ZyXEL ES-3100 Series (ES-3124/ES-3124PWR/ES-3148/ES-3124-4F) Ethernet Switch Support Notes Version 3.
ES-3100 Series Switch Support Notes INDEX How to manage & maintain your Switch? Firmware Upgrade Restore a Configuration File Backing Up a Configuration File Load Factory Defaults Physical Switch connection Connecting two switches via Fiber Channel General Networking DHCP option 82 (Relay Agent Information Option) Separating a physical network into many virtual networks Introduction to Virtual LAN Port Based Virtual LAN Setting up Port Based VLAN IEEE 802.
ES-3100 Series Switch Support Notes What is default login password of the console, telnet, and FTP? How to change the password? How to access the Command Line Interface? If I forgot the Switch password, how can I reset the password to default? How do I configure an IP address? Is Online Help available on the Web GUI? How to restart device from Web? How to check the current running firmware version? Is the mini GBIC transceiver hot-swappable? What is so called "Dual-Personality interface" in Ethernet Switchi
ES-3100 Series Switch Support Notes How to manage & maintain your Switch? Firmware Upgrade From Web GUI: 1. Download (and unzipped) the correct model firmware to your computer. 2. Click Management and then Maintenance in the navigator panel to bring up the following screen. 3. Click on the “Click Here” link of the Firmware Upgrade to bring up the following screen. 4. 5. Browse the firmware located or type in the path into the “File Path” field. Click on the Upgrade button.
ES-3100 Series Switch Support Notes From Console Port: 1. Download (and unzipped) the correct model firmware to your computer. 2. Connect to the console port and open the Terminal Emulation Software. 3. Restarting the switch to enter the debug mode via the terminal. 4. Enter “ATUR”. 5. Use X-modem protocol to transfer (Send File) the firmware. 6. Enter “ATGO” to restart the switch after done uploading the firmware. From Command Line FTP: 1.
ES-3100 Series Switch Support Notes Restore a Configuration File From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” link of the Restore Configuration to bring up the following screen. 3. Browse to locate the file with the file name or type in the path and the file name into the “File Path” field. Click on the Restore button. 4. From Console Port: 1.
ES-3100 Series Switch Support Notes 2. 3. 4. 5. Restarting the Switch to enter the debug mode via the terminal. Enter “ATLC” Use X-modem protocol to transfer (Send File) the firmware. Enter “ATGO” to restart the Switch after done uploading the configuration file. From Command Line FTP: 1. Download (and unzipped) the correct model firmware to your computer. 2. Launch the FTP client on your PC to login to Switch. (From the command prompt, type “ftp ”. 3. Press “Enter” for the User name 4.
ES-3100 Series Switch Support Notes Backing Up a Configuration File From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. Click on the “Click Here” link of the Backup Configuration to bring up the following screen. 3. Click on the “Backup” button to bring up the File Download dialog. Then, clicking on the Save button to backup the configuration rom file to a proper location. From Console Port: 1.
ES-3100 Series Switch Support Notes 4. 5. Use X-modem protocol to transfer (Receive File) the firmware. Enter “ATGO” to restart the Switch after done uploading the configuration file. From Command Line FTP: 1. Download (and unzipped) the correct model firmware to your computer. 2. Launch the FTP client on your PC to login Switch. (From the command prompt, type “ftp ” 3. Press “Enter” for the User name 4. Enter password to get the ftp prompt. 5. Enter “bin” to set transfer mode to binary. 6.
ES-3100 Series Switch Support Notes Load Factory Defaults From Web GUI: 1. Click Management and then Maintenance in the navigator panel to bring up the following screen. 2. 3. 4. 5. 6. Click on the “Click Here” button of the Load Factory Defaults to bring up the following screen. A dialog pops up with the message “Are you sure you want to load factory defaults?”. Click OK to go to the following dialog. Click on the OK button.
ES-3100 Series Switch Support Notes Physical Switch connection How to connect two switches via Fiber Channel Your Switch may come with one or many mini-Gb ports. ZyXEL offers Small Form-factor Pluggable (SFP) transceivers for Gigabit Ethernet and Fiber Channel applications.
ES-3100 Series Switch Support Notes Here is the photo of the SFP-SX Transceiver & the LC/LC Fiber Cable. Steps to complete this scenario 1. Find both Mini-GB ports on your Switch first. 12 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 2. Get one transceiver and plug it into the Mini-GB Port of your Switch 3. Plug another transceiver into the Mini-GB Port of the other Switch 13 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 4. Remove both side of the protection cap from the LC/LC Fiber Cable. 5. Plug the LC/LC Fiber Cable into the transceivers on both Switch. If you connected the cable correctly, the LED of the “LINK” will light up. 14 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 6. Now, connect the first PC “Alpha” to the Switch on the left and the second PC “Delta” to the Switch on the right via the regular Ethernet cable. 7. Set the NICs in both computers to the same IP Domain. (ex, PC “Alpha” :192.168.1.4/24; PC “Delta” : 192.168.1.5/24) 8. From PC “Alpha”, PING PC “Delta” at 192.168.1.5 9. From PC “Delta”, PING PC” Alpha” at 192.168.1.4 10. Now you can confirm that the network connection between these two Switch is up and running.
