Benutzerhandbuch für ZyXEL Communications ES-4124

Inhaltsverzeichnis

• User’s Guide

  1
  • About This User's Guide

    3
  • Document Conventions

    4
  • Safety Warnings

    6
  • Contents Overview

    9
  • Table of Contents

    11
  • List of Figures

    25
  • List of Tables

    31
• Introduction

  35
  • Getting to Know Your Switch

    37
    • 1.1 Introduction

      37
      • 1.1.1 Backbone Application

        37
      • 1.1.2 Bridging Example

        38
      • 1.1.3 High Performance Switching Example

        38
      • 1.1.4 IEEE 802.1Q VLAN Application Examples

        39
    • 1.2 Ways to Manage the Switch

      39
    • 1.3 Good Habits for Managing the Switch

      40
  • Hardware Installation and Connection

    41
    • 2.1 Freestanding Installation

      41
    • 2.2 Mounting the Switch on a Rack

      42
      • 2.2.1 Rack-mounted Installation Requirements

        42
      • 2.2.2 Attaching the Mounting Brackets to the Switch

        42
      • 2.2.3 Mounting the Switch on a Rack

        43
  • Hardware Overview

    45
    • 3.1 Panel Connections

      45
      • 3.1.1 Console Port

        46
      • 3.1.2 Ethernet Ports

        46
      • 3.1.3 Mini-GBIC Slots

        46
    • 3.2 Rear Panel

      48
      • 3.2.1 Power Connector

        48
      • 3.2.2 External Backup Power Supply Connector

        49
    • 3.3 LEDs

      49
• Basic Configuration

  51
  • The Web Configurator

    53
    • 4.1 Introduction

      53
    • 4.2 System Login

      53
    • 4.3 The Status Screen

      54
      • 4.3.1 Change Your Password

        59
    • 4.4 Saving Your Configuration

      59
    • 4.5 Switch Lockout

      59
    • 4.6 Resetting the Switch

      60
      • 4.6.1 Reload the Configuration File

        60
    • 4.7 Logging Out of the Web Configurator

      61
    • 4.8 Help

      61
  • Initial Setup Example

    63
    • 5.1 Overview

      63
      • 5.1.1 Configuring an IP Interface

        63
      • 5.1.2 Configuring DHCP Server Settings

        64
      • 5.1.3 Creating a VLAN

        65
      • 5.1.4 Setting Port VID

        66
      • 5.1.5 Enabling RIP

        67
  • System Status and Port Statistics

    69
    • 6.1 Overview

      69
    • 6.2 Port Status Summary

      69
      • 6.2.1 Status: Port Details

        70
  • Basic Setting

    75
    • 7.1 Overview

      75
    • 7.2 System Information

      75
    • 7.3 General Setup

      77
    • 7.4 Introduction to VLANs

      79
    • 7.5 Switch Setup Screen

      79
    • 7.6 IP Setup

      81
      • 7.6.1 IP Interfaces

        81
    • 7.7 Port Setup

      83
• Advanced Setup

  87
  • VLAN

    89
    • 8.1 Introduction to IEEE 802.1Q Tagged VLANs

      89
      • 8.1.1 Forwarding Tagged and Untagged Frames

        89
    • 8.2 Automatic VLAN Registration

      90
      • 8.2.1 GARP

        90
      • 8.2.2 GVRP

        90
    • 8.3 Port VLAN Trunking

      91
    • 8.4 Select the VLAN Type

      91
    • 8.5 Static VLAN

      91
      • 8.5.1 Static VLAN Status

        92
      • 8.5.2 Static VLAN Details

        92
      • 8.5.3 Configure a Static VLAN

        93
      • 8.5.4 Configure VLAN Port Settings

        94
