Enable-IT 8924 User manual

All Rights Reserved 1997 - 2015 ENABLE-IT- Proprietary and Confidential
Enable-IT
8924 DSLAM
Ethernet Extender
User Manual

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 2 of 73
Copyright © 1997-2014 Enable-IT, Inc. All rights reserved. No part of this
documentation may be reproduced in any form or by any means or used to make
any derivative work (such as translation, transformation, or adaptation) without
written permission from Enable-IT, Inc.
Enable-IT, Inc. reserves the right to revise this documentation and to make
changes in content from time to time without obligation on the part of Enable-IT,
Inc. to provide notification of such revision or change.
Enable-IT, Inc. provides this documentation without warranty, term, or condition
of any kind, either implied or expressed, including, but not limited to, the implied
warranties, terms or conditions of merchantability, satisfactory quality, and fitness
for a particular purpose. Enable-IT, Inc. may make improvements or changes in
the product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is
furnished under a license agreement included with the product as a separate
document, in the hard copy documentation. If you are unable to locate a copy,
please contact Enable-IT, Inc. and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the
software described herein are provided to you subject to the following:
All technical data and computer software are commercial in nature and
developed solely at private expense. Software is delivered as "Commercial
Computer Software" as defined in DFARS 252.227-7014 (June 1995) or as a
"commercial item" as defined in FAR 2.101 (a) and as such is provided with only
such rights as are provided in Enable-IT, Inc.'s standard commercial license for
the Software.
Technical data is provided with limited rights only as provided in DFAR 252.227-
7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable. You
agree not to remove or deface any portion of any legend provided on any
licensed program or documentation contained in, or delivered to you in
conjunction with, this User Guide.
Unless otherwise indicated, Enable-IT, Inc. registered trademarks are registered
in the United States and may not be registered in other countries.

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 3 of 73
COPYRIGHT BY ENABLE-IT,INC.ALL RIGHTS RESERVED
2
TABLE OF CONTENTS
3
CHAPTER 1INTRODUCTION
5
1.1 PACKAGE CONTENTS
5
1.2 FEATURES
5
1.3 SPECIFICATIONS
7
CHAPTER 2HARDWARE INSTALLATION
9
2.1 FRONT PANEL
9
2.1.1 CONNECTORS
9
2.1.2 LED INDICATORS
10
2.1.3 RESET BUTTON
10
2.2 PIN ASSIGNMENT OF THE RJ-21 CABLE
11
CHAPTER 3WEB CONFIGURATION
12
3.1 ADMINISTRATION
15
3.1.1 IP ADDRESS
15
3.1.2 SWITCH SETTING
16
3.1.3 CONSOLE PORT INFORMATION
19
3.1.4 PORT CONFIGURATION
19
3.1.5 SNMP CONFIGURATION
23
3.1.6 SYSLOG SETTING
28
3.1.7 ALARM CONFIGURATION
28
3.1.8 TEMPERATURE &FAN STATUS
29
3.1.9 FIRMWARE UPDATE
29
3.1.10 CONFIGURATION BACKUP
30
3.1.11 SNTP SETTING
31
3.2 L2 FEATURES
32
3.2.1 VLAN CONFIGURATION
32
3.2.1.1 STATIC VLAN
33
3.2.1.2 GVRP VLAN
35
3.2.1.3 QINQ VLAN
38
3.2.2 TRUNKING
40
3.2.2.1 FORWARDING &FILTERING
42
3.2.3.1 IGMP SNOOPING
44
3.2.4.1 SPANNING TREE
45
3.2.5.1 SYSTEM CONFIGURATION
46
3.2.6.1 PERPORT CONFIGURATION
48
3.2.6.2 INSTANCE
48
3.2.6.3 INTERFACE
49
3.2.6.4.1 DHCP RELAY &OPT.82
49
3.2.6.5 DHCP OPTION 82
50
3.2.6.6 DHCP RELAY
50
3.2.6.7 DHCP OPTION 82 ROTUER PORT
51
3.2.6.8 DHCP OPT. 82 PORT TABLE
51
3.3 ACL
51
3.3.1 IPV4
53
3.3.2 NON-IPV4 54

