ES-2008 - Network switch ZYXEL - Free user manual and instructions

USER MANUAL ES-2008 ZYXEL

Dimension ES-2008 Ethernet Switch User's Guide Version 1.02 March 2003 ZyXEL Unleash Networking Power

Dimension ES-2008 Ethernet Switch Copyright Copyright ©2003 by ZyXEL Communications Corporation The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patents’ rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Trademarks Trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners. ïl Copyright

Dimension ES-2008 Ethernet Switch ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re- manufactured functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. NOTE Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of character to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization (RMA) number. Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. AIl repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country. Online Registration Register online at www.zyxel.com.for free future product updates and information. ZyXEL Limited Warranty ïii

Dimension ES-2008 Ethernet Switch Information for Canadian Users The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective operation and safety requirements. The Industry Canada does not guarantee that the equipment will operate to a user's satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommunications company. The equipment must also be installed using an acceptable method of connection. In some cases, the company's inside wiring associated with a single line individual service may be extended by means of a certified connector assembly. The customer should be aware that compliance with the above conditions may not prevent degradation of service in some situations. Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give the telecommunications company cause to request the user to disconnect the equipment. For their own protection, users should ensure that the electrical ground connections of the power utility, telephone lines, and internal metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural areas. Caution Users should not attempt to make such connections themselves, but should contact the appropriate electrical inspection authority, or electrician, as appropriate. Note This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the radio interference regulations of Industry. iv Information For Canadian Users

Dimension ES-2008 Ethernet Switch Interference Statements and Warnings FCC Interference Statement This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference. (2) This device must accept any interference received, including interference that may cause undesired operations. FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 ofthe FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. CE Mark Warning: This is a class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures. Taiwanese BCIQ A Warning: ÉSRRS ÉRPARISRUE OR MIS RRRS,

Certifications Refer to the product page at www.zyxel.com. Interference Statements and Warnings v

Dimension ES-2008 Ethernet Switch Table of Contents Interference Statements and Warnings Customer Support List of Figures List of Table: Preface ….

Chapter 1 Getting to Know Your ES-200:

11 Features. 12 Management Feature: 13 Management Methods 14 Applications

Chapter 2 Hardware Description and Installation

2.1 Hardware Installatio:

2.2 Hardware Connections.

2.3 Front Panel LED:

2.5 Tuning On the Switch.

Chapter 4 Basic Switch Configuration .

4.1 Setting the IP Address of the Switcl

42 Changing System Username and Password 43 Resetting the Switch 44 Rebooting the Switch

Chapter 5 Advanced Switch Configuration

Chapter 7 Port Trunking 7-1

7.1 Introduction 7-1

72 Configuring Port Trunking 7-2 73 Viewing Static Trunk Group Informatio 74 State Activity. vil Table of Contents

Dimension ES-2008 Ethernet Switch

Chapter 8 Filter and Security Setup

16.5 LACP Configuration.

Chapter 17 Status and Counters .

17.1 Status and Counters …

Chapter 18 Firmware and Configuration File Maintenance

18.1 Filename Convention

18.2 Firmware Upgrade

18.3 Configuration File Maintenance

Chapter 19 Troubleshooting..

19.1 Using LEDs to Diagnose Problems

194 Web Configurator …

19.5 Login Username and P.

19.6 Improper Network Cabling and Topology.

Appendix A Setting up Your Computer”’s IP Address Appendix B.. IP Subnetting . Appendix C Product Specifications. Index x Table of Contents

Dimension ES-2008 Ethernet Switch Preface Congratulations on your purchase of the ES-2008 Ethernet Switch. About The ES-2008 Series Switches The ES-2008 switch allows you to easily configure and manage your network via a web browser. Just click your mouse instead of typing cryptic command strings. Moreover, the ES-2008 can also be managed via SNMP. There are four ES-2008 Ethernet switch models. MODEL DESCRIPTION ES-2008 Eight port 10/100M Ethernet switch. ES-2008-SC Eight port 10/100M Ethernet switch with multi-mode fiber port. ES-2008-SC30 Eight port 10/100M Ethernet switch with single-mode fiber port. ES-2008-GTP Eight port 10/100M Ethernet switch with one gigabit port. About this User’s Guide This manual is designed to guide you through the configuration of your ES switch for its various applications. All ES models are discussed together in this guide. Unless specified, images of the ES-2008-SC are used throughout this document. Images that directly relate to the other two models are used when referring to the key differences between the models. General Syntax Conventions + “Enter” means for you to type one or more characters and press the carriage return. “Select” or “Choose” means for you to use one from the predefined choices. + The SMT menu titles and labels are in Bold Times New Roman font. Predefined field choices are in Bold Arial font. Command and arrow keys are enclosed in square brackets. [ENTER] means the Enter, or carriage return key; [ESC] means the Escape key and [SPACE BAR] means the Space Bar. + For brevity’s sake, we will use “e.g.” as shorthand for “for instance”, and “.e.” as shorthand for “that is” or “in other words” throughout this manual. + The Dimension ES-2008 Ethernet Switch models will be referred to as the ES- 2008 or simply as “the switch” in this manual. Glossary www.zyxel.com contains an online glossary of networking terms. xvi Preface

Getting Started Part I: Getting Started Part I covers Getting to Know Your Switch, Hardware Installation, and Introducing the Web Configurator.

Getting to Know Your ES-2008 The ES-2008 is a multi-port switch that can be used to build high-performance switched workgroup networks. This switch uses a store-and-forward switching scheme, in which incoming data frames are first stored in buffer memory and checked for errors before being forwarded; thus offering minimum delay for high-speed networking. It is the ideal switch for small-to-medium sized enterprise workgroups, departments or backbone computing environments. The embedded web configurator makes managing and configuring the ES-2008 easy, enabling system management as well as individual port control and monitoring. In addition, the ES-2008 can be managed via Telnet, the console port, or SNMP. 11 Features > Conforms to IEEE 802.3, 802.3u, and 802.3x Ethernet Standards > IEEE802.3ab Gigabit copper for ES models with a gigabit port. > 8 auto-negotiating (100M Full/half-duplex, or 10M Full/half-duplex mode) Ethernet RJ-45 ports > Auto MDI/MDIX (auto-sensing) Ethernet ports > One fixed 100Mbps Fiber (SC/SC single- mode) or gigabit port (not available on all switch models) > One console port for local configuration > Full duplex and half duplex mode flow control > Store-and-Forward switching scheme > 2 megabits memory buffer > Automatic MAC address learning; MAC address table can contain up to 8,000 entries > Performs non-blocking full wire speed (switch fabric bandwidth 3.8 Gbps) switching > PWR, 100M, LK/ACT and FD/COL LEDs > Ten-inch desktop size design

1.2 Management Features

> Web-based management > SNMP network management Getting to Know Your ES-2008 1-1

Dimension ES-2008 Ethernet Switch > Supports port-based and tagged VLAN Groups > Port Trunking and IEEE 802.3ad LACP >. MIB IT (RFC1213) supported > IP multicast > IGMP snooping > Quality of Service (QoS) > Supports port mirror, broadcast filter, static MAC address, port security and GVRP > Configure/Manage individual ports > Enable/Disable individual ports

1.3 Management Methods

The switch supports the following management methods: e Local console management e Telnet management e Web configurator + SNMP network management

1.3.1 Console and Telnet Management

Managing the switch through the console port requires a direct connection between the computer and the switch using an RS-232 console cable. You can also telnet into the switch from any computer on your network (provided you know the IP address of the switch).

1.3.2 Web Configurator

The switch comes with an embedded HTML web configurator. It offers advanced management features and allows you to manage the switch from anywhere on the network through Microsoft Internet Explorer (version 5.0 or later).

The switch is ideally suited as a workgroup switch or a bridge for large network segmentation. For ES-2008 models that come with a fiber port, you can also use the fiber port to connect to other network switches. The distance between two switches via fiber cable can be up to 2 Km (multi-mode) or 30 Km (single-mode). 1-2 Getting to Know Your ES-2008

The switch can be used as a standalone switch to which computers, servers and printer servers are directly connected to form a small workgroup. Figure 1-1 Standalone Workgroup Example

1.4.2 Bridging Application

For enterprise networks where large data broadcasts are constantly processed, this switch is an ideal solution for department users to connect to the corporate backbone. In the next illustration, two Ethernet switches with attached computers, print server and local server, are all connected to the switch. AIl devices in this network can communicate with each other through the switch and also access the server. Getting to Know Your ES-2008 1-3

VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network belong to one group. A station can belong to more than one group. With VLAN, a station cannot directly talk to or hear from stations that are not in the same group(s); the traffic must first go through a router. As well as security, VLANS also increase network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, broadcasts are confined to the members of the VLAN. Note that VLANS are unidirectional - they only govern outgoing traffic. Port-based VLANSs are VLANS where the packet forwarding decision is based on the destination MAC address and its associated port. 1-4 Getting to Know Your ES-2008

Hardware Description and Installation This chapter describes the switch hardware and installation

2.1 Hardware Installation

The switch is suitable for an office environment where it can be placed on a desktop. Step 1. Make sure the switch is clean and dry. Step2. Attach the supply rubber feet to the bottom of the switch. Step 3. Set the switch on a smooth and sturdy flat space strong enough to support the weight of the switch and the connected cables. Make sure there is a power outlet nearby. Step 4. Make sure there is enough clearance around the switch to allow air circulation and the attachment of cables and the power cord. Do not block the ventilation holes. Leave space between switches when stacking.

2.2 Hardware Connections

The front panel of the switch consists of eight auto-sensing, auto-negotiating 10/100Base- TX Ethernet RJ-45 ports and/or one 100Base-FX fiber or gigabit port. The LEDs are also located on the front panel of the switch. Figure 2-1 ES-2008 Hardware Description and Installation 2-1

Dimension ES-2008 Ethernet Switch Figure 2-2 ES-2008 with Fiber Port Figure 2-3 ES-2008 with Gigabit Port

2.2.2 The Ethernet Connections

Auto-Sensing 10/100Base-TX RJ-45 Ports (Auto MDI/MDIX) The ES-2008 has eight auto-negotiating, auto-sensing 10/100Base-TX Ethernet RJ-45 ports. AIl these ports support auto-sensing, a built-in function that automatically recognizes the type (straight/crossover) of the attached cable. This feature effectively removes all wiring troubles caused by a cable type mismatch. Although a crossover cable is usually required to cascade a switch to another switch, auto MDI/MDI-X lets you use a normal straight cable to do the task. Auto-Negotiating 10/100Base-TX RJ-45 Ports The auto-negotiation feature allows the switch to detect the speed of incoming transmission and adjust appropriately without manual intervention. It allows data transfers of either 10 Mbps or 100 Mbps in either half-duplex or full-duplex mode depending on your Ethernet network. 2-2 Hardware Description and Installation

The following table describes the types of network cable used for the different connection speeds. The fiber and gigabit ports are not available on all ES models. Make sure the 10/100 Base-TX and/or 1000Base-T cable length between connections does not exceed 100 meters (328 feet). Table 2-1 Network Cable Types

2.3 Front Panel LEDs

All the LEDs are found on the front panel of the switch to indicate real-time status of the ports and the switch.

The PWR LED on the front panel indicates whether the switch is receiving power. Table 2-2 The Switch Power LED Description

LED COLOR | STATUS DESCRIPTION

Power Green On The switch is receiving power. Off The switch is not receiving power.

2.3.2 10/100M Ethernet Port LEDs

The LEDs for the 10/100M Ethernet ports give real-time system information and status. Hardware Description and Installation 2-3

Dimension ES-2008 Ethernet Switch Figure 2-4 Ethernet Port LEDs The following table describes the LEDs for the Ethernet ports on the front panel. Table 2-3 Ethernet Port LED Descriptions

LED COLOR | STATUS DESCRIPTION

100 Green On The port is operating at 100Mbps. Off No device is attached or the port is operating at 10Mbps. LK/ACT Green On The port is connecting with a device. Blinking The port is receiving or transmitting data. Off No device is attached. FD/COL Orange On The port is operating in full-duplex mode. Blinking Packet collisions are occurring Off No device is attached or the device is in half- duplex mode.

