ZyXEL Communications IES-5000 Series, Support Notes

Page 1: ...IES 5000 Support Notes Oct 2006 ...

Page 2: ...erent subscribers 3 How to configure 802 1Q VLAN 7 Triple play Application 9 802 1x Application 16 Setting up the Syslog Server 20 Setting up the Ring Environment 23 Setting up the IGMP Snooping IGMP Filtering 29 Limit the users behind the certain DSL port 31 DHCP Relay Option 82 Application 32 Filter Some Certain Packet 42 VDSL Application Triple Play 45 ...

Page 3: ...12Kbps and the other is for high speed requirement with upstream downstream is 25M 1Mbps We suppose there are general subscribers from port 1 to port 24 with a low speed profile and some enterprise users from port 25 to port 48 with high speed profile How to apply the profile to ports In this application we need to configure IES 5000 and ADSL CPE We use ZyXEL Prestige 660R 61 CPE here 1 IES 5000 S...

Page 4: ...sra fixed 90 30 dsra startup 90 30 Save current configurations MSG1000G config save 1 2 Profile Assignment Assign Profile_LowSpeed to port 1 Select the Profile_LowSpeed profile Copy the settings of port 1 to the ports from 2 to 24 After finishing port 1 setting For the high speed profile you can set the Profile_HighSpeed to port 25 You also can select ADSL2 mode That will fix the mode on ADSL2 mod...

Page 5: ...nd Bridge YES 2 2 Menu4 Internet Access Setup The encapsulation must be RFC 1483 for bridge mode The Multiplexing should be the same as IES 5000 The LLC based is default mode of IES 5000 Additionally we must check if the VPI VCI is the same as IES 5000 The default VPI VCI of IES 5000 is 0 33 2 3 Menu11 1 Remote Node Profile In menu11 1 we should activate this profile with Active Yes The Encapsulat...

Page 6: ...ES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 6 will enter Menu 11 6 2 4 Menu11 6 Remote Node ATM Layer Options Check the values above are the same as the IES 5000 ...

Page 7: ...cation The following figure shows the VLAN example Two PCs connect to the port 1 and port 2 of the line card and belong to different VLAN One is VLAN 10 and the other is VLAN 20 So they can t communication with each other But both PC 1 and PC 2 can connect to Internet How to set up a VLAN environment In this application we need to configure IES 5000 and ADSL CPE or SHDSL CPE We use ZyXEL Prestige ...

Page 8: ...shown CI command TGE1 vlan name 20 VLAN20 TGE1 vlan set 20 up1 fix untag TGE1 vlan set 20 up2 fix untag TGE1 port pvc vlan 7 2 0 33 20 join untag Add VLAN200 Assign slot 7 Port 1 Port2 ENET1 and ENET2 to be members of VLAN200 as shown CI command TGE1 vlan name 200 VLAN200 TGE1 vlan set 200 up1 fix untag TGE1 vlan set 200 up2 fix untag TGE1 port pvc vlan 7 1 0 33 200 join untag TGE1 port pvc vlan 7...

Page 9: ...hannels on each DSL port for different services and assign each channel a priority a VLAN and ATM Quality of Service QoS The ATM QoS allows you to regulate the average rate and fluctuations of data transmission This helps eliminate congestion to allow transmission of real time data such as audio and video In this application we demonstrate how to set up the multiple PVCs environment From the figur...

Page 10: ...like procedure described in VLAN application Add VLAN10 Assign Port 1 ENET1 to be members of VLAN10 as show We need to check the Tx Tagging on ENET1 TGE1 vlan name 10 VLAN10 TGE1 vlan set 10 up1 fix tag TGE1 port pvc vlan 7 1 0 33 10 join untag Add VLAN20 Assign Port 1 ENET1 to be members of VLAN20 as show We need to check the Tx Tagging on ENET1 TGE1 vlan name 20 VLAN20 CPE 802 1Q VLAN Switch 0 3...

Page 11: ...hould modify this VPI VCI with Defval_CBR profile which we created before CI command TGE1 port pvc set 7 1 0 33 Defval_CBR llc 0 7 Then we add the VPI VCI with 0 34 We apply the DEFVAL profile to this channel CI command TGE1 port pvc set 7 1 0 34 Defval llc 20 0 2 Prestige 660R 61 P791 Settings We need to set two channels One is 0 33 and the other is 0 34 From former application we already knew ho...

