System information

ManualsBrandsD-Link ManualsNetwork CardDSA-3200

Summary of content (321 pages)

PAGE 1
PAGE 2
_____________________________________________ Information in this document is subject to change without notice. © 2011 D-Link Corporation. All rights reserved. Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation.
PAGE 3
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Table of Contents Intended Readers ........................................................................................................................................................................... xi Typographical Conventions ...........................................................................................................................................................................
PAGE 4
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide CLI Paging Settings ..................................................................................................................................................................... 19 Firmware Information .................................................................................................................................................................. 20 Dual Configuration Settings ...................
PAGE 5
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Voice VLAN Global Settings .................................................................................................................................................................. 64 Voice VLAN Port Settings ...................................................................................................................................................................... 65 Voice VLAN OUI Settings ...........
PAGE 6
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port Trunking ................................................................................................................................................................................................ 98 LACP Port Settings .....................................................................................................................................................................................
PAGE 7
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IMPB Entry Settings ................................................................................................................................................................................... 135 MAC Block List ..........................................................................................................................................................................................
PAGE 8
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Login Method Lists Settings ....................................................................................................................................................................... 168 Enable Method Lists Settings......................................................................................................................................................................
PAGE 9
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP Server Global Settings ..................................................................................................................................................................... 235 DHCP Server Exclude Address Settings ..................................................................................................................................................... 235 DHCP Server Pool Settings ........
PAGE 10
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Browse MLD Router Port .......................................................................................................................................................... 267 Browse Session Table ................................................................................................................................................................ 267 IGMP Snooping Group ...................................
PAGE 11
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Intended Readers The DGS-3200 Series Web UI Reference Guide contains information for setup and management of the Switch. This manual is intended for network managers familiar with network management concepts and terminology. Typographical Conventions Convention Description [] In a command line, square brackets indicate an optional entry.
PAGE 12
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Safety Cautions Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. Throughout this safety section, the caution icon ( followed. ) is used to indicate cautions and precautions that need to be reviewed and To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment observe the following precautions.
PAGE 13
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide • Do not modify power cables or plugs. Consult a licensed electrician or your power company for site modifications. Always follow your local/national wiring rules. • When connecting or disconnecting power to hot-pluggable power supplies, if offered with your system, observe the following guidelines: • • Install the power supply before connecting the power cable to the power supply.
PAGE 14
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide CAUTION: The system chassis must be positively grounded to the rack cabinet frame. Do not attempt to connect power to the system until grounding cables are connected. Completed power and safety ground wiring must be inspected by a qualified electrical inspector. An energy hazard will exist if the safety ground cable is omitted or disconnected.
PAGE 15
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 1 Web-based Switch Configuration Introduction Logging onto the Web Manager Web-Based User Interface Introduction All software functions of the Switch can be managed, configured, and monitored via the embedded web-based (HTML) interface. Manage the Switch from remote stations anywhere on the network through a standard browser, such as Internet Explorer 5.5 or later, Netscape 8.0 or later, Firefox 2.
PAGE 16
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Web-based User Interface The user interface provides access to various Switch configuration and management windows, allows the user to view performance statistics, and permits graphical monitoring of the system status. Areas of the User Interface The figure below shows the user interface. Three distinct areas divide the user interface, as described in the table. Area 2 Area 1 Area 3 Figure 1 - 2.
PAGE 17
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Web Pages When connecting to the management mode of the Switch with a web browser, a login screen is displayed. Enter a user name and password to access the Switch's management mode. Below is a list of the main folders available in the Web interface: Configuration - In this section the user will be able to configure features regarding the Switch’s configuration.
PAGE 18
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 2 Configuration Device Information System Information Serial Port Settings IP Address Port Configuration Static ARP Settings Gratuitous ARP User Accounts System Log Configuration System Severity Settings MAC Address Aging Time Web Settings Telnet Settings Password Encryption CLI Paging Settings Firmware Information Power Saving MAC Notification Settings SNMP Settings CPU Filter L3 Control Packet Settings Singl
PAGE 19
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Device Information This window contains the main settings for all major functions for the Switch. It appears automatically when you log on to the Switch. To return to the Device Information window after viewing other windows, click the DGS-3200-10/DGS-3200-16/ DGS-3200-24 folder.
PAGE 20
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click Apply to implement changes made. Serial Port Settings The user can adjust the Baud Rate and the Auto Logout values. To view the following window, click Configuration > Serial Port Settings: Figure 2 - 3. Serial Port Settings window The fields that can be configured are described below: Parameter Description Baud Rate This field specifies the baud rate for the serial port on the Switch.
PAGE 21
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 4. If the Switch has no previously configured VLANs, the user can use the Management VLAN Name entitled “default”. This default Management VLAN contains all of the Switch ports as members. If the Switch has previously configured VLANs, the user will need to enter the VLAN ID of the VLAN that contains the port connected to the management station that will access the Switch.
PAGE 22
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The IP address for the Switch must be set before the Web-based manager can manage the switch. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
PAGE 23
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 6. Port Detail Information window Click the Refresh button to update the information. Port Settings This windows is used to configure and display the switch ports settings.
PAGE 24
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 7. Port Settings window The following parameters may be configured or viewed: Parameter Description From Port / To Port Use the drop-down menus to select the ports to be configured. State Use the drop-down menu to enable or disable a given port or group of ports. Speed/Duplex Toggle the Speed/Duplex field to either select the speed and duplex/half-duplex state of the port.
PAGE 25
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Flow Control Displays the flow control scheme used for the various port configurations. Ports configured for full-duplex use 802.3x flow control, half-duplex ports use backpressure flow config, and Auto ports use an automatic selection of the two. The default is Disabled. Address Learning Enable or disable MAC address learning for the selected ports.
PAGE 26
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port Error Disabled The following window will display the information about ports that have had their connection status disabled, for reasons such as storm control or link down status. To view the following window, click Configuration > Port Configuration > Port Error Disabled: Figure 2 - 9.
PAGE 27
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 11. Static ARP Settings window The following parameters may be configured or viewed: Parameter Description ARP Aging Time (0-65535) The ARP entry age-out time, in seconds. The default is 20 minutes. IP Address The IP address of the ARP entry. MAC Address The MAC address of the ARP entry. After entering a global ARP Aging Time in seconds, click Apply to allow it to take effect.
PAGE 28
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 13. Gratuitous ARP Settings window The fields that can be configured are described below: Parameter Description Trap Use the drop-down menu to enable or disable the trap option. By default the trap is disabled. Log Use the drop-down menu to enable or disable the logging option. By default the event log is enabled. Interface Name Enter the interface name of the Layer 3 interface.
PAGE 29
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 15. User Accounts window (Edit) Modify or delete an existing user account in the table at the bottom of the window. To delete the user account, click the Delete button. To change the password, click the Edit button next to the entry in the table at the bottom of the window.
PAGE 30
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 16. Command Logging Settings window The following parameters may be configured or viewed: Parameter Description Command Logging State Use the radio buttons to enable or disable the function. Click the Apply button to accept the changes made. NOTE: When the switch is under the booting or executing downloaded configuration procedure, all configuration commands will not be logged.
PAGE 31
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 18. System Log Host window The following parameters may be configured or viewed: Parameter Description Host ID Syslog server settings index (1 to 4). Host IP Address The Ipv4 address of the Syslog server. UDP Port (514 or 6000-65535) Type the UDP port number used for sending Syslog messages. The default is 514.
PAGE 32
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Severity Name. Select Critical to send only critical events to the Switch’s log or SNMP agent. Choose Warning to send critical and warning events to the Switch’s log or SNMP agent. Select Information to send informational, warning, and critical events to the Switch’s log or SNMP agent. Click Apply to implement the new System Severity Settings.
PAGE 33
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Telnet Settings Users can configure Telnet Settings on the Switch. To view the following window, click Configuration > Telnet Settings: Figure 2 – 22. Telnet Settings window The following parameters may be configured or viewed: Parameter Description Telnet Status Telnet configuration is Enabled by default. If you do not want to allow configuration of the system through Telnet choose Disabled.
PAGE 34
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameter may be configured or viewed: Parameter Description CLI Paging Status Command Line Interface paging stops each page at the end of the console. This allows you to stop the scrolling of multiple pages of text beyond the limits of the console. CLI Paging is Enabled by default. To disable it, click the Disabled radio button. Click Apply to set the CLI Paging setting.
PAGE 35
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Version States the firmware version. Size States the size of the corresponding firmware, in bytes. Update Time States the specific time the firmware version was downloaded to the Switch. From States the IP address of the origin of the firmware. There are six ways firmware may be downloaded to the Switch. Boot-up files are denoted by an asterisk (*) next to the file.
PAGE 36
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 27. Dual Configuration Settings window (DGS-3200-10 and DGS-3200-16 models) Figure 2 - 28. Dual Configuration Settings window (DGS-3200-24 model) The following parameters may be configured or viewed: Parameter Description ID States the configuation ID number of the configuaration in the Switch’s memory. The Switch can store 2 configurations for use.
PAGE 37
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Console – If the IP address has the word Console next to it, it denotes a configuration upgrade through the Console Serial Port (RS-232). Telnet – If the IP address has the word Telnet next to it, it denotes a configuration upgrade through Telnet. SNMP – If the IP address has the word SNMP next to it, it denotes a configuration upgrade through the Simple Network Management Protocol (SNMP).
PAGE 38
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 – 29. Port LED State Settings window The following parameter may be configured: Parameter Description Port LED State Click the radio buttons to enable or disable the port LED state. Click Apply to save the settings. Power Saving Settings This window allows the user to implement the Switch’s built-in power saving features and set the schedule to enforce the settings.
PAGE 39
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port State Power Saving Mode Hibernation State Click the radio buttons to enable or disable hibernation state. Action Use the drop down menu to add or delete the schedule. Time Range Name Specify the name of the schedule. Click Apply to set the password encryption. Click the Clear Time Range to remove all the entries.
PAGE 40
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click the Apply button to save the settings. Click the Clear Time Range to remove all the entries. MAC Notification Settings MAC Notification is used to monitor MAC addresses learned and entered into the forwarding database. MAC Notification Global Settings This window allows you to globally set MAC notification on the Switch.
PAGE 41
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 34. MAC Notification Port Settings window To change MAC notification settings for a port or group of ports on the Switch, configure the following parameters: Parameter Description From Port Select a beginning port to enable for MAC notification using the drop-down menu. To Port Select an ending port to enable for MAC notification using the drop-down menu.
PAGE 42
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user on that list can do as an SNMP manager. The Switch allows groups of users to be listed and configured with a shared set of privileges.
PAGE 43
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 36. SNMP Linkchange Trap Settings window The following parameters may be configured: Parameter Description From Port / To Port Use the drop-down menu to select the ports to be configured. State Use the drop-down menu to enable or disable the SNMP linkchange traps. Click Apply to implement the changes.
PAGE 44
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 37. SNMP View Table window The following parameters can be set: Parameter Description View Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP view being created. Subtree OID Type the Object Identifier (OID) Subtree for the view. The OID identifies an object tree (MIB tree) that will be included or excluded from access by an SNMP manager.
PAGE 45
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 38. SNMP Group Table window The following parameters can be set: Parameter Description Group Name Type an alphanumeric string of up to 32 characters. This is used to identify the new SNMP group of SNMP users. Read View Name This name is used to specify the SNMP group created can request SNMP messages.
PAGE 46
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 39. SNMP User Table window The following parameters can be configured: Parameter Description User Name An alphanumeric string of up to 32 characters. This is used to identify the SNMP users. Group Name This name is used to specify the SNMP group created can request SNMP messages. SNMP Version V3 – Indicates that SNMP version 3 is in use.