    • 8.6 Subnet Based VLANs

      96
    • 8.7 Configuring Subnet Based VLAN

      97
    • 8.8 Protocol Based VLANs

      98
    • 8.9 Configuring Protocol Based VLAN

      99
    • 8.10 Create an IP-based VLAN Example

      100
    • 8.11 Port-based VLAN Setup

      101
      • 8.11.1 Configure a Port-based VLAN

        102
  • Static MAC Forward Setup

    105
    • 9.1 Overview

      105
    • 9.2 Configuring Static MAC Forwarding

      105
  • Filtering

    107
    • 10.1 Configure a Filtering Rule

      107
  • Spanning Tree Protocol

    109
    • 11.1 STP/RSTP Overview

      109
      • 11.1.1 STP Terminology

        109
      • 11.1.2 How STP Works

        110
      • 11.1.3 STP Port States

        111
      • 11.1.4 Multiple RSTP

        111
      • 11.1.5 Multiple STP

        112
    • 11.2 Spanning Tree Protocol Status Screen

      114
    • 11.3 Spanning Tree Configuration

      115
    • 11.4 Configure Rapid Spanning Tree Protocol

      116
    • 11.5 Rapid Spanning Tree Protocol Status

      118
    • 11.6 Configure Multiple Rapid Spanning Tree Protocol

      119
    • 11.7 Multiple Rapid Spanning Tree Protocol Status

      121
    • 11.8 Configure Multiple Spanning Tree Protocol

      122
    • 11.9 Multiple Spanning Tree Protocol Status

      125
  • Bandwidth Control

    129
    • 12.1 Bandwidth Control Overview

      129
      • 12.1.1 CIR and PIR

        129
    • 12.2 Bandwidth Control Setup

      129
  • Broadcast Storm Control

    131
    • 13.1 Broadcast Storm Control Setup

      131
  • Mirroring

    133
    • 14.1 Port Mirroring Setup

      133
  • Link Aggregation

    135
    • 15.1 Link Aggregation Overview

      135
    • 15.2 Dynamic Link Aggregation

      135
      • 15.2.1 Link Aggregation ID

        136
    • 15.3 Link Aggregation Status

      136
    • 15.4 Link Aggregation Setting

      137
    • 15.5 Link Aggregation Control Protocol

      138
    • 15.6 Static Trunking Example

      140
  • Port Authentication

    143
    • 16.1 Port Authentication Overview

      143
      • 16.1.1 IEEE 802.1x Authentication

        143
      • 16.1.2 MAC Authentication

        144
    • 16.2 Port Authentication Configuration

      145
      • 16.2.1 Activate IEEE 802.1x Security

        145
      • 16.2.2 Activate MAC Authentication

        146
  • Port Security

    149
    • 17.1 About Port Security

      149
    • 17.2 Port Security Setup

      149
  • Classifier

    153
    • 18.1 About the Classifier and QoS

      153
    • 18.2 Configuring the Classifier

      153
    • 18.3 Viewing and Editing Classifier Configuration

      156
    • 18.4 Classifier Example

      157
  • Policy Rule

    159
    • 19.1 Policy Rules Overview

      159
      • 19.1.1 DiffServ

        159
      • 19.1.2 DSCP and Per-Hop Behavior

        159
    • 19.2 Configuring Policy Rules

      160
    • 19.3 Viewing and Editing Policy Configuration

      162
    • 19.4 Policy Example

      163
  • Queuing Method

    165
    • 20.1 Queuing Method Overview

      165
      • 20.1.1 Strictly Priority

        165
      • 20.1.2 Weighted Fair Queuing

        165
      • 20.1.3 Weighted Round Robin Scheduling (WRR)

