User Guide
Page 3
...8226; Ethernet Switch CLI Reference Guide The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to www.zyxel.com for additional support documentation and product certifications. Related Documentation • Quick Start Guide The Quick Start Guide contains information on...comments, questions or suggestions for improvement to install the ES-2108 Series Ethernet Switch and configure it using the web configurator or via commands. About This User's Guide About This User's Guide Intended Audience This manual is recommended you use the web configurator to configure ...
...8226; Ethernet Switch CLI Reference Guide The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to www.zyxel.com for additional support documentation and product certifications. Related Documentation • Quick Start Guide The Quick Start Guide contains information on...comments, questions or suggestions for improvement to install the ES-2108 Series Ethernet Switch and configure it using the web configurator or via commands. About This User's Guide About This User's Guide Intended Audience This manual is recommended you use the web configurator to configure ...
User Guide
Page 51
...Press [ENTER]. 3 The login screen appears. CHAPTER 4 The Web Configurator This section introduces the configuration and functions of the Switch (for different ES-2108 models. Not all fields are available on all models. 4.1 Introduction The web configurator is 1024 by 768 pixels. The recommended screen resolution is ...is 192.168.1.1) in the Location or Address field. This guide primarily uses the ES-2108G screen shots as shown if you need to use the web configurator you have not configured a time server nor manually entered a time and date in Windows XP SP (Service Pack) 2. •...
...Press [ENTER]. 3 The login screen appears. CHAPTER 4 The Web Configurator This section introduces the configuration and functions of the Switch (for different ES-2108 models. Not all fields are available on all models. 4.1 Introduction The web configurator is 1024 by 768 pixels. The recommended screen resolution is ...is 192.168.1.1) in the Location or Address field. This guide primarily uses the ES-2108G screen shots as shown if you need to use the web configurator you have not configured a time server nor manually entered a time and date in Windows XP SP (Service Pack) 2. •...
User Guide
Page 56
... can setup system logs and a system log server. A static route defines how the Switch should forward traffic by configuring the TCP/IP parameters manually. Syslog This link takes you to a screen where you can configure static routes. ARP Table This link takes you to screens where you can... you to screens where you can view the MAC addresses (and types) of a port and transfer them to display the next screen. 56 ES-2108 Series User's Guide MAC Table This link takes you to a screen where you change the system login password and configure SNMP and remote management....
... can setup system logs and a system log server. A static route defines how the Switch should forward traffic by configuring the TCP/IP parameters manually. Syslog This link takes you to a screen where you can configure static routes. ARP Table This link takes you to screens where you can... you to screens where you can view the MAC addresses (and types) of a port and transfer them to display the next screen. 56 ES-2108 Series User's Guide MAC Table This link takes you to a screen where you change the system login password and configure SNMP and remote management....
User Guide
Page 71
... (such as firmware version number) and hardware polling information (such as shown. The screen from ES-2108-G model is then displayed in the Switch logs. CHAPTER 7 Basic Setting This chapter describes how to set the system time manually or get the current time and date from the other models covered in this UG...
... (such as firmware version number) and hardware polling information (such as shown. The screen from ES-2108-G model is then displayed in the Switch logs. CHAPTER 7 Basic Setting This chapter describes how to set the system time manually or get the current time and date from the other models covered in this UG...
User Guide
Page 74
... following table describes the labels in the Current Time field after you click Apply. 74 ES-2108 Series User's Guide Time (RFC-868) format displays a 4-byte integer giving the total number of your timeserver uses. Enter the time manually. Each time you turn on the Switch, the time and date will appear locked...
... following table describes the labels in the Current Time field after you click Apply. 74 ES-2108 Series User's Guide Time (RFC-868) format displays a 4-byte integer giving the total number of your timeserver uses. Enter the time manually. Each time you turn on the Switch, the time and date will appear locked...
User Guide
Page 88
... that do not have this function to permit VLANs groups beyond the local Switch. Enable this port as a member 88 ES-2108 Series User's Guide VLAN Administrative Registration Fixed Fixed registration ports are withdrawn by making a declaration. Untagged Ports belonging to the...Registration GARP and GVRP are the protocols used to automatically register VLAN membership across the network. A declaration is a static VLAN created manually. A Leave All message terminates all registrations. Table 14 IEEE 802.1q Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This...
