I will give an example of cable diagnostics on ZyXEL switches, for the test I will take the ZyXEL MES-3528 switch.Continue reading “Cable test on ZyXEL MES-3528”
I will configure for an example the switch ZyXEL MES-3528.
When connected via the console, the standard parameters are as follows:
Login: admin, password: 1234
I will describe the possible console commands in Debug mode (Debug mode is enabled when ZyXEL devices are turned on).Continue reading “ZyXEL Debug CLI”
I will describe the ZyXEL MES-3528 switch firmware update procedure:Continue reading “ZyXEL MES-3528 firmware update”
I will describe by points what needs to be done to reset the switch settings:Continue reading “Reset ZyXEL MES-3528 configuration”
I recently configured the ZyXEL ES-2108 switch.
Standard IP 192.168.1.1, login – admin, password – 1234.
I will give below examples of commands.
Let’s review the current configuration:
show running-config show system-information
Now go to the configuration mode:
Change the administrator password:
admin-password PASSWORD password PASSWORD
Turn on flood control and loop protection:
Let’s configure the VLAN to manage and assign the IP (I have a 207 vlan tag, 1 – uplink port):
vlan 207 name core normal "" fixed 1 forbidden 2-8 untagged 2-8 ip address default-management 192.168.1.20 255.255.255.0 ip address default-gateway 192.168.1.1 exit
Let’s configure VLAN for users (comes without a tag):
vlan 226 name users normal "" fixed 1-8 untagged 1-8 exit
Configure the uplink port:
interface port-channel 1 pvid 226 vlan-trunking exit
Configure the other client ports:
interface port-channel 2-8 bmstorm-limit bmstorm-limit 128 loopguard pvid 226 exit
Set the time parameters:
time timezone 200 timesync server 192.168.1.1 timesync ntp
snmp-server set-community NAME snmp-server trap-community NAME snmp-server contact admin location LOCATION
Configure the logs:
syslog syslog type system syslog type interface syslog type switch syslog type aaa syslog type ip
Let’s specify which IPs are allowed to administer the switch:
remote-management 1 remote-management 2 remote-management 1 start-addr 192.168.1.1 end-addr 192.168.1.1 service telnet ftp http icmp snmp ssh https remote-management 2 start-addr 192.168.1.5 end-addr 192.168.1.5 service telnet ftp http icmp snmp ssh https
Exit the configuration mode:
To view mac-addresses, use the command:
show mac address-table
Save the settings:
On the test, I isolate the ports from each other, allowing traffic to go only to uplink (the port from which the Internet comes), I have it 25.
Let’s connect to the switch and see the current configuration:
Now go into the configuration mode:
Isolate the necessary ports, except the uplink port:
interface port-channel 1-24,26-28 vlan1q port-isolation exit exit
Save the configuration:
The ports on which the vlan1q port-isolation command is written do not see other ports with the same command, but see the ports without it and the switch CPU. Ports without the command vlan1q port-isolation see the ports with it and without it.