Table of Contents D-Link DES-3010FA/GA User Guide Overview............................................................................... 7 Using the Installation Guide .......................................................................................................................7 Using the Embedded Web Interface User Guide .......................................................................................7 Intended Audience.......................................................................
D-Link DES-3010FA/GA User Guide Booting the Device ........................................................................................................................ 33 Configuration Overview................................................................................................................. 34 Initial Configuration ................................................................................................................................. 34 Advanced Configuration...................
Defining Private VLANs ...............................................................................................................113 Configuring GARP .......................................................................................................................116 Defining GARP ......................................................................................................................................116 Defining GVRP ....................................................................
D-Link DES-3010FA/GA User Guide Configuring Quality of Service ............................................................................................ 183 VPT Classification Information .................................................................................................... 183 CoS Services .............................................................................................................................. 184 Configuring Quality of Service General Settings........................
Defining SNTP Authentication .....................................................................................................221 Defining SNTP Servers ...............................................................................................................223 Defining SNTP Interface Settings................................................................................................225 Viewing Statistics .........................................................................................
D-Link DES-3010FA/GA User Guide Preface The Embedded Web System (EWS) is a network management system. The D-Link Embedded Web Interface configures, monitors, and troubleshoots network devices from a remote web browser. The D-Link Embedded Web Interface web pages are easy-to-use and easy-to-navigate. In addition, The D-Link Embedded Web Interface provides real time graphs and RMON statistics to help system administrators monitor network performance.
Preface D-Link DES-3010FA/GA User Guide Overview D-Link DES-3010FA/GA User Guide Overview This user guide is divided into the following sections to provide concise information for installing, configuring, and managing the device: • • Using the Installation Guide Using the Embedded Web Interface User Guide Using the Installation Guide This section provides an overview of the D-Link 3010FA/GA Installation Guide, which includes the following sections: • • • Section 1.
D-Link DES-3010FA/GA User Guide • • • Section 19. Configuring System Time — Provides information about configuring system time, including Daylight Savings Time parameters and Simple Network Time Protocol (SNTP) parameters. Section 20. Viewing Statistics — Provides information about viewing device statistics, including RMON statistics, device history events, and port and LAG utilization statistics. Appendix A, Troubleshooting — Provides basic troubleshooting for installing the device.
D-Link DES 3010FA/GA Installation Guide D-Link DES 3010FA/GA Installation Guide Page 9
D-Link DES-3010FA/GA User Guide Section 1.
Device Description Viewing the Device Viewing the Device The D-Link DES-3010FA and D-Link DES-3010GA are 10 port Fast Ethernet Managed Switches. The two devices contain 8 network ports on the front panel for network connectivity. Device management is performed using an Embedded Web Server (EWS) or through a Command Line Interface (CLI). The device configuration is performed via a DB-9 RS-232 interface.
D-Link DES-3010FA/GA User Guide Figure 2: DES-3010GA Front Panel The device front panel is configured as follows: • 8 Fast Ethernet ports — RJ-45 ports designated as 10/100Base-TX . The RJ-45 ports are designated as ports Ports1-8. • DB-9 Console port — An asynchronous serial console port supporting the RS-232 electrical specification. The port is used to connect the device to the console managing the device. • 1000Base-T port — RJ-45 Gigabit port designated on the device as port 9.
Device Description Ports Description Ports Description This section describes the device ports and includes the following topics: • • • • • 10/100Base-TX Fast Ethernet Ports 1000Base-T Gigabit Ethernet Ports 100Base-FX Fiber port SFP Port DB-9 Console Port 10/100Base-TX Fast Ethernet Ports The 10/100Base-TX Fast Ethernet ports are RJ-45. 1000Base-T Gigabit Ethernet Ports The device contains a 1000 Base-TX Gigabit port.
D-Link DES-3010FA/GA User Guide Figure 4: Inserting a GBIC into the Device DB-9 Console Port The DB-9 port is an asynchronous serial console port supporting the RS-232 electrical specification. The port is used to connect the device to a console managing the device. This interface configuration is as follows: • • • • • Eight data bits. One stop bit. No parity. Baud rate is 9600 (default). The user can change the rate from 115200 down to 9600 bps. Console speeds of 57600 and 115200.
Device Description Cable Specifications Cable Specifications The following table contains the various cable specification for the DES-3010FA/GA: Table 1: DES-3010FA/GA Cable Specifications Cab le Typ e D escr ip tio n 10Base-TX UTP Category 3, 4, 5 (100 meters max.) EIA/TIA- 568 150-ohm STP (100 meters max.) 100Base-TX UTP Cat. 5 (100 meters max.) EIA/TIA-568 150-ohm STP (100 meters max.) 1000Base-T UTP Cat. 5e (100 meters max.) UTP Cat. 5 (100 meters max.
D-Link DES-3010FA/GA User Guide LED Defiitions The device front panels contain Light Emitting Diodes (LED) that indicate the device status.The different LED types are as follows: • Port LEDs — Indicate each port status. • Power LED — Indicating the device power supply status. Port LEDs 10/100Base-TX Fast Ethernet RJ-45 Port LEDs The following figure illustrates the port LEDs. Figure 5: 10/100Base-TX Fast Ethernet RJ-45 Port LEDs The RJ-45 ports have two LEDs, one for speed, and one for Link /activity.
Device Description LED Defiitions Figure 6: 1000Base-T Gigabit Ethernet RJ-45 Port LEDs The RJ-45 ports have two LEDs, one for speed, and one for Link /activity. The LED indications are described in the following table: Table 4: 1000Base-T Gigabit Ethernet RJ-45 Port LED Indications Por t Des criptio n L ED In dica tio n D escr ip tio n Left LED - Speed Green A 100/1000-Mbps link is established on the port. Off No link is established on the port. Green A link is established on the port.
D-Link DES-3010FA/GA User Guide Figure 7: Fiber Port LEDs The RJ-45 ports have two LEDs, one for speed, and one for Link /activity. The LED indications are described in the following table: Table 5: Fiber Port LED Indications Por t Des criptio n L ED In dica tio n D escr ip tio n Left LED - Speed Green A 100/1000-Mbps link is established on the port. Off No link is established on the port. Green A link is established on the port. Flashing Green There is data transmission on the port.
Device Description LED Defiitions SFP Port LEDs The following figure illustrates the port LEDs. Figure 8: SFP Port LEDs The RJ-45 ports have two LEDs, one for speed, and one for Link /Activity. The LED indications are described in the following table: Table 6: SFP Port LED Indications Por t Des criptio n L ED In dica tio n D escr ip tio n Left LED - Speed Green A 100/1000-Mbps link is established on the port. Off No link is established on the port. Green A link is established on the port.
D-Link DES-3010FA/GA User Guide The console LED indications are described in the following table: Table 8: Console LED Indications Por t D escr ip tio n L ED In dica tio n D escr ip tio n Console Flashing Green Power On Self Test (POST) is in progress. Green POST failure. A problem has been discovered during the POST. Cable, Port, and Pinout Information This section describes the devices physical interfaces and provides information about cable connections.
Device Description Physical Dimensions Physical Dimensions The device has the following physical dimensions: • Width: 220 mm (8.66 inch) • Depth: 155mm (6.10 inch) • Height: 35 mm (1.
DLINK DES-3010FA/GA User Guide Section 2.
Mounting Device Preparing for Installation Preparing for Installation This section provides an explanation for preparing the installation site, and includes the following topics: • • • Installation Precautions Site Requirements Unpacking Installation Precautions Warnings • • • • • • • • • • The surface on which the switch is placed should be adequately secured to prevent it from becoming unstable and/or falling over. Ensure the power source circuits are properly grounded.
DLINK DES-3010FA/GA User Guide • Ambient Requirements — The ambient unit operating temperature range is 0 to 40ºC (32 to 104ºF) at a relative humidity of up to 95%, non-condensing. Verify that water or moisture cannot enter the device casing.
Mounting Device Installing the Device Installing the Device The device can be installed on a flat surface or mounted in a rack. This section includes the following topics: • • Desktop or Shelf Installation Rack Installation Desktop or Shelf Installation When installing the switch on a desktop or shelf, the rubber feet included with the device should first be attached. Attach these cushioning feet on the bottom at each corner of the device.
DLINK DES-3010FA/GA User Guide Notes • Disconnect all cables from the unit before mounting the device in a rack or cabinet. • When mounting multiple devices into a rack, mount the devices from the bottom up. To install the device in a rack, perform the following: 1. Place the supplied rack-mounting bracket on one side of the device ensuring the mounting holes on the device line up to the mounting holes on the rack mounting bracket. The following figure illustrates where to mount the brackets.
Mounting Device Installing the Device Figure 12: Mounting Device in a Rack 5. Secure the unit to the rack with the rack screws (not provided). Fasten the lower pair of screws before the upper pair of screws. This ensures that the weight of the unit is evenly distributed during installation. Ensure that the ventilation holes are not obstructed.
DLINK DES-3010FA/GA User Guide Wall Installation The device can also be mounted on a wall inside a wiring closet. To mount the device on a wall, perform the following: 1. 2. 3. 4. Mark two holes 100mm apart on the wall. Drill holes into the wall where the marks have been made. The hole diameter and depth is defined by the wall plug and screw combination being used to mount the device. Insert the wall plugs unto the holes. Screw the screws into the wall plugs allowing the heads to protrude from the wall.
Mounting Device Connecting the Device Figure 14: Mounting the device on the wall Wall Connecting the Device This section describes how to connect the device, and includes the following sections: • Connecting the Switch to a Terminal • AC Power Connection Connecting the Switch to a Terminal The device is connected to a terminal through an console port on the front panel, which enables a connection to a terminal desktop system running terminal emulation software for monitoring and configuring the device.
DLINK DES-3010FA/GA User Guide d) Set flow control to none. e) Under Properties, select VT100 for Emulation mode. f) Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that the setting is for Terminal keys (not Windows keys). Note When using HyperTerminal with Microsoft Windows 2000, ensure that you have Windows 2000 Service Pack 2 or later installed. With Windows 2000 Service Pack 2, the arrow keys function properly in HyperTerminal’s VT100 emulation. Go to www.microsoft.
Starting and Configuring the Device Section 3.
D-Link DES-3010FA/GA User Guide Configuring the Terminal After completing all external connections, connect a terminal to the device to monitor the boot and other procedures. To configure the device, the terminal must be running terminal emulation software. Ensure that the terminal emulation software is configured as follows: 1. 2. 3. 4. 5. Connect the Chassis serial port to the switch module. The baud rate automatically boots up at 9600. Set the data format to 8 data bits, 1 stop bit, and no parity.
