D-Link ™ DES-3250TG Stackable Layer 2 Switch User’s Guide ____________________
D-Link DES-3250TG Standalone Layer 2 Switch Information in this document is subject to change without notice. © 2005 D-Link Computer Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-Link logo are trademarks of D-Link Computer Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
D-Link DES-3250TG Standalone Layer 2 Switch Table of Contents Preface ..............................................................................................................................................vii Intended Readers...............................................................................................................................vii Notes, Notices, and Cautions ..........................................................................................................
D-Link DES-3250TG Standalone Layer 2 Switch MIBs .............................................................................................................................................. 22 IP Address Assignment ..................................................................................................................... 22 Connecting Devices to the Switch ..................................................................................................... 24 Web-based Switch Management .......
D-Link DES-3250TG Standalone Layer 2 Switch Authenticator ................................................................................................................................. 99 Client ........................................................................................................................................... 100 Authentication Process................................................................................................................. 101 Understanding 802.
D-Link DES-3250TG Standalone Layer 2 Switch Reset............................................................................................................................................ 149 Reset System ............................................................................................................................... 149 Reset Config ................................................................................................................................. 150 Logout...................
D-Link DES-3250TG Standalone Layer 2 Switch Preface The DES-3250TG Manual is divided into sections that describe the system installation and operating instructions with examples. Section 1, Introduction - Describes the Switch and its features. Section 2, Unpacking and Setup- Helps you get started with the basic installation of the Switch and also describes the front panel, rear panel, side panels, and LED indicators of the Switch.
D-Link DES-3250TG Standalone Layer 2 Switch NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. CAUTION: A CAUTION indicates a potential for property damage, personal injury, or death. Safety Instructions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage.
D-Link DES-3250TG Standalone Layer 2 Switch Safety Instructions (continued) • • • • • • • To help prevent electric shock, plug the system and peripheral power cables into properly grounded electrical outlets. These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable. If you must use an extension cable, use a 3-wire cable with properly grounded plugs. Observe extension cable and power strip ratings.
D-Link DES-3250TG Standalone Layer 2 Switch Safety Instructions (continued) Always load the rack from the bottom up, and load the heaviest item in the rack first. Make sure that the rack is level and stable before extending a component from the rack. Use caution when pressing the component rail release latches and sliding a component into or out of a rack; the slide rails can pinch your fingers.
D-Link DES-3250TG Standalone Layer 2 Switch Section 1 Introduction Fast Ethernet Technology Gigabit Ethernet Technology Switch Stacking Performance Features Ports This section describes the functionality features of the DES-3250TG. Fast Ethernet Technology 100Mbps Fast Ethernet (or 100BASE-T) is a standard specified by the IEEE 802.3 LAN committee.
D-Link DES-3250TG Standalone Layer 2 Switch Features The DES-3250TG Switch was designed for easy installation and high performance in an environment where traffic on the network and the number of users increase continuously. Switch features include: • Store and forward switching scheme. • Full and half-duplex for both 10Mbps and 100Mbps connections. The front-port Gigabit Ethernet module operates at full duplex only.
D-Link DES-3250TG Standalone Layer 2 Switch panel modules can be used simultaneously, the ports must be different. For example, if port 49x is used on the Mini GBIC module, port 49x is not available on the 1000BASE-T module, and vice versa. • RS-232 DCE Diagnostic port (console port) for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation program. Traffic Classification and Prioritization • Based on 802.1p priority bits. • Four priority queues.
D-Link DES-3250TG Standalone Layer 2 Switch Section 2 Unpacking and Setup Unpacking Installation Power On This chapter provides unpacking and setup information for the Switch. Unpacking Open the shipping carton of the Switch and carefully unpack its contents.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 2-1. Installing rubber feet for desktop installation Rack Installation The DES-3250TG can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, attach the mounting brackets on the switch’s side panels (one on each side) and secure them with the screws provided. Figure 2- 2.
D-Link DES-3250TG Standalone Layer 2 Switch Power on The DES-3250TG switch can be used with AC power supply 100 - 240 VAC, 50 - 60 Hz. The power switch is located at the rear of the unit adjacent to the AC power connector and the system fan. The switch’s power supply will adjust to the local power source automatically and may be turned on without having any or all LAN segment cables connected.
D-Link DES-3250TG Standalone Layer 2 Switch Section 3 Identifying External Components Front Panel Rear Panel Side Panels Gigabit Combo Ports LED Indicators This chapter describes the front panel, rear panel, side panels, and optional plug-in module, and LED indicators of the DES-3250TG.
D-Link DES-3250TG Standalone Layer 2 Switch The AC power connector is a standard three-pronged connector that supports the power cord. Plug-in the female connector of the provided power cord into this socket, and the male side of the cord into a power outlet. Supported input voltages range from 100 ~ 240 VAC at 50 ~ 60 Hz. Side Panels Each side panel contains heat vents to help to dissipate heat. Figure 3-3. Side panel views of the Switch The system fans are used to dissipate heat.
D-Link DES-3250TG Standalone Layer 2 Switch ● Power – This indicator on the front panel should be lit during the Power-On Self Test (POST). It will light green approximately 2 seconds after the switch is powered on to indicate the ready state of the device. ● Console – This indicator is lit green when the switch is being managed via local console management through the RS-232 console port. ● Link/Act – These indicators are located to the left and right of each port.
D-Link DES-3250TG Standalone Layer 2 Switch Section 4 Connecting the Switch Switch to End Node Switch to Hub or Switch 10BASE-T Device 100BASE-TX Device Stacking vs. Standalone Operation Managing Switch Stacks This chapter describes how to connect the DES-3250TG to your Ethernet/Fast Ethernet/Gigabit Ethernet network. The Switch’s auto-detection feature allows all 48 10/100 ports to support both MDI-II and MDI-X connections.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 4- 2. Switch connected to a port on a hub or switch using a straight or crossover cable 10BASE-T Device For a 10BASE-T device, the Switch’s LED indicators should display the following: ● Link/Act indicator is ON. 100BASE-TX Device For a 100BASE-TX device, the Switch’s LED indicators should display the following: ● Link/Act is ON. Stacking vs.
D-Link DES-3250TG Standalone Layer 2 Switch auto stacking mode, the master-slave relationships is determined automatically. For DES-3250TG Switch stacks, the unit with the lowest MAC address becomes the master (stack number 1). The order in which slave devices appear logically in the stack (stack number 2+) is determined by how they are connected relative to the master Switch.
D-Link DES-3250TG Standalone Layer 2 Switch Keep in mind the following important considerations for stacked Switch groups: • All management of the Switches in the stack is done through the master Switch. • The master Switch should be used to uplink to the Ethernet backbone. For DES-3250TG stacks, the master Switch can be chosen automatically as each Switch in a connected stack competes for status. However, you can choose a specific device and force it to operate as the master.
