User Guide
Page 12
...Connector ...47 3.3 LEDs ...47 Part III: Web Configurator 49 Chapter 4 The Web Configurator ...51 4.1 Introduction ...51 4.2 System Login ...51 4.3 The Status Screen ...52 4.3.1 Change Your Password 58 4.4 Saving Your Configuration 58 4.5 Switch Lockout ...59 4.6 Resetting the Switch ...59 4.6.1 Reload the Configuration File 59 4.7 Logging Out of the Web Configurator 60 4.8 Help...Status and Port Statistics 67 6.1 Overview ...67 6.2 Port Status Summary ...67 6.2.1 Status: Port Details 68 Chapter 7 Basic Setting ...73 7.1 Overview ...73 7.2 System Information ...73 12 ES-3148 User's Guide
...Connector ...47 3.3 LEDs ...47 Part III: Web Configurator 49 Chapter 4 The Web Configurator ...51 4.1 Introduction ...51 4.2 System Login ...51 4.3 The Status Screen ...52 4.3.1 Change Your Password 58 4.4 Saving Your Configuration 58 4.5 Switch Lockout ...59 4.6 Resetting the Switch ...59 4.6.1 Reload the Configuration File 59 4.7 Logging Out of the Web Configurator 60 4.8 Help...Status and Port Statistics 67 6.1 Overview ...67 6.2 Port Status Summary ...67 6.2.1 Status: Port Details 68 Chapter 7 Basic Setting ...73 7.1 Overview ...73 7.2 System Information ...73 12 ES-3148 User's Guide
User Guide
Page 21
... 45 Figure 14 Rear Panel ...46 Figure 15 Web Configurator: Login ...52 Figure 16 Web Configurator Home Screen (Status 52 Figure 17 Change Administrator Login Password 58 Figure 18 Resetting the Switch: Via the Console Port 60 Figure 19 Web Configurator: Logout Screen 60 Figure 20 Initial Setup Network Example: VLAN... Based VLAN Application Example 92 Figure 37 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN 93 Figure 38 Protocol Based VLAN Application Example 95 ES-3148 User's Guide 21
... 45 Figure 14 Rear Panel ...46 Figure 15 Web Configurator: Login ...52 Figure 16 Web Configurator Home Screen (Status 52 Figure 17 Change Administrator Login Password 58 Figure 18 Resetting the Switch: Via the Console Port 60 Figure 19 Web Configurator: Logout Screen 60 Figure 20 Initial Setup Network Example: VLAN... Based VLAN Application Example 92 Figure 37 Advanced Application > VLAN > VLAN Port Setting > Subnet Based VLAN 93 Figure 38 Protocol Based VLAN Application Example 95 ES-3148 User's Guide 21
User Guide
Page 36
... to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it ). If you forget your last configuration. 36 ES-3148 User's Guide See Section 30.3 on page 51. • Command Line Interface. Chapter 1 Introducing the Switch Figure ...the following things regularly to make sure you would not have to reset the Switch to its factory default settings. You could simply restore your password, you will have to manage the Switch. • Web Configurator. See Section 29.8 on page 243. • SNMP. The device ...
... to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it ). If you forget your last configuration. 36 ES-3148 User's Guide See Section 30.3 on page 51. • Command Line Interface. Chapter 1 Introducing the Switch Figure ...the following things regularly to make sure you would not have to reset the Switch to its factory default settings. You could simply restore your password, you will have to manage the Switch. • Web Configurator. See Section 29.8 on page 243. • SNMP. The device ...
User Guide
Page 51
... is 1234. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The default username is admin and associated default password is enabled by default in the General Setup screen. ES-3148 User's Guide 51 Press [ENTER]. 3 The login screen appears. In order to use the web configurator you have not configured...
... is 1234. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The default username is admin and associated default password is enabled by default in the General Setup screen. ES-3148 User's Guide 51 Press [ENTER]. 3 The login screen appears. In order to use the web configurator you have not configured...
User Guide
Page 57
... 802.1x port authentication as well as reboot the system. Port Authentication This link takes you to a screen where you can change the system login password and configure SNMP and remote management. The external servers can activate MAC address learning and set up broadcast filters. Access Control This link takes you... Service) or TACACS+ (Terminal Access Controller Access-Control System Plus). Queuing Method This link takes you to a screen where you can configure the DHCP settings. ES-3148 User's Guide 57
... 802.1x port authentication as well as reboot the system. Port Authentication This link takes you to a screen where you can change the system login password and configure SNMP and remote management. The external servers can activate MAC address learning and set up broadcast filters. Access Control This link takes you... Service) or TACACS+ (Terminal Access Controller Access-Control System Plus). Queuing Method This link takes you to a screen where you can configure the DHCP settings. ES-3148 User's Guide 57
User Guide
Page 58
... devices attached to what ports and VLAN IDs. MAC Table This link takes you to a screen where you change the default administrator password. Settings in the run -time memory. Chapter 4 The Web Configurator Table 6 Navigation Panel Links (continued) LINK DESCRIPTION Syslog This ... Access Control > Logins to the Switch's storage that remains even if the Switch's power is turned off . 58 ES-3148 User's Guide Figure 17 Change Administrator Login Password 4.4 Saving Your Configuration When you can view the MAC addresses (and types) of the web configurator to save your...