... that do not have this function to permit VLANs groups beyond the local Switch. Enable this port as a member 88 ES-2108 Series User's Guide VLAN Administrative Registration Fixed Fixed registration ports are withdrawn by making a declaration. Untagged Ports belonging to the...Registration GARP and GVRP are the protocols used to automatically register VLAN membership across the network. A declaration is a static VLAN created manually. A Leave All message terminates all registrations. Table 14 IEEE 802.1q Terminology VLAN PARAMETER TERM DESCRIPTION VLAN Type Permanent VLAN This...
User Guide
Page 97
...for broadcasting. Static MAC address forwarding together with port security allow only computers in the MAC address table on page 131 for a port. ES-2108 Series User's Guide 97 When you set up static MAC address rules, you are setting static MAC addresses for broadcasting. This may reduce ...9 Static MAC Forwarding Use these screens to configure static MAC address forwarding. 9.1 Overview A static MAC address is an address that has been manually entered in the MAC address table. Static MAC addresses do not age out. When you set up static MAC address rules, you are setting ...
...for broadcasting. Static MAC address forwarding together with port security allow only computers in the MAC address table on page 131 for a port. ES-2108 Series User's Guide 97 When you set up static MAC address rules, you are setting static MAC addresses for broadcasting. This may reduce ...9 Static MAC Forwarding Use these screens to configure static MAC address forwarding. 9.1 Overview A static MAC address is an address that has been manually entered in the MAC address table. Static MAC addresses do not age out. When you set up static MAC address rules, you are setting ...
User Guide
Page 137
... types of either two ways - It checks IGMP packets passing through it is a network-layer protocol used to carry user data. ES-2108 Series User's Guide 137 A multicast IP address represents a traffic receiving group, not individual receiving devices. CHAPTER 19 Multicast This chapter ... multicast features. 19.1 Multicast Overview Traditionally, IP packets are reserved by configuring an IGMP filtering profile and associating the profile to manually configure them. This allows you can control which IGMP groups a subscriber on a port can passively snoop on IGMP packets transferred ...
... types of either two ways - It checks IGMP packets passing through it is a network-layer protocol used to carry user data. ES-2108 Series User's Guide 137 A multicast IP address represents a traffic receiving group, not individual receiving devices. CHAPTER 19 Multicast This chapter ... multicast features. 19.1 Multicast Overview Traditionally, IP packets are reserved by configuring an IGMP filtering profile and associating the profile to manually configure them. This allows you can control which IGMP groups a subscriber on a port can passively snoop on IGMP packets transferred ...
User Guide
Page 138
.... Chapter 19 Multicast The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of the entry. You can perform IGMP snooping on VLANs. The Switch then performs IGMP snooping on...IGMP packets (see Table 105 on multicasting. IGMP snooping generates no additional network traffic, allowing you can perform IGMP snooping on multicasting. 138 ES-2108 Series User's Guide See Section 19.1 on page 137 for how many VLANs the Switch can specify the VLANs that group. VID This...
.... Chapter 19 Multicast The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to ports that are members of the entry. You can perform IGMP snooping on VLANs. The Switch then performs IGMP snooping on...IGMP packets (see Table 105 on multicasting. IGMP snooping generates no additional network traffic, allowing you can perform IGMP snooping on multicasting. 138 ES-2108 Series User's Guide See Section 19.1 on page 137 for how many VLANs the Switch can specify the VLANs that group. VID This...
User Guide
Page 144
... subscriber changes the channel or turns off the computer, an IGMP leave message is another subscriber device connected to this case, you must manually configure the forwarding settings on the multicast devices in the multicast VLAN. Once configured, the Switch maintains a forwarding table that can send ... the multicast forwarding table to forward or not forward multicast traffic to join the appropriate multicast group. Figure 78 MVR Multicast Television Example 144 ES-2108 Series User's Guide Chapter 19 Multicast 19.6.1 Types of MVR Ports In MVR, a source port is a port on the list of...
... subscriber changes the channel or turns off the computer, an IGMP leave message is another subscriber device connected to this case, you must manually configure the forwarding settings on the multicast devices in the multicast VLAN. Once configured, the Switch maintains a forwarding table that can send ... the multicast forwarding table to forward or not forward multicast traffic to join the appropriate multicast group. Figure 78 MVR Multicast Television Example 144 ES-2108 Series User's Guide Chapter 19 Multicast 19.6.1 Types of MVR Ports In MVR, a source port is a port on the list of...
