User Guide
Page 12
...46 3.3 LEDs ...47 Part II: Basic Configuration 49 Chapter 4 The Web Configurator ...51 4.1 Introduction ...51 4.2 System Login ...51 4.3 The Status Screen ...52 4.3.1 Change Your Password 56 4.4 Saving Your Configuration 57 4.5 Switch Lockout ...57 4.6 Resetting the Switch ...58 4.6.1 Reload the Factory-default Configuration File 58 4.7 Logging Out of the Web Configurator... Status Overview ...65 6.1.1 Status: Port Details 66 Chapter 7 Basic Setting ...71 7.1 Overview ...71 7.2 System Information ...71 7.3 General Setup ...73 7.4 Introduction to VLANs ...75 12 ES-2108 Series User's Guide
...46 3.3 LEDs ...47 Part II: Basic Configuration 49 Chapter 4 The Web Configurator ...51 4.1 Introduction ...51 4.2 System Login ...51 4.3 The Status Screen ...52 4.3.1 Change Your Password 56 4.4 Saving Your Configuration 57 4.5 Switch Lockout ...57 4.6 Resetting the Switch ...58 4.6.1 Reload the Factory-default Configuration File 58 4.7 Logging Out of the Web Configurator... Status Overview ...65 6.1.1 Status: Port Details 66 Chapter 7 Basic Setting ...71 7.1 Overview ...71 7.2 System Information ...71 7.3 General Setup ...73 7.4 Introduction to VLANs ...75 12 ES-2108 Series User's Guide
User Guide
Page 18
....1 Problems Starting Up the Switch 241 34.2 Problems Accessing the Switch 241 34.2.1 Pop-up Windows, JavaScripts and Java Permissions 242 34.3 Problems with the Password 247 Appendix A Product Specifications 249 Appendix B IP Addresses and Subnetting 257 18 ES-2108 Series User's Guide
....1 Problems Starting Up the Switch 241 34.2 Problems Accessing the Switch 241 34.2.1 Pop-up Windows, JavaScripts and Java Permissions 242 34.3 Problems with the Password 247 Appendix A Product Specifications 249 Appendix B IP Addresses and Subnetting 257 18 ES-2108 Series User's Guide
User Guide
Page 27
... Levels ...223 Table 91 Management > Syslog ...224 Table 92 Management > Syslog > Server Setup 225 Table 93 ZyXEL Clustering Management Specifications 227 Table 94 Management > Cluster Management: Status 229 Table 95 FTP Upload to Cluster Member Example...the Start-Up of Your Switch 241 Table 101 Troubleshooting Accessing the Switch 241 Table 102 Troubleshooting the Password 247 Table 103 Hardware Specifications ...249 Table 104 Firmware Specifications ...251 Table 105 Switching Specifications ...253 ... 263 Table 117 16-bit Network Number Subnet Planning 263 ES-2108 Series User's Guide 27
... Levels ...223 Table 91 Management > Syslog ...224 Table 92 Management > Syslog > Server Setup 225 Table 93 ZyXEL Clustering Management Specifications 227 Table 94 Management > Cluster Management: Status 229 Table 95 FTP Upload to Cluster Member Example...the Start-Up of Your Switch 241 Table 101 Troubleshooting Accessing the Switch 241 Table 102 Troubleshooting the Password 247 Table 103 Hardware Specifications ...249 Table 104 Firmware Specifications ...251 Table 105 Switching Specifications ...253 ... 263 Table 117 16-bit Network Number Subnet Planning 263 ES-2108 Series User's Guide 27
User Guide
Page 35
... an earlier configuration file, you would not have to reset the Switch to its factory default settings. You could simply restore your password, you will have to totally re-configure the Switch. Restoring an earlier working configuration may be useful if the device becomes unstable ...guess and that 's not easy to manage the Switch more effectively. • Change the password. Use a password that consists of different types of characters, such as numbers and letters. • Write down the password and put it ). ES-2108 Series User's Guide 35 If you forget your last configuration.
... an earlier configuration file, you would not have to reset the Switch to its factory default settings. You could simply restore your password, you will have to totally re-configure the Switch. Restoring an earlier working configuration may be useful if the device becomes unstable ...guess and that 's not easy to manage the Switch more effectively. • Change the password. Use a password that consists of different types of characters, such as numbers and letters. • Write down the password and put it ). ES-2108 Series User's Guide 35 If you forget your last configuration.