PAGE 47
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 40. SNMP Community Table window The following parameters can be set: Parameter Description Community Name Type an alphanumeric string of up to 32 characters that is used to identify members of an SNMP community. This string is used like a password to give remote SNMP managers access to MIB objects in the Switch’s SNMP agent.
PAGE 48
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide security level. V3-AuthNoPriv – To specify that the SNMP version 3 will be used, with an Auth-NoPriv security level. V3-AuthPriv – To specify that the SNMP version 3 will be used, with an Auth-Priv security level. Community String / SNMP V3 User Name Type in the community string or SNMP V3 user name as appropriate.
PAGE 49
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 43. SNMP Engine ID window The following parameter can be configured: Parameter Description Engine ID The SNMP engine ID displays the identification of the SNMP engine on the Switch. The default value is suggested in RFC2271. The very first bit is 1, and the first four octets are set to the binary equivalent of the agent’s SNMP management private enterprise number as assigned by IANA (D-Link is 171).
PAGE 50
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide CPU Filter L3 Control Packet Settings Users can discard and display Layer 3 control packets sent to the CPU from specific ports. To view the following window, click Configuration > CPU Filter L3 Control Packet Settings: Figure 2 - 46.
PAGE 51
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide • All switches in a particular SIM group must be in the same IP subnet (broadcast domain). Members of a SIM group cannot cross a router. • A SIM group accepts up to 32 switches (numbered 1-32), not including the Commander Switch (numbered 0). • There is no limit to the number of SIM groups in the same IP subnet (broadcast domain); however a single switch can only belong to one group.
PAGE 52
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 4. The Commander Switch (CS) now has the capability to automatically rediscover member switches that have left the SIM group, either through a reboot or web malfunction. This feature is accomplished through the use of Discover packets and Maintenance packets that previously set SIM members will emit after a reboot.
PAGE 53
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide user may join other switches to this Switch, over Ethernet, to be part of its SIM group. Choosing this option will also enable the Switch to be configured for SIM. Group Name Enter a Group Name in this textbox. This is optional. Discovery Interval (30-90) The user may set the discovery protocol interval, in seconds that the Switch will send out discovery packets.
PAGE 54
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide If no device is configured by the name, it will be given the name default and tagged with the last six digits of the MAC Address to identify it. Local Port Displays the number of the physical port on the CS that the MS or CaS is connected to. The CS will have no entry in this field. Speed Displays the connection speed between the CS and the MS or CaS.
PAGE 55
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Layer 3 member switch Member switch of other group Layer 2 candidate switch Layer 3 candidate switch Unknown device Non-SIM devices Tool Tips In the Topology view window, the mouse plays an important role in configuration and in viewing device information. Setting the mouse cursor over a specific device in the topology window (tool tip) will display the same information about a specific device as the Tree view does.
PAGE 56
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 51. Port Speed Utilizing the Tool Tip Right-Click Right-clicking on a device will allow the user to perform various functions, depending on the role of the Switch in the SIM group and the icon associated with it. Group Icon Figure 2 - 52. Right-Clicking a Group Icon The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon.
PAGE 57
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 2 - 53. Property window Parameter Description Device Name This field will display the Device Name of the switches in the SIM group configured by the user. If no Device Name is configured by the name, it will be given the name default and tagged with the last six digits of the MAC Address to identify it. Module Name Displays the full module name of the switch that was right-clicked.
PAGE 58
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Member Switch Icon Figure 2 - 55. Right-Clicking a Member icon The following options may appear for the user to configure: • Collapse – To collapse the group that will be represented by a single icon. • Expand – To expand the SIM group, in detail. • Remove from group – Remove a member from a group. • Configure – Launch the web management to configure the Switch.
PAGE 59
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Menu Bar The Single IP Management window contains a menu bar for device configurations, as seen below. Figure 2 - 58. Menu Bar of the Topology View The five menus on the menu bar are as follows. File • Print Setup – Will view the image to be printed. • Print Topology – Will print the topology map. • Preference – Will set display properties, such as polling interval, and the views to open at SIM startup.
PAGE 60
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Firmware Upgrade The Commander Switch may be used for firmware upgrades of member switches. Member Switches will be listed in the table and will be specified by Port (port on the CS where the MS resides), MAC Address, Model Name and Version. To specify a certain Switch for firmware download, click its corresponding check box under the Port heading.
PAGE 61
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide SD Card FS Settings (DGS-3200-24 Only) Users can plug an SD flash card into a front slot on the DGS-3200-24 (DGS-3200-10 and DGS-3200-16 do not support this feature).
PAGE 62
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click this button to format the new SD Flash card. Copy to Click this button to copy a file to another location. Move to Click this button to move a file to another location. Rename Click this button to rename the corresponding file or folder. Delete Click this button to delete the corresponding file or folder.
PAGE 63
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameter may be configured: Parameter Description File Name The filename of the configuration on file system. Increment If this option is specified, the current configuration will not be reset before executing the configuration. Reset If this option is specified, the current configuration will be reset before executing the configuration.
PAGE 64
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 3 L2 Features VLAN Layer 2 Protocol Tunneling Settings Egress Filter Settings L2 Multicast Control Multicast Filtering Port Mirroring Spanning Tree Link Aggregation Forwarding & Filtering LLDP NLB FDB Settings VLAN 802.1Q VLAN Understanding IEEE 802.1p Priority Priority tagging is a function defined by the IEEE 802.
PAGE 65
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide VLANs can enhance performance by conserving bandwidth, and improve security by limiting traffic to specific domains. A VLAN is a collection of end nodes grouped by logic instead of physical location. End nodes that frequently communicate with each other are assigned to the same VLAN, regardless of where they are physically on the network.
PAGE 66
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 1. IEEE 802.1Q Packet Forwarding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additional octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the EtherType field. When a packet’s EtherType field is equal to 0x8100, the packet carries the IEEE 802.1Q/802.1p tag.
PAGE 67
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The EtherType and VLAN ID are inserted after the MAC source address, but before the original EtherType/Length or Logical Link Control. Because the packet is now a bit longer than it was originally, the Cyclic Redundancy Check (CRC) must be recalculated. Figure 3 - 3. Adding an IEEE 802.1Q Tag Port VLAN ID Packets that are tagged (are carrying the 802.1Q VID information) can be transmitted from one 802.
PAGE 68
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide intact. Other 802.1Q compliant devices on the network to make packet-forwarding decisions can then use the VLAN information in the tag. Ports with untagging enabled will strip the 802.1Q tag from all packets that flow into and out of those ports. If the packet doesn’t have an 802.1Q VLAN tag, the port will not alter the packet. Thus, all packets received by and forwarded by an untagging port will have no 802.
PAGE 69
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide VLAN Segmentation Take for example a packet that is transmitted by a machine on Port 1 that is a member of VLAN 2. If the destination lies on another port (found through a normal forwarding table lookup), the Switch then looks to see if the other port (Port 10) is a member of VLAN 2 (and can therefore receive VLAN 2 packets).
PAGE 70
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 5. Add/Edit VLAN tab of the 802.1Q VLAN window The following fields can then be set in the Add/Edit VLAN tab: Parameter Description VID (VLAN ID) Allows the entry of a VLAN ID or displays the VLAN ID of an existing VLAN in the Add/Edit VLAN tab. VLANs can be identified by either the VID or the VLAN name.
PAGE 71
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 6. Find VLAN tab of the 802.1Q VLAN window To create a VLAN Batch entry click the VLAN Batch Settings tab, as shown below. Figure 3 - 7. VLAN Batch Settings tab of the 802.1Q VLAN window The following fields can be set in the VLAN Batch Settings windows: Parameter Description VID List (e.g.: 2-5) Enter a VLAN ID List that can be added, deleted or configured.
PAGE 72
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Untagged Specifies the port as 802.1Q untagged. Use the drop-down menu to designate the port as untagged. Forbidden Specifies the port as not being a member of the VLAN and that the port is forbidden from becoming a member of the VLAN dynamically. Use the drop-down menu to designate the port as forbidden. Click Apply to implement changes made. NOTE: The Switch supports up to 4k static VLAN entries. 802.
PAGE 73
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide bit (2-octet) hex value. For IEEE802.3 LLC, this is the 2-octet IEEE 802.2 Link Service Access Point (LSAP) pair. The first octet is for Destination Service Access Point (DSAP) and the second octet is for Source. Click Add to make a new entry. Click Delete All to remove an entry. Click Delete Settings to remove the configuration from the specific entry. Click Delte Group to remove the specific entry from the group.
PAGE 74
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Search Port List This function allows the user to search all previously configured port list settings and display them on the lower half of the table. Click Add to create a new entry. To search for a port list enter the port number you wish to view and click Find.
PAGE 75
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Ingress Checking This drop-down menu allows the user to enable the port to compare the VID tag of an incoming packet with the PVID number assigned to the port. If the two are different, the port filters (drops) the packet. Disabled disables ingress filtering. Ingress checking is Enabled by default. Acceptable Frame Type This field denotes the type of frame that will be accepted by the port.
PAGE 76
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 12. Private VLAN domain The ports in a private VLAN can be one of the following three types: Port Type Description Promiscuous A promiscuous port is a port that is a member of a primary VLAN that can communicate with all interfaces, including ports that have been configured as community and isolated ports on secondary VLANs that are associated with the primary VLAN.
PAGE 77
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 13. Private VLAN Settings window The following parameters can be configured: Parameter Description VLAN Name Click the radio button and enter the name of the private VLAN. VLAN ID (2-4094) Specify the VLAN ID of the Private VLAN. VLAN List Specify a list of VLAN IDs. Click Add to create the new Private VLAN entry. Click Find to search for the specific information entered.
PAGE 78
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Community- A Community VLAN is a secondary VLAN that is associated with a group of ports that connects to a certain "community" of end devices with mutual trust relationships. There can be multiple distinct community VLANs in a Private VLAN domain. Secondary VLAN Name Click the radio button and enter the secondary VLAN name. Secondary VLAN List Click the radio button and enter a list of VLAN IDs.
PAGE 79
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Priority Specify the priority of the voice VLAN. Aging Time (1-65535) Specify the aging time between 1 and 65535 minutes. Log State Use the drop-down menu to enable the voice VLAN log state. Click Apply to implement the changes made. Voice VLAN Port Settings This window is used to configure the voice VLAN ports.
PAGE 80
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide • • forward them to port’s PVID VLAN. When the port is working in auto untagged mode, and the port captures a voice device through the device’s OUI, it will join the voice VLAN as an untagged member automatically. When the voice device sends voice VLAN, tagged packets, the switch will change its priority.
PAGE 81
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 19. Voice VLAN Device window Voice VLAN LLDP-MED Voice Device This window is used to show the voice devices being discovered by the LLDP-MED. To view the following window, click L2 Features > VLAN > Voice VLAN > Voice VLAN LLDP-MED Voice Device: Figure 3 - 20.
PAGE 82
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description VLAN Trunk Global State Use the radio buttons to Enable or Disable the VLAN trunking global state. Ports The ports to be configured. Click Apply to implement the changes made. Browse VLAN This window is used to display the VLAN status. To view the following window, click L2 Features > VLAN > Browse VLAN: Figure 3 - 22.
PAGE 83
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide From Port / To Port Use the drop-down menus to select a range of ports to be configured. Type Specify the type of the ports. UNI - Specify the ports as UNI ports. NNI - Specify the ports as NNI ports. None - Disable tunnel on it. Tunneled Protocol Specify tunneled protocols on the UNI ports. STP - Specify to use the STP protocol. GVRP - Specify to use the GVRP protocol.
PAGE 84
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IGMP Snooping Internet Group Management Protocol (IGMP) snooping allows the Switch to recognize IGMP queries and reports sent between network stations or devices and an IGMP host. When enabled for IGMP snooping, the Switch can open or close a port to a specific device based on IGMP messages passing through the Switch.
