ZyXEL Communications AAM1008-61 Instruction Manual

ZyXEL AAM1008-61 V2.05(DN.2)C0
Release Note/Manual Supplement
Date: May 24, 2005
This document describes the features in the AAM1008-61 product for its V2.05(DN.2)C0
release.
Version:
F/W Version: V2.05(DN.2)C0 | 05/24/2005
Firmware-related Information:
F/W Version V2.05(DN.2)C0 | 05/24/2005
Bootcode Version V1.0
Modem Code Version AC5 AnnexA 3.70 patch
Image File Checksum 8228
Init File Checksum 9d66
Bin File Checksum eebf
SNMP SYS OID 1.3.6.1.4.1.890.1.5.11.6
Features:
1. 10/100 Mbps auto-sensing Ethernet port.
2. Support IEEE 802.1D transparent bridge.
3. ADSL ports support RFC 1483 Bridge Mode.
4. Support port-based VLAN.
5. Firmware upgrade and configuration backup/restore.
6. Telnet manageable.
7. SNMP manageable.
8. Web GUI management interface.
9. IGMP snooping.
10. IEEE 802.1Q tagging for subscriber identification.
11. Per port MAC filtering to filter out un-allowed packets.
12. UNIX syslog mechanism to log ADSL link on/down events to remote server.
13. System error log mechanism to log system events locally.
14. Secured access hosts protection.
15. MAC count filtering.
16. Multiple PVC & ATM QoS.
17. DHCP Relay with option 82.
18. IEEE 802.1X - Port-Based Network Access Control
Known Issue:
1. The behavior for MIB ipRouteTable (1.3.6.1.2.1.4.21) is incorrect.
2. When one sets the IP address and net mask with CLI or web interface, the validity for them is not
checked.
3. When a MAC Filter address 0:0:0:0:0:0 is set, one can’t get it from the web interface.

4. When setting two conflicting SNMP access hosts, the more general one overrides the more
specific one.
5. TCP session will be lost if attacking by hacker.
6. The AAM1008 EMS, windows edition, V1.10 might not be used to configure the setting regarding
the following features supported in this f/w version.
a. MAC count filter
b. IGMP snooping
c. Set date time
7. The web interface doesn’t support the setting regarding the following features supported in this f/w
version.
a. Set date time
8. CLI - “vlan1q config reset” not support
9. The subnet mask may not work when not setting the IP of gateway and the device in the same
subnet.
10. 802.1X constraint:
a. EAPOL frames transmitted by a PAE shall not be VLAN tagged according to IEEE 802.1X
standard. The 802.1X implementation of AAM1008-61 doesn’t support priority-tagging
EAPOL frames also.
b. The PAE must associate itself with the super channel in a port.
Limit of Settings:
1. 802.1Q VLAN: 400
2. Bridge mac filter entry/per port: 5
3. Bridge dynamic mac count: 4096
4. Bridge static mac count: 5
5. IGMP snooping multicast group: 256
6. Line profile: xdsl port number * 2 (including default profiles)
7. VC profile: xdsl port number * 2 (including default profiles)
8. VC channel/per port: 8
9. Secured host: 10
10. DHCP server supported by Relay Agent: 10
11. Static route: unlimited (In fact, it is limited by memory)
12. SNMP access list: 10
13. SNMP trap list: 10
Bug Fix:
1. CPU port may receive packets not belonging to the Management VLAN under certain condition.
2. Packets transmitted out from CPU port may forward to all ports not joining the Management
VLAN.
3. Enabling fast mode of bridge may lead to system crash.
4. Issuing the command of "config save" continuously may lead to system crash.
5. When using SNMP manager to set adslLineConfProfile attribute of one adsl port, system may
reboot because of an error of "address exception".
6. Enhance security of web configurator for internal file protection.
Change History:
V2.05(DN.2)C0 (05/24/2005)
 This firmware is modified from V2.05(DN.1)C0
 IGMP snooping can distinguish multiple users joining the same multicast group in a port.
V2.05(DN.1)C0 (07/29/2004)
 This firmware is modified from V2.05(DN.0)C0
 Add Dying-Gasp event to unix syslog
 Add the constraint of minimum length of 3 on the SNMP community string. (For length
less than 3, please correct the corresponding script in init file manually.)