User Guide
Page 51
This guide primarily uses the ES-2108G screen shots as shown if you need to allow: • Web browser pop-up blocking is enabled by default in Windows XP SP (Service ... by default). 4.2 System Login 1 Start your device. The default username is admin and associated default password is 192.168.1.1) in the General Setup screen. Press [ENTER]. 3 The login screen appears. CHAPTER 4 The Web Configurator This section introduces the configuration and functions of the Switch (for different ES-2108 models. ES-2108 Series User's Guide 51
This guide primarily uses the ES-2108G screen shots as shown if you need to allow: • Web browser pop-up blocking is enabled by default in Windows XP SP (Service ... by default). 4.2 System Login 1 Start your device. The default username is admin and associated default password is 192.168.1.1) in the General Setup screen. Press [ENTER]. 3 The login screen appears. CHAPTER 4 The Web Configurator This section introduces the configuration and functions of the Switch (for different ES-2108 models. ES-2108 Series User's Guide 51
User Guide
Page 56
...firmware and configuration file maintenance as well as reboot the system. Configure Clone This link takes you to screens where you change the system login password and configure SNMP and remote management. A static route defines how the Switch should forward traffic by configuring the TCP/IP parameters manually. Access Control... This link takes you to a screen where you can clone port attributes of devices attached to a screen where you can change the default administrator password. DiffServ This link takes you to display the next screen. 56 ES-2108 Series User's Guide
...firmware and configuration file maintenance as well as reboot the system. Configure Clone This link takes you to screens where you change the system login password and configure SNMP and remote management. A static route defines how the Switch should forward traffic by configuring the TCP/IP parameters manually. Access Control... This link takes you to a screen where you can clone port attributes of devices attached to a screen where you can change the default administrator password. DiffServ This link takes you to display the next screen. 56 ES-2108 Series User's Guide
User Guide
Page 58
... Switch. 4.6 Resetting the Switch If you lock yourself (and others) from the Switch or forget the Switch password, you see the initial screen. 3 When you will lose all . The password will see the message "Press any key to enter debug mode. 4 Type atlc after the "Enter Debug ...factory-default configuration file, do the following: 1 Connect to enter Debug Mode within 3 seconds..." If you limit bandwidth to restart the Switch. 58 ES-2108 Series User's Guide See Section 3.1.1 on page 43 for the "Starting XMODEM upload" message before activating XMODEM upload on your terminal. 6 After the...
... Switch. 4.6 Resetting the Switch If you lock yourself (and others) from the Switch or forget the Switch password, you see the initial screen. 3 When you will lose all . The password will see the message "Press any key to enter debug mode. 4 Type atlc after the "Enter Debug ...factory-default configuration file, do the following: 1 Connect to enter Debug Mode within 3 seconds..." If you limit bandwidth to restart the Switch. 58 ES-2108 Series User's Guide See Section 3.1.1 on page 43 for the "Starting XMODEM upload" message before activating XMODEM upload on your terminal. 6 After the...
User Guide
Page 59
...screen. CCCCCCCCCCCC Total 49152 bytes received. You have to log in a screen to exit the web configurator. ES-2108 Series User's Guide 59 This is now re initialized with your password again after you finish a management session both for security reasons and so as you log out. Chapter 4... The Web Configurator Figure 23 Resetting the Switch: Via the Console Port (ES-2108-G) Bootbase Version: V1.01 | 09/02/2005 ...
...screen. CCCCCCCCCCCC Total 49152 bytes received. You have to log in a screen to exit the web configurator. ES-2108 Series User's Guide 59 This is now re initialized with your password again after you finish a management session both for security reasons and so as you log out. Chapter 4... The Web Configurator Figure 23 Resetting the Switch: Via the Console Port (ES-2108-G) Bootbase Version: V1.01 | 09/02/2005 ...
User Guide
Page 127
...to the port. 2. If your operating system does not support 802.1x, then you may need to a port based on a username and password provided by all operating systems. See your RADIUS server settings. 16.1.1 IEEE 802.1x Authentication The following figure illustrates how a client connecting to clients...the RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) protocol to validate users. At the time of a user name and password. ES-2108 Series User's Guide 127 The Switch supports IEEE 802.1x for login information in the form of writing, IEEE 802.1x is allowed access...
...to the port. 2. If your operating system does not support 802.1x, then you may need to a port based on a username and password provided by all operating systems. See your RADIUS server settings. 16.1.1 IEEE 802.1x Authentication The following figure illustrates how a client connecting to clients...the RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) protocol to validate users. At the time of a user name and password. ES-2108 Series User's Guide 127 The Switch supports IEEE 802.1x for login information in the form of writing, IEEE 802.1x is allowed access...
User Guide
Page 129
...number. * Settings in this row first to the port. Reauthentication Specify if a subscriber has to periodically re-enter his or her username and password to stay connected to set the common settings and then make some settings the same for all ports. Cancel Click Cancel to the Switch's run... configuring. Use this port. Apply Click Apply to save your changes to the non-volatile memory when you are copied to all ports. ES-2108 Series User's Guide 129 Note: You must first allow 802.1x authentication on the Switch before configuring it is turned off or loses power...
