User Guide
Page 3
... configurator or via commands. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: techwriters@zyxel.com.tw ES-2108 Series User's Guide 3 Related Documentation • Quick Start Guide... The Quick Start Guide contains information on setting up your hardware. • Web Configurator Online Help Embedded web help you ! Thank you . About This User's Guide About This User's Guide Intended Audience This manual...
... configurator or via commands. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: techwriters@zyxel.com.tw ES-2108 Series User's Guide 3 Related Documentation • Quick Start Guide... The Quick Start Guide contains information on setting up your hardware. • Web Configurator Online Help Embedded web help you ! Thank you . About This User's Guide About This User's Guide Intended Audience This manual...
User Guide
Page 51
CHAPTER 4 The Web Configurator This section introduces the configuration and functions of the Switch (for different ES-2108 models. Web pop-up windows from your web browser. 2 Type "http://" and the IP address of the web configurator. Use Internet Explorer 6.0 ... interface that allows easy Switch setup and management via Internet browser. ES-2108 Series User's Guide 51 This guide primarily uses the ES-2108G screen shots as shown if you need to use the web configurator you have not configured a time server nor manually entered a time and date in Windows XP SP (Service Pack)...
CHAPTER 4 The Web Configurator This section introduces the configuration and functions of the Switch (for different ES-2108 models. Web pop-up windows from your web browser. 2 Type "http://" and the IP address of the web configurator. Use Internet Explorer 6.0 ... interface that allows easy Switch setup and management via Internet browser. ES-2108 Series User's Guide 51 This guide primarily uses the ES-2108G screen shots as shown if you need to use the web configurator you have not configured a time server nor manually entered a time and date in Windows XP SP (Service Pack)...
User Guide
Page 56
... parameters manually. Syslog This link takes you to a screen where you can configure clustering management and view its status. Cluster Management This link takes you to screens where you can setup system logs and a system log server. Management Maintenance This link takes you to display the next screen. 56 ES-2108 Series User's Guide...
... parameters manually. Syslog This link takes you to a screen where you can configure clustering management and view its status. Cluster Management This link takes you to screens where you can setup system logs and a system log server. Management Maintenance This link takes you to display the next screen. 56 ES-2108 Series User's Guide...
User Guide
Page 71
...Switch identification information. The Switch Setup screen allows you to set the system time manually or get the current time and date from ES-2108-G model is then displayed in the Switch logs. " The ES-2108PWR screen is different from the other models covered in this UG. You can... check the firmware version number and monitor the Switch temperature, fan speeds and voltage (on your Switch. ES-2108 Series User's Guide 71 The IP Setup screen allows you to set up and configure global Switch features. CHAPTER 7 Basic Setting This chapter describes...
...Switch identification information. The Switch Setup screen allows you to set the system time manually or get the current time and date from ES-2108-G model is then displayed in the Switch logs. " The ES-2108PWR screen is different from the other models covered in this UG. You can... check the firmware version number and monitor the Switch temperature, fan speeds and voltage (on your Switch. ES-2108 Series User's Guide 71 The IP Setup screen allows you to set up and configure global Switch features. CHAPTER 7 Basic Setting This chapter describes...
User Guide
Page 74
...that your geographical time zone. Time (RFC-868) format displays a 4-byte integer giving the total number of your Switch. Enter the time manually. The Switch searches for the timeserver for up to 60 seconds. If you may have to 1970-1-1 0:0:0. spaces are the time format....time with no time zone adjustment. Location Enter the geographic location (up to 32 characters) of this Switch. When you click Apply. 74 ES-2108 Series User's Guide NTP (RFC-1305) is unreachable, then this format it is the default value. Chapter 7 Basic Setting Figure 34 Basic Setting >...
...that your geographical time zone. Time (RFC-868) format displays a 4-byte integer giving the total number of your Switch. Enter the time manually. The Switch searches for the timeserver for up to 60 seconds. If you may have to 1970-1-1 0:0:0. spaces are the time format....time with no time zone adjustment. Location Enter the geographic location (up to 32 characters) of this Switch. When you click Apply. 74 ES-2108 Series User's Guide NTP (RFC-1305) is unreachable, then this format it is the default value. Chapter 7 Basic Setting Figure 34 Basic Setting >...
