manager . Figure 194 Management > Cluster Management: Status The following table describes the labels in this screen. ...

  • ZyXEL Communications MES3500-24F - page 318

    Chapter 41 Cluster Ma nagement MES3500-24/24F U ser’s Guide 318 41.2.1 Cluster Member Switch Management Go to the Clustering Management Status screen of the cluster manager switch and then select an Index hyperlink fro m the list of members to go to that cluster member switch's web configurator home page. Th is cluster member web configurato ...

  • ZyXEL Communications MES3500-24F - page 319

    Chapter 41 Cluster Management MES3500-24/24F U ser’s Guide 319 The following table explains so me of the FTP par ameters. T able 137 FTP Upload to Cluster Member Example FTP PARAMETER DESCRIPTION User Enter “admin” . Password The web configur ator password default is 1234. ls Enter this command to list the name of cluster membe r switch’ s ...

  • ZyXEL Communications MES3500-24F - page 320

    Chapter 41 Cluster Ma nagement MES3500-24/24F U ser’s Guide 320 41.3 Clustering Management Configuration Use this screen to configure clustering management. Click Managem ent > Cluster Manage ment > Configuration to display the next screen. Figure 197 Management > Cluster Management > Configur ation The following table describes the l ...

  • ZyXEL Communications MES3500-24F - page 321

    Chapter 41 Cluster Management MES3500-24/24F U ser’s Guide 321 VID Thi s is the VLAN ID an d is only applic able if the Switch is set to 802.1Q VLAN. All switches must be directly connected an d in the same VLAN group to belong to the same cluster . Switches that are not in the same VLAN group are not visible in the Clustering Candidates list. Th ...

  • ZyXEL Communications MES3500-24F - page 322

    MES3500-24/24F U ser’s Guide 322 C HAPTER 42 MAC Table This chapter introduces the MAC Table screen. 42.1 MAC T able Overview The MAC Table screen (a MAC table is also known as a filtering database) shows how frames are forwarded or filtered across the Switch’ s ports. It shows what device MAC address, belonging to what VLAN group (if any) is f ...

  • ZyXEL Communications MES3500-24F - page 323

    Chapter 42 MAC Table MES3500-24/24F U ser’s Guide 323 42.2 V iewing the MAC T able Click Management > MAC Table in the navigation panel to display the following screen. Figure 199 Management > MAC T able The following table describes the labels in this screen. T able 139 Management > MAC Table LABEL DESCRIPTION Condition Se lect one of t ...

  • ZyXEL Communications MES3500-24F - page 324

    Chapter 42 MAC Table MES3500-24/24F U ser’s Guide 324 Tr a n s f e r Ty p e S e l e c t Dynamic to MAC fo rwarding and click t he Transfer button to change all dynamically learned MAC address entries in th e summary table be low i nto static entries. They also displa y in the Static MAC Forwarding screen. Select Dynam ic to M AC filteri ng and cl ...

  • ZyXEL Communications MES3500-24F - page 325

    MES3500-24/24F U ser’s Guide 325 C HAPTER 43 ARP Table This chapter introduces ARP T able. 43.1 ARP T able Overview Address Resolution Protocol (ARP) is a protocol for mapping an Intern et Protocol address (IP address) to a physical machine address, also kn own as a Media Access Control or MAC address, on the local area network. An IP (version 4) ...

  • ZyXEL Communications MES3500-24F - page 326

    Chapter 43 ARP Table MES3500-24/24F U ser’s Guide 326 43.2 The ARP T able Screen Click Management > ARP Table in the navigation panel to open the following screen. Use the ARP table to view IP-to-MAC address mapping(s) and remove specific dynamic ARP entries. Figure 200 Management > ARP T able The following table describes the labels in thi ...

  • ZyXEL Communications MES3500-24F - page 327

    MES3500-24/24F U ser’s Guide 327 C HAPTER 44 Configure Clone This chapter shows you how you can copy the settings of one port onto other ports. 44.1 Configure Clone Cloning allows you to copy the basic and advanced settings from a source port to a destination port or ports. Click Management > Conf igure Clon e to open the following screen. Fig ...

  • ZyXEL Communications MES3500-24F - page 328

    Chapter 44 Configure C lone MES3500-24/24F U ser’s Guide 328 The following table describes the labels in this screen. T able 141 Management > Configure Clone LABEL DESCRIPTION Sourc e/ Destinat ion Port Enter the source port under the Source label . This port’s attributes are copied. Enter the destinat ion po rt or ports under the Destinatio ...

  • ZyXEL Communications MES3500-24F - page 329

    MES3500-24/24F U ser’s Guide 329 C HAPTER 45 Troubleshooting This chapter offers some suggestions to solve problems you might encounter . The potential problems are divided into the following categories. • Po wer , Hardware Connections, and LEDs • Switch Access and Login • Switch Configur ation 45.1 Power , Hardware Connections, and LEDs Th ...