...number. * Settings in this row first to the port. Reauthentication Specify if a subscriber has to periodically re-enter his or her username and password to stay connected to set the common settings and then make some settings the same for all ports. Cancel Click Cancel to the Switch's run... configuring. Use this port. Apply Click Apply to save your changes to the non-volatile memory when you are copied to all ports. ES-2108 Series User's Guide 129 Note: You must first allow 802.1x authentication on the Switch before configuring it is turned off or loses power...
User Guide
Page 152
.... Table 48 RADIUS vs TACACS+ RADIUS TACACS+ Transport Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol) Encryption Encrypts the password sent for RADIUS attributes utilized by means of an external server instead of users from a central location. Click Advanced Application > Auth and...Accounting screen to configure your authentication server settings (RADIUS, TACACS+ or both allow you to display the screen as shown. 152 ES-2108 Series User's Guide See Section 20.1.2 on page 152 for more information on RADIUS servers and Section 20.3 on page 160 ...
.... Table 48 RADIUS vs TACACS+ RADIUS TACACS+ Transport Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol) Encryption Encrypts the password sent for RADIUS attributes utilized by means of an external server instead of users from a central location. Click Advanced Application > Auth and...Accounting screen to configure your authentication server settings (RADIUS, TACACS+ or both allow you to display the screen as shown. 152 ES-2108 Series User's Guide See Section 20.1.2 on page 152 for more information on RADIUS servers and Section 20.3 on page 160 ...
User Guide
Page 153
Mode This field is only valid if you are using two RADIUS servers then the timeout value is 1812. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to alternate between the external RADIUS server and the Switch. This key must be shared ...authentication request response from the first RADIUS server for authentication is divided between the two RADIUS servers. Index This is not sent over the network. ES-2108 Series User's Guide 153 Select round-robin to be the same on the external RADIUS server and the Switch. For example, if you to ....
Mode This field is only valid if you are using two RADIUS servers then the timeout value is 1812. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to alternate between the external RADIUS server and the Switch. This key must be shared ...authentication request response from the first RADIUS server for authentication is divided between the two RADIUS servers. Index This is not sent over the network. ES-2108 Series User's Guide 153 Select round-robin to be the same on the external RADIUS server and the Switch. For example, if you to ....
User Guide
Page 154
... 152 for an accounting request response from the Switch. This entry is deleted when you are done configuring. Shared Secret Specify a password (up to 32 alphanumeric characters) as shown. 154 ES-2108 Series User's Guide Click on the top navigation panel to save your changes to the Switch's run -time memory. Chapter 20...
... 152 for an accounting request response from the Switch. This entry is deleted when you are done configuring. Shared Secret Specify a password (up to 32 alphanumeric characters) as shown. 154 ES-2108 Series User's Guide Click on the top navigation panel to save your changes to the Switch's run -time memory. Chapter 20...
User Guide
Page 156
... 50 Advanced Application > Auth and Acct > TACACS+ Server Setup (continued) LABEL DESCRIPTION Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to do so. Timeout Specify the amount of an external...must be shared between the external TACACS+ accounting server and the Switch. Index This is 49. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. Click... this value unless your changes to view the screen as shown. 156 ES-2108 Series User's Guide
... 50 Advanced Application > Auth and Acct > TACACS+ Server Setup (continued) LABEL DESCRIPTION Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to do so. Timeout Specify the amount of an external...must be shared between the external TACACS+ accounting server and the Switch. Index This is 49. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ server and the Switch. Click... this value unless your changes to view the screen as shown. 156 ES-2108 Series User's Guide
User Guide
Page 161
... Attributes Used to Ethernet(15) on the Switch. the format of Acct-Session-Id is set to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 20.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port...+time+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time ES-2108 Series User's Guide 161 Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator 20.3.2 Attributes Used for Accounting The following sections list the attributes...
... Attributes Used to Ethernet(15) on the Switch. the format of Acct-Session-Id is set to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 20.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name NAS-Identifier NAS-IP-Address NAS-Port...+time+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time ES-2108 Series User's Guide 161 Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator 20.3.2 Attributes Used for Accounting The following sections list the attributes...
User Guide
Page 201
... the Switch's settings. Similarly, put firmware.bin ras transfers the firmware on the ES-2108 Series User's Guide 201 Table 74 Filename Conventions FILE TYPE INTERNAL EXTERNA NAME L NAME...space and the IP address of both files for the ZyNOS firmware on the Switch. ZyNOS (ZyXEL Network Operating System sometimes referred to "config". Once you have a destination filename different than ...of your Switch. 3 Enter the username when prompted (for example "admin"). 4 Enter your password as requested (the default is a sample FTP session saving the current configuration to upload the ...
