Bedienungsanleitung ZYXEL NXC-8160 QUICK GUIDE

[. . . ] Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Trademarks Trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners. ii Copyright IES-1000 User's Guide Interference Statements and Warnings FCC Interference Statement: This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference. [. . . ] The stations on a logical network belong to one group; however, a station can belong to more than one group. Users of one group are not allowed to access the resources of other groups and a higher level of security is achieved. This isolates the subscribers from one another and prevents a subscriber from discovering the resources, for example, shared drives or printers, of another subscriber. In the IES-1000 port-based VLAN, the allowable outgoing port(s) of each incoming port must be defined. Ethernet frames are forwarded according to these rules. Therefore, if you wish to allow two subscriber ports to talk to each other, for example, between conference rooms in a hotel, you must define the egress port (outgoing port) for both ports. An egress port is an outgoing port, that is, a port through which a data packet leaves. Port-based VLANs are specific only to the switch on which they were created. The factory default settings for the port-based VLAN of the IES-1000 are: Bridge port 1 (Ethernet port) allowed to all bridge ports Bridge port 2 (DSL port 1) allowed to bridge port 1 (Ethernet port) only Bridge port 3 (DSL port 2) allowed to bridge port 1 (Ethernet port) only Bridge port 4 (DSL port 3) allowed to bridge port 1 (Ethernet port) only Bridge port 5 (DSL port 4) allowed to bridge port 1 (Ethernet port) only Bridge port 6 (DSL port 5) allowed to bridge port 1 (Ethernet port) only Bridge port 7 (DSL port 6) allowed to bridge port 1 (Ethernet port) only Bridge port 8 (DSL port 7) allowed to bridge port 1 (Ethernet port) only Bridge port 9 (DSL port 8) allowed to bridge port 1 (Ethernet port) only The default VLAN settings allow each DSL port to communicate back and forth with only the Ethernet port, and not with other DSL ports. The following figure illustrates this. Figure 8-1 Default VLAN Settings Bridge Commands 8-5 IES-1000 User's Guide 8. 5. 1 Syntax: Portfilter Command 192. 168. 1. 1 bridge> portfilter [<source port> all|<dest ports>] where <source port> = all <dest ports> An example is shown next. 192. 168. 1. 1 > bridge 192. 168. 1. 1 bridge> portfilter Port 1 (ethernet): Port 2 (dsl1): Port 3 (dsl2): Port 4 (dsl3): Port 5 (dsl4): Port 6 (dsl5): Port 7 (dsl6): Port 8 (dsl7): Port 9 (dsl8): 1 1 1 1 1 1 1 1 all = = an incoming bridge port number. 8-8 Bridge Commands IES-1000 User's Guide Table 8-1 Physical Ports, Port Numbers and IES-1000 Default PVID Tags in Fast Mode PHYSICAL PORT CPU (Central Processing Unit) Network Module LAN Port (Ethernet) DSL Port 1 DSL Port 2 DSL Port 3 DSL Port 4 DSL Port 5 DSL Port 6 DSL Port 7 DSL Port 8 PORT NUMBER 0 1 2 3 4 5 6 7 8 9 1 N/A 2 3 4 5 6 7 8 9 DEFAULT PVID TAG Bridge Commands 8-9 IES-1000 User's Guide Chapter 9 IEEE 802. 1Q Tagged VLAN Commands This chapter generally describes the IEEE 802. 1Q Tagged VLAN and associated CI Commands. 9. 1 Introduction The IEEE 802. 1Q Tagged VLAN allows your network module to deliver tagged/untagged packets to and from its ports. The standard gives the network module the ability to recognize VLAN-aware and VLAN-unaware devices and automatically strips tagged packets destined for ports that would normally drop tagged packets. 9. 2 IEEE 802. 1Q Tagged VLAN -Tags When a LAN bridge receives a packet from a workstation, the VLAN from whence it came must be known so the bridge may respond, if necessary, to the source of the packet. · A VLAN identifier is added to the packet header that identifies the source VLAN. Implicit Tagging The MAC (Media Access Control) number, the port or other information is used to identify the source of a VLAN packet. The IEEE 802. 1Q Tagged VLAN uses both explicit and implicit tagging. 9. 3 VLAN-Aware/VLAN-Unaware Devices It is important for the LAN bridge to determine what devices are VLAN-aware and VLAN-unaware so that it can decide whether to forward a tagged packet (to a VLAN-aware device) or first strip the tag from a packet and then forward it (to a VLAN-unaware device). 9. 4 Filtering Databases A filtering database stores and organizes VLAN registration information useful for routing packets to and from a LAN bridge. A filtering database consists of a static entries (Static VLAN or SVLAN table) and dynamic entries (Dynamic VLAN or DVLAN table). 9. 4. 1 Static Entries (SVLAN Table) Static entry registration information is added, modified and removed by management only. IEEE 802. 1Q Tagged VLAN Commands 9-1 IES-1000 User's Guide 9. 4. 2 Dynamic Entries (DVLAN Table) Dynamic entries are learned by the bridge and cannot be created or updated by management. The bridge learns this information by observing what port, source address and VLAN ID (or VID) is associated with a packet. Entries are added and deleted using GARP VLAN Registration Protocol (GVRP), where GARP is the Generic Attribute Registration Protocol. 9. 5 IEEE 802. 1Q Tagged VLAN Commands Bridge port 1 stands for the Ethernet port, bridge port 2 stands for DSL port 1, bridge port 3 stands for DSL port 2, and so on. 9. 5. 1 Enabling the IEEE 802. 1Q Tagged VLAN The default for the IEEE 802. 1Q Tagged VLAN is disable. Enable the IEEE 802. 1Q Tagged VLAN by following the example shown next. Syntax: 192. 168. 1. 1 vlan1q> vlan enable 9. 5. 2 Syntax: Disabling the IEEE 802. 1Q Tagged VLAN You can disable the IEEE 802. 1Q Tagged VLAN by using the VLAN Disable command. 192. 168. 1. 1 vlan1q> vlan disable This command disables the IEEE 802. 1Q Tagged VLAN. 9. 5. 3 Syntax: PVID Command 192. 168. 1. 1 vlan1q> pvid [<port #> <vlan id>] where <port #> = <vlan id> = bridge port number. Valid parameter range = [1 - 4094]. This command sets the VLAN ID to a specific port in the PVID table. [. . . ] iv Set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2, 12-3, 12-4 Set Auto Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1 Set Contact Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4 Set Duplex Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]