  • ZyXEL Communications MES3500-24F - page 330

    Chapter 45 Troubleshooting MES3500-24/24F U ser’s Guide 330 One of the L EDs does not behave as expected. 1 Make sure you understand the norm al behavior of the LED . See Sec tion 3.2 on pa ge 37 . 2 Check the hardware connections. See Section 3.1 on page 30 . 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 T ...

  • ZyXEL Communications MES3500-24F - page 331

    Chapter 45 Troubleshoo ting MES3500-24/24F U ser’s Guide 331 • If you changed the IP address and hav e forgotten it, see the troubleshooting su ggestions for I forgot the IP address for the Switch. 2 Check the hardware connections, and make sure the LEDs are behaving as expected. See Section 3.2 on page 37 . 3 Make sure y our Internet browser d ...

  • ZyXEL Communications MES3500-24F - page 332

    Chapter 45 Troubleshooting MES3500-24/24F U ser’s Guide 332 I cannot see some of Advanced Application submenus at the bottom of the navigation panel. The recommended screen resolution is 1024 by 768 pixels. Adjust the value in y our computer and then you should see the rest of Advanced Application submenus at the bottom of the navigation panel. T ...

  • ZyXEL Communications MES3500-24F - page 333

    MES3500-24/24F U ser’s Guide 333 A PPENDIX A Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port number s, ICMP t ype/code numbers and services, visit the IANA (I nterne t Assigned Number Authority) web site. • Name : This is a short, descriptive ...

  • ZyXEL Communications MES3500-24F - page 334

    Appendix A Common Services MES3500-24/24F U ser’s Guide 334 HT TP TCP 80 Hyper T ext T ransfer Protocol - a client/serve r protocol for the world wide web. HT TPS TCP 443 HTTPS is a sec ured http session ofte n used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic or routing purposes. ICQ UDP 4000 ...

  • ZyXEL Communications MES3500-24F - page 335

    Appendix A Common Services MES3500-24/24F U ser’s Guide 335 SMTP TCP 25 Simp le M ail T ransfer Proto co l is the mess age- exchange standard fo r the Internet. SMTP enables you to move messages from one e- mail server to another . SNMP TCP/ UD P 161 Simple Network Management Program. SNMP- TRAPS TC P/ UD P 162 T raps for use with the SNMP (RFC:1 ...

  • ZyXEL Communications MES3500-24F - page 336

    Appendix A Common Services MES3500-24/24F U ser’s Guide 336 ...

  • ZyXEL Communications MES3500-24F - page 337

    MES3500-24/24F U ser’s Guide 337 A PPENDIX B Legal Information Copyright Copyright © 2011 by Z yXEL Communications Corporation. The contents of this publication may not be repr oduced in any part or as a whole, tr anscribed, stored in a retrieval system, translated into an y language, or transmitted in any form or by an y means, electronic, mech ...

  • ZyXEL Communications MES3500-24F - page 338

    Appendix B Legal Information MES3500-24/24F U ser’s Guide 338 CE Mark W arning: This is a class A product. In a domestic en vironm ent this product ma y cause radio interference in which case the user may be required to take adequ ate measures. T aiwanese BSMI (Bureau of St andards, Metrology and Inspection) A W arning: Notices Changes or modific ...

  • ZyXEL Communications MES3500-24F - page 339

    Appendix B Legal Informa tion MES3500-24/24F U ser’s Guide 339 Note R epair or replacement, as provided under this wa rr anty , is the exclusive remedy of the purchaser . This warr anty is in lieu of all other warranties, ex press or implied, including any implied w arranty of merchantability or fitness for a particular use or pu rpose. Z yXEL sh ...

  • ZyXEL Communications MES3500-24F - page 340

    Appendix B Legal Information MES3500-24/24F U ser’s Guide 340 ENGLISH DEUTSCH ESP AÑOL Green Product Declaration RoHS Directive 2002/95/EC Green Product Declaration RoHS Directive 2002/95/EC Declaración de Producto Ecológico Directiva RoHS 2002/95/EC WEEE Directive 2002/96/ EC (WEEE: W aste El ectric al and Ele ctronic Equipment) 2008/34/EC WE ...

  • ZyXEL Communications MES3500-24F - page 341

    Index MES3500-24/24F U ser’s Guide 341 Index Numbers 802.1P priority 96 A access control limitations 290 login account 299 remote management 310 service port 30 9 SNMP 290 accounting setup 207 address learning, MAC 105 , 108 Address R esolution Protocol (ARP) 325 , 327 , 328 administrator password 300 age 136 aggregator ID 151 , 153 aging time 92 ...

  • ZyXEL Communications MES3500-24F - page 342

    Index MES3500-24/24F U ser’s Guide 342 cluster member firmware upgr ade 318 network example 316 setup 320 specification 316 status 317 switch models 316 VID 321 web config urator 318 cluster manager 316 cluster member 316 Common and Internal Spanning T ree (CIST) 124 Common and Internal Spanning T ree, See CIST 126 configuration 267 change runnin ...