D-Link DES-3250TG Standalone Layer 2 Switch Since we want to keep the same IP address and all the other settings on the standalone Switch, this Switch will become the master of the stack and Switch B will become the slave. To make sure Switch A functions as the master we will enable stacking and override the auto function. Use the CLI to enter the command: config stacking mode enable master The stacking mode for Switch B is set to the default auto-stacking mode and therefore no changes are required.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 4- 4. Add a Switch to a Stack Switch C is added to the existing stack where Switch A is the designated master. Power off all devices and securely place Switch C in the slot beneath Switch B. Adjust stacking cable connections so the OUT port on Switch B connects the IN port on Switch C and the OUT port of Switch C connects to the IN port of Switch A. Figure 4- 5. Add a third Switch to a stack Power on the entire stack.
D-Link DES-3250TG Standalone Layer 2 Switch Stacking with DGS-3312SR The DES-3250TG Release 4 Switch can be arranged in a star topology and managed as slave devices through the DGS3312SR Master Switch. Up to twelve Switches can be connected to the DGS-3312SR Switch in this arrangement. Figure 4- 6. DES-3250TG Switches with DGS-3312SR Setting up a star topology with a DGS-3312SR is a simple matter.
D-Link DES-3250TG Standalone Layer 2 Switch Section 5 Introduction to Switch Management Management Options Web-based Management Interface SNMP-Based Management Managing User Accounts Command Line Console Interface through the Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to the Switch Password Protection SNMP Settings IP Address Assignment Connecting Devices to the Switch Management Options This system may be managed out-of-band through the console port on the front panel or i
D-Link DES-3250TG Standalone Layer 2 Switch Connecting the Console Port (RS-232 DCE) The Switch provides an RS-232 serial port that enables a connection to a computer or terminal for monitoring and configuring the Switch. This port is a female DB-9 connector, implemented as a data terminal equipment (DTE) connection. To use the console port, you need the following equipment: • A terminal or a computer with both a serial port and the ability to emulate a terminal.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 5- 1. Initial screen after first connection First Time Connecting to The Switch The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or changing its settings. This section tells how to log onto the Switch. NOTE: The passwords used to access the Switch are case-sensitive; therefore, "S" is not the same as "s.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 5- 2. Initial screen, first time connecting to the Switch Usernames and Passwords are not required on the initial screen after the first connection. Any additional user names and passwords must first be created by the administrator. You will be given access to the command prompt DES-3250TG:4# shown below: Figure 5- 3. Command Prompt NOTE: The first user automatically gets Administrator level privileges.
D-Link DES-3250TG Standalone Layer 2 Switch After your initial login, define new passwords for both default user names to prevent unauthorized access to the Switch, and record the passwords for future reference. To create an administrator-level account for the Switch, do the following: • At the CLI login prompt, enter create account admin followed by the and press the Enter key. • You will be asked to provide a password.
D-Link DES-3250TG Standalone Layer 2 Switch SNMP agent. SNMP defines both the format of the MIB specifications and the protocol used to access this information over the network. The DES-3250TG supports SNMP versions 1, 2c, and 3. You can specify which version of SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device. In SNMP v.1 and v.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 5- 5. Show switch command The Switch's MAC address can also be found from the Web management program on the Switch Information (Basic Settings) window on the Configuration menu. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
D-Link DES-3250TG Standalone Layer 2 Switch Connecting Devices to the Switch After you assign IP addresses to the Switch, you can connect devices to the Switch. To connect a device to an SFP transceiver port: • Use your cabling requirements to select an appropriate SFP transceiver type. • Insert the SFP transceiver (sold separately) into the SFP transceiver slot. • Use the appropriate network cabling to connect a device to the connectors on the SFP transceiver.
D-Link DES-3250TG Standalone Layer 2 Switch Section 6 Web-based Switch Management Introduction Login to Web Manager User Accounts Management Admin and User Privileges Save Changes Areas of the User Interface Web Pages Introduction The DES-3250TG offers an embedded Web-based (HTML) interface allowing users to manage the switch from anywhere on the network through a standard browser such as Netscape Navigator/Communicator or Microsoft Internet Explorer.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 6- 1. Login button This opens the management module’s main page. The switch management features available in the Web-based manager are explained below. User Accounts Management From the Management menu, click User Accounts and then the User Account Management window appears. Figure 6- 2. User Account Management window Click Add to add a user. Figure 6- 3. User Account Modify Table window 1.
D-Link DES-3250TG Standalone Layer 2 Switch Network Monitoring Yes Read Only Community Strings and Trap Stations Yes Read Only Update Firmware and Configuration Files Yes Read Only System Utilities Yes Ping Only Factory Reset Yes No Reboot Switch Yes No Add/Update/Delete User Accounts Yes No View User Accounts Yes No User Account Management Table 6-1.
D-Link DES-3250TG Standalone Layer 2 Switch Once the switch configuration settings have been saved to NV-RAM, they become the default settings for the switch. These settings will be used every time the switch is rebooted. Areas of the User Interface The user interface provides access to various switch configuration and management screens, allows you to view performance statistics, and permits you to graphically monitor the system status. The figure below shows the user interface.
D-Link DES-3250TG Standalone Layer 2 Switch NOTICE: Any changes made to the Switch configuration during the current session must be saved in the Save Changes web menu (explained below) or use the command line interface (CLI) command save. Web Pages When you connect to the management mode of the Switch with a web browser, a login window is displayed. Enter a user name and password to access the Switch's management mode.
D-Link DES-3250TG Standalone Layer 2 Switch Section 7 Configuration IP Address Switch Information Advanced Settings Serial Port Settings MAC Notification Port Description Port Configuration Port Mirroring Stack Setting Static ARP Settings IGMP Spanning Tree Forwarding Filtering VLANs Port Bandwidth SNTP Settings Port Security QoS LACP Access Profile Table System Log Hosts PAE Access Entity This section, arranged by topic, describes how to perform common monitoring and configuration tasks on the DES-3250TG
D-Link DES-3250TG Standalone Layer 2 Switch IP Address The Switch needs to have an IP address assigned to it so that an In-Band network management system (for example, the Web Manager or Telnet) client can find it on the network. The IP Address Settings window allows you to change the settings for the Ethernet interface used for in-band communication. To set the switch’s IP address: Click IP Address on the Configuration menu to open the following window: Figure 7- 1.
D-Link DES-3250TG Standalone Layer 2 Switch provide it with this information before using the default or previously entered settings. DHCP The switch will send out a DHCP broadcast request when it is powered up. The DHCP protocol allows IP addresses, network masks, and default gateways to be assigned by a DHCP server. If this option is set, the switch will first look for a DHCP server to provide it with this information before using the default or previously entered settings.
D-Link DES-3250TG Standalone Layer 2 Switch switch’s ports. There are no entries in the Management Station IP Addresses table, by default − so any management station can access the switch. Admin. State This setting allows the IP interface named “System” to be enabled or disabled. Switch Information Click the Switch Information link in the Configuration menu. Figure 7- 2.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 3. Switch Information (Advanced Settings) window The following fields can be set: Parameter Description MAC Address Aging Time <300> The MAC Address Aging Time specifies the length of time a learned MAC Address will remain in the forwarding table without being accessed (that is, how long a learned MAC Address is allowed to remain idle). The Aging Time can be set to any value between 10 and 1,000,000 seconds.
