D-Link DGS-3100 Bedienungsanleitung

D-Link ™ DGS-3100 SERIES GIGABIT STACKABLE MANAGED SWITCH User Manual V2.20[...]

Information in this document is subject to change without notice. © 2007 D-Link Computer Corpo ratio n. All rights reserved. Reproduction in any manner whatso ever without the written permission of D-Link Computer Corporation is strictl y forbidde n. Trademarks us ed in this text: D-Link and the D-Link logo are trademarks of D- Link Com puter Corp[...]

Table of Contents PREFACE ..................................................................................................................................................................I System Overview ............................................................................................................................... ................[...]

Defining S NMP Host Ta ble ............................................................................................................................... ............. 47 Defining S NMP Engi ne ID ............................................................................................................................... .............. 49 Enabli[...]

Configuring Port Security ................................................................................................................................................... 97 Configuring Gu est VLANs ............................................................................................................................... .................. 9[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual i Preface This preface provi des an overview to the gu ide, an d includes the following sections: • System Overview • Viewing the Device • Device Mana gement Me thods • User Guide Over view • Intended A udi ence • Notes, Notices, and Cautio n s • Safety Cauti ons • G[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual System Overview The DGS-3100 se ries and the DG S-3100-24TG Gigabit Ethernet Swit ches enhance networks by providi ng a powerful switch that eliminates network bo ttlen ecks, enabling network administrators to fine tune network conf igurations. The DGS-3100 ser ies and the DGS-3100-[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual iii Device Management Methods The DGS-3100 series and DG S-3 1 00- 24TG provide di f fere nt m e t hods fo r m a nagin g t he device i ncl udi n g: • Web Based Ma nagement Interface • SNMP-Based Ma nagem ent • Command Li ne Consol e Web Based Management Interface Once the de v[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual User Guide Overview This section provides an overview to th e DGS-3100 series and th e DGS-3100- 24TG Switch Manual, in cluding the guide structure and a chapte r overvie w: • Section 1, Getting Started — Provides general bac kgroun d for un derstandi ng and using t he Embedde d[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual v • Do not servi ce any pr oduct except a s explai ned in y our system docum entation. Ope ning or removing covers that are marked with the trian gular symbol with a lightning bolt may expose you to electrical shock . Only a trained service techni cian should serv ice compone nts [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Move products with care; ensure that a ll casters and/ or stabilizers are firmly conn ected to the system. Avoi d sudden stops and uneven surfaces. General Precautions for Rack-Mountable Products Observe the follo wing precautions for ra ck stability and safety. Also refer to the ra[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Protecting Against Electrostatic Dis charge Static electricity can harm de licate components inside your system. To prevent static damage, discharge static electricit y from your body bef ore you t ouch any of the electronic compone nts, suc h as the m icroprocessor . You ca n do s [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 1 GETTING STARTED To begin m anaging the devi ce, simply run the browser instal led on the m anagement st ation and poi nt it to the IP add ress defined for the d evice. For example; http://1 23.123.123.123. Please note that the proxy f or session connection should be turned off. NO[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Figure 1-1. Device Information Page The followin g table descri bes the mai n 6 areas on t he Device Inf ormation Page: View Description 1. Tree View Select the folder or window to be displayed. Th e fo lder icons can be opened to d isp lay the hyperlinke d menu buttons a nd subf ol[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Using the Tool Menu The tool m enu contains menu opt ions for: • Displaying the Stack Status • Locating Devices • Backing up an d Restorin g Confi guration Fil es • Resetting the Device • Downloading the Firmware • Rebootin g the Sy stem Displaying the Stack Status The S[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Backing up and Restoring Configuration Files The Config Backup and Restore Page contains fields for downloading and uploading the configuration file from the device through HTTP or TFTP ser ver. To bac k up and rest ore configurat ion files: 1. Click > Config Backup & Restore[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Resetting the Device The Factory Reset Page rest ores the factory defaults. To restor e the dev ice to the factory default settings: 1. Click > Reset . The Factory Reset Page open s: Figure 1-4 Factory Reset Page 2. Click . The factory default setting s are restored once it compl[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Downloading the Firmware The ‘Firmware Download’ web page is used to download the firmware files that will be used to manage the device. NOTE: Firmware version 1.x.x support s 4 SKUs od DGS-3100 series: DGS-3100-24, DGS- 3100- 24P, DGS-3100-48 and DGS-3100-48P , Firmware version[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual The Firmware Download Pa ge contains the following fields: Field Description HTTP Download Indicates that the Firmware fi le is downloaded via an HTT P server. Unit — Indicat es if the Firm ware file is do wnloaded t o a specific stac king mem ber or to All stacking members. File [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Rebooting the System The System Rebo ot Page provides a method for selecting one, or all of the units to be rebooted. To reboot the system: 1. Click > System Reboo t. The System Reboot Page opens: Figure 1-6 System Reboot Page The System Reboot Pa ge contains the Select Unit to R[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Using the Web System Components The following table contains information regarding the list of buttons: 9 Name Description Component Activate Activates field commands Add Adds selected items ALL Selects all Apply Applies field settings Backup Evokes backup Cancel Cancels settings Cl[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 10 2 CONFIGURING BASIC CONFIGURATION This section c ontains i nformati on for viewi ng device i nform ation, defi ning IP a ddresses, m anaging st acking, de fining port parameters, co nfiguring syst em user acc ounts, con figuring and m anaging system l ogs, definin g the system ti[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing Device Information The Device Information Page contains parameters f or config uring gene ral devi ce inform ation, inclu ding the syst em nam e, location, and contact, the sy stem MAC Add ress, System Up Time, and M AC addresses, a nd both s oftware, boot , and hardware ver[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 12 Field Description Boot Version Displays the installe d device boot version n umber. MAC Address Displays the MAC add ress assigne d to the device. IP Address Displays the IP address assigned to the de vice. Subnet Mask Displays the subnet m ask assigned t o the de vice. Default G[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining System Information The System Inf ormation Pa ge provides devic e information about s pecific stack ing m embers. To view sys tem inform ation: 1. Click Configuration > System Inform ation. The Sys tem Infor mation P age ope ns : Figure 2-2 System Information Page The Sy[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 14 Defining IP Addresses The IP Address Page contain s fields for ass igning IP a ddresses. Pack ets are forwarde d to the de fa ult IP when fram es are sent to a rem ote net work via the Default Gateway . The con figured IP a ddress m ust belong t o the sam e IP address subnet of o[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Managing Stacking Stacking enhances network flexib ility by building virtual switche s with more ports then are available in a sing le device. Stacks are managed by stacki ng member which called Stac k Master. , All othe r stacking m em bers serve as ports only. The following para g[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 16 Stacking members maintain the assigned Unit ID even after the stacking mem ber is rebooted. The Stack Master m ay reallocate IDs during system initialization to resolve duplicat e ID conflicts. Man ually assigned IDs cannot b e changed by the Stack Master, even if there is a conf[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 17 Electing a Stacking Master When ever a stacking me mber (or mo re than one) come s up, one of the stacking members is elected to be the stack Master. The Stack Master is selected as follows: • If one of the master enabled stacki n g members in the stack was set to Force Master [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 18 These stacking