Starting and Configuring the Device Booting the Device Booting the Device The assumed bootup information is as follows: • • The device is delivered with a default configuration. The default user name is admin • The default passwordis blank. To login, perform the following steps: 1. Press Enter twice in rapid succession. The auto baud-rate process synchronizes the host and the device. 2. Enter the user name, admin. The default password is blank. To boot the device, perform the following steps: 1. 2. 3.
D-Link DES-3010FA/GA User Guide If the system boot process is not interrupted by pressing or , the process continues decompressing and loading the code into RAM. The code starts running from RAM and the list of numbered system ports. After the device boots successfully, a system prompt is displayed (console>) which is used to configure the device. However, before configuring the device, ensure that the latest software version is installed on the device.
Starting and Configuring the Device Configuration Overview • • The default gateway IP address. The SNMP community. Static IP Address and Subnet Mask IP interfaces can be configured on each port of the device. After entering the configuration command, it is recommended to check if a port was configured with the IP address by entering the show ip interface command. Note The commands to configure the device are port specific.
D-Link DES-3010FA/GA User Guide console (config) # ip default-gateway 100.1.1.110 console (config) # snmp-server community private rw console(config)# exit console# Verifying the IP and Default Gateway Addresses To ensure that the IP address and the default gateway were properly assigned, execute the following command and examine its output: console # - ip interface Gateway IP Address Activity status --------------------- --------------192.168.1.1 Active IP address -------------192.168.1.
Starting and Configuring the Device Configuration Overview Note The device is delivered with no community strings configured. The community-string, community-access, and IP address can be configured through the local terminal during the initial configuration procedure. The SNMP configuration options are: • Community string – – Access rights options: ro (read only), rw (read-and-write), and su (super). An option to configure IP address or not.
D-Link DES-3010FA/GA User Guide Contact: System Location: This completes the initial configuration of the device from a local terminal. The configured parameters enable further device configuration from any remote location.
Starting and Configuring the Device Advanced Configuration Advanced Configuration This section provides information about dynamic allocation of IP addresses and security management based on the authentication, authorization, and accounting (AAA) mechanism, and includes the following topics: • • • Receiving an IP Address from a DHCP Server Receiving an IP Address from a BOOTP Server Security Management and Password Configuration When configuring or receiving IP addresses through DHCP and BOOTP, the config
D-Link DES-3010FA/GA User Guide The device reboots with no configuration and in 60 seconds starts sending BOOTP requests. The device receives the IP address automatically. Note When the device reboot begins, any input at the ASCII terminal or keyboard automatically cancels the BOOTP process before completion, and the device does not receive an IP address from the BOOTP server. The following example illustrates the process: 3.
Starting and Configuring the Device Advanced Configuration This section contains the following topics: • • • • • Configuring an Initial Console Password Configuring an Initial Telnet Password Configuring an Initial SSH password Configuring an Initial HTTP Password Configuring an initial HTTPS Password Configuring an Initial Console Password To configure an initial console password, enter the following commands: console(config)# aaa authentication login default line console(config)# aaa authentication en
D-Link DES-3010FA/GA User Guide console(config)# ip http authentication local console(config)# username admin password user1 level 15 Configuring an initial HTTPS Password To configure an initial HTTPS password, enter the following commands: console(config)# ip https authentication local console(config)# username admin password user1 level 15 Enter the following commands when configuring to use a console, a Telnet, or an SSH session to use an HTTPS session. In the Web browser, enable SSL 2.
Starting and Configuring the Device Startup Procedures Startup Procedures This section includes the following topics: • Startup Menu Procedures • Software Download and Reboot Startup Menu Procedures The procedures called from the Startup menu cover software download, flash handling, and password recovery. The diagnostics procedures are for use by technical support personnel only and are not disclosed in this document. The Startup menu can be entered when booting the device.
D-Link DES-3010FA/GA User Guide Note When selecting an option from the Startup menu, time must be taken into account. If no selection is made within 35 seconds (default), the device times out. This default value can be changed through the CLI. Only technical support personnel can use Diagnostics Mode. For this reason, Diagnostics Mode is not described in this guide.
Starting and Configuring the Device Startup Procedures 4. Repeat the initial device configuration. Password Recovery If a password is lost, you can perform the password recovery procedure from the Startup menu. The password recovery procedure enables entry to the device one time without a password. To recover a lost password for the local terminal only: 1. From the Startup menu, type [4] and press . The password is deleted.
D-Link DES-3010FA/GA User Guide !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Copy took 00:01:11 [hh:mm:ss] Exclamation points indicate that a copying process is in progress. Each symbol (!) corresponds to 512 bytes transferred successfully. A period indicates that the copying process timed out. Many periods in a row indicate that the copying process failed. 6. 7. Enter the reload command.
Starting and Configuring the Device Startup Procedures 2. Please download program using XMODEM. console# Specify the path of the source file within 20 seconds. If the path is not specified within 20 seconds, the command times out. To download a software image file using XModem: 1. Enter the command console# xmodem:image. The switch is ready to receive the file via the XModem protocol. 2. Specify the path of the source file to begin the transfer process.
D-Link DES-3010FA/GA User Guide D-Link DES 3010FA/GA EWS User Guide Page 48
Getting Started Section 4.
D-Link DES-3010FA/GA User Guide Starting the D-Link Embedded Web Interface This section contains information on starting the D-Link Embedded Web interface. To access the D-Link user interface: 1. Open an Internet browser. 2. Ensure that pop-up blockers are disabled. If pop-up blockers are enable, edit, add, and device information messages may not open. 3. Enter the device IP address in the address bar and press . The Enter Network Password Page opens: Figure 15: Enter Network Password Page 4.
Getting Started Understanding the D-Link Embedded Web Interface Figure 16: D-Link Embedded Web Interface Home Page Understanding the D-Link Embedded Web Interface The D-Link Embedded Web Interface Home Page contains the following views: • • • Port LED Indicators — Located at the top of the home page, the port LED indicators provide a visual representation of the ports on the D-Link front panel.
D-Link DES-3010FA/GA User Guide Figure 17: D-Link Embedded Web Interface Components The following table lists the user interface components with their corresponding numbers: Table 11: Interface Components Vi ew Des cri pt i on 1 Tree View Tree View provides easy navigation through the configurable device features. The main branches expand to display the sub-features.
Getting Started Understanding the D-Link Embedded Web Interface Device Representation The D-Link Embedded Web Interface Home Page contains a graphical panel representation of the device.
D-Link DES-3010FA/GA User Guide Using Screen and Table Options D-Link contains screens and tables for configuring devices. This section contains the following topics: • • • Adding Configuration Information Modifying Configuration Information Deleting Configuration Information Adding Configuration Information User-defined information can be added to specific D-Link Web Interface pages, by opening a new Add page. To add information to tables or D-Link Web Interface pages: 1.
Getting Started Using Screen and Table Options Figure 20: IP Interface Settings Page 4. Modify the fields as required. 5. Click . The fields are modified, and the information is saved to the device. Deleting Configuration Information 1. 2. 3. Open The D-Link Embedded Web Interface page. Select a table row. Select the Remove checkbox. 4. Click . The information is deleted, and the device is updated.
D-Link DES-3010FA/GA User Guide Resetting the Device The Reset page enables the device to be reset from a remote location. Note To prevent the current configuration from being lost, save all changes from the running configuration file to the startup configuration file before resetting the device. For instructions, see “Copying Files” on page 199. To reset the device: 1. Click System > General > Reset. The Reset page opens. Figure 21: Reset Page 2. Click . A confirmation message is displayed.
Getting Started Resetting the Device Figure 22: Reset Confirmation Message 3. Click . The device is reset, and a prompt for a user name and password is displayed. 4. Enter a user name and password to reconnect to the web Interface.
D-Link DES-3010FA/GA User Guide Logging off from the Device 1. Click . The Logout Page opens. Figure 23: Logout Page 2. Click . The D-Link Embedded Web Interface Home Page closes.
Managing Device Information Section 5. Managing Device Information The System Information Page contains parameters for configuring general device information, including the system name, location, and contact, the system MAC Address, System Object ID, System Up Time, System IP and MAC addresses, and both software and hardware versions. To define the general system information: 1. Click System > General > Description.
DLINK DES-3010FA/GA User Guide • • • • 2. Base MAC Address — Displays the device MAC address. Hardware Version — Displays the installed device hardware version number. Software Version — Displays the installed software version number. Boot Version — Displays the current boot version running on the device. Define the System Name, System Location, and System Contact fields. 3. Click . The device information is saved and the device is updated.
Configuring Device Security Section 6. Configuring Device Security This section provides access to security pages that contain fields for setting security parameters for ports, device management methods, users, and server security.
D-Link DES-3010FA/GA User Guide Configuring Management Security This section provides information for configuring device management security. This section includes the following topics: • • Configuring Authentication Methods Configuring Passwords Configuring Authentication Methods This section provides information for configuring device authentication methods.
Configuring Device Security Configuring Management Security Defining Access Profiles Access profiles are profiles and rules for accessing the device. Access to management functions can be limited to user groups. User groups are defined for interfaces according to IP addresses or IP subnets. Access profiles contain management methods for accessing and managing the device.
D-Link DES-3010FA/GA User Guide • • Current Active Access Profile — Defines the access profile currently active. Remove — Removes the selected access profile. The possible field values are: – – 2. Checked — Removes the selected access profile. Unchecked — Maintains the access profiles. Click .
Configuring Device Security Configuring Management Security • Interface — Defines the interface on which the access profile is defined. The possible field values are: – – – – Port — Specifies the port on which the access profile is defined. LAG — Specifies the LAG on which the access profile is defined. VLAN — Specifies the VLAN on which the access profile is defined. Source IP Address — Defines the interface source IP address to which the access profile applies.
D-Link DES-3010FA/GA User Guide Defining Profile Rules Access profiles can contain up to 128 rules that determine which users can manage the switch module, and by which methods. Users can also be blocked from accessing the device. Rules are composed of filters including: • • • • • • Rule Priority Interface Management Method IP Address Prefix Length Forwarding Action The rule order in the profile rules table is important, since packets are matched to the first rule meeting the rule criteria.
Configuring Device Security Configuring Management Security • – – LAG — Attaches the rule to the selected LAG. – – All — Assigns all management methods to the rule. VLAN — Attaches the rule to the selected VLAN. Management Method — Defines the management method for which the rule is defined. Users with this access profile can access the device using the management method selected. The possible field values are: Telnet — Assigns Telnet access to the rule.
D-Link DES-3010FA/GA User Guide Figure 28: Add Profile Rule Page 3. Define the Access Profile Name, Priority, Management Method, Interface, Source IP Address, Network Mask or Prefix Length, and Action fields. 4. Click . The profile rule is added to the access profile, and the device is updated. To modify a Profile Rule: 1. Click Security > Management Security > Authentication > Access Profile. The Access Profile Page opens. 2. Click .
