ZyXEL Communications ES-2024A Manual

ZyXEL ES-2024 Series
(ES-2024A)
Ethernet Switch
Support Notes
Version 3.60
March 2006

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
2
INDEX
How to manage & maintain your Switch?
Firmware Upgrade
Restore a Configuration File
Backing Up a Configuration File
Load Factory Defaults
Physical Switch connection
Connecting two switches via Fiber Channel
Separating a physical network into many virtual networks
Introduction to Virtual LAN
Port Based Virtual LAN
Setting up Port Based VLAN
IEEE 802.1Q Tag-based VLAN
Setting up Tag-based VLAN
IP Multicasting
IGMP Snooping
To ring a network by building reducdent links and connections between Switch
Introduction to Spanning Tree Protocol
How does Spanning Tree Protocol Work?
Switching security
MAC freeze
Centralized Management
Introduction of SNMPc and NetAtlas
*NetAtlas v1.01 supports ES-2024A
Cluster Management -- iStacking
FAQ
What is the default setting of the IP parameters?
What is the default login Name and Password of the Web
Configuration?
How to access the Switch through the console port?
What is default login password of the console, telnet, and FTP?
How to change the password?
How to access the Command Line Interface?
If I forgot the Switch password, how can I reset the password to
default?
How do I configure an IP address?
Is Online Help available on the Web GUI?
How to restart device from Web?
How to check the current running firmware version?
Is the mini GBIC transceiver hot-swappable?
What are the differences between ES-2024 and ES-2024A?

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
3
Remaining:
Some demonstration in this support note may not use the exact model that you
are using. However, their functions and settings work the same way.
How to manage & maintain your Switch?
Firmware Upgrade
From Web GUI:
1. Download (and unzipped) the correct model firmware to your computer.
2. Click Management and then Maintenance in the navigator panel to bring
up the following screen.
3. Click on the “Click Here” link of the Firmware Upgrade to bring up the
following screen.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
4
4. Browse the firmware located or type in the path into the “File Path” field.
5. Click on the Upgrade button.
From Console Port:
1. Download (and unzipped) the correct model firmware to your computer.
2. Connect to the console port and open the Terminal Emulation Software.
3. Restarting the switch to enter the debug mode via the terminal.
4. Enter “ATUR”.
5. Use X-modem protocol to transfer (Send File) the firmware.
6. Enter “ATGO” to restart the switch after done uploading the firmware.
From Command Line FTP:
1. Download (and unzipped) the correct model firmware to your computer.
2. Launch the FTP client on your PC to login to Switch. (From the command
prompt, type “ftp <Switch IP>”
3. Press “Enter” for the User name
4. Enter password to get the ftp prompt.
5. Enter “bin” to set transfer mode to binary.
6. Use “put” to transfer the firmware from the computer to the switch, for
example: “put firmware.bin ras” transfers the firmware on your computer
(firmware.bin) to the switch and renames it “ras”.
7. Enter “quit” to exit the ftp prompt.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
5
Restore a Configuration File
From Web GUI:
1. Click Management and then Maintenance in the navigator panel to bring
up the following screen.
2. Click on the “Click Here” link of the Restore Configuration to bring up the
following screen.
3. Browse to locate the file with the file name or type in the path and the file
name into the “File Path” field.
4. Click on the Restore button.
From Console Port:
1. Connect to the console port and open the Terminal Emulation Software.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
6
2. Restarting the Switch to enter the debug mode via the terminal.
3. Enter “ATLC”
4. Use X-modem protocol to transfer (Send File) the firmware.
5. Enter “ATGO” to restart the Switch after done uploading the configuration
file.
From Command Line FTP:
1. Download (and unzipped) the correct model firmware to your computer.
2. Launch the FTP client on your PC to login to Switch. (From the command
prompt, type “ftp <Switch IP>”.
3. Press “Enter” for the User name
4. Enter password to get the ftp prompt.
5. Enter “bin” to set transfer mode to binary.
6. Use “put” to transfer the the configuration file from the computer to the
switch, for example: “put comfig.rom rom-0” transfers the firmware on your
computer (config.rom) to the switch and renames it “rom-0”.
7. Enter “quit” to exit the ftp prompt.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
7
Backing Up a Configuration File
From Web GUI:
1. Click Management and then Maintenance in the navigator panel to bring
up the following screen.
2. Click on the “Click Here” link of the Backup Configuration to bring up the
following screen.
3. Click on the “Backup” button to bring up the File Download dialog. Then,
clicking on the Save button to backup the configuration rom file to a proper
location.
From Console Port:
1. Connect to the console port and open the Terminal Emulation Software.
2. Restarting the Switch to enter the debug mode via the terminal.
3. Enter “ATTD”