members do not participate in the Master Election process, and if no Stack Master is present, t he stacking members’ network po rts are shut down. Only the stacking ports are operation al. Both the Stack Master and all other stacking m embers carry out a continuo[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Building Stacks – Quick Start The DGS-3100 series supports th e fo llowing stacking scenario s: • Building a ne w stack from scratch • Increasing the stack by adding units to an existing stack This section contains the following topics: • Stack Resiliency • Managing a Se l[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 20 This section contains the following topics: • Building New Manually Ordered Stacks • Adding Stacki ng Mem bers to an Existin g Manually Ordered Stac k Building New Manually Ordered Sta cks To build new a self ordere d stack: 1. Connect the units physical ly throug h the stack[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual – If the new stacking m ember has a Unit ID of 1 or 2 , i.e. the stacking m ember is a master enable d unit, the ne w stacking member initiates the Master Election process. Ho wever, since the running Stack Master has a longer up-time, it remains the Stack Master and t he new stac[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 22 Unit ID 1, and servi ng as the stack Backup master, wh ile the already running stacking member with Unit ID 2 remains the active Stack Master. • The Stack Master performs Unit ID Allocation and Conflict Resolution process. – If the new stacking m ember is in the Fact ory Defa[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual – If the Stack Master remains in this sub-group, the behavior is the same as described abov e. If the Backup Master rema ins in this s ub group t he behavi or is the sam e as described i n 0 - Replacing a Failed Stack Master . NOTE: If a stack is divide d into tw o parts wit h one[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 24 Merging Stacks This example assumes that the user would like to merge two work ing stacks. This creates one stack from two separate s tacks. There are two scenari os: If new stacking members ar e pow ered down during insertion and then powered up • This is identical to insert s[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 25 • A running stac king m ember group i s added t o an existin g stack, assum ing each o ne of the stac k groups has an elected Stack Master. The total of existing stacking members and new stacking me mbers exceeds the m aximum allowed number of stacking m embers in a stack, whic[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 26 Configuring Stacking The Stacking S ettings Pa ge allows networ k managers to execut e force m aster and to cha nge each a nd every unit it s own uni t ID. To complet e th e changing process the us er need to reboot the unit. 1. Click Configuration > Stacking Settings . The St[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Ports • Configuri ng Port Properti es • Viewing Port Properties Configuring Port Properties The Port Setting Page contains parameters for configuring po rt properties. Gigabit ports op erate in full duplex mode only, and take on certain characteristics that are differen[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 28 Field Description 100M/Full — Indicates the port is curre ntly opera ting at 100 Mbps and full duplex m ode. 100M/Half — Indicat es the port i s currently o perating at 1 00 Mbps and hal f duple x mode. 1000M/Full — Indicates the p ort is curre ntly operat ing at 10 00 Mbps[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing Port Properties The Port Description Page allows net work m anagers prov ide a descripti on of devi ce ports. To define a port descri ption: 1. Click Configuration > >P ort Configuration > Port Des cription . The Port Desc ription Page opens: Figure 2-6 Port Descrip[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 30 ARP Settings The Address Resolut ion Protoco l (ARP) co nverts IP addresses i nto physi cal ad dresses and maps the IP a ddress to a MAC address. ARP allows a host to comm unicate with ot her hosts onl y when t he IP addre sses of its nei ghbors are known. To define ARP inform at[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Configuring User Accounts User accounts including us er passwords and access rights are defined on the User Accounts Pa ge . To define use r account information: 1. Click Configuration > Us er Accounts . The User Accounts Page opens: Figure 2-8 User Accounts Page The User Account[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 32 To edit the User Accounts Page : 1. Select a name on the User List . 2. Click . 3. Define the value. 4. Click . The new access rights are save d, and device is upda ted. To delete a User Accounts Page entry: 1. Select an entry. 2. Click . The user acc ount is del eted, and t he d[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Managing System Logs System Logs record and m anage event s an d report errors a nd inform ational message s. Event messages have a u nique form at, as per the Syslog protocols r ecommende d message format for all error rep orting. For example, Syslog a nd local device reporting mes[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 34 To delete a log entry: 1. Select the entry. 2. Click . The ent ry is delet ed, and the de vice is up dated. Configuring SNTP The device supports the Si mple Net work Time Protoc ol (SNTP). SNTP assures accurate network device clock time synchronizatio n up to t he mill isecond. T[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Figure 2-10 Time Settings Page The Time Settings P age contai ns the followi ng fields: Status Field Description Time Source Defines the time source by which the system time is set. The possible field values are: SNTP — Indicates that the system time is retrieved from a SNTP serve[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 36 Configuring Daylight Savings Time The TimeZone Settings Pa ge contains fields fo r definin g system time param eters for bo th the local hardware clock and the external SNTP clock. If the system time is kept using an exte rnal SNTP clock, and the external SNT P clock fails, the s[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual • Montenegro — From the last weekend of March until the last weekend of October. • Netherlands — From the last weekend of March until the last weekend of October. • New Zealand — From the first Sunday in October until the first Sunday on or after March 15. • Norway —[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 38 The TimeZone Sett i ngs Page contains the following fields: Field Description Daylight Savings Time State Defines type of DST enable d on the de vice. The p ossi bl e fi eld val ues are: Disable — Disables DST on the device. Thi s is the defaul t values . Repeating — Ena bles[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual DST Annual Settings Section The Annual Mode enables set ting a DST sea sonal tim e adjustm ent. This opt ion requi res definin g begin and end times by the specific dates. For exam ple, the network ad m i ni st rat or def ines that DST begins April 3 and ends Oct o ber 14. Field Des[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 40 Configuring SNMP Simple Net work Manage ment Proto col (SNM P) provides a method for managing netwo rk devices. The devi ce supports the following SNMP versions: • SNMP versio n 1 • SNMP version 2c • SNMP versio n 3 SNMP v1 and v 2c The SNMP agents maintain a list of variab[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining SNMP Views SNMP views provide or bl ock access to device features or aspects of features. For ex ample, a view can be defined to show that SNMP view A has included access to Multicast groups, while SNMP view B has exclude d access to Multicast groups. Feature access is gran[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 42 Defining SNMP Groups The SNMP Group Table P age provides information for creating SNMP groups and assigning SNMP access control privileges to SNMP groups. Groups enable net work managers to assi gn access rights t o specific device feat ures or feature aspects. To def ine SNMP gr[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description Notify View Name Defines a No tify view . The Notify vi ew sends traps for the assigned SNMP view. This is applicable for SNMPv3 only . The possible values are: Community/View TestReadView PWriteView PrivateView Security Model Defines the SNMP version att ached to [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 44 Defining SNMP Users The SNMP User Table Page enables assigni ng system users to SNMP groups and defining the user authentication m ethod. To assign system users: 1. Click Configuration > SMNP Settings >SNMP User T able. The SNMP User Tabl e Page opens: Figure 2-14 SNMP User[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description Auth-Protoc ol by Key Selects the aut hentication key type used to authe nticate users. The possible field values are: MD5 — Defines that users are authenticat ed via a HMAC-MD5 al gorithm key. SHA — Defines that users are aut henticat ed via a HMAC-SHA-96 auth[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 46 Defining SNMP Communities Access rights are managed by defining communities, using th e SNMP Communit y Table Page . When the community names are changed, access rights are also ch an ged. SNMP communities are defined only for SNMP v1 and SNMP v2c. To define SNMP communities: 1. [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining SNMP Host Table The SNMP Host Table P age contains information for defining filters that de termine whether traps are sent to specific host, as well as the trap type sent. To define the SNMP Host Table Page : 1. Click Configuration > SMNP Settings > SNMP Host Table. T[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 48 The SNMP Host Table Page contains the following fields: Field Description Host IP Address Defi nes the IP address to which the traps ar e sent. SNMP Version Defines the trap ty pe. The possibl e field values a re: SNMPV1 — Indicates that SNMP Version 1 traps are sent. SNMPV2c ?