2.3.3 The Fiber Port

The 100FX fiber module is designed to extend the distance between the switch and other Ethernet devices by up to 2 km using multi-mode fiber or 30 km using single-mode fibers. The fiber port is not available on all switch models. The LEDs provide real-time system status information of the fiber port. The following table is a summary of LED status and meaning. Table 2-4 100FX Module LED Descriptions

LED COLOR | STATUS DESCRIPTION

LK/ACT | Orange | On The fiber port is connected to an Ethernet device. Blinking | This fiber port is transmitting data. Off No data is being transmitted. FD/COL | Orange | On The port is operating in full-duplex mode. Blinking | Packet collision is occurring on this port. 2-4 Hardware Description and Installation

Dimension ES-2008 Ethernet Switch Table 2-4 100FX Module LED Descriptions LED COLOR STATUS DESCRIPTION Off No device is attached or the port is operating in half- duplex mode

2.3.4 The Gigabit Port

The gigabit port module is capable of transferring data at a speed up to 1000 mbps. The gigabit port is not available on all switch models. The following table describes the gigabit port LEDs. Table 2-5 Gigabit Module LED Descriptions

LED COLOR | STATUS DESCRIPTION

1000 Green On The port is connected at 1000 Mbps. Off The port is not connected at 1000 Mbps. LK/ACT | Orange | On The fiber port is connected to an Ethernet device. Blinking | This fiber port is transmitting data. Off No data is being transmitted. FD/COL | Orange | On The port is operating in full-duplex mode. Blinking | Packet collision is occurring on this port. Off No device is attached or the port is operating in half- duplex mode

The console port and the power socket are located on the rear panel as shown in the next figure. Figure 2-5 Rear Panel Hardware Description and Installation 2-5

Local switch management is done through the console port. It requires a direct connection between the switch and a computer via an RS-232 console cable. Refer to chapters on SMT configurations.

2.5 Turning On the Switch

Connect one end of the power cord to the power receptacle on the rear panel of the switch and the other end to the power outlet. Refer to the product specifications for the right power source. The PWR LED on the front panel turns on. 2-6 Hardware Description and Installation

Introducing the Web Configurator This chapter describes how to access the embedded web configurator and view general switch information.

3.1 Accessing the Web Configurator

Follow the steps below to access the web configurator. Step 1. Make sure your switch is properly connected (refer to instructions in

Step 2. Prepare your computer to connect to the switch. Set your computer to use a static IP address in the same subnet as the IP address of the switch (refer to the Setting Your Computer's IP Address appendix). Step 3. Launch your Internet Explorer. You must use Internet Explorer 5.0 or later versions. Step 4. Type "192.168.1.1"as the URL. Step 5. Type “admin” (default) as the user name and "1234" (default) as the password and click OK. Sie: 18216811 Reaim index him Use Name Bassmond [| I Save this passnordin your passuaidlit

Figure 3-1 Login Window Step 5. You should now see the welcome screen as shown next. Introducing the Web Configurator 3-1

The front panel graphic is displayed on all web screens to indicate the real-time port status ofthe switch. Figure 3-5 Web Configurator Front Panel Display A port in green means a device is connected to the port. To view port information, click on the ports to open a read-only status window as shown next. Figure 3-6 Port Status Refer to the Port Statistics section for field descriptions.

3.2 Commonly Used Buttons

The following table describes the buttons found in most screens. Table 3-1 Commonly Used Button BUTTON DESCRIPTION Apply Click Apply to save the changes. Default Click Default to set the screen settings back to factory defaults. Delete Click Delete to remove a selected item. Help Click Help to open a web-based HTML help window. The Help button is not available in all web configurator screens. Introducing the Web Configurator 3-3

To view general information such as firmware version and MAC address click Administrator, Switch Configuration and click on the Basic tab. The following screen displays as shown. Switch Configurati Figure 3-7 Web Configurator: View Switch Information The table below describes the read-only fields in this screen. Table 3-2 View Switch Information FIELD DESCRIPTION Description This field displays a short description of the switch. MAC Address This field displays the MAC address of the switch without the “:" separator. Firmware Version This field displays the version of the firmware the switch is using. Hardware Version This field displays the hardware version of the switch. Kernel Version This field displays the version of the kernel on which the firmware is based.

Basic Switch Configuration This chapter describes how to set the IP address of the switch, reset and reboot

4.1 Setting the IP Address of the Switch

IP Address | Enter a LAN IP address for the switch in dotted decimal 192.168.1.1 notation. Subnet Enter a subnet mask in dotted decimal notation. Refer to 255.255.255.0 Mask the Subnetting appendix to calculate a subnet mask if you are implementing subnetting. Gateway Enter the LAN IP address of the gateway device. You must reboot the switch if you change the IP address to make the changes take effect.

4.2 Changing System Username and Password

Use the User Authentication screen to change the switch system username and password. Basic Switch Configuration

Dimension ES-2008 Ethernet Switch Click Administrator and then User Authentication to display the screen shown next. User Authentication User Name: [min Assign/Change Password: [= Reconfirm Password: Fr] ren] Figure 4-2 User Authentication Follow the instructions in the next table to set the fields in this screen. Table 4-2 User Authentication FIELD DESCRIPTION User name Type in your new switch system user name. Assign/Change Type in your new switch system password. Password Reconfirm Re-type your new switch system password for confirmation. password

4.3 Resetting the Switch

Restoring to factory defaults resets the switch’s parameters. The user name will be reset to “admin”, the password to “1234” and the LAN IP address to 192.168.1.1. This function erases the current configuration before restoring a previous back up configuration; please do not attempt to restore unless you have a backup configuration file stored on disk. Follow the steps to restore your switch back to factory defaults. Step 1. Click Factory Default to display the screen shown next. Factory Default Click the Default button to reset the switch back ta factory default configuration. All your custom configuration will be erased Default Figure 4-3 Factory Default Step2. Click the Factory Default button and wait until the switch finishes rebooting before accessing the switch again. 4-2 Basic Switch Configuration

You must reboot the switch after you make changes to the switch’s IP address and uploads a firmware or configuration file. Step 1. Click System Reboot to display the screen as shown next. Svstem Reboot Reboot | Hep| Figure 4-4 System Reboot Step 2. Click Reboot and wait until the switch finishes rebooting before accessing the switch again. Basic Switch Configuration 4-3

Advanced Settings Part Il: Advanced Settings Part Il covers advanced port settings such as trunking, port security and filtering.

Advanced Switch Configuration This chapter shows you how to configure the Advanced Switch Settings screen.

5.1 Switch Configuration

Use the Switch Configuration screen to configure advanced features of the switch. From the main menu, click Administrator, Switch Configuration and then click on the Advanced tab to display the screen as shown next. Switch Configurati F MAC Table Address Entry Age-Out Time: |300 | secs (300-765) Bridge Transmit Delay Bound: [OFF 2! Broadcast Storm Filter Mode: [OFF | Priority Queue Service: € First Come First Served & All High Before Low CWRR Packet Weight (High : Low)[0 :1 F Enable Delay Bound Max Delay Time: |0 ms Priority Queue Assignment: (Checked for High Priority) T Levelo Level1 T Level? Level3 F Level F Level5 F Levelé F Level7 Protocol Enable Settingl F Enable Spanning Tree Protocol F Enable IGMP Protocol IGMP Query Mode: [Auto Li VLAN Operation Mode: er 2] Appy | Defaut | Help Figure 5-1 Switching Configuration: Advanced Advanced Switch Configuration 5-1

Dimension ES-2008 Ethernet Switch Follow the instructions in the table below to configure this screen. Table 5-1 Switching Configuration: Advanced FIELD DESCRIPTION MAC Table Select this check box to remove a MAC address from the MAC address Address Entry | table after a duration specified in the field provided. Age-out time | Enter the duration in seconds between 300 and 765 that an inactive MAC address remains in the switch's MAC address table. The default is 300 seconds. Bridge Select 1 sec, 2 sec or 4 sec from the pull down list box to limit the packet Transmit queuing time in the switch. If enabled, the packets queued beyond the Delay Bound time period specified here will be dropped. Select OFF to disable this feature. This is the default setting. Broadcast Threshold is the percentage of the port's total bandwidth used by Storm Filter broadcast traffic. When broadcast traffic for a port increases above the Mode threshold, broadcast storm control becomes active. Select a percentage number from the drop-down list box to set the threshold of the ports. Select OFF to disable this feature. This is the default setting. Priority Queue Select a priority Service queuing type. First Come Select this option to send packets in the order of arrival. First Served All High Select this option to send all high priority packets before sending packet Before Low with low priority. WRR Select the Weighted Round Robin (WRR) option to send packets depending on the weight (or priority) in the Packet Weight field. For example, if Packet Weight is 2, then the switch sends out two packets with higher priority for every one low priority packet sent. Packet | This is the high weight and low weight ratio. Weight (High: | Specify the number of high priority packets to send. The number must be Low) | bigger than 1. Note: The default value for the low weight value is 1. You cannot change this number. Enable Delay | Select this option and specify a time in the Max Delay Time field (in Bound milliseconds) to specify a time period a low priority packet is allowed to queue in the switch. 5-2 Advanced Switch Configuration

Dimension ES-2008 Ethernet Switch Table 5-1 Switching Configuration: Advanced FIELD DESCRIPTION Max Delay | Specify a time period a low priority packet is allowed to queue in the Time | switch before the packet is dropped. Priority Queue Assignment (Checked for High Priority) With QoS (Quality of Service) organizations can differentiate traffic by setting the precedence values in the IP header at the periphery of the network to enable the backbone to prioritize traffic. Leveli … | Select the check box(es) to add the packets with the level bits to the high Level7 | priority queue. Protocol Enable Settings Enable Select this option to activate Spanning Tree Protocol (STP). Refer to the Spanning STP chapter for more information. Tree Protocol Enable IGMP | Select this option to activate Internet Group Multicast Protocol (IGMP). Protocol Refer to Section 8.1 for more information. IGMP Query | Select Auto to allow the network to automatically find the IGMP server. Mode | The multicast device with the lowest numerical IP address to be the IGMP server. This is the default setting. Select Enable to force this switch to be the IGMP server even when there is already an IGMP server on the network. Selecting this option may affect network performance. Select Disable to forcibly disallow this switch from being an IGMP server. VLAN Select No VLAN, 802.1Q with GVRP, 802.1Q without GVRP or Port- Operation Based from the drop-down list box. Mode Select No VLAN to disable VLANs. Select 802.1Q with GVRP to set up tag-based VLAN groups that extend beyond the local switch. Select 802.1Q without GVRP to set up tag-based VLAN groups on the switch only. Select Port-Based to set up port-based VLANSs. Refer to the chapter on VLANSs. Advanced Swi itch Configuration 5-3

Port Control This chapter shows you how to configure the Ethernet ports and view port status.

6.1 Configuring the Ethernet Ports

The Port Configuration screen allows you to configure settings for individual Ethernet ports on the switch and view the status of all the ports. Click Administrator and then Port Configuration to display the screen as shown next. Port Configuration

Apphs Port Stati ‘The following information provides à view of the current status cf the unit 1 | on | on | up | Auto | auto | 100 | 100 | Ful | Hat | on | on 2 | on | of | vown] auto | ya | 100 | nya | Fu | n/a | on | nya 3 [on [of | Down] auto | n/a | 100 | n/a | pui | n/a | on | n/a 4 | on | of | vown] auto | ya | 100 | ya | ul | n/a | on | nya 5 | on | of | vown] auto | ya | 100 | ya | ui | n/a | on | nya 6 | on | of |vown| auto | ya | 100 | n/a | ul | n/a | on | na 7 [on | of | vown] auto | ya | 100 | n/a | ui | n/a | on | na 8 | on | of | vown] auto | n/a | 100 | n/a | Fu | n/a | on | nya 9 [ on | of [vown] na | — | 100 | n/a | Fu | n/a | on | na Figure 6-1 Port Configuration Follow the instructions in the next table to configure the Ethernet ports. Table 6-1 Port Configuration FIELD DESCRIPTION Port Configuration Port Select a port to configure from the selection list. State Select Enable from the drop-down list box to activate the port. Port Control 6-1

Dimension ES-2008 Ethernet Switch Table 6-1 Port Configuration FIELD DESCRIPTION Auto Select Enable from the drop-down list box to have the port detect the Negotiation speed of incoming transmission and adjust appropriately without manual intervention. Speed Select from the drop-down list box to set the transmission speed of the port. Choices are 10 Mbps and 100 Mbps. All ports are set to 100 Mbps by default. Duplex Select either Full or Half from the drop-down list box to set the duplex mode of the port. All ports are set to Full duplex mode by default. Flow Control Select Enable from the drop-down list box to activate flow control on this port.

6.2 View Port Status

The bottom half of the Port Configuration screen displays status of all ports on the switch. You may also view the port status information in the Port Status screen Refer to Table 6-1 for field descriptions. The Config fields display the configured port settings while the Actual fields displays the real-time status of the port.