ES-3100 Series Switch Support Notes General Networking DHCP Relay Option 82 Application ISP may want to limit the number of IP address or deliver some specific IP addresses according to certain Switch port, VLAN ID and option 82 string. They can easily to achieve this with DHCP Relay Option 82 feature and a DHCP server supporting Option 82 function. Network DHCP Server 192.168.1.99 Ethernet Port Port 25 DHCP Client 16 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes How to set up DHCP Relay Option 82 Environment Here, we will set up an environment to allow a PC to get DHCP IP address in specific IP pool according to its Switch port, VLAN ID and the option 82 string. In this case, we are using GS-3012 for the demonstration. PC is behind 25th Switch port and the option 82 string is a string “GS-3012”. We use the IP Commander as DHCP server. Its IP is 192.168.1.99 and the IP pool is between 192.168.1.201 and 192.168.1.
ES-3100 Series Switch Support Notes 3. IP Commander settings Open IP Commander. Right click “IP commander and then click “connect new server”. Input the DHCP IP address or domain name and click “ok”. Our IP is 192.168.1.99. 18 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Input user name and password. The default user name is “administrator” and password is “incognito”. 19 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes It will bring up the following screen, please make sure that your DHCP is in “online” status. Then click “wizard” in the top tool bars and select “rule wizard”. 20 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Give a name and description to the new rule. 21 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Assign a range of IP addresses or just one IP address to this rule. In our case, we set the IP pool from 192.168.1.201 to 192.168.1.203. After input IP pool, we select “DHCP Option” in Keywords combobox. 22 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes After select the “DHCP Option”, it will pop up “Add DHCP Option Rule” dialog. Select “option 82 Relay Agent Information”, sub-option 1, binary data. For port 25, VLAN 1, “GS-3012”, please key in “0019000147532d33303132” as the key value and click OK. Please note that the first 2 bytes define port number, the second 2 bytes is VLAN ID and the other bytes are the Option 82 string. 23 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes After you finish above step, you will see the following figure. 24 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Then pop up the following screen and you can just press Next button. Then you can add DHCP template (option) such as gateway, DNS server and so on. 25 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Here we use “192.168.1.1” as gateway IP address of DHCP client PC. 26 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes You can apply DDNS service to DHCP server or not. The rule creation has been finished. 27 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes After finishing all above procedures, your PC will get the IP address 192.168.1.201 when you send a DHCP request. 28 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Separating a physical network into many virtual networks What is Virtual LAN? • VLAN Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network belong to one group called VLAN Group. A station can belong to more than one group. The stations on the same VLAN group can communicate with each other.
ES-3100 Series Switch Support Notes outgoing ports allowed for each port when using port-based VLANs. Note that VLAN only governs the outgoing traffic, in the other word, it is unidirectional. Therefore, if you wish to allow two subscriber ports to talk to each other, e.g., between conference rooms in a hotel, you must define the egress (outgoing port) for both ports. An egress port is an outgoing port, that is, a port through which a data packet leaves.
ES-3100 Series Switch Support Notes Port-based VLAN definition: • • • • • • Egress port for port 1: port 2, port 4, port 5 Egress port for port 2: port 1, port 3 Egress port for port 3: port 2 Egress port for port 4: port 1, port 5 Egress port for port 5: port 1, port 4 Port-based VLAN across different switch Port-based VLAN is specific only to the switch on which it was created. Definitely, Port-based VLAN can't across different switches.
ES-3100 Series Switch Support Notes For Switch-2, port 1, port 2, and port 3 are allowed to communicate back and forth with uplink port 4, but not with other ports. • Switch-2 VLAN 1 member port: port 1 and port 4 • Switch-2 VLAN 2 member port: port 2 and port 4 • Switch-2 VLAN 3 member port: port 3 and port 4 For Switch-3, port 2, port 3, and port 4 are allowed to communicate back and forth with uplink port 1, but not with other ports.
ES-3100 Series Switch Support Notes For Switch-1, port 1, port2, and port 3 are allowed to communicate back and forth with uplink port 4, but not with other ports. • Switch-1 VLAN 1 member port: port 1 and port 4 • Switch-1 VLAN 2 member port: port 2 and port 4 • Switch-1 VLAN 3 member port: port 3 and port 4 How to configure Port-Based VLAN Port-based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port.
ES-3100 Series Switch Support Notes Scenario In this scenario, Port Based VLAN is used to separate one physical Switch into two smaller logical Switches. Port 1~4 and 9, 10 are in one group. And Port 5~10 are in another group. Port-based VLANs are specific only to the switch on which they were created. 34 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Configuring your Switch to fulfill this scenario (GUI) 1. 2. 3. 4. Connect port 1 with a PC or Notebook via the RJ45 Cable. By default the MGMT IP on every port is 192.168.1.1/24 Set your NIC to 192.168.1.2/24 Open an Internet browser such as IE and give http://192.168.1.1 on the URL. 5. By default you will need to put “admin” as the username and “1234” as the password. 6. After you login successfully, you will see a similar screen like below. 7.
ES-3100 Series Switch Support Notes 8. Now, you need to tell the Switch how you are going to separate the physical Switch into some logical small Switches. Thus, we click “Advanced Application” then “VLAN”. On the right screen, check the boxes to suit your need. In this case, we need to make port 1~4 and port 9, 10 in a group in order for them to communicate in both ways. And port 5~10 in another group but these two groups cannot talk with each others.
ES-3100 Series Switch Support Notes 9. Finally, you can now verify your result. If everything works fine, PC A can ping PC B and PC Z. But it cannot ping PC C or PC D. On the same time, this should work vice versa. 10. For example, PC A: 192.168.1.4/24 PC B: 192.168.1.5/24 PC C: 192.168.1.6/24 PC D: 192.168.1.7/24 PC Z: 192.168.1.99/24 11. PING PC B from PC A (Should work) 37 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 12. PING PC Z from PC A (Should work) 13. PING PC C from PC A (Should NOT work) 38 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Configuring your Switch to fulfill this scenario (CLI) 1. Connect the Switch Console port with your PC or Notebook. 2. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 3. Make sure that your port settings are bps:9600 Data bits:8 Parity: None Stop bits:1 Flow control: None: 4. After you connected successfully, give the correct user name and password. 5. Put “en” or “enable” to go into the privileged mode.