[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining SNMP Engine ID The Engine ID is a unique identi fier used for SNMP V3 im plemen tations. This is an alphanumeric string used to identify the SNMP engine on the switch. To define the S NMP Engine ID: 1. Click Configuration > SMNP Settings > SNMP Engine ID. The SN MP En[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 50 Enabling SNMP Traps The SNMP Configu ration Tr ap Page contains param eters for defining SNMP notifi cation param eters. To ena ble SNMP notifications: To en able SNMP Traps: 1. Click Configuration > SMNP Settings > SNMP Trap Configuration. The SNMP C onfigu ration Trap Pag[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual DHCP Auto Configuration In the DHCP Auto Configuration Page , users can e nable or disable aut omatic download o f the latest image an d configuration files from the DHCP server. Dur ing reboot, if DHCP Auto Configu ration is enabled, the d evice polls the TFTP Server. From the DHCP[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 52 Dual Image Services The device contains t wo software images, one for reboot a nd one for backup, in i ts flash mem ory. When a s oftware download is successfully com pleted, the new image automati cally becomes the new reboot file, unless the user manually configures the other f[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Config Firmware Image The Config Fir mware Image Config Firmw are Image Pag e allows users to change each device ’s image file. To chan ge the reboot file: 1. Click Configurat ion > Dual Image Services > Conf ig Firmware Image . Th e Config Firm ware Image Config Firmware Im[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 54 3 CONFIGURING L2 FEATURES This section c ontains inf ormation f or enablin g and con figurin g L2 Features. This section contains the following topics: • Enabling Jumbo Fram es • Configuring VLA Ns • Configuring GV RP • Defining Tr unk ing • Traffic Segmentation • Con[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Enabling Jumbo Frames Jumbo Frame support is designed to enhance Ethernet networ king throughpu t and significantly reduce the CPU utilization of large file transfers like large multimedi a files or large data files by enabling more efficient larger pa yloads per packet. The Jumbo F[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 56 Configuring VLANs Understanding IEEE 802.1p Priority Priority tagging is an IEEE 802.1p d e fined standard function design ed to provide a means of managing traffic on networks where many different types of data are trans mitted sim ultaneousl y. It is intended to alleviat e prob[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Term Description Untagging The act of stri pping 802. 1 Q V L AN in form ation out of the packet he ader. Ingress port A port on a switch where packets are flowin g into the switch an d VLAN decisi ons m ust be made. Egress port A port on a switch where pac kets are flowing out of t[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 58 802.1Q VLAN Tags The figure below shows th e 802.1Q VLAN tag. There are four addition al octets inserted after the source MAC add ress. Their presence is indicated by a value of 0x8100 i n the EtherType field. When a pack et' s EtherType fi eld is equal t o 0x8100, the packe[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 59 Port VLAN ID Tagged packet s (carrying the 802.1Q VID inform ation) can be transm itted from one 802.1Q com pliant net work devi ce to another with the VLAN information intact. This allows 802. 1Q VLANs to span network devi ces (and the enti re network, providing all network d ev[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 60 the ingress port. If it does not, the packet is dropped. If it has the same VID, the packet is forwarded and the destin ation po rt transmits it on its attached network segment. This process is referred to as ingress filte ring, and is used to conserve bandwid th within the switc[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining VLAN Properties The VLAN Configuration Page provides inform ation and global param eters for c onfiguring and worki ng with VL ANs. 1. Click L2 Features > 802.1Q VLAN . The VLAN Configur ation Page opens: Figure 3–5. VLAN Configuration Page The VLAN Configuration Page [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 62 2. Click the Add/Edit VLAN tab. The Add/Edit VLAN Informatio n Page opens: Figure 3–6. Add/Edit VLAN Information Page The Add/Edit VLAN Information Page contains t he followi ng fields: Field Description VID Defines the VLAN ID. VLAN Name Defines the user-defined VLAN nam e. Th[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Configuring GVRP GVRP timers need to be in the default values on all Layer 2-c onnected devices. If the GVRP tim ers are set differently on the Layer 2-connected devices, the GVRP application doe s not operate succes sfully. GARP VLAN Registratio n Protoc ol (GVRP) is s pecificall y[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 64 The GVRP Sett ing Page co ntains the fol lowing fields: Field Description Defines whet her GRVP is e nabled on the devi ce. T he possible field values are: GRVP Global Setting Enabled — Enables GRVP on the de vice. Disabled — Disables GRVP on the device. This is the default v[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Trunking The Trunki ng Config uration Pa ge contains information fo r assigning por ts to LAGs and def ining LAG parameter s. To assign ports to LAGs: 1. Click L2 Features > Trunking . The Trunki ng Config uration P age opens: Figure 3–8. Trunking Configuration Page Th[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 66 Notes about Trunking on the DGS-3100 Series DGS-3100 seri es suppo rt s up t o 32 LA Gs pe r devi ce (o r sta ck). NOTE: A port must belong to the default VLAN wh en the user is adding the port to a LAG, After adding the port to the LAG, the LAG itself can be joine d to other VLA[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Traffic Segmentation The Traffic Segmentation Page enables administrators to force traffic fr om source ports to bypass t he For warding Da tabase (FDB), and fo rward all Unicast, Mu lticast and Broadcast traffic to the forwardi ng port,. Fo rwarding decisions by the forwardin g por[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 68 Configuring LACP LAG ports can contain different media type s if t he ports are ope rating at the sam e speed. Aggregated links ca n be set up manually or automatically e stablished by enabling LACP on the relevant links. Aggregate ports can be link ed into link- aggregation por [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining IGMP Snooping When IGMP Snooping is enab led globally, all IGMP packets are forwarded to the CPU. The CPU analyzes the incoming packets and determines the following info rmation: – Which ports w a nt to joi n w hi ch Multicast grou ps. – Which ports ha ve M ulticast rou[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 70 Field Description 16711450 second s. Host Timeout Defines the time the host waits to recei ve a message before tim ing out. The default time is 260 seconds. The field r ange is 60-16711450 seconds. Router Timeout Defines the time the Multicast router wa its to receive a message b[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description Host Timeout Defines the time the host waits to receive a message before timing out. The default time is 260 seconds. The field rang e is 60-167 11450 seconds. Router Timeout Defines the time the Multicast router waits to receive a message before it times out . The[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 72 Configuring Port Mirroring Switches inherently forward frames to relevant ports only. This creates difficulty when traffic n eeds to be monitored, either for information gathe ring (such as statistical analysis, s ecur ity traces, etc.) or for troubles hooting higher-l ayer proto[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description None Defines that port m irroring is not appli ed to the ports. 2. Define the Status, Uni t , and Target fields. 3. Click to activate the Port Mirroring function. 4. Define the Unit, Tx , and Rx . fields under Source Port Setting. 