D-Link DES-3250TG Standalone Layer 2 Switch Destination, or Mac Source. RMON Status To enable RMON capability, toggle Disabled to Enabled. 802.1x Status To enable 802.1x port control access on a global basis, toggle Disabled to Enabled. Asymetric VLAN To enable Asymetric VLANs, toggle to Enabled. Please note that when the user sets Asymetric VLANs to Disabled, then the factory default VLAN setting is restored.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 5. MAC Notification window The following parameters can be configured. Parameters Description MAC Notification Enable or disable MAC notification globally on the Switch. The default setting is Disabled. MAC Notification Interval The user may set the time, between 1 and 2,147,483,647 seconds, between MAC notifications. The default setting is 1 second.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 6. Port Configuration window The From and To drop-down dialog boxes allow different ports to be selected for configuration. Use the State pull-down menu to either enable or disable the selected port. Use the Speed/Duplex pull-down menu to select the speed and duplex/half-duplex state of the port.
D-Link DES-3250TG Standalone Layer 2 Switch Please note that although the two front panel modules can be used simultaneously, the ports must be different. For example, if port 50x is used on the Mini GBIC module, port 50x is not available on the 1000BASE-T module. In addition, the fiber port will always be the highest priority. The following fields can be set: Parameter Description From and To Enter the desired range of ports to be configured in these fields.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 7. Port Description Settings window Use the From and To pull down menu to choose a port or range of ports to describe and Unit to choose the Switch in the switch stack, and then enter a description of the port(s). Click Apply to set the descriptions in the Port Description Settings Table.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 8. Setup Port Mirroring window The target port is where information will be duplicated and sent for capture and network analysis. A network analyzer would be attached to this port to capture packets duplicated from the source port. It should be noted that a faster port (a 1000 Mbps Gigabit Ethernet port, for example) should not be mirrored to a slower port (one of the 48 100 Mbps Fast Ethernet ports), because many packets will be dropped.
D-Link DES-3250TG Standalone Layer 2 Switch Target Port This port is where information will be duplicated and sent for capture and network analysis. Status Toggle between Enabled and Disabled. Stack Setting When DES-3250TG Switches are properly interconnected in a stacked group, information about the stack is displayed in the Stack Setting menu. Click Stack Setting on the Configuration menu: Figure 7- 9.
D-Link DES-3250TG Standalone Layer 2 Switch numerical value of their respective MAC addresses. Auto Switches in the stack will be assigned a unit ID using a comparison of the numerical value of the Switch’s MAC address. The lowest MAC address in the Switch stack will become Unit 1 (the Master Switch), the next highest MAC address will become Unit 2, and so on. This is the Switch’s default mode. ID The field displays the Switch’s order in the stack.
D-Link DES-3250TG Standalone Layer 2 Switch The user may globally set the maximum amount of time, in minutes, that an Address Resolution Protocol (ARP) entry can remain in the Switch’s ARP table, without being accessed, before it is dropped from the table. The value may be set in the range of 0-65535 minutes with a default setting of 20 minutes. To add and an ARP entry click Add. The following window will appear. Figure 7- 11.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 13. IGMP Snooping Settings window The following fields can be set: Parameter Description VLAN ID Allows the entry of the VLAN ID for which IGMP Snooping is to be configured. VLAN Name Allows the entry of the name of the VLAN for which IGMP Snooping is to be configured. Query Interval Allows the entry of a value between 1 and 65535 seconds, with a default of 125 seconds. This specifies the length of time between sending IGMP queries.
D-Link DES-3250TG Standalone Layer 2 Switch group messages. The default is 1 second. Host Timeout (116711450) Specifies the maximum amount of time a host can be a member of a multicast group without the switch receiving a host membership report. The default is 260 seconds. Router Timeout (116711450) Specifies the maximum amount of time a route will remain in the switch’s forwarding table without receiving a membership report. The default is 260 seconds.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 14. Current Static Router Ports Entries window To add a static router port configuration, click the pointer icon: Figure 7- 15. Static Router Ports Settings window The following fields are displayed: Parameter Description VID Displays the name of the VLAN ID the static router port belongs to. VLAN Name Displays the name of the VLAN the static router port belongs to.
D-Link DES-3250TG Standalone Layer 2 Switch 802.1w Rapid Spanning Tree The Switch implements two versions of the Spanning Tree Protocol, the Rapid Spanning Tree Protocol (RSTP) as defined by the IEEE 802.1w specification and a version compatible with the IEEE 802.1d STP. RSTP can operate with legacy equipment implementing IEEE 802.1d, however the advantages of using RSTP will be lost. The IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) evolved from the 802.1d STP standard.
D-Link DES-3250TG Standalone Layer 2 Switch 802.1d/802.1w Compatibility RSTP can interoperate with legacy equipment and is capable of automatically adjusting BPDU packets to 802.1d format when necessary. However, any segment using 802.1 STP will not benefit from the rapid transition and rapid topology change detection of RSTP. The protocol also provides for a variable used for migration in the event that legacy equipment on a segment is updated to use RSTP.
D-Link DES-3250TG Standalone Layer 2 Switch The following fields can be set: Parameter Note: Description Spanning Tree Protocol This field can be toggled between Enabled and Disabled using the pull-down menu. This will enable or disable the Spanning Tree Protocol (STP), globally, for the switch. Bridge Max Age (6-40 Sec) <20 > The Bridge Maximum Age can be set from 6 to 40 seconds. At the end of the Max.
D-Link DES-3250TG Standalone Layer 2 Switch Observe the following formulas when setting the above parameters: Max. Age ≤ 2 x (Forward Delay - 1 second) Max. Age ≥ 2 x (Hello Time + 1 second) STP Port Settings The Spanning Tree Protocol (STP) operates on two levels: on the switch level, the settings are globally implemented. On the port level, the settings are implemented on a user-defined Group of ports basis.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 17. STP Port Settings window In addition to setting Spanning Tree parameters for use on the switch level, the switch allows for the configuration of a group of ports. This STP Group will use the switch-level parameters entered above, with the addition of Port Priority and Port Cost. The STP Group spanning tree works in the same way as the switch-level spanning tree, but the root bridge concept is replaced with a root port concept.
D-Link DES-3250TG Standalone Layer 2 Switch connection to the network for the group. Redundant links will be blocked, just as redundant links are blocked on the switch level. The STP on the switch level blocks redundant links between switches (and similar network devices). The port level STP will block redundant links within the STP Group. The following fields can be set: Parameter Description From and To Consecutive groups of ports may be configured starting with the selected port.
D-Link DES-3250TG Standalone Layer 2 Switch Forwarding Filtering MAC addresses can be statically entered into the switch’s MAC Address Forwarding Table. These addresses will never age out. Unicast Forwarding To enter a MAC address into the switch’s forwarding table, click on the Forwarding Filtering folder on the Configuration menu and then click Unicast Forwarding: Figure 7- 18.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 19. Static Multicast Forwarding Settings window To add a new multicast MAC address to the switch’s forwarding table, click the Add button: Figure 7- 20. Setup Static Multicast Forwarding Table window The following fields can be set: Parameter Description VID Allows the entry of the VLAN ID of the VLAN the MAC address below is a member of.