PAGE 85
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 26. IGMP Snooping Parameters Settings window The following parameters can be configured: Parameter Description Query Interval (1-65535) This parameter specifies the length of time between sending IGMP Queries. Default= 125. Max Response Time (1-25) This parameter is used to set the maximum amount of time allowed before sending an IGMP response report. Default= 10.
PAGE 86
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 27. IGMP Snooping Router Port Settings window The following parameters can be configured: Parameter Description Static Router Port This section is used to designate a range of ports as being connected to multicast-enabled routers. This will ensure that all packets with such a router as its destination will reach the multicast-enabled router regardless of the protocol.
PAGE 87
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Rate Limit (1-1000) Enter the IGMP snooping rate limit used. By selecting the No Limit check box, the rate limit for the entered port(s) will be ignored. Click the Apply button to accept the changes made. Click the Find button to locate a specific entry based on the information entered. Click the Edit button to re-configure the specific entry.
PAGE 88
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IGMP Router Port This window is used to display which of the Switch’s ports are currently configured as router ports. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S. A router port that is dynamically configured by the Switch is designated by D, while a Forbidden port is designated by F.
PAGE 89
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IGMP Snooping Forwarding Table This page displays the switch’s current IGMP snooping forwarding table. It provides an easy way for user to check the list of ports that the multicast group comes from and specific sources that it will be forwarded to. The packet comes from the source VLAN. They will be forwarded to the forwarding VLAN. The IGMP snooping further restricts the forwarding ports.
PAGE 90
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port List Specify the port number(s) used to find a multicast group. Click the Find button to locate a specific entry based on the information entered. Click View All to see all the entries. Click the Packet Statistics link to view the IGMP Snooping Counter Table. Click the Packet Statistics link to see the following window. Figure 3 - 35.
PAGE 91
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click View All to see all the entries. MLD Snooping MLD Snooping Settings Multicast Listener Discovery (MLD) Snooping is an IPv6 function used similarly to IGMP snooping in IPv4. It is used to discover ports on a VLAN that are requesting multicast data.
PAGE 92
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description MLD Snooping State Click the radio button to enable or disable the MLD snooping state. Max Learned Entry Value (1256) Specify the maximum number of groups that can be learned by the data driven mechanism. VID This is the VLAN ID that, along with the VLAN Name, identifies the VLAN for which to modify the MLD Snooping Settings.
PAGE 93
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Last Member Query Interval (1-25) This parameter is used to set the maximum amount of time between group-specific query messages, including messages that have been sent in response to leave group messages. Data Driven Group Expiry Time (1-65535) Specify the data driven group lifetime in seconds.
PAGE 94
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide enabled routers. This ensures that the forbidden router port will not propagate routing packets out. Dynamic Router Port Displays router ports that have been dynamically configured. Click the Select All button to select all the ports for configuration. Click the Clear All button to unselect all the ports for configuration. Click the Apply button to accept the changes made.
PAGE 95
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 41. MLD Snooping Static Group Settings window The following parameters can be configured: Parameter Description VLAN Name The VLAN name of the multicast group. VID List The VID list of the multicast group. IPv6 Address Enter the IPv6 address. Click the Find button to locate a specific entry based on the information entered. Click the Create button to add a new entry based on the information entered.
PAGE 96
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide MLD Snooping Group This window is used to display MLD Snooping Groups present on the Switch. MLD Snooping is an IPv6 function comparable to IGMP Snooping for IPv4. To view the following window, click L2 Features > L2 Multicast Control > MLD Snooping > MLD Snooping Group: Figure 3 - 44.
PAGE 97
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide VID List The ID of the VLAN for which you want to view MLD snooping forwarding table information. Click the Find button to locate a specific entry based on the information entered. Click View All to see all the entries. MLD Snooping Counter This window is used to display the statistics counter for MLD protocol packets that are received by the switch since MLD Snooping is enabled.
PAGE 98
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 47. Browse MLD Snooping Counter window Click the Clear Counter button to clear all the information displayed in the fields. Click the Refresh button to refresh the display table so that new information will appear. Click the <
PAGE 99
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameters can be configured: Parameter Description Profile Name Enter a name for the IP Multicast Profile. Click the Add button to add a new entry. Click the Find button to locate a specific entry based on the information entered. Click the Delete All button to remove all the entries listed. Click the View All button to display all the existing entries.
PAGE 100
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide VLAN Name Enter the VLAN Name used. VID (2-4094) Enter the VID used. Click the Apply button to accept the changes made for each individual section. Click the Add button to add a new entry based on the information entered. Click the Edit button to configure the IGMP Snooping Multicast VLAN Settings for the specific entry. Click the Delete button to remove the specific entry.
PAGE 101
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameters can be configured: Parameter Description Profile Name Use the drop-down menu to select the IGMP Snooping Multicast VLAN Group Profile name. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry. Click the Show IGMP Snooping Multicast VLAN Entries link to view the IGMP Snooping Multicast VLAN Settings.
PAGE 102
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 55. Multicast Address Group List Settings window The following parameters can be configured: Parameter Description Multicast Address List Enter the multicast address list. Click the Add button to add a new entry based on the information entered. Click the <
PAGE 103
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IPv4 Max Multicast Group Settings Users can configure the ports and VLANs on the switch that will be a part of the maximum filter group, up to a maximum of 1024. To view the following window, click L2 Features > Multicast Filtering > IPv4 Multicast Filtering > IPv4 Multicast Group Settings: Figure 3 - 57.
PAGE 104
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide multicast packet that requires forwarding to a port in the specified VLAN. • Forward Unregistered Groups – This will instruct the Switch to forward a multicast packet whose destination is an unregistered multicast group residing within the range of ports specified above.
PAGE 105
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide NOTE: Target mirror ports cannot be members of a trunking group. Attempting to do so will produce an error message and the configuration will not be set. Spanning Tree This Switch supports three versions of the Spanning Tree Protocol: 802.1D-1998 STP, 802.1D-2004 Rapid STP, and 802.1Q-2005 MSTP. 802.1D-1998 STP will be familiar to most networking professionals. However, since 802.1D-2004 RSTP and 802.
PAGE 106
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port Transition States An essential difference between the three protocols is in the way ports transition to a forwarding state and in the way this transition relates to the role of the port (forwarding or not forwarding) in the topology. MSTP and RSTP combine the transition states disabled, blocking and listening used in 802.1D-1998 and creates a single state Discarding. In either case, ports do not forward packets.
PAGE 107
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide STP Bridge Global Settings Use the STP Status radio buttons to enable or disable STP globally, and use the STP Version drop-down menu to choose the STP method. To view the following windows, click L2 Features > Spanning Tree > STP Bridge Global Settings: Figure 3 - 60. STP Bridge Global Settings window – RSTP (default) Figure 3 - 61. STP Bridge Global Settings window – MSTP Figure 3 - 62.
PAGE 108
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide NOTE: The Bridge Hello Time cannot be longer than the Bridge Max Age. Otherwise, a configuration error will occur.
PAGE 109
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 63. STP Port Settings window It is advisable to define an STP Group to correspond to a VLAN group of ports. The following parameters can be configured: Parameter Description From Port / To Port Use the drop-down menu to select a range of ports to be configured. External Cost (0=Auto) This defines a metric that indicates the relative cost of forwarding packets to the specified port list.
PAGE 110
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Forward BPDU Use the drop-down menu to enable or disable the flooding of BPDU packets when STP is disabled. Edge Choosing the True parameter designates the port as an edge port. Edge ports cannot create loops, however an edge port can lose edge port status if a topology change creates a potential for a loop. An edge port normally should not receive BPDU packets.
PAGE 111
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide STP Instance Settings This window displays MSTIs currently set on the Switch and allows users to change the Priority of the MSTIs. To view the following window, click L2 Features > Spanning Tree > STP Instance Settings: Figure 3 - 65. STP Instance Settings window The window above contains the following information: Parameter Description MSTI ID Enter the MSTI ID in this field.
PAGE 112
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Internal cost represents a quicker transmission. Selecting 0 (zero) for this parameter will set the quickest route automatically and optimally for an interface. Priority Enter a value between 0 and 240 to set the priority for the port interface. A higher priority will designate the interface to forward packets first. A lower number denotes a higher priority. Click Find to see the information of the specific port.
PAGE 113
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 68. Example of Typical Port Trunk Group The Switch treats all ports in a trunk group as a single port. Data transmitted to a specific host (destination address) will always be transmitted over the same port in a trunk group. This allows packets in a data stream to arrive in the same order they were sent.
PAGE 114
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The (optional) Gigabit ports can only belong to a single link aggregation group. All of the ports in the group must be members of the same VLAN, and their STP status, static multicast, traffic control; traffic segmentation and 802.1p default priority configurations must be identical. Port locking, port mirroring and 802.1X must not be enabled on the trunk group.
PAGE 115
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide LACP Port Settings In conjunction with the Trunking window, users can create port trunking groups on the Switch. Using the following window, the user may set which ports will be active and passive in processing and sending LACP control frames. To view the following window, click L2 Features > Link Aggregation > LACP Port Settings: Figure 3 - 70.
PAGE 116
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 71. Unicast Forwarding window To add an entry to the Static Unicast Forwarding Table, define the following parameters. To modify an entry on the Static Unicast Forwarding Table, click the Edit button corresponding to the entry. To delete an entry in the Static Unicast Forwarding Table, click the corresponding Delete button.
PAGE 117
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click Apply to implement the changes made. Click Clear All to remove all the information entered. Click All to select all ports. LLDP LLDP LLDP Global Settings This window is used to configure the LLDP global settings. To view the following window, click L2 Features > LLDP > LLDP > LLDP Global Settings: Figure 3 - 73.
PAGE 118
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Interval (5-3600) receiver(s) when an LLDP change is detected in an advertisement received on the port from an LLDP neighbor. To set the LLDP Notification Interval, enter a value between 5 and 3600 seconds. Click Apply to implement the changes made. LLDP Port Settings This window is used to configure the LLDP port parameters.
PAGE 119
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Address Enter the IP address that will be sent. Click Apply to implement the changes made. LLDP Management Address List This window is used to view the LLDP management address list. To view the following window, click L2 Features > LLDP > LLDP > LLDP Management Address List: Figure 3 - 75.
PAGE 120
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 76. LLDP Basic TLVs Settings window The following parameters can be configured: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports to be configured. Port Description Use the drop-down menu to enable or disable the Port Description option. System Name Use the drop-down menu to enable or disable the System Name option.
PAGE 121
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 77. LLDP Dot1 TLVs Settings window The following parameters can be configured: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports to be configured. Dot1 TLV PVID Use the drop-down menu to enable or disable and configure the Dot1 TLV PVID option.
PAGE 122
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 78. LLDP Dot3 TLVs Settings window The following parameters can be configured: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports to be configured. MAC / PHY configuration Status This TLV optional data type indicates that the LLDP agent should transmit the MAC/PHY configuration/status TLV. This indicates it is possible for two ends of an IEEE 802.
PAGE 123
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 79. LLDP Statistics System window Select a Port number from the drop-down menu and click the Find button to view statistics for a certain port. LLDP Local Port Information This window displays the information on a per port basis currently available for populating outbound LLDP advertisements in the local port brief table shown below.
PAGE 124
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 81. LLDP Local Port Information – Show Normal window Select a Port number and click the Find button to locate a specific entry. To view the brief LLDP Local Port information page per port, click the Show Brief button. To view more details about, for example, the Management Address Count, click the Show Detail hyperlink. Figure 3 - 82.
PAGE 125
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 84. LLDP Local Port Information – Show Normal window Click the < LLDP > LLDP-MED > LLDP-MED System Settings: Figure 3 - 85.