Page 12: ...on 12 2 2 Menu11 6 Remote Node ATM Layer Options We should set up another VPI VCI with 0 34 the same as the IES 5000 3 ES 2024 settings 3 1 VALN Click Advanced Application and VLAN in navigation panel to display configuration screen as shown Click Static VLAN to show VLAN setup screen ...

Page 13: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 13 Add VLAN10 Assign Port 1 Port 10 to be members of VLAN10 as show We need to check the Tx Tagging on Port 10 ...

Page 14: ...oration 14 Add VLAN20 Assign Port 2 Port 10 to be members of VLAN20 as show We need to check the Tx Tagging on Port 10 3 2 PVID setup Click Advanced Application and VLAN in navigation panel to display configuration screen as shown Click VLAN Port Setting to show PVID setup screen ...

Page 15: ...Notes All contents copyright c 2006 ZyXEL Communications Corporation 15 Let 10 be the PVID of Port 1 and 20 be the PVID of Port 2 In this application you will see the video traffic will go via 0 33 and data traffic will ...

Page 16: ...rvice RFC2138 2139 for centralized user profile management on a network RADIUS server We want to deploy 802 1x environment in this application The following figure shows the 802 1x example PC1 supplicant and PC2 supplicant want to access to the application server If PC1 is not unauthorized the traffic from PC1 to application server will be blocked If PC2 is an authorized client then it can access ...

Page 17: ...ver Then click Apply to make the settings take effect TGE1 sys sw dot1x enable TGE1 sys sw dot1x set radius server 192 168 1 3 TGE1 sys sw dot1x set radius port 1812 TGE1 sys sw dot1x set radius sec 12345678 TGE1 config save 2 Vantage 50 RADIUS settings We use Vantage 50 as the RADIUS server It s a one of ZyXEL s product Of course you can use other RADIUS server like Funk Steel Belted RADIUS Cisco...

Page 18: ...he client site MUST use the account in RADIUS server 3 Windows XP Supplicant settings There are many supplicants we can choose like MeetingHouse Aegis client Funk Odyssey client and Microsoft 802 1x client We take Microsoft 802 1x client as an example here 3 1 802 1x MD5 challenge setup Open the Local Area connection Properties and then click Authentication page Check the Enable IEEE 802 1x authen...

Page 19: ... the 802 1x starts it will prompt you to enter the user name and password Please see the following figure After click the icon there will be a dialog for entering the user name and password Click ok after input the correct user name and password that are in the database of authentication server ...

Page 20: ...the PCs behind the port can t access the network 4 Prestige 660R 61 Settings Please refer to the procedures in previous application Setting up the Syslog Server ZyXEL products are able to send system log to a Syslog deamon such as Unix Syslogd and Kiwi s Syslog Daemon http www kiwisyslog com When DSL or Ethernet ports are linked up down IES 5000 sends a record to Syslog server The Syslog server ca...

Page 21: ...server in this application Here we use the Kiwi s Syslog Daemon as an example Following sections will describe the detailed procedures to set up the environment 1 Install and Run Kiwi s Syslog Server Double Click the Kiwi s Syslog Server installing program It is very easy to install it ADSL SHDSL modem Syslog server Uplink Network IES 5000 ALC 1248G SLC 1248G ...

Page 22: ...2 IES 5000 settings Enable Syslog server within the IES 5000 Assign the UNIX Syslog Server IP 192 168 1 77 in this case Choose a log facility from Local 1 to Local 7 Then save the configurations CI command TGE1 sys syslog enable TGE1 sys syslog server 192 168 1 77 TGE1 sys syslog facility 1 TGE1 config save When DSL ports are linked up down IES 5000 sends a record to Syslog server We can see these...

Page 23: ...ng Environment We set up Ring environment with one IES 5000 one IES 2000 and one ES 4024 A PC behind IES can connect the PC in the network even one of the links broken Following sections will describe the detailed procedures to set up the environment 1 IES 5000 settings 1 1 Enable Spanning Tree protocol on Ethernet ports Configure Spanning Tree Protocol settings Click Active to enable Spanning Tre...

Page 24: ...p port enable 2 2 Setup IES 2000 2 1 Enable Spanning Tree protocol Click Switch Setup in the navigation panel to display configuration screen as shown Then check Spanning Tree Protocol to enable it 2 2 Enable Spanning Tree protocol on Ethernet ports Click Port Setup in the navigation panel to display configuration screen as shown Click msc to display MSC card Port setup ...

Page 25: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 25 Click Uplink2 to set up this port Check Spanning Tree Protocol to enable it ...

Page 26: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 26 Take the same procedures with Uplink1 Please see the following figure ...