D-Link DES-3250TG Standalone Layer 2 Switch VLANs A VLAN is a collection of end nodes grouped by logic rather than physical location. End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where they are located physically on the network. Logically, a VLAN can be equated to a broadcast domain, because broadcast packets are forwarded only to members of the VLAN on which the broadcast was initiated. VLANs on the DES-3250TG The DES-3250TG supports IEEE 802.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 21. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet’s EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 23. Adding an IEEE 802.1Q Tag Static VLAN Entry The VLAN menu adds an entry to edit the VLAN definitions and to configure the port settings for IEEE 802.1Q VLAN support. Go to the Configuration menu, select the VLANs folder, and click Static VLAN Entry to open the following window: Figure 7- 24. 802.1Q Static VLANs window To delete an existing 802.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 25. (Add) 802.1Q Static VLAN window To edit an existing 802.1Q VLAN, click the corresponding Modify button on the 802.1Q Static VLANs window.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 4- 7. (Modify) 802.1Q Static VLAN window The following fields can then be set in either of the two 802.1Q Static VLAN windows: Parameter Description VLAN ID (VID) Allows the entry of a VLAN ID in the Add window, or displays the VLAN ID of an existing VLAN in the Modify window. VLANs can be identified by either the VID or the VLAN name.
D-Link DES-3250TG Standalone Layer 2 Switch is unchanged. None Allows an individual port to be specified as None. When an untagged packet is transmitted by the port, the packet header remains unchanged. When a tagged packet exits the port, the tag is stripped and the packet is changed to an untagged packet. Egress Egress Member - specifies the port as being a static member of the VLAN. Egress Member Ports are ports that will be transmitting traffic for the VLAN.
D-Link DES-3250TG Standalone Layer 2 Switch unaware device, the packet should be untagged. If the transmitting port is connected to a tag-aware device, the packet should be tagged. Tagging and Untagging Every port on an 802.1Q compliant switch can be configured as tagging or untagging. Ports with tagging enabled will put the VID number, priority and other VLAN information into the header of all packets that flow into and out of it.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 26. 802.
D-Link DES-3250TG Standalone Layer 2 Switch Parameter Description From and To Enter the desired ports in these two fields. PVID A Port VLAN Identifier is a classification mechanism that associates a port with a specific VLAN and is used to make forwarding decisions for untagged packets received by the port. For example, if port #2 is assigned a PVID of 3, then all untagged packets received on port #2 will be assigned to VLAN 3.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 27. Bandwidth Settings window To use the bandwidth feature, enter the port or range of ports in the From and To fields. The third field allows you to set the type of packets being received and/or transmitted by the Switch.
D-Link DES-3250TG Standalone Layer 2 Switch if you prefer, manually enter a value in the Rate field, and then click Apply. Please note that if no_limit is Enabled, the Switch will not permit you to set the bandwidth rate manually. SNTP Settings The DES-3250TG supports Simple Network Time Protocol (SNTP), an adaptation of the Network Time Protocol (NTP). As specified in RFC-1305 [MIL92], NTP is used to synchronize computer clocks in the global Internet.
D-Link DES-3250TG Standalone Layer 2 Switch To complete SNTP configuration, fill in the desired values in the Current Time: Set Current Time section and then click Apply. Time Zone and DST To make time zone and Daylight Savings Time changes to the SNTP configuration, click SNTP Settings in the Configuration folder and then click Time Zone and DST: Figure 7- 29. Time Zone and DST Settings window This window allows you to set the Daily Saving Time repeated and annual settings.
D-Link DES-3250TG Standalone Layer 2 Switch Port Security Settings A given port’s (or a range of ports’) dynamic MAC address learning can be locked such that the current source MAC addresses entered into the MAC address forwarding table can not be changed once the port lock is enabled. The port can be locked by changing the Admin State pull-down menu to Enabled, and clicking Apply. Figure 7- 30.
D-Link DES-3250TG Standalone Layer 2 Switch group of ports on the switch for configuration. Admin State Allows the selected port(s) dynamic MAC address learning to be locked such that new source MAC addresses cannot be entered into the MAC address table for the locked port or group of ports. It can be changed by toggling between Disabled and Enabled. Max Learning Addr.(0-10) <1 > Select the maximum number of addresses that may be learned for the port.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 31. Port Security Clear window Delete Port_security Entries is used to delete individual entries. Enter the VLAN, MAC address, and port of the device that you want to delete from the port security entries table and click Delete. Clear Port_security port is used to clear a range of ports from the port security entries learned by the switch and entered into the forwarding database. Enter the port or range of ports and click Clear.
D-Link DES-3250TG Standalone Layer 2 Switch QOS (Quality of Service) The DES-3250TG switch supports 802.1p priority queuing. The switch has four priority queues. These priority queues are numbered from 0 — the lowest priority queue — to 3 — the highest priority queue. The eight priority queues specified in IEEE 802.1p (Q0 to Q7) are mapped to the switch’s priority queues as follows: Q2 and Q1 are assigned to the switch’s Q0 queue. Q3 and Q0 are assigned to the switch’s Q1 queue.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 32. Traffic Control Setting window The following fields can be set: Parameter Description Group <1> Select the desired group of ports from the drop-down menu. Broadcast Storm This field can be toggled between Enabled and Disabled using the drop-down menu. This enables or disables, globally, the Switch’s reaction to Broadcast storms, triggered at the threshold set in the last field.
D-Link DES-3250TG Standalone Layer 2 Switch Lookup Fail packets. The counters are cleared every second. If the counter for a particular type of packet exceeds this threshold within one second, then further packets of that type will be dropped. 802.1p Default Priority The switch allows the assignment of a default 802.1p priority to each port on the switch. Click 802.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 33. 802.1p default_priority Settings window This window allows you to assign a default 802.1p priority to any given port on the switch. The priority queues are numbered from 0 − the lowest priority − to 7 − the highest priority.
D-Link DES-3250TG Standalone Layer 2 Switch 802.1p User Priority The DES-3250TG allows the assignment of a Class of Traffic to each of the 802.1p priorities. Click 802.1p user_priority in the QoS folder on the Configuration menu: Figure 7- 34. QoS Class of Traffic window Once you have assigned a maximum number of packets and a maximum latency to a given Class of Service on the switch, you can then assign this Class to each of the eight levels of 802.1p priorities.
D-Link DES-3250TG Standalone Layer 2 Switch Traffic Segmentation This window allows you to manage traffic segmentation on the switch. Click Traffic Segmentation in the QoS folder on the Configuration menu: Figure 7- 36.
D-Link DES-3250TG Standalone Layer 2 Switch Enter a source port number in the first field and the range of the ports that you want to segment in the second field. For example, if you enter “5” in the first field and “5-8” in the second field, packets from port 5 will only be forwarded to ports 5 to 8. Packets to port 9, then, will be dropped. Click Apply to let your changes take effect.
D-Link DES-3250TG Standalone Layer 2 Switch Link aggregation is most commonly used to link a bandwidth intensive network device or devices – such as a server – to the backbone of a network. The switch allows the creation of up to six link aggregation groups, each group consisting of up to eight links (ports). All of the ports in the group must be members of the same VLAN. Further, the aggregated links must all be of the same speed and should be configured as full duplex.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 39. Port Link Aggregation Settings (Add) window Figure 7- 40. Port Link Aggregation Settings (Modify) window The following fields can be set: Parameter Group ID(1-6) Description Allows the entry of a number used to identify the link aggregation group − when adding a new group.