PAGE 126
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 3 - 86. LLDP-MED Port Settings window The following parameters can be configured: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports to be configured. NTCS Use the drop-down menu to enable or disable Notification Topology Change Status.
PAGE 127
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Select a Port number and click the Find button to locate a specific entry. LLDP-MED Remote Port Information This window displays the information learned from the neighbor parameters. To view the following window, click L2 Features > LLDP > LLDP-MED > LLDP-MED Remote Port Information: Figure 3 - 88. LLDP-MED Remote Port Information window Select a Port number and click the Find button to locate a specific entry.
PAGE 128
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameters can be configured: Parameter Description VLAN Name Click the radio button and enter the VLAN name of the NLB multicast FDB entry to be created. VID Click the radio button and enter the VLAN by the VLAN ID. MAC Address Enter the MAC address of the NLB multicast FDB entry to be created. Port Choose the forwarding ports for the specified NLB multicast FDB entry.
PAGE 129
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 4 L3 Features IPv4 Static/Default Router Settings IPv4 Route Table IPv6 Interface Settings IPv6 Route Settings IPv6 Neighbor Settings IPv4 Static/Default Route Settings The Switch supports static routing for IPv4 formatted addressing. Users can create up to 512 static route entries for IPv4.
PAGE 130
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 4 - 2. IPv4 Route Settings Window Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. IPv6 Interface Settings This window is used to display the Switch’s current IPv6 interface settings. To view the following window, click L3 Features > IPv6 Interface Settings: Figure 4 - 3.
PAGE 131
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Link Status Displays whether the IPv6 Interface is Up or Down. Member Ports Displays the port numbers that are part of the IPv6 Interface. NS Retransmit Time (04294967295) Enter a value between 0 and 4294967295. This is the neighbor solicitation’s retransmit timer in milliseconds. The default is zero. Automatic Link Local Toggle between Enabled and Disabled.
PAGE 132
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameters may be configured or viewed: Parameter Description Interface Name Enter the name of the IPv6 neighbor. To search for all the current interfaces on the Switch, go to the second Interface Name field in the middle part of the window, tick the All check box, and then click the Find button. Neighbor IPv6 Address Enter the neighbor IPv6 address.
PAGE 133
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 5 QoS Bandwidth Control Queue Bandwidth Control Settings Traffic Control 802.1p Default Priority 802.1p User Priority QoS Scheduling Mechanism QoS is an implementation of the IEEE 802.
PAGE 134
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide For example, let’s say a user wishes to have a video conference between two remotely set computers. The administrator can add priority tags to the video packets being sent out, utilizing the Access Profile commands. Then, on the receiving end, the administrator instructs the Switch to examine packets for this tag, acquires the tagged packets and maps them to a class queue on the Switch.
PAGE 135
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Bandwidth Control The bandwidth control settings are used to place a ceiling on the transmitting and receiving data rates for any selected port. To view the following window, click QoS > Bandwidth Control: Figure 5 - 2. Bandwidth Control window The following parameters can be set or are displayed: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports to be configured.
PAGE 136
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Queue Bandwidth Control Settings This window is used to configure queue bandwidth control settings. To view the following window, click QoS > Queue Bandwidth Control Settings: Figure 5 - 3. Bandwidth Control window The following parameters can be set or are displayed: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports to be configured.
PAGE 137
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide If a Time Interval parameter times-out for a port configured for traffic control and a packet storm continues, that port will be placed in Shutdown Forever mode, which will cause a warning message to be sent to the Trap Receiver. To utilize this method of Storm Control, choose the Shutdown option of the Action parameter in the window below.
PAGE 138
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide minutes. Tick the Disabled check box to disable the countdown timer. When the Action is Shutdown, Countdown is disabled, and the Switch detects a storm, it directly shuts down the port. The default is 0. Time Interval (5-30) The Time Interval will set the time between Multicast and Broadcast packet counts sent from the Switch’s chip to the Traffic Control function.
PAGE 139
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 802.1p Default Priority The Switch allows the assignment of a default 802.1p priority to each port on the Switch. To view the following window, click QoS > 802.1p Default Priority: Figure 5 - 5. 802.1p Default Priority window This page allows the user to assign a default 802.1p priority to any given port on the Switch.
PAGE 140
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Once a priority has been assigned to the port groups on the Switch, then a Class may be assigned to each of the eight levels of 802.1p priorities using the drop-down menus on this window. Click Apply to set the changes. QoS Scheduling Mechanism The Scheduling Mechanism drop-down menu allows a selection between a Weight Fair and a Strict mechanism for emptying the priority classes.
PAGE 141
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 6 Security RADIUS IP-MAC-Port Binding (IMPB) Port Security DHCP Server Screening 802.
PAGE 142
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 1. Authentication RADIUS Server Settings window The following parameters can be configured: Parameter Description Index Choose the desired RADIUS server to configure: 1, 2 or 3 and select either IPv4 Address or IPv6 Address. IPv4 Address Click the radio button and set the RADIUS server IPv4 address. IPv6 Address Click the radio button and set the RADIUS server IPv6 address.
PAGE 143
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 2. RADIUS Accounting Settings window The following parameters can be configured: Parameter Description Network When enabled, the Switch will send informational packets to a remote RADIUS server when 802.1X and WAC port access control events occur on the Switch.
PAGE 144
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide include retransmissions. AccessRetrans The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. AccessAccepts The number of RADIUS Access-Accept packets (valid or invalid) received from this server. AccessRejects The number of RADIUS Access-Reject packets (valid or invalid) received from this server.
PAGE 145
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description ServerIndex The identification number assigned to each RADIUS Accounting server that the client shares a secret with. InvalidServerAddr The number of RADIUS Accounting-Response packets received from unknown addresses. Identifier The NAS-Identifier of the RADIUS accounting client. (This is not necessarily the same as sysName in MIB II.
PAGE 146
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Common IP Management Security Issues Currently, certain limitations and issues in IP management structures can lead to serious security problems. Auditing mechanisms, such as syslog, application log, firewall log, etc, are mainly based on client IP information. However, such log information is meaningless if the client IP address can be easily changed.
PAGE 147
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP Snooping Option If DHCP snooping is enabled, the switch learns IP-MAC pairs by snooping DHCP packets automatically and then saving them to the IP-MAC-Port Binding white list. This enables a hassle-free configuration because the administrator does not need to manually enter each IMPB entry.
PAGE 148
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameters can be set: Parameter Description Trap / Log Click the radio buttons to enable or disable the sending of trap/log messages for IP-MACport binding. When Enabled, the Switch will send a trap message to the SNMP agent and the Switch log when an ARP/IP packet is received that doesn’t match the IP-MAC-port binding configuration set on the Switch. The default is Disabled.
PAGE 149
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description From Port/To Port Select a range of ports to set for IP-MAC-port binding. IPv4 State / IPv6 State Use the drop-down menu to enable or disable these ports for IP-MAC Binding. Enabled (Strict) – This state provides a stricter method of control. If the user selects this mode, all packets are blocked by the Switch by default.
PAGE 150
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To view this window, click Security > IP-MAC-Port Binding (IMPB) > IMPB Entry Settings as shown below: Figure 6 - 8. IMPB Entry Settings window The following fields can be set or modified: Parameter Description IPv4 Address Click the radio button and enter the IPv4 address to bind to the MAC address set below. IPv6 Address Click the radio button and enter the IPv6 address to bind to the MAC address set below.
PAGE 151
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP Snooping DHCP Snooping Maximum Entry Settings This window is used to configure the maximum DHCP snooping entry for ports on this page. To view the following window, click Security > IP-MAC-Port Binding (IMPB) > DHCP Snooping > DHCP Snooping Maximum Entry Settings: Figure 6 - 10.
PAGE 152
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 11. DHCP Snooping Entry window The following fields can be configured: Parameter Description Port Use the drop-down menu to select the desired port. Ports (e.g.: 1, 7-12) Specify the ports for DHCP snooping entries. Tick the All Ports check box to select all entries for all ports. Tick the IPv4 check box to select IPv4 DHCP snooping learned entries.
PAGE 153
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following fields can be configured: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports to use. Maximum Entry (110) Enter the maximum entry value. Tick the No Limit check box to have unlimited maximum number of the learned entries. Click the Apply button to accept the changes made. ND Snoop Entry This window is used to view dynamic entries on specific ports.
PAGE 154
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 14. Port Security Settings window The following parameters can be set: Parameter Description Port Security Trap/Log Settings Use the radio button to enable or disable Port Security Traps and Log Settings on the Switch. From Port / To Port Use the drop-down menu to select a range of ports to be configured.
PAGE 155
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 15. Port Lock Entries window This window displays the following information: Parameter Description VID The VLAN ID of the entry in the forwarding database table that has been permanently learned by the Switch. VLAN Name The VLAN Name of the entry in the forwarding database table that has been permanently learned by the Switch.
PAGE 156
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 16. DHCP Screening Port Settings window The user may set the following parameters: Parameter Description From DHCP Server Trap Log State Enable or disable this feature. Illegal Server Log Suppress Duration Choose an illegal server log suppress duration of 1 minute, 5 minutes, or 30 minutes. From Port / To Port Use the drop-down menu to select a range of ports.
PAGE 157
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 17. DHCP Offer Filtering window The user may set the following parameters: Parameter Description Server IP Address The IP address of the DHCP server to be filtered. Client’s MAC Address The MAC address of the DHCP client. Only multiple legal DHCP servers on the network need to be entered in this field. If there is only one legal DHCP server on the network, no input to this field is allowed.
PAGE 158
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 19. Three Roles of 802.1X The following section will explain the three roles of Client, Authenticator and Authentication Server in greater detail. Authentication Server The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be running a RADIUS Server program and must be configured properly on the Authenticator (Switch).
PAGE 159
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 21. Authenticator Client The Client is simply the endstation that wishes to gain access to the LAN or switch services. All end stations must be running software that is compliant with the 802.1X protocol. For users running Windows XP and Windows Vista, that software is included within the operating system. All other users are required to attain 802.1X client software from an outside source.
PAGE 160
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 23. 802.1X Authentication Process The D-Link implementation of 802.1X allows network administrators to choose between two types of Access Control used on the Switch, which are: 1. Port-based Access Control – This method requires only one user to be authenticated per port by a remote RADIUS server to allow the remaining users on the same port access to the network. 2.
PAGE 161
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port-based Network Access Control Figure 6 - 24. Example of Typical Port-based Configuration Once the connected device has successfully been authenticated, the Port then becomes Authorized, and all subsequent traffic on the Port is not subject to access control restriction until an event occurs that causes the Port to become Unauthorized.
PAGE 162
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Host-based Network Access Control Figure 6 - 25. Example of Typical Host-based Configuration In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create “logical” Ports, one for each attached device that required access to the LAN.
PAGE 163
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameters can be configured: Parameter Description Authentication State Use the drop-down menu to enable or disable the 802.1X function. Authentication Protocol Choose the authenticator protocol, Local or RADIUS EAP. Forward EAPOL PDU This is a global setting to control the forwarding of EAPOL PDU. When 802.1X functionality is disabled globally or for a port, and if 802.
PAGE 164
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide From Port / To Port Select a range of ports you wish to configure. QuietPeriod (0-65535) This allows the user to set the number of seconds that the Switch remains in the quiet state following a failed authentication exchange with the client. The default setting is 60 seconds. SuppTimeout (165535) This value determines timeout conditions in the exchanges between the Authenticator and the client.
PAGE 165
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 802.1X User Settings Users can set different local users on the Switch. To view the following window, click Security > 802.1X > 802.1X User Settings: Figure 6 - 28. 802.1X User Settings window Enter an 802.1X user name, password, and confirmation of that password. Properly configured local users will be displayed in the 802.1X User Table at the bottom of the window. Click Apply to implement configuration changes.