ES-3100 Series Switch Support Notes scenario. 7. When all of the above are done, do not forget to give the “write memory” command under the enable mode to save your configuration. What is IEEE 802.1Q Tag-based VLAN? • Tag-based VLAN Overview Regarding IEEE 802.1Q standard, Tag-based VLAN uses an extra tag in the MAC header to identify the VLAN membership of a frame across bridges. This tag is used for VLAN and QoS (Quality of Service) priority identification.
ES-3100 Series Switch Support Notes process the frame across the network. A tagged frame is four bytes longer than an untagged frame and contains two bytes of TPID (Tag Protocol Identifier, residing within the type/length field of the Ethernet frame) and two bytes of TCI (Tag Control Information, starts after the source address field of the Ethernet frame). • TPID: TPID has a defined value of 8100 in hex. When a frame has the EtherType equal to 8100, this frame carries the tag IEEE 802.1Q / 802.1P.
ES-3100 Series Switch Support Notes • How 802.1Q VLAN works According to the VID information in the tag, the switch forward and filter the frames among ports. These ports with same VID can communicate with each other. IEEE 802.1Q VLAN function contains the following three tasks, Ingress Process, Forwarding Process and Egress Process. 1. Ingress Process: Each port is capable of passing tagged or untagged frames.
ES-3100 Series Switch Support Notes untagged frame is received, Ingress Process insert a tag contained the PVID into the untagged frame. Each physical port has a default VID called PVID (Port VID). PVID is assigned to untagged frames or priority tagged frames (frames with null (0) VID) received on this port. After Ingress Process, all frames have 4-bytes tag and VID information, and then go to Forwarding Process. 2.
ES-3100 Series Switch Support Notes 4. • Forbidden registration: This port is forbidden to be the egress port of specified VID.. • Fixed registration: While ad control is fixed registration, it means this is a static registration entry. This port is the egress port of the specified VID (a member port of the specified VLAN). The frames with specified VID tag can go through this port. • Normal registration: While ad control is normal registration, it means this is a dynamic registration entry.
ES-3100 Series Switch Support Notes Filtering Database. If the value is tagged, the outgoing frame on the egress port is tagged. If the value is untagged, the tag will be removed before frame leaves the egress port. How to connect two switches using VLAN? I want to make VLAN on two layer 2 switches, and I want to connect first switch to second switch with trunk port. There will be 5 VLAN on first Switch and there will be 7 VLAN on second switch. Trunk port will be port 25 on both switches as well.
ES-3100 Series Switch Support Notes ------------------------------------2. Configuration of VLAN on switch B Answer: ------------------------------------In switch A, add port 25 in each VLAN VID:101 (port 1,2,3,"25 TAG") VID:102 (port 4,5,6,,"25 TAG") VID:103 (port 7,8,9,10,"25 TAG") VID:104 (port 23,24,"25 TAG") VID:105 (port 11,12,13,14,"25 TAG") VID:106 (port 15,16,17,"25 TAG") VID:107 (port 18,19.
ES-3100 Series Switch Support Notes VID:102 (port 6,7,8,9,10,"25 TAG") VID:103 (port 11,12,13,14,"25 TAG") VID:104 (port 15,16,17,18,"25 TAG") VID:105 (port 19,20,21,23,22"25 TAG) Clients in same VLAN on both switches can communicate each other.
ES-3100 Series Switch Support Notes Setting up VLAN Trunking With the benefit of deploying VLAN trunking, we can connect two switches by a port that is configured as VLAN trunking port. PC1 with each VLAN tag frames from switch 1 can communicate with PC2 with another VLAN tag frames in switch 2 via VLAN trunking port. In our example, we set up port 5 in switch 1 as the VLAN Trunking port while in switch 2, we set up port 10 as the VLAN Trunking port.
ES-3100 Series Switch Support Notes In the switch 2, the configuration is In the switch 1, we set port 2 as VLAN 2 untag 49 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes In the switch 2, we set port 6 as VLAN 2 untag. The switch 1 IP address: 192.168.1.31 The switch 2 IP address: 192.168.1.21 After the configuration, we can observe that in the switch 1, the PC1 running on port 2 can find the PC2 running on port 6 in the switch 2. 50 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes How to configure GVRP? Description: In this scenario, PCs belong to different divisions within a single corporation can not communicate with each other, and we leave some ports of switches for GVRP-aware PC and others for VLAN-unaware PC. So network administrator can manage and configure VLAN smartly based on different devices and requirements.
ES-3100 Series Switch Support Notes Please enter VLAN setting under Advanced Application menu and click “static VLAN” to bring up the following screen, adding VLAN 10: port 3, fixed, untag; port 23, fixed, Tx tagging”. Add VLAN 20 to this switch, VLAN 20: port 4, fixed, untag; port 23, fixed, Tx tagging. Please click VLAN port setting to bring up the following screen, setup PVID 10 for port 3, PVID 20 for port 4, and enable GVRP on the top of the screen and port 1, port 2, port 23.