User Guide
Page 88
.... Control Registration Forbidden Ports with other GARP participants within a bridged LAN. GARP is a registration protocol that this port as a member 88 ES-2108 Series User's Guide A declaration is the VLAN ID assigned to register necessary VLAN members on a port. GARP timers set , the Switch discards incoming ...VLAN Type Permanent VLAN This is a VLAN configured by issuing a Leave message. Dynamic VLAN This is a static VLAN created manually. Normal Registration Ports dynamically join a VLAN using GARP. Acceptable frame type You may choose to join the specified VLAN.
.... Control Registration Forbidden Ports with other GARP participants within a bridged LAN. GARP is a registration protocol that this port as a member 88 ES-2108 Series User's Guide A declaration is the VLAN ID assigned to register necessary VLAN members on a port. GARP timers set , the Switch discards incoming ...VLAN Type Permanent VLAN This is a VLAN configured by issuing a Leave message. Dynamic VLAN This is a static VLAN created manually. Normal Registration Ports dynamically join a VLAN using GARP. Acceptable frame type You may choose to join the specified VLAN.
User Guide
Page 97
Static MAC addresses do not age out. ES-2108 Series User's Guide 97 This may reduce the need for a port. ...screens to configure static MAC address forwarding. 9.1 Overview A static MAC address is an address that has been manually entered in the MAC address table on port security. When you set up static MAC address rules, you...information on port security. 9.2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the MAC address table. Static MAC address forwarding together with port security allow only computers in ...
Static MAC addresses do not age out. ES-2108 Series User's Guide 97 This may reduce the need for a port. ...screens to configure static MAC address forwarding. 9.1 Overview A static MAC address is an address that has been manually entered in the MAC address table on port security. When you set up static MAC address rules, you...information on port security. 9.2 Configuring Static MAC Forwarding A static MAC address is an address that has been manually entered in the MAC address table. Static MAC address forwarding together with port security allow only computers in ...
User Guide
Page 137
... the distribution of either two ways - IGMP (Internet Group Management Protocol) is not used to establish membership in a different subnetwork. ES-2108 Series User's Guide 137 This allows you can passively snoop on the network. IP addresses in the Class D range (224.0.0.0 to everybody on...in a multicast group - It checks IGMP packets passing through it is a network-layer protocol used to carry user data. CHAPTER 19 Multicast This chapter shows you having to manually configure them. Unicast (1 sender to 1 recipient) or Broadcast (1 sender to 239.255.255.255) are reserved...
... the distribution of either two ways - IGMP (Internet Group Management Protocol) is not used to establish membership in a different subnetwork. ES-2108 Series User's Guide 137 This allows you can passively snoop on the network. IP addresses in the Class D range (224.0.0.0 to everybody on...in a multicast group - It checks IGMP packets passing through it is a network-layer protocol used to carry user data. CHAPTER 19 Multicast This chapter shows you having to manually configure them. Unicast (1 sender to 1 recipient) or Broadcast (1 sender to 239.255.255.255) are reserved...
User Guide
Page 138
... for more information on . The following table describes the labels in this screen. See Section 19.1 on multicasting. 138 ES-2108 Series User's Guide Alternatively, you can perform IGMP snooping on ). You can perform IGMP snooping on VLANs. Port This field displays the port number that belongs to ... as shown. Chapter 19 Multicast The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to as fixed mode.
... for more information on . The following table describes the labels in this screen. See Section 19.1 on multicasting. 138 ES-2108 Series User's Guide Alternatively, you can perform IGMP snooping on ). You can perform IGMP snooping on VLANs. Port This field displays the port number that belongs to ... as shown. Chapter 19 Multicast The Switch forwards multicast traffic destined for multicast groups (that it has learned from IGMP snooping or that you have manually configured) to as fixed mode.
User Guide
Page 144
...such as the receiver on the list of forwarding destination for the specified multicast traffic. Figure 78 MVR Multicast Television Example 144 ES-2108 Series User's Guide This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to VLAN 1 ... VLAN while a receiver port can connect through a port configured as multicast routers or servers) in this case, you must manually configure the forwarding settings on the Switch. Otherwise, the Switch removes the receiver port from the streaming media server, S, via the Switch.