PAGE 166
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Remember, to set an 802.1X guest VLAN, the user must first configure a normal VLAN, which can be enabled here for guest VLAN status. To view the following window, click Security > 802.1X > Guest VLAN Settings: Figure 6 - 30. Guest VLAN Settings window The following fields may be modified to enable the 802.1X guest VLAN: Parameter Description VLAN Name Enter the pre-configured VLAN name to create as an 802.
PAGE 167
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To view the following window, click Security > 802.1X > Authenticator Statistics: Figure 6 - 32. Authenticator Statistics window The following parameter can be configured: Parameter Description Port Use the drop-down menu to select a port. Click the Apply button to accept the changes made. Authenticator Session Statistics This window is used to display the authenticator session statistics information.
PAGE 168
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 33. Authenticator Session Statistics window The following parameter can be configured: Parameter Description Port Use the drop-down menu to select a port. Click the Apply button to accept the changes made. Authenticator Diagnostics This window is used to display the authenticator diagnostics information. This window appears when the Authentication State is enabled in 802.1X Global Settings window.
PAGE 169
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 34. Authenticator Diagnostics window The following parameter can be configured: Parameter Description Port Use the drop-down menu to select a port. Click the Apply button to accept the changes made. Initialize Port-based Port(s) This window displays the current initialized port-based ports. This window appears when the Authentication State is enabled in 802.1X Global Settings window.
PAGE 170
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Initialize Host-based Port(s) This window displays the current initialized host-based ports. This window appears when the Authentication State is enabled in 802.1X Global Settings window. To view the following window, click Security > 802.1X > Initialize Host-based Port(s): Figure 6 - 36.
PAGE 171
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 38. Reauthenticate Host-based Port(s) window The following parameter can be configured: Parameter Description From Port / To Port Use the drop-down menus to select a range of ports. MAC Address The authenticated MAC address of the client connected to the corresponding port, if any. Click the Apply button to accept the changes made.
PAGE 172
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To view the following window, click Security > SSL > SSL Settings: Figure 6 - 39. SSL Settings window To set up the SSL function on the Switch, configure the parameters in the SSL Settings section described below and click Apply. To set up the SSL ciphersuite function on the Switch, configure the parameters in the SSL Ciphersuite Settings section described below and click Apply.
PAGE 173
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click Apply to implement changes made. NOTE: Certain implementations concerning the function and configuration of SSL are not available on the web-based management of this Switch and need to be configured using the command line interface. NOTE: Enabling the SSL command will disable the web-based switch management. To log on to the Switch again, the header of the URL must begin with https://.
PAGE 174
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide unmatched security features is an essential tool in today’s networking environment. It is a powerful guardian against numerous existing security hazards that now threaten network communications. The steps required to use the SSH protocol for secure communication between a remote PC (the SSH client) and the Switch (the SSH server) are as follows: 1.
PAGE 175
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click Apply to implement the changes. SSH Authentication Method and Algorithm Settings Users can configure the desired types of SSH algorithms used for authentication encryption. There are three categories of algorithms listed and specific algorithms of each may be enabled or disabled by ticking their corresponding check boxes. All algorithms are enabled by default.
PAGE 176
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Block Chaining. The default is enabled. Twofish128 Use the check box to enable or disable the twofish128 encryption algorithm. The default is enabled. Twofish192 Use the check box to enable or disable the twofish192 encryption algorithm. The default is enabled. Twofish256 Use the check box to enable or disable the twofish256 encryption algorithm. The default is enabled.
PAGE 177
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Public Key – This parameter should be chosen if the administrator wishes to use the public key on an SSH server for authentication. Host Name Enter an alphanumeric string of no more than 32 characters to identify the remote SSH user. This parameter is only used in conjunction with the Host Based choice in the Auth. Mode field. Host IP Enter the corresponding IP address of the SSH user.
PAGE 178
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide through its Authentication Server Hosts and no authentication is returned, the Switch will then go to the next technique listed in the server group for authentication, until the authentication has been verified or denied, or the list is exhausted. Please note that users granted access to the Switch will be granted normal user privileges on the Switch.
PAGE 179
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Response Timeout (0255) This field will set the time the Switch will wait for a response of authentication from the user. The user may set a time between 0 and 255 seconds. The default setting is 30 seconds. User Attempts (1-255) This command will configure the maximum number of times the Switch will accept authentication attempts.
PAGE 180
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 47. Authentication Server Group Settings window This window displays the Authentication Server Groups on the Switch. The Switch has four built-in Authentication Server Groups that cannot be removed but can be modified. To add a new Server Group, enter a name in the Group Name field and then click the Add button.
PAGE 181
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide NOTE: The three built-in server groups can only have server hosts running the same TACACS daemon. TACACS/XTACACS/TACACS+ protocols are separate entities and are not compatible with each other. Authentication Server Settings User-defined Authentication Server Hosts for the TACACS / XTACACS / TACACS+ / RADIUS security protocols can be set on the Switch.
PAGE 182
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide NOTE: More than one authentication protocol can be run on the same physical server host but, remember that TACACS/XTACACS/TACACS+ are separate entities and are not compatible with each other. Login Method Lists Settings User-defined or default Login Method List of authentication techniques can be configured for users logging on to the Switch.
PAGE 183
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Enable Method Lists Settings Users can set up Method Lists to promote users with user level privileges to Administrator (Admin) level privileges using authentication methods on the Switch. Once a user acquires normal user level privileges on the Switch, he or she must be authenticated by a method on the Switch to gain administrator privileges on the Switch, which is defined by the Administrator.
PAGE 184
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Local Enable Password Settings Users can configure the locally enabled password for Enable Admin. When a user chooses the "local_enable" method to promote user level privileges to administrator privileges, he or she will be prompted to enter the password configured here that is locally set on the Switch.
PAGE 185
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 4. Ports that have been enabled for Link Aggregation, Port Security, or GVRP authentication cannot be enabled for MAC-based Authentication. MAC-based Access Control Settings This window is used to configure the MAC Settings for the MAC-based Access Control function on the Switch.
PAGE 186
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description Method Use this drop-down menu to choose the type of authentication to be used when authentication MAC addresses on a given port. The user may choose between the following methods: Local – Use this method to utilize the locally set MAC address database as the authenticator for MAC-based Access Control. This MAC address list can be configured in the MAC Local Settings window.
PAGE 187
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click the Apply button in the fourth section to implement the configuration changes. MAC-based Access Control Local Settings Users can set a list of MAC addresses, along with their corresponding target VLAN, which will be authenticated for the Switch. Once a queried MAC address is matched in this window, it will be placed in the VLAN associated with it here.
PAGE 188
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port List (e.g.: 1, 5-10) Enter a list of ports. Click the Find button to locate a specific entry based on the information entered. Click the Clear by Port button to clear all the information linked to the port number entered. Click the View All Hosts button to display all the existing hosts. Click the Clear All hosts button to clear out all the existing hosts.
PAGE 189
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 56.
PAGE 190
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Conditions and Limitations 1. If the client is utilizing DHCP to attain an IP address, the authentication VLAN must provide a DHCP server or a DHCP relay function so that client may obtain an IP address. 2. Certain functions exist on the Switch that will filter HTTP packets, such as the Access Profile function.
PAGE 191
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide window (Security > 802.1X > Authentic RADIUS Server). Clear Redirection Path The user can enable or disable this option to clear the redirection path. Local Authorizations he user can enable or disable this option to enable Local Authorization or not. Click Apply to implement changes made.
PAGE 192
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide VID (1-4094) Click the button and enter a VID in this field. Password Enter the password the administrator has chosen for the selected user. This field is casesensitive and must be a complete alphanumeric string. This field is for administrators who have selected Local as their Web-based authenticator. Old Password Enter the original password.
PAGE 193
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide authenticated state. Enter a value between 0 and 1440 minutes. A value of 0 indicates the authenticated host will never age out on the port. The default value is 1440 minutes (24 hours). Tick the adjacent Infinite textbox to disable aging. The default value is infinite. State Use this drop-down menu to enable the configured ports as WAC ports.
PAGE 194
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 61. WAC Customize Page window Complete the WAC authentication information on this window to set the WAC page settings. Click the Apply button to implement the changes made. Click the Set to default button to go back to the default settings of all elements. Click the Edit button to re-configure the elements.
PAGE 195
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 62. JWAC Global Settings window To set the Web authentication for the Switch, complete the following fields: Parameter Description JWAC State Use this drop-down menu to either enable or disable JWAC on the Switch. Virtual IP Enter the JWAC Virtual IP address that is used to accept authentication requests from an unauthenticated host.
PAGE 196
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide (0-10) Quarantine Server or JWAC Login Page. Enter a value between 0 and 10 seconds. A value of 0 indicates no delay in the redirect. RADIUS Authorization Use the drop-down menu to enable or disable RADIUS Authorization. Local Authorization Use the drop-down menu to enable or disable Local Authorization. Error Timeout (5300) This parameter is used to set the Quarantine Server Error Timeout.
PAGE 197
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 63. JWAC Port Settings window The following parameters can be configured: Parameter Description From Port / To Port Use this drop-down menu to select a range of ports to be enabled as JWAC ports. State Use this drop-down menu to enable the configured ports as JWAC ports.
PAGE 198
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 64. JWAC User Settings window To set the User Account settings for the JWAC by the Switch, complete the following fields and then click the Add button. To clear the current JWAC user settings in the table at the bottom of the window, click the Delete All button. Parameter Description User Name Enter a username of up to 15 alphanumeric characters.
PAGE 199
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click the Find button to locate a specific entry based on the information entered. Click the Clear button to remove entry based on the port list entered. Click the View All Hosts button to display all the existing entries. Click the Clear All Hosts button to remove all the entries listed. JWAC Customize Page Language Users can configure JWAC page and language settings for the Switch.
PAGE 200
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Complete the JWAC authentication information on this window to set the JWAC page settings. Enter a name for the Authentication in the first field and then click the Apply button. Next, enter a User Name and a Password and then click the Enter button. Compound Authentication Modern networks employ many authentication methods. The Compound Authentication methods supported by this Switch include 802.
PAGE 201
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Any (MAC, 802.1X or JWAC) Mode Figure 6 - 69. Any (MAC, 802.1X or JWAC) Mode In the diagram above the Switch port has been configured to allow clients to authenticate using 802.1X, MAC, or JWAC. When a client tries to connect to the network, the Switch will try to authenticate the client using one of these methods and if the client passes they will be granted access to the network. 802.1X & IMPB Mode Figure 6 - 70.
PAGE 202
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IMPB & WAC/JWAC Mode Figure 6 - 71. IMPB & WAC/JWAC Mode This mode adds an extra layer of security by checking the IP MAC-Binding Port Binding (IMPB) table before trying one of the supported authentication methods. The IMPB Table is used to create a ‘white-list’ that checks if the IP streams being sent by authorized hosts have been granted or not.
PAGE 203
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 72. MAC & IMPB Mode Compound Authentication Settings Users can configure Authorization Network State Settings for the Switch.
PAGE 204
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 73. Compound Authentication Settings window The following fields and settings can be viewed: Parameter Description Authorization Attributes State Click the radio buttons to enable of disable the Authorization Attributes State. Authentication Server Failover Click the radio buttons to configure the authentication server failover function.
PAGE 205
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Both authentication methods need to be passed. Authorized Mode  IMPB+WAC means WAC will be verified first, and then IMPB will be verified. Both authentication methods need to be passed.  MAC+IMPB means MAC will be verified first, and then IMPB will be verified. Both authentication methods need to be passed. Toggle between Host-based and Port-based.
PAGE 206
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 75. Compound Authentication MAC Format Settings window The following fields may be modified to configure Guest VLANs: Parameter Description Case Use the drop-down menu to select the format for the RADIUS authentication username. Lowerercase - Use lowercase format, the RADIUS authentication username will be formatted as: aa-bb-cc-dd-ee-ff.