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
8
4. Use X-modem protocol to transfer (Receive File) the firmware.
5. Enter “ATGO” to restart the Switch after done uploading the configuration
file.
From Command Line FTP:
1. Download (and unzipped) the correct model firmware to your computer.
2. Launch the FTP client on your PC to login Switch. (From the command
prompt, type “ftp <Switch IP>”
3. Press “Enter” for the User name
4. Enter password to get the ftp prompt.
5. Enter “bin” to set transfer mode to binary.
6. Use “get” to transfer the firmware from the computer to the switch, for
example: “get rom-0 config.rom” transfers the firmware on your computer
(config.rom) to the switch and renames it “config.rom”.
7. Enter “quit” to exit the ftp prompt.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
9
Load Factory Defaults
From Web GUI:
1. Click Management and then Maintenance in the navigator panel to bring
up the following screen.
2. Click on the “Click Here” button of the Load Factory Defaults to bring up
the following screen.
3. A dialog pops up with the message “Are you sure you want to load factory
defaults?”.
4. Click OK to go to the following dialog.
5. Click on the OK button. Now, all switch configurations has been reset to
the factory defaults and the system will be restarted.
6. Please note that the switch IP address is now 192.168.1.1.
From Console Port:
1. Connect to the console port and open the Terminal Emulation Software.
2. Type in the correct password to bring up the prompt.
Type “erase run” to load the factory default configurations.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
10
Physical Switch connection
How to connect two switches via Fiber Channel
Your Switch may come with one or many mini-GB ports. ZyXEL offers Small
Form-factor Pluggable (SFP) transceivers for Gigabit Ethernet and Fiber
Channel applications. These small, modular optical interface transceivers offer
a convenient and cost effective solution for the adoption of Gigabit Ethernet
and Fiber Channel in data center, campus, metropolitan area access, ring
networks, and storage area networks. It supports full duplex Gigabit speeds
and hot-pluggable feature.
Scenario
In this scenario, ES-2108-LC is connected to GS-4024 via the mini-GB
Port with a LC/LC Fiber cable (62.5/125MM). PC “Alpha” is connected to
ES-2108-LC and another PC “Delta” is connected to the GS-4024 Switch via
the RJ45 Port.
What you need here to complete this scenario:

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
11
zZyXELSwitchwithMini-GBport x2
(note: Each ES-2024A comes with 2 Mini-GB Port)
zSFP-SX Transceiver x2
zLC/LC Fiber Cable (62.5/125MM) x1
Here is the photo of the SFP-SX Transceiver & the LC/LC Fiber Cable.
Steps to complete this scenario
1. First, pick up your ES-2108-LC and GS-4024Switch and power them up.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
12
Photo of the ES-2108-LC Switch
2. Find both Mini-GB Port on ES-2108-LC and GS-4024.
3. Get one transceiver and plug it into the Mini-GB Port of ES-2108-LC

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
13
4. Plug another transceiver into the Mini-GB Port of GS-4024 Switch

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
14
5. Remove both side of the protection cap from the LC/LC Fiber Cable.
6. Plug the LC/LC Fiber Cable into the transceivers on both ES-2108-LC and
GS-4024 Switch.
If you connected the cable correctly, the LED of the “LINK” will light up.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
15
7. Now, connect the first PC “Alpha” to ES-2108-LC and the second PC
“Delta” to the GS-4024 via the regular Ethernet cable.
8. Set the NICs in both computers to the same IP Domain.
(ex, PC “Alpha” :192.168.1.4/24; PC “Delta” : 192.168.1.5/24)
9. From PC “Alpha”, PING PC “Delta” at 192.168.1.5
10.From PC “Delta”, PING PC” Alpha” at 192.168.1.4
11.Now you can confirm that the network connection between ES-2108-LC
and GS-4024 is up and running.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
16
Separating a physical network into many virtual
networks
What is Virtual LAN?
•VLAN Overview
A VLAN (Virtual Local Area Network) allows a physical network to be
partitioned into multiple logical networks. Stations on a logical network belong
to one group called VLAN Group. A station can belong to more than one group.
The stations on the same VLAN group can communicate with each other. With
VLAN, a station cannot directly talk to or hear from stations that are not in the
same VLAN group(s); the traffic must first go through a router.
In MTU or IP-DSLAM applications, VLAN is vital in providing isolation and
security among the subscribers. When properly configured, VLAN prevents
one subscriber from accessing the network resources of another on the same
LAN, thus a user will not see the printers and hard disks of another user in the
same building.
VLAN also increases network performance by limiting broadcasts to a smaller
and more manageable logical broadcast domain. A VLAN group is a broadcast
domain. In traditional Layer-2 switched environments, all broadcast packets go
to each and every individual port. With VLAN, all broadcasts are confined to a
specific broadcast domain.
There are two most popular VLAN implementations, Port-based VLAN and
IEEE 802.1q Tagged VLAN. ES-2024 series supports both VLAN
implementations. The most difference between both VLAN implementations is
Tagged VLAN can across Layer-2 switch but Port-based VLAN cannot.
•Port-based VLAN
Port-based VLANs are VLANs where the packet forwarding decision is based