Click Port Statistics in the menu to display the screen as shown next. 6-2 Port Control

Dimension ES-2008 Ethernet Switch Port Statisti The fellowing information provides a vieu of the current status of the unit. 1 | off JDown) 0 o o 0 0 0 2 | on | up | 23005 0 363855 | 6192 0 49 3_ [of fbownl__ 0 0 0 0 o û 4 | of jpown| __ 0 o o o 0 0 5_[ of [pawn| 0 o o o o 0 6 | of low] 0 0 o | o 0 0 7 _| off [Down] 0 0 0 Ï 0 0 o 8 | of ]pown 0 0 o [0 0 0 Clear Figure 6-2 Port Statistics The following table describes the fields in this screen. Table 6-2 Port Statistics FIELD DESCRIPTION Port This field displays the port number of each entry. State This field indicates whether the port is connected (On) to an Ethernet device or not connected (Off). Link This field indicates whether the port has a successful connection (Up) or no connection (Down). TxGoodPKT | This field displays the number of packets transmitted successfully. TxBadPKT This field displays the number of packet transmission failures. RxGoodPKT | This field displays the number of packets received successfully. RxBadPKT | This field displays the number of bad packets received. TxAbort This field displays the number of aborted data transmissions. Collision This field displays the number of collisions that occurred on the port. Click Clear to reset the counters Port Control 6-3

Port Trunking This chapter describes how to configure trunk groups and IEEE 802.3ad link aggregation.

Port Trunking (or link aggregation) lets you group physical ports into one logical high- capacity link. It may be more cost-effective to group multiple lower-speed ports than to under-utilize a higher-speed, but more costly, port. However, the more ports you aggregate, the higher bandwidth capacity you obtain, but the fewer available ports you have.

Trunk groups are manually configured aggregate links containing multiple ports.

7.1.2 Dynamic Port Trunking

The switch supports IEEE 802.3ad standard for port trunking. This standard describes the Link Aggregate Control Protocol (LACP), which is a protocol that allows a switch to dynamically create and manage trunk groups. When you enable LACP trunking on a port, the port can automatically negotiate with the ports at the remote end of a link to establish trunk groups. Besides dynamic trunking, LACP provides port redundancy. When an operational port fails, one of the “standby” ports becomes operational without user intervention.

When you configure the settings, note the following points.

1. You cannot add a port to a trunk group if LACP is enabled on the port.

2. You must connect all ports point-to-point to the same Ethernet device and

configure them for LACP trunking if required.

3. LACP only works on full-duplex links.

AI ports on the same trunk group must have the same media type, speed, duplex mode and flow control settings.

5. Configure trunk groups or LACP before you connect the Ethernet device to

prevent network topology loops. Port Trunking 7-1

Port trunking lets you group up to eight consecutive ports into a single dedicated connection. To configure port trunking, click Administrator, Trunking and the Aggregator Setting tab.

Fenore Figure 7-1 Trunking: Aggregator Setting Follow the instruction in the table next to change the settings. Table 7-1 Trunking: Aggregator Setting FIELD DESCRIPTION System Enter a number to identify and set the priority of an active Link Aggregate Priority Control Protocol (LACP). The smaller the number, the higher the priority level. Group ID Select a trunk group ID from the drop-down list menu and click Select to display the configured settings. LACP Select Enable from the drop-down list box to set the trunk group as a dynamic trunk group. Select Disable to set the trunk group as a local trunk group. 7-2 Port Trunking

Dimension ES-2008 Ethernet Switch Table 7-1 Trunking: Aggregator Setting FIELD DESCRIPTION Work Ports | Enter the number of ports that to be aggregated. If you select Enable in the LACP field, then enter any number greater than 0 and smaller than the total number of the trunk ports. The excess ports are in standby and can be aggregated if any of the other ports fail. If you select Disable in the LACP field, then the number of ports must be the same as the number of the trunk ports. By default, the total number of trunk ports is displayed. Add | Select a port number on the right selection box and click Add to add the port to the trunk group on the left. Any ports that remain on the right are ports not assigned to any trunk groups. Remove | Select a port number on the left selection box and click Remove to remove the port from the trunk group.

7.3 Viewing Static Trunk Group Information

The Aggregator Information screen displays static trunk groups (with the LACP feature). Click Administrator, Trunking and then the Aggregator Information tab. A screen displays as follows. ing Agaregator Setting Aggregator information The following information provides à view of LACP current status Port_No 56 Figure 7-2 Trunking: Aggregator Information. The following table describes the fields in this screen. Table 7-2 Aggregator Information FIELD DESCRIPTION Group Key This field displays the trunk group number. Port Trunking 7-3

Ports in a dynamic trunk group can be in either active or passive state. If a port is in active state, the port automatically sends LACP packets to negotiate a trunk link configuration with another link aggregation port on the other side of the link. If a port is in passive state, the port only responds to LACP packets but cannot negotiate a trunk link configuration with another trunk port on the other end of the link. Use the State Activity screen to set the state of the port(s) in a dynamic trunk group. Trunking 1 F'active 5 N/A 2 M Active 6 N/A 3 active 7 F Active # Factive 8 F active Appiy | _Defaut | Hein Figure 7-3 Trunk State Activity The following table describes the fields in this screen. Table 7-3 Trunk State Activity FIELD DESCRIPTION Port This field displays the port numbers. LACP State | This field is N/A for ports not in a dynamic trunk group. Activity Select the Status check box to set the port to active state. If the Status check box is not selected, the port is set to passive state. This is the default setting for all ports in a dynamic trunk group. 7-4 Port Trunking

Filter and Security Setup This chapter shows you how to set IGMP and MAC filters and port security.

Traditionally, IP packets are transmitted in one of either two ways -Unicast (1 sender to 1 recipient) or Broadcast (1 sender to everybody on the network). Multicast delivers IP packets to just a group of hosts on the network. IGMP (Internet Group Multicast Protocol) is a session-layer protocol used to establish membership in a multicast group - it is not used to carry user data. Refer to RFC 1112 and RFC 2236 for information on IGMP versions 1 and 2 respectively. A layer-2 switch can passively snoop on IGMP Query, Report and Leave (IGMP version

2) packets transferred between IP multicast routers/switches and IP multicast hosts to

learn the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly. Without IGMP snooping, multicast traffic is treated in the same manner as broadcast traffic, that is, it is forwarded to all ports. With IGMP snooping, group multicast traffic is only forwarded to ports that are members of that group. IGMP Snooping generates no additional network traffic, allowing you to significantly reduce multicast traffic passing through your switch. For each attached network, an IGMP server periodically sends a query message to request for group membership information. Hosts on the network that are members of a multicast group send report messages back to the IGMP server. When a host leaves a group, it sends a leave group message. The following table describes the types of IGMP messages. Table 8-1 IGMP Message Descriptions TYPE DESCRIPTION Query An IGMP server sends query messages asking for a response from each host belonging to the multicast group. Report A host sends report messages to the IGMP server to indicate that the host wants to be or is a member of a given group indicated in the report message. Leave Group | A host sends a leave group message to the IGMP server to indicate that the host has terminated its membership of a specific multicast group. Filter and Security Setup 8-1

Follow the steps below to activate IGMP on the switch. Step 1. Click Administrator and then Switch Configuration. Step2. Inthe Switch Configuration screen, click the Advanced tab. Step 3. Select the Enable IGMP Protocol check box under Protocol Enable Setting. Step 4. Select a choice from the IGMP Query Mode field drop-down list box. Protocol Enable Setting: T Enable Protocol T Enable 1GMP Protocol (GMP Query Mode: [auto E] VLAN Operation Mode: |Por_ Based Appby_| _Defaut | _Heb | Figure 8-1 Configuring IGMP The following table describes the options in the IGMP Query Mode field. Table 8-2 IGMP Query Mode FIELD DESCRIPTION IGMP Query Select Auto to allow the network to automatically find the IGMP server. Mode The multicast device with the lowest numerical IP address to be the IGMP server. This is the default setting. Select Enable to force this switch to be the IGMP server even when there is already an IGMP server on the network. Selecting this option may affect network performance. Select Disable to forcibly disallow this switch from being an IGMP server.

This section presents IGMP examples for each IGMP query mode. A source of multicasts, such as the Video-on-Demand server in our examples, should be as close to the IGMP server as possible in order to reduce broadcasts. Example 1: Select an IGMP Server Automatically In the figure below, when you select Auto in the IGMP Query Mode field on all switches, Switch C will become the IGMP server since it has the lowest numerical IP address on the network. 8-2 Filter and Security Setup

Dimension ES-2008 Ethernet Switch Computer] Switch B IGMP = Auto Computer] Switch € A92.168.1.10 IGMP = Auto Video-on-Demand Computer Server Figure 8-2 IGMP Example 1 Example 2: Select an IGMP Server Manually To force Switch A to be the IGMP server, select Enable in the IGMP Query Mode field. However if another multicast device is set to Auto and it has a numerically lower IP address, it will act as the IGMP server also. This results in duplicated IGMP messages that might decrease your network performance. Unless you can disable IGMP on the other multicast devices on your network, it is not recommended you select the Enable option. Filter and Security Setup 8-3

Dimension ES-2008 Ethernet Switch Switch A IGMP = Disable Switch B IGMP = Enable Computer Computer Video-on-Demand) Server Figure 8-3 IGMP Example 2 Example 3: Disable IGMP on the Switch When you want to set a multicast router on your network to be the IGMP server but the router does not have the lowest IP address, disable IGMP on all other multicast devices. 8-4 Filter and Security Setup

1239 255 255.254 000 O1 DD ee ee ee Figure 8-5 IGMP Snooping The following table describes the read-only fields in this screen. Filter and Security Setup 8-5

Dimension ES-2008 Ethernet Switch Table 8-3 IGMP Snooping FIELD DESCRIPTION IP Address This field displays the IP multicast address in the range 224.0.0.0 through 239.255.255.254. VLAN ID This field displays the VLAN or multicast group ID. Member Port This field displays the port number to which the Ethernet device is connected.

8.2 Static MAC Address

You can add a MAC address to the MAC address table on the switch. A static MAC address will remain in the MAC address table permanently even if the Ethernet device is not connected to the switch. With static MAC addresses, the switch avoids re-learning the MAC addresses of the Ethernet devices every time the switch reboots or disconnects from the network.

8.2.1 Adding Static MAC Address

Follow the steps to add static MAC addresses. Step 1. Click Administrator and then Filter Setup. Step2. Click the Static MAC Addresses tab to display the screen as shown in the figure below. 8-6 Filter and Security Setup

Dimension ES-2008 Ethernet Switch Filter Setup IGMP Snooping Static MAC addre: Static addresses currently dafined on the switch are listed below. Cick dd to add a new static entry to the address table: MAC Address For. VLAN D MAC Address D {Ex ABCDEF123456) Part Na. Date | Ha] Figure 8-6 Static MAC Address Step 3. Enter the MAC address (without the “:” separator) of an Ethernet device in the MAC Address field. Step 4. Enter the port number that the Ethernet device is connected to in the Port No. field.

A port with security mode turned on is prevented from re-learning a new MAC address of an Ethernet device. To secure a port, disable the port from learning new MAC addresses and then define a list of MAC addresses that are allowed to use the secured port. Thus, only incoming packets with the defined MAC addresses will be forwarded. Follow the steps below to secure the ports on the switch. Step 1. Click Administrator and then Filter Setup. Step2. Click the Port Security tab to display the screen as shown next. Filter and Security Setup 8-7

Dimension ES-2008 Ethernet Switch Filter Setup IGMP Snooping E es Port Security MAC Filtering niinilniinl ælofnle miitellalia) Apr | Dofut | Hop Figure 8-7 Port Security Step 3. Select the check box beside the port number to stop the port from learning new MAC addresses. Step 4. Click Apply. Step 5. Follow Section 8.2.1 to define static MAC addresses on the ports to allow only the computers with the static MAC addresses to send packets through the ports If you do not configure static MAC address(es) on the port with port security feature, the port will drop all packets.