PAGE 207
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 76. IGMP Acess Control Settings window To set up IGMP access control on individual ports for the Switch, complete the following fields: Parameter Description From Port / To Port Use the drop-down menus to select t a range of ports to be enabled/disabled as IGMP access control ports. Authentication State Toggle to enable and disable the RADIUS authentication function on the specified ports.
PAGE 208
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide NOTE: See Appendix A for more information on how to prevent ARP Spoofing attacks. BPDU Attack Protection This window is used to configure the BPDU protection function for the ports on the switch. In generally, there are two states in BPDU protection function. One is normal state, and another is under attack state. The under attack state have three modes: drop, block, and shutdown.
PAGE 209
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Log State Specify when a log entry will be sent. Options to choose from are None, Attack Detected, Attack Cleared or Both. Recover Time (601000000) Enter the BPDU protection Auto-Recovery timer. The default value of the recovery timer is 60. Tick the Infinite check box for not auto recovering. From Port / To Port Use the drop-down menus to select t a range of ports.
PAGE 210
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The following parameters may be viewed or modified: Parameter Description LBD State Use the drop-down menu to enable or disable loopback detection. The default is Disabled. Mode Use the drop-down menu to toggle between Port-based and VLAN-based. Trap Status Set the desired trap status: None, Loop Detected, Loop Cleared, or Both.
PAGE 211
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Clicking the Apply button will enter the combination of transmitting port(s) and allowed receiving ports into the Switch’s Traffic Segmentation table. Safeguard Engine Settings Periodically, malicious hosts on the network will attack the Switch by utilizing packet flooding (ARP Storm) or other methods. These attacks may increase the switch load beyond its capability.
PAGE 212
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide NOTICE: When Safeguard Engine is enabled, the Switch will allot bandwidth to various traffic flows (ARP, IP) using the FFP (Fast Filter Processor) metering table to control the CPU utilization and limit traffic. This may limit the speed of routing traffic over the network. Users can enable the Safeguard Engine or configure advanced Safeguard Engine settings for the Switch.
PAGE 213
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 6 - 83. Trusted Host window To configure secure IP addresses for trusted host management of the Switch, type the IP address and the net mask of the station you are currently using in the two fields, as well as up to nine additional IP addresses of trusted hosts, one by one. Click the Apply button to assign trusted host status to the IP addresses. This goes into effect immediately.
PAGE 214
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 7 ACL ACL Configuration Wizard Access Profile List CPU Access Profile List Time Range Settings ACL Configuration Wizard In order to make access profile and rule creation significantly easier to use, an ACL wizard has been introduced in the current firmware release. Of course, advanced users can still manually configure access profiles and rules in the Access Profile List in the next section.
PAGE 215
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide this rule. IPv6 – Selecting this option will allow the user to enter a range of IPv6 addresses for this rule. Action Select Permit to specify that the packets that match the access profile are forwarded by the Switch, according to any additional rule added (see below). Select Deny to specify that the packets that match the access profile are not forwarded by the Switch and will be filtered.
PAGE 216
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide There are four Add Access Profile windows; one for Ethernet (or MAC address-based) profile configuration, one for IPv6 address-based profile configuration, one for IPv4 address-based profile configuration, and one for packet content profile configuration. The window shown below is the Add ACL Profile window for Ethernet: Figure 7 - 3.
PAGE 217
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Ethernet Type Selecting this option instructs the Switch to examine the Ethernet type value in each frame's header. Click Create to create the new ACL Profile. To view the setting details for a created profile, click the Show Details button for the corresponding entry on the Access Profile List window, revealing the following window: Figure 7 - 4.
PAGE 218
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide content. This will change the window according to the requirements for the type of profile. Select Ethernet ACL to instruct the Switch to examine the layer 2 part of each packet header. Select IPv4 ACL to instruct the Switch to examine the IPv4 address in each frame's header. Select IPv6 ACL to instruct the Switch to examine the IPv6 address in each frame's header.
PAGE 219
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 6. Access Profile Detail Information window for IPv4 The window shown below is the Add ACL Profile window for IPv6: Figure 7 - 7. Add ACL Profile window for IPv6 The following parameters can be set for the IPv6 ACL type: Parameter Description Select Profile ID Use the drop-down menu to select a unique identifier number for this profile set. This value can be set from 1 to 200.
PAGE 220
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IPv6 Flow Label Ticking this check box will instruct the Switch to examine the flow label field of the IPv6 header. This flow label field is used by a source to label sequences of packets such as nondefault quality of service or real time service packets. IPv6 Source Address The user may specify an IP address mask for the source IPv6 address by ticking the corresponding check box and entering the IP address mask.
PAGE 221
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description Select Profile ID Use the drop-down menu to select a unique identifier number for this profile set. This value can be set from 1 to 200. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content. This will change the window according to the requirements for the type of profile.
PAGE 222
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To establish the rule for a previously created Access Profile: To configure the Access Rules for Ethernet, open the Access Profile List window and click Add/View Rules for an Ethernet entry. This will open the following window: Figure 7 - 11. Access Rule List window for Ethernet To remove a previously created rule, click the corresponding Delete Rules button.
PAGE 223
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide the value entered in the Priority field, which meets the criteria specified previously in this command, before forwarding it on to the specified CoS queue. Otherwise, a packet will have its incoming 802.1p user priority re-written to its original value before being forwarded by the Switch. For more information on priority queues, CoS queues and mapping for 802.1p, see the QoS section of this manual.
PAGE 224
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 14. Access Rule List window for IPv4 To remove a previously created rule, click the corresponding Delete Rules button. To add a new Access Rule, click the Add Rule button: Figure 7 - 15. Add Access Rule window for IPv4 The following parameters can be cconfigured: Parameter Description Access ID (1-200) Type in a unique identifier number for this access. This value can be set from 1 to 200.
PAGE 225
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Replace Priority Tick this check box to replace the Priority value in the adjacent field. Replace DSCP (063) Select this option to instruct the Switch to replace the DSCP value (in a packet that meets the selected criteria) with the value entered in the adjacent field. Note: When an ACL rule is added to change both the priority and DSCP of an IPv4 packet, only one of them can be modified due to a chip limitation.
PAGE 226
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 18. Add Access Rule window for IPv6 The following parameters can be cconfigured: Parameter Description Access ID (1-200) Type in a unique identifier number for this access. This value can be set from 1 to 200. Auto Assign – Ticking this check box will instruct the Switch to automatically assign an Access ID for the rule being created.
PAGE 227
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window. This will set specific times when this access rule will be implemented on the Switch. Counter Use the drop-down menu to specify if the Counter feature should be Enabled or Disabled.
PAGE 228
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 21. Add Access Rule window for Packet Content The following parameters can be cconfigured: Parameter Description Access ID (1200) Type in a unique identifier number for this access. This value can be set from 1 to 200. Auto Assign – Ticking this check box will instruct the Switch to automatically assign an Access ID for the rule being created.
PAGE 229
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide rate is 640kbit/sec.) The user many select a value between 1 and 15625 or tick the No Limit check box. The default setting is No Limit. Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window. This will set specific times when this access rule will be implemented on the Switch.
PAGE 230
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 23. CPU Access Profile List window This window displays the CPU Access Profile List entries created on the Switch (one CPU access profile of each type has been created for explanatory purposes). To view the configurations for an entry, click the corresponding Show Details button. To add an entry to the CPU Access Profile List, click the Add CPU ACL Profile button.
PAGE 231
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 24. Add CPU ACL Profile window for Ethernet The following parameters can be cconfigured: Parameter Description Select Profile ID (1-5) Use the drop-down menu to select a unique identifier number for this profile set. This value can be set from 1 to 5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
PAGE 232
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To view the settings of a previously correctly created profile, click the corresponding Show Details button on the CPU Access Profile List window to view the following window: Figure 7 - 25. CPU Access Profile Detail Information window for Ethernet The window shown below is the Add CPU ACL Profile window for IPv4. Figure 7 - 26.
PAGE 233
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 802.1Q VLAN Selecting this option instructs the Switch to examine the VLAN part of each packet header and use this as the, or part of the criterion for forwarding. IPv4 DSCP Selecting this option instructs the Switch to examine the DiffServ Code part of each packet header and use this as the, or part of the criterion for forwarding. Source IP Mask Enter an IP address mask for the source IP address.
PAGE 234
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 28. Add CPU ACL Profile window for IPv6 The following parameters can be cconfigured: Parameter Description Select Profile ID Use the drop-down menu to select a unique identifier number for this profile set. This value can be set from 1 to 5. Select ACL Type Select profile based on Ethernet (MAC Address), IPv4 address, IPv6 address, or packet content mask.
PAGE 235
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To view the settings of a previously correctly created profile, click the corresponding Show Details button on the CPU Access Profile List window to view the following window: Figure 7 - 29. CPU Access Profile Detail Information window for IPv6 The window shown below is the Add CPU ACL Profile window for Packet Content. Figure 7 - 30.
PAGE 236
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Offset This field will instruct the Switch to mask the packet header beginning with the offset value specified: • 0-15 - Enter a value in hex form to mask the packet from the beginning of the packet to the 15th byte. • 16-31 – Enter a value in hex form to mask the packet from byte 16 to byte 31. • 32-47 – Enter a value in hex form to mask the packet from byte 32 to byte 47.
PAGE 237
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 33. Add Access Rule window for Ethernet The following parameters can be cconfigured: Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access rule are forwarded by the Switch, according to any additional rule added (see below).
PAGE 238
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 34. CPU Access Rule Detail Information window for Ethernet To establish the rule for a previously created CPU Access Profile: To configure the Access Rules for IP, open the CPU Access Profile List window and click Add/View Rules for an IPv4 entry. This will open the following window. Figure 7 - 35.
PAGE 239
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access rule are forwarded by the Switch, according to any additional rule added (see below). Select Deny to specify that packets that match the access rule are not forwarded by the Switch and will be filtered.
PAGE 240
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 7 - 39. Add Access Rule window for IPv6 The following parameters can be cconfigured: Parameter Description Access ID (1-100) Type in a unique identifier number for this access. This value can be set from 1 to 100. Action Select Permit to specify that the packets that match the access rule are forwarded by the Switch, according to any additional rule added (see below).
PAGE 241
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To establish the rule for a previously created CPU Access Profile: To configure the Access Rules for IP, open the CPU Access Profile List window and click Add/View Rules for a Packet Content entry. This will open the following window. Figure 7 - 41. CPU Access Rule List window for Packet Content To remove a previously created rule, click the corresponding Delete Rules button.
PAGE 242
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Offset 48-63 - Enter a value in hex form to mask the packet from byte 48 to byte 63. Offset 64-79 - Enter a value in hex form to mask the packet from byte 64 to byte 79. Time Range Name Tick the check box and enter the name of the Time Range settings that has been previously configured in the Time Range Settings window. This will set specific times when this access rule will be implemented on the Switch.
PAGE 243
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide minutes and seconds, based on the 24-hour time system. Weekdays Use the check boxes to select the corresponding days of the week that this time range is to be enabled. Tick the Select All Days check box to configure this time range for every day of the week. Click Apply to implement changes made.
PAGE 244
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 8 Network Application DHCP/BOOTP Relay DHCPv6 Relay DHCP Server DHCP Local Relay Settings DHCP Auto Configuration Settings DHCP Option 12 Settings DNS Resolver PPPoE Circuit ID Insertiions Settings SMTP Settings SNTP Settings Ping Test DHCP/BOOTP Relay The DHCP/BOOTP Relay folder contains two windows: DHCP/BOOTP Relay Global Settings and DHCP/BOOTP Relay Interface Settings.