5. Click to capture the configured[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 74 Configuring Spanning Tree Spanning Tree Protoc ol (STP) provides tre e topography for any arrangement of bridge s, as well as providin g a singl e path between end st ations on a network, t hus elimi nating loops. Loops occur when alternate routes exist between hosts. Loops in an[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Spanning Tree Global Parameters While Classic STP p revents Laye r 2 forwardi ng loops in a general net work topolo gy, converge nce can take between 30-6 0 seconds. This time may delay det ecting po ssible loops and pro pagating status topology changes. Rapid S panning Tre[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 76 Field Description Disabled – BPDU forwarding is disabled on the device. (This is t he default val ue) Bridge Priority (0 – 61440) Specifies the selected spanning tree instance device priority. The field range is 0-61440. The default valu e is 32768. Bridge Max Age (6- 40) Set[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining STP Port Settings STP can be set up on a port per port basis. In addition to setti ng Spanning Tree p arameters for use at the switch level, the switch ena bles confi guring groups o f ports, i n which case each port -group has its ow n spanni ng tree an d requires s ome of[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 78 Field Description packets. Edge Indicates whether the selected port is an e dge port. The possible field val ues are: True — Defines the po rt as an edge port. Edge ports cannot create loops; ho wever, they can lose edge port status if a topol ogy cha n ge creates a potential f[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Multiple Spanning Tree Configuration Identification Multiple Spanning Tree (MSTP) provides various load ba lancin g scenarios by allowing multiple VLANs to be mapped to a single spanning tree instance, providing multiple pathways acros s the network. For example, while port[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 80 4. Click to an ID row to edit the ID value. 5. Define the new value . 6. Click . The Multiple Spann ing Tree Configuration Identification is defined, and th e device is updated. Defining MSTP Port Information Network Administrators can assi gn MSTP Interface settings in the MSTI [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description another port for fo rwarding Disabled — Disables the port for the specific instance . Role Indicates the port role assigned by th e STP algorith m to provide to STP paths. The possible field values are: Enabled — Enables the port for the specific instance. Root[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 82 Defining Forwarding and Filtering This section contains information for conf iguring bo th Unicas t and Multicast filtering, and co ntains the following topics: • Defining Unicast Forwardin g • Defining Multicast Forwarding Defining Unicast Forwarding The Unicast F orwarding [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual To edit a FDB table entry: 1. Select the entry. 2. Click . 3. Define the values. 4. Click . The entry is updated, and the device is updated. To delete a FDB table entry: 1. Select the entry. 2. Click . The entry is deleted, and the device is updated . Defining Multicast Forwarding T[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 84 3. Select either all, or indivi dual ports: – Click to select all ports as None or Egress ; – Alternatively, click to select the ports individually. The default is 1-48 Non e. 4. Click .The Multicast forwar ding setti ngs are appl ied to t he port, an d the device i s update [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 85 4 CONFIGURING QUALITY OF SERVICE Configuring 1p Priority tagging is an IEEE 802.1p d e fined standard function design ed to provide a means of managing traffic on networks where many different types of data are trans mitted sim ultaneousl y. It is intended to alleviat e problems [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 86 Figure 4-1. Mapping QoS on the S witch The picture abov e shows the default prior ity setting for the Switch. Class-3 has the highest pr iority of the four priority queues on t he Switch. In ord er to im plem ent QoS, t he user is required to instruct the Switch to examine the he[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 87 Understanding QoS The Switch has fo ur priorit y queues. Thes e priority queues are label ed as 3 (the hig hest queue ) to 0 (the lowest queue). T he eight (0-7) pri o ri t y tags, s pecif ied in IEEE 802. 1p are mapped to the Switch's priority tags as follows: • Prioritie[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 88 Defining Bandwidth Settings The Bandwidt h Control Page allows network m anagers to define the bandwidth settings for a specified ingress interface. 1. Click QoS > Bandwidth Control . The Bandwidth Control Page opens: Figure 4-2. Bandwidth Control Page The Bandwidt h Control P[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Configuring Storm Control Storm control limits the am ount of Mu lticast, Broadcast and Unkno wn Unicast frames acce pted and forwarded by the device. When Layer 2 fram es are forwarde d, Broadcast, M ulticast and U nknown Unica st frames are fl ooded to all p orts on the relevant V[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 90 3. Click . The storm control settings are configure d, and the d evice is updat ed. Mapping Ports to Packet Priorities The 802.1P Default Priority Page provides traffic classific ation. by assi gning pr iority values per port. The priority value is assigned when packet arri ves t[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Mapping Priority to Classes (Queues) The 802.1P User Priority P age al lows netw ork managers to assig n priority tags to cl asses (que ues). If a network m anager defines a priori ty of 01 t o Class 3, all pac kets arrivi ng with an assi gned val ue of 01 are se nt to class (q ueue[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 92 Configuring QoS Scheduling Mechanism The QoS Sch eduling Mechanism Pa ge contains fields for defining t he QoS sche duling forwa rding sch eme. To defi ne the QoS scheduling mechanism : 1. Click QoS > QoS Scheduling Mechanism . The QoS Scheduling Mechanism Pag e opens: Figure [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Multi-Layer CoS Settings For network administrators wanting to configure Multi Layer CoS settings, imple mentation in the switch is done via the Access Control List. Hence, the Multi-Layer CoS Setting Page has two hyperlinks; one to the Access Profile List, which enables th[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 94 5 SECURITY FEATURES This section c ontains inform ation for e nabling a nd configuri ng device sec urity includi ng user acco unts. • Configuri ng Safeguard Engine • Configuring Trus t Host • Configuring Port Security • Configuring Gu est VLANs • Configuring Port Authen[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Configuring Safeguard Engine The Safeguard Engine P age al lows network a dminist rators to set networ k alarms to p rotect the CPU from att acks, based on rising and falling threshold levels of Broadcasts and CPU Utilization. Th e Safeguard mechanism immediately implement s Broadca[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 96 Configuring Trust Host The Trusted Host Page permi ts network m anagers to manage the de vice from remote stati ons. Network managers can configure up to three remote stations. Ensure th at the remote stations are configu red with the IP address from which the device is currently[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Configuring Port Security Network security can be increased by lim iting access on a sp ecific port only to users with specific MAC addresse s. The MAC addresses can be dynamically learned or statically co nfigured. Locked port security monitors both received and learned packets tha[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 98 Field Description Max Learnin g Addr Indicates the num ber of MAC addresse s that can be learned on the port. 2. Define the U nit, From Port, To Port , Max Address (0-64), and Admin State fields. 3. Click Port secu rity is enabled, and th e device is updated. Configuring Guest VL[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 99 Configuring Port Authentication 802.1X Port-based authentication aut henticates us ers on a per-port/per mac basis via an ex ternal server. Only authenticated and approved system users can transmit and rec eive data. Ports are aut henticated via the RADIUS server usi ng the Exten[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 100 To enable the 802.1X: 1. Click Security > 802.1X Setting . The 802.1X Setting Page opens: Figure 5-12. 802.1X Setting Page The 802.1X Setting P age cont ains the fol lowing fiel ds: Field Description 802.1 X Indicates if 802.1X is enabled on the de vice. The possi bl e fi el [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description value. Disabled — Disables re-a uthenticati ng the port or MAC addresses after t he port or MAC address aut henticati on has tim ed out. Control Indicates the host status. If there is an asterisk (*), the port is either not linked or is down. The possible field v[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 102 To enab le MAC Auth enticati o n: 1. Click Security > 802.1X Setting . The 802.1X Setting Page opens: The 802.1X Setting P age cont ains the fol lowing fiel ds: Field Description 802.1 X Indicates if 802.1X is enabled on the de vice. The possi bl e fi el d val ues are : Enabl[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description value. Disabled — Disables re-a uthenticati ng the port or MAC addresses after t he port or MAC address aut henticati on has tim ed out. Control Indicates the host status. If there is an asterisk (*), the port is either not linked or is down. The possible field v[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 104 Configuring MAC Authentication (by using Guest VLAN, 802.1X and Radius pages) This is the sequence of operatons requi red to configure MAC Authentication in DGS-31 00 series. 