ES-3100 Series Switch Support Notes 2. For Switch B on Floor 1: Please follow the same steps to adding VLAN 10: port 3, fixed, untag; port 23, fixed, Tx tagging; port 24, fixed, Tx tagging”. Add VLAN 20 to this switch, VLAN 20: port 4, fixed, untag; port 23, fixed, Tx tagging; port 24, fixed, Tx tagging. 53 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Please click VLAN port setting to bring up the following screen, setup PVID 10 for port 3, PVID 20 for port 4, and enable GVRP on the top of the screen and port 1, port 2, port 23, port 24. 3. For Switch C on Basement: Please set static VLAN 10: port 23, fixed, untag. 54 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Please set static VLAN 20: port 23, fixed, untag. Please add VLAN 30: port 1, fixed, untag; port23, fixed, untag; port 24, fixed, Tx tagging. 55 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Please setup PVID 30 for port 1 and enable GVRP on port 3 and port 24. Then, this scenario is done here. 56 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes IP Multicasting How to setup IGMP snooping in your switch? Figure 1: IGMP and IGMP snooping IGMP snooping is designed for application with deployment of multicast traffic. It operates on the underlying IGMP mechanism where a layer two switch passively listens to the IGMP Query, Report and Leave (IGMP version 2) packets transmitted between the IGMP router and clients and collects passing IGMP messages.
ES-3100 Series Switch Support Notes Configuration of IGMP snooping by web In this example, we enable the IGMP function on the GS-4024 (an IGMP router) to connect to a multimedia server. Also, we enable IGMP snooping function on the ES-3124 or other ZyXEL L2 Switch to connect to the multimedia clients. Figure 2: IGMP snooping Example Step one: In the GS-4024, click the IP Application, select IGMP where, IGMP function can be enabled and we can select either IGMP-v1 or IGMP-v2.
ES-3100 Series Switch Support Notes Step two: In the L2 Switch, click Basic Setting and then Switch Setup where we can enable IGMP snooping function with WEB-GUI. Figure 4: IGMP Snooping Setup Configuration of IGMP and IGMP snooping by CLI Step one: Enable IGMP function In the configure mode GS-4024(config)# router igmp Step two: Enable IGMP snooping 59 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes In the configure mode of CLI, L2Switch(config)# igmp-snooping Step three: Display the IGMP Status In the exec mode of CLI GS-4024# show router igmp Step Four: Display the IGMP snooping Status In the exec mode of CLI L2Switch# show igmp-snooping ______________________________________________________________ Note: One thing needs to be mentioned is that in the IGMP router, we do not need to enable IGMP snooping function.
ES-3100 Series Switch Support Notes Overview of MVR MVR refers to Multicast VLAN Registration that enables a media server to transmit multicast stream in a single multicast VLAN while clients receiving multicast VLAN stream can reside in different VLANs. Clients in different VLANs intend to join or leave the multicast group simply by sending the IGMP Join/leave message to a receiver port. The receiver port belongs to one of the multicast group can receive multicast stream from media server.
ES-3100 Series Switch Support Notes Figure 2 MVR Mode Dynamic Mode If we select the dynamic mode in MVR setting, IGMP report message transmitted from the receiver port will be forwarded to a multicast router through its source port. Multicast router knows which multicast groups exist on which interface dynamically. Compatible mode If we select the dynamic mode in MVR setting, IGMP report message transmitted from the receiver port will not be transmitted to a multicast router.
ES-3100 Series Switch Support Notes configured multicast MAC address. If matches, the switch CPU modifies the hardware address table to include this receiver port and VLAN as a forwarding destination of the MVLAN Leave Operation Subscriber sends an IGMP leave message to the switch to leave the multicast. The switch CPU sends an IGMP group-specific query through the receiver port VLAN. If there is another subscriber in the VLAN, subscriber must respond within the max response time.
ES-3100 Series Switch Support Notes Scenario of MVR In the following section, we will provide an example to illustrate how to configure MVR. In this scenario, the media stream from the media servers will be transmitted from port 24 of GS-4024 (as an IGMP Router) to ES-3124 (L2 edge Switch) and GS-4012F.(work as L2 edge Switch). On Switch ES-3124 and GS4012F, we enabled the MVR function to allocate the multicast traffic from GS-4024 to separate VLAN hosts located on ES-3124 and GS-4012F.
ES-3100 Series Switch Support Notes Configuration via Web [GS-4024] 1. First of all, you need to create all those IP domains on the GS-4024 Switch. Once you completed those VLANs, your VLAN status should looks like the same as below. 2. Below are their related PVID settings. 65 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 3. Right after the VLAN, you should add the IP domains to the related VLANs. 4. Since this GS-4024 works as an IGMP Router, you need to enable IGMP V2 on the multicast ip interface (which is the dummy interface). Please notice that since GS-4024 works here as an IGMP Router, you cannot enable IGMP Snooping on the same time because IGMP Snooping is a L2 feature. 66 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Here we have done everything we need on the IGMP Router . 67 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Configuration via Web [ES-3124] 1. At the very beginning, you can create your MVR VLAN First (which is VLAN100). To create this multicast VLAN, we do it in another way. First, access to the GUI of your Switch. Then click “Advanced Application” on the left and choose “Multicast”. Finally, you should click MVR on the right frame to setup your Multicast VLAN. 2. Give a name to this Multicast VLAN following by its VLAN ID.
ES-3100 Series Switch Support Notes 3. First of all, please choose the Multicast VLAN ID that we just created (which is VLAN100). Then give a name to this group, as long as you can understand. Place the range of Multicast groups here with the start address and End address. Finally, click “Add” to create this group. (In this scenario, we use 224.10.10.0 ~ 224.10.10.50) 4. At this point we go back to the “Multicast Setting” page, enable “IGMP Snooping” here. (Since MVR needs IGMP Snooping).
