D-Link DES-3550 manual

D-Link ™ DES-3550 Managed 48-port 10/100Mbp s and 2GE port s Layer 2 Ethernet Switch Release II Manual Second Edition (June 2004) Printed In Taiwan RECYCLABLE[...]

_____________ _______________ _______________ _______________ _______________ _________ Information in this document is subject to change without notice. © 2004 D-Link Computer Cor poratio n. All rights reserved. Reproduction in any manner whatsoever without the wr itten permission of D-Link Computer Corporation is strictly forbidden. Trademarks u[...]

DES-3550 Fast Ethernet Layer 2 Switch Table of Contents Preface ............................................................................................................................................................................. viii Intended Read ers .........................................................................................[...]

DES-3550 Fast Ethernet Layer 2 Switch Password Pr otection......................................................................................................................................................................... 16 SNMP Settings .........................................................................................................[...]

DES-3550 Fast Ethernet Layer 2 Switch Forwarding Filtering........................................................................................................... ...............................................54 Unicast Fo rward ing .................................................................................................................[...]

DES-3550 Fast Ethernet Layer 2 Switch Port-Based Networ k A ccess Control .............................................................................................. ................................................. 99 MAC-Based Network Access Control ...............................................................................................[...]

DES-3550 Fast Ethernet Layer 2 Switch Monito ring ........................................................................................................................................................................... 142 Port Utili zation ..........................................................................................................[...]

DES-3550 Fast Ethernet Layer 2 Switch Group Icon ..................................................................................................................... ........................................180 Commander Switch Icon.......................................................................................................... ...........[...]

DES-3550 Fast Ethernet Layer 2 Switch vii[...]

DES-3550 Fast Ethernet Layer 2 Switch Preface The D ES-3550 Manual is divided into section s that describe the system in stallation and operating instructions with examples. Section 1, “Int roduction”– Descri bes the Switch and its features. Section 2, “Ins tallation” – Helps you get st arted with the basic installat io n of the Switch [...]

DES-3550 Fast Ethernet Layer 2 Switch Intended Readers The DES-35 50 Manual contains inform ation for setup and m anagement of the Swit ch. This manual is inte nded for network managers familiar with network management concepts and terminolog y. Typographical Conventions Convention Description [ ] In a command line, sq uare brackets indica te an op[...]

DES-3550 Fast Ethernet Layer 2 Switch Safety Instructions Use the following safety guidelines to ensure your own person al safety and to help protect your system from potential damage. Throug hout this safety section, the cauti on icon ( ) is used to indicate cauti ons and precautions that you need to review and follow. Safety Cautions To reduce th[...]

DES-3550 Fast Ethernet Layer 2 Switch remove the grounding prong from a cable. If you must use an extension cable, use a 3-wire cable with properly grounded p lugs. • • • • • • • • • Observe extensio n cable and power strip rating s. Make sure that the total ampere rating of all products plugged in to the extension cable or power [...]

DES-3550 Fast Ethernet Layer 2 Switch Do not step on or stand on any com ponent when servici ng other compone nts in a rack. • NOTE: A qualified electrician m ust perform all connections to DC power and to safety grounds. All electrical wi ring must comply with applicable local or national codes an d practices. CAUTION : Never defeat the ground c[...]

DES-3550 Fast Ethernet Layer 2 Switch Section 1 Introduction Ethernet Technology Switch Description Features Ports Front-Panel Components Side Panel Description Rear Panel Description Gigabit Combo Ports Ethernet Technology Fast Ethernet Technology Fast Ethernet The growing im portance of LANs and the increasing com plexity of desktop com puting ap[...]

DES-3550 Fast Ethernet Layer 2 Switch Switching Technology Another key development pushi ng the limits of Ether net technology is in t he field of switchin g technology. A s witch bridges Ethern et packets at the MAC address level of t he Ethernet protocol transm itting among connected Ethe rnet or Fast Ethernet LAN segments. Switching is a cost-ef[...]

DES-3550 Fast Ethernet Layer 2 Switch Dual Image Firmware • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • Simple Netw ork Time Protocol support MAC Notification support Asymmetric VLAN s upport System and Port Utilization support System Log Support High performa[...]

DES-3550 Fast Ethernet Layer 2 Switch Two 1000BASE -T Mini-GB IC combo ports for connectin g to another swi tch, server, or network backbo ne. • • RS-232 DCE Diagnostic port (consol e port) for setting up a nd managing the Switc h via a connection to a console term inal or PC using a term inal emulation prog ram. NOTE: For customers interested [...]

DES-3550 Fast Ethernet Layer 2 Switch Port LEDs One row of LEDs for each port is located abov e the ports on the front panel. The first LED is for the top port and t he second one is for the bottom por ts. These port LEDs will light two different colors for 10M and 100M. • • Amber - For speeds of 10 Mbps. A solid light denote s activity on the [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 1- 4. Side Panels Gigabit Combo Ports In addition to the 48 10/100 Mbps po rts, the Switch features two G igabit Ethernet Combo p orts. These two ports are 1000BASE-T copper ports (provide d) and Mini-GBIC ports (optional). See t he diagram below to vie w the two Mini-GBIC port modules being plugge d int[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 1- 6. Installing the Mini-GBIC Module SECTION 2 Installation Package Contents Before You Connect to the Networ k Installing the Switch Without the Ra ck Rack Installation Power On Package Contents Open the ship ping carton of the Swi tch and carefully unpac k its co ntents. The carton should contain the [...]

DES-3550 Fast Ethernet Layer 2 Switch One DES-355 0 Stand-alone Switc h • • • • • • • • • • • • • • One AC power cord This Manual Registration card Mounting kit (two br ackets and screws) Four rubbe r feet with adhesive bac king RS-232 console cable If any item is found m issing or damaged, please co ntact your local D-L[...]

DES-3550 Fast Ethernet Layer 2 Switch Installing the Switch in a Rack The Switch ca n be mounted in a st andard 19" rack. Use the f ollowing diagram s to guide you. Figure 2- 2. Fasten mounting brackets to S w itch Fasten the mounti ng brackets to the Switch using the screws provided . With the brackets attached se curely, you can mount the Sw[...]

DES-3550 Fast Ethernet Layer 2 Switch Power On Plug one end of the AC power c o rd into t he power connector of t he Switch and the ot her end into the local po wer source outlet. After the Switch is powered on, the LED indicator s will momentar ily blink. Th is blinking of the LED indicators represents a reset of the system. Power Failure As a pre[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 3- 1. Switch connected to an e nd node The Link/Act LEDs for each UT P port will light green or ambe r when the link is valid. A blinking LED indicates packet activity on that port. Switch to Hub or Switch These connecti ons can be accompli shed in a number of way s using a normal cable. A 10BASE-T hub o[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 3- 3. Uplink Connection to a serv er. Section 4 Introduction To Switch Management Management Options Web-based Management Interface SNMP-Based M anagement Managing User Accounts Command Line Console Interface Thr ough The Serial Port Connecting the Console Port (RS-232 DCE) First Time Connecting to The S[...]

DES-3550 Fast Ethernet Layer 2 Switch Management Options This system may be managed out -of-band through the co nsole port on the front pa nel or in-band using Telnet . The user may also choose the web-based m anage ment, accessible through a web browse r. Web-based Management Interface After you have successfully installed the Switch, you can conf[...]

DES-3550 Fast Ethernet Layer 2 Switch 10. After the boot sequence completes, the console log in screen displays. 11. If you have not logged into the command line interface (CLI) program, press the Enter key at the User name and password pro mpts. There is no default use r name and password f or the Switch. User names and pas swords must first be cr[...]

DES-3550 Fast Ethernet Layer 2 Switch NOTE : Press Ctrl+R to ref resh the screen. This command can be used at any time to force the conso le program in the Switch to refresh the console screen. Figure 4- 2. Initial screen, first time connecting to the S w itch Press Enter in both the Usernam e and Password fi elds. You will be given access to the c[...]