User Guide
Page 165
.... The Switch builds from information provided manually by administrators (static bindings). This can prevent many kinds of the following example. Use this to filter unauthorized ARP packets on the network. 21.1.1 ARP Inspection Overview Use ARP inspection to create static bindings in -the-middle Attack A B X ES-2108 Series User's Guide 165 IP source...
.... The Switch builds from information provided manually by administrators (static bindings). This can prevent many kinds of the following example. Use this to filter unauthorized ARP packets on the network. 21.1.1 ARP Inspection Overview Use ARP inspection to create static bindings in -the-middle Attack A B X ES-2108 Series User's Guide 165 IP source...
User Guide
Page 167
...binding. If you try to distinguish between authorized and unauthorized packets in the network. The Switch learns the bindings from information provided manually by administrators (static bindings). Table 57 Advanced Application > IP Source Guard LABEL DESCRIPTION Index This field displays a sequential number for... infinity if the binding is still valid for each binding. static: This binding was learned from information provided manually by an administrator. ES-2108 Series User's Guide 167 Each MAC address and VLAN ID can only be in this screen to manage static...
...binding. If you try to distinguish between authorized and unauthorized packets in the network. The Switch learns the bindings from information provided manually by administrators (static bindings). Table 57 Advanced Application > IP Source Guard LABEL DESCRIPTION Index This field displays a sequential number for... infinity if the binding is still valid for each binding. static: This binding was learned from information provided manually by an administrator. ES-2108 Series User's Guide 167 Each MAC address and VLAN ID can only be in this screen to manage static...
User Guide
Page 168
... above. Lease This field displays how long the binding is blank, the binding applies to all ports. static: This binding was learned from information provided manually by an administrator. Delete Select this to the MAC address in the binding. Type This field displays how the Switch learned the binding. VLAN Enter... Source Guard Figure 92 Advanced Application > IP Source Guard > Static Binding The following table describes the labels in this to clear the fields above . 168 ES-2108 Series User's Guide Cancel Click this screen.
... above. Lease This field displays how long the binding is blank, the binding applies to all ports. static: This binding was learned from information provided manually by an administrator. Delete Select this to the MAC address in the binding. Type This field displays how the Switch learned the binding. VLAN Enter... Source Guard Figure 92 Advanced Application > IP Source Guard > Static Binding The following table describes the labels in this to clear the fields above . 168 ES-2108 Series User's Guide Cancel Click this screen.
User Guide
Page 169
... source MAC address in the binding table. Port This field displays the source port of the unauthorized ARP packet. You can also delete the record manually (Delete). IP: The MAC address and VLAN ID were in the binding table, but the port number was not valid. Cancel Click this to ...were created because the Switch identified an unauthorized ARP packet. MAC+VLAN: The MAC address and VLAN ID were not in the MAC address filter. ES-2108 Series User's Guide 169 Chapter 21 IP Source Guard 21.4 ARP Inspection Status Use this screen to look at the current list of MAC address...
... source MAC address in the binding table. Port This field displays the source port of the unauthorized ARP packet. You can also delete the record manually (Delete). IP: The MAC address and VLAN ID were in the binding table, but the port number was not valid. Cancel Click this to ...were created because the Switch identified an unauthorized ARP packet. MAC+VLAN: The MAC address and VLAN ID were not in the MAC address filter. ES-2108 Series User's Guide 169 Chapter 21 IP Source Guard 21.4 ARP Inspection Status Use this screen to look at the current list of MAC address...
User Guide
Page 189
The Switch forwards all DHCP requests to a specified DHCP server on your network. The Switch can be configured manually. 25.1.1 DHCP Modes If there is divided into Global and VLAN screens. Choose the configuration screen based on a VLAN by VLAN basis. When configured as ... to relay DHCP requests to different DHCP servers for configuration depends on the DHCP services you want to offer the DHCP clients on your network. ES-2108 Series User's Guide 189 CHAPTER 25 DHCP This chapter shows you how to configure the DHCP feature. 25.1 DHCP Overview DHCP (Dynamic Host Configuration ...