PAGE 245
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP/BOOTP Relay Hops Count Limit (116) This field allows an entry between 1 and 16 to define the maximum number of router hops DHCP/BOOTP messages can be forwarded. The default hop count is 4. DHCP/BOOTP Relay Time Threshold (065535) Allows an entry between 0 and 65535 seconds, and defines the maximum time limit for routing a DHCP/BOOTP packet.
PAGE 246
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide NOTE: If the Switch receives a packet that contains the option 82 field from a DHCP client and the information-checking feature is enabled, the Switch drops the packet because it is invalid. However, in some instances, users may configure a client with the option 82 field. In this situation, disable the information check feature so that the Switch does not remove the option 82 field from the packet.
PAGE 247
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP/BOOTP Relay Interface Settings Users can set up a server, by IP address, for relaying DHCP/BOOTP information to the Switch. The user may enter a previously configured IP interface on the Switch that will be connected directly to the DHCP/BOOTP server using this window.
PAGE 248
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCPv6 Relay Settings This window is used to configure the DHCPv6 relay state of one or all of the specified interfaces, and add or display a destination IPv6 address to or from the switch’s DHCPv6 relay table. To view the following window, click Network Application > DHCPv6 Relay > DHCPv6 Relay Settings: Figure 8 - 5.
PAGE 249
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP Server Global Settings This window is used to configure the DHCP server global parameters. To view the following window, click Network Application > DHCP Server > DHCP Server Global Settings: Figure 8 - 6. DHCP Server Global Settings window The following parameters may be configured: Parameter Description DHCP Server State Click the radio buttons to enable or disable the DHCP Server State.
PAGE 250
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP Server Pool Settings This window is used to add and delete the DHCP server pool. To view the following window, click Network Application > DHCP Server > DHCP Server Pool Settings: Figure 8 - 8. DHCP Server Pool Settings window The following parameters may be configured: Parameter Description Pool Name Enter the DHCP Server Pool name. Click the Add button to add a new entry based on the information entered.
PAGE 251
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide the same pool, the second command will overwrite the first command. If the boot file is not specified, the boot file information will not be provided to the client. Next Server Enter the next server IP address. DNS Server Address IP address of DNS server. Specifies the IP address of a DNS server that is available to a DHCP client. Up to three IP addresses can be specified in one command line.
PAGE 252
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP Server Dynamic Binding This window is used to delete the DHCP server dynamic binding table. To view the following window, click Network Application > DHCP Server > DHCP Server Dynamic Binding: Figure 8 - 11. DHCP Server Dynamic Binding window The following parameters may be configured: Parameter Description Pool Name Enter the DHCP Server Pool name.
PAGE 253
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 8 - 13. DHCP Local Relay Settings window The following parameters may be configured or viewed: Parameter Description DHCP Local Relay Global State Enable or disable the DHCP Local Relay Global State. The default is Disabled. VLAN Name This is the VLAN Name that identifies the VLAN the user wishes to apply the DHCP Local Relay operation. State Enable or disable the Config DHCP Local Relay for VLAN state.
PAGE 254
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide stored in its base directory when the request is received from the Switch. Click Apply to set the DHCP Auto Configuration State. DHCP Option 12 Settings This window is used to configure DHCP Option 12 settings. To view the following window, click Network Application > DHCP Option 12 Settings: Figure 8 - 15.
PAGE 255
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DNS Resolver Static Name Server Settings The window is used to create the DNS Resolver name server of the Switch. To view the following window, click Network Application > DNS Resolver > DNS Resolver Static Name Server Settings: Figure 8 - 17. DNS Resolver Static Name Server Settings window The following parameter may be configured: Parameter Description Server IP Address Enter a DNS Resolver name server.
PAGE 256
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Click the Add button to add a new entry based on the information entered. Click the Delete button to remove the specific entry. DNS Resolver Dynamic Host Name Table This window displays the current host name entries. To view the following window, click Network Application > DNS Resolver > DNS Resolver Dynamic Host Name Table: Figure 8 - 20.
PAGE 257
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide MAC - The MAC address of the Switch will be used to encode the circuit ID option. IP - The Switch’s IP address will be used to encode the circuit ID option. This is the default. UDF - A user specified string to be used to encode the circuit ID option. The maximum length is 32. Click the Apply button to accept the changes made for each individual section.
PAGE 258
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide SNTP Settings SNTP or Simple Network Time Protocol is used by the Switch to synchronize the clock of the computer. Time Settings Users can configure the time settings for the Switch. To view the following window, click Network Application > SNTP Settings > Time Settings: Figure 8 - 23.
PAGE 259
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 8 - 24. Time Zone Settings window The following parameters can be set: Parameter Description Daylight Saving Time State Use this drop-down menu to enable or disable the DST Settings. Daylight Saving Time Offset In Minutes Use this drop-down menu to specify the amount of time that will constitute your local DST offset. The available options are 30, 60, 90, or 120 minutes.
PAGE 260
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DST Annual Settings – Using annual mode will enable DST seasonal time adjustment. Annual mode requires that the DST beginning and ending date be specified concisely. For example, specify to begin DST on April 3 and end DST on October 14. From: Month Enter the month DST will start on, each year. From: Day Enter the day of the month DST will start on, each year.
PAGE 261
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Size For IPv6 only, enter a value between 1 and 6000. The default is 100. Timeout For IPv4, select a timeout period between 1 and 99 seconds for this Ping message to reach its destination. For IPv6, select a timeout period between 1 and 10 seconds for this Ping message to reach its destination. In either case, if the packet fails to find the IP address in this specified time, the Ping packet will be dropped.
PAGE 262
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 9 OAM Ethernet OAM DULD Settings Cable Diagnostics Ethernet OAM Ethernet OAM Settings This window is used to configure the Ethernet OAM settings. To view the following window, click OAM > Ethernet OAM > Ethernet OAM Settings: Figure 9 - 1. Ethernet OAM Settings window The following parameters can be configured: Parameter Description From Port / To Port Select a range of ports you wish to configure.
PAGE 263
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Remote Loopback Use the drop-down menu to select Ethernet OAM remote loopback. None – Select to disable the remote loopback. Start – Select to request the peer to change to the remote loopback mode. Stop - Select to request the peer to change to the normal operation mode. Received Remote Loopback Use the drop-down menu to configure the client to process or to ignore the received Ethernet OAM remote loopback command.
PAGE 264
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Critical Link Event Use the drop-down menu to select between Dying Gasp and Critical Event. Threshold (04294967295) Enter the number of error frame or symbol in the period is required to be equal to or greater than in order for the event to be generated. Window (100060000) Enter the period of error frame or symbol in milliseconds summary event. Click Apply to implement the chages.
PAGE 265
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 9 - 4. Ethernet OAM Statistics window The following parameters can be configured: Parameter Description Port List (e.g.: 1, 46) Enter a list of ports. Tick the All Ports check box to select all ports. Click the Clear button to clear all the information entered in the fields. DULD Settings This window is used to configure and display D-LINK Unidirectional Link Detection (DULD) on port.
PAGE 266
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 9 - 5. DULD Settings window The following parameters can be configured: Parameter Description From Port / To Port Select a range of ports you wish to configure. State Use the drop-down menu to enable or disable the selected ports unidirectional link detection status. Mode Use the drop-down menu to select Mode between Shutdown and Normal.
PAGE 267
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 9 - 6. Cable Diagnostics window To view the cable diagnostics for a particular port, use the drop-down menu to choose the port and click Test The information will be displayed in this window. Cable Diagnostics Notes 1.
PAGE 268
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 10 Monitoring Device Environment (DGS-3200-16 and DGS-3200-24 only) CPU Utilization DRAM & Flash Utilization Port Utilization Packet Size Packets Errors Browse ARP Table Browse Router Port Browse MLD Router Port Browse Session Table IGMP Snooping Group MLD Snooping Group MAC Address Table System Log Device Environment The device environment feature displays the Switch internal temperature status (DGS-3200-16
PAGE 269
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide This window is used to display the percentage of the CPU being used, expressed as an integer percentage and calculated as a simple average by time interval. To view the following window, click Monitoring > CPU Utilization: Figure 10 - 3. CPU Utilization window To view the CPU utilization by port, use the real-time graphic of the Switch and/or switch stack at the top of the web page by simply clicking a port.
PAGE 270
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Port Utilization Users can display the percentage of the total available bandwidth being used on the port. To view the following window, click Monitoring > Port Utilization: Figure 10 - 5. Port Utilization window To select a port to view these statistics for, select the port by using the Port drop-down menu.
PAGE 271
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 10 - 6. Packet Size window To view the Packet Size Table window, click the link View Table, which will show the following table: Figure 10 - 7. Packet Size Table window The following fields can be set or viewed: Parameter Description Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds.
PAGE 272
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 64 The total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets). 65-127 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).
PAGE 273
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 10 - 8. Received (RX) window (for Bytes and Packets) To view the Received (RX) Table window, click View Table. Figure 10 - 9. Received (RX) Table window (for Bytes and Packets) The following fields may be set or viewed: Parameter Description Port Use the drop-down menu to choose the port that will display statistics.
PAGE 274
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. Bytes Counts the number of bytes received on the port. Packets Counts the number of packets received on the port. Unicast Counts the total number of good packets that were received by a unicast address. Multicast Counts the total number of good packets that were received by a multicast address.
PAGE 275
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 10 - 11. UMB_Cast (RX) Table window (for Unicast, Multicast, and Broadcast Packets) The following fields may be set or viewed: Parameter Description Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second.
PAGE 276
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 10 - 12. Transmitted (TX) window (for Bytes and Packets) To view the Transmitted (TX) Table window, click the link View Table. Figure 10 - 13. Transmitted (TX) Table window (for Bytes and Packets) The following fields may be set or viewed: Parameter Description Port Use the drop-down menu to choose the port that will display statistics.
PAGE 277
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. Bytes Counts the number of bytes successfully sent on the port. Packets Counts the number of packets successfully sent on the port. Unicast Counts the total number of good packets that were transmitted by a unicast address.
PAGE 278
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 10 - 15. Received (RX) Table window (for errors) The following fields can be set: Parameter Description Port Use the drop-down menu to choose the port that will display statistics. Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200.
PAGE 279
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Transmitted (TX) To select a port to view these statistics for, select the port by using the Port drop-down menu. The user may also use the real-time graphic of the Switch at the top of the web page by simply clicking on a port. To view the following windows, click Monitoring > Errors > Transmitted (TX): Figure 10 - 16.
PAGE 280
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Time Interval Select the desired setting between 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The default value is 200. ExDefer Counts the number of packets for which the first transmission attempt on a particular interface was delayed because the medium was busy.
PAGE 281
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 10 - 19. Browse Router Port window Enter a VID (VLAN ID) in the field at the top of the window and click the Find button. Browse MLD Router Port Users can display which of the Switch’s ports are currently configured as router ports in IPv6. A router port configured by a user (using the console or Web-based management interfaces) is displayed as a static router port, designated by S.
PAGE 282
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IGMP Snooping Group Users can view the Switch’s IGMP Snooping Group Table. IGMP Snooping allows the Switch to read the Multicast Group IP address and the corresponding MAC address from IGMP packets that pass through the Switch. To view the following window, click Monitoring > IGMP Snooping Group: Figure 10 - 21.
PAGE 283
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Parameter Description VLAN Name The VLAN Name of the multicast group. VID List (e.g.: 1, 4-6) The VLAN ID list of the multicast group. Port List (e.g.: 1, 3-5) Specify the port number(s) used to find a multicast group. Group IPv4 Address Enter the IPv4 address. Click the Find button to locate a specific entry based on the information entered. Click the View All button to display all the existing entries.
PAGE 284
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide specific entry to the Static MAC table. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. System Log Users can view the history log as compiled by the Switch's management agent. To view the following window, click Monitoring > System Log: Figure 10 - 24.
