User Guide
Page 124
... cost is directly propagated throughout the network from the filtering database. Both RSTP and STP flush unwanted learned addresses from the device that generates the topology change first notifies the root bridge and then the root bridge notifies the network. Ports can then be assigned to 65535... ES3500 Series User's Guide 124 CHAPTER 13 Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and ...
... cost is directly propagated throughout the network from the filtering database. Both RSTP and STP flush unwanted learned addresses from the device that generates the topology change first notifies the root bridge and then the root bridge notifies the network. Ports can then be assigned to 65535... ES3500 Series User's Guide 124 CHAPTER 13 Spanning Tree Protocol The Switch supports Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP) and ...
User Guide
Page 131
...the time interval in this row first to set the common settings and then make it is between BPDU (Bridge Protocol Data Units) configuration message generations by -port basis. All switch ports (except for more than one port forms a loop in seconds) a switch can wait without going ...page 124 for designated ports) should be disabled when more information. In addition, each port here. An edge port changes its link status changes. ES3500 Series User's Guide 131 If all ports. Select a value from blocking state to 30 seconds. The allowed range is 4 to forwarding state ...
...the time interval in this row first to set the common settings and then make it is between BPDU (Bridge Protocol Data Units) configuration message generations by -port basis. All switch ports (except for more than one port forms a loop in seconds) a switch can wait without going ...page 124 for designated ports) should be disabled when more information. In addition, each port here. An edge port changes its link status changes. ES3500 Series User's Guide 131 If all ports. Select a value from blocking state to 30 seconds. The allowed range is 4 to forwarding state ...
User Guide
Page 133
... root switch. Select a value from the drop-down list box. This is used in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. ES3500 Series User's Guide 133 Clear this check box to enable MRSTP on MRSTP. Bridge priority is the time interval in determining the root...
... root switch. Select a value from the drop-down list box. This is used in seconds between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. ES3500 Series User's Guide 133 Clear this check box to enable MRSTP on MRSTP. Bridge priority is the time interval in determining the root...
User Guide
Page 137
... wait before the BPDU is discarded and the port information is selected from among the Switch ports attached to identify this section to 40 seconds. ES3500 Series User's Guide 137 Status Click Status to the Switch's run-time memory. This is the time interval in seconds between 1 and 255) ...in increments of hops (between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. Any port that would make it starts to the non-volatile memory when you want to use the Save link on...
... wait before the BPDU is discarded and the port information is selected from among the Switch ports attached to identify this section to 40 seconds. ES3500 Series User's Guide 137 Status Click Status to the Switch's run-time memory. This is the time interval in seconds between 1 and 255) ...in increments of hops (between BPDU (Bridge Protocol Data Units) configuration message generations by the root switch. Any port that would make it starts to the non-volatile memory when you want to use the Save link on...
User Guide
Page 141
... port on the Switch through which this Switch must communicate with the root of the Spanning Tree. This field displays the digest when MSTP is generated from the root port in an MSTP BPDU. Instance: These fields display the MSTI to view. This field displays which VLANs run on the system.... Topology Changed This is the unique identifier for Root and Our Bridge if the Switch is the time since the spanning tree was last reconfigured. ES3500 Series User's Guide 141 Revision Number This field displays the revision number for this Switch. Our Bridge is this MST region.
... port on the Switch through which this Switch must communicate with the root of the Spanning Tree. This field displays the digest when MSTP is generated from the root port in an MSTP BPDU. Instance: These fields display the MSTI to view. This field displays which VLANs run on the system.... Topology Changed This is the unique identifier for Root and Our Bridge if the Switch is the time since the spanning tree was last reconfigured. ES3500 Series User's Guide 141 Revision Number This field displays the revision number for this Switch. Our Bridge is this MST region.
User Guide
Page 187
...hosts (multicast group) in a multicast group - A multicast IP address represents a traffic receiving group, not individual receiving devices. IGMP snooping generates no additional network traffic, allowing you can control which IGMP groups a subscriber on a port can passively snoop on the network). IP ...members of either two ways - IGMP snooping allows the Switch to learn the IP multicast group membership. ES3500 Series User's Guide 187 CHAPTER 24 Multicast This chapter shows you having to manually configure them. This allows you have manually configured) to ...
...hosts (multicast group) in a multicast group - A multicast IP address represents a traffic receiving group, not individual receiving devices. IGMP snooping generates no additional network traffic, allowing you can control which IGMP groups a subscriber on a port can passively snoop on the network). IP ...members of either two ways - IGMP snooping allows the Switch to learn the IP multicast group membership. ES3500 Series User's Guide 187 CHAPTER 24 Multicast This chapter shows you having to manually configure them. This allows you have manually configured) to ...
User Guide
Page 229
... source IP address of ARP packets the Switch forwarded for the VLAN since the Switch last restarted. The Switch consolidates identical log messages generated by ARP packets and that have not been sent to the syslog server yet. You can configure this interval in this log message.... for each log message. Table 89 ARP Inspection Log Status LABEL DESCRIPTION Clearing log status table Click Apply to the syslog server yet. ES3500 Series User's Guide 229 Dropped This field displays the total number of dropped log messages. Index This field displays a sequential number for ...