DES-3550 Fast Ethernet Layer 2 Switch Password Protection The DES-3550 does not have a default user nam e and password. One of the first ta sks when settings up the Switch i s to create user accounts. If you log in using a pred efined administrator-lev el user name, you have privileged access to the Switch's m anagement software. After your in[...]

DES-3550 Fast Ethernet Layer 2 Switch controlled by the on-board S NMP agent. SNMP defin es both the format of the M IB specifications and t he protocol used to access this information ove r the network. The DES-3550 supp orts SNMP versions 1, 2c, and 3. You can specify which versi on of SNMP you want to use to monitor and control t he Switch. The [...]

DES-3550 Fast Ethernet Layer 2 Switch The Switch is also assigne d a unique MAC address by the fact ory. This MAC address cannot be changed, and can be fo und by entering the command "sho w switch" into the command line interface , as shown below. Figure 4- 4. Show switch command The Switch's M AC address can also be found from the W[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 4- 5. Assigning the S w itch an IP Address In the above example, the Switch was assigned an IP address of 10.53.13.144 wit h a subnet m ask of 255.0.0.0. The system message Success indicates that the command was executed successfu lly. The Switch can now be configured and m anaged via Telnet and the CLI [...]

DES-3550 Fast Ethernet Layer 2 Switch Section 5 Introduction to Web-based Switch Configuration Introduction Login To Web manager Web-Based User Interface Basic Setup Reboot Basic Switch Setup Network Management Switch Utilities Network Monitoring IGMP Snooping Status Introduction All software fu nctions of the DES-3550 can be m anaged, co nfigured [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 5- 2. Enter Network Pass w ord window Leave both the User Name field and the Pa ssword field blank and click OK. This will open the Web-based user interface. The Switch m anagement features available in the web-based manager are expl ained below. Web-based User Interface The user interface provides acces[...]

DES-3550 Fast Ethernet Layer 2 Switch Area 3 Presents switch information based on y our selection and the entry of configuration data. NOTICE: Any changes made to the Switch configuration during the current session must be saved in the Save Changes web menu (explained below) or use the command line interfa ce (CLI) command save. Web Pages When you [...]

DES-3550 Fast Ethernet Layer 2 Switch Section 6 Configuring The Switch Switch Information IP Address Advanced Settings Port Configuration Port Description Port Mirroring Link Aggregation LACP Port Setting MAC Notification IGMP Spanning Tree Forward Filtering VLANs Port Security QoS System Log Servers SNTP Settings Access Profile Table PAE Access En[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 1. Switch Information (Basi c Settings) w indo w The Switch Information w indow shows the Switch's MAC Address (assi gned by the factory and unchangeable), the Boot PROM , Firmware Version , and Hardware Version . This inf ormation is helpful t o keep track of PROM and firmware upda tes and to ob[...]

DES-3550 Fast Ethernet Layer 2 Switch 3. If you want to access the Switch from a different subnet from the one it is installed on, enter the IP address of the Default Gateway . If you will manage the Switch from the subnet on which it is installed , you can leave the default addr ess (0.0.0.0) in this fiel d. 4. If no VLANs have bee n previously co[...]

DES-3550 Fast Ethernet Layer 2 Switch Click Apply to let your changes take effect. Setting the Switch's IP Address using the Console Interface Each Switch m ust be assigned its own IP Addr ess, which is used for c ommunication wit h an SNMP net work manager or other TCP/IP application (for example BO OTP, TFTP). The Switch' s default IP a[...]

DES-3550 Fast Ethernet Layer 2 Switch Parameter Description Serial Port Auto Logout Time Select the logout time used for th e console in terface. This automatically logs the user out after an idle period of time, a s defined. Choose from the following options: 2 Minutes, 5 Minutes, 10 Minutes, 15 Minutes or Never . The default setting is 10 m inute[...]

DES-3550 Fast Ethernet Layer 2 Switch Syslog Global State Enables or disables Syslog State; default is Disabled . Click Apply to im plement changes ma de. NOTE: When the Asymmetric VLA N function is Disabled, the user must change the VLAN sett ing on the Swit ch to its default configurations. Port Configurations This section c ontains information f[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 4. Port Configuration and The Port Infor mation Table window To configure switch por ts: 1. Choose the po rt or sequential range of ports using the Fr om…To… port pull-down menus. 2. Use the rem aining pull-down me nus to configure the param eters described below: 29[...]

DES-3550 Fast Ethernet Layer 2 Switch Parameter Description State <Enabled> Toggle the State field to either en able or disable a given port or group of ports. Speed/Duplex <Auto> Toggle the S peed/Duplex field to either select the speed and duplex/half-duplex state of the port. Auto denotes auto-negotiation between 10 and 1 00 Mbps dev[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 5. Port Description Setting and Port De scription Table 31[...]

DES-3550 Fast Ethernet Layer 2 Switch Use the From and To pul l down menu to choos e a port or range of ports to describe, a nd then enter a descri ption of the port(s). Click Appl y to set the descrip tions in the Port Description Table . Port Mirroring The Switch allows you to copy frames transmitted and received on a port and redirect the cop ie[...]

DES-3550 Fast Ethernet Layer 2 Switch Link Aggregation Understanding Port Trunk Groups Port trunk gr oups are used to com bine a number of ports t ogether to make a single hi gh-bandwidth data pipeline . The DES-3550 supports up to 6 port trunk grou ps with 2 to 8 ports in each group. A potential bit rate of 8000 Mbps can be achieved. Figure 6- 7. [...]

DES-3550 Fast Ethernet Layer 2 Switch The Spanning Tree Protocol will treat a link aggregation group as a single link, on th e switch level. On the port lev el, the STP will use the port parameters of the Master Port in the cal culation of port cost and in determining the state of the link aggregation gro up. If two redundan t link aggregatio n gro[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 10. Link Aggregation Group Configura t ion window - Modify The user-changeable param eters are as follows: Parameter Description Group ID Select an ID number for the group, between 1 an d 6. State Trunk groups can b e toggled between Enabled and Disabled . This is used to turn a port trunking group on[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 11. LACP Port Settings and LACP Port Table The user may set the following parameters: 36[...]

DES-3550 Fast Ethernet Layer 2 Switch Parameter Description From/To A consecutive group of ports may be conf igured starting with the selecte d port. Mode Active - Active LACP ports are capable of processi ng and sending LACP control frames. This allows LACP compliant devices to negotiate the aggregated link so the group may be changed dynamically [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 13. MAC Notification Port Settings and Port State Table 38[...]

DES-3550 Fast Ethernet Layer 2 Switch The following parameters may be set: Parameter Description From…To Select a port or group of ports to enable for MAC notification using the pull down menus. State Enable MAC Notification for the ports selected u sing the pull down menu. Click Apply to im plement changes ma de. IGMP Internet Group Manag ement [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 15. IGMP Snooping Settings windo w The following param eters may be viewed or modifi ed: Parameter Description VLAN ID This is the VLAN ID that, along with the VLAN Na me , identifies the VLAN the user wishes to modify the IGMP Snooping Settings for. VLAN Name This is the VLAN Name that, along with th[...]

DES-3550 Fast Ethernet Layer 2 Switch Leave Timer This specifies the maximum amo unt of time in seconds between the Switch receiving a leave group message from a host, and the Swit ch issuing a group membership query. If no response to the me mbership query is received before the Leav e Timer expires, the (multicast) forwardi ng entry for that host[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 17. Static Router Ports Settings w indow The following parameters can be set: Parameter Description VID (VLAN ID) This is the VLAN ID that, along with the VLAN Name, identifies t he VLAN where the multicast router is attached. VLAN Name This is the name of the VLAN wher e the multicast router is attac[...]

DES-3550 Fast Ethernet Layer 2 Switch 1. A configuration nam e defined by an alphanum eric string of up t o 32 characters (defi ned in the STP Bridge Global Setti ngs window in the Configuration Name field). 2. A configuration revi sion number (named here as a Revision Level and found in the STP Bri dge Global Settings window) an d; 3. A 4096 eleme[...]