Configuring Device Security Configuring Management Security Figure 29: Profile Rule Settings Page 3. Modify the fields. 4. Click . The profile rule is modified, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining Authentication Profiles Authentication profiles allow network administrators to assign authentication methods for user authentication. User authentication can be performed locally or on an external server. User authentication occurs in the order the methods are selected. If the first authentication method is not available, the next selected method is used.
Configuring Device Security Configuring Management Security • Remove — Removes the selected authentication profile. The possible field values are: – – 2. Checked — Removes the selected authentication profile. Unchecked — Maintains the authentication profiles. Click . The Add Authentication Profile Page opens. Figure 31: Add Authentication Profile Page 3. Define the Profile Name and Authentication Methods fields. 4. Click . The authentication profile is defined, and the device is updated.
D-Link DES-3010FA/GA User Guide Figure 32: Authentication Profile Settings Page 3. Select an authentication method from the Optional Methods list. 4. Click . The authentication method is selected, and the device is updated.
Configuring Device Security Configuring Management Security Mapping Authentication Methods After authentication profiles are defined, they can be applied to management access methods. For example, console users can be authenticated by Authentication Profile List 1, while Telnet users are authenticated by Authentication Method List 2. Authentication methods are selected using arrows. The order in which the methods are selected is the order by which the authentication methods are used.
D-Link DES-3010FA/GA User Guide – – – Line — Authentication using a line password. Enable — Authentication using enable. Local, RADIUS — Authentication first occurs locally. If authentication cannot be verified locally, the RADIUS server authenticates the management method. If the RADIUS server cannot authenticate the management method, the session is blocked. – RADIUS, Local — Authentication first occurs at the RADIUS server.
Configuring Device Security Configuring Management Security Defining RADIUS Settings Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. RADIUS servers provide a centralized authentication method for web access. Default parameters are user-defined, and are applied to newly defined RADIUS servers. If new default parameters are not defined, the system default values are applied to newly defined RADIUS servers. To configure RADIUS servers: 1.
D-Link DES-3010FA/GA User Guide • • • • • • • • • 2. IP Address — Lists the RADIUS server IP addresses. Priority — Displays the RADIUS server priority. The possible values are 1-65535, where 1 is the highest value. The RADIUS server priority is used to configure the server query order. Authentication Port — Identifies the authentication port. The authentication port is used to verify the RADIUS server authentication. The authenticated port default is 1812.
Configuring Device Security Configuring Management Security Figure 35: Add Radius Server Page 3. Define the Host IP Address, Priority, Authenticated Port, Timeout for Reply, Dead Time, and Usage Type fields. 4. Click . The RADIUS server is added, and the device is updated. To edit RADIUS Server Settings: 1. Click System > Management Security > Authentication > Radius. The RADIUS Page opens. 2. Click .
D-Link DES-3010FA/GA User Guide Figure 36: RADIUS Server Settings Page 3. Define the Priority, Source IP Address, Key String, Authentication Port, Timeout for Reply, Dead Time, and Usage Type fields. 4. Click . The RADIUS server settings are saved, and the device is updated.
Configuring Device Security Configuring Management Security Configuring Passwords This section contains information for defining device passwords, and includes the following topics. • • • Defining Local Users Defining Line Passwords Defining Enable Passwords Defining Local Users Network administrators can define users, passwords, and access levels for users using the Local User Page. To define local users: 1. Click System > Management Security > Passwords > Local Users.
D-Link DES-3010FA/GA User Guide – 2. Unchecked — Maintains the local users. Click . The Add Local User Page opens: Figure 38: Add Local User Page In addition to the fields in the Local User Page, the Add Local User Page contains the following fields: • • Password — Defines the local user password. Local user passwords can contain up to 159 characters. Confirm Password — Verifies the password.
Configuring Device Security Configuring Management Security Defining Line Passwords Network administrators can define line passwords in the Line Password Page. After the line password is defined, a management method is assigned to the password. The device can be accessed using the following methods: • • • Console Telnet Secure Telnet To define line passwords: 1. Click System > Management Security > Passwords > Line Password.
D-Link DES-3010FA/GA User Guide Defining Enable Passwords The Enable Password Page sets a local password for a particular access level. To enable passwords: 1. Click System > Management Security > Passwords > Enable Password. The Enable Password Page opens: Figure 40: Enable Password Page The Enable Password Page contains the following fields: • • • Level — Defines the access level associated with the enable password. Possible field values are 1-15. Password — Defines the enable password.
Configuring Device Security Configuring Network Security Configuring Network Security Network security manages both access control lists and locked ports.
D-Link DES-3010FA/GA User Guide • • Guest VLANs — Provides limited network access to authorized ports. If a port is denied network access via port-based authorization, but the Guest VLAN is enabled, the port receives limited network access. For example, a network administrator can use Guest VLANs to deny network access via port-based authentication, but grant Internet access to unauthorized users.
Configuring Device Security Configuring Network Security • • Authentication Method — Specifies the authentication method used. The possible field values are: – – – None — No authentication method is used to authenticate the port. – Enable — Enables using a Guest VLAN for unauthorized ports. If a Guest VLAN is enabled, the unauthorized port automatically joins the VLAN selected in the VLAN List field. RADIUS — Port authentication is performed via RADIUS server.
D-Link DES-3010FA/GA User Guide Defining Port Authentication The Port Authentication Page allows network managers to configure port-based authentication global parameters. To define the port-based authentication global properties: 1. Click Advanced Setup > Network Security > Authentication > Port Authentication. The Port Authentication Page opens.
Configuring Device Security Configuring Network Security • Enable Periodic Reauthentication — Permits immediate port reauthentication. The possible field values are: – – Enable — Immediate port reauthentication is enabled. This is the default value. • Disable — Immediate port reauthentication is disabled. Reauthentication Period — Displays the time span (in seconds) in which the selected port is reauthenticated. The field default is 3600 seconds.
D-Link DES-3010FA/GA User Guide Figure 43: Port Authentication Settings Page 3. Modify the Admin Port Control, Enable Periodic Reauthentication, Quiet Period, Resending EAP, Supplicant Timeout, and Server Timeout fields. 4. Click . The port authentication settings are defined, and the device is updated.
Configuring Device Security Configuring Network Security Configuring Multiple Hosts The Multiple Host Page allows network managers to configure advanced port-based authentication settings for specific ports and VLANs. For more information on advanced port-based authentication, see “Advanced PortBased Authentication” on page 83. To define the network authentication global properties: 1. Click Advanced Setup > Network Security > Authentication > Multiple Host. The Multiple Host Page opens.
D-Link DES-3010FA/GA User Guide • • • Traps — Indicates if traps are enabled for Multiple Hosts. The possible field values are: – – True — Indicates that traps are enabled for Multiple hosts. – Unauthorized — Indicates that either the port control is Force Unauthorized and the port link is down, or the port control is Auto but a client has not been authenticated via the port. – Not in Auto Mode — Indicates that the port control is Forced Authorized, and clients have full port access.
Configuring Device Security Configuring Network Security Defining Authentication Hosts The Authenticated Host Page contains a list of authenticated users. To define authenticated users: 1. Click Advanced Setup > Network Security > Authentication > Authenticated Host. The Authenticated Host Page opens: Figure 46: Authenticated Host Page The Authenticated Host Page contains the following fields: • • • • User Name — Lists the supplicants that were authenticated, and are permitted on each port.
D-Link DES-3010FA/GA User Guide Configuring Traffic Control This section contains information for managing both port security and storm control, and includes the following topics: • • Managing Port Security Enabling Storm Control Managing Port Security Network security can be increased by limiting access on a specific port only to users with specific MAC addresses. The MAC addresses can be dynamically learned or statically configured.
Configuring Device Security Configuring Network Security 1. Click Advanced Setup > Network Security > Traffic Control > Port Security. The Port Security Page opens. Figure 47: Port Security Page The Port Security Page contains the following fields: • • Interface — The port or LAG name. Interface Status — Indicates the host status.
D-Link DES-3010FA/GA User Guide • • Action — The action to be applied to packets arriving on a locked port. The possible field values are: – – – Forward — Forwards packets from an unknown source without learning the MAC address. – – Checked — Enables traps. Discard — Discards packets from any unlearned source. This is the default value. Shutdown — Discards packets from any unlearned source and shuts down the port. The port remains shut down until reactivated, or until the device is reset.
Configuring Device Security Configuring Network Security Enabling Storm Control Storm control limits the amount of Multicast and Broadcast frames accepted and forwarded by the device. When Layer 2 frames are forwarded, Broadcast and Multicast frames are flooded to all ports on the relevant VLAN. This occupies bandwidth, and loads all nodes on all ports. A Broadcast Storm is a result of an excessive amount of broadcast messages simultaneously transmitted across a network by a single port.
D-Link DES-3010FA/GA User Guide • Broadcast Mode — Specifies the Broadcast mode currently enabled on the device. The possible field values are: – – – • 2. Unknown Unicast, Multicast & Broadcast — Counts Unicast, Multicast, and Broadcast traffic. Multicast & Broadcast — Counts Broadcast and Multicast traffic together. Broadcast Only — Counts only Broadcast traffic. Broadcast Rate Threshold — The maximum rate (kilobytes per second) at which unknown packets are forwarded. The range is 0-1,000,000.
Configuring Ports Section 7. Configuring Ports The Interface Configuration Page contains fields for defining port parameters. To define port parameters: 1. Click Basic Setup > Interface > Interface Configuration. The Interface Configuration Page opens.
D-Link DES-3010FA/GA User Guide • – – 100 — Indicates the port is currently operating at 100 Mbps. – Full — The interface supports transmission between the device and its link partner in both directions simultaneously. 1000 — Indicates the port is currently operating at 1000 Mbps. Duplex Mode — Displays the port duplex mode. This field is configurable only when auto negotiation is disabled, and the port speed is set to 10M or 100M. This field cannot be configured on LAGs.
Configuring Ports 2. Click . The Port or LAG Interface Settings Page opens: Note In addition to the fields in the Interface Configuration Page, the Port or LAG Configuration Settings Page includes the field Reactivate Suspended Port or Reactivate Suspended Lag. Select this field to return a suspended port or LAG to active status. Figure 52: Port Configuration Settings Page 3. Modify the Admin Speed, Admin Duplex, and Admin Advertisement fields. 4. Click .
D-Link DES-3010FA/GA User Guide Viewing Port Properties The Interface Properties Page contains fields for defining port parameters. To define port parameters: 1. Click Basic Setup > Interface > Interface Properties. The Interface Configuration Page opens. Figure 53: Interface Properties Page The Interface Properties Page is contains the following fields: • • Interface — Displays the port number. Port Type — Displays the port type.
Configuring Ports Viewing Port Properties Figure 54: Interface Properties Page 3. Define the fields. 4. Click . The interface properties are modified, and the device is updated.