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 4 of 73
3.3.3 BINDING
54
3.4 SECURITY
56
3.4.1 SECURITY MANAGER
56
3.4.2 MAC LIMIT 57
3.4.3 802.X CONFIGURATION
58
3.5 QOS
60
3.5.1QOS CONFIGURATION
61
3.5.2 TOS/DSCP
63
3.6 MONITORING
63
3.6.1PORT STATUS
64
3.6.2 PORT STATISTICS
65
3.7 VDSL
66
3.7.1 CONFIGURATION
66
3.7.2 PROFILE TABLE
68
3.8 RESET SYSTEM
69
3.9 REBOOT
69
TECHNICAL SUPPORT
70
WARRANTY REPAIR
70
RETURN POLICY
70
LIMITED WARRANTY
71
CONTACT US 73

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 5 of 73
1. Introduction
Thank you for choosing the Enable-IT 8924 Extended Ethernet DSLAM. These
products are the cost-effective switching solution ideal for small businesses,
Telecom, ISP (Internet Service Provider), or SI (System Integration) for a
competitive network edge. The 8924 VDSL2 DSLAM is a 24-port solution with a
2-port Gigabit Ethernet combo interface (TP and SFP) in a 1.5U height design.
This concentrator offers the benefits of high speed connectivity with an intuitive
management system, robust layer 2 features with advanced security settings,
and a reliable hardware design with monitoring system integration.
1.1 Package Contents
The Enable-IT 8924 Extended Ethernet DSLAM includes the following items:
(1) Enable-IT 8924 VDSL2 DSLAM Concentrator
(1) Enable-IT 8924 User Manual
(1) Country Specific Power Cord
(1) DB9-RJ-45 Serial Console Cable
(1) 19” Set of Rack Mountable Brackets and Screws
(4) Rubber Feet for storage
1.2 Features
(24) 10/100BaseX Ethernet ports (2) 10/100/1,000BaseX Ethernet ports and
Ethernet switch controller
Supports SMII for 10/100BaseX ports
Supports GMII/MII/TBI for 10/100/1,000BaseX ports
All packet buffer and control data memory embedded
Flow control support:
o802.3x pause frame uses for full-duplex ports
oCollision-based back-pressure for half-duplex ports, carrier-based
back-pressure not supported
Half and full-duplex operations:
oFull-duplex operation supported on 10/100/1,000Mbps ports
oHalf-duplex operation supported on 10/100Mbps ports only
Supports 802.1D bridge self-learning, storing up to8L + 256 unicast or
multicast addresses
Supports automatic age-out period between 1 to 1,000,000 seconds
Broadcast storm filtering based on ingress port bandwidth
HOL blocking prevention
Deadlock relief

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 6 of 73
Auto-polling via MDC/MDIO management interface for auto-configuration of
speed, duplex mode, and flow control capability of all Ethernet ports
9K+ jumbo packets supported on per port and per VLAN basis
Supports layer 2 source filtering
Supports 802.1D Spanning Tree Algorithm and Protocol, 802.1w Rapid
Reconfiguration
Flexible per-port VLAN classification option supports port-based VLAN
domain and 802.1Q VLAN domain simultaneously
Supports independent VLAN Learning (IVL) and Shared VLAN Learning (SVL)
Supports 802.1X Port-based Network Access Control
Supports 802.3ad Aggregation of Multiple Link Segments
oStatistical load-balancing algorithm may be configured to be the
function of source and destination MAC addresses, ingress port ID,
source and destination IP addresses, and TCP/UDP source and
destination ports
Supports BPDU, LACP, EAPOL suppression based on per port configuration
Supports 64 VLAN-dependent Spanning Trees
Supports IP multicast and snooping of IGMP and IP multicast routing protocol
PDU
oIncluding IGMP, CBT, OSPF, and PIM v2
IP multicast packets may be forwarded within single VLAN or across multiple
VLANs
oCross-VLAN mode allows each egress port to have its own tag rule
and VID for IP multicast packets
Port mirroring
Supports 802.1p Traffic Priority
ToS-to-802.1p priority mapping is enabled on per-VLAN basis
Flexible per-port prioritization option:
oThe prioritization result can be made to other switches in the network
by replacing priority field in VLAN tag
Four priority egress queues per port
Scheduling algorithms: strict priority or weighted round robin
Four RMON groups (1,2,3,9)
Supports MIB of RFC1213, 1573, 11757, 1643, 2233
Programmable LED output provides:
oSerial LED output provides basic status of all Ethernet ports, or
oPort 24/25 link status and broadcast storm indicator
MAC address table synchronization assistance
Asymmetric VLAN membership for better network security:
oDistinguish ingress VLAN member and egress VLAN member
oPrevents a station to sneak in VLANs set up for common servers
Improved VLAN ingress rules may specify:
oFiltering untagged packets or VLAN tagged packets
oFiltering packets received on non-ingress VLAN member ports
Supports insertion of 2nd tag with different TPIC to VLAN-tagged packets