8.4 MAC Address Filtering

You can set up the switch to drop packets from a computer based on the computer’s MAC address. Follow the steps set up MAC address filtering. Step 1. Click Administrator, Filter Setup and then the MAC Filtering tab. 8-8 Filter and Security Setup

Dimension ES-2008 Ethernet Switch IGNP Snocping Part Security Specfy a MAC address to filter. MAC address VLAN 10 MAC Address D {Ex ABCDEF 123456) YLAN 1D Bai] Ia | Han] Figure 8-8 MAC Address Filtering Step 2. Enter the MAC address (without the “:” separator) of an Ethernet device in the MAC Address field. Step 3. If VLAN is enabled, enter the VLAN ID of a VLAN group the port belongs to in the VLAN ID field. This field is N/A if VLAN is not enabled. Step 4. Click Apply to save the settings. Filter and Security Setup 8-9

Advanced Applications Part III: Advanced Applications Part Ill covers VLAN, Port Mirroring, STP, SNMP and firmware and configuration maintenance.

VLAN This chapter shows you how to set up Virtual LANS on the switch.

A Virtual LAN (VLAN) is a logical network grouping that limits the broadcast domain. It allows you to isolate network traffic so only members of the VLAN group receive traffic from the same VLAN group members. Members on a different VLAN group cannot communicate with each other even though they are physically connected to the same switch. Your switch supports port-based and tag-based VLANS. By default, all ports belong to a default VLAN (VLAN ID 1). You cannot delete the default VLAN.

The following sections discussed the types of VLANS your switch supports.

9.2.1 Port-Based VLAN

Port-based VLAN is the most common and simplest form of VLAN. In a port-based VLAN, some ports are assigned to a VLAN group. A port can only belong to one VLAN group. By default, all the ports on the switch belong to a VLAN group (VID 1). You cannot delete the default VLAN.

9.2.2 Tag-Based VLANSs (IEEE 802.1Q VLAN)

Tag-based VLAN on the switch is based on the IEEE 802.1Q specification that allows you to create VLANSs across switches from different vendors. IEEE 802.1Q VLAN inserts a “tag” into the Ethernet frames. The tag contains a VLAN Identifier (VID) that indicates the VLAN numbers. The following lists the advantages of IEEE 802.1Q.

1. Multicast data traffic across different Ethernet devices is contained, thus

improving performance. A port can belong to more than one IEEE 802.1Q VLAN.

3. Improved security with logical grouping of users.

Dimension ES-2008 Ethernet Switch Dynamic VLANS GARP VLAN Registration Protocol (GVRP) is a Generic Attribute Registration Protocol (GARP) application that provides VLAN registration services through dynamic configuration (or registration) and distribution of VLAN membership information across the network. With GVRP, the switch is able to register necessary VLAN members to create IEEE 802.1Q-compliant VLANS on links with other devices that are running GVRP. GVRP automatically provides consistent VLAN ID across the network to reduce VLAN configuration errors. GVRP propagates VLAN information to other GVRP-aware devices automatically, without the need to manually configure the VLANS on each device. In addition, if the VLAN configuration on a device changes, GVRP automatically changes the VLAN configurations of the affected devices.

9.3 Selecting VLANSupport

Select the type of VLANS to support in the Switch Configuration screen. Click Administrator, Switch Configuration and then the Advanced tab to set the VLAN Operation Mode field. Protocol Enable Seting F Enable Spanning Tree Protocol F Enable IGMP Protocol IGMP Query Mode; [Auto 7 VLAN Operation Mode: [No LAN Any | Defaut | Help Figure 9-1 Switch Configuration: Enable Protocols Follow the instructions in the table next to select the VLAN mode. Table 9-1 VLAN Operation Mode FIELD DESCRIPTION VLAN Operation Select No VLAN, 802.1Q with GVRP, 802.1Q without GVRP or Mode Port-Based from the drop-down list box. Select No VLAN to disable VLANSs. Select 802.1Q with GVRP to set up tag-based VLAN groups that extend beyond the local switch. Select 802.1Q without GVRP to set up tag-based VLAN groups on the switch only. Select Port-Based to set up port-based VLANSs. 9-2 VLAN

Follow the steps below to configure port-based VLANSs. Step 1. In the Switch Configuration screen, select Port-Based from the VLAN Operation Mode drop-down list box. Then click Apply. Step2. Click VLAN Configuration in the navigation menu to display the setup screen as shown next. VLAN Config Port Based VLAN Information {Ada| Ect| | Delete | _ PreviousPage | NexPage | Het] Figure 9-2 VLAN Setup: Port-based VLAN Information Step 3. Click Add to configure a new port-based VLAN. The following screen displays. VLAN Group Name: YLAN ID:

App _|_Help Figure 9-3 VLAN Setup: Port-based Configuration Follow the instructions in the table next to configure this screen. VLAN 9-3

Dimension ES-2008 Ethernet Switch Table 9-2 VLAN Setup: Port-based Configuration FIELD DESCRIPTION Group Name Enter a descriptive name to identify the VLAN. VLAN ID Enter a VLAN identification number. The number must be between 1 and Add Select a port number from the left selection list and click Add to add the port to the VLAN. Remove Select a port number from the right selection list and click Remove to remove the port from the VLAN. Ports in the same VLAN must be in the same trunk group.

8 Remove Nes | _Hep Figure 9-5 Tag-Based VLAN: 802.1 Q VLAN Basic Setup Follow the instructions in Table 9-2 to set the fields in this screen. All ports in the same VLAN must be in the same trunk group. Step 4. Click Next to continue. VLAN Configuration Group Name: test LAN ID: 2 Port Setting Port Setting 1 N/A 6 wa 2 N/A 7 [a x 3 N/A 8 [a x 4 N/A 9 wa 5 N/A Figure 9-6 VLAN Setup: 802.1Q VLAN Port Tagging Follow the instructions in the next table to set the fields in this screen. VLAN 9-5

Dimension ES-2008 Ethernet Switch The default VLAN ID for all ports is 1. This feature is useful for accommodating devices that you want to participate in the VLAN but that don't support tagging. Only one untagged VLAN is allowed per port. Ingress Select Enable from the drop-down list box to forward a frame whose VID is Filtering the same as the VID of the port. Select Disable to forward all frames, regardiess of the port's VID. Acceptable | Select All from the drop-down list box to accept all untagged or tagged Frame Type | frames. Select Tag Only to drop all untagged frames. VLAN 9-7

Spanning Tree Protocol This chapter describes the basics and configuration of STP.

Spanning Tree Protocol) is a standardized method (IEEE 802.1D) that eliminates loops in a network by disabling some ports and allowing other ports to forward traffic based on the parameters you configured. STP ensures that there is only one path between a specific source and destination so packets will not travel in loops. STP provides path redundancy while preventing undesirable loops in the network. STP detects and breaks network loops and provides backup links between switches, bridges or routers. It allows a device to interact with other STP-aware devices in your network to ensure that only one path exists between any two stations on the network. The root bridge is the base of the spanning tree; it is the bridge with the lowest identifier value (MAC address). Path cost is the cost of transmitting a frame onto a LAN through that port. It is assigned according to the speed of the link to which a port is attached. The slower the media, the higher the cost. Refer to the following table for the recommended path cost (in the allowed range between 1 and 65535) for each link speed. Table 10-1 Recommended Path Cost

LINK SPEED RECOMMENDED VALUE RECOMMENDED RANGE

A4Mbps 250 100 to 1000 10Mbps 100 50 to 600 16Mbps 62 40 to 400 100Mbps 19 10 to 60 1Gbps 4 3 to 10 10Gbps 2 1t05 On each bridge, the root port is the port through which a bridge communicates with the root. It is the port on this switch with the lowest path cost to the root (the root path cost). If there is no root port, then this switch has been accepted as the root bridge of the spanning tree network. Spanning Tree Protocol 10-1

Use the Switch Configuration screen to activate STP on the switch. Step 1. Click Administrator, Switch Configuration and then the Advanced tab. Step2. Select the Enable STP Protocol check box under Protocol Enable Settings:. Protocol Enable Setting Enable Spanning Tree Protoi F Enable IGMP Protocol IGMP Query Mode: [Auto xl VLAN Operation Mode: [No VLAN GO App | Detautt | He Figure 10-1 Activating STP Step 3. Click Apply to save the changes.

Priority To set the priority of this switch in a spanning tree, enter a 32768 number between 1 and 65535. A higher value indicates a lower priority; thus 0 means the highest priority. The default is 32768. 10-2 Spanning Tree Protocol

MAX Age A time interval (in seconds) a root bridge waits without 20 receiving a STP configuration message before initiating a topology change. Specify a number between 6 and 40. Hello Time | The number of seconds the switch waits between STP 2 configuration message transmissions. Specify a number between 1 and 10. Forward- The number of seconds the switch waits before changing from 15 Delay Time | its STP learning/listening state to forwarding state. Specify a number between 4 and 30.

10.4 Viewing Root Bridge Information

View the STP root bridge information in the Spanning Tree screen. These fields display the spanning tree parameter settings for the switch currently acting as the root. Root Bridge Information Figure 10-3 View STP Root Bridge Information Refer to the following table for the field descriptions. Table 10-3 View STP Root Bridge Information FIELD DESCRIPTION This field displays the priority (between 1 and 65535) of the root bridge in a Priority spanning tree. À higher value indicates a lower priority; thus 0 means the highest priority. MAC Address |This field displays the MAC address of the root bridge. Spanning Tree Protocol 10-3

Dimension ES-2008 Ethernet Switch Table 10-3 View STP Root Bridge Information FIELD DESCRIPTION This field displays the path cost from this switch to the root bridge. The Root Path bigger the number, the higher the path cost. Cost This field is O to indicate that this switch is the root bridge in a spanning tree. Root Port This field displays the port number through which your switch communicates with the root A time interval (in seconds) a root bridge waits without receiving a STP MAX Age : ere configuration message before initiating a topology change. : The number of seconds root bridge waits between STP configuration Hello Time Qi message transmissions. Forward- The number of seconds the root bridge waits before changing from its STP Delay Time learning/listening state to forwarding state.

10.5 Configuring Spanning Tree Port Parameters

Configure the port parameters in the Set Spanning Tree screen. Configure Spanning Tree Port Parameters RU | Fe Apebr | Heb| Figure 10-4 Configuring STP Port Parameters 5x) Follow the steps below to configure the port parameters. Step 1. Select a port number from the Port scroll down list menu. Step 2. Enter a number between 1 and 65535 in the Path Cost field. The smaller the number the lower the path cost is for the port. Refer to Table 10-1 for recommended path cost. Step 3. Enter a number between 0 and 255 in the Priority field. The smaller the number, the higher the priority. Step 4. Click Apply to save the changes. 10-4 Spanning Tree Protocol

8 10 128 DISABLED Figure 10-5 STP Port Status The following table describes the read-only port status fields in this screen. Table 10-4 STP Port Status FIELD DESCRIPTION Port This field displays the port number on the switch. Path Cost | This field displays the cost of using this port to reach the root bridge. The bigger the number, the higher the path cost. Priority This field displays the priority level of the port. The higher the number the lower the priority level. Port This field displays the state of the port. The state can be FORWARDING, State DISABLED, BLOCKING, LEARNING and LISTENING. Spanning Tree Protocol 10-5

Port Mirroring This introduces the port mirroring or port sniffer feature of the switch.

You can monitor traffic on the ports by duplicating or mirroring the traffic to a port. You can monitor input traffic, output traffic or both. A port that mirrors the traffic of other ports is the analysis port or the sniffer port. A port whose traffic is analyzed is the monitor port or the source port. You can configure up to nine monitor ports but only one mirror port.

Dimension ES-2008 Ethernet Switch Table 11-1 Port Mirroring FIELD DESCRIPTION Port Mirroring State Select ENABLE from the drop-down list box to activate port mirroring feature. Select DISABLE to deactivate port mirroring. This is the default setting. Analysis Port You must select a port from the drop-down list box to act as the sniffer port when you select ENABLE in the Port Mirroring State field. This field is NONE if the Port Mirroring State field is DISABLE. Monitor Ports This read-only field displays the port number of the switch. Monitor Rx Select this check box to monitor incoming traffic of the port. Monitor Tx Select this check box to monitor outgoing traffic of the port. 11-2 Port Mirroring

Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your switch supports SNMP version one (SNMPv1). The next figure illustrates an SNMP management operation. MANAGER SNMP

Managed Device Managed Device Managed Device Figure 12-1 SNMP Management Model An SNMP managed network consists of two main components: agents and a manager. An agent is a management software module that resides in a managed device. An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network SNMP 12-1

Dimension ES-2008 Ethernet Switch administrators perform network management functions. It executes applications that control and monitor managed devices. The managed devices contain object variables/managed objects that define each piece of information to be collected about a device. Examples of variables include such as number of packets received, node port status etc. À Management Information Base (MIB) is a collection of managed objects. SNMP allows a manager and agents to communicate for the purpose of accessing these objects. SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a request and the agent returns responses using the following protocol operations: + Get- Allows the manager to retrieve an object variable from the agent. + GetNext - Allows the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations. + Set- Allows the manager to set values for object variables within an agent. + Trap- Used by the agent to inform the manager of some events.