DES-3550 Fast Ethernet Layer 2 Switch topology to stabilize befo re transitioning to a forwarding stat e. In orde r to allow this rapid transition, th e protocol introduces two new variables: the edg e port and the point-to-point (P2P) port. Edge Port The edge port i s a configurable designati on used for a port th at is directly connected to a seg[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 19. STP Bridge Global Settings - RSTP (default) Figure 6- 20. STP Bridge Global Settings The following parameters can be set: Parameter Description MST Configuration Identification STP Status Use the pull-down menu to enable or disa ble STP globally on the Switch. The default is Disabled . STP Version[...]

DES-3550 Fast Ethernet Layer 2 Switch STP - Select this parameter to set the S panning Tree Protocol(STP) globally on the switch. RSTP - Select this parameter to set the Rapid Spa nning Tree Protocol (RSTP) globally on the Switch. MSTP - Select this parameter to set the Multiple Spanning Tree Protocol (MS TP) globally on the Switch. Hello Time: (1 [...]

DES-3550 Fast Ethernet Layer 2 Switch NOTE: The Hello Time cannot be longer than the Max. Age. Otherwise, a configuration error will o ccur. Observe the following formulas when setting the above parameters: Max. Age = 2 x (Forward Delay - 1 second) Max. Age = 2 x (Hello Time + 1 second) MST Configuration Table The following screens in the MST Confi[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 22. Instance ID Settings w indow- Add The user may configure the following parameters to create a MSTI in the Switch. Parameter Description MSTI ID Enter a number between 1 and 15 to set a new MSTI on the Switch. Typ e Create is selected to cre ate a new MSTI. No other choice s are available for this [...]

DES-3550 Fast Ethernet Layer 2 Switch unchangeable. VID List (1-4094) This field is used to specify the VID range from configured VLANs set on the Switch. Supported VIDs on the S witch range from ID number 1 to 40 94. This field is inoperable when configuring the CIST. Priority (0-61440) Select a value between 0 and 61440 to specify the priority fo[...]

DES-3550 Fast Ethernet Layer 2 Switch MSTI Settings This window displays the current MSTI configuration se ttings and can be used to u pdate the port configuratio n for an MSTI ID. If a loop occurs, the MSTP func tio n will use the port priority to select an interface to put into the forwarding state. Set a higher priority value for inte rfaces to [...]

DES-3550 Fast Ethernet Layer 2 Switch Priority <128> Enter a value between 0 and 240 to set the prio rity for the port interface. A higher priority will designate the interface to forw ard pa ckets first. A lower number denotes a higher priority. Click Apply to im plement changes ma de. STP Instance Settings The following window displays MSTI[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 28. STP Port Settings and MSTP Port Information Table 52[...]

DES-3550 Fast Ethernet Layer 2 Switch In addition to sett ing Spanning Tree parameters for use on the switch level, the Switch allows for the configuration of groups of ports, each po rt-group of which will have its own spanning tree, and will require som e of its own configuration settings. An STP Group will use th e switch-level parameters en ter[...]

DES-3550 Fast Ethernet Layer 2 Switch operate as if the p2p value were false . The default setting for this parameter is true . State <Disable d> This drop-down menu allows you to en able or disable STP for the selected group of ports. The default is Enabled . Click Apply to im plement changes m ade. Forwarding Filtering Unicast Forwarding Op[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 30. Static Multicast For w arding Settings and Current Multica st Forwarding Entries The Static Multicast Forwarding Settings page disp lays all of the entries made into th e Switch's static multicast forwarding table. Click the Add b utton to open th e Setup Static Multicast Forwarding Table , a[...]

DES-3550 Fast Ethernet Layer 2 Switch Multicast Port Filtering The following figure and table describe how to set up multicast forwarding on the Switch. Open the Forwarding Filtering folder and cl ick on the Multicast Port Filtering Mode Setup link to see the entry screen below: Figure 6- 32. Multicast Port Filtering Mode Setup and Multicas t port [...]

DES-3550 Fast Ethernet Layer 2 Switch Parameter Description From/To These two drop-down menus allow you to se lect a range of ports that the filter settings will be applied to. Mode This drop-down me nu allows you to select the action the Switch will take when it receives a multicast packet that is to be forwarded to one of the ports in the ra nge [...]

DES-3550 Fast Ethernet Layer 2 Switch appears as a single LAN. VLANs also logi cally segment the network into diffe rent broadcast domains so t h at packe ts are forwarded only between ports within th e VLAN. Typically, a VLAN corresponds to a particular subnet, although no t nec- essarily. VLANs can enhance performance by conser ving bandwidth, an[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 33. IEEE 802.1Q Packet For w arding 802.1Q VLAN Tags The figure below shows the 802.1Q VLAN tag. There are four additio nal octets inserted after the source MAC address. Their presence is indicated by a value of 0x8100 in the Ethe rType field. When a packet's EtherType field is equal to 0x8100, t[...]

DES-3550 Fast Ethernet Layer 2 Switch The EtherType and VLAN ID are inserted after the MAC sour ce address, but before the original EtherType/Length or Logical Link Control. Because th e packet is now a bit longer than it was originally, the Cyclic Redund ancy Check (CRC) must be recalculated. Figure 6- 35. Adding an IEEE 802.1Q Tag Port VLAN ID Pa[...]

DES-3550 Fast Ethernet Layer 2 Switch VLAN inform ation intact. The VLAN inform ation in the tag can then be used by other 802.1Q complia nt devices on the network to m ake packet-forwardi ng decisions. Ports with untagging enabled will strip the 802.1Q tag from all p ackets that flow into and out of those ports. If the pack et doesn't have an[...]

DES-3550 Fast Ethernet Layer 2 Switch On port-based VLANs, NICs do not need to be able to iden tify 802.1Q tags in packet he aders. NICs send and receive normal Ethernet packets. If the packet's destination lies on the same se gment, communications take place using normal Ethernet protocol s. Even though this is always the case, when the desti[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 37. 802.1Q Static VLANs - Add To return to the Current 802.1Q Static VLANs Entries window, click the Show All Static VLAN Entries link. To change an existing 802.1Q VLAN entry, click the Modify butto n of the correspondi ng entry you wish to m odify. A new me nu will appear to configure t he port sett[...]

DES-3550 Fast Ethernet Layer 2 Switch Parameter Description VID (VLAN ID) Allows the entry of a VLAN ID in the Add dialog box, or displ ays the VLAN ID of an existing VLAN in the Modify dialog box. VLANs can be ide ntified by either the VID or the VLAN name. VLAN Name Allows the entry of a name for the new VLAN in the Add dialog box, or for edit in[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 39. 802.1Q Port Settings and 802.1Q Port Table The following fields can be set: Parameter Description From/To These two fields allow you to sp ecify the range of ports that will be include d in the Port-based VLAN that you are creating using the 802.1Q Port Setti ngs page. PVID The read onl y field in[...]

DES-3550 Fast Ethernet Layer 2 Switch 802.1Q Port Settings table. The Switch's defa u lt is to assign all ports to the d e fault VLAN with a VID of 1.The PVID is used by the port to tag outgoing, unta gged packets, and to make filtering deci sion s about incoming packets. If the port is specified to accept only t agged frames - as tagging, and[...]

DES-3550 Fast Ethernet Layer 2 Switch Traffic or storm control is used to stop broa dcast, multicast or ARP req uest storms that may result when a loop is created. The Destination Look Up Failure control is a method of shutting down a loop when a storm is formed because a MAC address cannot be located in the Switch's fo rwarding database and i[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 41. Port Security Settings w indow 68[...]

DES-3550 Fast Ethernet Layer 2 Switch The following parameters can be set: Parameter Description From/To A consecutive group of po rts may be conf igured starting with the selected port. Admin State This pull-down menu allows you to enab le or disable Port Security (locked MAC address table for the selected ports). Max. Learning Addr. (0-10) The nu[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 42. Mapping QoS on the S w itch The picture above shows the d efault priority setting for the Switc h. Class-3 has the highest pri ority of the four priority queues on the Swi tch. In order to im plement QoS, the user i s required to instruct the Switch to ex amine the header of a packet to see if it [...]