Page 27: ...ocol on Ethernet ports Click Advanced Application Spanning Tree Protocol in the navigation panel to display configuration screen as shown You will see the Spanning Tree Protocol Status page Click Configuration to configure panning tree protocol settings Click Active to enable Spanning Tree Protocol Then enable it on Port 1 and Port 2 ...

Page 28: ...etween port 2 of ES 4024 and Uplink1 of IES 2000 will be blocked as shown after we connect After we remove the cable between port 1 of IES 5000 and port 1 of ES 4024 the connection still exists We can remove any one of the cable That will not affect the connection You can see the blocking port will become forwarding port ...

Page 29: ...ic of a group is only forwarded to ports that have members of that group IGMP snooping generates no additional network traffic allowing you to significantly reduce multicast traffic passing through the IP DSLAM IGMP filtering is for allowing a port to join some specific IGMP groups This can be applied in Video service providers They can only open some specific channels groups to specific ports ADS...

Page 30: ...eceive all movies 1 IES 5000 settings 1 1 Enable IGMP Snooping Enable IGMP Snooping to switch on the IGMP Snooping function CI command TGE1 multicast igmp enable snooping 1 2 Set up IGMP Filtering If we don t set up IGMP filtering the subscriber will receive all the movies We set up a IGMP filter Profile and apply it to specific port to limit the channels subscriber can see In this case we only al...

Page 31: ...ter features How to set up MAC Filter Port Security Here we will set up an environment to allow PCs with certain MAC address and the number of PCs behind port 3 to access the Internet 1 IES 5000 settings 1 1 Set up MAC filter Enable the MAC filter for port 3 input the MAC address you allow to access the Internet Save the configuration to take effective Only the MAC addresses listed here can access...

Page 32: ... the MAC filter and Port security can t be used at the same time Here we allow only 1 user to access Internet on slot 7 port 3 CI command TGE1 lcman port maccount enable 7 3 TGE1 lcman port maccount set 7 3 1 TGE1 config save DHCP Relay Option 82 Application ISP may want to limit the number of IP address or deliver some specific IP addresses according to certain DSL port VLAN ID and option 82 stri...

Page 33: ...se the IP Commander as DHCP server Its IP is 192 168 1 99 and the IP pool is between 192 168 1 201 and 192 168 1 203 for VID 1 DSL port 25 and the option 82 string is 5000 1 IES 5000 settings Enable the DHCP relay and Option 82 function including the IP address of DHCP server The IP address is 192 168 1 99 in our case Also enter 5000 as the Option 82 string CI command TGE1 ip dhcprelay enable TGE1...

Page 34: ...on 34 2 CPE settings Connect CPE to the 25th DSL port Please see former applications for Detailed settings 3 IP Commander settings Open IP Commander Right click IP commander and then click connect new server Input the DHCP IP address or domain name and click ok Our IP is 192 168 1 99 ...

Page 35: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 35 Input user name and password The default user name is administrator and password is incognito ...

Page 36: ...ight c 2006 ZyXEL Communications Corporation 36 It will bring up the following screen please make sure that your DHCP is in online status Then click wizard in the top tool bars and select rule wizard Give a name and description to the new rule ...

Page 37: ...upport Notes All contents copyright c 2006 ZyXEL Communications Corporation 37 Assign a range of IP addresses or just one IP address to this rule In our case we set the IP pool from 192 168 1 201 to 192 168 1 203 ...

Page 38: ... After select the DHCP Option it will pop up Add DHCP Option Rule dialog Select option 82 Relay Agent Information sub option 1 binary data For port 25 VLAN 1 5000 please key in 0019000131323438 as the key value and click OK Please note that the first 2 bytes define port number the second 2 bytes is VLAN ID and the other bytes are the Option 82 string ...

Page 39: ... Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 39 After you finish above step you will see the following figure Then pop up the following screen and you can just press Next button ...

Page 40: ...ort Notes All contents copyright c 2006 ZyXEL Communications Corporation 40 Then you can add DHCP template option such as gateway DNS server and so on Here we use 192 168 1 1 as gateway IP address of DHCP client PC ...

Page 41: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 41 You can apply DDNS service to DHCP server or not The rule creation has been finished ...

Page 42: ... finishing all above procedures your PC will get the IP address 192 168 1 201 when you send a DHCP request Filter Some Certain Packet ISP may want to filter some kinds of packets IES 5000 provide Packet Filter function to filter some specific packets like IP ARP DHCP EAPoL PPPoE NETBIOS and IGMP ...