D-Link DES-3010FA/GA User Guide Section 8. Aggregating Ports Link Aggregation optimizes port usage by linking a group of ports together to form a single LAG (aggregated group). Aggregating ports multiplies the bandwidth between the devices, increases port flexibility, and provides link redundancy. The device supports both static LAGs and Link Aggregation Control Protocol (LACP) LAGs. LACP LAGs negotiate aggregating ports’ links with other LACP ports located on a different device.
Aggregating Ports Aggregating Ports Aggregating Ports Link Aggregated Groups optimize port usage by linking a group of ports together to form a single aggregated group. Link aggregated groups multiply the bandwidth between the devices, increase port flexibility, and provide link redundancy. The LAG Membership Page contains fields for configuring parameters for configured LAGs. The device supports up to eight ports per LAG, and eight LAGs per system. To define LAG parameters: 1.
D-Link DES-3010FA/GA User Guide Figure 56: LAG Membership Settings Page 3. Define the Port and LACP fields. 4. Click . The LAG membership settings are saved, and the device is updated.
Aggregating Ports Configuring LACP Configuring LACP Aggregate ports can be linked into link-aggregation port-groups. Each group is comprised of ports with the same speed, set to full-duplex operations. LAG ports can contain different media types if the ports are operating at the same speed. Aggregated links can be set up manually or automatically established by enabling Link Aggregation Control Protocol (LACP) on the relevant links. Aggregate ports can be linked into link-aggregation port-groups.
D-Link DES-3010FA/GA User Guide Figure 58: LACP Parameters Settings Page 3. Edit the Port Priority and LACP Timeout fields. 4. Click .
Configuring VLANs Section 9. Configuring VLANs VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups. VLANs use software to reduce the amount of time it takes for network changes, additions, and moves to be implemented.
D-Link DES-3010FA/GA User Guide Defining VLAN Properties The VLAN Membership Properties page provides information and global parameters for configuring and working with VLANs. To define VLAN properties: 1. Click Basic Setup > VLAN > Membership > Properties. The VLAN Properties Page opens. Figure 59: VLAN Properties Page The VLAN Properties page contains the following fields: • • • • • VLAN ID — Displays the VLAN ID. Name — Displays the user-defined VLAN name. Type— Displays the VLAN type.
Configuring VLANs Defining VLAN Properties 2. Click . The Add VLAN page opens: Figure 60: Add VLAN Page 3. Define the VLAN ID and VLAN Name fields. 4. Click . The VLAN ID is defined, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining VLAN Membership The VLAN Membership Page contains a table that maps VLAN parameters to ports. Ports are assigned VLAN membership by toggling through the Port Control settings. To define VLAN membership: 1. Click Basic Setup > VLAN > Membership > Membership. The VLAN Membership Page opens. Figure 61: VLAN Membership Page The VLAN Membership Page contains the following fields: • • • VLAN ID — Displays the user-defined VLAN ID.
Configuring VLANs Defining VLAN Interface Settings • • Exclude (Gray) — Excludes the interface from the VLAN. However, the interface can be added to the VLAN through GARP. Forbidden (Red) — Denies the interface VLAN membership, even if GARP indicates the port is to be added. Defining VLAN Interface Settings The VLAN Interface Settings Page contains fields for managing ports that are part of a VLAN. The port default VLAN ID (PVID) is configured on the VLAN Interface Settings Page.
D-Link DES-3010FA/GA User Guide • • • • – – – PV - Promiscuous — Indicates the port is part of a PV Promiscuous VLAN. – – Admit Tag Only — Only tagged packets are accepted on the port. – Enable — Enables ingress filtering on the device. Ingress filtering discards packets that are defined to VLANs of which the specific port is not a member. PV - Isolated — Indicates the port is part of a PV Isolated VLAN. PV - Community — Indicates the port is part of a PV Community VLAN.
Configuring VLANs Defining Private VLANs Defining Private VLANs Private VLANs (PVLAN) increase network security by limiting inter-port communication within a VLAN. Private VLANs limit network traffic at the Layer 2 level. Network administrators define a Primary VLAN. Within the Primary VLAN there are Isolated and Community VLANs. Private VLAN ports can have the following states: • • • Promiscuous — Promiscuous ports can communicate with all ports within a PVLAN.
D-Link DES-3010FA/GA User Guide Figure 64: Private VLANs Page The Private VLANs Page contains the following fields: • • • • Private VLAN — Contains a list of user-defined Private VLANs. The Private VLANs are defined in the Add Private VLAN page. Isolated Ports — Indicates which VLAN to which isolated ports are assigned. Community Ports — Adds a Community VLAN to which community ports are assigned. Remove — Removes a Private VLAN when checked. he possible field values are: – – 2.
Configuring VLANs Defining Private VLANs Figure 65: Add Private VLAN 3. Define the New Private VLAN and Community VLAN (2-4093) or Isolated VLAN (2-4093) fields. 4. Click . The Private VLAN is created, and the device is updated.
D-Link DES-3010FA/GA User Guide Configuring GARP This section contains information for configuring This section includes the following topics: • • Defining GARP Defining GVRP Defining GARP Generic Attribute Registration Protocol (GARP) protocol is a general-purpose protocol that registers any network connectivity or membership-style information. GARP defines a set of devices interested in a given network attribute, such as VLAN or multicast address.
Configuring VLANs Configuring GARP • • • 2. Join Timer— Indicates the amount of time, in centiseconds, that PDUs are transmitted. The default value is 20 centiseconds. Leave Timer— Indicates the amount of time lapse, in centiseconds, that the device waits before leaving its GARP state. Leave time is activated by a Leave All Time message sent/received, and cancelled by the Join message received. Leave time must be greater than or equal to three times the join time. The default value is 60 centiseconds.
D-Link DES-3010FA/GA User Guide Defining GVRP GARP VLAN Registration Protocol (GVRP) is specifically provided for automatic distribution of VLAN membership information among VLAN-aware bridges. GVRP allows VLAN-aware bridges to automatically learn VLANs to bridge ports mapping, without having to individually configure each bridge and register VLAN membership. To define GARP. To define GVRP on the device: 1. Click Basic Setup > GARP > GVRP.
Configuring VLANs Configuring GARP • • 2. Dynamic VLAN Creation — Indicates if Dynamic VLAN creation is enabled on the interface. The possible field values are: – – Enable — Enables Dynamic VLAN creation on the interface. – – Enable — Enables GVRP registration on the device. Disable — Disables Dynamic VLAN creation on the interface. GVRP Registration — Indicates if VLAN registration through GVRP is enabled on the device.
D-Link DES-3010FA/GA User Guide Section 10.
Configuring IP Information Configuring IP Interfaces Defining IP Addresses The IP Interface Page contains fields for assigning IP parameters to interfaces, and for assigning gateway devices. Packets are forwarded to the default IP when frames are sent to a remote network. The configured IP address must belong to the same IP address subnet of one of the IP interfaces. To define an IP interface: 1. Click Basic Setup > IP Configuration > IP Addressing > IP Interface. The IP Interface Page opens.
D-Link DES-3010FA/GA User Guide Figure 71: Add IP Interface Page 3. Define the IP Address, Network Mask or Prefix Length, and Interface fields. 4. Click . The IP configuration fields are saved, and the device is updated. To modify an IP interface: 1. Click Basic Setup > IP Configuration > IP Addressing > IP Interface. The IP Interface Page opens. 2. Click .
Configuring IP Information Configuring IP Interfaces 3. Modify the IP Address, Network Mask or Prefix Length, and Interface fields. 4. Click . The IP Interface is modified, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining Default Gateways Packets are forwarded to the default IP when frames are sent to a remote network via the default gateway. The configured IP address must belong to the same subnet of one of the IP interfaces. To define a default gateway: 1. Click Basic Setup > IP Configuration > IP Addressing > Default Gateway.
Configuring IP Information Configuring IP Interfaces Configuring DHCP The Dynamic Host Configuration Protocol (DHCP) assigns dynamic IP addresses to devices on a network. DHCP ensures that network devices can have a different IP address every time the device connects to the network. To define a DHCP Interface: 1. Click Basic Setup > IP Configuration > IP Addressing > DHCP.
D-Link DES-3010FA/GA User Guide Figure 75: Add DHCP IP Interface Page 3. Define the Interface and Host Name fields. 4. Click . The DHCP interface is added, and the device is updated.
Configuring IP Information Configuring IP Interfaces Configuring ARP The Address Resolution Protocol (ARP) converts IP addresses into physical addresses, and maps the IP address to a MAC address. ARP allows a host to communicate with other hosts only when the IP address of its neighbors is known. To define ARP information: 1. Click Basic Setup > IP Configuration > IP Addressing > ARP.
D-Link DES-3010FA/GA User Guide • • • • IP Address — Indicates the station IP address, which is associated with the MAC address filled in below. MAC Address — Displays the station MAC address, which is associated in the ARP table with the IP address. Status — Displays the ARP table entry type. Possible field values are: – – Dynamic — The ARP entry is learned dynamically. – – Checked — Removes the selected ARP entries. Static — The ARP entry is a static entry. Remove — Removes a specific ARP entry.
Configuring IP Information Configuring Domain Name Servers Configuring Domain Name Servers Domain Name System (DNS) converts user-defined domain names into IP addresses. Each time a domain name is assigned, the DNS service translates the name into a numeric IP address. For example, www.ipexample.com is translated into 192.87.56.2. DNS servers maintain databases of domain names and their corresponding IP addresses.
D-Link DES-3010FA/GA User Guide Defining DNS Servers The DNS Server Page contains fields for enabling and activating specific DNS servers. To enable a DNS server: 1. Click Basic Setup > IP Configuration > Domain Name System > DNS Server. The DNS Server Page opens: Figure 78: DNS Server Page The DNS Server Page contains the following fields: • • • • • • Enable DNS — Enables translating the DNS names into IP addresses.
Configuring IP Information Configuring Domain Name Servers Notes 2. 3. • All DNS servers can be selected by clicking Select All in DNS Server Table. Select Enable DNS. Define the Default Domain Name and Active Server fields. 4. Click . The DNS server is enabled, and the device is updated. To add a new DNS Server: 1. Click Basic Setup > IP Configuration > Domain Name System > DNS Server. The DNS Server Page opens. 2. Click . The Add DNS Server Page opens: Figure 79: Add DNS Server Page 3.
D-Link DES-3010FA/GA User Guide Defining DNS Host Mapping The DNS Host Mapping Page provides information for defining default DNS domain names. To define DNS host mapping: 1. Click Basic Setup > IP Configuration > Domain Name System > Host Mapping. The DNS Host Mapping Page opens: Figure 80: DNS Host Mapping Page The DNS Host Mapping Page contains the following fields: • • • Host Names — Displays a user-defined default domain name.