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 7 of 73
Port-based ingress rate policing and egress rate pacing
Supports Layer 2/3/4 (Layer 2+) classification:
oStandard-length IPv4 packets can use layer 2 VLAN-tag ID, IP protocol,
Source IP, Destination IP, TCP/UDP Destination Port and Source Port,
and TCP SYN field for classification
oNon-standard or non-IPv4 packets use part of layer 2/3 header for
classification
oUp to 256 different classification rules supported
oEach classification rule is associated with an action code
oPacket and byte counters for all classification rules to record match
statistics
Supports Layer 2+ based VLAN classification scheme:
oIP subnet based and Protocol-based VLAN achievable by means of
layer 2+ classification
oMay override VID in VLAN-tag
Supports filtering, redirecting, and/or mirroring of packets based on Layer 2+
classification result
oRedirects IPv6 packets to IPv6-capable network devices
SMAC/SIP binding for IPv4 packets can be implemented
Layer 2+ packet classification result ay be used to define packet priority
Priority adjustment based on per port profile and per VLAN property
oPriority of a packet can be upgraded or downgraded based on setting
of the ingress port and VLAN
Supports protected port, protected port group, and unprotected port group
VID in transmitted packets can be replaced by a fixed VID associated with the
egress port
oThe VID to be swapped in by egress port can be different than the
default VID for untagged ingress packets
CPU interface: alternatively
o32-bit 33MHz PCI interface
o16-bit PIO interface with three DMA controllers
Programmable byte-swap capability of MIB counter memory access
Programmable event triggered interrupts allowing software to respond to or
ignore an array of exceptions
332-ball PBGA package
1.8V core and SRAM voltage, and 3.3V pad voltage

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 8 of 73
1.3 Specifications
Hardware
Case:
1.5U High Pizza-Box Type Enclosure
Interface:
24 VDSL2 Ports
(2) RJ-45 100/1,000Mbps Ethernet Combo Ports
Management Ethernet
(1) RS-232 Serial Console
POTS Splitter
LED Indicators:
SYS, ALM, LINK, ACT
(24) VDSL LEDs
Standards Support:
VDSL2 ITU-T G.993.2
VDSL2 Profiles: 8a, 8b, 8c, 8d, 12a, 12b, 17a and 30a
802.d L2 Bridging
DHCP Server/Client/Relay
IEEE 802.1q VLAN (port-based VLAN and Protocol-Based VLAN)
VLAN Stacking (Q-in-Q)
IEEE 802.1p Spanning Tree Protocol (STP)
IEEE 802.3ad Link Aggregation
Protocol Support:
IGMP Snooping/Proxy v1, v2 and v3
Multicast Forwarding with IGMP Snooping v1 and v2 (RFC 1112 and RFC
2236)
Multicast MAC address mapping
Up to 512 Multicast Channels
Profile-based Multicast Access Control (up to 24 profiles)
Fast and Normal Leave Modes
Security:
L2 Frame Filtering by MAC Addresses
L3 Frame Filtering by IP Addresses, protocol ID, and TCP/UDP
DHCP and ARP Broadcasting Frames Filtering
Support Secured Forwarding

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 9 of 73
Management:
Support OAM&P Functions
Support VLAN Priority Queue (IEEE 802.1p)
Support CoS, ToS, DSCP, etc.
Support SNMP v1/v2/v3 and MIB I/II
Web-based Graphical User Interface, Telnet, CLI and SSH
Operating Requirements:
Operating Temperature: 14°F to 122°F (-10°C to 50°C)
Storage Temperature: -40°F to 158°F (-40°C to 70°C)
Relative Humidity: Up to 95% (non-condensing)
2. Hardware Installation
This section shows the front image of the 8924 DSLAM and how to install the
hardware.
2.1 Front Panel
The 8924 DSLAM includes all connectors and LED indicators on its front panel
so only a few installation steps are required to build the network solution.
2.1.1 Connectors
POTS – The 8924 DSLAM includes (24) built-in splitters, POTS, with a
Telco-50/RJ-21 cable for telephone services.
LINE – Line is for connecting (24) VDSL2 ports with a Telco-50/RJ-21
cable.
ALARM – For alarm inputs and outputs.
CONSOLE – Users are able to access the 8924 DSLAM locally with the
CONSOLE port. Via the CONSOLE ports, users are able to configure the
8924 DSLAM with menu-driven interface with any terminal emulation
program, such as, Hyperterminal and Terterm. (115200, 8, None, 1, None)