A trap manager is a management station that receives traps (the system alerts generated). If no trap manager is defined, then no traps are generated.

Trap Managers EI 1P Address : Renoye | Community : Figure 12-2 SNMP Management The following table describes the fields in this screen. Table 12-1 SNMP Management FIELD DESCRIPTION System Options You must fill in all three fields. Name Enter a descriptive name for the switch for identification purposes. Location Enter the location of the switch. Contact Enter the name of the contact person for the switch. Community Strings Current This list box displays the current configured community strings of the Strings switch. To remove a string, select the string in the list and click Remove. New Fill in the field below to add a new community string (or password) and Community click Add. Strings String | Enter a new community string or password. SNMP 12-3

Dimension ES- 2008 Ethernet Switch Table 12-1 SNMP Management FIELD DESCRIPTION RO | Select RO to enable the request accompanied by this string to display MIB information. RW | Select RW to enable the request accompanied by this string to display MIB information and set MIB objects on the switch. Trap Managers Current Manager This field displays the current configured management station (the trap manager) on the switch. To remove a trap manager, select the trap manager in the list and click Remove. New Manager Fill in the fields below to add a new trap manager and click Add. IP Address | Enter the IP address of the management station. Community | Enter the community string (or the password) of the management station. 12-4 SNMP

Using the SMT and System Maintenance Part IV: Using the SMT and System Maintenance Part IV introduces configuration using the SMT screens and firmware/ configuration maintenance.

Introducing the SMT This chapter introduces the basics of managing the switch.

The System Management Terminal (SMT) is a menu — driven interface that you use to configure the switch. You may access the SMT using either Telnet or the console port. If there is no activity for longer than 5 minutes after you log in, your switch will automatically log you out.

13.2 Accessing the SMT Using Telnet

Follow the steps below to access the SMT screens using a Telnet program. Step 1. Launch a Telnet program. In Windows, click Start and then Run. Step 2. Type “telnet” followed by a space and the IP address of the switch, (192.168.1.1 is the default) and then click OK to display the password screen. Refer to Figure 13-3. CORRE x Se Type the name of a program, Folder, document, or Internet resource, and Windows wil open i for you. Opens | teinet 192.168.1.1] ” CR Browse. Figure 13-1 Starting a Telnet Session

13.3 Accessing the SMT Using the Console Port

The console configuration is for local management and initial configuration of the switch. Use an RS-232 console cable with a female DB-9 connector to connect a terminal or computer to the console port. Introducing the SMT 13-1

Afier the switch is directly connected to a computer, turn on the computer and run a terminal emulation program (for example, Hyper Terminal in Windows) and configure its communication parameters as follows: > 9600 bits per second. > Parity none, 8 data bits, 1 stop bit, flow-control none. Fat Sat | Be par second [5 +] Dmbefs | Party: [None > Stop bis: [1 + Pen | Rabat

The following figure gives you an overview of the various SMT menu screens of your switch. Main Menu

Familiarize yourself with the SMT operations before you attempt to modify the configuration.

13.6.1 SMT Screen Navigation

The following figure shows the breakdown of most SMT screens. Introducing the SMT 13-3

The following tabl le describes common control keys that you use in the SMT screens. Table 13-1 Control Key Descriptions KEY DESCRIPTION [TAB] To move down through fields in the configuration menu. To move through fields in the actions menu. [BACK To move up through fields in the configuration menu. SPACE] To move back through fields in the actions menu. [ENTER] To select an item in the menu. [SPACE BAR] | To cycle through the available choices in a field. [ESC] Press [ESC] to go back to the previous screen. Press [ESC] to move from the configuration menu to the actions menu. 13-4 Introducing the SMT

Dimension ES-2008 Ethernet Switch Do NOT use the arrow keys to move between SMT menus. Changes will be lost once you move to another menu using the arrow keys.

Table 13-2 SMT Menu Summary MENUTITLE FUNCTION Status and Counters | Displays system or port statistics and information. Switch Static Use this menu to perform switch configuration such as port and Configuration VLAN settings and change login information. Protocol Related Use this menu to configure STP, SNMP, GVRP and LACP Configuration settings. System Reset Select this option to reset the switch. Configuration Logout Select this option to log out of the SMT menus. Introducing the SMT 13-5

Basic System Setup This chapter shows you how to set up the switch for administrative purposes.

Dimension ES-2008 Ethernet Switch Table 14-1 Switch Configuration Menu Choice SUBMENU DESCRIPTION Port Mirror Configuration | Use this menu to configure port mirroring. VLAN Configuration Use this menu to display or set VLAN settings. Priority Configuration Use this menu to set the priority of each port on the switch. MAC Address Use this menu to add static MAC addresses to the MAC Configuration address table in the switch. Misc Configuration Use this menu to set other switch related parameters. 142 Administration Configuration The menus in Administration Configuration allow you to change administrative settings ofthe switch. In the main menu, select Switch Configuration and then Administration Configuration to display the screen as shown in the figure below. Dimension

Device Name Enter a descriptive name for identification purposes. ES-2008 Device Contact | Enter the name of the person in charge of this device. Device Location | Enter the location of the switch for administrative 2F RM105 purposes. Device Enter a short description of the switch for administrative Ethernet Description purposes. Switch Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

14.2.2 Ethernet IP Configuration

Use the IP Configuration screen to change the TCP/IP settings of the switch. Step 1. In the Administration Configuration screen, press [TAB] to select IP Configuration and press [ENTER]. Basic System Setup 14-3

IP address Enter the (LAN) IP address for the switch in dotted 192.168.1.1 decimal notation. Subnet mask | Enter the subnet mask in dotted decimal notation. Refer | 255.255.255.0 to the Subnetting appendix to calculate a subnet mask if you are implementing subnetting. Gateway Enter the LAN gateway IP address in dotted decimal 192.168.1.10 notation. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

14.2.3 Changing the System User Name

Follow the steps to change the default system user name. Step 1. In the Administration Configuration screen, press [TAB] to select User Name Configuration and press [ENTER]. Step 2. To move to the configuration menu, press [TAB] to select <Edit> in the actions menu and press [ENTER]. Step 3. Type in your new system user name in the User Name field. 14-4 Basic System Setup

Follow the steps to change the default system password of the switch. Step 1. In the Administration Configuration screen, press [TAB] to select Password Configuration and press [ENTER]. Step2. Type in your existing system password in the Old Password field and press [ENTER]. Step 3. Type in your new system password in the new Password field and press [ENTER]. Step 4. Re-type your new system password in the enter again field and press [ENTER]. Dimension -2008 : Password Configuration enter again :4*+4 Figure 14-6 SMT: Password Configuration Basic System Setup 14-5

Switch Configuration This chapter introduces various switch configurations.

15.1 Port and Trunk Group Settings

Refer to the Port Trunking chapter for background information on trunking. Follow the steps below to configure port parameters and set up trunk groups. Step 1. In the Switch Configuration screen, select Port/Trunk Configuration and press [ENTER] to display the screen as shown next. Step2. Select <Edit> in the actions menu and press [ENTER] to move the cursor to the configuration fields. : Port/Trunk Configuration Enabled Auto Speed/Duplex Flow Group ontrol 10/1007x Enabled or None 10/1007% Enabled or None 10/1007% Enabled or None 10/1007% Enabled on Trunkl 10/1007% Enabled on Trunk2 10/1007% Enabled on Trunk2 10/1007% Enabled on Trunkl 10/1007% Enabled on Trunkl 100Fx Disabled or N/A actions-> <Quit> <Edit> the Ac Tab=Next Item BackSpace-Previous Item Qui revious menu Enter-Select Item Figure 15-1 SMT: Port/Trunk Configuration Follow the instructions in the next table to set the fields in this screen. Table 15-1 SMT: Port/Trunk Configuration FIELD DESCRIPTION Port This read-only field displays the port number (from 1 to 9 including the fiber/gigabit port) on the switch. Switch Configuration 15-1

Dimension ES-2008 Ethernet Switch Table 15-1 SMT: Port/Trunk Configuration FIELD DESCRIPTION Type This read-only field displays the type of the port: 10/100TX for Ethernet ports or 100FX for the fiber port. Enabled Press [SPACE BAR] and [ENTER] to select Yes to activate the port. Auto Negotiation | Press [SPACE BAR] and [ENTER] to select Enabled to activate the auto negotiation feature on the port. Speed/Duplex Press [SPACE BAR] and [ENTER] to select one 10 Half, 10 Full, 100 Config Half or 100 Full to set the speed and duplex mode of the port. Flow Control Press [SPACE BAR] and [ENTER] to select On to activate the flow control feature on the port. Group Press [SPACE BAR] and [ENTER] to select a trunk group this port belongs to. Trunk group choices are Trunk1, Trunk2, Trunk3 and Trunk4. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch. The Type field for port 9 varies depending on your switch model.

The port mirroring feature allows you to monitor port traffic on the switch. Refer to the Port Mirroring chapter for more information. Select Port Mirroring Configuration and pr next. ss [ENTER] to display the screen as shown 15-2 Switch Configuration

9 100Fx None <Quit> ext Item BackSp Figure 15-2 SMT: Port Monitoring Configuration The Type field for port 9 varies depending on your switch model. Follow the instructions in the table next to configure the fields in this screen. Table 15-2 SMT: Port Monitoring Configuration FIELD DESCRIPTION Port Mirror Press [SPACE BAR] and [ENTER] to select YES to activate the port State mirroring feature and set the related fields below. Analysis Port | Press [SPACE BAR] and [ENTER] to select a port number as the mirror port. Port This read-only field displays the trunk group number or port numbers for ports not in a trunk group. Note: This field is 0 to indicate that a port is in a trunk group. Type This read-only field displays either 10/100 TX for Ethernet ports or 100FX for the fiber port on the switch. Switch Configuration 15-3

Dimension ES-2008 Ethernet Switch Table 15-2 SMT: Port Monitoring Configuration FIELD DESCRIPTION Action Press [SPACE BAR] and [ENTER] to select direction of data traffic on the port to monitor. Select RX to monitor only the incoming traffic on the port. Select TX to monitor only the outgoing traffic on the port. Select Both to monitor both the incoming and outgoing traffic on the port. If this field is None, no traffic on the port is monitored. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

Use the VLAN Configuration screen to configure VLANS. In the main menu, press [TAB] to select Switch Configuration, VLAN Configuration and press [ENTER] to display the screen as shown in the figure below. guration configure VLAN Type Create VLAN Group Edit/Delete VLAN Group Previous Menu Tab=Next Item Ba Figure 15-3 SMT: VLAN Configuration Refer to the VLAN chapter for more information.

Dimension ES-2008 Ethernet Switch Table 15-3 SMT: VLAN Support Configuration: 802.1Q FIELD DESCRIPTION Port This read-only field displays the port number or the trunk group on the switch. Note: This field is 0 to indicate that a port is in a trunk group. VLAN ID Enter the VLAN ID number that will be assigned to untagged traffic on a given port. For example, if the default VLAN ID of port 10 is 100, all untagged packets on port 10 will belong to VLAN 100. The default setting for all ports is 1. This feature is useful to accommodate devices that you want to participate in the VLAN but that don't support tagging. Only one untagged VLAN is allowed per port. Ingress Select Enable from the drop-down list box to forward frames belonging to a Filtering specific VLAN if the port belongs to that VLAN. Select Disable to forward all frames, regardless of the port's VLAN setting. Acceptable | Select All from the drop-down list box to accept all untagged frames. Fame Select Tag Only to drop all untagged frames. ype Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch. Step 2. After saving the settings, press any key to display the screen shown next. on Suitch ES Dimé 008 : Create À VLAN Group VLAN Name: [ J VLAN ID: [ 1(1-4094) Port Member <Quit> evious menu Enter-Select Item ext Item Backspe Figure 15-6 SMT: Add a VLAN Group 15-6 Switch Configuration

Dimension ES-2008 Ethernet Switch Follow the instructions in the table below to configure this screen. Table 15-4 SMT: Add a VLAN Group FIELD DESCRIPTION VLAN Name Enter a descriptive name for the VLAN group for identification purposes. VLAN ID Enter a number between 1 and 4049 as the identification number for the VLAN group. Port This read-only field displays the trunk group number or port numbers for ports not belonging to a trunk group. Note: This field is 0 to indicate that a port is in a trunk group. Member Ports are assigned membership in a VLAN by associating a VLAN ID with the ports Press [SPACE BAR] to select Tagged, UnTagged or No. Select Tagged to tag all outgoing frames on this port. Select Untagged not to tag all outgoing frames on this port. Select No to prevent a port from joining a VLAN group Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

15.3.3 Port-Based VLAN Configuration

Step 1. In the Configure VLAN Type screen and select Port-Based in the VLAN Mode field. Step 2. Press any key to display the screen as shown in Figure 15-6. Follow the instruction in Table 15-3 to set the fields in the Create a VLAN Group screen.