Configuring IP Information Configuring Domain Name Servers Figure 81: Add DNS Host Page 3. Define the Host Name and IP Address fields. 4. Click . The DNS host is added, and the device is updated.
D-Link DES-3010FA/GA User Guide Section 11. Defining the Forwarding Database Packets addressed to destinations stored in either the Static or Dynamic databases are immediately forwarded to the port. The Dynamic MAC Address Table can be sorted by interface, VLAN, or MAC Address, whereas MAC addresses are dynamically learned as packets from sources that arrive at the device. Static addresses are configured manually.
Defining the Forwarding Database Defining Static Forwarding Database Entries Defining Static Forwarding Database Entries The Forwarding Database Static Addresses Page contains parameters for defining the age interval on the device. To prevent static MAC addresses from being deleted when the device is reset, ensure that the port attached to the MAC address is locked. To configure the static forwarding database: 1. Click Advanced Setup > Forwarding Database > Static Addresses.
D-Link DES-3010FA/GA User Guide • Remove — Removes the entry. The possible field values are: – – Checked — Removes the selected entry. Unchecked — Maintains the current static forwarding database. Note To prevent static MAC addresses from being deleted when the device is reset, make sure that the port attached to the MAC address is locked. To add a new static forwarding database entry: 1. Click Advanced Setup > Forwarding Database > Static Addresses.
Defining the Forwarding Database Defining Dynamic Forwarding Database Entries Defining Dynamic Forwarding Database Entries The Dynamic Addresses Page contains parameters for querying information in the Dynamic MAC Address Table, including the interface type, MAC addresses, VLAN, and table storing. The Dynamic MAC Address table contains information about the aging time before a dynamic MAC address is erased, and includes parameters for querying and viewing the Dynamic MAC Address table.
D-Link DES-3010FA/GA User Guide 2. Define the fields. 3. Click . The Dynamic Address Aging field is defined, and the device is updated. To query the Dynamic MAC Address Table: 1. 2. 3. Click Advanced Setup > Forwarding Database > Dynamic Addresses. The Dynamic Addresses Page opens. Select a port, MAC Address, and VLAN ID. Select an Address Table Sort Key. 4. Click . The Dynamic MAC Address Table is queried, and the results are displayed.
Configuring Spanning Tree Section 12. Configuring Spanning Tree Spanning Tree Protocol (STP) provides tree topography for any arrangement of bridges. STP also provides a single path between end stations on a network, eliminating loops. Loops occur when alternate routes exist between hosts. Loops in an extended network can cause bridges to forward traffic indefinitely, resulting in increased traffic and reducing network efficiency.
D-Link DES-3010FA/GA User Guide Defining Classic Spanning Tree The STP Properties Page contains parameters for enabling STP on the device. To enable STP on the device: 1. Click Advanced Setup > Spanning Tree > STP > Properties. The STP Properties Page opens: Figure 85: STP Properties Page The STP Properties Page contains the following fields: • • • Spanning Tree State — Indicates whether STP is enabled on the device. The possible field values are: – – Enable — Enables STP on the device.
Configuring Spanning Tree Defining Classic Spanning Tree – – Short — Specifies 1 through 65,535 range for port path cost. This is the default value. 2. 3. 4. 5. Long — Specifies 1 through 200,000,000 range for port path cost. The default path cost assigned to an interface varies according to the selected method (Hello Time, Max Age, or Forward Delay). Priority (0-65535) — Specifies the bridge priority value. When switches or bridges are running STP, each is assigned a priority.
D-Link DES-3010FA/GA User Guide Defining STP on Interfaces Network administrators can assign STP settings to specific interfaces using the STP Interface Page. The Global LAGs section displays the STP information for Link Aggregated Groups. To assign STP settings to an interface: 1. Click Advanced Setup > Spanning Tree > STP > Interface Settings.
Configuring Spanning Tree Defining STP on Interfaces • • • Speed — Indicates the speed at which the port is operating. Path Cost — Indicates the port contribution to the root path cost. The path cost is adjusted to a higher or lower value, and is used to forward traffic when a path is re-routed. Priority — Priority value of the port. The priority value influences the port choice when a bridge has two ports connected in a loop. The priority value is between 0 -240.
D-Link DES-3010FA/GA User Guide 4. Define the Fast Link, Enable Root Guard, Path Cost, Default Path Cost, and Priority fields. 5. Click . STP is enabled on the interface, and the device is updated.
Configuring Spanning Tree Defining Rapid Spanning Tree Defining Rapid Spanning Tree While Classic STP prevents Layer 2 forwarding loops in a general network topology, convergence can take between 30-60 seconds. This time may delay detecting possible loops and propagating status topology changes. Rapid Spanning Tree Protocol (RSTP) detects and uses network topologies that allow a faster STP convergence without creating forwarding loops.
D-Link DES-3010FA/GA User Guide • • • • Mode—Displays the current STP mode. The STP mode is selected in the STP Properties Page. The possible field values are: – – – STP — Classic STP is enabled on the device. – – Disable — indicates the port is currently disabled. – Enable — The device is permitted to establish a point-to-point link, or is configured to automatically establish a point-to-point link.
Configuring Spanning Tree Defining Rapid Spanning Tree Figure 89: RSTP Settings Page 3. Define the Interface, Point-to-Point Admin Status and Activate Protocol Migration fields. 4. Click . RSTP is defined for the interface, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining Multiple Spanning Tree Multiple Spanning Tree (MSTP) provides differing load balancing scenarios. For example, while port A is blocked in one STP instance, the same port can be placed in the Forwarding state in another STP instance. The MSTP Properties Page contains information for defining global MSTP settings, including region names, MSTP revisions, and maximum hops. To define MSTP: 1. Click Advanced Setup > Spanning Tree > MSTP > Properties.
Configuring Spanning Tree Defining Multiple Spanning Tree by which frames can be transmitted. In configuring MSTP, the MST region to which the device belongs is defined. A configuration consists of the name, revision, and region to which the device belongs. Network administrators can define the MSTP instance settings using the MSTP Instance Settings Page. To define MSTP instance settings: 1. Click Advanced Setup > Spanning Tree > MSTP > Instance Settings.
D-Link DES-3010FA/GA User Guide Figure 92: VLAN Instance Configuration Table 3. Define the Instance ID field. 4. Click . The MSTP Instances are assigned, and the device is updated.
Configuring Spanning Tree Defining Multiple Spanning Tree Defining MSTP Interface Settings Network Administrators can assign MSTP Interface settings in the MSTP Instance Settings Page. To define MSTP interface settings: 1. Click Advanced Setup > Spanning Tree > MSTP > Interface Settings. The MSTP Interface Settings Page opens: Figure 93: MSTP Interface Settings Page The MSTP Instance Settings Page contains the following fields: • • • • Instance ID — Lists the MSTP instances configured on the device.
D-Link DES-3010FA/GA User Guide • Type — Indicates whether the port is a Boundary or Master port. The possible field values are: – Boundary Port — Indicates that the port is a Boundary port. A Boundary port attaches MST bridges to LANs in an outlying region. If the port is a Boundary port, this field also indicates whether the device on the other side of the link is working in RSTP or STP mode – • Master Port — Indicates the port is a master port.
Configuring Spanning Tree Defining Multiple Spanning Tree Figure 94: MSTP Interface Table 3. Define the Port Priority and the Path Cost fields. 4. Click . The MSTP interface settings are defined, and the device is updated.
D-Link DES-3010FA/GA User Guide Section 13.
Configuring Multicast Forwarding Defining IGMP Snooping Defining IGMP Snooping When IGMP Snooping is enabled globally, all IGMP packets are forwarded to the CPU. The CPU analyzes the incoming packets and determines: • • • Which ports want to join which Multicast groups. Which ports have Multicast routers generating IGMP queries. Which routing protocols are forwarding packets and Multicast traffic.
D-Link DES-3010FA/GA User Guide • Auto Learn — Indicates if Auto Learn is enabled on the device. If Auto Learn is enabled, the devices automatically learns where other Multicast groups are located. Enables or disables Auto Learn on the Ethernet device.The possible field values are: – Enable — Enables auto learn – 2. Disable — Disables auto learn. Host Timeout — Indicates the amount of time host waits to receive a message before timing out. The default time is 260 seconds.
Configuring Multicast Forwarding Defining Multicast Bridging Groups Defining Multicast Bridging Groups The Multicast Group Page displays the ports and LAGs attached to the Multicast service group in the Ports and LAGs tables. The Port and LAG tables also reflect the manner in which the port or LAGs joined the Multicast group. Ports can be added either to existing groups or to new Multicast service groups. The Multicast Group Page permits new Multicast service groups to be created.
D-Link DES-3010FA/GA User Guide The following table contains the IGMP port and LAG members management settings: Table 14: IGMP Port/LAG Members Table Control Settings Po rt C on tr ol De f in iti o n D Dynamically joins ports/LAG to the Multicast group in the Current Row. S Attaches the port to the Multicast group as static member in the Static Row. The port/LAG has joined the Multicast group statically in the Current Row.
Configuring Multicast Forwarding Defining Multicast Bridging Groups Defining Multicast Forward All Settings The Bridge Multicast Forward All page contains fields for attaching ports or LAGs to a device that is attached to a neighboring Multicast router/switch. Once IGMP Snooping is enabled, Multicast packets are forwarded to the appropriate port or VLAN. Unless LAGs are defined, only a Multicast Forward All table displays. To define Multicast forward all settings: 1.
D-Link DES-3010FA/GA User Guide Table 15: Bridge Multicast Forward All Router/Port Control Settings Table Port Control Definition F Forbidden. Blank The port is not attached to a Multicast router or switch. 2. 3. Select a VLAN in the VLAN ID drop-down box. Define the VLAN port settings. 4. Click . The Multicast forward all settings are defined, and the device is updated.
Configuring SNMP SNMP v1 and v2c Section 14. Configuring SNMP Simple Network Management Protocol (SNMP) provides a method for managing network devices. The device supports the following SNMP versions: • • • SNMP version 1 SNMP version 2c SNMP version 3 SNMP v1 and v2c The SNMP agents maintain a list of variables, which are used to manage the device. The variables are defined in the Management Information Base (MIB).
D-Link DES-3010FA/GA User Guide Configuring SNMP Security This section contains information for configuring SNMP security parameters, and contains the following topics: • • • • • Defining SNMP Security Defining SNMP Views Defining SNMP Group Profiles Defining SNMP Group Members Defining SNMP Communities Defining SNMP Security The SNMP Security Global Parameters Page permits the enabling of both SNMP and Authentication notifications. To define the SNMP security parameters: 1.