... devices attached to what ports and VLAN IDs. MAC Table This link takes you to a screen where you change the default administrator password. Settings in the run -time memory. Chapter 4 The Web Configurator Table 6 Navigation Panel Links (continued) LINK DESCRIPTION Syslog This ... Access Control > Logins to the Switch's storage that remains even if the Switch's power is turned off . 58 ES-3148 User's Guide Figure 17 Change Administrator Login Password 4.4 Saving Your Configuration When you can view the MAC addresses (and types) of the web configurator to save your...
User Guide
Page 59
...Switch's power, you will lose all services from the Switch or forget the administrator password, you will also be reset to the default of -band management (via the management port) to 192.168.1.1. ES-3148 User's Guide 59 This means that you will need to reload the factory-default ...no parity, one of the Switch. 3 Filter all traffic to the CPU port. 4 Disable all ports. 5 Misconfigure the text configuration file. 6 Forget the password and/or IP address. 7 Prevent all previous configurations and the speed of the console port will be reset to "1234" and the IP address to...
...Switch's power, you will lose all services from the Switch or forget the administrator password, you will also be reset to the default of -band management (via the management port) to 192.168.1.1. ES-3148 User's Guide 59 This means that you will need to reload the factory-default ...no parity, one of the Switch. 3 Filter all traffic to the CPU port. 4 Disable all ports. 5 Misconfigure the text configuration file. 6 Forget the password and/or IP address. 7 Prevent all previous configurations and the speed of the console port will be reset to "1234" and the IP address to...
User Guide
Page 60
... to enter Debug Mode within 3 seconds Enter Debug Mode Switch> atlc Starting XMODEM upload (CRC mode).... Figure 19 Web Configurator: Logout Screen 60 ES-3148 User's Guide Chapter 4 The Web Configurator 3 When you see the message "Press any key to log in a screen to enter debug mode within...any key to enter debug mode. 4 Type atlc after you log out. This is now reinitialized with a default configuration file including the default password of "1234". 4.7 Logging Out of the Web Configurator Click Logout in with your terminal. 6 After a configuration file upload, type atgo to ...
... to enter Debug Mode within 3 seconds Enter Debug Mode Switch> atlc Starting XMODEM upload (CRC mode).... Figure 19 Web Configurator: Logout Screen 60 ES-3148 User's Guide Chapter 4 The Web Configurator 3 When you see the message "Press any key to log in a screen to enter debug mode within...any key to enter debug mode. 4 Type atlc after you log out. This is now reinitialized with a default configuration file including the default password of "1234". 4.7 Logging Out of the Web Configurator Click Logout in with your terminal. 6 After a configuration file upload, type atgo to ...
User Guide
Page 139
...client for more information on the MAC address and password of writing, IEEE 802.1x is denied. 16.1.1 IEEE 802.1x Authentication The following methods for port authentication: • IEEE 802.1x2 - At the time of the client. ES-3148 User's Guide 139 If a user fails to ...authenticate via the IEEE 802.1x method, then access to the port is not supported by the user. • MAC - An authentication server validates access to a port based on a username and password provided by all operating...
...client for more information on the MAC address and password of writing, IEEE 802.1x is denied. 16.1.1 IEEE 802.1x Authentication The following methods for port authentication: • IEEE 802.1x2 - At the time of the client. ES-3148 User's Guide 139 If a user fails to ...authenticate via the IEEE 802.1x method, then access to the port is not supported by the user. • MAC - An authentication server validates access to a port based on a username and password provided by all operating...
User Guide
Page 140
... Credentials 4 Authentication Request 5 Authentication Reply Session Granted/Denied 16.1.2 MAC Authentication MAC authentication works in a very similar way to a port on the Switch along with a password configured specifically for login credentials. Figure 67 MAC Authentication Process 140 1 New Connection 2 Authentication Request 3 Authentication Reply Session Granted/Denied ES-3148 User's Guide
... Credentials 4 Authentication Request 5 Authentication Reply Session Granted/Denied 16.1.2 MAC Authentication MAC authentication works in a very similar way to a port on the Switch along with a password configured specifically for login credentials. Figure 67 MAC Authentication Process 140 1 New Connection 2 Authentication Request 3 Authentication Reply Session Granted/Denied ES-3148 User's Guide
User Guide
Page 142
... settings and then make some settings the same for all the ports as soon as shown. 142 ES-3148 User's Guide Reauthentication Specify if a subscriber has to periodically re-enter his or her username and password to stay connected to the port. Reauthentication Specify how often a client has to re-enter his ...or her username and password to stay Timer connected to the port. Apply Click Apply to save your changes to activate MAC authentication. Note: You must first allow 802.1x...