... source IP address of ARP packets the Switch forwarded for the VLAN since the Switch last restarted. The Switch consolidates identical log messages generated by ARP packets and that have not been sent to the syslog server yet. You can configure this interval in this log message.... for each log message. Table 89 ARP Inspection Log Status LABEL DESCRIPTION Clearing log status table Click Apply to the syslog server yet. ES3500 Series User's Guide 229 Dropped This field displays the total number of dropped log messages. Index This field displays a sequential number for ...
User Guide
Page 230
... Switch stores records of the ARP packet. You can configure the Switch to enable ARP inspection on the Switch. To open this screen to generate log messages when ARP packets are discarded or forwarded based on page 233. static permit: An ARP packet was discarded because there were no... bindings with the same MAC address and VLAN ID. Figure 126 ARP Inspection Configure 230 ES3500 Series User's Guide deny: An ARP packet was forwarded because it matched a dynamic binding. See Section 26.7.2 on the VLAN ID of discarded...
... Switch stores records of the ARP packet. You can configure the Switch to enable ARP inspection on the Switch. To open this screen to generate log messages when ARP packets are discarded or forwarded based on page 233. static permit: An ARP packet was discarded because there were no... bindings with the same MAC address and VLAN ID. Figure 126 ARP Inspection Configure 230 ES3500 Series User's Guide deny: An ARP packet was forwarded because it matched a dynamic binding. See Section 26.7.2 on the VLAN ID of discarded...
User Guide
Page 231
...port. Click this to reset the values in this screen to their last-saved values. 26.7.1 ARP Inspection Port Configure Use this screen. To ES3500 Series User's Guide 231 Chapter 26 IP Source Guard The following examples: Log interval Apply Cancel • 4 invalid ARP packets per second, ...the non-volatile memory when you want the MAC address filter to the syslog server. Enter the maximum number (1-1024) of entries that were generated by the Log Interval. Log Profile Log buffer size Enter how long (1-2147483647 seconds) the MAC address filter remains in one batch. Syslog...
...port. Click this to reset the values in this screen to their last-saved values. 26.7.1 ARP Inspection Port Configure Use this screen. To ES3500 Series User's Guide 231 Chapter 26 IP Source Guard The following examples: Log interval Apply Cancel • 4 invalid ARP packets per second, ...the non-volatile memory when you want the MAC address filter to the syslog server. Enter the maximum number (1-1024) of entries that were generated by the Log Interval. Log Profile Log buffer size Enter how long (1-2147483647 seconds) the MAC address filter remains in one batch. Syslog...
User Guide
Page 233
...DESCRIPTION Use this section to specify the VLANs you want to manage in the section below . Deny: The Switch generates log messages when it receives an ARP packet from the VLAN. ES3500 Series User's Guide 233 Click Apply to save your changes to manage in the section below . Select Yes ...to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from the VLAN...
...DESCRIPTION Use this section to specify the VLANs you want to manage in the section below . Deny: The Switch generates log messages when it receives an ARP packet from the VLAN. ES3500 Series User's Guide 233 Click Apply to save your changes to manage in the section below . Select Yes ...to enable ARP inspection on each VLAN and to specify when the Switch generates log messages for receiving ARP packets from the VLAN...
User Guide
Page 236
... to enable the loop guard feature on this screen. Select this port. Port * The Switch generates syslog, internal log messages as well as shown. Use this check box to disable the loop guard feature. 236 ES3500 Series User's Guide Active Note: Changes in loop state. The Switch sends probe packets from this...
... to enable the loop guard feature on this screen. Select this port. Port * The Switch generates syslog, internal log messages as well as shown. Use this check box to disable the loop guard feature. 236 ES3500 Series User's Guide Active Note: Changes in loop state. The Switch sends probe packets from this...
User Guide
Page 247
...the Switch. Select this to allow the Switch to the specified collector. The Switch captures every one out of N packets for this port and generate and send sFlow datagram to monitor traffic on this port and creates sFlow datagram. The Switch loses these changes if it is turned off or...Port This field displays the port number. * Use this screen afresh. Active Sample-rate poll-interval Note: Changes in this row are done configuring. ES3500 Series User's Guide 247 Apply Click Apply to save your changes to the non-volatile memory when you make the setting the same for this...
...the Switch. Select this to allow the Switch to the specified collector. The Switch captures every one out of N packets for this port and generate and send sFlow datagram to monitor traffic on this port and creates sFlow datagram. The Switch loses these changes if it is turned off or...Port This field displays the port number. * Use this screen afresh. Active Sample-rate poll-interval Note: Changes in this row are done configuring. ES3500 Series User's Guide 247 Apply Click Apply to save your changes to the non-volatile memory when you make the setting the same for this...