1. In order to configu re a guest VLAN, th e user is required to create a VLAN firs t, in the following [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 3. After the ports were assigned to the Guest VLAN, the user needs to configure a Radius Server that will hold the MAC Authentication datab ase. This should be don e via click Security > 802.1 X > Authentic RADIUS Server page according to the exam ple below. 4. Click Security [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 106 5. The second step on Security > 802.1X > 802.1X Setting pag e will be configur ation of the required ports as ‘MAC Based’ authent ication (opp osite to ‘Port Based’ authentication) 6. The last step on Security > 802.1X > 802.1X Setting page should be setting[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining RADIUS Settings Remote Author ization Di al-In User Service (RADIUS) servers provide additional se curity for network s. RADIUS servers provide a centralized aut henticati on method for mana gem ent access. The default parame ters are user-defi ned, and a re applied t o new[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 108 4. Define the authentication port in the Auth entic Por t field. 5. Define the accountin g port in the Accountin g Port field. 6. Define the authentication and encryp tion key in the Key field. 7. Reenter the RADIUS Key in the Confirm Key field. 8. Click . • To edit the Radius[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Figure 5-14. SSL Configuration Settings Page The SSL Configuration Settings Pag e contains t he following fields: Field Description SSL Status Indicates if SSL is enable on the de vice. The possible field values are: Enabled — Indicates SSL is enabled on the device. Disabled — I[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 110 Configuring Secure Shell Security Secure Shell perm its network users t o secure ly login t o the networ k f rom a rem ote location over an inse cure network. SSH a secure login to remote host com puters, a safe m ethod of executing com mands on a remote end node, and will provi[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 3. Define the SSH global setting p ort number in the Port (1-65535) field. 4. Click . The SSH configurat ion is defi ned, and t he device i s updated. Defining SSH Algorithm Settings This SSH Algorithm Settin gs Page allows network administrators to enable a public key for SSH authe[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 112 All algorithms are enabled by default. To en able SSH Algorithms: 1. Click Security > SSH > SSH Algorithm Settings . The SS H Algorithm Settings P age opens: Figure 5-16. SSH Algorithm Settings Page The SSH Algor ithm Sett ings Page contains t he followi ng fields: Field D[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Application Authentication Settings Application Authen tication permits network administrators to assign authentication method s for user authen tication. For example, console users can be authentic ated by Authentication List 1, while Telnet users are authenticated by Auth[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 114 Configuring Authentication Server Hosts The Authentication Server is a remote devi ce connected to th e same network as the Client and Authenticator. Users are authenticated using either RADIUS or TAC ACS+, and must be authenticated by the server before attaining network access.[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 3. Click .The Authentication Host propert ies are de fined, an d the device i s updated. • To edit an authentication, click adjacent to the releva nt IP Address on the list. The upper fields display the current values, which then can b e edited. • To delete an authen tication, c[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 116 Field Description are: RADIUS — User authe ntication occurs at the RADIUS server. TACACS + — The user authe ntication occurs at the TACA CS+ server. None — No user authentic a tion oc curs. Local — User authe ntication occurs at the devi ce level. T he device checks the [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Enable Methods Network user s must first login to the de vice on the Enable Method Lists Page . Access a s non-administrative use rs is granted. The Enable Method Lists Page allows network mangers to assign user pri vile ges usi ng authe ntication methods on the device. Onc[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 118 Field Description Method 2 Indicates the second m ethod used to authen ticat e the network user. The pos sible field values are: RADIUS — User authe ntication occurs at the RADIUS server. TACACS + — The user authe ntication occurs at the TACA CS+ server. None — No user aut[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Configuring Local Enable Password The Config ure Local E nable Passw ord Pa ge allows network administrators to conf igure the local enab led passw ord. To define the net work Local E nable passwo rd: 1. Click Security > Access Authentication Cont rol > Configure Local Enable [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 120 6 MONITORING THE DEVICE This section c ontains info rmation for view device an d packet statis tics as well as, viewi ng IGMP info rmation a nd MAC address information . This section includes the following topics: • Viewing Stacking Information • Viewing CPU Utilization • [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing Stacking Information The Stacking I nformati on Page provides specific inform ation fo r stacked devices. To show the Stacking Inform ation Page : 1. Click , and from the menu select Sh ow St ack Status. 2. Alternatively, click Monitoring > Stacking Information i n the Tr[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 122 Viewing CPU Utilization The CPU Utilization Page contains information abou t the system’s CPU utilization. 1. Click Monitoring > CPU Uti lization . T he CPU Utilization Page opens: Figure 6-2. CPU Utilization Page The CPU Utilization Page contains the following fields: Fiel[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing Port Utilization The Port Utilization Pag e contains port utilization information for specific ports. To view port statistics: 1. Click Monitoring > Port Utiliza tion . The Port Utilization Page opens: Figure 6-3. Port Utilization Page The Port Utilization Pag e contains [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 124 Viewing Packet Size Information The Packet Size Page displays pac kets received by the switch, arranged in seve n groups and classed by size, to be viewed as either a line graph or a table. 1. Click Monitorin g > Pa cket Size . The Packet Size Page opens: Figure 6-4. Packet S[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing Received Packet Statistics The Received(RX) Page contains information about packets transmitted th rough de vice ports. To vi ew received packet statistics: 1. Click Monitoring > Packets > Received(RX) . The Received(RX) Page opens: Figure 6-5. Received(RX) Page The Re[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 126 5. Click . The selected RX pac ket analysis is displayed. 6. Define the Show/Hide field. 7. To view the graph as a table, click View Table . Viewing UMB_cast Packet Statistics The UMB_cas t(RX) Page displays the number of UMB cast (Unicast, Multicast and Broadcast) pa ckets rece[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Field Description Broadcast checked — Displays the total amount of transmitted Broadcast packets. 2. Define the Unit and Por t fields. 3. Click to load the defined pa rameters. To clear the Unit and Port fields: 1. Click . The fields are cleared. 2. Define the Time Interval and Re[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 128 Field Description values are: 1 s - 5s, 10s, 1 5s, 20s, 30s, 40s, 50s, and 60s. Record Number Indicates the transmitted rec ord number. Show/Hide Displays the bytes/packets re ceived inform ation. The possi ble field values are: Bytes checked — Displa ys the total amount of tr[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing RADIUS Authenticated Session Statistics The RADIUS Authentication Page provides RADIUS authen tication sessions, including how many session s were initiated, which ports intimated the authentication sessio ns, and whether or not the sessions were granted. 1. Click Monitorin [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 130 Viewing ARP Table The Browse ARP Table P age provi des inform ation regarding ARP VLA Ns, includin g which IP ad dress was m apped to w hat MAC address. To view the ARP table: 1. Click Monitoring > Browse ARP Table. The Browse ARP Table Pa ge opens: Figure 6-9 Browse ARP Tabl[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing Router Ports The Browse Router Port Page displays which ports are connected to routers. Port s can be conn ecte d to routers either as a static port o r as a dynam ic port. 1. Click Monitoring > Browse Router Port . The Browse Router Port Page opens: Figure 6-10 Browse Ro[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 132 Viewing Session Table The Browse Session T able Page displays information regarding device session s which were initiated by system Users. To view session table information: 1. Click Monitoring > Browse Session Table . The Browse Sessi on Tabl e P age opens: Figure 6-11 Brows[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Viewing IGMP Group Information The IGMP Snooping Gr oup Page contains vi tal IGMP g roup info rmation, i ncluding the Multicast Gro up IP address a nd the correspondin g MAC address t hrough whi ch the IGM P packets passe d. 1. Click Monitoring >IGMP S nooping Group . T he IGMP S[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 134 Defining Dynamic and Static MAC Addresses Packets addressed to destinations store d in either the Static or Dy namic database s are immedia tely for warded to the por t. The MAC Address T able Page can be sorted by interface, VLAN, or MAC Address, whereas MAC addresses are dynam[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 2. Select the Stacking mem b er in the Unit field. 