        166
    • 20.2 Configuring Queuing

      166
  • VLAN Stacking

    169
    • 21.1 VLAN Stacking Overview

      169
      • 21.1.1 VLAN Stacking Example

        169
    • 21.2 VLAN Stacking Port Roles

      170
    • 21.3 VLAN Tag Format

      171
      • 21.3.1 Frame Format

        171
    • 21.4 Configuring VLAN Stacking

      172
  • Multicast

    175
    • 22.1 Multicast Overview

      175
      • 22.1.1 IP Multicast Addresses

        175
      • 22.1.2 IGMP Filtering

        175
      • 22.1.3 IGMP Snooping

        175
      • 22.1.4 IGMP Snooping and VLANs

        176
    • 22.2 Multicast Status

      176
    • 22.3 Multicast Setting

      176
    • 22.4 IGMP Snooping VLAN

      178
    • 22.5 IGMP Filtering Profile

      180
    • 22.6 MVR Overview

      181
      • 22.6.1 Types of MVR Ports

        181
      • 22.6.2 MVR Modes

        182
      • 22.6.3 How MVR Works

        182
    • 22.7 General MVR Configuration

      182
    • 22.8 MVR Group Configuration

      184
      • 22.8.1 MVR Configuration Example

        185
  • Authentication & Accounting

    189
    • 23.1 Authentication, Authorization and Accounting

      189
      • 23.1.1 Local User Accounts

        189
      • 23.1.2 RADIUS and TACACS+

        190
    • 23.2 Authentication and Accounting Screens

      190
      • 23.2.1 RADIUS Server Setup

        190
      • 23.2.2 TACACS+ Server Setup

        192
      • 23.2.3 Authentication and Accounting Setup

        194
      • 23.2.4 Vendor Specific Attribute

        197
    • 23.3 Supported RADIUS Attributes

      198
      • 23.3.1 Attributes Used for Authentication

        199
      • 23.3.2 Attributes Used for Accounting

        199
  • IP Source Guard

    203
    • 24.1 IP Source Guard Overview

      203
      • 24.1.1 DHCP Snooping Overview

        203
      • 24.1.2 ARP Inspection Overview

        205
    • 24.2 IP Source Guard

      207
    • 24.3 IP Source Guard Static Binding

      207
    • 24.4 DHCP Snooping

      209
    • 24.5 DHCP Snooping Configure

      212
      • 24.5.1 DHCP Snooping Port Configure

        213
      • 24.5.2 DHCP Snooping VLAN Configure

        215
    • 24.6 ARP Inspection Status

      216
      • 24.6.1 ARP Inspection VLAN Status

        216
      • 24.6.2 ARP Inspection Log Status

        217
    • 24.7 ARP Inspection Configure

      219
      • 24.7.1 ARP Inspection Port Configure

        220
      • 24.7.2 ARP Inspection VLAN Configure

        221
  • Loop Guard

    223
    • 25.1 Loop Guard Overview

      223
    • 25.2 Loop Guard Setup

      225
• IP Application

  227
  • Static Route

    229
    • 26.1 Configuring Static Routing

      229
  • RIP

    231
    • 27.1 RIP Overview

      231
    • 27.2 Configuring RIP

      231
  • OSPF

    233
    • 28.1 OSPF Overview

      233
      • 28.1.1 OSPF Autonomous Systems and Areas

        233
      • 28.1.2 How OSPF Works

        234
      • 28.1.3 Interfaces and Virtual Links

        234
      • 28.1.4 OSPF and Router Elections

        234
      • 28.1.5 Configuring OSPF

        235
    • 28.2 OSPF Status

      235
    • 28.3 OSPF Configuration

      237
    • 28.4 Configure OSPF Areas

      239
      • 28.4.1 View OSPF Area Information Table

        240
    • 28.5 Configuring OSPF Interfaces

      240
    • 28.6 OSPF Virtual-Links

      242
  • IGMP

    245
    • 29.1 IGMP Overview

      245
      • 29.1.1 How IGMP Works

        246
    • 29.2 Port-based IGMP

      247
    • 29.3 Configuring IGMP

      247
  • DVMRP

    249
    • 30.1 DVMRP Overview

      249
    • 30.2 How DVMRP Works

      249
      • 30.2.1 DVMRP Terminology

        250
    • 30.3 Configuring DVMRP

      250
      • 30.3.1 DVMRP Configuration Error Messages

        251
    • 30.4 Default DVMRP Timer Values

      252
  • IP Multicast

    253
    • 31.1 IP Multicast Overview

      253
    • 31.2 Configuring Multicast

      253
  • Differentiated Services

    255
    • 32.1 DiffServ Overview

      255
      • 32.1.1 DSCP and Per-Hop Behavior

        255
      • 32.1.2 DiffServ Network Example

        256
    • 32.2 Two Rate Three Color Marker Traffic Policing

      256
      • 32.2.1 TRTCM - Color-blind Mode

        257