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 10 of 73
GE1 & GE2 (Gigabit Ethernet 1 & 2) – For connecting Gigabit Ethernet,
the 8924 DSLAM provides Gigabit Ethernet combo interfaces, TP and
SFP.
oTP: 10/100/1,000 BaseT copper (RJ-45 connector).
oSFP: 1000 Base-SX/LX mini-GBIC slot.
POWER – The connector is for 100V ~ 240V AC power inputs
(50Hz~60Hz, 1.5A).
2.1.2 LED Indicators
2.1.3 Reset Button
The reset button allows the users to reboot the 8924 DSLAM or load the default
settings.

Blinking

On

Off
VDSL LINK (1 ~ 24) VDSL2 link is active
(transmitting data or
training)
VDSL2 link is
ready
VDSL2 link is
down
RUN/ALARM
System up
Alarm is detected
No alarm
PWR
Power On
Power Off
GE1/GE2
LINK/ACT
SPEED

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 11 of 73
2.2 Pin Assignment of the RJ-21 Cable
PIN COLOR PORT PIN COLOR PORT PIN COLOR PORT
1 Black P24 9 White P16 17 White P8
26
Orange
34
Brown
42
Gray
2
Black
P23
10
White
P15
18
Red
P7
27
Blue
35
Green
43
Blue
3
Red
P22
11
White
P14
19
Red
P6
28
Gray
36
Orange
44
Orange
4
Red
P21
12
White
P13
20
Red
P5
29
Brown
37
Blue
45
Green
5
Red
P20
13
White
P12
21
Red
P4
30
Green
38
Blue
46
Brown
6
Red
P19
14
White
P11
22
Red
P3
31
Orange
39
Orange
47
Gray
7
Red
P18
15
White
P10
23
Black
P2
62
Blue
40
Green
48
Blue
8
White
P17
16
White
P9
24
Black
P1
33 Gray 41 Brown 49 Orange
Press the reset button for Action
1 ~ 5 seconds Reboot the IP DSLAM
Load the default settings

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 12 of 73
3. Web Configuration
The 8924 DSLAM allows users to manage and change configurations with a
web browser interface. Users are able to login to the web management system
with any standard web browser, such as, Internet Explorer, Firefox, Safari,
Chrome, etc.
Default IP Address 192.168.0.100
Default User Name
admin
Default Password admin
Table 1 Default Login Information
Note: Please make sure the IP address is correct once the IP of the
management web site is changed.
Once users are able to login to the web management page successfully, the
login message box will pop up as the following image.
Once the correct login authentication information is inputted, the main page of
the management system will appear like the following image.

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 13 of 73
The Home page of the management system includes three major sections.
1. Title Section
This section indicated the model name of the device.
2. Menu Section
The Menu section is located on the left hand side of the page and users are
allowed to change the configuration and review the status of the device by
interacting with this section.

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 14 of 73
3. Information Section
The Information section present the real-time LED status and the current status
of the 8924 DSLAM.
The following sections will introduce users to the features of the 8924 DSLAM.
Administration (3.1)
L2 Features (3.2)
ACL (3.3)
Security (3.4)
QoS (3.5)
Monitoring (3.6)
VDSL (3.7)
Reset System (3.8)
Reboot (3.9)

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 15 of 73
3.1 Administration
The Administration section is for users to manage the 8924 DSLAM, including
the IP address, switch settings, port configuration, etc. It includes the following
detailed functions:
IP Address
Switch Setting
Console Port Info
Port Configuration
SNMP Configuration
Syslog Settings
Alarm Configuration
Temperatures & Fan Status
Firmware Update
Configuration Backup
SNTP Setting
3.1.1 IP Address