3. Define the Port , VLAN Name , and MAC Address fields. 4. Click . – To view all entries, click . – To clear static entries, click . – To clear dynamic entries, click . – To clear all entries, click . The MAC Address Table [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 136 Viewing System Log The System Log Pa ge provid es informat ion about system logs, includi ng inform ation when t he device was b ooted, how t he ports are operat ing, when users log ged in, when sessi ons tim ed out, as well as ot her system inform ation. T o view the System Log[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 137 7 MANAGING POWER OVER ETHERNET DEVICES Power over Ethernet (PoE) provides power to devices ov er existing LAN cabling, with out updating or modifyin g the network infrast ructure. Po wer over Ethe rnet removes t he necess ity of pl acing networ k devices ne xt to powe r sources.[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 138 Defining PoE System Information The PoE Port Setti ng Page contains system PoE information for enabling PoE on the device, monitoring the current power usage , and enab lin g PoE traps . To enab le PoE on the d evice: 1. Click PoE > PoE Port Setting . The PoE Port Settin g Pa[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Fields Description Class 2 — Indicate s the pow er consumption is 7W. Class 3 — Indicat es the pow er consumpti on is 15.4W . Status Indicates the inline power source status . The possible field values are: Normal — Indicat es that t he power s upply unit is functi oning. Off [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 140 Displaying and Editing PoE System Information The PoE System Setting Page displays system PoE inform ation on the devi ce, moni toring the cu rrent power usage, and enabling PoE traps. To displa y syst em PoE i nformati on on the device: 1. Click PoE > PoE System Setting. Th [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 141 8 DEFINING ACCESS PROFILE LISTS Access Control Lists (ACL) al low network m anagers to defi ne classifi cation acti ons and rules fo r s pecific ingress ports. Packets entering an ingress port with an active ACL are either admitted, denied or subject to Quality o f Service actio[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 142 ACL Configuration Wizard The ACL Configur ation Wizard Page provides information for configuring Access Control Lists. The ACL Configurat ion Wiza rd Page assists in configuring ACLs intuitively and quickly, and creates ACL profiles and rules automaticall y. To define ACLs: 1. C[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Fields Descri p tion TCP Source Port — Matches the packet to the TCP Source Por t TCP Destination Port — Matches the packet to the TCP Destination Port UDPAll — Specifies a UDP Packets filtering. UDP Source P ort — Matches the packet to t he UDP Source Port UDP Destination P[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 144 Defining Access Profile Lists This section contains the following topics: • Adding ACL Profiles • Defining Le vel 2 ACL • Defining Le vel 3 ACL Adding ACL Profiles The ACL Profile List Page provides information for conf iguring ACL Profiles manually. ACL profiles are attac[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Figure 8-3 Add ACL Profile Page The Add ACL Profile Page contains the following fields: Field Description L2 ACL Defines the ACL profil e Layer 2 pr ot oc ols. The possible val ues are: Tagged — De fines the p rofile Layer 2 t o match 802.1Q fiel ds in the Laye r 2 header. Untagge[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 146 Defining Level 2 ACL If L2 ACL Tagged is selected, the page updat es as follows: Figure 8-4 ACL Profile L2 ACL Tagged Page To define L2 MAC Ad dress ACL profile: 1. Click the MAC Address button. The ACL Profile L2 ACL Tagged MAC Add ress Page updates to show the following: Figur[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual The ACL Profile L2 ACL Tagged MAC Address Page contains t he followi ng fields: Field Description Source MAC Mask Defines the range of source address es relativ e to the ACL rules (0 =ignore, 1=check). For example, to set 00:00:00:00 : 10:XX, use ma sk FF:FF:FF:FF:FF:00. Destinat io[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 148 To define L2 Ether T ype ACL profile This option de f i nes whet her or not the Ether Type field is checke d for a match. 1. Click the Ether Type button. The ACL Profile L2 ACL Tagged Ether Type Page updates to show the following: Figure 8-7 ACL Profile L2 ACL Tagged Ether Ty pe[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual If L2 ACL Unt agged is selected, the page updates as fo llows (without the 802.1Q VLAN field): Figure 8-8 ACL Profile L2 ACL Untagged Page Defining Level 3 ACL If L3 ACL ICMP is selected, the page updates as follows: Figure 8-9 Add ACL Profile L3 Page 149[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 150 To define L3 IPv4 DSCP ACL profile: This option de f i nes whet her or not the DSCP fiel d is chec ked for a matc h. 1. Click the IPv4 DSCP bu tton. The ACL Profile L3 ACL ICMP IPv4 DSCP Page updates to sho w the following: Figure 8-10 ACL Profile L3 ACL ICMP IPv4 DSCP Page 2. C[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual The ACL Profile L3 ACL ICMP IPv4 Address Page conta ins the foll owing fields: Field Description Source IP Mask Defines the range of source IP ad dresses, releva nt to the ACL r ules. (0=ignore, 1=c heck). For example, to set 176.212.XX.XX , u se mask 255.255.0.0 Destination IP Mask[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 152 To define L3 IGMP ACL profile: This optio n defines whether or not the IGMP field is c hecked fo r a match. If L3 ACL IGMP is selected, the page updates as follows: Figure 8-13 ACL Profile L3 IGMP Page 1. Click the IGMP button. The ACL Profile L3 IGMP Selected Page updates to sh[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 2. Click . The ACL profile is added, and the device is updated . If L3 ACL TCP is selected, the page updates a s follows: Figure 8-15 ACL Profile L3 TCP Page To define L3 TCP Port ACL profile: 1. Click the TCP Port button. The ACL Profile L3 TCP Port Page updates to show the followi[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 154 The ACL Profile L3 TCP Port Page contains the following fields: Field Description Source Port Mask Defines the range of source Ports releva nt to the ACL rules . (0=ignore, 1=check). For example, to set 0 – 15, set m ask of FFF0. Destination Port Mask Defines the r ange of des[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual If L3 ACL UDP is selected, the page updates as follows: Figure 8-18 ACL Profile L3 UDP Page 1. Click the UDP Port button. The ACL Profile L3 UDP Port Page updates to show the followi ng: Figure 8-19 ACL Profile L3 UDP Port Page 155[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 156 The ACL Profile L3 UDP Port Page contains the following fields: Field Description Source Port Mask Defines the range of source Ports releva nt to the ACL rules . (0=ignore, 1=check). For exampl e, to set 0 – 15, set mask o f F. Destination Port Mask Defines the r ange of dest [...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Defining Access Rules Lists The following conditions can be defined as Access Rules: Filter Description Source Port IP Address and Wildcard Mask Filters the packets by the Source port IP address and wildcard mask. Destination Port IP Address and Wildcar d Mask Filters the packets by[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 158 To change AC L rules: 1. Click . The Add Access Rule Page opens: Figure 8-21 Add Access Rule Page (I P based ACL) The Add Access Rule Page contains the following fields: Field Description Profile ID Displays the Profile ID to which the ru le is being added to. Source ID Displays[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 2. Define the Rule Detail fields. 3. Click . The rule is cha nged, and the device i s updated. NOTE: Each Access Profile must create rules wi th unuque Access IDs, Access IDs cann o overlap in two different Access Profiles . 159[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 160 Finding ACL Rules The ACL Finder Page identifies any rule which has been assigned to a specific port. To find ACL rules: 1. Click ACL > ACL Finder: The ACL Finder Page opens: Figure 8-22 ACL Finder Page The ACL Finder Page contains the following fields: Field Description Prof[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Figure 8-23 Rule Detail Page The Rule Detail Page contains the following fields: Field Description Profile ID Displays the profile ID range . Source MAC Displays the Source MAC rang e. Destination M AC Displays the destination MAC range. Ether Type Displays if Ether Type is included[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual 162 Notes about ‘IP’ and ‘MAC’ Based ACLs in the DGS-3100 Series ACLs can be configured in DGS-3100 series via the WEB GUI in two ways: th rough the ‘ACL Conf iguration Wizard ’ screen (by autom atic creation of profile an d rule) and th rough the ‘AC L Profile List ?[...]