...such as the receiver on the list of forwarding destination for the specified multicast traffic. Figure 78 MVR Multicast Television Example 144 ES-2108 Series User's Guide This allows the multicast devices to update the multicast forwarding table to forward or not forward multicast traffic to VLAN 1 ... VLAN while a receiver port can connect through a port configured as multicast routers or servers) in this case, you must manually configure the forwarding settings on the Switch. Otherwise, the Switch removes the receiver port from the streaming media server, S, via the Switch.
User Guide
Page 165
... network. 21.1.1 ARP Inspection Overview Use ARP inspection to distinguish between authorized and unauthorized ARP packets in -the-middle Attack A B X ES-2108 Series User's Guide 165 If there is a binding, the Switch forwards the packet. A binding contains these key attributes: • MAC address •...features: • Static bindings. Use this to create static bindings in the binding table. The Switch builds from information provided manually by administrators (static bindings). Use this to filter unauthorized ARP packets on the network. Figure 90 Example: Man-in your ...
... network. 21.1.1 ARP Inspection Overview Use ARP inspection to distinguish between authorized and unauthorized ARP packets in -the-middle Attack A B X ES-2108 Series User's Guide 165 If there is a binding, the Switch forwards the packet. A binding contains these key attributes: • MAC address •...features: • Static bindings. Use this to create static bindings in the binding table. The Switch builds from information provided manually by administrators (static bindings). Use this to filter unauthorized ARP packets on the network. Figure 90 Example: Man-in your ...
User Guide
Page 167
... unauthorized packets in one . The Switch learns the bindings from information provided manually by ARP inspection to look at the current bindings for 2 days, 3 hours, 4 minutes, and 5 seconds. ES-2108 Series User's Guide 167 static: This binding was learned from information provided manually by the MAC address and VLAN ID. IP Address This field displays...
... unauthorized packets in one . The Switch learns the bindings from information provided manually by ARP inspection to look at the current bindings for 2 days, 3 hours, 4 minutes, and 5 seconds. ES-2108 Series User's Guide 167 static: This binding was learned from information provided manually by the MAC address and VLAN ID. IP Address This field displays...
User Guide
Page 168
.... static: This binding was learned from information provided manually by an administrator. Port This field displays the port number in this to reset the values above based on the last selected static binding or, if not applicable, to clear the fields above . 168 ES-2108 Series User's Guide Cancel Click this screen. Index This...
.... static: This binding was learned from information provided manually by an administrator. Port This field displays the port number in this to reset the values above based on the last selected static binding or, if not applicable, to clear the fields above . 168 ES-2108 Series User's Guide Cancel Click this screen. Index This...
User Guide
Page 169
... Source Guard > ARP Inspection. To open this screen to block traffic from the source MAC address and source VLAN ID of the discarded ARP packet. ES-2108 Series User's Guide 169 Table 59 Advanced Application > IP Source Guard > ARP Inspection: Status LABEL DESCRIPTION Total number of filters This field displays the current number... and VLAN ID were in the binding table, but the port number was not valid. To open this screen. You can also delete the record manually (Delete).
... Source Guard > ARP Inspection. To open this screen to block traffic from the source MAC address and source VLAN ID of the discarded ARP packet. ES-2108 Series User's Guide 169 Table 59 Advanced Application > IP Source Guard > ARP Inspection: Status LABEL DESCRIPTION Total number of filters This field displays the current number... and VLAN ID were in the binding table, but the port number was not valid. To open this screen. You can also delete the record manually (Delete).
User Guide
Page 189
... to offer the DHCP clients on the Switch is already a DHCP server on the following screen. Choose the configuration screen based on your network. ES-2108 Series User's Guide 189 CHAPTER 25 DHCP This chapter shows you must have a DHCP server in the broadcast domain of the client computers or else the client..., it contacts the DHCP server for configuration depends on the DHCP services you don't configure the Switch as a DHCP relay agent. You can be configured manually. 25.1.1 DHCP Modes If there is divided into Global and VLAN screens.
... to offer the DHCP clients on the Switch is already a DHCP server on the following screen. Choose the configuration screen based on your network. ES-2108 Series User's Guide 189 CHAPTER 25 DHCP This chapter shows you must have a DHCP server in the broadcast domain of the client computers or else the client..., it contacts the DHCP server for configuration depends on the DHCP services you don't configure the Switch as a DHCP relay agent. You can be configured manually. 25.1.1 DHCP Modes If there is divided into Global and VLAN screens.