... settings and then make some settings the same for all the ports as soon as shown. 142 ES-3148 User's Guide Reauthentication Specify if a subscriber has to periodically re-enter his or her username and password to stay connected to the port. Reauthentication Specify how often a client has to re-enter his ...or her username and password to stay Timer connected to the port. Apply Click Apply to save your changes to activate MAC authentication. Note: You must first allow 802.1x...
User Guide
Page 143
... to the RADIUS server. Note: If the Aging Time in the MAC address table until it is forwarded to 32 printable ASCII characters. ES-3148 User's Guide 143 If you specify 0 for authentication with the RADIUS server. You can enter up to 32 printable ASCII characters. The ... Application > Port Authentication > MAC Authentication LABEL DESCRIPTION Active Select this entry will not be deleted from the MAC address table. Type the password the Switch sends along with a status of the client is cleared. Maximum time is appended to all MAC addresses sent to permit MAC ...
... to the RADIUS server. Note: If the Aging Time in the MAC address table until it is forwarded to 32 printable ASCII characters. ES-3148 User's Guide 143 If you specify 0 for authentication with the RADIUS server. You can enter up to 32 printable ASCII characters. The ... Application > Port Authentication > MAC Authentication LABEL DESCRIPTION Active Select this entry will not be deleted from the MAC address table. Type the password the Switch sends along with a status of the client is cleared. Maximum time is appended to all MAC addresses sent to permit MAC ...
User Guide
Page 186
Table 62 RADIUS vs TACACS+ RADIUS TACACS+ Transport Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol) Encryption Encrypts the password sent for RADIUS attributes utilized by means of an external server instead of (or in addition to) an internal device user database...TACACS+ or both on the Switch. Click on the RADIUS Server Setup link in the navigation panel to display the screen as shown. 186 ES-3148 User's Guide The following table describes some key differences between the client (the Switch) and the TACACS server is limited to the memory ...
Table 62 RADIUS vs TACACS+ RADIUS TACACS+ Transport Protocol UDP (User Datagram Protocol) TCP (Transmission Control Protocol) Encryption Encrypts the password sent for RADIUS attributes utilized by means of an external server instead of (or in addition to) an internal device user database...TACACS+ or both on the Switch. Click on the RADIUS Server Setup link in the navigation panel to display the screen as shown. 186 ES-3148 User's Guide The following table describes some key differences between the client (the Switch) and the TACACS server is limited to the memory ...
User Guide
Page 187
...the Switch waits for an authentication request response from the first RADIUS server for 15 seconds and then tries the second RADIUS server. ES-3148 User's Guide 187 Table 63 Advanced Application > Auth and Acct > RADIUS Server Setup LABEL DESCRIPTION Authentication Server Use this screen. Select...to alternate between the two RADIUS servers. If you are using index-priority for a response from the RADIUS server. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be the same on the external RADIUS server and the Switch. This key is ...
...the Switch waits for an authentication request response from the first RADIUS server for 15 seconds and then tries the second RADIUS server. ES-3148 User's Guide 187 Table 63 Advanced Application > Auth and Acct > RADIUS Server Setup LABEL DESCRIPTION Authentication Server Use this screen. Select...to alternate between the two RADIUS servers. If you are using index-priority for a response from the RADIUS server. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be the same on the external RADIUS server and the Switch. This key is ...
User Guide
Page 188
.... Click on the external RADIUS accounting server and the Switch. Index This is not sent over the network. Shared Secret Specify a password (up to 32 alphanumeric characters) as shown. 188 ES-3148 User's Guide Timeout Specify the amount of an external RADIUS accounting server in the Authentication and Accounting screen to view the...
.... Click on the external RADIUS accounting server and the Switch. Index This is not sent over the network. Shared Secret Specify a password (up to 32 alphanumeric characters) as shown. 188 ES-3148 User's Guide Timeout Specify the amount of an external RADIUS accounting server in the Authentication and Accounting screen to view the...
User Guide
Page 190
...are done configuring. Timeout Specify the amount of a TACACS+ accounting server is deleted when you click Apply. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ accounting server and the Switch. This... 64 Advanced Application > Auth and Acct > TACACS+ Server Setup (continued) LABEL DESCRIPTION Shared Secret Specify a password (up to 32 alphanumeric characters) as shown. 190 ES-3148 User's Guide The Switch loses these changes if it is not sent over the network. Accounting Server Use this...