ES-3100 Series Switch Support Notes 5. Right after that you will need to create all other non-Multicast VLANs on this Switch. Once you completed those VLANs, your VLAN status should looks like the same as below. 6. Below are their related PVID settings. 70 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Here we have done everything we need on the Edge Switch . 71 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Configuration via Web [GS-4012F] 1. At the very beginning, you can create your MVR VLAN First (which is VLAN100). To create this multicast VLAN, we do it in another way. First, access to the GUI of your Switch. Then click “Advanced Application” on the left and choose “Multicast”. Finally, you should click MVR on the right frame to setup your Multicast VLAN. 2. Give a name to this Multicast VLAN following by its VLAN ID.
ES-3100 Series Switch Support Notes 3. First of all, please choose the Multicast VLAN ID that we just created (which is VLAN100). Then give a name to this group, as long as you can understand. Place the range of Multicast groups here with the start address and End address. Finally, click “Add” to create this group. (In this scenario, we use 224.10.10.0 ~ 224.10.10.50) 4. At this point we go back to the “Multicast Setting” page, enable “IGMP Snooping” here. (Since MVR needs IGMP Snooping).
ES-3100 Series Switch Support Notes Video with no subscriber. (No body joining that multicast group). 5. Right after that you will need to create all other non-Multicast VLANs on this Switch. Once you completed those VLANs, your VLAN status should looks like the same as below. 6. Below are their related PVID settings. 74 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Here we have done everything we need on the Edge Switch . 75 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Configuration via CLI [GS-4024] Connect the Switch Console port with your PC or Notebook. 8. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 9. Make sure that your port settings are bps:9600 Data bits:8 Parity: None Stop bits:1 Flow control: None: 10. After you connected successfully, give the correct user name and password. 11. Put “en” or “enable” to go into the privileged mode. Then put “config” to go into the configuration mode.
ES-3100 Series Switch Support Notes forbidden "" untagged "" ip address 111.111.111.111 255.255.255.0 exit To Create VLAN101 with its related IP domain: vlan 101 name 101 normal 1-10,12-23 fixed 11,24 forbidden "" untagged 11 ip address 192.168.101.1 255.255.255.0 exit To Create VLAN102 with its related IP domain: vlan 102 name 102 normal 1-11,13-23 fixed 12,24 forbidden "" untagged 12 ip address 192.168.102.1 255.255.255.
ES-3100 Series Switch Support Notes name 110 normal 1-9,11-23 fixed 10,24 forbidden "" untagged 10 ip address 192.168.110.1 255.255.255.
ES-3100 Series Switch Support Notes To enable IGMP v2 on the dummy IP interface: interface route-domain 111.111.111.111/24 ip igmp v2 exit 79 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Configuration via CLI [ES-3124] Connect the Switch Console port with your PC or Notebook. 1. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 2. Make sure that your port settings are bps:9600 Data bits:8 Parity: None Stop bits:1 Flow control: None: 3. After you connected successfully, give the correct user name and password. 4. Put “en” or “enable” to go into the privileged mode. Then put “config” to go into the configuration mode.
ES-3100 Series Switch Support Notes untagged 2 exit To enable IGMP Sooping with unknown Multicast “Drop”: igmp-snooping igmp-snooping unknown-multicast-frame drop To set PVID of Port 1: interface port-channel 1 pvid 101 exit To set PVID of Port 2: interface port-channel 2 pvid 102 exit To create the MVR VLAN 100 with group information: mvr 100 source-port 27-28 receiver-port 1-2 name 100 tagged 27-28 group 224.10.10.0 start-address 224.10.10.0 end-address 224.10.10.
ES-3100 Series Switch Support Notes Configuration via CLI [GS-4012F] Connect the Switch Console port with your PC or Notebook. 1. Open your Terminal program.(Ex, Hyper Terminal in Windows System) 2. Make sure that your port settings are bps:9600 Data bits:8 Parity: None Stop bits:1 Flow control: None: 3. After you connected successfully, give the correct user name and password. 4. Put “en” or “enable” to go into the privileged mode. Then put “config” to go into the configuration mode.
ES-3100 Series Switch Support Notes exit To enable IGMP Sooping with unknown Multicast “Drop”: igmp-snooping igmp-snooping unknown-multicast-frame drop To set PVID of Port 9: interface port-channel 9 pvid 109 exit To set PVID of Port 10: interface port-channel 10 pvid 110 exit To create the MVR VLAN 100 with group information: mvr 100 source-port 11 receiver-port 9-10 name 100 tagged 11 group 100 start-address 224.10.10.0 end-address 224.10.10.
ES-3100 Series Switch Support Notes To ring a network by building reducdent links and connections between Switch What is Spanning Tree Protocol • Spanning Tree Overview Spanning-Tree Protocol (STP) is a Layer 2 protocol designed to run on bridges and switches. The specification for STP is defined in IEEE 802.1d. The main purpose of STP is to ensure that you do not run into a loop situation when you have redundant paths in your network.
ES-3100 Series Switch Support Notes 2. Filtering Database Instability: When multiple copies of a frame arrive at different ports of a switch, the MAC entry instability in Filtering Database will occur. 1. 2. 3. Host sends an unicast frame to Router (source MAC address is Host's MAC, destination MAC address is Router's MAC). Both Switch A and Switch B will receive this frame and learn MAC address of Host on Port 2. Switch A has not yet learned the MAC address of Router.