DES-3550 Fast Ethernet Layer 2 Switch For weighted round-robin queuing, the num ber of packets sent from each priority que ue depend s upon the assigned weight. For a configuration of 8 CoS queues, A~H with their respective weight value: 8~1, the p ackets are sent in the following sequence: A1, B1, C1, D1, E1, F 1, G1, H1, A2, B2, C2, D2, E2 , F2, [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 43. Bandwidth Settings and Port Bandw idth Table 72[...]

DES-3550 Fast Ethernet Layer 2 Switch The following parameters can be set or are displayed: Parameter Description From/To A consecutive group of ports may be conf igured starting with the selected port. Typ e This drop-down me nu allows you to select between RX (receive,) TX (transmit,) and Both . This setting will determine whether the b andwidt h[...]

DES-3550 Fast Ethernet Layer 2 Switch NOTE: The settings you assign to the q ueues, numbers 0-7, represent the IEEE 802.1p priority tag number. Do no t confuse these settings with port numbers. 802.1p Default Priority The Switch allows the assignment of a default 80 2.1p priority to each port on the Switch. In the Configuration folder ope n the QoS[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 45. 802.1p Default Priority w indow 75[...]

DES-3550 Fast Ethernet Layer 2 Switch This page allo ws you to assign a default 80 2.1p priority to any given port on the Switch. The pri ority queues are numbered from 0, the lowest priority, to 7, the highest priority. Click Apply to implement your settings. 802.1p User Priority The DES-3550 allows the assignment of a user priority to each of the[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 47. Traffic Segmentation Setting and Tr affic Segmentation Table window 77[...]

DES-3550 Fast Ethernet Layer 2 Switch This page allows you to determine which port on a given switch will be allowed to forward packets t o other ports on that switch. The user may set the following parameters: Parameter Description Port Check the corresp onding boxes for the port(s) you wish to transmit packets. Forward Portlist Check the boxes to[...]

DES-3550 Fast Ethernet Layer 2 Switch Server IP The IP address of the Syslog server. Severity This drop-down menu allows you to select the level of messages that will be sent. The options are Warning , Inform ational , and All . Facility Some of the operating sy stem daemons and processes have b een assigned Facility values. Processes and da emons [...]

DES-3550 Fast Ethernet Layer 2 Switch SNTP Settings Current Time Settings To configure the time settings for the Switch, open the Configuration fo lder , then the SNTP folder an d click on the Current Time Setting link, revealing the following scr een for the user to configure. Figure 6- 50. Time Settings Page The following parameters can be set or[...]

DES-3550 Fast Ethernet Layer 2 Switch Year Enter the current year, if you want to update the system clock. Month Enter the current month, if you w ould like to update the system clo ck. Day Enter the current day, if you woul d like to update the system clo ck. Time in HH MM Enter the current time in hours and minutes, if you would like to update th[...]

DES-3550 Fast Ethernet Layer 2 Switch Daylight Saving Time State Use this pull-down menu to Enable or Disabl e the DST Settings. Daylight Saving Time Offset in Minutes Use this pull-down menu to specify the amount of time that will constitute your local DST offset - 30, 60, 90, or 120 minutes. Time Zone Offset from GMT in +/- HH:MM Use these pull-d[...]

DES-3550 Fast Ethernet Layer 2 Switch Access Profile Table Configuring the Access Profile Table Access profiles allow you to establish criteria to determine whether or not the Switch will forward packets based on th e information contained in eac h packet's header. T h ese criteri a can be specified on a basis of VLAN, MAC ad dress or IP addre[...]

DES-3550 Fast Ethernet Layer 2 Switch Parameter Description Profile ID (1-255) Type in a unique identifier number fo r this profile set. This value can be set from 1 - 255. Typ e Select profile based on Ethernet (MAC Addr ess), IP address or packet content mask. This will change the menu according to the requireme nts for the type of profile. • ?[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 54. Access Profile Configuration (IP) The following parameters can be set, for IP : Parameter Description Profile ID (1-255) Type in a unique identifier number fo r this profile set. This value can be set from 1 - 255. Typ e Select profile based on Ethernet (MAC Addr ess), IP address or packet content[...]

DES-3550 Fast Ethernet Layer 2 Switch • Select Packet Content Mask to specify a mask to hide the content of the packet header. VLAN Selecting this option instructs the S witch to examine the VLAN part of each packet header and use this as the, or part of the crite rion for forwarding. Source IP Mask Enter an IP address mask for the source IP addr[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 55. Access Profile Configuration w indow (Packet Content Mask) Parameter Description This screen will aid the user in configuring the Switch to ma sk packet headers beginning w ith the offset value specified. The following fields are used to configure the Packet Content Masks : Profile ID (1-255) Type[...]

DES-3550 Fast Ethernet Layer 2 Switch header. • Select Packet Content Mask to specify a mask to hide the content of the packet header. Offset This field will instruct the Switch to mask the packet header beginning with the offset value specified: • • • • • value (0-15) - Enter a v alue in hex form to mask the packet from the beginning o[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 57. Access Rule Configurat ion w indow (IP) Configure the following A ccess Rule Configuratio n settings: Parameter Description Profile ID This is th e identifier number for this profile set. Mode Select Permit to specify that the packets that matc h the access pr ofile are forwarded by the Switch, ac[...]

DES-3550 Fast Ethernet Layer 2 Switch Priority (0-7) This parameter is specified if you want to re-write the 802.1p default priority previously set in the Switch, which is used to determine the CoS queue to which packets are forwarded to. Once this field is specified, pac kets accepted by the Switch that match this priority are forwarded to the CoS[...]

DES-3550 Fast Ethernet Layer 2 Switch To con fig ure th e Access Rule for Ethernet , ope n the Access Profile Table and cli ck Modify for an Ether n et entry. This will open the following window: Figure 6- 59. Access Rule Table To remove a previously create d rule, select it and click the button. To add a new Access Rule, click the Add butt on: Fig[...]

DES-3550 Fast Ethernet Layer 2 Switch Typ e Selected profile based on Ethernet (M AC Address), IP address or Packet Content Mask. • • • Ethernet instructs the S witch to examin e the layer 2 part of each packet header. IP instructs the Switch to examine the IP addres s in each frame's header. Packet Content Mask instructs the Switch to e[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 61. Access Rule Display w indow (Ethernet) To configure the Access R ule for Packet Content Mask , open the Ac cess Profile Table and click Modify for a Packet Content Mask entry. This will open the following screen: Figure 6- 62. Access Rule Table (Packet Content Mask) To remove a previously create d[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 63. Access Rule Con f iguration (Packet Content Mask) To set the Access Rule for t he Packet Content Mask , adjust the fo llowing parameters and click Apply . Parameter Description Profile ID This is th e identifier number for this profile set. Mode Select Permit to specify that the packets that matc [...]

DES-3550 Fast Ethernet Layer 2 Switch Access ID Type in a unique identifier number for this acce ss. This value can be set from 1 - 50. Typ e Selected profile based on Ethernet (MAC Addres s), IP address or Packet Content Mask. • • • Ethernet instruct s the Switch to examine the layer 2 pa rt of each packet header. IP instructs the Switch to [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 64. Access Rule Display w indow (Ethernet) PAE Access Entity (802.1X) 802.1x Port-Based and MAC-Based Access Control The IEEE 802.1x standard is a security me asure for authorizing and au thenticating users to gai n access to various wired or wireless devices on a specified Local Area Network by using[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 65. EAPOL Packet Utilizing this method, unauthorized devices are restricte d from connecting to a LA N through a port to which the user is connected. EAPOL packets are the only traffic that can be transmitted th rough the specific port un til authorization is granted. The 802.1x Access Control prot oc[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 67. Authentication Serv er Authenticator The Authenticator (the Switch) is an intermediary b etween the Authentication Server and the Client. Th e Authenticator serves two purposes when utilizin g 802.1x. The first purpose is to request certification information from the Client through EAPOL packets, [...]