Page 43: ... 5000 ALC 1248G SLC 1248G settings Type the following packet filter command with in specific slot port TGE1 lcman port pktfilter set 7 1 netbios Display the port filter status on slot 7 CI command TGE1 lcman port pktfilter show 7 port filter 7 1 netbios 7 2 accept all 7 3 accept all 7 4 accept all ADSL SHDSL CPE Network IES 5000 ALC SLC Client 1 Port 1 Client 2 Specific Protocol Packet Ex NetBIOS ...

Page 44: ... 15 accept all 7 16 accept all 7 17 accept all 7 18 accept all 7 19 accept all 7 20 accept all 7 21 accept all 7 22 accept all 7 23 accept all 7 24 accept all 7 25 accept all 7 26 accept all 7 27 accept all 7 28 accept all 7 29 accept all 7 30 accept all 7 31 accept all 7 32 accept all 7 33 accept all 7 34 accept all 7 35 accept all 7 36 accept all 7 37 accept all 7 38 accept all 7 39 accept all 7...

Page 45: ... accept all TGE1 VDSLApplication Triple Play For the Triple play scenario 3 PVCs for multiple services Data Voice and Video on the VDSL port of IES 5000 VDSL line card are to be configured The IEEE VLAN 802 1p mechanism is used to guarantee the Voice stream and Video stream running smoothly without interruption The instructions to configure the IES 1248 71 device are below ...

Page 46: ...ts copyright c 2006 ZyXEL Communications Corporation 46 IES5000 Settings 1 Connect to the IES 5000 using Web GUI The default Inband IP address of IES 5000 is 192 168 1 1 Enter the default id admin and password 1234 to access the device ...

Page 47: ...ort Notes All contents copyright c 2006 ZyXEL Communications Corporation 47 2 Set the IES 5000 s IP address to 192 168 1 100 Click the Sys IP Setup Type in the IP address 192 168 1 100 and subnet mask 255 255 255 0 ...

Page 48: ...t c 2006 ZyXEL Communications Corporation 48 3 Create a VDSL profile Type in the Name and select the Latency Mode Then set the Max Rate of Downstream Upstream here is an example U35D65_INTE for 65Mbps 35Mbps line and the other related parameters ...

Page 49: ...ns Corporation 49 4 Apply the VDSL profile to VDSL ports Then select to which VDSL ports you would like to apply the VDSL profile you just created Click Port VDSL Choose Slot 3 and Port 1 Check Enable Choose U35D65_INTE in the VDSL Profile option Click Apply to take effect ...

Page 50: ...Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 50 5 Then click Setup in the VLAN option to create 3 VLANs VLAN 1 for DATA VLAN 102 for VOICE and VLAN 103 for VIDEO for the VDSL port ...

Page 51: ...0 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 51 a Create VLAN 1 VLAN 1 is created by default Click Modify and check the Tag box Click Apply to finish the VLAN 1 configuration ...

Page 52: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 52 b Create VLAN 102 Fill in VID with 102 and check the Tag box Click Apply to finish the VLAN 102 configuration ...

Page 53: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 53 c Create VLAN 103 Fill in VID with 103 and check the Tag box Click Apply to finish the VLAN 103 configuration ...

Page 54: ...ort Notes All contents copyright c 2006 ZyXEL Communications Corporation 54 6 Configure VLANs on ENET Port 3 up1 a Configure VLAN 1 Select Index 1 and click Modify Check the Tag box on up1 Click Apply to take effect ...

Page 55: ...ort Notes All contents copyright c 2006 ZyXEL Communications Corporation 55 b Configure VLAN 102 Select Index 2 and click Modify Choose the Registration as Fix and check the Tag box on up1 Click Apply to take effect ...

Page 56: ...ort Notes All contents copyright c 2006 ZyXEL Communications Corporation 56 c Configure VLAN 103 Select Index 3 and click Modify Choose the Registration as Fix and check the Tag box on up1 Click Apply to take effect ...

Page 57: ...c 2006 ZyXEL Communications Corporation 57 7 Enable IGMP Proxy on IES 5000 Click Multicast IGMP Choose the IGMP Mode as Enable_IGMP_Proxy and click Apply to finish the setup Fill in Add Static Query VLAN with 103 and then click Apply to take effect ...

Page 58: ... 2006 ZyXEL Communications Corporation 58 8 Save configurations Click Config Save Config Save and click the Save button to save your configurations P870MH C1 Installation 1 Get into the device by Telent Access the SMT menu 24 8 into CI command mode ...