Configuring SNMP Configuring SNMP Security • Use Default — Uses the device-generated Engine ID. The default Engine ID is based on the device MAC address and is defined per standard as: – – – First 4 octets — first bit = 1, the rest is IANA Enterprise number. Fifth octet — Set to 3 to indicate the MAC address that follows. 2. Last 6 octets — MAC address of the device. Define the Local Engine ID and Use Default fields. 3. Click . The SNMP global security parameters are set, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining SNMP Views SNMP views provide or block access to device features or portions of features. For example, a view can be defined which provides that SNMP group A has Read Only (R/O) access to Multicast groups, while SNMP group B has Read-Write (R/W) access to Multicast groups. Feature access is granted via the MIB name or MIB Object ID. To define SNMP views: 1. Click System > SNMP > Security > Views.
Configuring SNMP Configuring SNMP Security Figure 102:Add SNMP View Page 3. Define the View Name field. 4. Define the view using 5. Define the View Type field. 6. Click and . . The view is defined, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining SNMP Group Profiles The SNMP Group Profile Page provides information for creating SNMP groups, and assigning SNMP access control privileges to SNMP groups. Groups allow network managers to assign access rights to specific device features, or feature aspects. To define an SNMP group: 1. Click System > SNMP > Security > Group Profile.
Configuring SNMP Configuring SNMP Security – Authentication — Authenticates SNMP messages, and ensures that the SNMP message’s origin is authenticated. – • • 2. Privacy — Encrypts SNMP messages. Operation — Defines the group access rights. The possible field values are: – Read — Management access is restricted to read-only, and changes cannot be made to the assigned SNMP view. – – Write — Management access is read-write and changes can be made to the assigned SNMP view.
D-Link DES-3010FA/GA User Guide Figure 105:SNMP Group Profile Settings Page 3. Modify the Group Name, Security Model, Security Level, and Operation fields. 4. Click . The SNMP group profile is modified, and the device is updated.
Configuring SNMP Configuring SNMP Security Defining SNMP Group Members The SNMP Group Membership Page enables assigning system users to SNMP groups, as well as defining the user authentication method. 1. Click System > SNMP > Security > Group Membership. The SNMP Group Membership Page opens: Figure 106:SNMP Group Membership Page The SNMP Group Membership Page contains the following fields: • • • • User Name — Contains a list of user-defined user names.
D-Link DES-3010FA/GA User Guide – • No Authentication — No user authentication is used. Remove — Removes users from a specified group. The possible field values are: – – 2. Checked — Removes the selected user. Unchecked — Maintains the list of users. Click . The Add SNMP Group Membership Page opens: Figure 107:Add SNMP Group Membership Page In addition to the fields in the SNMP Group Membership Page, the Add SNMP Group Membership Page contains the following fields: • • • • 3. 4.
Configuring SNMP Configuring SNMP Security Figure 108:SNMP Group Membership Settings Page 3. Modify the Group Name, Engine ID, Authentication Method, Password, Authentication Key, and Privacy Key fields. 4. Click . The SNMP group membership is modified, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining SNMP Communities Access rights are managed by defining communities in the SNMP Communities Page. When the community names are changed, access rights are also changed. SNMP communities are defined only for SNMP v1 and SNMP v2c. To define SNMP communities: 1. Click System > SNMP > Security > Communities.
Configuring SNMP Configuring SNMP Security – • • SNMP Admin — User has access to all device configuration options, as well as permissions to modify the community. View Name — Contains a list of user-defined SNMP views Remove — Removes a community. The possible field values are: – – Checked — Removes the selected SNMP community. Unchecked — Maintains the SNMP communities.
D-Link DES-3010FA/GA User Guide Figure 111: SNMP Community Settings Page 3. Modify the SNMP Management Station, Community String, and Basic or Advanced fields. 4. Click . The SNMP community is modified, and the device is updated.
Configuring SNMP Configuring SNMP Notifications Configuring SNMP Notifications This section contains information for configuring SNMP Notifications, and contains the following topics: • • • Defining SNMP Notification Global Parameters Defining SNMP Notification Filters Defining SNMP Notification Recipients Page 175
D-Link DES-3010FA/GA User Guide Defining SNMP Notification Global Parameters The SNMP Notification Properties Page contains parameters for defining SNMP notification parameters. To define SNMP notification global parameters: 1. Click System > SNMP > Notification > Properties.
Configuring SNMP Configuring SNMP Notifications Defining SNMP Notification Filters TheSNMP Notification Filter Page permits filtering traps based on OIDs. Each OID is linked to a device feature or a portion of a feature. The SNMP Notification Filter Page also allows network managers to filter notifications. To define SNMP notification filters: 1. Click System > SNMP > Notification > Notification Filter.
D-Link DES-3010FA/GA User Guide Figure 114: Add SNMP Notification Filter Page 3. Define the Filter Name, New Object Identifier Tree, and Filter Type fields. 4. Click . The SNMP notification filter is defined, and the device is updated.
Configuring SNMP Configuring SNMP Notifications Defining SNMP Notification Recipients The SNMP Notification Receiver Page contains information for defining filters that determine whether traps are sent to specific users, and the trap type sent. SNMP notification filters provide the following services: • • • • Identifying Management Trap Targets Trap Filtering Selecting Trap Generation Parameters Providing Access Control Checks To define SNMP notification filters: 1.
D-Link DES-3010FA/GA User Guide SNMPv1,2c Notification Recipient The SNMPv1,2 cNotification Recipient table contains the following fields: • • • • • • • • • Recipients IP — Displays the IP address to which the traps are sent. Notification Type — Displays the notification sent. The possible field values are: – – Trap — Indicates traps are sent. – – SNMP V1 — Indicates that SNMP Version 1 traps are sent. – – Checked — Removes the selected recipient from the list of recipients.
Configuring SNMP Configuring SNMP Notifications SNMPv3 Notification Recipient The SNMPv3 Notification Recipient table contains the following fields: • • • • • • • • • 2. Recipient IP — Displays the IP address to which the traps are sent. Notification Type — Displays the type of notification sent. The possible field values are: – – Trap — Indicates that traps are sent. – – No Authentication — Indicates that the packet is neither authenticated nor encrypted.
D-Link DES-3010FA/GA User Guide 3. Define the Recipient IP, Notification Type, SNMPV1,v2c or SNMPv3, UPD Port, Filter Name, TImeout, and Retries fields. 4. Click . The SNMP Notification recipients are defined, and the device is updated. To modify SNMP notification recipients: 1. Click System > SNMP > Notification > Notification Receiver. The SNMP Notification Receiver Page opens. 2. Click .
Configuring Quality of Service VPT Classification Information Section 15. Configuring Quality of Service Quality of Service (QoS) provides the ability to implement QoS and priority queuing within a network. For example, certain types of traffic that require minimal delay, such as Voice, Video, and real-time traffic can be assigned a high priority queue, while other traffic can be assigned a lower priority queue. The result is an improved traffic flow for traffic with high demand.
D-Link DES-3010FA/GA User Guide CoS Services After packets are assigned to a specific egress queue, CoS services can be assigned to the queue. Egress queues are configured with a scheduling scheme by one of the following methods: • Strict Priority — Ensures that time-sensitive applications are always forwarded. Strict Priority (SP) allows the prioritization of mission-critical, time-sensitive traffic over less time-sensitive applications.
Configuring Quality of Service Configuring Quality of Service General Settings Configuring Quality of Service General Settings This section contains information for defining QoS global parameters, QoS queue settings, and QoS interface settings, and contains the following topics: • • • • Defining QoS Settings Defining Bandwidth Settings Defining Queue Settings Mapping QoS Queues Defining QoS Settings The QoS General Settings Page contains fields for enabling or disabling CoS.
D-Link DES-3010FA/GA User Guide • Trust Mode — Defines which packet fields to use for classifying packets entering the device. When no rules are defined, the traffic containing the predefined packet CoS field is mapped according to the relevant trust modes table. Traffic not containing a predefined packet field is mapped to best effort. The possible Trust Mode field values are: – – CoS — Classifies traffic based on the CoS tag value. 2. 3. DSCP — Classifies traffic based on the DSCP tag value.
Configuring Quality of Service Defining Bandwidth Settings Defining Bandwidth Settings The Bandwidth Settings Page defines the bandwidth settings for a specified egress interface. Modifying queue scheduling affects the queue settings globally. To define the bandwidth settings: 1. Click Basic Setup > Quality of Service > General Settings > Bandwidth Settings. The Bandwidth Settings Page opens.
D-Link DES-3010FA/GA User Guide Modifying QoS Interface Settings The QoS Interface Page allows network managers to modify the QoS settings assigned to a specific interface. To set the QoS interface settings: 1. Click System > QoS > General Settings > Interface Settings. The QoS Interface Page opens. Figure 120:QoS Interface Page The QoS Interface Page contains the following fields: • • Interface — The port or LAG for which the default CoS policy is defined.
Configuring Quality of Service Defining Bandwidth Settings Figure 121:Edit Interface Settings Page 3. Define the Disable Trust Mode, Default CoS, and Restore Defaults fields. 4. Click . The QoS Interface settings are modified, and the device is updated.
D-Link DES-3010FA/GA User Guide Defining Queue Settings The Queue Page contains fields for defining the QoS queue forwarding types. To set the queue settings: 1. Click Basic Setup > Quality of Service > General Settings > Queue. The Queue Page opens. Figure 122:Queue Page The Queue Page contains the following fields: • • 2. Strict Priority — Specifies whether traffic scheduling is based strictly on the queue priority. WRR — Assigns WRR weights to queues.
Configuring Quality of Service Mapping QoS Queues Mapping QoS Queues This section contains information for mapping QoS queues, and includes the following topics: • • Mapping CoS Values to Queues Mapping DSCP Values to Queues Mapping CoS Values to Queues The CoS to Queue Page contains fields for mapping CoS values to traffic queues. To map CoS values to queues: 1. Click Basic Setup > Quality of Service > Queue Mapping > CoS to Queue. The CoS to Queue Page opens.
D-Link DES-3010FA/GA User Guide Mapping DSCP Values to Queues The DSCP to Queue Page contains fields for mapping DSCP settings to traffic queues. For example, a packet with a DSCP tag value of 3 can be assigned to queue 2. To map CoS values to queues: 1. Click Basic Setup > Quality of Service > Queue Mapping > DSCP to Queue. The DSCP to Queue Page opens. Figure 124:DSCP to Queue Page The DSCP to Queue Page contains the following fields: • • 2. DSCP In — Displays the incoming packet’s DSCP value.
Managing System Files Section 16. Managing System Files File maintenance includes both configuration file management as well as device access.
D-Link DES-3010FA/GA User Guide File Management Overview The configuration file structure consists of the following configuration files: • • • Startup Configuration File — Contains the commands required to reconfigure the device to the same settings as when the device is powered down or rebooted. The Startup file is created by copying the configuration commands from the Running Configuration file or the Backup Configuration file.