DES-3550 Fast Ethernet Layer 2 Switch Client The Client is simply th e workstation that wishes to g ain access to the LAN or switch serv ices. All workstation mu st be running soft ware that is compliant wit h the 802.1x protocol. Fo r users running Windows XP, that software is include d within the operating system. All other users are required to [...]

DES-3550 Fast Ethernet Layer 2 Switch … 802.1X Clie nt 802.1X Clie nt 802.1X Client 802.1X Clie nt 802.1X Clie nt 802.1X Client 802.1X Client 802.1X Clie nt 802.1X Client Net w or k access contr olled port Net w or k access uncontrolled port RADI US Ser ver Ethernet S witch Figure 6- 70. Example of Typical Port-Based Confi guration Once the conne[...]

DES-3550 Fast Ethernet Layer 2 Switch MAC-Based Network Access Control 802.1X Client Network access controlled port Network access uncontrolled port RAD IUS Ser ve r Ethernet Sw itch 802.1X Client 802.1X Client 802.1X Client 802.1X Clien t 802.1X Client 802.1X Clien t 802.1X Client 802.1X Clien t 802.1X Client 802.1X Client 802.1X Clien t … Figur[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 72. 802.1X Authenticator Se ttings w indow 102[...]

DES-3550 Fast Ethernet Layer 2 Switch To configure t he settings by port, click on the hyperlinked port num ber under the Port head ing, which will disp lay the following table to configu re: Figure 6- 73. 802.1X Authenticator Se ttings - Modify This screen allows you to set the following featur es: Parameter Description From [ ] To [ ] Enter the p[...]

DES-3550 Fast Ethernet Layer 2 Switch TxPeriod [30 ] This sets the TxPeriod of time for the authenticator PAE state machine. This value determines the period of an EAP Request/Identity packet transm itted to the client . The default setting is 30 seconds. QuietPeriod [60 ] This allows y ou to set the number of seco nds that t he Switch remains in t[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 74. 802.1x Capability Settings and Table window 105[...]

DES-3550 Fast Ethernet Layer 2 Switch To set up the Switch' s 802.1x port-based aut hentication, select which ports are to be configured in the From and To fields. Next, enable t he ports by selecti ng Au thenticator from the drop- down menu unde r Ca pability . Click Apply to let your change take effect. Configure the following 802 .1x capabi[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 75. 802.1x Port Initial and Port Authenti cation state w ind ow This window allows you to initialize a port or group of ports. The Init ialize Port Tab le in the bottom half of the window displays the current status of the port(s). This window displays the fo llowing information: Parameter Description[...]

DES-3550 Fast Ethernet Layer 2 Switch MAC Address The MAC address of the Switch conn ec ted to the corresponding port, if any. Auth PAE State The Authenticator PAE State will display one of the following: Initialize, Discon- nected, Connecting, Authenticating, Aut henticated, Aborting, Held, Fo rceAuth, ForceUnauth, and N/A. Backend State The Backe[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 77. Reauthenticate Por t and Reauthenticate Port Table windo w This window displays the fo llowing information: Parameter Description Port The port number of the rea uthenticated port. MAC Address Displays the physical address of the Switch where th e port resides. Auth State The Auth enticator State [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 6- 78. RADIUS Server Authenti cation Setting and Current RADIUS Server Settings Table w indow This window displays the fo llowing information: Parameter Description Succession <First> Choose the desired RA DIUS server to configure: First, Second or Th ird . RADIUS Server <0.0.0.0> Set the RAD[...]

DES-3550 Fast Ethernet Layer 2 Switch Layer 3 IP Networking Static ARP Table The Address Resolutio n Protocol ( ARP ) i s a TCP/IP protoc ol that converts IP addr esses into physical ad dresses. This table allows networ k managers to view, de fine, modify and delete ARP inform ation for specific de vices. Static entries can be defined in the ARP Ta[...]

DES-3550 Fast Ethernet Layer 2 Switch 112[...]

DES-3550 Fast Ethernet Layer 2 Switch Section 7 Management Security IP User Accounts Access Authentication Control (T ACACS) Secure Sockets Layer (SSL) Secure Shell (SSH) SNMP Manag er The following section will aid the u ser in configuring secur ity fun ctions for the Switch. The Switch includes various functions for security, in cluding TACACS, S[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 3. User Accounts Modify Table - Add Add a new user by typing in a User Name , and New Password and retype t he same password in the Confirm New Password . Choose the level of privilege ( Admin or User) from the Access Right drop-down menu. Figure 7- 4. Modify User Accounts Modify or del ete an existin[...]

DES-3550 Fast Ethernet Layer 2 Switch Factory Rese t Yes No User Account Managem ent Add/Update/Delete User Accounts Yes No View User Accounts Yes No Table 7- 1. Admin and User Privileges After establi shing a User Account with Ad min-level privileges, be sure t o save the changes by opening t he Maintenance folder, open ing the Save Changes w indo[...]

DES-3550 Fast Ethernet Layer 2 Switch Switch will then go to the next technique listed in the serv er group fo r authentication, until the au thentication has been verified or denied, or the list i s exhausted. Please note that users granted access to the Switch will be gra n ted normal user priv ile ges on the Switch. To gain access to administrat[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 6. Application's Authentication Settin gs The following parameters can be set: Parameter Description Application Lists the configuration applications on the Switch. The user may configure the Login Method List and Enable Method List for aut hentication for users utilizing the Console (Command Lin[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 7. Authentication Serv er Group Settings window This screen displays the Au thentication Server Groups on the Switch. The Switch has three built-in Authentication Serv er Groups that cannot be removed but can be modified. T o modify a partic ular group, click it s hyperlinked Group Nam e , which will [...]

DES-3550 Fast Ethernet Layer 2 Switch but, remember that TACACS / XTACACS / TACACS+ / RADIUS are separate entities and are not compatible with each other. The m aximum supported number of server hosts is 16. To view the follo wing window, click Security Management > Access Authentica tion Control > Authentication Se rver Host : Figure 7- 9. A[...]

DES-3550 Fast Ethernet Layer 2 Switch Timeout(1-255) Enter the time in seconds the Switch will wait for the server host to reply to an authentication request. The default valu e is 5 seconds. Retransmit(1-255) Enter the value in the retransmit field to change how many times the device will resend an authentication request whe n t he TACACS server d[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 12. Login Method List - Edit (default) Figure 7- 13. Login Method List - Add To define a Login Method List, set the following parameters and click Apply : Parameter Description Method List Name Enter a method list name defined by the user of up to 15 chara cters. Method 1, 2, 3, 4 The user may add one[...]

DES-3550 Fast Ethernet Layer 2 Switch Enable Method Lists The Enable Method Lists window is used to set up Method Lists to promote users with us er lev el privileges to Administrat or (Admin) level privil eges using authentication m ethods on the Switch. Once a user acqui res normal user level privileges on the Switch, he or she must be auth entica[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 16. Enable Method List - Add w indow To define an Enable Login Method List, set the following parameters and click Apply : Parameter Description Method List Name Enter a method list name defined by the user of up to 15 ch aracters. Method 1, 2, 3, 4 The user m ay add one, or a co mbination of up to fo[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 17. Configure Local Enable Pass w ord window To set the Local Enable Password, set the following parameters and click Apply . Parameter Description Old Local Enabled If a password was previously configured for this entry, enter it here in order to change it to a new password New Local Enabled Enter th[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 19. Enter Net w ork Password window Secure Socket Layer (SSL) Secure Sockets Layer or SSL is a security feature that will provide a secure communicatio n path between a host and client through the u se of authentication , digital signatures and encr yption. These security fun ctions are implemented th[...]

DES-3550 Fast Ethernet Layer 2 Switch authentication and digital signatures. Both the server and the c lient must have consistent certificate files for optimal us e of the SSL function. The Switch only supports cer tificate files with .der file extensions. To view the fo llowing window, click Configuration > Secure Socket L ayer (SSL) > Downl[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 21. Ciphersuite windo w To set up the SSL function on the Switch , configure the following parameters and click Apply . Parameter Description RSA with RC4 128 MD5 This ciphersuite combines the RSA key exchange, stream cipher RC4 encryption with 128-bit keys and the MD5 Hash Algorithm. Use the pull dow[...]