Page 59: ...0MH C1 VLAN 1 102 103 After you created 3 VLANS check where the VLAN located by VLAN disp CI command 3 Display the configured VLANs check the relationship between ITEM vs the VID whcich we just configured Boundle VLAN1 on port 1 VLAN 102 on port 2 Vlan 103 on port 3 without transmission any Tagged frame Also add the VLAN tag 1 102 103 onto outgoing VDSL port ...

Page 60: ...s Port 2 VLAN 102 is for VoIP and Port 3 VLAN 103 is for IPTV service On Port 2 Port 3 we can assign it for higher priority qos High when there is traffic congestion occrued For Port 1 s traffic we can assign the priority as Low since the Internet access traffic is not time sensitive 5 Check whether all the settings are correct ...

Page 61: ...s All contents copyright c 2006 ZyXEL Communications Corporation 61 ES2024A Settings 5 Connect to IES 1248 by Web GUI The default IP address of ES 2024A is 192 168 1 1 Enter the default password 1234 to get into the device ...

Page 62: ...Notes All contents copyright c 2006 ZyXEL Communications Corporation 62 6 Set the IES 1248 s IP address to 192 168 1 200 Open Basic Setting IP setup Type in the IP address 192 168 1 100 and its subnet mask 255 255 255 0 ...

Page 63: ...ata access FTP server connected to Ethernet port 3 VLAN 102 for Voice SIP server ATA connected to the Ethernet port 1 2 and finally VLAN 103 for Video server connected to the Ethernet Port 4 And the Uplink port is 24 d Create VLAN 1 Click Advanced Application VLAN Static VLAN Setting and then click on VID 1 Check the Active Box then check the Tx Tagging Box on Port 24 for the other ports have this...

Page 64: ...2 Click Advanced Application VLAN Static VLAN Setting then check the Active Box type in a name for VLAN as well as VLAN ID102 Then check the Tx Tagging Box on Port 24 24 for the other ports have this option unchecked and switch Ports 1 2 and 24 to status Fixed Click Add to finish the VLAN 102 configuration ...

Page 65: ...3 Click Advanced Application VLAN Static VLAN Setting then check the Active Box fill in a name for VLAN as well as VLAN ID 103 Then check the Tx Tagging Box on Port 24 24 for the other ports have this option unchecked and switch Ports 4 and 24 to status Fixed Click Add to finish the VLAN 103 configuration ...

Page 66: ...06 ZyXEL Communications Corporation 66 P660H settings 9 Connect to the P660HW 61 using Telnet The default IP address of P660H 61 is 192 168 1 1 Enter the default password 1234 to access the device 10 Disable the VC hunt mechanism and Reboot the device ...

Page 67: ...nd then wan atm vc save to save the settings Reboot the device for the changes to take effect 3 There will have three bridge PVCs on the P660H 61 Configure the system to support Bridge mode Access the SMT menu 1 and type in the System Name and enable the Bridge Yes 4 Change the P660H 61 s IP address to 192 168 1 10 and disable the DHCP server function in SMT menu 3 2 ...

Page 68: ... for Triple play application Data Voice and Video a Create a PVC for the Data access Internet access Get into SMT menu 11 1 and switch the Rem Node Name Data Active Yes Encapsulation RFC 1483 Multiplexing LLC based and Route None Bridge Yes Select the ATM options Yes VPI VCI 0 33 then press Enter to apply the changes ...

Page 69: ...ions Corporation 69 b Create a PVC for the Voice channel Get into SMT menu 11 2 select the Rem Node Name Voice Active Yes Encapsulation RFC 1483 Multiplexing LLC based and Route None Bridge Yes Select the ATM options Yes VPI VCI 0 34 then press Enter to apply the changes ...

Page 70: ...s Corporation 70 c Create a PVC for the Video channel Access the SMT menu 11 3 and select the Rem Node Name Video Active Yes Encapsulation RFC 1483 Multiplexing LLC based and Route None Bridge Yes Select the ATM options Yes VPI VCI 0 35 then press Enter to apply the changes ...

Page 71: ...as on the following figure 6 Map 3 PVC to specific Ethernet port of the P660H 61 Access SMT menu 24 8 Type sys triple port set 1 1 to map the Ehternet port 1 to PVC 1 Data Type sys triple port set 2 2 to map the Ehternet port 2 to PVC 2 Voice Type sys triple port set 3 3 to map the Ehternet port 3 to PVC 3 Video ...

Page 72: ...IES 5000 Support Notes All contents copyright c 2006 ZyXEL Communications Corporation 72 7 Check whether the ADSL physical layer is UP in the SMT menu 24 1 if the PVC counter is running ...