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 16 of 73
The IP Address function includes four criteria which users are allowed to change.
DHCP mode
oDisable or enable DHCP mode
oThe value of this mode will decide whether the IP address is a
static IP address or a dynamic IP address.
IP Address
Subnet Mask
Default Gateway
3.1.2 Switch Setting
The Switch Setting present information of the switch in the following sub-
functions. Note only the Misc Config section allows users to change the settings
of the switch.
Basic
In the Basic tab, the basic information of the 8924 DSLAM is presented.
oModel Name
oDescription
oMAC Address
oFirmware Version
oBoard Type
oHardware Version

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 17 of 73
Module Info
The Module section shows the information of the Gigabit uplink ports, Gigabit
Ethernet 1 and Gigabit Ethernet 2.
Note: in the following contents, these two uplinks will be called Mod1 and
Mod2.
Misc Config
Users are allowed to modify the following details of the switch.
oMAC address age-out time
This value is for setting up how many seconds that an inactive
MAC address remains.
oTurn on port interval
This value for setting up the time interval that the CPU port should
be enabled after flooding attacks. Note: 0 means never enable the
CPU port.
oBroadcast storm filter mode

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 18 of 73
This feature is to set up the threshold value of broadcast traffic for
ports.
Options: off, 1/2, 1/4, 1/8, 1/16 (Note: the value is the percentage
of the ports ingress bandwidth used by broadcast traffic.
oBroadcast storm filters packets select
This option allows users to choose the type of the target packet for
broadcast storm filter mode.
If there is no type chosen, this means broadcast storm filter mode
is off.
Options: broadcast packets, IP multicast, control packets, and
flooded unicast/multicast packets.
oCollisions retry forever
This function will allow users to choose how many times the 8924
DSLAM should retry when a packet meets a collision.
Disable, 16, 32 or 48 collision number.
Note: when the function is disabled, this means the 8924 DSLAM
will retry for 6 times before packets are dropped. Otherwise, it will
retry continuously until the packet is sent successfully.
oHash algorithm
This option is for choosing a hash algorithm for MAC address table.
CRC-Hash or DirectMap.
oIP/MAC binding
This feature allows user to enable or disable IP/MAC binding
function.
Enable or disable.
o802.1x protocol
802.1x protocol is able to enable or disable via this option.
Enable or disable.
Users are able to save the modified settings by clicking on the “Apply” button.
“Default” button is for restoring the default settings. The “Help” button will
provide some information about the features with another window.
3.1.3 Console Port Information

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 19 of 73
This section is for users to review the settings of the console port, which allows
users to connect and manage the 8924 DSLAM I the Command Line Interface
(CLI) mode.
3.1.4 Port Configuration
The Port Configuration section includes four detailed functions of the 8924
VDSL2 ports and Gigabit Ethernet uplink ports:
Port Controls
Port Sniffer
Protected Port
VDSL Port Status
Port Controls
Connect to PC via DB9-RJ45
console cable.

All Rights Reserved 1997 - 2015 Enable-IT, Inc. Page 20 of 73
The Port Control allows users to configure the Gigabit Ethernet uplink ports and
trunking ports if there exists any. The following parameters can be adjusted:
oState
This option will enable or disable the selected port.
Enable or Disable.
Note: Disable means to turn off the selected port; and this means
there will be no traffic going through this port.
oNegotiation
Users are able to decide whether the Gigabit Ethernet uplink ports
should be auto-negotiable or not.
Options: auto or force
Note: If force mode is selected, users have to provide the
information of Speed and Duplex.
oSpeed
Users can setup the speed of the Gigabit Ethernet uplink ports in
this function.
10, 100, 1000Mbps
oDuplex
Half or Full
oFlow Control
Options: enable or disable
Enable: send a PAUSE signal to the sender and halts the traffic for
a period of time.
Disable: drop the exceed packets when there are too any packets
to process.
oRate Control
Users are able to set up the specific rate for both ingress and
egress ports. Therefore, the 8924 DSLAM will control the rate to
meet the specified rate.
Note: the valid rate range is 0 ~ 8000; and the unit is 128Kbps.
oSecurity
This function is to decide whether the 8924 DSLAM will forward all
incoming packets from both secured MAC addresses and unknown
MAC addresses.
Options: enable or disable
Enable: only packets from secured MAC addresses will forwarded.
Disable: all packets will be forwarded.
oBSF
BSF stands for Broadcast Storm Filtering. It is able to enable or
disable this function by port.
Options: enable or disable
oJumbo Frame
Uses are able to choose whether the 8924 DSLAM forwards jumbo
frame packets or not.
Options: enable or disable