DGS-3100 Se ries Giga bit Stackabl e Mana ged Switc h User M anual Notes about ACLs capacity in the DGS-3100 Series • The user can create up to 15 Access Profiles. • The user can configure up to 240 Access IDs, each Access ID is unique i.e. t he same Access ID can’t be created from two diffe rent Access Profiles. • The maximum capacity of D[...]

164 Subject to the terms and conditions set fo rth herein, D-Link Systems, Inc. (“D-L ink”) provides this Limited Warranty: • Only to the person or entity that originally purchased the product fro m D-Link or its authorized reseller or distributor. • Only for products purchased and delivered within the fifty states of the United States, the[...]

165 D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing req uirements, or for which an RMA number is not visible from the outside of the package. T he product owner agrees to pa y D-Link’s reasonable handling and return shipping charges for any product that is not packaged and shipped i[...]

166 Product Registration Register your D-Link pr o duc t online at http://support.dlink.com/register/ Product registration is entirely volunta ry and failure to complete o r return this form will not diminish your warranty rights.[...]

167 LIMITED WARRANTY D-Link provides this lim ited warranty for its product only to the person or entity who originally purchased the product from D-Link or its authoriz ed reseller or distributo r. D-Link would fulfill the warranty obligation according to the local warranty policy in which you purchased our products. Limited Hardware Warranty: D-L[...]

168 D-Link in writing, the replacement Softwa re is provided only to the original licensee, and is subject to the terms and conditions of the li cense granted by D-Link for the Software. The Warranty Period shall extend for an additional ninety (90) days after any replacem ent Software is delivered. If a material non-conformance is inca pable of co[...]

169 is not contemplated in the docu mentation for the product , or if the model or se rial number has been altered, tampered with, defaced or removed. Initial installation, installation and removal of the product for repair, and shipping costs. Operational adjustments covered in the ope rating manual for the product, and normal maintenance. Damage [...]

170 Some states do not allow exclus ion or limitation of incidental or conse quential damages, or limitations on how long an implie d warranty lasts, so the foregoi ng limitations and exclusions may not apply. This limited warranty provi des specific legal rights a nd the product ow ner may also have other rights which vary from state to state. Tra[...]

TECHNICAL SUPPORT Technical Support You can find software updates an d user documentation on the D-Link website. D-Link provides free techni cal support for customer s within the United States and within Canada for the duration of the servi ce period, and warranty confirmation service, during the warr anty period on this produ ct. U.S. and Canadian[...]

172 Technical Support You can find software updates an d user documentation on the D-Link web sites. If you require product support, we encou rage you to browse our FAQ se ction on the Web Site before contacting the Supp ort line. We have many FAQ’s which we hope will provide you a spee dy resolution for your problem . For Customers within The Un[...]

Technische Unterstützung Aktualisierte Versionen von Software und Benutzerhandbuch finden Sie auf der Website von D-Link. D-Link bietet kostenfreie technische Unterstützung für Kunden innerhalb Deutschlands, Österreichs, der Schweiz und Osteuropas. Unsere Kunden können technische Unterstützung über unsere Website, per E-Mail oder telefonisch[...]

174 Assistance technique Vous trouverez la docume ntation et les logiciels les pl us récents sur le site web D- Link. Vous pouvez contacter le service te chnique de D-Link par notre site internet ou par tél éphone. Support technique destiné au x clients établis en France: Assistance technique D-Link par téléphone : 0820 0803 03 N° INDIGO - [...]

Asistencia Técnica Puede encontrar las últimas versiones de software así como documentación técnica en el sitio web de D-Link . D-Link ofrece asistencia técnica gratuita para clientes residentes en España durante el periodo de garantía del producto. Asistencia Técnica de D-Link por teléfono: +34 902 30 45 45 Lunes a Viernes de 9:00 a 14:0[...]

176 Supporto tecnico Gli ultimi aggiornamenti e la documentazione sono disponibili sul sito D-Link. Supporto tecnico per i cli enti residenti in Italia D-Link Mediterraneo S.r.L. Via N. Bonnet 6/B 20154 Milano Supporto Tecnico dal lunedì al venerdì dalle ore 9.00 alle ore 19.00 con orario continuato Telefono: 199 400057 URL : http://www.dlink.it/[...]

Technical Support You can find software updates an d user documentation on the D-Link web site. D-Link provides free techni cal support for customer s within Benelux for the duration of the warranty period on this product. Benelux customers can contact D-Link tech nical support through our we bsite, or by phone. Tech Support for customers within th[...]