D-Link DES-3250TG Standalone Layer 2 Switch existing entry. State This field can be toggled between Enabled and Disabled. This is used to turn a link aggregation group on or off. This is useful for diagnostics, to quickly isolate a bandwidth intensive network device, or to have an absolute backup link aggregation group that is not under automatic control. Master Port The Master port of link aggregation group.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 41. Link Aggregation Settings window Enter the port range in the From and To fields, select the desired Mode in the next field, and then click Apply to let your changes take effect. Configuring the Access Profile Table Access profiles allow you to establish criteria to determine whether the Switch will forward packets based on the information contained in each packet's header.
D-Link DES-3250TG Standalone Layer 2 Switch Creating an access profile is divided into two basic parts. The first is to specify which part or parts of a frame the Switch will examine, such as the MAC source address or the IP destination address. The second part is entering the criteria the Switch will use to determine what to do with the frame. The entire process is described below in two parts.
D-Link DES-3250TG Standalone Layer 2 Switch The following parameters can be set, for the Ethernet type: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 - 255. Type Select profile based on Ethernet (MAC Address), IP address or packet content mask. This will change the menu according to the requirements for the type of profile. Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 44. Access Profile Configuration (IP) The following parameters can be set, for IP: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 - 255. Type Select profile based on Ethernet (MAC Address), IP address or packet content mask. This will change the menu according to the requirements for the type of profile.
D-Link DES-3250TG Standalone Layer 2 Switch header. Select IP to instruct the Switch to examine the IP address in each frame's header. Select Packet Content Mask to specify a mask to hide the content of the packet header. VLAN Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the, or part of the criterion for forwarding. Source IP Mask Enter an IP address mask for the source IP address.
D-Link DES-3250TG Standalone Layer 2 Switch (urgent), ack (acknowledgement), psh (push), rst (reset), syn (synchronize), fin (finish). src port mask - Specify a TCP port mask for the source port in hex form (hex 0x0-0xffff), which you wish to filter. dest port mask - Specify a TCP port mask for the destination port in hex form (hex 0x0-0xffff) which you wish to filter. Select UDP to use the UDP port number contained in an incoming packet as the forwarding criterion.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 45. Access Profile Configuration window (Packet Content Mask) This screen will aid the user in configuring the Switch to mask packet headers beginning with the offset value specified. The following fields are used to configure the Packet Content Mask: Parameter Description Profile ID (1-255) Type in a unique identifier number for this profile set. This value can be set from 1 -255.
D-Link DES-3250TG Standalone Layer 2 Switch according to the requirements for the type of profile. Select Ethernet to instruct the Switch to examine the layer 2 part of each packet header. Select IP to instruct the Switch to examine the IP address in each frame's header. Select Packet Content Mask to specify a mask to hide the content of the packet header.
D-Link DES-3250TG Standalone Layer 2 Switch Part 2 IP In the Configuration folder, click the Access Profile Table link opening the Access Profile Table. Under the heading Access Rule, clicking Modify, will open the following window. Figure 7- 46. Access Rule Table window (IP) To create a new rule set for an access profile click the Add button. A new window is displayed. To remove a previously created rule, click the corresponding button. Figure 7- 47.
D-Link DES-3250TG Standalone Layer 2 Switch Configure the following Access Rule Configuration settings for IP: Parameter Description Profile ID This is the identifier number for this profile set. Mode Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below). Select Deny to specify that packets that do not match the access profile are not forwarded by the Switch and will be filtered.
D-Link DES-3250TG Standalone Layer 2 Switch VLAN Name Allows the entry of a name for a previously configured VLAN. Source IP Source IP Address - Enter an IP Address mask for the source IP address. Destination IP Destination IP Address- Enter an IP Address mask for the destination IP address. Dscp (0-63) Destination IP Address- Enter an IP Address mask for the destination IP address.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 49. Access Rule Table (Ethernet) To remove a previously created rule, select it and click the button. To add a new Access Rule, click the Add button: Figure 7- 50. Access Rule Configuration window (Ethernet) To set the Access Rule for Ethernet, adjust the following parameters and click Apply. Parameter Description Profile ID This is the identifier number for this profile set. Access ID Type in a unique identifier number for this access.
D-Link DES-3250TG Standalone Layer 2 Switch forwarded by the Switch, according to any additional rule added (see below). Select Deny to specify that packets that do not match the access profile are not forwarded by the Switch and will be filtered. Priority(0-7) This parameter is specified if you want to re-write the 802.1p default priority previously set in the Switch, which is used to determine the CoS queue to which packets are forwarded to.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 51. Access Rule Display window (Ethernet) Packet Content Mask To configure the Access Rule for Packet Content Mask, open the Access Profile Table and click Modify for a Packet Content Mask entry. This will open the following screen: Figure 7- 52. Access Rule Table (Packet Content Mask) To remove a previously created rule, select it and click the button.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 53. Access Rule Configuration window (Packet Content Mask) To set the Access Rule for the Packet Content Mask, adjust the following parameters and click Apply. Parameter Description Profile ID This is the identifier number for this profile set.
D-Link DES-3250TG Standalone Layer 2 Switch forwarded by the Switch, according to any additional rule added (see below). Access ID Type in a unique identifier number for this access. This value can be set from 1 - 50. Type Selected profile based on Ethernet (MAC Address), IP address or Packet Content Mask. Ethernet instructs the Switch to examine the layer 2 part of each packet header. IP instructs the Switch to examine the IP address in each frame's header.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 54.
D-Link DES-3250TG Standalone Layer 2 Switch System Log Hosts Figure 7- 55. System Log Servers window Click Add to add an entry to the table in the window above. Figure 7- 56. System Log Server window Enter the desired system log server information and then click Apply to let your changes take effect. Port Access Entity (802.1X) 802.1x Port-Based and MAC-Based Access Control The IEEE 802.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 57. The EAPOL Packet Utilizing this method, unauthorized devices are restricted from connecting to a LAN through a port to which the user is connected. EAPOL packets are the only traffic that can be transmitted through the specific port until authorization is granted. The 802.1x Access Control method holds three roles, each of which are vital to creating and up keeping a stable and working Access Control security method. Figure 7- 58.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 59. The Authentication Server Authenticator The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The Authenticator serves two purposes when utilizing 802.1x. The first purpose is to request certification information from the Client through EAPOL packets, which is the only information allowed to pass through the Authenticator before access is granted to the Client.
D-Link DES-3250TG Standalone Layer 2 Switch Client The Client is simply the endstation that wishes to gain access to the LAN or switch services. All endstations must be running software that is compliant with the 802.1x protocol. For users running Windows XP, that software is included within the operating system. All other users are required to attain 802.1x client software from an outside source.