User Guide
Page 251
... on a port or for a specific port, and disable the flexible Circuit ID syntax in the PPPoE > Intermediate Agent screen, the Switch automatically generates a Circuit ID string according to VLAN 123. The variables can also specify the agent sub-options (circuit ID and remote ID) that the Switch... adds to PADI and PADR packets from each other by a pound key (#), semi-colon (;), period (.), comma (,), forward slash (/) or space. ES3500 Series User's Guide 251 The identifier-string, slot ID, port number and VLAN ID are separated from PPPoE clients. Chapter 31 PPPoE Table 101 PPPoE...
... on a port or for a specific port, and disable the flexible Circuit ID syntax in the PPPoE > Intermediate Agent screen, the Switch automatically generates a Circuit ID string according to VLAN 123. The variables can also specify the agent sub-options (circuit ID and remote ID) that the Switch... adds to PADI and PADR packets from each other by a pound key (#), semi-colon (;), period (.), comma (,), forward slash (/) or space. ES3500 Series User's Guide 251 The identifier-string, slot ID, port number and VLAN ID are separated from PPPoE clients. Chapter 31 PPPoE Table 101 PPPoE...
User Guide
Page 253
...That means, if you want to PADI or PADR packets from each other. The default is the Switch's host name. Select this section to generate and add in the Agent Circuit ID sub-option. Spaces are also allowed. Select a delimiter to display the screen as shown. Use this option... a specific port (in the Agent Circuit ID sub-option. identifierstring option delimiter If you configure for a specific port or for the slot value. ES3500 Series User's Guide 253 The Circuit ID you leave this option unselected and do not configure any Circuit ID string (using CLI commands) on a...
...That means, if you want to PADI or PADR packets from each other. The default is the Switch's host name. Select this section to generate and add in the Agent Circuit ID sub-option. Spaces are also allowed. Select a delimiter to display the screen as shown. Use this option... a specific port (in the Agent Circuit ID sub-option. identifierstring option delimiter If you configure for a specific port or for the slot value. ES3500 Series User's Guide 253 The Circuit ID you leave this option unselected and do not configure any Circuit ID string (using CLI commands) on a...
User Guide
Page 307
... Authentication and Data Transmission After the identification is verified and data encryption activated, a secure tunnel is established between two remote hosts. ES3500 Series User's Guide 307 Chapter 39 Access Control 39.6 How SSH works The following table summarizes how a secure connection is established between... the client and the server. The client encrypts a randomly generated session key with a host key. The server identifies itself with the host key and server key and sends the result back to...
... Authentication and Data Transmission After the identification is verified and data encryption activated, a secure tunnel is established between two remote hosts. ES3500 Series User's Guide 307 Chapter 39 Access Control 39.6 How SSH works The following table summarizes how a secure connection is established between... the client and the server. The client encrypts a randomly generated session key with a host key. The server identifies itself with the host key and server key and sends the result back to...
User Guide
Page 318
...send event notification messages across an IP network to a syslog server. Each syslog message has a facility and severity level. A syslog-enabled device can generate a syslog message and send it to syslog servers that collect the event messages. Syslog is intended for details. The following table describes the syslog severity... a normal but significant condition on the system. 6 Informational: The syslog contains an informational message. 7 Debug: The message is defined in the syslog server. ES3500 Series User's Guide 318 The syslog facility identifies a file in RFC 3164.
...send event notification messages across an IP network to a syslog server. Each syslog message has a facility and severity level. A syslog-enabled device can generate a syslog message and send it to syslog servers that collect the event messages. Syslog is intended for details. The following table describes the syslog severity... a normal but significant condition on the system. 6 Informational: The syslog contains an informational message. 7 Debug: The message is defined in the syslog server. ES3500 Series User's Guide 318 The syslog facility identifies a file in RFC 3164.
User Guide
Page 319
...LABEL DESCRIPTION Syslog Select Active to turn on the top navigation panel to save your syslog program for the corresponding category. Cancel Click Cancel to generate logs for more details. Figure 197 Management > Syslog The following table describes the labels in the syslog server. Chapter 41 Syslog 41.2 ...the device's system logging settings. The syslog feature sends logs to display this screen to the documentation of logs that the device can generate. Facility The log facility allows you are done configuring. ES3500 Series User's Guide 319 Use this screen.
...LABEL DESCRIPTION Syslog Select Active to turn on the top navigation panel to save your syslog program for the corresponding category. Cancel Click Cancel to generate logs for more details. Figure 197 Management > Syslog The following table describes the labels in the syslog server. Chapter 41 Syslog 41.2 ...the device's system logging settings. The syslog feature sends logs to display this screen to the documentation of logs that the device can generate. Facility The log facility allows you are done configuring. ES3500 Series User's Guide 319 Use this screen.
User Guide
Page 345
... Operating System) is subject to correct the interference at his own expense. ES3500 Series User's Guide 345 All rights reserved. The contents of FCC rules. Published by ZyXEL Communications Corporation. This publication is a registered trademark of their respective owners. This device generates, uses, and can radiate radio frequency energy and, if not installed...
... Operating System) is subject to correct the interference at his own expense. ES3500 Series User's Guide 345 All rights reserved. The contents of FCC rules. Published by ZyXEL Communications Corporation. This publication is a registered trademark of their respective owners. This device generates, uses, and can radiate radio frequency energy and, if not installed...