178 Pomoc techniczna Najnowsze wersje oprogramowania i dokumentacji u ż ytkownika mo ż na znale źć w serwisie internetowym firmy D-Link. D-Link zapewnia bezp ł atn ą pomoc techniczn ą klientom w Polsce w okresie gwarancyjnym produktu. Klienci z Polski mog ą si ę kontaktowa ć z dzia ł em pomocy technicznej firmy D-Link za po ś rednictwem[...]

Technická podpora Aktualizované verze software a uživatelských p ř íru č ek najdete na webové stránce firmy D-Link. D-Link poskytuje svým zákazník ů m bezplatnou technickou podporu Zákazníci mohou kontaktovat odd ě lení technické podpory p ř es webové stránky, mailem nebo telefonicky Web: http://www.dlink.cz/suppport/ E-mail: s[...]

180 Technikai Támogatás Meghajtó programokat és frissítéseket a D-Link Magyarország weblapjáról tölthet le. Telefonon technikai segítséget munkanapokon h étf ő t ő l-csütörtökig 9.00 – 16.00 óráig és pénteken 9.00 – 14.00 óráig kérhet a (1) 461-3001 telefonszámon vagy a support@dlink.hu emailcímen. Magyarországi tech[...]

Teknisk Support Du kan finne prog ramvare oppdater inger og br uker dokumentasjon på D-L inks web sider. D-Link tilbyr sine kunder gratis teknisk su pport under produktets garantit id. Kunder kan kont akte D-Links teknisk support via våre hjemmesider, eller på tlf. Teknisk Support: D-Link Teknisk telefon Support: 800 10 610 (Hverdager 08:00-20:0[...]

182 Teknisk Support Du finder software opdateringer og bruger- dokumentation på D-Link’s hjemmeside. D-Link tilbyder gratis teknisk support til kund er i Danmark i hele produktets gara ntiperiode. Danske kund er kan kon takte D-Li nk’s tekn iske support via v ores hjemmeside elle r telefonisk. D-Link teknisk support over tele fonen: Tlf. 7026 [...]

Teknistä tukea asiakkaille Suomessa: D-Link tarjoaa teknistä tukea asiakkailleen. Tuotteen taku un voimassaoloajan. Tekninen tuki palvelee seuraava sti: Arkisin klo. 9 - 21 numerosta 0800-114 677 Internetin kautta Ajurit ja lisätietoja tuotteista. http://www.dlink.fi Sähköpostin kautta voit myös tehdä kyselyitä. 183[...]

184 Teknisk Support På vår hemsida kan du hitta mer information om mjukvaru uppdateringar och annan användarinformation. D-Link tillhandahåller teknisk suppo rt till kunder i Sverige under hela garantitiden för denna produkt. Teknisk Support för kunder i Sverige: D-Link Teknisk Support v ia telefon: 0770-33 00 35 Vardagar 08.00-20.00 D-Link T[...]

Suporte Técnico Você pode encontrar atualizações de software e documentação de utilizador no site de D-Link Portugal http://www.dlink.pt . A D-Link fornece suporte técnico gratuito para clientes no Portugal durante o período de vigência de garantia deste produto. Suporte Técnico para clientes no Portugal: Assistência Técnica: Email: sop[...]

186 Τεχνική Υποστήριξη Μπορείτε να βρείτε software updates και πληροφορίες για τη χρήση των προϊόντων στις ιστοσελίδες της D-Link Η D-Link προσφέρει στους πελάτες της δωρεάν υποστήριξη στον Ελλαδικό χώρο Μ[...]

Technical Support You can find software updates an d user documentation on the D-Link web site. Tech Support for customers in Australia: Tel: 1300-766-868 Monday to Friday 8:00am to 8:00pm EST Saturday 9:00am to 1:00pm EST http://www.dlink.com.au e-mail: support@dlink.com.au India: Tel: 1800-222-002 Monday to Friday 9:30AM to 7:00PM http://www.dlin[...]

188 Technical Support You can find software updates an d user documentation on the D-Link web site. Tech Support for customers in Egypt: Tel: +202-2919035 or +20 2-2919047 Sunday to Thursday 9:00am to 5:00pm http://support.dlink-me.com e-mail: amostafa@dlink-me.c om Iran: Tel: +98-21-88822 613 Sunday to Thursday 9:00am to 6:00pm http://support.dlin[...]

Техническая поддержка Обновления программного обеспечения и документация доступны на Интернет - сайте D-Link. D-Link предоставляет бесплатную поддержку для клиентов в течение гарантийного срока[...]

190 Asistencia Técnica D-Link Latin América pone a disposición de sus cli entes, especif icaciones, documentación y software mas recient e a través de nuestro Sitio Web www.dlinkl a.com El servicio de soporte técnico tiene presencia en numeros os países de la Región Latino América, y presta asistencia gratuita a todos los clientes de D-Lin[...]

Suporte Técnico Voc ê pode encontrar atualiza çõ es de software e documenta çã o de usu á rio no site da D-Link Brasil www.dlinkbrasil.com.br. A D-Link fornece suporte t é cnico gratuito para clientes no Brasil durante o per í odo de vig ê ncia da garantia deste produto. Suporte T é cnico para clientes no Brasil: Telefone São Paulo +11-[...]

192 D-Link 友訊科技 台灣分公司 技術支援資訊 如果您還有任何本使用手冊無法協助 您解決的產品相關問題，台 灣 地區用戶可以透過我們的網站、電子 郵件或電話等方式與D-Link台灣 地區技術支援工程師聯絡。 D-Link 免付費技術諮詢專線 0800-002-615 服務時間：週一至週[...]

Dukungan Teknis Update perangkat lunak dan dokumentasi pengguna dapat diperoleh pada situs web D-Link. Dukungan Teknis untuk pelanggan: Dukungan Teknis D-Link melalui telepon: Tel: +62-21-5731610 Dukungan Teknis D-Link melalui Internet: Email : support@dlink.co.id Website : http://support.dlink.co.id 193[...]

194 技 术 支持 您可以在 D-Link 的官方 網 站找到 產 品的 軟 件升 級 和使用手 冊 办公地址：北京市东城区北三环东路 36 号 环球贸易中心 B 座 26F 02-05 室 邮编 : 100013 技术支持中心电话： 8008296688/ (028)66052968 技术支持中心传真： (028)85176948 维修中心地址：北京市东城?[...]

International Offices 195 U.S.A 17595 Mt. Herrmann Street Fountain Valley, CA 92708 TEL: 1-800-326-1688 URL: www.dlink.com Canada 2180 Winston Park Dri ve Oakville, Ontario, L6H 5W 1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www.dlink.ca Europe (U. K.) D-Link (Europe) Ltd D-Link House, Abbey Road Park Royal, London NW 10 7BX United Kingdom [...]

196 Registration Card All Countries and Regions Excluding USA Print, type or use block le tters. Your name: Mr./M s ________________ ___________ ____________ ___________ __________ ____________ _____ Organizati on: _____________ __________ ___________ ____________ __ Dept. ________________ ___________ _ Your title at or ganization: ______ _________[...]

_____________ _________ _____________ _________ _____________ _________ ____________ 197[...]