... the Switch's settings. Similarly, put firmware.bin ras transfers the firmware on the ES-2108 Series User's Guide 201 Table 74 Filename Conventions FILE TYPE INTERNAL EXTERNA NAME L NAME...space and the IP address of both files for the ZyNOS firmware on the Switch. ZyNOS (ZyXEL Network Operating System sometimes referred to "config". Once you have a destination filename different than ...of your Switch. 3 Enter the username when prompted (for example "admin"). 4 Enter your password as requested (the default is a sample FTP session saving the current configuration to upload the ...
User Guide
Page 202
...access. Configuration and firmware files should be transferred in GUI-based FTP clients. Initial Remote Directory Specify the default remote directory (path). and password is when a user I.D. Normal. Chapter 26 Maintenance Switch to your ISP or service administrator has enabled this option. Table 75 General ...cfg". Anonymous logins will not work only if your computer and renames it does not match, the Switch will disallow the session. 202 ES-2108 Series User's Guide If it to exit the ftp prompt. 26.8.3 GUI-based FTP Clients The following table describes some of the host...
...access. Configuration and firmware files should be transferred in GUI-based FTP clients. Initial Remote Directory Specify the default remote directory (path). and password is when a user I.D. Normal. Chapter 26 Maintenance Switch to your ISP or service administrator has enabled this option. Table 75 General ...cfg". Anonymous logins will not work only if your computer and renames it does not match, the Switch will disallow the session. 202 ES-2108 Series User's Guide If it to exit the ftp prompt. 26.8.3 GUI-based FTP Clients The following table describes some of the host...
User Guide
Page 203
....2 The Access Control Main Screen Click Management, Access Control in the navigation panel to configure remote management options and create user accounts on the Switch. ES-2108 Series User's Guide 203 CHAPTER 27 Access Control This chapter describes how to control access to the Switch. 27.1 Access Control Overview A console port and... disabled. Table 76 Access Control Overview Console Port SSH Telnet FTP Web SNMP One session Share up to five Web sessions (five different usernames and passwords) and/or limitless SNMP access control sessions are allowed.
....2 The Access Control Main Screen Click Management, Access Control in the navigation panel to configure remote management options and create user accounts on the Switch. ES-2108 Series User's Guide 203 CHAPTER 27 Access Control This chapter describes how to control access to the Switch. 27.1 Access Control Overview A console port and... disabled. Table 76 Access Control Overview Console Port SSH Telnet FTP Web SNMP One session Share up to five Web sessions (five different usernames and passwords) and/or limitless SNMP access control sessions are allowed.
User Guide
Page 207
...password. Table 81 AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION authentication authenticationFailure 1.3.6.1.6.3.1.1.5.5 This trap is sent when a ping test (consisting of a series of ping probes) fails. RADIUSAcctNotReachableEventClear 1.3.6.1.4.1.890.1.5.8.xx.31.2.2 This trap is sent when the RADIUS accounting server can be reached. ES-2108...sent when a ping test is sent when authentication fails due to incorrect user name and/ or password. Table 82 SNMP IP Traps OPTION OBJECT LABEL ping pingProbeFailed pingTestFailed pingTestCompleted OBJECT ID 1.3.6.1.2.1.80.0.1 ...
...password. Table 81 AAA Traps OPTION OBJECT LABEL OBJECT ID DESCRIPTION authentication authenticationFailure 1.3.6.1.6.3.1.1.5.5 This trap is sent when a ping test (consisting of a series of ping probes) fails. RADIUSAcctNotReachableEventClear 1.3.6.1.4.1.890.1.5.8.xx.31.2.2 This trap is sent when the RADIUS accounting server can be reached. ES-2108...sent when a ping test is sent when authentication fails due to incorrect user name and/ or password. Table 82 SNMP IP Traps OPTION OBJECT LABEL ping pingProbeFailed pingTestFailed pingTestCompleted OBJECT ID 1.3.6.1.2.1.80.0.1 ...
User Guide
Page 209
...the SNMP manager. Enter the Set Community, which is the password for the Switch. The Set Community string is the password for the incoming Get- The SNMP version on the Switch must match the version on the SNMP manager. ES-2108 Series User's Guide 209 Enter the Get Community string, which... is only used by SNMP managers using SNMP version 2c or lower. The Trap Community string is the password sent with SNMP version 1. and GetNext- Enter the IP...
...the SNMP manager. Enter the Set Community, which is the password for the Switch. The Set Community string is the password for the incoming Get- The SNMP version on the Switch must match the version on the SNMP manager. ES-2108 Series User's Guide 209 Enter the Get Community string, which... is only used by SNMP managers using SNMP version 2c or lower. The Trap Community string is the password sent with SNMP version 1. and GetNext- Enter the IP...