The Switch forwards all DHCP requests to a specified DHCP server on your network. The Switch can be configured manually. 25.1.1 DHCP Modes If there is divided into Global and VLAN screens. Choose the configuration screen based on a VLAN by VLAN basis. When configured as ... to relay DHCP requests to different DHCP servers for configuration depends on the DHCP services you want to offer the DHCP clients on your network. ES-2108 Series User's Guide 189 CHAPTER 25 DHCP This chapter shows you how to configure the DHCP feature. 25.1 DHCP Overview DHCP (Dynamic Host Configuration ...
User Guide
Page 233
... forwarded to which this source MAC address came in on which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the MAC table. • If the Switch has already learned the port for this MAC address, then it forwards the frame to see... are forwarded or filtered across the Switch's ports. The Switch uses the MAC table to determine how to all ports. Figure 144 MAC Table Flowchart ES-2108 Series User's Guide 233 Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address...
... forwarded to which this source MAC address came in on which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the MAC table. • If the Switch has already learned the port for this MAC address, then it forwards the frame to see... are forwarded or filtered across the Switch's ports. The Switch uses the MAC table to determine how to all ports. Figure 144 MAC Table Flowchart ES-2108 Series User's Guide 233 Too much port flooding leads to network congestion. • If the Switch has already learned the port for this MAC address...
User Guide
Page 234
... Table " Click MAC, VID or Port in the Static MAC Forwarding screen). 234 ES-2108 Series User's Guide VID Port Index MAC Address VID Port Type Click this frame belongs. This is dynamic (learned by the Switch) or static (manually entered in the Sort by Click one of the device from which this...
... Table " Click MAC, VID or Port in the Static MAC Forwarding screen). 234 ES-2108 Series User's Guide VID Port Index MAC Address VID Port Type Click this frame belongs. This is dynamic (learned by the Switch) or static (manually entered in the Sort by Click one of the device from which this...
User Guide
Page 236
... static (manually entered in this screen. Type This shows whether the MAC address is the MAC address of a device connected to a Switch port with corresponding IP address above. Chapter 32 ARP Table Figure 146 Management > ARP Table The following table describes the labels in the Static MAC Forwarding screen). 236 ES-2108 Series...
... static (manually entered in this screen. Type This shows whether the MAC address is the MAC address of a device connected to a Switch port with corresponding IP address above. Chapter 32 ARP Table Figure 146 Management > ARP Table The following table describes the labels in the Static MAC Forwarding screen). 236 ES-2108 Series...
User Guide
Page 251
the traffic must manually enter the TCP/IP information. If you disable the DHCP service, you to DHCP servers on your Switch. DHCP Relay Use this feature to have ... on the Switch Authentication via RADIUS and TACACS+ is also available. You can belong to obtain TCP/IP configuration at start-up from a DHCP server. ES-2108 Series User's Guide 251 DHCP Client DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to more than one group. IGMP...
the traffic must manually enter the TCP/IP information. If you disable the DHCP service, you to DHCP servers on your Switch. DHCP Relay Use this feature to have ... on the Switch Authentication via RADIUS and TACACS+ is also available. You can belong to obtain TCP/IP configuration at start-up from a DHCP server. ES-2108 Series User's Guide 251 DHCP Client DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers to more than one group. IGMP...
User Guide
Page 252
... with dynamically learned MAC addresses and/or configured static MAC addresses to forward IP traffic when you configure the TCP/IP parameters manually. MVR allows one logical higher-capacity link. MSTP (Multiple Spanning Tree Protocol) Multiple Spanning Tree Protocol (IEEE 802.1s)... filter unauthorized ARP packets in your network to another port or ports. It allows a Switch to a syslog server. 252 ES-2108 Series User's Guide Authentication and Accounting The Switch supports authentication and accounting services via RADIUS and TACACS+ AAA servers. Port Authentication...
... with dynamically learned MAC addresses and/or configured static MAC addresses to forward IP traffic when you configure the TCP/IP parameters manually. MVR allows one logical higher-capacity link. MSTP (Multiple Spanning Tree Protocol) Multiple Spanning Tree Protocol (IEEE 802.1s)... filter unauthorized ARP packets in your network to another port or ports. It allows a Switch to a syslog server. 252 ES-2108 Series User's Guide Authentication and Accounting The Switch supports authentication and accounting services via RADIUS and TACACS+ AAA servers. Port Authentication...