ES-3100 Series Switch Support Notes How STP Works Spanning Tree provide a loop-free network. When a switch supported STP recognize a loop in the network topology, it blocks one or more redundant ports. Spanning Tree Protocol continually explore the network, so when the network topology changes, STP automatically reconfigure switch ports to avoid the failure by blocking certain port. Spanning tree algorithm aware switches (bridges) exchange configuration messages periodically.
ES-3100 Series Switch Support Notes 2. The bridge ID includes two parts, bridge priority (2 bytes) and bridge MAC address (6 bytes). The 802.1d default bridge priority is 32768. For example, a switch with default priority 32768 (8000 hex), MAC address is 00:A0:C5:12:34:56, its bridge ID is 8000:00A0:C512:3456. 3. On the root bridge, all its ports are designated ports. Designated ports are always in the forwarding state. While in forwarding state, a port can receive and send traffic. 2.
ES-3100 Series Switch Support Notes For each LAN segment (collision domain), there is a designated port. The designated port has the lowest cost to the root bridge. Designated ports are normally in the forwarding state to forward and receive traffic to the segment. If more than one port in the segment have the same path cost, the port on which bridge has lowest bridge ID is selected as a designated port. 1.
ES-3100 Series Switch Support Notes 1. Switch A bridge ID = 8000:00A0:C511:1111, Switch B bridge ID = 8000:00A0:C522:2222, Switch C bridge ID = 2. 3. 0001:00A0:C533:3333. Switch C has the lowest bridge ID, so Switch C is the root bridge. All ports of the root bridge are designated ports, so Port 1 is designated port. For non-root bridge Switch A, Port 1 path cost to root bridge is 19, Port 2 path cost is 119, 100 (Switch A Port 2) + 19 (Switch B Port 1).
ES-3100 Series Switch Support Notes Switching security MAC freeze As an added protection against network intrusion attacks, ZyXEL has implemented the MAC Freeze feature on ES-2108 Series, ES-3124, ES-2024, ES-3100 Series and ES-4024A. Security has been the focus of our Ethernet switch design. This feature will also be available for GS-4024, GS-4012F, GS-3012 Series, GS-2024 and new switch models in future firmware releases.
ES-3100 Series Switch Support Notes You can display the Static MAC Address screen in the web configurator to view the copied MAC addresses. Figure 2: Displaying MAC Addresses From MAC Freeze After you enabled MAC freeze on port 6 using the CLI command, the switch automatically disables MAC address learning on that port. Display the Port Security screen to verify this. Figure 3: Disabled Automatic MAC Address Learning After MAC Freeze 91 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 92 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Setting up 802.1x Radius Authentication. Port-Authentication -- RADIUS settings: Click Advanced Application, Port Authentication in the navigation panel to display configuration screen as shown. Click Enable Authentication Server and set the RADIUS server IP address, UDP port and shared Secret, which is the same as Radius server. Then click Apply to make the settings take effect. Click the 802.1x link to enter the 802.1x settings.
ES-3100 Series Switch Support Notes RADIUS server setup Click RADIUS, RADIUS SERVER in the navigation panel to display configuration screen as shown. You can use the default values or change the Authentication port, Shared Secret. Remember these values MUST be the as the settings of client. Create User Account Click RADIUS, USER ACCOUNT in the navigation panel to display configuration screen as shown. You can use the existed user account or create the new one by clicking Add New User button.
ES-3100 Series Switch Support Notes 802.1x client as an example here. 802.1x/MD5-challenge setup Open the Local Area connection Properties, and then click Authentication page. Check the Enable IEEE 802.1x authentication for this network and select the MD5-challenge in EAP type combobox. Please see the following figure. When the 802.1x starts, it will prompt you to enter the user name and password. Please see the following figure. 95 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes After click the icon, there will be a dialog for entering the user name and password. Click ok after input the correct user name and password that are in the database of authentication server. The settings of client site are finished. 96 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes After finishing the above procedures, we can allow the authenticated port the access the server. If the switch port doesn’t be authenticated, the PCs behind the port can’t access the network. 97 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Setting up Classifier & Policy rule to perform Access Control on your Switch Introduction on ACL ACL (Access Control List) is the name of a combination of Classifier and Policy Rule. A classifier groups traffic into data flows according to specific criteria such as the source address, destination address, source port number, destination port number or incoming port number.
ES-3100 Series Switch Support Notes higher weight of parameter just gets the highest weight at all. For example, you have defined the first classifier to have “Source Port” plus “Source Socket” as your rule parameters; and your second classifier has only “Destination Socket” as your rule parameter; at this time, since “Destination Socket” has a relative high weight comparing to “Source Port” or “Source Socket”, thus the second classifier will have a higher weight.
ES-3100 Series Switch Support Notes QoS ACL Flow Example Here is another scenario to help you understanding the flow of ACL. There are totally 4 rules.
ES-3100 Series Switch Support Notes higher weight than shallower parameters. 101 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes ACL Scenario How should I configure if I only allow certain IP address on a certain port to forward its traffic but deny all others? In the beginning, we need to set up the classifier to group traffic into data flows based on some such as source address, destination address, port number and packet format. In this example, we specify which format of the packet that the Switch applies its policy rules. We define three rules.