Managing System Files Downloading System Files Downloading System Files There are two types of files, firmware files and configuration files. The firmware files manage the device, and the configuration files configure the device for transmissions. Only one type of download can be performed at any one time. To download a file: • Click System > File Management > File Download. The File Download Page opens.
D-Link DES-3010FA/GA User Guide – • • Boot Code — Downloads the Boot file. Download to Master Only — Downloads the system file only to the Master Download to All Units — Downloads the system file to all units Configuration Download The Configuration Download section contains the following fields: • • • • Configuration Download — Indicates that the download is for configuration files. If Configuration Download is selected, the Firmware Download fields are grayed out.
Managing System Files Uploading System Files Uploading System Files The File Upload Page contains fields for uploading the software from the device to the TFTP server. To upload a system file: 1. Click System > File Management > File Upload.
D-Link DES-3010FA/GA User Guide Software Image Upload The Software Image Upload section contains the following fields: • • TFTP Server IP Address — Specifies the TFTP Server IP Address to which the Software Image is uploaded. Destination File Name — Specifies the software image file path to which the file is uploaded.
Managing System Files Uploading System Files Copying Files Files can be copied and deleted from the Copy Files Page. To copy files: 1. Click System > File Management > Copy Files. The Copy Files Page opens: Figure 127:Copy Files Page The Copy Files Page contains the following fields: • • • • Copy Configuration — Copies the Running Configuration file to the Startup Configuration file. Source — Indicates the Running Configuration file is selected.
D-Link DES-3010FA/GA User Guide Section 17. Managing System Logs This section provides information for managing system logs. The system logs enable viewing device events in real time, and recording the events for later usage. System Logs record and manage events and report errors and informational messages. Event messages have a unique format, as per the Syslog protocols recommended message format for all error reporting.
Managing System Logs Enabling System Logs Enabling System Logs The Syslog Properties Page contains fields for defining which events are recorded to which logs. It contains fields for enabling logs globally, and parameters for defining logs. Log messages are listed from the highest severity to the lowest severity level. To define system log parameters: 1. Click System > Syslog > Properties. The Syslog Properties Page opens.
D-Link DES-3010FA/GA User Guide – – – Notice — Provides device information. Informational — Provides device information. Debug — Provides debugging messages. Note When a severity level is selected, all severity level choices above the selection are selected automatically. – – Console — Defines the minimum severity level from which logs are sent to the console. RAM Logs — Defines the minimum severity level from which logs are sent to the RAM Log kept in RAM (Cache). – 2.
Managing System Logs Viewing the Device Memory Logs Viewing the Device Memory Logs The Device Memory Log Page contains all system logs in a chronological order that are saved in RAM (Cache). To open the Device Memory Log Page: • Click System > Syslog > Memory. The Device Memory Log Page opens. Figure 129:Device Memory Log Page The Device Memory Log Pagecontains the following fields: • • • • Log Index — Displays the log number. Log Time — Displays the time at which the log was generated.
D-Link DES-3010FA/GA User Guide Viewing the FLASH Logs The Syslog Flash Page contains information about log entries saved to the log file in Flash, including the time the log was generated, the log severity, and a description of the log message. The message log is available after reboot. To view the message logs: • Click System > Syslog > Flash. The Syslog Flash Page opens: Figure 130:Syslog FLASH Page The Syslog Flash Page contains the following fields: • • • • Log Index — Displays the log number.
Managing System Logs Defining Servers Log Parameters Defining Servers Log Parameters The Log Server Settings Page contains information for viewing and configuring the remote log servers. New log servers can be defined, and the log severity sent to each server. To open the Log Server Settings Page: 1. Click System > Syslog > Servers. The Log Server Settings Page opens. Figure 131:Log Server Settings Page The Log Server Settings Page contains the following fields: • • • • • • 2.
D-Link DES-3010FA/GA User Guide Section 18.
Managing Device Diagnostics Configuring Port Mirroring Configuring Port Mirroring Port mirroring monitors and mirrors network traffic by forwarding copies of incoming and outgoing packets from one port to a monitoring port. Port mirroring can be used as a diagnostic tool as well as a debugging feature. Port mirroring also enables switch performance monitoring.
D-Link DES-3010FA/GA User Guide • 2. – – Active — Indicates the port is currently monitored. – – Checked — Removes the selected port mirroring sessions. Ready — Indicates the port is not currently monitored. Remove — Removes the port mirroring session. The possible field values are: Unchecked — Maintains the port mirroring session. Click . The Add Port Mirroring Page opens: Figure 133:Add Port Mirroring Page 3. 4. Select a port in the Source Port field. Select a port type in the Type field. 5.
Managing Device Diagnostics Viewing Integrated Cable Tests Viewing Integrated Cable Tests The Cable Tests Page contains fields for performing tests on copper cables. Cable testing provides information about where errors occurred in the cable, the last time a cable test was performed, and the type of cable error, which occurred. The tests use Time Domain Reflectometry (TDR) technology to test the quality and characteristics of a copper cable attached to a port. Cables up to 120 meters long can be tested.
D-Link DES-3010FA/GA User Guide Viewing Optical Transceivers The Optical Transceiver page allows network managers to perform tests on Fiber Optic cables. Optical transceiver diagnostics can be performed only when the link is present. To test cables: • Click Advanced Setup > Diagnostics > Optical Transceivers tab.
Managing Device Diagnostics Viewing the CPU Utilization Viewing the CPU Utilization The CPU Utilization Page contains information about the system’s CPU utilization. To view the CPU Utilization: • Click System > Diagnostics > CPU Utilization. The CPU Utilization Page opens: Figure 137: CPU Utilization Page The CPU Utilization Page contains the following fields: • • • Refresh Rate — Amount of time that passes before the statistics are refreshed.
D-Link DES-3010FA/GA User Guide Section 19.
Configuring System Time Configuring Daylight Savings Time Configuring Daylight Savings Time The Time Page contains fields for defining system time parameters for both the local hardware clock and the external SNTP clock. If the system time is kept using an external SNTP clock, and the external SNTP clock fails, the system time reverts to the local hardware clock. Daylight Savings Time can be enabled on the device.
D-Link DES-3010FA/GA User Guide • • • • • • • • • • • • • • • • • • • • • • Mexico — From the first Sunday in April at 02:00 to the last Sunday in October at 02:00. Moldova — From the last weekend of March until the last weekend of October. Montenegro — From the last weekend of March until the last weekend of October. Netherlands — From the last weekend of March until the last weekend of October. New Zealand — From the first Sunday in October until the first Sunday on or after March 15.
Configuring System Time Configuring Daylight Savings Time Figure 138: Time Page The Time Page contains the following sections: • • • • • Clock Source — The source used to set the system clock. The possible field values are: – – None — Indicates that a clock source is not used. The clock is set locally. – USA — Enables switching to DST at 2:00 a.m. on the first Sunday of April, and reverts to standard time at 2:00 a.m. on the last Sunday of October.
D-Link DES-3010FA/GA User Guide • • • • • From — Indicates the time that DST begins in countries other than the USA and Europe, in the format Day/ Month/Year in one field and HH:MM in another. For example, if DST begins on October 25, 2007 at 5:00 am, the two fields should be set to 25/Oct/07 and 05:00. The possible field values are: – – – – Date — The date on which DST begins. The possible field range is 1-31. – – – – Date — The date on which DST ends. The possible field range is 1-31.
Configuring System Time Configuring SNTP Configuring SNTP The device supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The device operates only as an SNTP client, and cannot provide time services to other systems. The device can poll the following server types for the server time: • • • Unicast Anycast Broadcast Time sources are established by stratums.
D-Link DES-3010FA/GA User Guide This section contains the following topics: • • • • Defining SNTP Global Settings Defining SNTP Authentication Defining SNTP Servers Defining SNTP Interface Settings Page 218
Configuring System Time Defining SNTP Global Settings Defining SNTP Global Settings The SNTP Properties Page provides information for defining SNTP parameters globally. To define SNTP global parameters: 1. Click System > SNTP > Properties. The SNTP Properties Page opens: Figure 139: SNTP Properties Page The SNTP Properties Page contains the following fields: • • • • Poll Interval — Defines the interval (in seconds) at which the SNTP server is polled for Unicast information.
D-Link DES-3010FA/GA User Guide Servers Updates, and Enable Receive Unicast Servers Updates fields are all enabled, the system time is set according the Unicast server time information. The possible values are: • – – Enable — Enables the device to receive Unicast server updates. – – Enable — Enables the device to receive Poll Unicast server updates. Disable — Disables the device from receiving Unicast server updates.
Configuring System Time Defining SNTP Authentication Defining SNTP Authentication The SNTP Authentication Page provides parameters for defining the means by which the SNTP server is authenticated. To define SNTP authentication: 1. Click System > SNTP > Authentication. The SNTP Authentication Page opens: Figure 140: SNTP Authentication Page The SNTP Authentication Page contains the following fields: • • • • • 2.
D-Link DES-3010FA/GA User Guide To define SNTP authentication parameters: 1. Click . The Add SNTP Authentication page opens: Figure 141: Add SNTP Authentication 2. Define the Encryption Key ID, Authentication Key, and Trusted Key fields. 3. Click . The SNTP Authentication Key is added, and the device is updated.
Configuring System Time Defining SNTP Servers Defining SNTP Servers The SNTP Servers Page contains information for enabling SNTP servers, as well as adding new SNTP servers. In addition, the SNTP Servers Page enables the device to request and accept SNTP traffic from a server. To define an SNTP server: 1. Click System > SNTP > Servers.
D-Link DES-3010FA/GA User Guide 2. Click . The Add SNTP Server Page opens: Figure 143:Add SNTP Server Page 3. Define the SNTP Server, Enable Poll Interval, and Encryption Key ID fields. 4. Click . The SNTP Server is added, and the device is updated.
Configuring System Time Defining SNTP Interface Settings Defining SNTP Interface Settings The SNTP Interface Settings Page contains fields for setting SNTP on different interfaces. To define SNTP interface settings: 1. Click System > SNTP > Interface Settings. The SNTP Interface Settings Page opens: Figure 144: SNTP Interface Settings Page The SNTP Interface Settings Page contains the following fields: • • • 2. Interface — Indicates the interface on which SNTP can be enabled.
D-Link DES-3010FA/GA User Guide Figure 145: Add SNTP Interface Page 3. Define the Interface and Receive Server Updates fields. 4. Click. . The SNTP interface is added, and the device is updated.
Viewing Statistics Viewing Interface Statistics Section 20. Viewing Statistics This section provides device statistics for RMON, interfaces, GVRP, EAP, and Etherlike statistics.