      • 32.2.2 TRTCM - Color-aware Mode

        257
    • 32.3 Activating DiffServ

      258
      • 32.3.1 Configuring 2-Rate 3 Color Marker Settings

        258
    • 32.4 DSCP-to-IEEE 802.1p Priority Settings

      260
      • 32.4.1 Configuring DSCP Settings

        260
  • DHCP

    263
    • 33.1 DHCP Overview

      263
      • 33.1.1 DHCP Modes

        263
      • 33.1.2 DHCP Configuration Options

        263
    • 33.2 DHCP Status

      264
    • 33.3 DHCP Server Status Detail

      264
    • 33.4 DHCP Relay

      265
      • 33.4.1 DHCP Relay Agent Information

        265
      • 33.4.2 Configuring DHCP Global Relay

        266
      • 33.4.3 Global DHCP Relay Configuration Example

        267
    • 33.5 Configuring DHCP VLAN Settings

      268
      • 33.5.1 Example: DHCP Relay for Two VLANs

        270
  • VRRP

    271
    • 34.1 VRRP Overview

      271
    • 34.2 VRRP Status

      272
    • 34.3 VRRP Configuration

      273
      • 34.3.1 IP Interface Setup

        273
      • 34.3.2 VRRP Parameters

        274
      • 34.3.3 Configuring VRRP Parameters

        275
      • 34.3.4 Configuring VRRP Parameters

        276
    • 34.4 VRRP Configuration Examples

      276
      • 34.4.1 One Subnet Network Example

        276
      • 34.4.2 Two Subnets Example

        278
• Management

  281
  • Maintenance

    283
    • 35.1 The Maintenance Screen

      283
    • 35.2 Load Factory Default

      284
    • 35.3 Save Configuration

      284
    • 35.4 Reboot System

      285
    • 35.5 Firmware Upgrade

      285
    • 35.6 Restore a Configuration File

      286
    • 35.7 Backup a Configuration File

      286
    • 35.8 FTP Command Line

      287
      • 35.8.1 Filename Conventions

        287
      • 35.8.2 FTP Command Line Procedure

        287
      • 35.8.3 GUI-based FTP Clients

        288
      • 35.8.4 FTP Restrictions

        288
  • Access Control

    289
    • 36.1 Access Control Overview

      289
    • 36.2 The Access Control Main Screen

      289
    • 36.3 About SNMP

      290
      • 36.3.1 SNMP v3 and Security

        291
      • 36.3.2 Supported MIBs

        291
      • 36.3.3 SNMP Traps

        291
      • 36.3.4 Configuring SNMP

        294
      • 36.3.5 Configuring SNMP Trap Group

        296
      • 36.3.6 Setting Up Login Accounts

        297
    • 36.4 SSH Overview

      299
    • 36.5 How SSH works

      299
    • 36.6 SSH Implementation on the Switch

      300
      • 36.6.1 Requirements for Using SSH

        300
    • 36.7 Introduction to HTTPS

      300
    • 36.8 HTTPS Example

      301
      • 36.8.1 Internet Explorer Warning Messages

        301
      • 36.8.2 Netscape Navigator Warning Messages

        302
      • 36.8.3 The Main Screen

        302
    • 36.9 Service Port Access Control

      303
    • 36.10 Remote Management

      304
  • Diagnostic

    307
    • 37.1 Diagnostic

      307
  • Syslog

    309
    • 38.1 Syslog Overview

      309
    • 38.2 Syslog Setup

      309
    • 38.3 Syslog Server Setup

      310
  • Cluster Management

    313
    • 39.1 Clustering Management Status Overview

      313
    • 39.2 Cluster Management Status

      314
      • 39.2.1 Cluster Member Switch Management

        315
    • 39.3 Clustering Management Configuration

      316
  • MAC Table

    319
    • 40.1 MAC Table Overview

      319
    • 40.2 Viewing the MAC Table

      320
  • IP Table

    321
    • 41.1 IP Table Overview

      321
    • 41.2 Viewing the IP Table

      322
  • ARP Table

    323
    • 42.1 ARP Table Overview

      323
      • 42.1.1 How ARP Works

        323
    • 42.2 Viewing the ARP Table

      323
  • Routing Table

    325
    • 43.1 Overview

      325
    • 43.2 Viewing the Routing Table Status

      325
  • Configure Clone

    327
    • 44.1 Configure Clone

      327
• Commands and Troubleshooting

  329
  • Introducing Commands

    331
    • 45.1 Overview

      331
    • 45.2 Accessing the CLI

      331
      • 45.2.1 The Console Port

        331
    • 45.3 The Login Screen

      332
    • 45.4 Command Syntax Conventions

      332
    • 45.5 Changing the Password

      333
    • 45.6 Creating a New IP Interface

      333
    • 45.7 Privilege Levels

      334
    • 45.8 Command Modes