  • ZyXEL Communications MES3500-24F - page 343

    Index MES3500-24/24F U ser’s Guide 343 filtering 120 rules 120 filtering database, MAC table 322 firmware 87 upgrade 285 , 318 flow control 96 back pressure 96 IEEE802.3x 96 forwarding delay 136 frames tagged 104 untagged 104 front panel 30 FTP 287 file transfer procedure 288 restrictions over W AN 288 G GARP 98 GARP (Generic Attribute R egistrat ...

  • ZyXEL Communications MES3500-24F - page 344

    Index MES3500-24/24F U ser’s Guide 344 L L2PT 241 access port 242 CDP 241 configuration 243 encapsulation 241 LACP 242 MAC address 241 mode 242 overview 241 PAg P 242 point to point 242 STP 241 tunnel port 242 UDLD 242 VTP 241 LACP 148 , 244 system priority 153 timeout 154 Layer 2 protocol tunneling, see L2PT LEDs 37 limit MAC address learning 16 ...

  • ZyXEL Communications MES3500-24F - page 345

    Index MES3500-24/24F U ser’s Guide 345 mounting brackets 28 MST Instance, See MSTI 126 MST region 125 MSTI 126 MST ID 12 6 MSTI (Multiple Spanning T ree Instance) 124 MSTP 122 , 124 bridge ID 139 , 140 configuration 135 , 138 configuration digest 140 forwarding delay 136 Hello Time 139 hello time 136 Max Age 139 max age 136 max hops 136 MST regio ...

  • ZyXEL Communications MES3500-24F - page 346

    Index MES3500-24/24F U ser’s Guide 346 port status 81 port VLAN trunking 99 port-based VLAN 11 0 all connected 11 3 port isolation 11 3 settings wizard 11 3 ports “standby” 148 diagnostics 312 mirroring 146 speed/duplex 96 power connector 34 power module current rating 35 power wire 35 power status 87 power voltage 87 power wires 34 PPPoE IA ...

  • ZyXEL Communications MES3500-24F - page 347

    Index MES3500-24/24F U ser’s Guide 347 sFlow agent 245 sFlow collector 245 Simple Network Management Protocol, see SNMP 290 Small Form-factor Pluggable (SFP) 32 SNMP 290 agent 291 and MIB 291 and security 291 authentication 299 communities 296 management model 291 manager 291 MIB 292 network components 291 object variables 291 protocol operations ...

  • ZyXEL Communications MES3500-24F - page 348

    Index MES3500-24/24F U ser’s Guide 348 tagged VLAN 97 temperature indicator 87 terminal emulation 31 time current 88 time zone 89 Time (RFC-868) 88 time server 88 time service protocol 88 format 88 trademarks 337 transceiver MultiSource Agreement (MSA) 32 transceivers 32 installation 33 remov al 33 traps destination 296 TRT CM and bandwidth contr ...

  • ZyXEL Communications MES3500-24F - page 349

    Index MES3500-24/24F U ser’s Guide 349 priority 181 selective Q-in-Q 184 VLAN T runking Protocol, see VTP VLAN, protocol based, See protocol based VLAN VLAN, subn et base d , See subnet based VL ANs 104 VSA 209 VT100 31 VTP 244 W warranty 338 note 339 web config urator 39 getting help 46 layout 40 login 39 logout 46 navigation panel 41 weight, qu ...

Manufacturer ZyXEL Communications Category Network Router

Documents that we receive from a manufacturer of a ZyXEL Communications MES3500-24F can be divided into several groups. They are, among others:
- ZyXEL Communications technical drawings
- MES3500-24F manuals
- ZyXEL Communications product data sheets
- information booklets
- or energy labels ZyXEL Communications MES3500-24F
All of them are important, but the most important information from the point of view of use of the device are in the user manual ZyXEL Communications MES3500-24F.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals ZyXEL Communications MES3500-24F, service manual, brief instructions and user manuals ZyXEL Communications MES3500-24F. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product ZyXEL Communications MES3500-24F.

Similar manuals

A complete manual for the device ZyXEL Communications MES3500-24F, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use ZyXEL Communications MES3500-24F by users. Manuals are usually written by a technical writer, but in a language understandable to all users of ZyXEL Communications MES3500-24F.

A complete ZyXEL Communications manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual ZyXEL Communications MES3500-24F - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the ZyXEL Communications MES3500-24F, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the ZyXEL Communications MES3500-24F, that we can find in the current document
3. Tips how to use the basic functions of the device ZyXEL Communications MES3500-24F - which should help us in our first steps of using ZyXEL Communications MES3500-24F
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with ZyXEL Communications MES3500-24F
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of ZyXEL Communications MES3500-24F in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning ZyXEL Communications MES3500-24F?

Use the form below

If you did not solve your problem by using a manual ZyXEL Communications MES3500-24F, ask a question using the form below. If a user had a similar problem with ZyXEL Communications MES3500-24F it is likely that he will want to share the way to solve it.

Copy the text from the picture

Captcha
New picture

Comments (0)