ES-3100 Series Switch Support Notes GUI configuration of classifier and policy rule. Classifier 1 103 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Classifier 2 104 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Classifier 3 105 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Policy Rule Configuration Policy rule on Classifier 1 Policy rule on classifier 2 106 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Policy rule on classifier 3 107 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes CLI configuration of classifier and policy rule. Please logon to the Switch by either telnet, SSH or Console. Step into the configuration mode and put the follow commands: Classifier 1 Switch(config)#classifier AllPort2 source-port 2 Classifier 2 Switch(config)#classifier ARP ethernet-type arp source-port 2 Classifier 3 Switch(config)#classifier Port+IP ethernet-type ip source-port 2 source-ip 172.23.3.
ES-3100 Series Switch Support Notes Verifying your result Connect a PC “A” to the Switch on port2. Connect another PC “B” to the Switch on port10 with IP 172.23.3.191. First set the IP of PC “A” to 172.23.3.120. At this time, PC “A” can ping PC “B”. However, if you set the IP of PC “A” to another IP besides 172.23.3.120, it can no longer ping PC “B”. 109 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Centralized Management Introduction of SNMPc and NetAtlas With the number of network device increase, the demand to detect and respond to the network failure or external event in a very short time posts a great challenge to network administrator. How to easily manage and monitor network devices across networks becomes more and more important in network management. Figure 1 presents main elements of the system architecture.
ES-3100 Series Switch Support Notes Overview of SNMPc The following diagram shows the main elements of SNMPc. SNMPc includes the following function ♦ ♦ ♦ ♦ Main Button Bar: Button and controls to execute commands quickly Edit Button Bar: Button to quickly insert map element Event Log Tool: Button display filtered event log entries View Window Area: Map View, Mib Tables and Mib Graph windows are displayed here. ♦ View Window Area: Map View, Mib Tables and Mib Graph windows.
ES-3100 Series Switch Support Notes Overview of EMS The following diagram illustrates the main elements in EMS. EMS contains the four main functions. ♦ ♦ ♦ Menu Shortcut Bar: The buttons execute common commands Device Panel: This is a graphical device display. Device List Panel: View devices in a tree structure. The colors of the device indicate the status of the devices. Green is working and Rd is no response from the device.
ES-3100 Series Switch Support Notes Configuration of adding a new device via SNMPc In the following example, we will illustrate how to get started with SNMPc and Netatlas with adding a new device. Follow the procedures from Step 1 to Step 11. Step 1: In the edit button bar shown in the Figure 4 where you may select the icon to insert a new element. Figure 4 Adding a new Device 113 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Add a new device Step 2: In the map object properties, give the label name and enter the IP address of the selected device. In this example, we configure 172.23.3.11 as its IP address of your Switch as shown in Figure 5 Figure 5 Map Object Properties Step 4: In the map object properties, select Access tab to set the parameters of Read Access Mode to SNMP V2c shown in Figure 6. Change the value of 114 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Read Access Mode to SNMP V2c. Figure 6 Read Access mode Step 5: In the map object properties, select Access tab to set the parameters of Read /Write Access Mode to SNMP V2c shown in Figure 7. Change the value of Read/write Access Mode to SNMP V2c. Figure 7 Read/Write Access Mode 115 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Step 6: In the map object properties, select Access tab to set the parameters of Read community to public as shown in Figure 8. Figure 8 Read Community 116 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Step 7: In the map object propeies, select Access tab to set the parameters of Read community to public in Figure 9. Change the value of Read//write Community to Public. Figure 9 Read/write Community Step 8: In the Selection tool menu, Click the name of your Switch to manage the device. Figure 10 Device Selection 117 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Step 9: After the selection, a pop-up menu will display the NetAtlas switch manager diagram. Click the Switch Manager to enter the EMS Mapping shown in Figure 11 Figure 11 Device Selection Step 10: In the EMS mapping, it display a logical hierarchy for the device. In the device list, you may see the devices are added in the Rootmap shown in 118 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Figure 12. Figure 12 Rootmap Step 11: Click the your Switch to configure the device shown in Figure 13. Figure 13 Device mapping 119 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes VLAN Configuration via EMS In this section, we will give an example to illustrate how to use EMS to create a VLAN2 in GS-4024. Here are the procedures. Step 1: In the device panel list shown in Figure 12, right-click Configuration, Switch Configuration and then Switch Setup tab as shown in Figure 12 and Figure 13. Step 2: Define the VLAN type, there are two types of VLAN, one is 802.1Q and the other is Port-based VLAN. Select 802.
ES-3100 Series Switch Support Notes Figure 14 Selecting a VLAN Type After the VLAN type selection, a pop-up window indicates that you have finished the configuration. Then after we have defined the VLAN type to be the 802.1Q, go back to click the Configuration and then VLAN configuration in 121 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Figure 15. Figure 15 VLAN Configuration Click the New button to create a new VLAN ID in Figure 16. Figure 16 Creating a new VLAN ID Selecting Egress ports and defines them to be tagged or untagged in Figure 17 Figure 17 Selecting the ports 122 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes For more information, reference the user guide of NetAtlas. 123 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Cluster Management Overview Cluster Management allows you to manage up to 24 switches through a single IP to manage up to 24 switches simultaneously in the same broadcast domain and the same VLAN group ID. The cluster manager which can manage other switches is called the master device. The other terminology we use for cluster management is “istacking”. • How Cluster Management works Step 1: 1.
ES-3100 Series Switch Support Notes A clustering member listens on UDP port 263. When a clustering member receives a request with the matching signature, it answers with a HDAP Discover Response. In the response, the clustering member provides identity information about itself. Step 3: 3.
ES-3100 Series Switch Support Notes slave switch. • How to set up Cluster Management in switch Step 1: Go to menu: “Management” Æ ”Cluster Management” Æ ”Clustering Management Configuration” In “Clustering Management Configuration” pages, check the “Active” check box to enable Cluster Manager. In the middle of this page, there is a table shows all the clustering candidates which can be selected and added as the clustering members.