D-Link DES-3250TG Standalone Layer 2 Switch Authentication Process Utilizing the three roles stated above, the 802.1x protocol provides a stable and secure way of authorizing and authenticating users attempting to access the network. Only EAPOL traffic is allowed to pass through the specified port before a successful authentication is made. This port is “locked” until the point when a Client with the correct username and password (and MAC address if 802.
D-Link DES-3250TG Standalone Layer 2 Switch Port-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client Network access controlled port Network access uncontrolled port Figure 7- 63.
D-Link DES-3250TG Standalone Layer 2 Switch MAC-Based Network Access Control RADIUS Server Ethernet Switch … 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client 802.1X Client Network access controlled port Network access uncontrolled port Figure 7- 64. Example of Typical MAC-Based Configuration In order to successfully make use of 802.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 65. First 802.
D-Link DES-3250TG Standalone Layer 2 Switch . Figure 7- 66. Second 802.1X Authenticator Settings window Configure the following 802.1x port settings: Parameter Description Port Port being configured for 802.1x settings. AdmDir From the pull-down whether a controlled unauthorized will exert communication in both transmitting directions, receiving direction.
D-Link DES-3250TG Standalone Layer 2 Switch SuppTimeout Select the time to wait for a response from a supplicant (user) for all EAP packets, except for the Request/Identity packets. ServerTimeout Select the length of time to wait for a response from a Radius server. MaxReq Select the maximum number of times to retry sending packets to the supplicant. ReAuthPeriod Select the time interval successive re-authentications. ReAuth/ Enabled Enable or disable re-authentication.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 67. 802.1X Capability Settings window To set up the switch’s 802.1x port-based authentication, select which ports are to be configured in the From and To fields. Next, enable the ports by selecting Authenticator from the drop-down menu under Capability. Click Apply to let your change take effect. Configure the following 802.
D-Link DES-3250TG Standalone Layer 2 Switch From and To Ports being settings. configured for Capability Two role choices can be selected: 802.1x Authenticator − A user must pass the authentication process to gain access to the network. None − The port is not controlled by the 802.1x functions. Initialize Port(s) for Port Based 802.1x Existing 802.1x port settings are displayed and can be configured using the window below.
D-Link DES-3250TG Standalone Layer 2 Switch Initializing Ports for MAC Based 802.1x To initialize ports for the MAC side of 802.1x, the user must first enable MAC Based 802.1x in the Advanced Settings window. Click Configuration > Port Access Entity > PAE System Control > Initialize Port(s) to open the following window: Figure 7- 69. Initialize Ports for MAC Based 802.
D-Link DES-3250TG Standalone Layer 2 Switch Port The port number. MAC Address The MAC address of the Switch residing on the port. Auth State The Authenticator State will display one of the following: Initialize, Disconnected, Connecting, Authenticating, Authenticated, Aborting, Held, ForceAuth, ForceUnauth, and N/A. BackendState The Backend State will display one of the following: Request, Response, Success, Fail, Timeout, Idle, Initialize, and N/A.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 7- 72. Radius Server Authentication Setting window This window displays the following information: Parameter Description Succession Choose the desired RADIUS server to configure: First, Second or Third. Radius Server <0.0.0.0> Set the RADIUS server IP. Authentic Port <0> Set the RADIUS authentic server(s) UDP port. The default is 1812. Accounting Port <0> Set the RADIUS account server(s) UDP port. The default is 1813.
D-Link DES-3250TG Standalone Layer 2 Switch Section 8 Management ASecurity IP BUser Accounts CSNMP V3 The DES-3250TG allows you to manage the switch via the Management menu. Security IP Some settings must be entered to allow the switch to be managed from an SNMP-based Network Management System such as SNMP v1 or to be able to access the Switch using the Telnet protocol or the Web Manager. To setup the switch for remote management: Click the Security IP link in the Management menu: Figure 8- 1.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 8- 2. User Account Management window Click Add to add a user. Figure 8- 3. User Account Modify Table window 1. Enter the new user name, assign an initial password, and then confirm the new password. Determine whether the new user should have Admin or User privileges. 2. Click Apply to make the user addition effective. 3. A listing of all user accounts and access levels is shown in the User Account Management window.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 8- 4. SNMP User Table window To delete an existing entry, click the selection button in the Delete column on the far right that corresponds to the port you want to configure. To create a new entry, click the Add button, a separate window will appear. Figure 8- 5. SNMP User Table Configuration window To display the current SNMP User Table Configuration, click the User Name in the first column of the SNMP User Table window. Figure 8- 6.
D-Link DES-3250TG Standalone Layer 2 Switch User Name Type in the new SNMP V3 user name or community string for V1 or V2. This can be any alphanumeric name of up to 32 characters that will identify the new SNMP user. Group Name Type in the new SNMP V3 group name. Again, this can be any alphanumeric name of up to 32 characters that will identify the SNMP group the new SNMP user will be associated with. SNMP Version From the pull-down menu select: V1 – To specifies that SNMP version 1 will be used.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 8- 7. SNMP View Table window To delete an existing SNMP View Table entry, click the selection button in the Delete column on the far right that corresponds to the port you want to configure. To create a new entry, click the Add button, a separate window will appear. Figure 8- 8. SNMP View Table Configuration window Parameter Description View Name Type an alphanumeric string of up to 32 characters.
D-Link DES-3250TG Standalone Layer 2 Switch manager can access. SNMP Group Table The SNMP Group created with this table maps SNMP users (identified in the SNMP User Table) to the views created in the previous menu. Figure 8- 9. SNMP Group Table window To delete an existing entry, click the selection button in the Delete column on the far right that corresponds to the port you want to remove. To create a new entry, click the Add button, a separate window will appear. Figure 8- 10.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 8- 11. SNMP Group Table Display window The following parameters are used in the SNMP Group Table windows: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users. Read View Name This name is used to specify the SNMP group created can request SNMP messages.
D-Link DES-3250TG Standalone Layer 2 Switch SNMP manager. AuthNoPriv − Specifies that authorization will be required, but there will be no encryption of packets sent between the switch and a remote SNMP manager. AuthPriv − Specifies that authorization will be required, and that packets sent between the switch and a remote SNMP manger will be encrypted. SNMP Community Table Use this table to create an SNMP community string to define the relationship between the SNMP manager and an agent.
D-Link DES-3250TG Standalone Layer 2 Switch managers access to MIB objects in the switch’s SNMP agent. View Name Type an alphanumeric string of up to 32 characters that is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the switch. The view name must exist in the SNMP View Table.
D-Link DES-3250TG Standalone Layer 2 Switch Parameter Description Host IP Address Type the IP address of the remote management station that will serve as the SNMP host for the switch. SNMP Version From the pull-down menu select: V1 – To specifies that SNMP version 1 will be used. V2c – To specify that SNMP version 2 will be used. V3 – To specify that the SNMP version 3 will be used. Community String/SNMPv3 User Name Type in the community string or SNMP V3 user name as appropriate.