...are done configuring. Timeout Specify the amount of a TACACS+ accounting server is deleted when you click Apply. Shared Secret Specify a password (up to 32 alphanumeric characters) as the key to be shared between the external TACACS+ accounting server and the Switch. This... 64 Advanced Application > Auth and Acct > TACACS+ Server Setup (continued) LABEL DESCRIPTION Shared Secret Specify a password (up to 32 alphanumeric characters) as shown. 190 ES-3148 User's Guide The Switch loses these changes if it is not sent over the network. Accounting Server Use this...
User Guide
Page 195
... the User-Name attribute is $enab#$, where # is the privilege level (1~14) User-Password NAS-Identifier NAS-IP-Address 23.3.1.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 23.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name...+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time ES-3148 User's Guide 195 Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator 23.3.2 Attributes Used for Authenticating Privilege Access User-Name - the ...
... the User-Name attribute is $enab#$, where # is the privilege level (1~14) User-Password NAS-Identifier NAS-IP-Address 23.3.1.2 Attributes Used to Login Users User-Name User-Password NAS-Identifier NAS-IP-Address 23.3.1.3 Attributes Used by the IEEE 802.1x Authentication User-Name...+8-digit sequential number, for example, 2007041917210300000001. (date: 2007/04/19, time: 17:21:03, serial number: 00000001) Acct-Delay-Time ES-3148 User's Guide 195 Calling-Station-Id Frame-MTU EAP-Message State Message-Authenticator 23.3.2 Attributes Used for Authenticating Privilege Access User-Name - the ...
User Guide
Page 243
...device. 29.8.2 FTP Command Line Procedure 1 Launch the FTP client on your Switch configurations, system-related data (including the default password), the error log and the trace log. Chapter 29 Maintenance 29.8 FTP Command Line This section shows some examples of both ...File config This is the system firmware and has a "bin" filename extension. ZyNOS (ZyXEL Network Operating System sometimes referred to or downloading files from the Switch using FTP commands. ES-3148 User's Guide 243 Uploading the config file replaces the specified configuration file system, including your...
...device. 29.8.2 FTP Command Line Procedure 1 Launch the FTP client on your Switch configurations, system-related data (including the default password), the error log and the trace log. Chapter 29 Maintenance 29.8 FTP Command Line This section shows some examples of both ...File config This is the system firmware and has a "bin" filename extension. ZyNOS (ZyXEL Network Operating System sometimes referred to or downloading files from the Switch using FTP commands. ES-3148 User's Guide 243 Uploading the config file replaces the specified configuration file system, including your...
User Guide
Page 244
... 29.8.4 FTP Restrictions FTP will not work only if your computer and renames it to "ras". and password is automatically supplied to login. The server requires a unique User ID and Password to the server for anonymous access. Chapter 29 Maintenance 5 Enter bin to set transfer mode to binary. ...on your computer (config.cfg) to the Switch and renames it does not match, the Switch will disallow the FTP session. 244 ES-3148 User's Guide Normal. Configuration and firmware files should be transferred in binary mode. Likewise get config config.cfg transfers the configuration file on...
... 29.8.4 FTP Restrictions FTP will not work only if your computer and renames it to "ras". and password is automatically supplied to login. The server requires a unique User ID and Password to the server for anonymous access. Chapter 29 Maintenance 5 Enter bin to set transfer mode to binary. ...on your computer (config.cfg) to the Switch and renames it does not match, the Switch will disallow the FTP session. 244 ES-3148 User's Guide Normal. Configuration and firmware files should be transferred in binary mode. Likewise get config config.cfg transfers the configuration file on...
User Guide
Page 245
Figure 138 Management > Access Control ES-3148 User's Guide 245 See the CLI Reference Guide for more information on disabling multilogin. 30.2 The Access Control Main Screen Click Management > Access Control in .... Table 96 Access Control Overview Console Port SSH Telnet FTP Web SNMP One session Share up to five Web sessions (five different user names and passwords) and/or limitless SNMP access control sessions are allowed one session each, Telnet and SSH share four sessions, up to four sessions One session Up...
Figure 138 Management > Access Control ES-3148 User's Guide 245 See the CLI Reference Guide for more information on disabling multilogin. 30.2 The Access Control Main Screen Click Management > Access Control in .... Table 96 Access Control Overview Console Port SSH Telnet FTP Web SNMP One session Share up to five Web sessions (five different user names and passwords) and/or limitless SNMP access control sessions are allowed one session each, Telnet and SSH share four sessions, up to four sessions One session Up...