D-Link DES-3010FA/GA User Guide Viewing Device Interface Statistics The Interface Statistics Page contains statistics for both received and transmitted packets. 1. Click Advanced Setup > Interface Statistics > Interface. The Interface Statistics Page opens. Figure 146:Interface Statistics Page The Interface Statistics Page contains the following fields: • • Interface — Indicates the device for which statistics are displayed.
Viewing Statistics Viewing Interface Statistics Transmit Statistics • • • • 2. Total Bytes (Octets) — Displays the number of octets transmitted from the selected interface. Unicast Packets — Displays the number of Unicast packets transmitted from the selected interface. Multicast Packets — Displays the number of Multicast packets transmitted from the selected interface. Broadcast Packets — Displays the number of Broadcast packets transmitted from the selected interface.
D-Link DES-3010FA/GA User Guide • • • • • • • • • • • 2. Interface — Indicates the device for which statistics are displayed. The possible field values are: – – Port — Defines the specific port for which Etherlike statistics are displayed. – – – – 15 Sec—Indicates that the Etherlike statistics are refreshed every 15 seconds. LAG — Defines the specific LAG for which Etherlike statistics are displayed.
Viewing Statistics Viewing Interface Statistics Viewing GVRP Statistics The GVRP Statistics Page contains device statistics for GVRP. To view GVRP statistics: • Click Advanced Setup > Interface Statistics > GVRP. The GVRP Statistics Page opens. Figure 148:GVRP Statistics Page The GVRP Statistics Page contains the following fields: • • • • • • • • Interface—Specifies the interface type for which the statistics are displayed. – – Port—Indicates port statistics are displayed.
D-Link DES-3010FA/GA User Guide • • • • • 3. Invalid Protocol ID—Displays the device GVRP Invalid Protocol ID statistics. Invalid Attribute Type—Displays the device GVRP Invalid Attribute ID statistics. Invalid Attribute Value—Displays the device GVRP Invalid Attribute Value statistics. Invalid Attribute Length—Displays the device GVRP Invalid Attribute Length statistics. Invalid Event—Displays the device GVRP Invalid Event statistics. Select an interface in the Interface field.
Viewing Statistics Managing RMON Statistics • • • • • • • • • • • • Frames Receive — Indicates the number of valid EAPOL frames received on the port. Frames Transmit — Indicates the number of EAPOL frames transmitted via the port. Start Frames Receive — Indicates the number of EAPOL Start frames received on the port. Log off Frames Receive — Indicates the number of EAPOL Logoff frames that have been received on the port.
D-Link DES-3010FA/GA User Guide Viewing RMON Statistics The Viewing RMON Statistics contains fields for viewing information about device utilization and errors that occurred on the device. To view RMON statistics: 1. Click Advanced Setup > RMON > Statistics. The RMON Statistics Page opens. Figure 150:RMON Statistics Page The RMON Statistics Page contains the following fields: • • • • • Interface — Indicates the device for which statistics are displayed.
Viewing Statistics Managing RMON Statistics • • • • • • • • • 2. Broadcast Packets Received — Displays the number of good broadcast packets received on the interface since the device was last refreshed. This number does not include Multicast packets. Multicast Packets Received — Displays the number of good Multicast packets received on the interface since the device was last refreshed.
D-Link DES-3010FA/GA User Guide Configuring RMON History This section contains the following topics: • • Defining RMON History Control Viewing the RMON History Table Defining RMON History Control The RMON History Control Page contains information about samples of data taken from ports. For example, the samples may include interface definitions or polling periods. To view RMON history information: 1. Click Advanced Setup > RMON > History > History Control. The RMON History Control Page opens.
Viewing Statistics Managing RMON Statistics • • • Current No. of Samples in List — Displays the current number of samples taken. Owner — Displays the RMON station or user that requested the RMON information. The field range is 0-20 characters. Remove — Removes History Control entries. The possible field values are: – – 2. Checked — Removes the selected History Control entry. Unchecked — Maintains the current History Control entries. Click .
D-Link DES-3010FA/GA User Guide Viewing the RMON History Table The RMON History Table Page contains interface specific statistical network samplings. Each table entry represents all counter values compiled during a single sample. To view the RMON History Table: 1. Click Advanced Setup > RMON > History > History Table. The RMON History Table Page opens. Figure 153:RMON History Table Page The RMON History Table Page contains the following fields: • • • • • • • • History Entry No.
Viewing Statistics Managing RMON Statistics • • • • CRC Align Errors — Displays the number of CRC and Align errors that have occurred on the interface since the device was last refreshed. Undersize Packets — Displays the number of undersized packets (less than 64 octets) received on the interface since the device was last refreshed. Oversize Packets — Displays the number of oversized packets (over 1518 octets) received on the interface since the device was last refreshed.
D-Link DES-3010FA/GA User Guide • • • 2. Jabbers — Displays the total number of received packets that were longer than 1518 octets. This number excludes frame bits, but includes FCS octets that had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral octet (Alignment Error) number. The field range to detect jabbers is between 20 ms and 150 ms.
Viewing Statistics Managing RMON Statistics The RMON Events Control Page contains the following fields: • • • • • • • Event Entry — Displays the event. Community — Displays the community to which the event belongs. Description — Displays the user-defined event description. Type — Describes the event type. Possible values are: – – – – Log — Indicates that the event is a log entry. – – Checked — Removes a selected RMON event. Trap — Indicates that the event is a trap.
D-Link DES-3010FA/GA User Guide Viewing the RMON Events Logs The RMON Events Logs Page contains a list of RMON events. To view RMON event logs: • Click Advanced Setup > RMON > Events > Events Logs. The RMON Events Logs Page opens. Figure 155:RMON Events Logs Page The RMON Events Logs Page contains the following fields: • • • • Event — Displays the RMON Events Log entry number. Log No.— Displays the log number. Log Time — Displays the time when the log entry was entered.
Viewing Statistics Managing RMON Statistics Defining RMON Alarms The RMON Alarm Page contains fields for setting network alarms. Network alarms occur when a network problem, or event, is detected. Rising and falling thresholds generate events. To set RMON alarms: 1. Click Advanced Setup > RMON > Alarm. The RMON Alarm Page opens. Figure 156:RMON Alarm Page The RMON Alarm Page contains the following fields: • • • • • Alarm Entry — Indicates a specific alarm.
D-Link DES-3010FA/GA User Guide • • • • Startup Alarm — Displays the trigger that activates the alarm generation. Rising is defined by crossing the threshold from a low-value threshold to a higher-value threshold. Interval — Defines the alarm interval time in seconds. Owner — Displays the device or user that defined the alarm. Remove — Removes the RMON Alarms Table entry. 2. Click . The RMON Alarms Definition Page opens: Figure 157:RMON Alarms Definition Page 3.
Troubleshooting Troubleshooting This section describes problems that may arise when installing the and how to resolve these issue. This section includes the following topics: • • Problem Management — Provides information about problem management with DES-3010FA/GA. Troubleshooting Solutions — Provides a list of troubleshooting issues and solutions for using DES3010FA/GA.
D-Link DES-3010FA/GA User Guide Problem Management Problem management includes isolating problems, quantifying the problems, and then applying the solution. When a problem is detected, the exact nature of the problem must be determined. This includes how the problem is detected, and what are the possible causes of the problem. With the problem known, the effect of the problem is recorded with all known results from the problem. Once the problem is quantified, the solution is applied.
Troubleshooting Troubleshooting Solutions P r o bl em s P os si bl e C au se So lu t io n Self-test exceeds 15 seconds The device may not be correctly installed. Remove and reinstall the device. If that does not help, consult your technical support representative.
D-Link DES-3010FA/GA User Guide P r o bl em s P os si bl e C au se So lu t io n Add and Edit pages do not open. A pop-up blocker is enabled. Disable pop-up blockers. Lost password The Password Recovery Procedure enables the user to override the current password configuration, and disables the need for a password to access the console. The password recovery is effective until the device is reset. If the password/user name has been forgotten or lost.
Contacting D-Link Technical Support Contacting D-Link Technical Support Software updates and user documentation can be found on the D-Link website. D-Link provides free technical support for customers within the United States and within Canada for the warranty duration. For more information on locating the D-Link office in your region, see International Offices .
D-Link DES-3010FA/GA User Guide Page 250
Contacting D-Link Technical Support Page 251
D-Link DES-3010FA/GA User Guide Page 252
Contacting D-Link Technical Support Page 253
D-Link DES-3010FA/GA User Guide Page 254
Contacting D-Link Technical Support Page 255
D-Link DES-3010FA/GA User Guide Page 256
Contacting D-Link Technical Support Page 257
D-Link DES-3010FA/GA User Guide Page 258
Contacting D-Link Technical Support Page 259
D-Link DES-3010FA/GA User Guide Page 260
Contacting D-Link Technical Support Page 261
D-Link DES-3010FA/GA User Guide Page 262
Contacting D-Link Technical Support Page 263
D-Link DES-3010FA/GA User Guide Page 264
Contacting D-Link Technical Support Page 265
D-Link DES-3010FA/GA User Guide Page 266
Contacting D-Link Technical Support Page 267
D-Link DES-3010FA/GA User Guide Page 268
Contacting D-Link Technical Support Page 269
D-Link DES-3010FA/GA User Guide Page 270
Contacting D-Link Technical Support Page 271
D-Link DES-3010FA/GA User Guide Page 272
Contacting D-Link Technical Support Page 273
D-Link DES-3010FA/GA User Guide Page 274
Contacting D-Link Technical Support Page 275
Warranty Subject to the terms and conditions set forth herein, D-Link Systems, Inc. (“D-Link”) provides this Limited Warranty: • Only to the person or entity that originally purchased the product from D-Link or its authorized reseller or distributor, and • Only for products purchased and delivered within the fifty states of the United States, the District of Columbia, U.S. Possessions or Protectorates, U.S. Military Installations, or addresses with an APO or FPO.
expressly disclaim their warranty obligation pertaining to the product and in that case, the product is being sold "As-Is" without any warranty whatsoever including, without limitation, the Limited Warranty as described herein, notwithstanding anything stated herein to the contrary. Submitting A Claim: The customer shall return the product to the original purchase point based on its return policy.
HEREIN, THE ENTIRE RISK AS TO THE QUALITY, SELECTION AND PERFORMANCE OF THE PRODUCT IS WITH THE PURCHASER OF THE PRODUCT.
Product Registration Product Registration D-Link products can be registered online at http://support.dlink.com/register/. Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
D-Link DES-3010FA/GA User Guide International Offices U.S.A 17595 Mt. Herrmann Street Fountain Valley, CA. 92708 TEL: 714-885-6000 Fax 866-743-4905 URL: www.dlink.com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www.dlink.ca Europe (U. K.) 4th Floor, Merit House Edgware Road, Colindale London NW9 5AB U.K. TEL: 44-20-8731-5555 FAX: 44-20-8731-5511 URL: www.dlink.co.
