User manual ZYXEL ES-2048

[. . . ] ES-2048 Intelligent Layer 2 Switch 48-port Fast Ethernet + 2 GbE Dual Personality Interfaces (Copper/SFP) User's Guide Version 3. 70 8/2006 Edition 1 ES-2048 User's Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. [. . . ] See Section 15. 1 on page 125 for more information. Figure 50 Link Aggregation Control Protocol Status 1. Port Priority and Port Number are 0 as it is the aggregator ID for the trunk group, not the individual port. 126 Chapter 15 Link Aggregation ES-2048 User's Guide The following table describes the labels in this screen. Table 31 Link Aggregation Control Protocol Status LABEL Index Aggregator ID DESCRIPTION This field displays the trunk ID to identify a trunk group, that is, one logical link containing multiple ports. LACP aggregation ID consists of the following: system priority, MAC address, key, port priority and port number. Refer to Section 15. 2. 1 on page 126 for more information on this field. These are the ports you have configured in the Link Aggregation screen to be in the trunk group. These are the ports that are currently transmitting data as one logical link in this trunk group. Enabled Port Synchronized Ports 15. 4 Link Aggregation Setup Click Configuration in the Link Aggregation Control Protocol Status screen to display the screen shown next. See Section 15. 1 on page 125 for more information on link aggregation. Chapter 15 Link Aggregation 127 ES-2048 User's Guide Figure 51 Link Aggregation: Configuration 128 Chapter 15 Link Aggregation ES-2048 User's Guide The following table describes the labels in this screen. Table 32 Link Aggregation Control Protocol: Configuration LABEL DESCRIPTION Link Aggregation Control Protocol Active System Priority Select this checkbox to enable Link Aggregation Control Protocol (LACP). The switch with the lowest system priority (and lowest port number if system priority is the same) becomes the LACP "server". Enter a number to set the priority of an active port using Link Aggregate Control Protocol (LACP). The field identifies the link aggregation group, that is, one logical link containing multiple ports. Use this row only if you want to make some settings the same for all ports. Use this row first to set the common settings and then make adjustments on a port-by-port basis. Group ID Active Dynamic (LACP) Port * Note: Changes in this row are copied to all the ports as soon as you make them. Group Select the trunk group to which a port belongs. LACP Timeout Timeout is the time interval between the individual port exchanges of LACP packets in order to check that the peer port in the trunk group is still up. If a port does not respond after three tries, then it is deemed to be "down" and is removed from the trunk. Set a short timeout (one second) for busy trunked links to ensure that disabled ports are removed from the trunk group as soon as possible. Apply Click Apply to save your changes to the switch's run-time memory. The switch loses these changes if it is turned off or loses power, so use the Save link on the top navigation panel to save your changes to the non-volatile memory when you are done configuring. Click Cancel to reset the fields. Cancel Chapter 15 Link Aggregation 129 ES-2048 User's Guide 130 Chapter 15 Link Aggregation ES-2048 User's Guide CHAPT E R 1 6 Port Authentication This chapter describes the 802. 1x authentication method and RADIUS server connection setup. See Section 33. 9 on page 259 for information on how to use the commands to configure additional Radius server settings as well as multiple Radius server configuration. 16. 1 Port Authentication Overview IEEE 802. 1x is an extended authentication protocol2 that allows support of RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. 16. 1. 1 RADIUS RADIUS (Remote Authentication Dial-In User Service) authentication is a popular protocol used to authenticate users by means of an external server instead of (or in addition to) an internal device user database that is limited to the memory capacity of the device. In essence, RADIUS authentication allows you to validate an unlimited number of users from a central location. Figure 52 RADIUS Server 16. 1. 1. 1 Vendor Specific Attribute A Vendor Specific Attribute (VSA) is an attribute-value pair that is sent between a RADIUS server and the switch. Configure VSAs on the RADIUS server to set the switch to perform the following actions on an authenticated user: · Limit bandwidth on incoming or outgoing traffic · Assign account privilege levels 2. At the time of writing, only Windows XP of the Microsoft operating systems supports it. See the Microsoft web site for information on other Windows operating system support. If your operating system does not support 802. 1x, then you may need to install 802. 1x client software. Chapter 16 Port Authentication 131 ES-2048 User's Guide Note: Refer to the documentation that comes with your RADIUS server on how to configure a VSA. [. . . ] To make two networks, divide the network 192. 168. 1. 0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The "borrowed" host ID bit can be either "0" or "1" thus giving two subnets; 192. 168. 1. 0 with mask 255. 255. 255. 128 and 192. 168. 1. 128 with mask 255. 255. 255. 128. Note: In the following charts, shaded/bolded last octet bit values indicate host ID bits "borrowed" to make network ID bits. The number of "borrowed" host ID bits determines the number of subnets you can have. [. . . ]