15.3.4 Creating a New VLAN Group

You can add a new port-based or tag-based VLAN group. Follow the steps below to create a new tag-based VLAN group. Step 1. Inthe Configure VLAN Type screen, select Create a VLAN Group and press [ENTER] to display the Create a VLAN Group screen as shown in Figure 15-6. Step 2. Select Add a VLAN Group. Refer to Table 15-3 to set the fields.

15.3.5 Changing VLAN Group Settings

Follow the steps below to change VLAN group settings or delete a VLAN group. Switch Configuration 15-7

Dimension ES-2008 Ethernet Switch Step 1. Inthe VLAN Configuration main menu, select Edit/Delete VLAN Group and press [ENTER] to display the screen as shown next. Dimension Switch ES-2008 : Edit/Delete VLAN Group actions-> <Edit> <Delete> re> <Previous Page> <Next Page> <Quit> be modified. Tab=Next ltem Backspe vious Item Quit-Previous menu Enter-Select Item Figure 15-7 SMT: Edit/Delete a VLAN Group Step2. Press [TAB] to select <Edit> in the actions menu and press [ENTER]. Step 3. Follow the steps in Section 15.3.2 (for tag-based VLAN) or Section 15.3.3 (for port-based VLAN) to make changes.

15.3.6 Deleting a VLAN Group

Use the Edit/Delete a VLAN Group screen to delete an existing VLAN. Follow the steps below to delete a VLAN group. Step 1. Inthe VLAN Configuration main menu, select Edit/Delete a VLAN Group and press [ENTER] to display the screen as shown in Figure 15-7. Step2. Press [TAB] to select <Delete> in the actions menu and press [ENTER]. Step 3. Select an entry and press [ENTER] to delete the VLAN group. Step 4. Press [ESC] and select <Save> in the actions menu to save the settings back to the switch.

15.4 Priority Configuration

Priority is a value between 0 and 7 assigned to each frame with 7 being the highest priority. Frames assigned a higher priority are transmitted before frames with a lower priority. Each priority number is mapped either the Low or High traffic class (or queue), and frames are transmitted based on what queue they are in. Frames in the High queue are transmitted out a port first. In the Switch Configuration screen select Priority Configuration and press [ENTER] to display the screen as shown next. 15-8 Switch Configuration

Dimension ES-2008 Ethernet Switch Dimension : Priority Configuration High/Low Queue Service Ratio HiL :[H->L] <Quit> ious Item ous menu Enter-Select Item Quit=Pre Figure 15-8 SMT: Priority Configuration The following table describes the fields in this screen. Table 15-5 SMT: Priority Configuration FIELD DESCRIPTION Level 0..7 | Press [SPACE BAR] and [ENTER] to select High to set high priority for level. High/Low | Press [SPACE BAR] and [ENTER] to select the type of queue service. Refer Queue to the Advanced Switch Configuration chapter for descriptions of each option. Service Ratio H:L Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

15.5 MAC Address Configuration

Use the menus in the MAC Address Configuration screen to set static MAC addresses and configure MAC address filter. In the Switch Configuration screen, select MAC Address Configuration to display the screen as shown. Switch Configuration 15-9

Dimension ES-2008 Ethernet Switch : Add Static MAC Address AC Address : <Quit> ext ltem Backspace ous revious menu Enter-Select Item Figure 15-11 SMT: Add Static MAC Address Step 3. Select <Edit> and press [ENTER] to move the cursor to the configuration fields. Step 4. Enter a MAC address in the MAC Address field. Step 5. Press [TAB] and enter a port number in the Port Num field. Step 6. Save the settings. Editing a Static MAC Address To change a static MAC address entry in the table, press [TAB] to select <Edit> and press [ENTER]. Enter a new MAC address or change the port number and save the changes. Deleting a Static MAC Address To remove a static MAC address entry from the table, press [TAB] to select <Delete> and press [ENTER]. Select the entry you want to remove and press [ENTER] and save the changes.

15.5.2 MAC Address Filtering

Follow the steps below to set up MAC address filtering. Step 1. In the MAC Address Configuration screen, select Filtering MAC Address and press [ENTER] to display the screen as shown. Switch Configuration 15-11

Dimension ES-2008 Ethernet Switch Editing MAC Address Filter To change a MAC address filter entry in the table, press [TAB] to select <Edit> and press [ENTER]. Enter a new MAC address or change the port number and save the changes. Deleting MAC Address Filter To remove a MAC address filter entry from the table, press [TAB] to select <Delete> and press [ENTER]. Select the entry you want to remove and press [ENTER] and save the changes.

15.6 Miscellaneous Configuration

Refer to the section on Port Security for background information. Switch Configuration 15-13

actions-> <Edit> <save> <Quit> ext ltem BackSpac: Quit-Previous menu Enter-Select Item Figure 15-15 SMT: Port Security The following table describes the fields in this screen. Table 15-7 SMT: Port Security FIELD DESCRIPTION Port This read-only field displays the port number or the trunk group on the switch Note: This field is 0 to indicate that a port is in a trunk group. Enable Press [SPACE BAR] and [ENTER] to select Enable to prevent the port from Security learning new MAC addresses. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

15.6.2 MAC Address Time Out

To specify the time out period for inactive MAC addresses, select Aging Time Setting to display the screen as shown next. Enter a time interval between 300 and 765 (in seconds) in the MAC Age Interval (sec) field. If you enter 0, the MAC addresses will never timeout. 15-14 Switch Configuration

: Bridge Transmit Delay Bound Bridge Transmit Delay Bound :OFF Enable Delay Bound :Disable Max Delay Time :0 ac <Edit> <save> <Quit> Tab=Next Item Backspace-Previous Item Quit-Previous menu Enter-Select Item Figure 15-18 SMT: Max Bridge Transmit Delay Bound Follow the instructions in this table to configure this screen. Table 15-8 SMT: Max Bridge Transmit Delay Bound FIELD DESCRIPTIONS Bridge Press [SPACE BAR] and [ENTER] to select one of 1 sec, 2 sec and 4 Transmit sec to set the packets queuing time in the switch. Packets queued Delay Bound beyond the time period will be dropped. Select off to disable this feature. Default is 1 sec. Enable Delay | Press [SPACE BAR] and [ENTER] to select Enable and specify a time in Bound the MAC Delay Time ms (in milliseconds) to limit the time a low priority packet is allowed to queue in the switch. Max Delay | Specify a time interval a low priority packet is allowed to queue in the Time | switch. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch. 15-16 Switch Configuration

Protocol Related Configuration This chapter shows you how to configure STP, SNMP, GVRP and LACP.

To access the STP menus, select STP Configuration in the Protocol Related Configuration screen. Refer to the STP chapter for more background information. Protocol Related Configuration 16-1

Dimension ES-2008 Ethernet Switch Table 16-1 SMT: STP Per Port Setting FIELD DESCRIPTION Port This read-only field displays the port number on the switch. State This read-only field displays the state of the port. The state can be Forward, Disable, Blocking, Learning and Listening. Path Cost Enter a number between 1 and 65535 in the Path Cost field. The smaller the number the lower the path cost is for the port. Priority Enter a number between 0 and 255 in the Priority field. The smaller the number, the higher the priority. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

Follow the steps below to add trap management stations. Step 1. Select Trap Managers in the SNMP Configuration screen and press [ENTER] to display the screen as shown next. Protocol Related Configuration 16-5

Refer to the VLAN chapter for more information on GVRP. 16-6 Protocol Related Configuration

Refer to the Port Trunking chapter for more information on LACP (Link Aggregate Control Protocol). LACP Configuration LACP Group Setting Port State Activity LACP Group Status Previous Menu Tab=Next Item BackSpace-Previous Item EnterhSelect Item Figure 16-12 SMT: LACP Configuration

16.5.1 LACP Group Setting

Select LACP Group Setting in the LACP Configuration screen and press [ENTER] to display the screen shown next. Protocol Related Configuration 16-7

Dimension ES-2008 Ethernet Switch Enabled Disabled actions-> <Quit> Tab=Next Item Ba menu Enter-Select Item Figure 16-13 SMT: LACP Group Setting Before you configure LACP, you must set the trunk groups first. Refer to the chapter on Port Trunking. The following table describes the fields in this screen. Table 16-2 SMT: LACP Group Setting FIELD DESCRIPTION Group This read-only field displays the trunk group number. LACP Press [SPACE BAR] and [ENTER] to select Enable to activate dynamic trunking on this trunk group. Work Port No. Enter the number of ports in the trunk group. If dynamic trunking is not activated on the trunk group then the number must be the same as the number of ports in the trunk group. If dynamic trunking is activated, you may enter a number bigger than the number of ports in a trunk group. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch. 16-8 Protocol Related Configuration

Select Port State Activity in the LACP Configuration screen and press [ENTER] to display the screen as shown. Dimension Switch ES-2008 : Port State Activity Port State Activity Active <Save> <Quit> Tab=Next Item BackSpace-Previous Item Quit-Previous menu Enter-Select Item Figure 16-14 SMT: LACP State Activity The following table describes the fields in this screen. Table 16-3 SMT: LACP State Activity FIELD DESCRIPTION Port This read-only field displays only the port number in a dynamic trunk group. For example, in Figure 16-14, port 5 and 6 (not shown) are not in a dynamic trunk group. State Activity | Press [SPACE BAR] to select either Passive or Active and press [ENTER]. Select Active to have the port automatically send LACP packets to another trunk port on the other side of the link to negotiate a trunk link configuration. Select Passive to have the port respond to LACP packets but cannot negotiate a trunk link configuration with another trunk port on the other end of the link. This is the default setting for all ports. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch.

16.5.3 LACP Group Status

The LACP Group Status screen displays the ports in a static trunk group. Protocol Related Configuration 16-9

Dimension ES-2008 Ethernet Switch LACP Group Status Static Trunking Group Group Key : 2 Port No 156 ous Page> <Next Page> s Item Quit-Previous menu Ente Figure 16-15 SMT: LACP Group Status The following table describes the fields in this screen. Table 16-4 SMT: LACP Group Status FIELD DESCRIPTION Group Key This read-only field displays the static trunk group number. Port This read-only field displays the port number in the static trunk group. Press [ESC] to move the cursor back to the actions menu. Press [TAB] to select <Save> and press [ENTER] to save the settings back to the switch. 16-10 Protocol Related Configuration

Status and Counters This chapter describes how to view port status and statistics and general switch information.

17.1 Status and Counters

In the SMT main screen, select Status and Counters and press [ENTER]. A screen displays as shown. ES-2008 : Status and Counters Port Status Port Counters stem Information Main Menu EnterhSelect Item Figure 17-1 SMT: Status and Counters

In the Status and Counters screen, select Port Status and press [ENTER] to display the Port Status screen. Status and Counters 17-1

actions-> <Refresh> <Clear> <Quit> ext ltem BackSpace-Previous ltem Quit-Previous menu Enter-Select Item Figure 17-3 SMT: Port Counters 17-2 Status and Counters

Dimension ES-2008 Ethernet Switch Refer to the Port Control chapter for field descriptions.

Firmware and Configuration File Maintenance This chapter shows you how to upgrade the firmware and configuration file and create configuration backup files.

18.1 Filename Convention

The firmware or the configuration files do not have any filename conventions. There is not specific file extension or filenames that you need to follow. Therefore, you can specify any names or file extensions for the firmware and the configuration files. However, it is recommended to use the “.bin” file extension for the firmware file and “rom” for the configuration file to manage the files. The filename must be less than 15 ASCII characters if you use the web configurator. Visit www.zyxel.com to download the latest version of firmware for your switch.