D-Link DES-3250TG Standalone Layer 2 Switch Section 9 Monitoring CPU Utilization Port Utilization Packets Errors Size MAC Address ARP Table IGMP Snooping Group IGMP Snooping Forwarding VLAN Status Router Port Port Access Control The DES-3250TG provides extensive network monitoring capabilities that can be viewed under the Monitoring menu.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 1 CPU Utilization window To select a port to view these statistics for, first select the Switch in the switch stack by using the Unit pull-down menu. To view the CPU utilization by port, use the real-time graphic of the Switch and/or switch stack at the top of the web page by simply clicking on a port. Click Apply to implement the configured settings. The window will automatically refresh with new updated statistics.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 2. Utilization window Click the port on the front panel display that you want to display port utilization. The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 20. Show/Hide Check to display Utilization.
D-Link DES-3250TG Standalone Layer 2 Switch Packets The Web Manager allows various packet statistics to be viewed as either a line graph or a table. Six windows are offered. Received (RX) Figure 9- 3.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 4. Rx Packets Analysis window (table for Bytes and Packets) The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 20. Bytes Counts the number of bytes received on the port.
D-Link DES-3250TG Standalone Layer 2 Switch View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. UMB-cast (RX) Figure 9- 5.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 6. Rx Packets Analysis window (table for Unicast, Multicast, and Broadcast Packets) The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 20.
D-Link DES-3250TG Standalone Layer 2 Switch View Table Clicking this button instructs the Switch to display a table rather than a line graph. View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. Transmitted (TX) Figure 9- 7.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 8. Tx Packets Analysis window (table for Bytes and Packets) The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 20. Bytes Counts the number of bytes successfully sent from the port.
D-Link DES-3250TG Standalone Layer 2 Switch View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. Errors The Web Manager allows port error statistics compiled by the Switch’s management agent to be viewed as either a line graph or a table. Four windows are offered. Received (RX) Figure 9- 9.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 10. Rx Error Analysis window (table) The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 20. CrcError Counts otherwise valid frames that did not end on a byte (octet) boundary.
D-Link DES-3250TG Standalone Layer 2 Switch Jabber The number of frames with lengths more than the MAX_PKT_LEN bytes. Internally, MAX_PKT_LEN is equal to 1522. Drop The number of frames that are dropped by this port since the last Switch reboot. Show/Hide Check whether or not to display CrcError, UnderSize, OverSize, Fragment, Jabber, and Drop errors. Clear Clicking this button clears all statistics counters on this window.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 12. Tx Error Analysis window (table) The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 20.
D-Link DES-3250TG Standalone Layer 2 Switch View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. Size Packet Size The Web Manager allows packets received by the Switch, arranged in six groups, to be viewed as either a line graph or a table. Two windows are offered. Figure 9- 13.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 14. Rx Size Analysis window (table) The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, where “s” stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polled between 20 and 200. The default value is 20.
D-Link DES-3250TG Standalone Layer 2 Switch framing bits but including FCS octets). 512-1023 The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets). 1024-1518 The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 15. MAC Address Table window The following fields can be set: Parameter Description VLAN ID Enter a VLAN ID for the forwarding table to be browsed by. MAC Address Enter a MAC address for the forwarding table to be browsed by.
D-Link DES-3250TG Standalone Layer 2 Switch Port Enter a port number for the forwarding table to be browsed by. Find Allows the user to move to a sector of the database corresponding to a user defined port, VLAN, or MAC address. VID The VLAN ID of the VLAN the port is a member of. MAC Address The MAC address entered into the address table. Port The port that the MAC address above corresponds to. Learned How the switch discovered the MAC address.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 16. ARP Table window To search a specific ARP entry, enter an interface name into the Interface Name or an IP address and click Find. IGMP Snooping Group This allows the switch’s IGMP Snooping table to be viewed. IGMP Snooping allows the switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the switch. The number of IGMP reports that were snooped is displayed in the Reports field.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 17. IGMP Snooping Table window The following fields can be set or are displayed. Parameter Description Multicast Group The IP address of the multicast group. MAC Address The MAC address of the multicast group. Reports The total number of reports received for this group.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 18. IGMP Snooping Forwarding Table window Enter the VLAN ID for the desired IGMP Snooping Forwarding Table and click Search. VLAN Status To view the VLAN Status, click VLAN Status on the Monitoring menu: Figure 9- 19.
D-Link DES-3250TG Standalone Layer 2 Switch This read-only window displays information about the switch’s current VLAN configuration. Router Port This displays which of the switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port in the first two rows of the Router Port window. A router port that is dynamically configured by the switch is located in the third and fourth rows.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 9- 21.
D-Link DES-3250TG Standalone Layer 2 Switch Section 10 Maintenance TFTP Services Switch History Ping Test Save Changes Reboot Services Logout TFTP Utilities Trivial File Transfer Protocol (TFTP) services allow the switch firmware to be upgraded by transferring a new firmware file from a TFTP server to the switch. A configuration file can also be loaded into the switch from a TFTP server, switch settings can be saved to the TFTP server, and a history log can be uploaded from the switch to the TFTP server.
D-Link DES-3250TG Standalone Layer 2 Switch Download Settings from TFTP Server To download a configuration file for the switch’s, click on the Maintenance folder and then the TFTP Services folder and finally click on the Download Settings from TFTP Server link: Figure 10- 2. Download Settings from TFTP Server window Enter the IP address of the TFTP server and specify the location of the switch configuration file on the TFTP server and click Start to initiate the file transfer.
D-Link DES-3250TG Standalone Layer 2 Switch Enter the IP address of the TFTP server and the path and filename for the history log on the TFTP server. Click Start to initiate the file transfer. Switch History This allows the Switch History log to be viewed. The switch records all traps, in sequence, that identify events on the switch. The time since the last cold start of the switch is also recorded. To view the switch history log, click the Switch History link on the Maintenance menu: Figure 10- 5.
D-Link DES-3250TG Standalone Layer 2 Switch Figure 10- 6. Ping Test window The Infinite times checkbox, in the Repeat Pinging for section, tells PING to keep sending data packets to the specified IP address until the program is stopped. Save Changes The DES-3250TG has two levels of memory, normal RAM and non-volatile or NV-RAM. To retain any configuration changes permanently, highlight Save Changes on the Maintenance menu.
D-Link DES-3250TG Standalone Layer 2 Switch Reboot Figure 10- 8. Reboot window Reset Figure 10- 9. Reset window Reset System Figure 10- 10.
D-Link DES-3250TG Standalone Layer 2 Switch Reset Config Figure 10- 11. Reset Config window Logout Figure 10- 12. Logout Web Setup window Click Apply if you want to logout of the Web configuration program and return to the main page. Appendix A Technical Specifications General Standards: IEEE 802.
D-Link DES-3250TG Standalone Layer 2 Switch General IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3z 1000BASE-SX Gigabit Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1 P/Q VLAN IEEE 802.3x Full-duplex Flow Control ANSI/IEEE 802.3 Nway auto-negotiation Protocols: Data Transfer Rates: Ethernet Fast Ethernet Gigabit Ethernet Topology: Network Cables: 10BASE-T: CSMA/CD Half-duplex Full-duplex 10 Mbps 20Mbps 100Mbps 200Mbps n/a 2000Mbps Star 2-pair UTP Cat.