ES-3100 Series Switch Support Notes Select a device in the Clustering Candidate table and enter the password which is the admin password for the candidate device to add the clustering member. Step 3: 127 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Click on the index number to manage the selected clustering member. Step 4: In “Member Menu” pages, you can change any setting of the clustering member, except Cluster Management, Firmware Upgrade and Restore Configuration. Step 5: 128 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Enter “Management”->”Cluster Management”->”Clustering Management Status:” In “Clustering Management Status” pages, you can check the status for each member. Step 6: Enter “Management”->”Cluster Management”->”Clustering Management Configuration:” In “Clustering Management Configuration” pages , by 129 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes checking the remove checkbox and then, click on the Remove button to remove a cluster member. 130 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Overview of RMON Remote Monitoring (RMON) is a standard monitoring specification that enables various network monitors and console systems to exchange network-monitoring data. RMON provides network administrators with more freedom in selecting network-monitoring probes and consoles with features that meet their particular networking needs. RMON was originally developed to address the problem of managing LAN segments and remote sites from a central location.
ES-3100 Series Switch Support Notes requirements. Each group is optional so that vendors do not need to support all the groups within the Management Information Base (MIB). Some RMON groups require support of other RMON groups to function properly. Table 1 summarizes the nine monitoring groups specified in the RFC 1757 Ethernet RMON MIB.
ES-3100 Series Switch Support Notes Matrix Stores and retrieves Source and destination address pairs statistics for and packets, bytes, and errors for each conversations pair. between sets of two addresses. Filters Enables packets to be Bit-filter type (mask or not mask), filter matched by a filter expression (bit level), conditional equation for capturing expression (and, or not) to other filters. or events.
ES-3100 Series Switch Support Notes Event (1.3.6.1.2.1.16.9) All groups in this MIB are optional. (MIB-II is mandatory) Scenario (ES-3100 Series supports RMON 1.2.3.9) In this illustration, SNMPc Enterprise Edition Version 5.1.6c is installed on the PC. And this PC is defined as “RMON management console”. This PC can ping both ZyXEL ES-3148 (both Switch A & Switch B). And there are some probes / networking devices to generate the traffic to the ZyXEL Switches in order to verify the RMON result.
ES-3100 Series Switch Support Notes In this scenario, we are going to monitor the Broadcast Packets by using the RMON MIB. The following will demonstrate the steps to monitor the Broadcast Packets by using SNMPc Enterprise Edition Version 5.1.6c. 1. Methodology of Scenario Verification 1.Open your SNMPc program first, then pick the ZyXEL-3148 Switch (it is first named as device “root”) and give it the correct IP information to get the SNMP information. Also, you can rename it to whatever you want.
ES-3100 Series Switch Support Notes 2. Secondly, click on the “Mib” tab and expend the SNMP Mibs’ tree. You will find that there is an “rmon” group over there and again you can expend its sub-tree. 136 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 3. Right click the “etherStatsTable” and choose “View Table” 137 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes 4. Find the interface or port that you are looking for. And you can look at the corresponding field and therefore find the value that you want to monitor. In this case, we are looking for the Broadcast Packets. 138 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes Try to generate some broadcast traffic from the probe or your network device, then you should see the BroadcastPkts increasing. 5. In conclusion, if the Switch supports RMON, then you can get the values from the Switch in the RMON Group(s), otherwise, it will return 0 and always stays 0. Without the supporting of RMON, then it is impossible to monitor those elements in the RMON MIB Group 139 All contents copyright (c) 2006 ZyXEL Communications Corporation.
ES-3100 Series Switch Support Notes FAQ What is the default setting of the IP parameters? IP address: 192.168.1.1 Subnet: 255.255.255.0 What is the default login Name and Password of the Web Configurator? ID: admin Password: 1234 How to access my SWITCH through the console port? Connect the male 9-pin end of the console cable to the console port of the Switch.
ES-3100 Series Switch Support Notes How to change the password? Web Configurator is the only place you can change the password. After you log in for the first time, it is recommended you change the default administrator password. From Web Configurator: Click Advanced Application, Access Control, and then Logins to display the next screen. From there you can change a new password. How to access the Command Line Interface? There are two ways to access the Command Line Interface.
ES-3100 Series Switch Support Notes 2. 3. 4. 5. 6. Power off and then power on the Switch, and press any key to enter the debug mode when the screen shows “Press any key to enter Debug Mode within 3 seconds.” Type “atlc” and press the enter key When the message “starting XMODEM upload” appears, do XMODEM upload of the default rom file to the Switch After it is done uploading the rom file successfully, type “atgo” to leave the debug mode. The system will be restarted automatically.
ES-3100 Series Switch Support Notes Is Online Help available on the Web Configurator? Yes, the Web Configurator’s Online Help is available. Clicking on the Help link will bring up a description of the online help of that screen. How to restart device from Web? 1. Click Management and then Maintenance in the navigation panel to display the following screen. 2. Click on the “Click Here” button next to the Reboot System will restart the Switch.
ES-3100 Series Switch Support Notes operating. What is so called "Dual-Personality interface" in Ethernet Switching? Dual-Personality GbE interface means that one 1000Base-T Copper port and one SFP port share the same physical interface. Only one of them can be used at one of a time. Dual-Personality interface is also called "Combo Port" in some cases. 144 All contents copyright (c) 2006 ZyXEL Communications Corporation.