18.2 Firmware Upgrade

This section shows you how to perform firmware upgrades. . Download the correct firmware for your switch model from www.zyxel.com Upgrading wrong firmware version will render the fiber/gigabit port useless for switch models with a fiber/gigabit port. WARNING! DO NOT INTERRUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR SWITCH. To upload firmware to your switch via the web configurator, you need to run tftp server on your computer. In the event of your network being down, uploading files is only possible with a direct connection to your switch via the console port. Firmware and Configuration File Maintenance 18-1

Connect your computer to the console port on the switch. Step 1. Step 2. Run a terminal emulation program (Hyper Terminal in Windows screen shots are used in this Users Guide) and configure its communication parameters. Refer to the section on Accessing the SMT Using the Console Port. Reboot the switch. The following screen displays. Switch LOADER Checksum O.K 11! Press X key to start Xmodem receiver: Key = 78 Download IMAGE through console (1K Xmodem;baudrate=57600bps) Start Xmodem Receiver: Step 3. Step 4. Step 5. RECTONEE :x< Figure 18-1 SMT: Startup Message Atthe“$$$ Press X key to start Xmodem receiver:” message, press “x”. You must change your terminal emulation program console port baud rate setting to 57600bps. Click Transfer, then Send File to display the following screen. Type the firmware's file location or Folder. C:\Program Files\Windows een TT click Browse to look for it, Filename: [CAES 2008FWAImage bi Browse... Protocol: Choose the 1K Xmodem protocol. 1K Xmodem F] Eu Then click Send. Figure 18-2 1K Xmodem Firmware Upload Example 18-2 Firmware and Configuration File Maintenance

Dimension ES-2008 Ethernet Switch Switch LOADER Checksum O.K 1! Press X key to start Xmodem receiver: Ke: Download IMAGE through console (1K Xmodem; baudrate=57600bps) Start Xmodem Receiver: CCCCCCCCC Download IMAGE .... Update firmware Note: console baudrate of new image is 9600bps.. Reboot . . . . Figure 18-3 SMT: Firmware Upload Process Step 6. After the firmware upload process has completed, the switch will automatically restart. You must change the console port rate back to 9600bps. Step 7. Check the System Information screen to confirm that you have uploaded the correct firmware version.

18.2.2 Firmware Upgrade Using the Web Configurator

Follow the steps below to upgrade firmware via the web configurator. Step 1. Follow the steps in the Accessing the Web Configurator section to log in to the web configurator. Step 2. Run a TFTP server program on the computer and specify the location of the firmware file and the communication mode. Step 3. Click TFTP Update Firmware to display the screen as shown next. Firmware Down

Appiy | Help Figure 18-4 Web Configurator: Firmware Upgrade Step 4. Enter the IP address of the TFTP server, where the new firmware file resides, in the TFTP Server IP Address field. Step 5. Specify the name of the firmware file in the Firmware File Name field. The firmware filename must not be more than 15 ASCII characters and must be exactly the same as the firmware file on the computer. Firmware and Configuration File Maintenance 18-3

Dimension ES-2008 Ethernet Switch Step 6. Click Apply. The switch will download the new firmware file from the TFTP server. The following screen displays when the firmware is retrieved successfully from the TFTP server. Image download complete, click to finish upgrade. Update Firmware Figure 18-5 Web Configurator: Successful Firmware Retrieval Step 7. Click Update Firmware to save the firmware file to the switch. Step 8 Click Reboot to restart the switch. Step 9. Check the Firmware Version field in Switch Setting:Basic screen to confirm that you have uploaded the correct firmware version.

18.3 Configuration File Maintenance

You can only use the web configurator to perform configuration file backup and restore. WARNING! DO NOT INTERRUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR SWITCH.

18.3.1 Backup Configuration

Backup is highly recommended once your switch is functioning properly. Step 1. Run a TFTP server program on a computer and specify the location for saving the configuration file and set the communication mode. Step2. Click Configuration Backup and click on the TFTP Backup Configuration tab to display the screen as shown next. Configura UD TFTP Restore Configur.

Appiy | Help Figure 18-6 Backup Configuration Step 3. Enter the IP address of the TFTP server, where the backup configuration file will be stored, in the TFTP Server IP Address field. 18-4 Firmware and Configuration File Maintenance

Dimension ES-2008 Ethernet Switch Step 4. Specify the name of the configuration in the Backup File Name field. Step 5. Click Apply. The switch saves the system configuration file to the TFTP server. The following screen displays when the backup process is successful. Backup confiauration is completed, go to main. Figure 18-7 Web Configurator: Backup Configuration File Successful Step 6. Click on the message to go back to the main screen.

18.3.2 Restore Configuration

This section shows you how to restore a previously saved configuration. WARNING! DO NOT INTERRUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR SWITCH. This function erases the current configuration before restoring a previous back up configuration; please do not attempt to restore unless you have a backup configuration file stored on disk. Step 1. Run a TFTP server program on the computer and specify the location of a previously saved configuration file and set the communication mode. Step2. Click Configuration Backup and then the TFTP Configuration Restore tab to display the screen as shown next. Configuration Backup TFTP Restore Configurati Appiy | Help Figure 18-8 Web Configurator: Restore Configuration Step 3. Enter the IP address ofthe TFTP server, where a configuration file resides, in the TFTP Server IP Address field. Step 4. Specify the name of the configuration file in the Retore File Name field. Step 5. Click Apply. The switch will download the configuration file from the TFTP server. Firmware and Configuration File Maintenance 18-5

Dimension ES-2008 Ethernet Switch Step 6. Restart the switch. Make sure you enter the correct IP address to access the web configurator. The following message displays when the configuration file is retrieved successfully from the TFTP server. Restore configuration is completed, please reboot system. reboot Figure 18-9 Web Configurator: Successful Configuration File Retrieval Step 7. Click reboot to restart the switch. 18-6 Firmware and Configuration File Maintenance

Additional Information Part V: Additional Information Part V consists of troubleshooting, product specifications, appendices and an index.

19.1 Using LEDs to Diagnose Problems

The LEDs are useful aides for finding possible problem causes.

The PWR LED on the front panel does not light up. Table 19-1 Troubleshooting Power LED

STEPS CORRECTIVE ACTION

1 Check the connections from your switch to the power source. Make sure you are using the supplied power cord and proper power supply. Refer to the product specifications. 2 Make sure the power source is turned on and that the switch is receiving sufficient power. 3 If these steps fail to correct the problem, contact your local distributor for assistance.

19.1.2 The LK/ACT LED

The LK/ACT LED does not light up when a device is connected. Table 19-2 Troubleshooting LK/ACT LED

STEPS CORRECTIVE ACTION

1 Verify that the attached device(s) is turned on and properly connected to the switch. 2 Make sure the network adapters are working on the attached devices. 3 |Verify that 10/100/1000 M Ethernet cable length does not exceed 100 meters. For more information on network cables, see the section on network cable types.

The 100 LED does not show the speed of my Ethernet device. Troubleshooting 19-1

Dimension ES-2008 Ethernet Switch Table 19-3 Troubleshooting 100 LED STEPS CORRECTIVE ACTION Check the connection between the switch and your Ethernet device(s). Check that the port is enabled. Make sure you're using the correct table type and that the distance between the switch and the device does not exceed 100 meters.

Use this The FD/COL LED LED to check the duplex mode of the attached Ethernet device. Table 19-4 Troubleshooting FD/COL LED

STEPS CORRECTIVE ACTION

1 The Ethernet device is connected at full-duplex mode if the FD/COL LED is yellow. 2 |The Ethernet device is connected at half-duplex mode when the FD/COL LED is off. 3 Make sure you have the correct speed and flow control enabled for each port. Refer to the Port Control chapter. 3 This LED blinks if packet collisions are occurring. Collisions are normal, but if the FD/COL LED blinks very frequently, you may need to segment your network.

T cannot access the switch through the console port. Table 19-5 Troubleshooting Console Port

STEPS CORRECTIVE ACTION

1 Check to see if the switch is connected to your computer using the RS-232 cable. 2 Check to see if the communications program |Emulation: auto detect is configured correcily. Set the Baud Rate: 9600 bps communication parameters as stated here. No Parity, 8 data bits, 1 stop bit Flow Control: None 19-2 Troubleshooting

Dimension ES-2008 Ethernet Switch Table 19-5 Troubleshooting Console Port STEPS CORRECTIVE ACTION Make sure you entered the correct username and password. The default username is “admin” and the default password is “1234”. If you have forgot your username or password, refer to Section 19.5.

Telnet I cannot telnet into the switch. Table 19-6 Troubleshooting Telnet STEPS CORRECTIVE ACTION Make sure you are using the correct IP address of the switch. Check the IP address of the switch. 2 Ping the switch from your computer. If you cannot ping the switch, check the IP addresses of the switch and your computer. Make sure that both IP addresses are in the same subnet. 3 Make sure you entered the correct username and password. The default username is “admin” and the default password is “1234”. If you have forgot your username or password, refer to Section 19.5. 4 If these steps fail to correct the problem, contact the distributor.

T cannot access the web configurator. Table 19-7 Troubleshooting Web Configurator

1 Make sure you are using the correct IP address of the switch. Check the IP address of the switch. 2 Make sure you entered the correct username and password. The default username is “admin” and the default password is “1234”. If you have forgot your username or password, refer to Section 19.5. 3 Ping the switch from your computer. If you cannot ping the switch, check the IP addresses of the switch and your computer. Make sure that both IP addresses are in the same subnet. Troubleshooting 19-3

1 Make sure you are using Internet Explorer 5.0 and later versions. Delete the temporary web files and log in again. In Internet Explorer, click Tools, Internet Options and then click the Delete 2 Files … button. When a Delete Files window displays, select Delete all offline content and click OK. (Steps may vary depending on the version of your Internet browser.)

19.5 Login Username and Password

1 forgot my login username and/or password. Table 19-9 Troubleshooting Login Username and Password

STEPS CORRECTIVE ACTION

You need to set the switch back to factory default settings. This will erase all custom configurations. 4 Use a terminal emulation program to connect your computer to the console port on the switch. Refer to the Accessing the SMT Using the Console Port section. At the login screen, type “superuser” in the User Name field and “zyxel” in the 2 Password field. When you see a “INET>”" prompt, you are logged in with safe mode on. At the “INET>" prompt, type “flashdf” and press [ENTER]. À “Writing flash to 4 default value ….please wait” message displays. When the “INET>" prompt displays again, unplug the power cord to turn off the 5 switch, then turn on the switch. The default switch IP address is 192.168.1.1, default user name is “admin” and the default password is “1234”. 6 Itis highly recommended to change the default username and password. Make sure you store the username and password in a save place.

19.6 Improper Network Cabling and Topology

Improper network cabling or topology setup are common causes of poor network performance or even network failure. 19-4 Troubleshooting

PROBLEMS AND CORRECTIVE ACTION

Faulty cables Using faulty network cables may affect data rates and have an impact on your network performance. Replace with new standard network cables. Non-standard network cables Non-standard cables may increase the number of network collisions and cause other network problems that affect your network performance; refer to Chapter 2. Cabling Length If you use longer cables than are needed, transmission quality may be affected. [The network cables should not be longer than the limit of 100 meters. Too many hubs between the computers in the network Too many hubs (or repeaters) between the connected computers in the network may increase the number of network collision or other network problems. Remove unnecessary hubs from the network. A loop in the data path A data path loop forms when there is more than one path or route between two networked computers. This results in broadcast storms that will severely affect your network performance. Make sure there are no loops in your network topology. Troubleshooting 19-5

Dimension ES-2008 Ethernet Switch Appendix À Setting up Your Computer's IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package. TCP/IP should already be installed on computers using Windows NT/2000/XP, Macintosh OS 7 and later operating systems. Afier the appropriate TCP/IP components are installed, configure the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the Prestige's LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and DRE ‘x double-click the Network icon to open the EEE Network window. The folowirg geivoik components ae nalaled Ans Ve PCM al D NDISWAN à crabe (TOI à Datipadager LE TCPAP à ZA 100 Vérins PCM ï

es ner) Pa Ma Lagon ET | le and Sharg Dee TOPAË ie he poocchyou ue come he Ina ar ÉRnsie Come Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. Setting Up Your Computer's IP Address A

In the Network window, click Add. Select Adapter and then click Add. Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP:

In the Network window, click Add. Select Protocol and then click Add. Select Microsoft from the list of manufacturers. Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: Click Add. Select Client and then click Add. Select Microsoft from the list of manufacturers. Select Client for Microsoft Networks from the list of network clients and then click OK. Restart your computer so the changes you made take effect. Configuring In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties.