PAGE 285
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Section 11 Save and Tools Save Configuration Save Log Save All Download Configuration File/Download Configuration File to NV-RAM (DGS-3200-24 only) Download Configuration File to SD Card (DGS-3200-24 only) Download Firmware/Download Firmware to NV-RAM (DGS-3200-24 only) Download Firmware to SD Card (DGS-3200-24 only) Upload Configuration File/Upload Configuration File to TFTP Upload Log File/Upload Log File to TFTP Re
PAGE 286
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Save Configuration Open the Save drop-down menu on the left-hand side of the menu bar at the top of the Web manager and click Save Configuration to open the following window: Figure 11 - 1. Save Configuration window (DGS-3200-10 and DGS-3200-16) Use the drop-down menu to choose a configuration file indexed as ID 1 or 2 and then click Apply. Figure 11 - 2.
PAGE 287
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Save All Open the Save drop-down menu on the left-hand side of the menu bar at the top of the Web manager and click Save All to immediately save the current configuration file and current log. The following window will open: Figure 11 - 5. Save All window Download Configuration File/Download Configuration File to NV-RAM The Switch can store dual configuration files.
PAGE 288
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Download Configuration File to SD Card Figure 11 - 8. Download Configuration File to SD Card window (DGS-3200-24) Use the radio button to select either IPv4 or IPv6. Enter the TFTP Server IP address for the type of IP selected. Specify the path/file name of the TFTP File. Specify the SD Card File name. Click Download to initiate the file transfer.
PAGE 289
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 11 - 11. Download Firmware to SD Card window (DGS-3200-24) Use the radio button to select either IPv4 or IPv6. Enter the TFTP Server IP address for the type of IP selected. Specify the path/file name of the TFTP File. Specify the SD Card File name. Click Download to initiate the file transfer. Upload Configuration File/Upload Configuration File to TFTP The Switch can store dual configuration files.
PAGE 290
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 11 - 15. Upload Log File to TFTP window (DGS-3200-24) To upload a log file, enter a TFTP Server IP address and TFTP File/path name. Select either IPv4 or IPv6 and then click Upload or Upload Attack Log. Reset The Reset function has several options when resetting the Switch. Some of the current configuration parameters can be retained while resetting all other configuration parameters to their factory defaults.
PAGE 291
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Appendix A – Mitigating ARP Spoofing Attacks Using Packet Content ACL How Address Resolution Protocol works Address Resolution Protocol (ARP) is the standard method for finding a host’s hardware address (MAC address) when only its IP address is known. However, this protocol is vulnerable because hackers can spoof the IP and MAC information in the ARP packets to attack a LAN (known as ARP spoofing).
PAGE 292
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide When the switch floods the frame of ARP request to the network, all PCs will receive and examine the frame but only PC B will reply the query as the destination IP matched (see Figure 3). Figure 3 When PC B replies to the ARP request, its MAC address will be written into “Target H/W Address” in the ARP payload shown in Table 3.
PAGE 293
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Forwarding Table Port1 00-20-5C-01-11-11 Port2 00-20-5C-01-22-22 279
PAGE 294
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide How ARP Spoofing Attacks a Network ARP spoofing, also known as ARP poisoning, is a method to attack an Ethernet network which may allow an attacker to sniff data frames on a LAN, modify the traffic, or stop the traffic altogether (known as a Denial of Service – DoS attack). The principle of ARP spoofing is to send the fake or spoofed ARP messages to an Ethernet network.
PAGE 295
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Figure 5 Prevent ARP Spoofing via Packet Content ACL D-Link managed switches can effectively mitigate common DoS attacks caused by ARP spoofing via a unique Package Content ACL. For the reason that basic ACL can only filter ARP packets based on packet type, VLAN ID, Source, and Destination MAC information, there is a need for further inspections of ARP packets.
PAGE 296
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide The configuration logic is as follows: 1. 2. Only if the ARP matches Source MAC address in Ethernet, Sender MAC address and Sender IP address in ARP protocol can pass through the switch. (In this example, it is the gateway’s ARP.) The switch will deny all other ARP packets which claim they are from the gateway’s IP. The design of Packet Content ACL on the Switch enables users to inspect any offset chunk.
PAGE 297
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide 283
PAGE 298
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Appendix B – Password Recovery Procedure This document describes the procedure for resetting passwords on D-Link Switches. Authenticating any user who tries to access networks is necessary and important. The basic authentication method used to accept qualified users is through a local login, utilizing a Username and Password.
PAGE 299
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Appendix C – System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch.
PAGE 300
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide console (Username: , IP: ) if user login by console, will no IP and MAC information for logging Configuration download was unsuccessful by console Configuration download was unsuccessful by console! (Username: , IP: ) Warning "by console" and "IP": , MAC: " are XOR shown in log string, which means if user login by console, will no IP and MAC information for logg
PAGE 301
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Configuration successfully uploaded by web Configuration successfully uploaded by web (Username: , IP: , MAC: ) Configuration upload was unsuccessful by web Configuration upload was unsuccessful by Web! (Username: , IP: , MAC: ) Log message successfully uploaded by web Log message successfully uploaded by web (Username: , IP: ) Log message up
PAGE 302
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide ) and MAC information for logging Log message successfully uploaded by telnet Log message successfully uploaded by Telnet (Username: , IP: ) Informational "by console" and "IP": , MAC: " are XOR shown in log string, which means if user login by console, will no IP and MAC information for logging Log message upload was unsuccessful by telnet Log message upload was unsucc
PAGE 303
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide ) Interface Console Web and MAC information for logging Port link up Port link up, Informational Port link down Port link down Informational Link aggregation Group linkUp/linkDown Link aggregation Group %d (Interface: %d) link up/Link aggregation Group %d (Interface: %d) link down Information Successful login through Console Successful login through Console (Usernam
PAGE 304
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide , IP: ) Successful login through Telnet Successful login through Telnet (Username: , IP: ) Informational Login failed through Telnet Login failed through Telnet (Username: , IP: ) Warning Logout through Telnet Logout through Telnet (Username: , IP: ) Informational Telnet session timed out Telnet session timed out (Username: , IP
PAGE 305
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide ) AAA Logout through SSH Logout through SSH (Username: , IP: ) Informational SSH session timed out SSH session timed out (Username: , IP: ) Informational SSH server is enabled SSH server is enabled Informational SSH server is disabled SSH server is disabled Informational Authentication Policy is enabled Authentication Policy is enabled (Module: AAA) Information
PAGE 306
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Successful login through Telnet authenticated by AAA local method Successful login through Telnet from authenticated by AAA local method (Username: ) Informational Login failed through Telnet authenticated by AAA local method Login failed through Telnet from authenticated by AAA local method (Username: ) Warning Successful login through SSH authenticated by AAA local method
PAGE 307
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Successful login through Console authenticated by AAA server Successful login through Console authenticated by AAA server (Username: ) Informational There are no IP and MAC if login by console. Login failed through Console authenticated by AAA server Login failed through Console authenticated by AAA server (Username: ) Warning There are no IP and MAC if login by console.
PAGE 308
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Successful login through Telnet authenticated by AAA server Successful login through Telnet from authenticated by AAA server (Username: ) Informational Login failed through Telnet authenticated by AAA server Login failed through Telnet from authenticated by AAA server (Username: ) Warning Successful login through SSH authenticated by AAA server Successf
PAGE 309
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide (Username: ) Enable Admin failed through SSH authenticated by AAA local_enable method Enable Admin failed through SSH from authenticated by AAA local_enable method (Username: ) Warning Successful Enable Admin through Console authenticated by AAA none method Successful Enable Admin through Console authenticated by AAA none method (Username: ) Informational Successful Enable A
PAGE 310
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Enable Admin failed through Console due to AAA server timeout or improper configuration Enable Admin failed through Console due to AAA server timeout or improper configuration (Username: ) Warning Successful Enable Admin through Web authenticated by AAA server Successful Enable Admin through Web from authenticated by AAA server (Username: ) Informational Enable Admin failed
PAGE 311
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide IP-MAC-PORT Binding Enable Admin failed through Telnet authenticated by AAA server Enable Admin failed through Telnet from authenticated by AAA server (Username: ) Warning Enable Admin failed through Telnet due to AAA server timeout or improper configuration Enable Admin failed through Telnet from due to AAA server timeout or improper configuration (Username: ) War
PAGE 312
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide ) Dynamic IMPB entry is conflict with static ARP Dynamic IMPB entry is conflict with static ARP (IP: , MAC: , Port ) Warning Dynamic IMPB entry is conflict with static IMPB Dynamic IMPB entry is conflict with staticIIMPB (IP: < ipaddr > | < ipv6addr >, MAC: , Port ) Warning Creating IMPB entry Failed due to no ACL rule available Creating IMPB entry Failed due
PAGE 313
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide JWAC WAC Loopback Detection RADIUS cleared cleared Multicast storm occurrence Port Multicast storm is occurring Warning Multicast storm cleared Port Multicast storm has cleared Informational Port shut down due to a packet storm Port is currently shut down due to a packet storm Warning When a client host authenticated successful JWAC authenticated user (Username: , I
PAGE 314
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide to the port and this port will be the VLAN untagged port member. Ingress bandwidth assigned from RADIUS server after RADIUS client is authenticated by RADIUS server successfully .This Ingress bandwidth will be assigned to the port.
PAGE 315
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide DHCP server IP address DHCP server(IP: , Port: ) Login OK MAC-AC login successful (MAC: , port: , VID: ) Informational Login Fail MAC-AC login rejected (MAC: , port: , VID: ) Warning Aged out MAC-AC host aged out (MAC: , port: , VID: ) Informational When a new voice device is detected in the port New voice device d
PAGE 316
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide PortSecurity Address full on a port Port security violation mac addrss %s on locking address full port %s BPDUProtection BPDU attack happened. Port enter BPDU under protection state (mode: drop / block / shutdown) Informational BPDU attack automatically recover. Port recover from BPDU under protection state automatically Informational BPDU attack manually recover.
PAGE 317
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide SD Card Managemnet server was deleted. was deleted. Backup failure Backup : at time failure. Warnning Backupsuccess Backup : success at time . Informational Execute configuration failure Error when execute configuration line: at time < time-range>.
PAGE 318
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide Appendix D – Trap Logs This table lists the trap logs found on the DGS-3200 Series Switches. Log Entry Description ID FirmwareUpgrade This trap is sent when the process of upgrading the firmware via SNMP has finished. 1.3.6.1.4.1.171.12.1.7.2.0.7 CfgOperCompleteTrap The trap is sent when the configuration is completely saved, uploaded or downloaded. 1.3.6.1.4.1.171.12.1.7.2.0.
PAGE 319
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide swPktStormDisablePort The trap is sent when the port is disabled 1.3.6.1.4.1.171.12.25.5.0.3 by the packet storm mechanism. swIpMacBindingViolationTrap When the IP-MAC Binding trap is enabled, if there's a new MAC that violates the pre-defined port security configuration, a trap will be sent out. 1.3.6.1.4.1.171.12.23.5.0.
PAGE 320
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide swSingleIPMSTopologyChange notification to the indicated host when its member generates a topology change notification. coldStart A coldStart trap signifies that the 1.3.6.1.6.3.1.1.5.1 sending protocol entity is reinitializing itself such that the agent's configuration or the protocol entity implementation may be altered.
PAGE 321
® xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide fan fails (DGS-3200-16/24) The FanRecover trap indicates that the failed fan is recovered. 1.3.6.1.4.1.171.12.11.2.2.3.0.2 This trap is sent when there is an IP address conflict. 1.3.6.1.4.1.171.12.1.7.2.0.5 ifMauJabberTrap This trap is sent whenever a managed interface MAU enters the jabber state.