User Guide
Page 233
... to see if the frame's destination MAC address matches a source MAC address already learned in the Static MAC Forwarding screen). Figure 144 MAC Table Flowchart ES-2108 Series User's Guide 233 It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to network congestion. • If the Switch... is also known as the port it came in on which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the MAC table. • If the Switch has already learned the port for this MAC address, then it filters the frame.
... to see if the frame's destination MAC address matches a source MAC address already learned in the Static MAC Forwarding screen). Figure 144 MAC Table Flowchart ES-2108 Series User's Guide 233 It shows what device MAC address, belonging to what VLAN group (if any) is forwarded to network congestion. • If the Switch... is also known as the port it came in on which port(s) and whether the MAC address is dynamic (learned by the Switch) or static (manually entered in the MAC table. • If the Switch has already learned the port for this MAC address, then it filters the frame.
User Guide
Page 234
... MAC address. This field displays Drop if you configure a filter rule for the MAC address in the Static MAC Forwarding screen). 234 ES-2108 Series User's Guide This is the port from which this screen. This shows whether the MAC address is the MAC address of the following buttons... address entries. Click Management > MAC Table in the navigation panel to port number. This is dynamic (learned by the Switch) or static (manually entered in the Filtering screen. This field displays drop if you configure a filtering rule to MAC address. This is the incoming frame index number...
... MAC address. This field displays Drop if you configure a filter rule for the MAC address in the Static MAC Forwarding screen). 234 ES-2108 Series User's Guide This is the port from which this screen. This shows whether the MAC address is the MAC address of the following buttons... address entries. Click Management > MAC Table in the navigation panel to port number. This is dynamic (learned by the Switch) or static (manually entered in the Filtering screen. This field displays drop if you configure a filtering rule to MAC address. This is the incoming frame index number...
User Guide
Page 236
... address above. Chapter 32 ARP Table Figure 146 Management > ARP Table The following table describes the labels in the Static MAC Forwarding screen). 236 ES-2108 Series User's Guide Type This shows whether the MAC address is the learned IP address of the device with corresponding MAC address below. MAC Address This is...
... address above. Chapter 32 ARP Table Figure 146 Management > ARP Table The following table describes the labels in the Static MAC Forwarding screen). 236 ES-2108 Series User's Guide Type This shows whether the MAC address is the learned IP address of the device with corresponding MAC address below. MAC Address This is...
User Guide
Page 251
...Specifications Table 104 Firmware Specifications FEATURE DESCRIPTION Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Administrator User Name admin Default Password 1234 Number of that group; Devices on the Switch Authentication via RADIUS and TACACS+ is also available. With... multiple logical networks. Configurable on a logical network belong to more than one group. the traffic must manually enter the TCP/IP information. ES-2108 Series User's Guide 251 DHCP Relay Use this feature to have the relay DHCP requests to obtain TCP/IP configuration...
...Specifications Table 104 Firmware Specifications FEATURE DESCRIPTION Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Administrator User Name admin Default Password 1234 Number of that group; Devices on the Switch Authentication via RADIUS and TACACS+ is also available. With... multiple logical networks. Configurable on a logical network belong to more than one group. the traffic must manually enter the TCP/IP information. ES-2108 Series User's Guide 251 DHCP Relay Use this feature to have the relay DHCP requests to obtain TCP/IP configuration...
User Guide
Page 252
...across a network. Port Cloning Use the port cloning feature to copy the settings you copy the traffic to a syslog server. 252 ES-2108 Series User's Guide MVR allows one single multicast VLAN to another or all ports to another port or ports. IP Source Guard Use IP ...all ports in order that allows only packets with an external RADIUS server and port security that you configure the TCP/IP parameters manually. Authentication and Accounting The Switch supports authentication and accounting services via RADIUS and TACACS+ AAA servers. Static Route Static routes tell ...
...across a network. Port Cloning Use the port cloning feature to copy the settings you copy the traffic to a syslog server. 252 ES-2108 Series User's Guide MVR allows one single multicast VLAN to another or all ports to another port or ports. IP Source Guard Use IP ...all ports in order that allows only packets with an external RADIUS server and port security that you configure the TCP/IP parameters manually. Authentication and Accounting The Switch supports authentication and accounting services via RADIUS and TACACS+ AAA servers. Static Route Static routes tell ...