DES-3550 Fast Ethernet Layer 2 Switch The steps require d to use the SSH protocol for sec ure communication bet ween a remote PC (the SSH clie nt) and the Switch (the SSH server) are as follows: 1. Create a user account with admin-level acce ss using the User Accounts window in the Secuirty Management folder. This is identical to creatin g any othe[...]

DES-3550 Fast Ethernet Layer 2 Switch Max Session (1-8) Enter a value between 1 and 8 to set the number of users that may simult aneously access the Switch. The default setting is 8 . Time Out (120-600) Allows the user to set the connection timeout. The u se may set a time between 120 and 600 seconds. The default setting is 300 se conds. Auth. Fail[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 23. SSH Algorithms window The following algorithms may be set: Parameter Description Encryption Algorithm 3DES-CBC Use the pull-down to enable or disa ble t he Triple Data Encryption Standard en cryption algorithm with Cipher Bloc k Chaining. The default is Enabled . Blow-fish CBC Use the pull-down to[...]

DES-3550 Fast Ethernet Layer 2 Switch encryption algorithm with Cipher Block Chaining. The default is Enabled . ARC4 Use the pull-down to enable o r disable the Ar cfour encryption algorithm with Cipher Block Chaining. The default is Enabled . Cast128-CBC Use the pull -down to enable or disable the Ca st128 en cryption algorithm with Cipher Block C[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 24. Current Accounts w indow In the example screen above, the User Account “Trinity” has been previously set using the User Acc ounts window in the Security Management folder. A User Account MUST be set in order to set the parameters for the SSH user. To configure the param eters for a SSH user, c[...]

DES-3550 Fast Ethernet Layer 2 Switch NOTE: To set the SSH User Au thentication parameters on the Switch, a User Account must be p reviously c onfigured. For more information on configuring local User A ccounts on the Switch, see the User Accounts section of this manual located in this sect ion. SNMP Manager SNMP Settings Simple Netwo rk Management[...]

DES-3550 Fast Ethernet Layer 2 Switch The DES-355 0 incorporates a flexible SN MP management for t he switching envir onment. SNMP managem ent can be customized to suit the ne eds of the networ ks and the preferences of the network ad m inistrator. Use the SNMP V3 menus to select the SNMP version used for s pecific tasks. The DES-3550 sup ports the[...]

DES-3550 Fast Ethernet Layer 2 Switch SNMP Version V1 - Indicates that SNMP version 1 is in use. V2 - Indicates that SNMP version 2 is in use. V3 - Indicates that SNMP version 3 is in use. Auth-Protocol None - Indicates that no au thoriz ation protocol is in use. MD5 - Indicates that the HMAC-MD5 -9 6 authentication level will be used. SHA - Indica[...]

DES-3550 Fast Ethernet Layer 2 Switch DES - Specifies that DES 56-bit encryption is in use, based on the CBC-DES (DES- 56) standard. This field i s only operable when V3 is selected in the SNMP Version field and the Encryption field ha s been checked. This field will require the user to enter a password between 8 and 16 alphanume ric characters. En[...]

DES-3550 Fast Ethernet Layer 2 Switch The following parameters can set: Parameter Description View Name Type an alphanumeric string of up to 3 2 characters. This is used to identify the new SNMP view being created. Subtree OID Type the Object Identifier (OID) Subtree for the view. The OID identifies an obje ct tree (MIB tree) that will be included [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 7- 32. SNMP Group Table Display To add a new entry to the Switch's SNMP Group Table , click the Add button i n the upper left -hand corner of the SNMP Group Table page. This will open the SNMP Group T able Configuration page, as show n below. Figure 7- 33. SNMP Group Table Configuration The followin[...]

DES-3550 Fast Ethernet Layer 2 Switch improvements in the Structure of Man agement Information (SMI) and adds some security features. SNMPv3 - Specifies that the SNMP version 3 will be used. SNMPv3 provides secure access to devices through a co mbination of authentication and encrypting packets over the network. Security Level The Security Level se[...]

DES-3550 Fast Ethernet Layer 2 Switch View Name Type an alphanumeric string of up to 32 charac ters that is used to identify the grou p of MIB objects that a remote SNMP manage r is allowed to access on the Switch. The view name must exist in the SNMP View Table. Access Right Read Only - Specifies that SNMP com munity members using the community st[...]

DES-3550 Fast Ethernet Layer 2 Switch V2 - To specify that SNMP version 2 will be used. V3-NoAuth-NoPriv - To specify that the SNMP version 3 will be used, with a NoAuth-NoPriv security level. V3-Auth-NoPriv - To specify that the SNMP versio n 3 will be used, with an Auth- NoPriv security level. V3-Auth-Priv - To specify that the SNMP versi on 3 wi[...]

DES-3550 Fast Ethernet Layer 2 Switch Section 8 Monitoring Port Utilization CPU Utilization Packets Errors Size MAC Address Switch History Log IGMP Snooping Group IGMP Snooping Forwarding VLAN Status Router Port Port Access Control Layer 3 Feature Port Utilization The Port Utilization page displays the pe rcentage of the total available b andwidth [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 1. Port Utilization window The following field can be set: Parameter Description Time Interval Select the desired setting between 1s and 60 s, where "s" stands for seconds. The default value is one second. Record Number Select number of times the Switch will be polled between 20 and 200. The[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 2. CPU Utilization graph Click Apply to implement the configured settings. The window will automatically refresh with new updated statistics The inform ation is described as f ollows: Parameter Description Time Interval [1s ] Select the desired setting between 1 s and 60s, where "s" stands f[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 3. Rx Packets Analy sis w indow (line graph for By tes and Packets) To view the Received Packets Table , click the link View Table , which will show the fo llowing table: 145[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 4. Rx Packets Analy sis w i ndow (table for Bytes and Packets) The followin g fields may be set or viewed: Parameter Description Time Interval [1s ] Select the desired setting between 1 s and 60s, where "s" stands for seconds. The default value is one second. Record Number [200] Select numbe[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 5. Rx Packets Analy sis w indow (line gr aph for Unicast, Multicas t, and Broadcast Packets) To view the UMB Ca st Table , click the View Table link, which will show the following table: 147[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 6. Rx Packets Analy sis w indow (table for Unicast, Multicast, and Broadcas t Packets) The followin g fields may be set or viewed: Parameter Description Time Interval [1s ] Select the desired setting between 1 s and 60s, where "s" stands for seconds. The default value is one second. Record N[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 7. Tx Packets Analy sis w indo w (line graph for Bytes and Packets) To view the Transmitted (TX) Table , click the link View Table , which will show the following table: 149[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 8. Tx Packets Analy sis w indo w (table for Bytes and Packets) The followin g fields may be set or viewed: Parameter Description Time Interval [1s ] Select the desired setting between 1 s and 60s, where "s" stands for seconds. The default value is one second. Record Number [200] Select numbe[...]

DES-3550 Fast Ethernet Layer 2 Switch Received (RX) Click the Received(RX) link in th e Error folder of the Monitoring men u to view the following graph of error packets received on the Switch. Figure 8- 9. Rx Error Analy s is window (line graph) To view the Received Error Packets Table , click the link View Table , which will show th e following t[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 10. Rx Error Analy s is window (table) The following fields can be set: Parameter Description Time Interval [1s ] Select the desired setting between 1 s and 60s, where "s" stands for seconds. The default value is one second. Record Number [200] Select number of times the Switch will be polle[...]

DES-3550 Fast Ethernet Layer 2 Switch View Table Clicking this button instructs the Switch to display a table rather than a line grap h. View Line Chart Clicking this button instructs the Switch to display a line graph rather than a table. Transmitted (TX) Click the Transmitted (TX) link in the Erro r folder of th e Monitoring menu to view the fo l[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 12. Tx Error Analy s is window (table) The followin g fields may be set or viewed: Parameter Description Time Interval [1s ] Select the desired setting betwe en 1s and 60s, where "s" stands for seconds. The default value is one second. Record Number [200] Select numb er of times the Switch w[...]