D-Link DES-3250TG Standalone Layer 2 Switch Physical and Environmental Weight: 4.4 kg EMI: FCC Class A, CE Class A, C-Tick, VCCI Class A Safety: CSA International Performance Transmission Method: Store-and-forward RAM Buffer: 64M Bytes per device Filtering Address Table: 8K MAC address per device Packet Filtering/ Forwarding Rate: Full-wire speed for all connections.
D-Link DES-3250TG Standalone Layer 2 Switch Appendix B Understanding and Troubleshooting the Spanning Tree Protocol When the spanning-tree algorithm determines a port should be transitioned to the forwarding state, the following occurs: • The port is put into the listening state where it receives BPDUs and passes them to the switch’s CPU. BPDU packets from the CPU are processed.
Listening State The listening state is the first transition for a port from the blocking state. Listening is an opportunity for the switch to receive BPDUs that may tell the switch that the port should not continue to transition to the forwarding state, but should return to the blocking state (that is, a different port is a better choice). There is no address learning or packet forwarding from a port in the listening state.
D-Link DES-3250TG Standalone Layer 2 Switch Learning State A port in the learning state prepares to participate in frame forwarding. The port enters the learning state from the listening state. A port in the learning state does the following: • Discards frames received from the network segment to which it is attached. • Discards packets sent from another port on the switch for forwarding. • Adds addresses to its forwarding database. • Receives BPDUs and directs them to the CPU.
Forwarding State A port in the forwarding state forwards packets. The port enters the forwarding state from the learning state when the forward delay timer expires. A port in the forwarding state does the following: • Forwards packets received from the network segment to which it is attached. • Forwards packets sent from another port on the switch for forwarding. • Incorporates station location information into its address database. • Receives BPDUs and directs them to the system CPU.
D-Link DES-3250TG Standalone Layer 2 Switch Disabled State A port in the disabled state does not participate in frame forwarding or STP. A port in the disabled state is virtually nonoperational. A disabled port does the following: • Discards packets received from the network segment to which it is attached. • Discards packets sent from another port on the switch for forwarding. • Does not add addresses to its forwarding database. • Receives BPDUs, but does not direct them to the system CPU.
Troubleshooting STP Spanning Tree Protocol Failure A failure in the STA generally leads to a bridging loop. A bridging loop in an STP environment comes from a port that should be in the blocking state, but is forwarding packets.
D-Link DES-3250TG Standalone Layer 2 Switch In this example, B has been elected as the designated bridge and port 2 on C is in the blocking state. The election of B as the designated bridge is determined by the exchange of BPDUs between B and C. B had a better BPDU than C. B continues sending BPDUs advertising its superiority over the other bridges on this LAN.
In this example, port 2 on B can receive but not transmit packets. Port 2 on C should be in the blocking state, but since it can no longer receive BPDUs from port 2 on B, it will transition to the forwarding state. If the failure exists at boot, STP will not converge and rebooting the bridges will have no effect. (Note: Rebooting would help temporarily in the previous example).
D-Link DES-3250TG Standalone Layer 2 Switch The priority for most cases is to restore connectivity as soon as possible. The simplest remedy is to manually disable all of the ports that provide redundant links. Disabling ports one at a time, and then checking for a restoration of the user’s connectivity will identify the link that is causing the problem, if time allows. Connectivity will be restored immediately after disabling a data loop.
Warranty and Registration FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this manual, may cause harmful interference to radio communications.
Warranty and Registration Information (All countries and regions excluding USA) Wichtige Sicherheitshinweise 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. Bitte lesen Sie sich diese Hinweise sorgfältig durch. Heben Sie diese Anleitung für den spätern Gebrauch auf. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Vervenden Sie keine Flüssig- oder Aerosolreiniger. Am besten dient ein angefeuchtetes Tuch zur Reinigung.
WARRANTIES EXCLUSIVE IF THE D-LINK PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, THE CUSTOMER'S SOLE REMEDY SHALL BE, AT D-LINK'S OPTION, REPAIR OR REPLACEMENT. THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES, EXPRESSED OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
Subject to the terms and conditions set forth herein, D-Link Systems, Inc. (“D-Link”) provides this Limited Warranty: Only to the person or entity that originally purchased the product from D-Link or its authorized reseller or distributor, and Only for products purchased and delivered within the fifty states of the United States, the District of Columbia, U.S. Possessions or Protectorates, U.S. Military Installations, or addresses with an APO or FPO.
Trademarks: D-Link is a registered trademark of D-Link Systems, Inc. Other trademarks or registered trademarks are the property of their respective owners. Copyright Statement: No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems, Inc.
Product Registration: Register online your D-Link product at http://support.dlink.com/register/ Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights.
Copyright 2005 D-Link Corporation. Contents subject to change without prior notice. D-Link is a registered trademark of D-Link Corporation/ D-Link Systems Inc. All other trademarks belong to their respective proprietors.
Edgware Road Colindale London NW9 5 AB United Kingdom Telephone: +44-020-8731-5555 Facsimile: +44-020-8731-5511 www.dlink.co.
D-Link Europe Limited Produktgarantie Allgemeine Bedingungen Die hierin beschriebene eingeschränkte Garantie wird durch D-LINK (Europe) Ltd. gewährt (im Folgenden: „D-LINK“). Diese eingeschränkte Garantie setzt voraus, dass der Kauf des Produkts nachgewiesen wird. Auf Verlangen von D-LINK muss auch dieser Garantieschein vorgelegt werden. AUSSER IN DEM HIER AUSDRÜCKLICH BESCHRIEBENEN UMFANG GEWÄHRT D-LINK KEINE WEITEREN GARANTIEN, WEDER AUSDRÜCKLICH NOCH STILLSCHWEIGEND.
D-Link Europe a limité la garantie des produits Conditions Générales La Garantie Produit Limitée énoncée ci-dessous émane de D-LINK (Europe) Ltd. (ci-après « D-LINK »). Cette Garantie Produit Limitée n’est valable que sur présentation de la preuve d’achat. D-LINK peut également exiger la présentation du présent bon de garantie.
Garantía limitada del producto D-LINK Europa Condiciones generales Esta garantía la ofrece D-LINK (Europe) Ltd. (en este documento, "D-LINK"). La garantía limitada del producto sólo es válida si se acompaña del comprobante de la compra. También deberá presentarse la tarjeta de garantía si D-LINK lo solicita.
D-Link Europe Termini di Garanzia dei Prodotti Generalità La presente Garanzia viene fornita da D-LINK (Europe) Ltd. (di seguito denominata "D-LINK"). Essa viene riconosciuta solo se accompagnata dalla prova di acquisto. D-LINK può richiedere anche l’esibizione della presente cartolina di garanzia.
D-Link International Offices U.S.A 17595 Mt. Herrmann Street Fountain Valley, CA. 92708 TEL: 714-885-6000 Fax 866-743-4905 URL: www.dlink.com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www.dlink.ca Europe (U. K.) 4th Floor, Merit House Edgware Road, Colindale London NW9 5AB U.K. TEL: 44-20-8731-5555 FAX: 44-20-8731-5511 URL: www.dlink.co.
Registration Card (All Countries and Regions excluding USA) Print, type or use block letters. Your name: Mr./Ms______________________________________________________________________ Organization: ________________________________________Dept.