      334
    • 45.9 Getting Help

      335
      • 45.9.1 List of Available Commands

        336
    • 45.10 Using Command History

      337
    • 45.11 Saving Your Configuration

      337
      • 45.11.1 Switch Configuration File

        338
      • 45.11.2 Logging Out

        338
    • 45.12 Command Summary

      338
      • 45.12.1 User Mode

        338
      • 45.12.2 Enable Mode

        339
      • 45.12.3 General Configuration Mode

        349
      • 45.12.4 interface port-channel Commands

        375
      • 45.12.5 interface route-domain Commands

        380
      • 45.12.6 config-vlan Commands

        382
    • 45.13 mvr Commands

      383
  • User and Enable Mode Commands

    385
    • 46.1 Overview

      385
    • 46.2 show Commands

      385
      • 46.2.1 show system-information

        385
      • 46.2.2 show ip

        386
      • 46.2.3 show logging

        386
      • 46.2.4 show interface

        386
      • 46.2.5 show mac address-table

        387
    • 46.3 ping

      388
    • 46.4 traceroute

      388
    • 46.5 Copy Port Attributes

      389
    • 46.6 Configuration File Maintenance

      389
      • 46.6.1 Using a Different Configuration File

        390
      • 46.6.2 Resetting to the Factory Default

        390
  • Configuration Mode Commands

    391
    • 47.1 Enabling IGMP Snooping

      391
    • 47.2 Configure IGMP Filter

      392
    • 47.3 Enabling STP

      393
    • 47.4 no Command Examples

      394
      • 47.4.1 Disable Commands

        394
      • 47.4.2 Resetting Commands

        395
      • 47.4.3 Re-enable commands

        395
      • 47.4.4 Other Examples of no Commands

        395
    • 47.5 Queuing Method Commands

      397
    • 47.6 Static Route Commands

      398
    • 47.7 Enabling MAC Filtering

      398
    • 47.8 Enabling Trunking

      399
    • 47.9 Enabling Port Authentication

      400
      • 47.9.1 RADIUS Server Settings

        400
      • 47.9.2 Port Authentication Settings

        401
  • Interface Commands

    403
    • 48.1 Overview

      403
    • 48.2 Interface Command Examples

      403
      • 48.2.1 interface port-channel

        403
      • 48.2.2 IEEE 802.3ah Link Layer Ethernet OAM Implementation

        403
      • 48.2.3 bpdu-control

        405
      • 48.2.4 broadcast-limit

        406
      • 48.2.5 bandwidth-limit

        406
      • 48.2.6 mirror

        407
      • 48.2.7 gvrp

        407
      • 48.2.8 ingress-check

        408
      • 48.2.9 frame-type

        408
      • 48.2.10 weight

        408
      • 48.2.11 egress set

        409
      • 48.2.12 qos priority

        409
      • 48.2.13 name

        410
      • 48.2.14 speed-duplex

        410
      • 48.2.15 test

        410
    • 48.3 Interface no Command Examples

      411
      • 48.3.1 no bandwidth-limit

        411
  • IEEE 802.1Q Tagged VLAN Commands

    413
    • 49.1 Configuring Tagged VLAN

      413
    • 49.2 Global VLAN1Q Tagged VLAN Configuration Commands

      414
      • 49.2.1 GARP Status

        414
      • 49.2.2 GARP Timer

        414
      • 49.2.3 GVRP Timer

        415
      • 49.2.4 Enable GVRP

        415
      • 49.2.5 Disable GVRP

        415
    • 49.3 Port VLAN Commands

      415
      • 49.3.1 Set Port VID

        415
      • 49.3.2 Set Acceptable Frame Type

        416
      • 49.3.3 Enable or Disable Port GVRP

        416
      • 49.3.4 Modify Static VLAN

        416
      • 49.3.5 Delete VLAN ID

        418
    • 49.4 Enable VLAN

      418
    • 49.5 Disable VLAN

      418
    • 49.6 Show VLAN Setting

      418
  • Multicast VLAN Registration Commands

    421
    • 50.1 Overview

      421
    • 50.2 Create Multicast VLAN

      421
  • Routing Domain Command Examples

    423
    • 51.0.1 interface route-domain

      423
  • Troubleshooting

    425
    • 52.1 Problems Starting Up the Switch

      425
    • 52.2 Problems Accessing the Switch

      425
      • 52.2.1 Pop-up Windows, JavaScripts and Java Permissions

        426
    • 52.3 Problems with the Password

      431
• Appendices and Index

  433
  • Product Specifications

    435
  • IP Addresses and Subnetting

    441
  • Legal Information

    449
  • Customer Support

    453
  • Index

    457