V2.05(DN.0)C0 (07/12/2004)
 This firmware is modified from V2.04(DN.3)C0
 Dying-Gasp support (INFO event in errlog)
 IEEE 802.1X - Port-Based Network Access Control
 IGMP Snooping - unknown-discard mode
 Web configurator – DHCP Relay and 802.1X support
 DHCP Relay – add “enable”, “disable” commands (by default, DHCP Relay is disabled.)
 Remove following commands, including “event”, “oam”, “portcli”, “edd event”, “edd
interface”, “edd status”, “ip ipatm”, “ip nat”, “ip relay”, “ip norelay” and “ip rip”
 Zyxel-AS.mib support for 802.1X and DHCP Relay (1.3.6.1.4.1.890.1.5.1.1)
 Limit the maximum year value to 2036 in CLI – “sys date”
 Limit SNMP “access list” and “trap list” to maximum number of 10 respectively
 Extend the VLAN entry to maximum number of 400 in web GUI
V2.04(DN.3)C0 (12/17/2003)
 This firmware is modified from V2.04(DN.2)C0
 Change modem code version to "AC5 AnnexA 3.70 patch"
 Zyxel-AS.mib support for adsl line configuration operation
(1.3.6.1.4.1.890.1.5.1.1.16)
 Zyxel-AS.mib support for the configuration of packet forwarding
(1.3.6.1.4.1.890.1.5.1.1.20)
 Zyxel.mib support for the configuration of virtual channel & vc profile
(1.3.6.1.4.1.890.1.5.14)
 Add DHCP relay default configuration to ROM file
V2.04(DN.2)C0 (10/30/2003)
 This firmware is modified from V2.04(DN.1)C0
 Multiple PVC and ATM QoS feature
 DHCP Relay with option 82
 ADSL fast mode support

Firmware Upgrade:
The AAM1008-61 uses FTP to upgrade firmware in run-time through its built-in FTP server. To
upgrade the firmware, first download the firmware (the file with “img” extension name) from the
ZyXEL web site and store it on your computer. You can use any FTP client (for example, ftp.exe in
Windows) to upgrade AAM1008-61 firmware. The upgrade procedure is as follows:
On management station:
C:\> ftp <AAM1008-61 IP address>
User name: <Enter>
Password: 1234
230 Logged in
ftp> put 205DN2C0.img image
ftp> quit
Where
 User name: just press <Enter>
 Password: the management password, 1234 by default
 205DN2C0.img: the name of firmware file you want to upgrade
 image: the internal firmware name in AAM1008-61
On AAM1008-61:
After management station has successfully put the firmware and quitted the FTP client application, one
just waits for the updating completion and then AAM1008-61 will reboot automatically. Do not power
off AAM1008-61 while the updating process is in progress.
Firmware Recovery:
When the firmware in non-volatile memory is damaged, the AAM1008-61 uses BOOTP/TFTP to
recover in boot-time through its built-in BOOTP/TFTP client. To recover the firmware, first download
the recovery firmware (the file with “bin” extension name) from the ZyXEL web site and store it on
your computer. You can use any BOOTP/TFTP server (for example, BootpTftp.exe) to recover
AAM1008-61 firmware. The recovery procedure for server BootpTftp.exe is as follows:
1. Connect your AAM1008-61’s LAN port to a PC’s LAN port through the Ethernet cable.
2. Connect your AAM1008-61’s console port to a PC’s serial port through the RS-232 cable.
3. Run any terminal emulation program, e.g., Windows’ built-in HyperTerminal, with the following
parameters:
- VT100 terminal emulation
- 9600 bps
- No parity, 8 data bits, 1 stop bit
- No flow control

4. Run BootpTftp.exe, you will see the following window.

5. Click the “New” button to create a MAC address entry. The “Input Box” will pop up.

6. Input MAC address of AAM1008-61 and then click “OK”. (You can find the MAC address of
AAM1008-61 on console when booting AAM1008-61.)

7. Set up host address (the IP address you want to assign to AAM1008-61), server address (the IP
address of this PC), net mask, gateway and filename (the new firmware name). And then click
“Update Database”.

8. Choose “Normal Bootp” to enable normal BOOTP/TFTP function.

9. Power on AAM1008-61 and press any key within 3 seconds as indicated by the following figure.
10. Type “atnb” and then press Enter key on console window.
11. Wait for the firmware uploading to complete.
12. Use the following commands on AAM1008-61 to write the new firmware to flash memory.
- 192.168.1.1> flashfs
- 192.168.1.1 flashfs> update
13. Wait for the update to complete and then restart AAM1008-61.
Configuration Backup/Restore:
The AAM1008-61 uses FTP to backup/restore configuration through its built-in FTP server. You can
use any FTP client (for example, ftp.exe in Windows) to backup/restore AAM1008-61 configuration.
The procedure is as follows:
On management station:
C:\> ftp <AAM1008-61 IP address>
User name: <Enter>
Password: 1234
230 Logged in
ftp> get init
ftp> put init
ftp> quit
Where
 User name: just press <Enter>
 Password: the management password, 1234 by default
 get init: backup the configuration into local file - init
 put init: restore the configuration by local file - init
On AAM1008-61:
After management station has successfully put the configuration file and quitted the FTP client
application for restoring configuration, one just waits for updating completion and then AAM1008-61
will reboot automatically. Do not power off AAM1008-61 while the updating process is in progress.