DES-3550 Fast Ethernet Layer 2 Switch Size The Web Manager allows packets received by the Switch, arra nge d in six groups and classed by size, to be viewed as either a line graph or a tabl e. Two windows are offered. Figure 8- 13. Rx Size Anal ysis window (line graph) To view the Packet Size Analysis Table , click the link View Table , wh ich will[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 14. Rx Size Analysis window (table) The followin g fields can be set or vie wed: Parameter Description Time Interval [1s ] Select the desired setting between 1s and 60s, wher e "s" stands for seconds. The default value is one second. Record Number [200] Select numb er of times the Switch wil[...]

DES-3550 Fast Ethernet Layer 2 Switch Show/Hide Check whether or n ot to display 64, 65-127, 128-255, 256-511, 512-1023, and 1024-1518 packets re ceived. Clear Clicking this button clears all statistics counters on this windo w . View Table Clicking this button instructs the Switch to display a table rather than a line grap h. View Line Chart Click[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 15. MAC Address Table The following fields can be viewed or set: Parameter Description VLAN ID Enter a VLAN ID for the forwarding table to be browsed by. MAC Address Enter a MAC address for the forw ardi ng table to be browsed by. Find Allows the user to move to a secto r of the database corresponding[...]

DES-3550 Fast Ethernet Layer 2 Switch MAC Address The MAC address entered into the address table. Port The port that the MAC address above corresponds to . Learned How the Switch discove red the MAC address. The possible entries are Dynamic, Self, and Static. Next Click this button to view the next page of the address table. View All Entry Clicking[...]

DES-3550 Fast Ethernet Layer 2 Switch table displays the last entry (highest sequen ce number) first. Time Displays the time in days, hours, and mi nutes since the Switch was last restarted. Log Text Displays text describing the event that triggered the history log entry. IGMP Snooping Group IGMP Snooping allows the Switch to read the Multicast Gr [...]

DES-3550 Fast Ethernet Layer 2 Switch NOTE: To configure IGMP sno oping for the DES-3550, go to the Configuration folder and select IGMP . Confi guration and other information concerning IGMP snooping may be found in Section 6 of this manual under IGMP . IGMP Snooping Forwarding This window will display the current IGMP snooping forward ing table e[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 19. VLAN Status w indow Router Port This display s which of the S witch's ports are curre n tly confi gured as router ports . A router port confi gured by a user (using the console or Web-based managem ent interfaces) is displayed as a static ro uter port, designated by S . A router port that is [...]

DES-3550 Fast Ethernet Layer 2 Switch Port Access Control The following windows are used to monitor 80 2.1x statistics of the Switch, on a per port basis. To view the P ort Access Control screens, ope n the monito ring folder and click the Port Access Control folder. There are six windows to monitor. Authenticator State The following sect ion descr[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 8- 22. Authenticator State w indow – MAC-Based 802.1x This window displays the Authenticator State for indi vidual ports on a selected device. To select unit within the switch stack, use the pull-down menu at the top of the window and click Apply . A polling interval between 1 and 60 seconds can be set[...]

DES-3550 Fast Ethernet Layer 2 Switch Backend State The Backend Authentication State can be Request, Response, Success, Fail, Timeout, Idle, Initialize, or N/A . N/A (Not Available) indicates that the port's authenticator capability is disabl ed. Port Status Controlled Port Status can be Authorized, Unauthorized, or N/A . Layer 3 Feature Brows[...]

DES-3550 Fast Ethernet Layer 2 Switch Section 9 Maintenance TFTP Services Switch History Ping Test Save Changes Reboot Services Logout TFTP Services TFTP Services Trivial File Transfer Protocol (TFTP) services allow the Switch's firmware to be upgrad ed by transferring a new firmware file from a TFTP server to the Switch. A confi g uration fil[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 9- 1. Download/Update Firmware from TFTP Server and Firm w are Management windo w The Switch can hold two firmware versions fo r the user, which can be specified in the Type field by cli cking the Update radio butto n and selecting the Ima ge 1 or Image 2 . To downlo ad or update fir mware, configure th [...]

DES-3550 Fast Ethernet Layer 2 Switch From The IP address of the Server from which the firmware came. User The name of the user who download ed the firmware. Set Boot Click the Apply button in this field to set t he firmware version to be used upo n the next boot up of the Switch. Delete Click the in this column to permanently delete the correspond[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 9- 4. Upload Log to TFTP Server w indow Enter the IP a ddress of the TFTP serve r and the path and filenam e for the history log on the TFTP server. Click Start to record the IP address of the TFTP server and to initiate the file transfer. Ping Test Ping is a sm all program that sends ICMP Ec ho packets [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 9- 6. Save Changes Screen Click the Save Configuration button to save the curren t switch configuration in NV-RAM. The following d ialog box will confirm that t he configuration has been sa ved: Figure 9- 7. Save Configuration Confirmation Click the OK button to c ontinue. Once the Switch configuratio n [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 9- 9. Reset Sy stem w indo w Reset Config The Reset Config option will reset all of the Switch's configuration p arameters to their factory defaults, without saving these default values to the Switch's non-vo latile RAM. If the Switch is reset with this option enabled, and Save Chan ges is not [...]

DES-3550 Fast Ethernet Layer 2 Switch 172[...]

DES-3550 Fast Ethernet Layer 2 Switch Section 10 D-Link Single IP Management Single IP Management (SIM) Overview Topology Firmware Upgrade Configuration Backup/Restore Single IP Management (SIM) Overview Simply put, D-Link Single IP Management is a con cept that will stack switches together over Ethernet instead of using stacking port s or modules.[...]

DES-3550 Fast Ethernet Layer 2 Switch It is not a CS or MS of an other IP group. • • • • • • • • • • • It is connecte d to the CS throug h the CS management VLAN. 3. Candidate Sw itch(CaS) - This is a switch that is ready to join a SI M group but is not yet a member of the SI M group. The Cand idate Switch may join th e SIM gr[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 2. SIM Settings window (enabled) The following parameters can be set: Parameters Description SIM State Use the pull down menu to either en able or disable the SIM state on the Switch. Dis- abled will render all SIM functions on the Switch inoperable. Role State Use the pull down menu to change the S [...]

DES-3550 Fast Ethernet Layer 2 Switch Clicking t he here link w ill setup the Java Runtime Environ ment on your server and lead you to the topology window, as seen below. Figure 10- 4. Single IP Management windo w -Tree View The Tree View window holds the following information under th e Data tab: Parameter Description Device Name This field will d[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 5. Topology vie w This screen will display how the d evices within the Single IP Management Group are connected to other groups and devices. Possible icons in t h is screen are as follows: Icon Description Icon Description Group Layer 2 commander switch Layer 3 commander switch Commander swit ch of o[...]

DES-3550 Fast Ethernet Layer 2 Switch Icon Description Member switch of other group Layer 2 candidate switch Layer 3 candidate switch Unknown device Non-SIM devic es Tool Tips In the Topol ogy view window, t he mouse plays a n important role i n configuration and in viewing device information. Setting the mouse cursor over a sp ecific device in the[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 6. Device Inform ation Utilizing the Tool Tip Setting the mouse cursor over a line b etween two devices will display the connection sp eed between the two devices, as shown below. 179[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 7. Port Speed Utilizing the Tool Tip Right Click Right clicki ng on a device will allow the use r to perform various functi ons, depending on the role o f the Switch in the SIM group and the icon associated with it. Group Icon Figure 10- 8. Right Clicking a Group Icon The following option s may appea[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 9. Property w indow Commander Switch Icon Figure 10- 10. Right Clicking a Comm ander Icon The following option s may appear for the user to configure : Collapse - to collapse the group that will be represented by a single icon. • • • Expand - to expand the SIM group, in detail. Property - to po[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 11. Property windo w Member Switch Icon Figure 10- 12. Right Clicking a Member icon The following option s may appear for the user to configure : Collapse - to collapse the group that will be represented by a single icon. • • • • • Expand - to expand the SIM group, in detail. Remove from gr[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 13. Property windo w Candidate Switch Icon Figure 10- 14. Right Clicking a Candidate icon The following option s may appear for the user to configure : Collapse - to collapse the group that will be represented by a single icon. • • • Expand - to expand the SIM group, in detail. Add to gr oup - [...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 16. Device Property w indo w . This window holds the following information: Parameter Description Device Name This field will display the Device Name of the switches in the SI M group configured by the user. If no Device Name is configured by the name, it will be given the name default and tagged wit[...]