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
17
on the destination MAC address and its associated port. You must define
outgoing ports allowed for each port when using port-based VLANs. Note that VLAN
only governs the outgoing traffic, in the other word, it is unidirectional.
Therefore, if you wish to allow two subscriber ports to talk to each other, e.g.,
between conference rooms in a hotel, you must define the egress (outgoing
port) for both ports. An egress port is an outgoing port, that is, a port through
which a data packet leaves.
There are 5 hosts (Host A, B, C, D and E) connected to a 5-port layer-2 switch
which supported port-based VLAN.
Case 1: Host A and Host B can talk to each other, because they are in the
same VLAN group. But Host A and Host B can't talk to Host C, D, and E.
Port-based VLAN definition:
•Egress port for port 1: port 2
•Egress port for port 2: port 1
Case 2: There are 3 VLAN groups in the physical network. Host A and Host B
can talk to each other; they are in the same VLAN group 1. Host B and Host C
are in VLAN group 2. Host A, Host D and Host E are in VLAN group 3.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
18
Port-based VLAN definition:
•Egress port for port 1: port 2, port 4, port 5
•Egress port for port 2: port 1, port 3
•Egress port for port 3: port 2
•Egress port for port 4: port 1, port 5
•Egress port for port 5: port 1, port 4
•Port-based VLAN across different switch
Port-based VLAN is specific only to the switch on which it was created. Definitely,
Port-based VLAN can't across different switches. As the following network diagram
shown in most MTU case, for the sake of security, subscribers are isolated with each
other except for the gateway. There are two switches, Switch-2 and Switch-3,
supported port-based VLAN and uplink to a none-port-based VLAN switch, Switch-1.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
19
For Switch-2, port 1, port 2, and port 3 are allowed to communicate back and forth
with uplink port 4, but not with other ports.
•Switch-2 VLAN 1 member port: port 1 and port 4
•Switch-2 VLAN 2 member port: port 2 and port 4
•Switch-2 VLAN 3 member port: port 3 and port 4
For Switch-3, port 2, port 3, and port 4 are allowed to communicate back and forth
with uplink port 1, but not with other ports.
•Switch-3 VLAN 1 member port: port 2 and port 1
•Switch-3 VLAN 2 member port: port 3 and port 1
•Switch-2 VLAN 3 member port: port 4 and port 1
Host A can't talk to Host B due to the port-based VLAN in Switch-2, and Host C can't
talk to Host D due to the port-based VLAN in Switch-3. But both Switch-2 and
Switch-3 uplink to the none VLAN Switch-1. Host A and Host B will talk to Host C and
Host D via the none VLAN switch because port-based VLAN can't across different
switches.
To achieve the security between different switches, you must put another port-based
VLAN switch for the uplink. Each port on the uplink switch also should be separated
into different VLAN, except for the port to the gateway. So subscribers only can talk to
the gateway for Internet access but not communicate with each other.

ES-2024 Series Switch Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
20
For Switch-1, port 1, port2, and port 3 are allowed to communicate back and forth with
uplink port 4, but not with other ports.
•Switch-1 VLAN 1 member port: port 1 and port 4
•Switch-1 VLAN 2 member port: port 2 and port 4
•Switch-1 VLAN 3 member port: port 3 and port 4
How to configure Port-Based VLAN
Port-based VLANs are VLANs where the packet forwarding decision is based
on the destination MAC address and its associated port.