Click the IP Address tab. 2x If your IP address is dynamic, select Obtain Dr le an IP address automatically. AnIP cie on auowateah 2cgnec joe conpuer. -If you have a static IP address, select Specify a AE es an IP address and type your information into LES the IP Address and Subnet Mask fields. 6 RSI C° Specip ar ads un 2 | FF Detec connecten toner med Setting Up Your Computer's IP Address

Dimension ES-2008 Ethernet Switch Click the DNS Configuration tab. “I you do not know your DNS information, om can Pr select Disable DNS. € bison If you know your DNS information, select Ce Enable DNS and type the information in the Ha Haas fields below (you may not need to fill them all RE he ——— in). Click the Gateway tab. EE NE] “If you do not know your gateways IP address, | trier les cn fire remove previously installed gateways. Th ft na tr Gonop l d -f you have a gateway IP address, type it in D RER the New gateway field and click Add. Non caen

Click OK to save and close the TCP/IP Properties window. Click OK to close the Network window. Insert the Windows CD if prompted. Turn on your Prestige and restart your computer when prompted. Verifying Settings Click Start and then Run. In the Run window, type "winipcfg" and then click OK to open the IP Configuration window. Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. Setting Up Your Computer's IP Address C

Dimension ES-2008 Ethernet Switch Windows 2000/NT/XP 1 For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. 4 internet Explorer LL) M Documents à outlook Express (Drpmenoeanems + L'E 2 miser v. | D M éradient C3 re Lac Reader 40 M cover © raurunime Runner DIRES Psa sarowame D Cru Buse Dim rem. ue -Parr 2 For Windows XP, click Network 3 Right-click Local Area Connection and Connections. For Windows then click Properties. 2000/NT, click Network and Dial-up Connections. # control panel He Et veu Enentes Teck Hop Fie Ed Ve Fons ee Ares Han Q=-O-% Por Drum | [Qui O- | Pa Dr F- dites (© nero crrrecmne GP comirans CET See Also 2 | LANor High-Speed Internet Network Task CRE #, connetion Geo aber sel of nero. © Dci euro dre & Ross pi ere ecrrecren | a HS | Bear

comes indus pds Pdge Connections Create Shot connection Dee Renan Chang celte fie connection D Setting Up Your Computer’s IP Address

Deco Tansmision Corel Prat Proteo The dat ve Sea rEk pobcelhaipive cenrurieaion Se drone raommeeedneuree. LShoniein netrean ae ver conne 5 The Internet Protocol TCP/IP Properties window opens (the Fees | tenais Cort General tab in Windows XP). ao gr tg agrément Ca ho Pro a at lt -If you have a dynamic IP address Peee click Obtain an IP address pre automatically. fe __ -If you have a static IP address click Ce) Use the following IP Address and fill in the IP address, Subnet mask, SR Rem and Default gateway fields. Fri mHNi E— Click Advanced. ss

Setting Up Your Computer's IP Address E

Dimension ES-2008 Ethernet Switch 6 -lf you do not know your gateway's Advanced TCP/IP Settings. IP address, remove any previously LP Setinos [NS _ {wi | Optons installed gateways in the IP Settings raie tab and click OK. ES DRE DHCP End Do one or more of the following if you want to configure additional IP addresses: -In the IP Settings tab, in IP Dafout goieue addresses, click Add. Gaoves Het -In TCP/IP Address, type an IP address in IP address and a subnet mask in Subnet mask, and then click Add. laure met -Repeat the above two steps for —— each IP address you want to add. -Configure additional default = gateways in the IP Settings tab by clicking Add in Default gateways. -In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. -Click Add. -Repeat the previous three steps for each default gateway you want to add. -Click OK when finished.

Properties window (the General tab | au corrouaion in Windows XP): a eu can getIP sers signed eutamatcal if your neo uppots is capabits Dhs vou need sk vou nero adrinisal -Click Obtain DNS server address Lonee automatically if you do not know (© brain an IP ares aomaioa your DNS server IP address(es). (O Usetho lens P ao: -If you know your DNS server IP address(es), click Use the following = DNS server addresses, and type them in the Preferred DNS server (© him DNS server address automates and Alternate DNS server fields. D Useihefloming DNS sera esse If you have previously configured DNS servers, click Advanced and — then the DNS tab to order them. me

8. Click OK to close the Internet Protocol (TCP/IP) Properties window.

9. Click OK to close the Local Area Connection Properties window.

1. Click Start, AII Programs, Accessories and then Command Prompt.

2. Inthe Command Prompt window, type "ipconfig" and then press [ENTER]. You can

also open Network Connections, right-click a network connection, click Status and then click the Support tab. Setting Up Your Computer's IP Address G

2. Select (e] TCP/IP “E

Ethernet built- meet vi in from the peer Connect via list. er cmt LT] 1 haress: wi be supplied ty server > Contigure (DE DEEP Serre = Santa: Evilbe aupphed by server > Router adress: Cite sup by server > Srarot conans: Pam server sde € lle sup y serve

3. For dynamically assigned settings, select Using DHCP Server from the Configure:

4. For statically assigned settings, do the following:

-From the Configure box, select Manually. H Setting Up Your Computer's IP Address

Dimension ES-2008 Ethernet Switch -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your Prestige in the Router address box.

7... Turn on your Prestige and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. Macintosh OS X

1. Click the Apple menu, and click

System Preferences to open the System Preferences window. Grab File About This Mac Get Mac OS X Software Edit Capu Dock Location

2. Click Network in the ee Network =

Click the lock to prevent further changes. App 3 For dynamically assigned settings, select Using DHCP from the Configure list. Setting Up Your Computer's IP Address

Dimension ES-2008 Ethernet Switch

4. For statically assigned settings, do the following:

-From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your Prestige in the Router address box.

5. Click Apply Now and close the window.

6. Turn on your Prestige and restart your computer (if prompted).

Verifying Settings Check your TCP/IP properties in the Network window. J Setting Up Your Computer's IP Address

Dimension ES-2008 Ethernet Switch Appendix B IP Subnetting Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes. The class of an address depends on the value of its first octet. > Class “A” addresses have a 0 in the left most bit. In a class “A” address the first octet is the network number and the remaining three octets make up the host ID. > Class “B” addresses have a 1 in the left most bit and a 0 in the next left most bit. In a class “B” address the first two octets make up the network number and the two remaining octets make up the host ID. > Class “C” addresses begin (starting from the left) with 1 1 0. In a class “C” address the first three octets make up the network number and the last octet is the host ID. > Class “D” addresses begin with 1 1 1 0. Class “D” addresses are used for multicasting. (There is also a class “E” address. It is reserved for future use.) Chart 1 Classes of IP Addresses

IP ADDRESS: OCTET1 OCTET2 OCTET 3 OCTET 4

Class À | 0 Network number Host ID Host ID Host ID Class B | 10 Network number | Network number Host ID Host ID Class C | 110 | Network number | Network number | Network number Host ID Host IDs of all zeros or all ones are not allowed. Therefore: > A class “C” network (8 host bits) can have 2° 2 or 254 hosts. > A class “B” address (16 host bits) can have 2-2 or 65534 hosts. A class “A” address (24 host bits) can have 2 -2 hosts (approximately 16 million hosts). Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A7 address can have a value of 0 to 127. L IP Subnetting

Dimension ES-2008 Ethernet Switch Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B” address has a valid range of 128 to 191. The first octet of a class “C” address begins with “110”, and therefore has a range of 192 to 223. Chart 2 Allowed IP Address Range By Class CLASS ALLOWED RANGE OF FIRST ALLOWED RANGE OF FIRST OCTET (BINARY) OCTET (DECIMAL) Class À 00000000 to 01111111 0 to 127 Class B 10000000 to 10111111 128 to 191 Class C 11000000 to 11011111 192 to 223 Class D 11100000 to 11101111 224 to 239 Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation). À subnet mask has 32 bits; each bit of the mask corresponds to a bit of the IP address. If a bit in the subnet mask is a “1” then the corresponding bit in the IP address is part of the network number. If a bit in the subnet mask is “0” then the corresponding bit in the IP address is part of the host ID. Subnet masks are expressed in dotted decimal notation just as IP addresses are. The “natural” masks for class À, B and C IP addresses are as follows. Chart 3 “Natural” Masks

A 255.0.0.0 B 255.255.0.0 C 255.255.255.0 Subnetting With subnetting, the class arrangement of an IP address is ignored. For example, a class C address no longer has to have 24 bits of network number and 8 bits of host ID. With subnetting, some of the host ID bits are converted into network number bits. By convention, subnet masks always consist of a continuous sequence of ones beginning from the left most bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” followed by the number of bits in the mask after the address. IP Subnetting M

Dimension ES-2008 Ethernet Switch For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with mask 255.255.255.128. The following table shows all possible subnet masks for a class “C” address using both notations. Chart 4 Alternative Subnet Mask Notation SUBNET MASK IP SUBNET MASK “1” BITS LAST OCTET BIT ADDRESS VALUE

The first mask shown is the class “C” natural mask. Normally if no mask is specified it is understood that the natural mask is being used. Example: Two Subnets As an example, you have a class “C” address 192.168.1.0 with subnet mask of

IP Address 192.168.1. 0 IP Address (Binary) 11000000.10101000.00000001. | 00000000 Subnet Mask 255.255.255. 0 Subnet Mask (Binary) | 11111111.11111111.11111111. | 00000000 The first three octets of the address make up the network number (class “C”). You want to have two separate networks. Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The “borrowed” host ID bit can be either “0” or “1” thus giving two subnets; 192.168.1.0 with mask 255.255.255.128 and

192.168.1.128 with mask 255.255.255.128.

In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after N IP Subnetting

Dimension ES-2008 Ethernet Switch “borrowing”) determines the number of hosts you can have on each subnet. Chart 5 Subnet 1

VALUE IP Address 192.168.1. 128 IP Address (Binary) 11000000.10101000.00000001. | 10000000 Subnet Mask 255.255.255. 128 Subnet Mask (Binary) | 11111111.11111111.11111111. | 10000000 Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 The remaining 7 bits determine the number of hosts each subnet can have. Host IDs of all zeros represent the subnet itself and host IDs of all ones are the broadcast address for that subnet, so the actual number of hosts available on each subnet in the example above is 2? 2 or 126 hosts for each subnet.

192.168.1.0 with mask 255.255.255.128 is the subnet itself, and 192.168.1.127 with mask

255.255.255.128 is the directed broadcast address for the first subnet. Therefore, the

lowest IP address that can be assigned to an actual host for the first subnet is 192.168.1.1 and the highest is 192.168.1.126. Similarly the host ID range for the second subnet is

192.168.1.129 to 192.168.1.254.

Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The IP Subnetting O

Dimension ES-2008 Ethernet Switch subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. Each subnet contains 6 host ID bits, giving 2-2 or 62 hosts for each subnet (all O’s is the subnet itself, all 1’s is the broadcast address on the subnet). Chart 7 Subnet 1 NETWORK NUMBER

ADDRESS ADDRESS ADDRESS ADDRESS

The following table is a summary for class “C” subnet planning. Chart 12 Class C Subnet Planning NO. “BORROWED” SUBNET MASK NO. NO. HOSTS PER

4 255.255.255.240 (/28) 16 14 5 255.255.255.248 (/29) 32 6 6 255.255.255.252 (/30) 64 2 7 255.255.255.254 (/31) 128 1 Subnetting With Class À and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A? address has three host ID octets (see Chart 1) available for subnetting. The following table is a summary for class “B” subnet planning. Chart 13 Class B Subnet Planning NO. “BORROWED” SUBNET MASK NO. NO. HOSTS PER

Dimension ES-2008 Ethernet Switch Performance and Management Switching Method Store-and-forward MAC Address 8000 entries per main switch Table Data Buffer 256 Kbyte VLAN IEEE 802.1Q tag-based VLAN, 4095 Max Port-based VLAN IÉEE 802.1p 2 queues Priority Queues Port Trunking IEEE802.1ad port trunking, up to 4 groups, up to 8 ports for each group Port Security Static MAC address filtering Multicasting Support IGMP snooping Broadcast Storm Support broadcast storm control Port Mirroring All ports support port mirroring Management Local console Telnet Web-Based management SNMP Management Username/Password needed for Console, Telnet and Web Security management authentication MIBs RFC 1213(MIB-I1) RFC 1493(Bridge MIB) RFC 1643 RMON Support RMON 4 groups (1,2,3,9) Console Port DB-9 RS-232C Physical and Environmental Weight Main switch: 1.08Kg U Product Specifications

MAC Address Filter MAC Address Filtering 8-12, 15-11 MAC Address Time Out. 15-14 MAC Table Address Entry Age-out time. .. 5-2 Management Information Base (MIB) 15-9 Mirror port Miscellaneous Configuration Monitor port. Monitor Ports