DES-3550 Fast Ethernet Layer 2 Switch Group Add to gr oup - add a candidate to a grou p. Clicking this option will reveal the following screen for the u ser to enter a password for authenti cation fr om the Candidate Switch before being added to the SIM group. Click OK to enter the password or Can cel to exit the window. • Figure 10- 18. Input pa[...]

DES-3550 Fast Ethernet Layer 2 Switch Figure 10- 19. Firmware Upgrade w indow Configuration File Backup/Restore This screen is used to u pgrade configuration files from the Comman der Switch to the Me mb er Switch. Member Switches will be listed in the tab le and will be specified by Port (port on the CS wh ere the MS resides), MAC Address , Model [...]

DES-3550 Fast Ethernet Layer 2 Switch Appendix A General Standards IEEE 802.3u 100BASE-TX Fast Ethernet IEEE 802.3ab 1000BASE-T Gigabit Ethernet IEEE 802.1D Spanning Tree IEEE 802.1W Rapid Spanning Tree IEEE 802.1 P/Q VLAN IEEE 802.1p Priority Queues IEEE 802.3ad Link Aggregation Control IEEE 802.3x Full-duplex Flow Control IEEE 802.3 Nway auto-neg[...]

DES-3550 Fast Ethernet Layer 2 Switch 1000BASE-ZX Mini-GBIC Single-mode fiber module (80km) SFP Transceiver for 1000BASE-LXSi ngle-mode fiber module (10km) Number of Ports 48 10/100/1000 Mbps ports 2 1000BASE-T Mini-GBIC Combo Ports Performance Transmission Method Store-and-forward PACKET BUFFER 16 MB per device Packet Filtering/Forwarding Rate Ful[...]

DES-3550 Fast Ethernet Layer 2 Switch Appendix B Cables and Connectors When connecting t he Switch to another swit ch, a bridge or hub, a normal cable is necessary. Please re view these products for mat ching cable pin assign ment. The followin g diagrams and tables s h ow the standard RJ-45 receptacle/co nnector and their pin assignmen ts. Appendi[...]

DES-3550 Fast Ethernet Layer 2 Switch Appendix C Cable Lengths Use the following table to as a guide for t he maximum cable lengths. Standard Media Type Maximum Distance Mini-GBIC 1000BASE-LX, Single-mode fiber module 1000BASE-SX, Multi-mode fiber module 1000BASE-LHX, Single-mode fiber module 1000BASE-ZX, Single-mode fiber module 10km 550m 40km 80k[...]

DES-3550 Fast Ethernet Layer 2 Switch Glossary 1000BASE-LX: A short laser w avelength on m ultimode fiber optic cabl e for a maximum length of 550 me ters 1000BASE-SX: A long wave length for a "long ha ul" fiber optic cable for a maximum l ength of 10 kilom eters 100BASE -FX : 100Mbps Et hernet implem entation over fiber. 100BASE -TX: 100[...]

DES-3550 Fast Ethernet Layer 2 Switch IP address: Internet P rotocol address. A u n ique ide n tifier f or a device attached to a net work using TCP/IP. The a ddress is written as four octets separated with full- stops (periods), and is made up of a ne twork section , an optional subnet section and a host section. IPX: Internetwork Packet Exchange [...]

DES-3550 Fast Ethernet Layer 2 Switch UDP - User D atagram Protocol: A n Inter net standard protocol that al lows an application p rogram on one device t o send a datagram t o an application program on another device. VLAN - Virtual LAN: A gro up of location- and topol ogy-independent de vices that communicate as i f they are on a common physi cal [...]

DES-3550 Fast Ethernet Layer 2 Switch Offices Australia D-Link Au stralasia 1 Giffnock Avenue, North Ryde, NSW 2 113, Sydney, Australia TEL: 61-2-8899-1800 FAX: 61 -2-8899-1868 URL: www.dlink.com.au Belgium D-Link Belgium Rue des Colonie s 11, B-1000 Brus sels, Belgium TEL: 32 (0)2 517 7 111 FAX: 32 (0)2 5 17 6500 URL: www.dlink-benelux.com Brazil [...]

DES-3550 Fast Ethernet Layer 2 Switch Finland D-Link Finland Pakkalankuj a 7A, 3 rd floor, 01510 V antaa, Finland TEL: 358-9- 2707-5080 F AX: 358-9- 2707-50 81 URL: www.dlink.fi France D-Link France Le Florile ge, No. 2, Allée de la Fresne rie, 78330 Fon tenay le Fle ury, France TEL: 33-1- 3023-8688 FAX: 33-1-3023-8 689 URL: www.dlink-france.fr Ge[...]

DES-3550 Fast Ethernet Layer 2 Switch URL: www.dlink.ru Singapore D- Link Internat ional 1 Intern ational Busine ss Park, #03-12 The Synergy, S ingapore 6099 17 TEL: 65-677 4-6233 FAX: 65-6774-6322 URL: www.dlink-intl.com South Africa D-Link South Africa Einstein Par k II, Block B, 10 2-106 Witch- Hazel Ave nue Highveld Te chnopark, Centurion, Gaut[...]

DES-3550 Fast Ethernet Layer 2 Switch U.S.A. D-Link Systems, Inc. 17595 Mt. He rrmann, Fount ain Valley, CA 92708, USA TEL: 1-714 -885-6000 FAX: 1-866-743-4 905 URL: www.dlink.com 197[...]

DES-3550 Fast Ethernet Layer 2 Switch Warranty and Registration Information (All countries and regions excluding USA) Wichtige Sicherheitshinweise 1. Bi tte les en Sie si ch dies e Hinwei se sorg fältig durch. 2. Heben Sie diese Anleitung für den spätern Geb rauch auf. 3. Vor je dem Rei nigen i st das G erät vom Stromn etz zu t rennen . Verven [...]

DES-3550 Fast Ethernet Layer 2 Switch Limited Warranty Hardware: D-Link warrants each of its ha rdware products to be free from defects in workmanship a nd materials under normal use and service for a pe riod commencing on the date of purchas e from D-Lin k or its Authorized Res eller and extending for th e length of time stipul ated by th e Auth o[...]

DES-3550 Fast Ethernet Layer 2 Switch Subject to the terms and conditions set forth herein, D-Link Systems, Inc. (“D-Link”) provides this Limited warranty for its pr oduct only to the person or entity that originally purchased the product from: • D-Link or its authorized reseller or distributor and • Products purchased and delivered within [...]

DES-3550 Fast Ethernet Layer 2 Switch D-Link. The repaired or replac ed packages will be shipped to the customer via UPS Ground or any common carrier selected b y D- Link, with shipping charges prep aid. Expedited shipping is available if shippi ng charges are prepaid by the customer and upon r equest. D-Link may reject or return any product that i[...]

DES-3550 Fast Ethernet Layer 2 Switch For detailed warranty outside the United States, please contact corresponding local D-Link office. Register online your D-Link product at http://support.dlink.com/register/ 202[...]

DES-3550 Fast Ethernet Layer 2 Switch Registration Card Print, type or use block letters. Your name: Mr./M s ______________ ____________________ _______________________ ____________________ Organization: __ _____________________ ____________________ _____ Dept. ________________ ____________ Your title at or ganization: ______ _____________________ [...]

DES-3550 Fast Ethernet Layer 2 Switch 204[...]